Cisco ASA 5506-X Bedienungsanleitung

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware

Installation Guide

First Published: 2015-04-07

Last Modified: 2021-03-11

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: Online Only

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Overview 1

CHAPTER 1

About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X 1

Package Contents 3

Front Panel 4

Rear Panel 4

LEDs 7

Network Ports 9

Console Ports 10

Internal and External Flash Storage 11

Solid State Drive 11

Power Supply Modules 11

Hardware Specifications 11

Power Cord Specifications 13

Installation Preparation 21

CHAPTER 2

Installation Warnings 21

Position the ASA 22

Mount and Deployment Preparation for the ASA 5506W-X 23

Safety Recommendations 23

Maintain Safety with Electricity 23

Prevent ESD Damage 24

Site Environment 24

Site Considerations 25

Power Supply Considerations 25

Rack Configuration Considerations 25

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

iiiOnline Only

Mount the Chassis 27

CHAPTER 3

Desktop-Mount the Chassis 27

Wall-Mount the Chassis 28

Rack-Mount the Chassis 29

Install the ASA 5506H-X in a DIN Rail 30

Connect to the Console Port 33

CHAPTER 4

Connect to the Console Port with Microsoft Windows 33

Connect to the Console Port with Mac OS X 36

Connect to the Console Port with Linux 36

Installation, Maintenance, and Upgrade 39

CHAPTER 5

Connect the DC Adapter for the 5506H-X 39

Install the Adjustable Power Supply Retainer 40

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

Online Onlyiv

Contents

CHAPTER 1

Overview

•About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X, on page 1

•Package Contents, on page 3

•Front Panel, on page 4

•Rear Panel, on page 4

•LEDs, on page 7

•Network Ports, on page 9

•Console Ports, on page 10

•Internal and External Flash Storage, on page 11

•Solid State Drive, on page 11

•Power Supply Modules, on page 11

•Hardware Specifications, on page 11

•Power Cord Specifications, on page 13

About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X

The Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X adaptive security appliances are part of the ASA

5500-X of next-generation mid-range ASAs and are built on the same security platform as the rest of the ASA

family.

Your ASA 5506-X ships with either ASA or Firepower Threat Defense software preinstalled. To reimage

your device, see Reimage the Cisco ASA or Firepower Threat Defense Device.

Note

This next-generation ASA delivers unprecedented levels of defense against threats to the network with deeper

web inspection and flow-specific analysis, improved secure connectivity via end-point security posture

validation, and voice and video over VPN support. It also provides enhanced support for intelligent information

networks through improved network integration, resiliency, and scalability.

This ASA is a smaller form-factor chassis, intended primarily for desktop or wall-mounting, although one or

two can be mounted in a single rack shelf. The ASA has a standard 1 RU chassis. See Cisco ASA 5500-X

Series Next-Generation Firewalls to compare the performance metrics and capabilities of the 5500-X ASAs.

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

1Online Only

Do not stack the ASA chassis on top of another ASA chassis. If you stack the units, they will overheat, which

causes the units to power cycle.

Note

The ASA 5506-X, 5506W-X, and ASA 5506H-X have been validated for the following security standards

certifications:

• Federal Information Processing Standards (FIPS) 140-2 for ASA 9.12.x

•Common Criteria (CC) certification for the Network Device Collaborative Protection Profile, (NDcPPv2.1),

VPN Gateway Module (VPNGW_MOD_v1.0), and Firewall Module (FW_MOD_v1.3) for ASA 9.12.x

ASA 5506W-X Wireless Features

The ASA 5506W-X supports two high-performing spatial stream rates over a deployable distance with

high reliability when serving clients. The ASA 5506W-X contains two simultaneous dual-band radios

(2.4-GHz and 5-GHz 802.11n MIMO radios) in a controller-based mode or autonomous mode. It has

integrated internal antennas that support full inter-operability with leading 802.11n clients. The radio

hardware supports Unified, FlexConnect, and Monitor-mode.

The ASA 5506W-X has the following processor features:

• 128 MB NAND flash size

• 1 MB NOR flash size

• 128 MB DDR2 memory bus, x32

The 2.4 GHz and 5 GHz 802.11n radios have the following features:

• 802.11n standard compliant

• A-MPDU TX

• HT Duplicate Mode

• 2TX x 2RX

• 2-spatial streams, 300 Mbps PHY rate

• Maximal ratio combining (MRC)

• Cyclic Shift Diversity (CSD)

• MCS0-MCS15; Short or Long Guard Intervals

• DFS for UNII-2 and UNII-2 Extended channels, including 0.5us radar pulse detection

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

Online Only2

Overview

About the ASA 5506-X, ASA 5506W-X, and ASA 5506H-X

The ASA 5506W-X is configured with four single-band, inverted-F antennas (two 2.4-GHz and two

5-GHz), which are evenly spaced inside the top of the chassis. Peak gains are approximately 3 dBi in

the 2.4-GHz band and 5 dBi in the 5-GHz band.

ASA 5506H-X Features

The ASA 5506H-X is a hardened version of the 5506-X with a ruggedized chassis, power supply, SSD,

and four ports instead of eight. It is ruggedized because it supports a much wider industrial operational

temperature range (-20C to 60C), meets the harsh EMI and environmental criteria for the IEC1613 and

IEC 61850-3 power substation standards, and meets IEC60529 IP40 for ingress protection.

The ASA 5506H-X ships with a ruggedized 5V-5.3V barrel power supply that provides 22 W. Or you

can order an optional DC power supply that supplies 24V DC (part number PWR2-20W-24VDC) or

20W 20-60V DC (part number PWR2-22W-20-60VDC).

