About the ASA 5508-X and 5516-X

Overview
This chapter describes the hardware features of the Cisco ASA 5508-X and 5516-X, and contains the following
sections:
• About the ASA 5508-X and 5516-X, page 1
• Package Contents, page 2
• Front Panel, page 3
• Rear Panel, page 3
• LEDs, page 4
• Network Ports, page 6
• Console Ports, page 6
• Internal and External Flash Storage, page 6
• Solid State Drive, page 7
• Power Supply Modules, page 7
• Hardware Specifications, page 7
• Power Cord Specifications, page 8
About the ASA 5508-X and 5516-X
The Cisco ASA 5508-X and the ASA 5516-X adaptive security appliances are part of the ASA 5500-X of
next-generation mid-range ASAs, and are built on the same security platform as the rest of the ASA family.
Note
Your ASA 5508-X and ASA 5516-X ship with either ASA or Firepower Threat Defense software
preinstalled. To reimage your device, see Reimage the Cisco ASA or Firepower Threat Defense Device.
This next-generation ASA delivers unprecedented levels of defense against threats to the network with deeper
web inspection and flow-specific analysis, improved secure connectivity via end-point security posture
validation, and voice and video over VPN support. It also provides enhanced support for intelligent information
networks through improved network integration, resiliency, and scalability.
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
Online Only
1
Overview
Package Contents
The ASA 5508-X and the ASA 5516-X are a standard 1 RU chassis. To compare the performance metrics
and capabilities of the 5500-X ASAs, see Cisco ASA 5500-X Series Next-Generation Firewalls.
Note
Before beginning any of the procedures described in this book, be sure to read the Regulatory Compliance
and Safety Information for the Cisco ASA 5500-X Series appliances and follow proper safety procedures.
Package Contents
The following figure shows the package contents for the ASA 5508-X and ASA 5516-X. Note that the contents
are subject to change, and your exact contents might contain additional or fewer items.
Figure 1: Package Contents
1
Chassis
2
USB console cable (Type A to Type B)
3
Power cord
4
Four 10-32" Phillips screws for rack
mounting
5
Four 12-14 Phillips screws for rack
mounting
6
4 M6 Phillip screws for rack mounting
7
4 M4 Phillips screws for rack mounting
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
2
Online Only
Overview
Front Panel
Front Panel
The following figure shows the front panel of the ASA 5508-X. The ASA 5516 has an identical front panel.
There are 4 LEDS on the front panel. See LEDs, on page 4 for the descriptions.
Figure 2: Front Panel
Rear Panel
The following figure shows the rear panel of the Cisco ASA 5508-X. The ASA 5516-X has an identical rear
panel.
Figure 3: Rear Panel
1
Power switch
2
Standard rocker-type power
on/off switch.
3
Status LEDs
The locations and meanings of
the status LEDs are described
in LEDs, on page 4.
Power cord socket
The chassis power-supply socket. See Power
Supply Modules, on page 7 for more information
about the ASA power supply.
4
Network data ports
Eight Gigabit Ethernet RJ-45 (8P8C) network I/O
interfaces. The ports are numbered (from left to
right) 1, 2, 3, 4, 5, 6, 7, 8. Each port includes a pair
of LEDs, one each for connection status and link
status. The ports are named and numbered Gigabit
Ethernet 1/1 through Gigabit Ethernet 1/8. See
Network Ports, on page 6 for additional
information.
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
Online Only
3
Overview
LEDs
5
Management port
6
A Gigabit Ethernet interface
restricted to network
management access only.
Connect with an RJ-45 cable.
7
USB port
Two serial ports, a mini USB Type B, and a
standard RJ-45 (8P8C), are provided for
management access via an external system. See
Console Ports, on page 6 for additional
information.
8
A standard USB Type A port
is provided, allowing
attachment of an external
device such as mass storage.
See Internal and External
Flash Storage, on page 6 for
additional information.
9
SSD LED
Console ports
Reset button
A small recessed button that if pressed for longer
than three seconds resets the ASA to its default
“as-shipped” state following the next reboot.
Configuration variables are reset to factory default.
However, the flash is not erased, and no files are
removed.
Note
10
Status light for installed
solid-state drive (SSD). See
LEDs, on page 4 and Solid
State Drive, on page 7 for
more information.
You can use the service sw-reset-button
to disable the reset button. The default is
enabled.
SSD bay
Covered slot in which the SSD is installed. You
can replace this drive if it fails. See Replace the
SSD for more information.
LEDs
The LEDs are located just off center on the front panel, and just to the left of the network ports on the rear
panel, with the SSD LED to the right of the Reset port.
LED
Description
Power
Power supply status:
• Unlit – Power supply off.
• Solid green – Power supply on.
See Power Supply Modules, on page 7 for additional power information.
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
4
Online Only
Overview
LEDs
LED
Description
Status
System operating status:
• Green – Normal system function.
• Amber – Critical alarm indicating one or more of the following:
• Major failure of a hardware or software component.
• Over-temperature condition.
• Power voltage outside the tolerance range.
