Tài liệu Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide doc

0804R Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide ©2008 Cisco Systems, Inc.. Replacing the Chassis Cover 3-3 Accessing the Diagnostic Panel 3-4 Removing and Ins

Americas Headquarters

Cisco Systems, Inc

170 West Tasman Drive

Cisco ASA 5580 Adaptive Security

Appliance Hardware Maintenance Guide

Text Part Number: OL-12920-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant

to part 15 of the FCC rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required

to correct the interference at their own expense

The following information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy If it is not installed in accordance with Cisco’s installation instructions, it may cause interference with radio and television reception This equipment has been tested and found to comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules These specifications are designed to provide reasonable protection against such interference in a residential installation However, there is no guarantee that interference will not occur in a particular installation

Modifying the equipment without Cisco’s written authorization may result in the equipment no longer complying with FCC requirements for Class A or Class B digital devices In that event, your right to use the equipment may be limited by FCC regulations, and you may be required to correct any interference to radio or television communications at your own expense.

You can determine whether your equipment is causing interference by turning it off If the interference stops, it was probably caused by the Cisco equipment or one of its peripheral devices If the equipment causes interference to radio or television reception, try to correct the interference by using one or more of the following measures:

• Turn the television or radio antenna until the interference stops.

• Move the equipment to one side or the other of the television or radio.

• Move the equipment farther away from the television or radio.

• Plug the equipment into an outlet that is on a different circuit from the television or radio (That is, make certain the equipment and the television or radio are on circuits controlled by different circuit breakers or fuses.)

Modifications to this product not authorized by Cisco Systems, Inc could void the FCC approval and negate your authority to operate the product

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system All rights reserved Copyright © 1981, Regents of the University of California

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco StadiumVision, the Cisco logo, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn is a service mark; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone,

iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc and/or its affiliates in the United States and certain other countries

All other trademarks mentioned in this document or Website are the property of their respective owners The use of the word partner does not imply a partnership relationship between Cisco and any other company (0804R)

Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide

©2008 Cisco Systems, Inc All rights reserved.

C H A P T E R 1 Preparing for Installation 1-1

Overview 1-1

Installation Overview 1-1

Maintaining Safety with Electricity 1-2

General Site Requirements 1-3

Site Environment 1-4

Preventive Site Configuration 1-4

C H A P T E R 2 ASA 5580 2-1

Introduction 2-1

Supported Interface Cards 2-2

Ports and LEDs 2-3

Front Panel LEDs 2-3

Rear Panel LEDs and Ports 2-5

Internal Components 2-8

Diagnostic Panel 2-10

Specifications 2-10

C H A P T E R 3 Maintenance and Upgrade Procedures 3-1

Replacing the Chassis Cover 3-3

Accessing the Diagnostic Panel 3-4

Removing and Installing the Interface Cards 3-4

Removing the Interface Cards 3-5

Installing an Interface Cards 3-5

Installing the Power Supply 3-8

Removing and Installing Fans 3-10

Removing the Fan 3-11

Installing the Fan 3-12

Installing a Processor 3-15

A P P E N D I X A Cable Pinouts A-1

Console Port (RJ-45) A-2

RJ-45 to DB-9 A-3

Gigabit and Fibre Channel Ports A-4

I N D E X

About This Guide

This preface includes the following sections:

This guide includes the following chapters and appendices:

and general site requirements

maintenance and upgrade procedures

About This Guide

Installation Warnings

Be sure to read the Regulatory Compliance and Safety Information for the Cisco ASA 5580 document that

accompanied this device before installing the chassis This document contains important safety information This section includes the following warnings:

AC Power Disconnection Warning

Statement 246

Jewelry Removal Warning

necklaces, and watches) Metal objects will heat up when connected to power and ground and can cause serious burns or weld the metal object to the terminals Statement 43

About This Guide

Wrist Strap Warning

touch the backplane with your hand or any metal tool, or you could shock yourself Statement 94

Work During Lightning Activity Warning

Statement 1001

Installation Instructions Warning

Chassis Warning for Rack-Mounting and Servicing

precautions to ensure that the system remains stable The following guidelines are provided to ensure your safety: This unit should be mounted at the bottom of the rack if it is the only unit in the rack.When mounting this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom

of the rack.If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit

in the rack Statement 1006

Short-Circuit Protection Warning

installation Install only in accordance with national and local wiring regulations Statement 1045

SELV Circuit Warning

voltage (TNV) circuits LAN ports contain SELV circuits, and WAN ports contain TNV circuits Some LAN and WAN ports both use RJ-45 connectors Use caution when connecting cables Statement 1021

Ground Conductor Warning

absence of a suitably installed ground conductor Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available Statement 1024

About This Guide

Blank Faceplates and Cover Panels Warning

hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place Statement

1029

Product Disposal Warning

Statement 1040

Short-Circuit Protection Warning

installation Install only in accordance with national and local wiring regulations Statement 1045