Before beginning any of the procedures described in this book, be sure to read the Regulatory and Compliance

Safety Information for the Cisco ASA 5506-X series and follow proper safety procedures.

Note

Package Contents

The following figure shows the package contents for the ASA 5506-X and ASA 5506W-X. Note that the

contents are subject to change and your exact contents might contain additional or fewer items.

Figure 1: ASA 5506-X and 5506W-X Package Contents

USB console cable (Type A to Type B)2Chassis1

Brick power supply4Power cord3

The following figure shows the package contents for the ASA 5506H-X. Note that the contents are subject

to change and your exact contents might contain additional or fewer items.

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

3Online Only

Overview

Package Contents

Figure 2: ASA 5506H-X Package Contents

USB console cable (Type A to Type B)2Chassis1

Power cord4Power cord retention lock3

Power supply5

Front Panel

The following figure shows the front panel of the ASA 5506-X. The ASA 5506W-X has an identical front

panel. Note that there are no connectors or LEDs on the front panel.

Figure 3: 5506-X and 5506W-X Front Panel

The following figure shows the front panel of the ASA 5506H-X. Note that there are no connectors or LEDs

on the front panel.

Figure 4: 5506H-X Front Panel

Rear Panel

The following figure shows the rear panel of the ASA 5506-X. The 5506W-X has an identical rear panel.

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

Online Only4

Overview

Front Panel

Figure 5: ASA 55-6-X and 5506W-X Rear Panel

Power cord socket

The chassis power-supply socket. See Power

Supply Modules, on page 11 for more

information about the chassis power supply.

The ASA is powered on when you

plug in the AC power supply.

Note

2Status LEDs

The locations and meanings of the status LEDs

are described in LEDs, on page 7.

Management port

A Gigabit Ethernet interface restricted to network

management access only. Connect with an RJ-45

cable.

4Network data ports

Eight Gigabit Ethernet RJ-45 (8P8C) network I/O

interfaces. The ports are numbered (from left to

right) 1, 2, 3, 4, 5, 6, 7, 8. Each port includes a

pair of LEDs, one each for connection status and

link status. The ports are named and numbered

Gigabit Ethernet 1/1 through Gigabit Ethernet

1/8. See Network Ports, on page 9 for additional

information.

USB port

A standard USB Type A port is provided that

allows the attachment of an external device, such

as mass storage. See Internal and External Flash

Storage, on page 11 for additional information.

6Console ports

Two serial ports, a mini USB Type B, and a

standard RJ-45 (8P8C), are provided for

management access via an external system. See

Console Ports, on page 10 for additional

information.

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

5Online Only

Overview

Rear Panel

Lock slot

The slot accepts a standard Kensington T-bar

locking mechanism for securing the ASA.

8Reset button

A small recessed button that if pressed for longer

than three seconds resets the ASA to its default

“as-shipped” state following the next reboot.

Configuration variables are reset to factory

default. However, the flash is not erased and no

files are removed.

You can use the service

sw-reset-button command to disable

the reset button. The default is enabled.

Note

Pressing the reset button on the ASA

5506W-X does not affect the AP

configuration, but it causes any

unsaved AP configuration to be lost,

because the system has rebooted. After

the system reboots, if you want a

default AP configuration, use the

hw-module module wlan recover

configuration command to recover

the AP configuration.

Note

The following figure shows the rear panel of the 5506H-X.

Figure 6: ASA 5506H-X Rear Panel

Status LEDs

The locations and meanings of the status LEDs

are described in LEDs, on page 7.

2Power cord socket.

The chassis power-supply socket. See Power

Supply Modules, on page 11 for more

information about the chassis power supply.

The ASA is powered on when you

plug in the AC power supply.

Note

Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

Online Only6

Overview

Rear Panel

Andere Handbücher für ASA 5506-X

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Cisco Firewall Handbücher

Cisco

Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Bedienungsanleitung

Cisco

Cisco Firepower 4100 Series Bedienungsanleitung

Cisco

Cisco 3100 Series Handbuch

Cisco

Cisco RV120W Bedienungsanleitung

Cisco

Cisco IronPort M1070 Bedienungsanleitung

Cisco

Cisco ASA 5506-X Kurzanleitung

Cisco

Cisco Small Business RV215W Bedienungsanleitung

Cisco

Cisco MEREAKI MX65W Bedienungsanleitung

Cisco

Cisco ASA 5506-X Bedienungsanleitung

Cisco

Cisco ASA 5580 Bedienungsanleitung

Cisco

Cisco Firepower 1100 Bedienungsanleitung

Cisco

Cisco 515E - PIX Restricted Bundle Bedienungsanleitung

Cisco

Cisco 3110 Handbuch

Cisco

Cisco Small Business RV220W Bedienungsanleitung

Cisco

Cisco FPR1010-ASA-K9 Bedienungsanleitung

Cisco

Cisco Firepower 1100 Series Handbuch

Cisco

Cisco Firepower 4100 Series Handbuch

Cisco

Cisco ASA 5506-X Bedienungsanleitung

Cisco

Cisco IronPort C370 Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Cisco

Cisco RV110W Bedienungsanleitung

Cisco

Cisco ISA 3000 Bedienungsanleitung

Cisco

Cisco 881W - Integrated Services Router Wireless Bedienungsanleitung

Beliebte Firewall Handbücher anderer Marken

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung

GTA

GTA GB-200 Bedienungsanleitung

Trend Micro

Trend Micro Deep Edge Bedienungsanleitung