Cisco ASA 5585-X User manual

Cisco Systems, Inc. www.cisco.com
1
Cisco ASA 5585-X Quick Start Guide
Last Updated: April 1, 2015
1. Package Contents
This section lists the package contents of each chassis. Note that contents are subject to change, and your exact
contents might contain additional or fewer items.
Note: The ASA 5585-X with SSP-10, SSP-20, or SSP-40 ships with one power supply module installed and one
power cable. The ASA 5585-X with SSP-60, ships with two power supply modules installed and two power
cables.
2. Power On the ASA
1. Attach the power cable to the back of the ASA. If you have redundant power supplies, you must connect both
power cables to the back of the chassis.
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP01
0
1
2
3
45
6
7MGMT
0
1
AUX CONSOLE
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP01
012
3
45
6
7MGMT
0
1
AUX CONSOLE
1
6
3
2
5
4
7
300015
1ASA 5585-X Chassis 2Power Cable (US Shown)
3Blue Console Cable PC Terminal Adapter 4Cable Management Brackets
54 Cable Management Bracket Screws 6Ground Lug Kit
7Slide Rail Kit

Cisco ASA 5585-X Quick Start Guide
3. Network Considerations for Multiple SSPs
2
2. Connect the power cables to the electrical outlets.
3. Power on the ASA. If you have redundant power supplies, you must power on both modules.
4. Check the Power LED on the front of the ASA; the AC ON indicator should be green, the FAN ON indicator
should be green, and the OUT OK indicator should be off.
3. Network Considerations for Multiple SSPs
The ASA SSP resides in slot 0 (bottom). A second SSP (or network module) can be installed in slot 1 (top). When
you install a non-ASA SSP in slot 1, all non-management interfaces belong to the ASA in slot 0, while the
management interfaces belong to the module. If you install dual ASA SSPs, then they are completely independent
systems.
Default Configuration for Management
See the following table for default configurations for the Management interfaces depending on which module is
installed in slot 1. Note that the left-hand Management interface (when facing the back of the chassis) is not
configured by default.
1Power Supply Module (PS0) 2Power Supply Module (PS1)
249822
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAIL
Cisco ASA 1200W AC
100-240V
15.0/8.0.A
56/60Hz
IN
OK
FAN
OK
OUT
FAIL
1 2
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE
ASA Management 0/0
Default IP: 192.168.1.1
Module Management 1/0
Default IP: Varies

Cisco ASA 5585-X Quick Start Guide
4. Connect Interface Cables and Verify Connectivity
3
All management traffic to and from the non-ASA SSP must enter and exit the Management 1/0 or 1/1 interface.
Because this interface is not an ASA data interface, traffic cannot pass through the ASA over the backplane; you
need to physically cable the management interface to an ASA interface. Non-ASA SSPs usually need Internet
access for updates. See the following typical cabling setup to allow SSP access to the Internet through the ASA
management interface. Other options are possible, depending on how you want to connect your network; for
example, you can make the Management 1/0 interface outside facing; or you can route between it and a different
ASA interface if you have an inside router; and so on.
4. Connect Interface Cables and Verify Connectivity
1. Cable the management and data interfaces. See 3. Network Considerations for Multiple SSPs, page 2 for a
sample cabling scenario.
Slot 0 Module Management
Interface ID
Default IP
address
Slot 1 Module Management
Interface ID
Default IP
address
ASA SSP
The ASA SSP is
the only
supported
module in slot 0.
Management 0/0 192.168.1.1 ASA SSP Management 0/0 192.168.1.1
If you want to put
both ASA SSPs
on the same
network, you
must change
from this default.
All other SSPs Management 1/0 Varies. See the
module quick start
guide for exact
values.
ASA Management 0/0
Module Management 1/0
Set IP to be on same network as M0/0
Management PC
Layer 2
Switch
ASA
management outside
Module
Internet
Module Gateway
to Internet

Cisco ASA 5585-X Quick Start Guide
5. Launch ASDM
4
2. If you do not use the Management 0/0 for ASA management, you need to configure a data interface for
management. Do one of the following, then recable the computer so it is on the new management network:
—Connect to the console port to configure a data interface for management with CLI. See the Getting Started
chapter in the general operations configuration guide for detailed steps.
—Temporarily connect to Management 0/0, launch ASDM (see 5. Launch ASDM, page 4), and configure a
data interface for management.
3. If you are using the fiber interfaces, you need an SFP+ module for 10-Gigabit Ethernet (a license may be
required) or an SFP module for Gigabit Ethernet. (SFP or SFP+ modules are not included.)
The interfaces available depend on your model. See the hardware guide for more information.
4. Check the LINK/ACT indicators to verify interface connectivity.
5. For software module configuration, see the ASA FirePOWER quick start guide,ASA CX quick start guide, or
IPS quick start guide.
5. Launch ASDM
Using ASDM, you can use wizards to configure basic and advanced features. See the ASDM release notes on
Cisco.com for the requirements to run ASDM.
Procedure
1. On the computer connected to the ASA Management 0/0 interface, launch a web browser.
2. In the Address field, enter the following URL: https://192.168.1.1/admin. The Cisco ASDM web page
appears.
3. Click one of the available options: Install ASDM Launcher, Run ASDM, or Run Startup Wizard.
4. Follow the onscreen instructions to launch ASDM according to the option you chose. The Cisco ASDM-IDM
Launcher appears.
Note: If you choose to click Install ASDM Launcher, in some cases you need to install an identity certificate
for the ASA and a separate certificate for the ASA FirePOWER module according to Install an Identity
Certificate for ASDM.
1(Optional) Slot 1 module, multiple types available. 2Slot 0 ASA SSP
3ASA SSP Management 0/0 interface (RJ-45)
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE
PWR
BOOT
ALARM
ACT
VPN
PS1
HDD1
PS0
HDD0
USB
RESET
0
SFP1 SFP0 101234567 MGMT
0
1
AUX CONSOLE
Secure Network
Management PC
Unsecure Network
1
2
3
300016

Cisco ASA 5585-X Quick Start Guide
6. Run ASDM Wizards and Advanced Configuration
5
5. Leave the username and password fields empty, and click OK. The main ASDM window appears.
6. Run ASDM Wizards and Advanced Configuration
ASDM includes many wizards to configure your security policy. See the Wizards menu for all available wizards,
including the Startup Wizard for initial deployment. To continue configuring your ASA, see the documents
available for your software version at Navigating the Cisco ASA Series Documentation.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To
view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property
of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other
company. (1110R)
© 2016 Cisco Systems, Inc. All rights reserved.

Cisco ASA 5585-X Quick Start Guide
6. Run ASDM Wizards and Advanced Configuration
6