Active
Status of the failover pair:
• Solid green – Failover pair operating normally.
• Unlit – Failover is not operational.
SSD
SSD LED behavior at first customer ship:
• Unlit – No SSD present.
• Green – SSD installed.
SSD LED behavior after June 2017:
• Unlit – No SSD present or no activity on the SSD.
• Green – Activity on the SSD.
Note
See Replace the SSD for information on replacing a failed
SSD.
Network Port Status
On the rear panel, a pair of LEDs (Link status and connection Status) for each of the eight Gigabit Ethernet
network ports, and the Gigabit Ethernet Management port.
Link status (L):
• Unlit – No link, or port is not in use.
• Solid green – Link established.
• Flashing green – Link activity.
Connection-speed status (S):
• One blink every three seconds – 10 Mbps.
• Two rapid blinks – 100 Mbps.
• Three rapid blinks – 1000 Mbps.
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
Online Only
5
Overview
Network Ports
Network Ports
Looking at the rear of the ASA, where the ports are located, port 1 is on the left, and port 8 is on the right,
next to the console and management ports. Each port is accompanied by a pair of LEDs, one each for link
status (L) and connection status (S). The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit
Ethernet 1/8. The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/4.
Console Ports
The ASA has two external console ports, a standard RJ-45 port and a Mini USB Type B serial port. Only one
console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port
becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45 port becomes
active. The console ports do not have any hardware flow control. You can use the command-line interface
(CLI) to configure your ASA through either serial console port by using a terminal server or a terminal
emulation program on a computer.
See Connect to a Console Terminal or PC for the procedure to install a console terminal.
RJ-45 Port
The RJ-45 (8P8C) port supports RS-232 signaling to an internal UART controller. The RJ-45 console
port does not support a remote dial-in modem. You can use a standard management cable (Cisco part
number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.
Mini USB Type B Port
The Mini USB Type B port lets you connect to a USB port on an external computer. For Linux and
Macintosh systems, no special driver is required. For Windows systems, you must download and install
a USB driver (available on software.cisco.com). You can plug and unplug the USB cable from the
console port without affecting Windows HyperTerminal operations. We recommend shielded USB
cables with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800,
9600, 19200, 38400, 57600, and 115200 bps.
Note
For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC
connected to the console port before using the USB console port. See Connect to the Console Port with
Microsoft Windows for information on installing the driver.
Internal and External Flash Storage
The ASA contains one internal USB flash drive, and a standard USB Type A port that you can use to attach
an external device. The USB port can provide output power of 5 volts, up to a maximum of 500 mA (5 USB
power units).
Internal USB Device
An embedded eUSB device is used as the internal flash; it is identified as disk0.
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
6
Online Only
Overview
Solid State Drive
External USB Drive (Optional)
You can use the external Type A USB port to attach a data-storage device. The external USB drive
identifier is disk1. When the ASA is powered on, a connected USB drive is mounted as disk1 and is
available for you to use. Additionally, the file-system commands that are available to disk0 are also
available to disk1, including copy, format, delete, mkdir, pwd, cd, and so on.
If you insert a USB drive with more than one partition, only the first partition is mounted.
FAT-32 File System
The ASA only supports FAT-32-formatted file systems for the internal eUSB and external USB drives.
If you insert an external USB drive that is not in FAT-32 format, the system mounting process fails,
and you receive an error message. You can enter the command format disk1: to format the partition
to FAT-32 and mount the partition to disk1 again; however, data might be lost.
Solid State Drive
The ASA 5508-X and 5516-X ship with an SSD installed that provides storage support. The SSD in the ASA
5508-X has 80 GB of useable space and is field-replaceable. The SSD in the ASA 5516-X has 1000 GB of
usable space and is also field replaceable. See Replace the SSD for information about replacing it.
Power Supply Modules
The ASA 5508-X and ASA 5516-X ship with an internal 100-240V AC power supply that provides 60 W.
Hardware Specifications
The following table contains hardware specifications for the ASA 5508-X and the ASA 5516-X.
Table 1: Hardware Specifications
Physical Specifications
Form factor
1 RU
Rack mountable
Yes. Side-mount “ear” brackets included. See Rack-mount the ASA for more
information.
Wall mountable
No.
Dimensions
17.2 x 11.288 x 1.72 in. (43.688 x 28.672 x 4.369 cm)
Weight
8 lb
Memory
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
Online Only
7
Overview
Power Cord Specifications
DRAM
Total: 8 GB
Allocated to FW/VPN: 4 GB
Allocated to Module: 4 GB
Internal Flash
8 GB
Power
60 W
Environment
Temperature
Operating: 0°C to 40°C (32°F to 104°F)
Nonoperating: -25°C to 70°C (-13°F to 158°F)
Relative humidity
Operating: 90%
Nonoperating: 10% to 90%
Maximum altitude
Operating: 3048 m (10,000 ft)
Nonoperating: 4572 m (15,000 ft)
Acoustic Noise
Typical: 41.6 dBA
Maximum: 67.2 dBA
Power Cord Specifications
Each power supply has a separate power cord. Standard power cords are available for connection to the security
appliance.
If you do not order the optional power cord with the system, you are responsible for selecting the appropriate
power cord for the product. Using a non-compatible power cord with this product may result in electrical
safety hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered
with the system.
Only the approved power cords provided with the security appliance are supported. The following table lists
the supported power cords.
Table 2: Supported Power Cords
Description
Amperage
Voltage
Plug
Connector
CAB-ACE
10A
250V
CEE 7 VII
IEC 60320/C13
AC power cord
(Europe)
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
8
Online Only
Overview
Power Cord Specifications
CAB-AC
10A
125V
NEMA 5-15P
IEC 60320/C13
10A
250V
A.S. 3112
IEC 60320/C13
10A
250V
CE123-16-VII IEC 60320/C13
10A
250V
IRAM 2073
IEC 60320/C13
10A
250V
SEV 1011
IEC 60320/C13
10A
250V
BS1363a/SS145 IEC 60320/C13
12A
125V
JIS C8303
IEC 60320/C13
AIR-PWR-CORD-SA 10A
250V
SABS 1661
IEC 60320/C13
10A
250V
GB2009.1-2008 IEC 60320/C13
10A
250V
IS 6538-1971
IEC 60320/C13
10A
250V
NBR 14136
IEC 60320/C13
CAB-AC-C13-KOR 10A
250V
KSC8305
IEC 60320/C13
AC power cord
(North America)
CAB-ACA
AC power cord
(Australia)
CAB-ACI
AC power cord
(Italy)
CAB-ACR
AC power cord
(Argentina)
CAB-ACS
AC power cord
(Switzerland)
CAB-ACU
AC power cord
(United Kingdom)
CAB-JPN-3PIN
Power cord 3PIN
(Japan)
AIR line cord
(South Africa)
CAB-ACC
Power cord (China)
CAB-IND-10A
Power cord (India)
CAB-C13-ACB
AC power cord
(Brazil)
AC power cord
(Korea)
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
Online Only
9
Overview
Power Cord Specifications
CAB-ACTW
10A
250V
CNS10917
IEC 60320/C13
AC power cord
(Taiwan)
The following illustrations show the cord, connector, and plug for each country listed in the table above.
Figure 4: CAB-ACE (Europe)
1
Plug: CEE 7 VII
3
Connector: IEC 60320/C13
2
Cord set rating: 10A, 250V
2
Cord set rating: 10A, 125V
Figure 5: CAB-AC (North America)
1
Plug: NEMA 5-15P
3
Connector: IEC 60320/C13
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
10
Online Only
Overview
Power Cord Specifications
Figure 6: CAB-ACA (Australia)
1
Plug: A.S. 3112
3
Connector: IEC 60320/C13
2
Cord set rating: 10A, 250V
2
Cord set rating: 10A, 250V
Figure 7: CAB-ACI (Italy)
1
Plug: CE123-16-VII
3
Connector: IEC 60320/C13
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
Online Only
11
Overview
Power Cord Specifications
Figure 8: CAB-ACR (Argentina)
1
Plug: IRAM 2073
3
Connector: IEC 60320/C13
2
Cord set rating: 10A, 250V
2
Cord set rating: 10A, 250V
Figure 9: CAB-ACS (Switzerland)
1
Plug: SEV 1011
3
Connector: IEC 60320/C13
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
12
Online Only
Overview
Power Cord Specifications
Figure 10: CAB-ACU (United Kingdom)
1
Plug: BS1363a/SS145
3
Connector: IEC 60320/C13
2
Cord set rating: 10A, 250V
2
Cord set rating: 12A, 125V
Figure 11: CAB-JPN-3PIN (Japan)
1
Plug: JIS C8303
3
Connector: IEC 60320/C13
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
Online Only
13
Overview
Power Cord Specifications
Figure 12: AIR-PWR-CORD-SA (South Africa)
1
Plug: SABS 1661
3
Connector: IEC 60320/C13
2
Cord set rating: 10A, 250V
2
Cord set rating: 10A, 250V
Figure 13: CAB-ACC (China)
1
Plug: GB2009.1-2008
3
Connector: IEC 60320/C13
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
14
Online Only
Overview
Power Cord Specifications
Figure 14: CAB-IND-10A (India)
1
Plug: IS 6538-1971
3
Connector: IEC 60320/C13
2
Cord set rating: 10A, 250V
2
Cord set rating: 10A, 250V
Figure 15: CAB-C13-ACB (Brazil)
1
Plug: NBR 14136
3
Connector: IEC 60320/C13
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
Online Only
15
Overview
Power Cord Specifications
Figure 16: CAB-AC-C13-KOR (Korea)
1
Plug: KSC8305
3
Connector: IEC 60320/C13
2
Cord set rating: 10A, 250V
2
Cord set rating: 10A, 250V
Figure 17: CAB-ACTW (Taiwan)
1
Plug: CNS10917
3
Connector: IEC 60320/C13
Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide
16
Online Only