Compliance with Local and National Electrical Codes Warning

TN Power Warning

Multiple Power Cord

disconnect the power cord of the power strip that the unit is plugged into Statement 137

Circuit Breaker (15A) Warning

Warning This product relies on the building’s installation for short-circuit (overcurrent) protection Ensure that

a fuse or circuit breaker no larger than 120 VAC, 15A U.S (240 VAC, 10A international) is used on the phase conductors (all current-carrying conductors) Statement 13

About This Guide

Grounded Equipment Warning

normal use Statement 39

Safety Cover Requirement

installed Operating the unit without the cover in place will invalidate the safety approvals and pose

a risk of fire and electrical hazards Statement 117

Faceplates and Cover Panel Requirement

hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place Statement

142

Where to Find Safety and Warning Information

For safety and warning information, see the Regulatory Compliance and Safety Information for the

Cisco ASA 5580 document that accompanied the product This document describes the international

agency compliance and safety information for the adaptive security appliance It also includes translations of the safety warnings

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional

information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and

revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed

and set content to be delivered directly to your desktop using a reader application The RSS feeds are a free service and Cisco currently supports RSS version 2.0

About This Guide

C H A P T E R 1

Preparing for Installation

The information in this guide applies to the Cisco ASA 5580 adaptive security appliance In this guide, references to “adaptive security appliance” and “ASA 5580 ” apply to the Cisco ASA 5580 adaptive security appliance

This chapter describes the steps to follow before installing new hardware or performing hardware upgrades, and includes the following sections:

Overview

The adaptive security appliance delivers unprecedented levels of defense against threats to the network with deeper web inspection and flow-specific analysis, improved secure connectivity via end-point security posture validation, and voice and video over VPN support It also provides enhanced support for intelligent information networks through improved network integration, resiliency, and scalability The adaptive security appliance software combines firewall, VPN concentrator, and intrusion prevention software functionality into one software image Previously, these functions were available in three separate devices, each with its own software and hardware Combining the functionality into just one software image provides significant improvements in the available features

Additionally, the adaptive security appliance software supports Adaptive Security Device Manager (ASDM) ASDM is a browser-based, Java applet used to configure and monitor the software on the adaptive security appliances ASDM is loaded from the adaptive security appliance, then used to configure, monitor, and manage the device

Installation Overview

To prepare for the installation of the chassis, perform the following steps:

Cisco ASA 5580 document

Chapter 1 Preparing for Installation Safety Recommendations

documentation, a product CD, a power cord (AC models only), two RJ-45 Ethernet cables, one RJ-45 to DB-9 console cable, a rack-mounting kit, and four self-adhesive feet (for desktop mounting)

Safety Recommendations

Use the following guidelines and the information in the following sections to help ensure your safety and protect the adaptive security appliance The list of guidelines may not address all potentially hazardous situations in your working environment, so be alert and exercise good judgement at all times

Note If you need to remove the chassis cover to install a hardware component, such as additional memory or

an interface card, doing so does not affect your Cisco warranty Upgrading the adaptive security appliance does not require any special tools and does not create any radio frequency leaks

The safety guidelines are as follows:

• Keep the chassis area clear and dust-free before, during and after installation

• Keep tools away from walk areas where you and others could fall over them

• Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains, that could get caught

in the chassis

• Wear safety glasses if you are working under any conditions that might be hazardous to your eyes

• Do not perform any action that creates a potential hazard to people or makes the equipment unsafe

• Never attempt to lift an object that is too heavy for one person to handle

This section includes the following topics:

Maintaining Safety with Electricity

Statement 246

Follow these guidelines when working on equipment powered by electricity:

• Before beginning procedures that require access to the interior of the chassis, locate the emergency power-off switch for the room in which you are working Then, if an electrical accident occurs, you can act quickly to turn off the power

• Do not work alone if potentially hazardous conditions exist anywhere in your work space

Chapter 1 Preparing for Installation

General Site Requirements

• If an electrical accident occurs, proceed as follows:

– Use caution; do not become a victim yourself

– Disconnect power from the system

– If possible, send another person to get medical aid Otherwise, assess the condition of the victim and then call for help

– Determine if the person needs rescue breathing or external cardiac compressions; then take appropriate action

• Use the adaptive security appliance chassis within its marked electrical ratings and product usage instructions

• Install the adaptive security appliance in compliance with local and national electrical codes as listed

in the Regulatory Compliance and Safety Information for the Cisco ASA 5580 document.

• The adaptive security appliance model equipped with AC-input power supplies are shipped with a 3-wire electrical cord with a grounding-type plug that fits only a grounding-type power outlet Do not circumvent this safety feature Equipment grounding should comply with local and national electrical codes

Preventing Electrostatic Discharge Damage

Electrostatic discharge (ESD) can damage equipment and impair electrical circuitry ESD damage occurs when electronic components are improperly handled and can result in complete or intermittent failures

• Always follow ESD-prevention procedures when removing and replacing components Ensure that the chassis is electrically connected to earth ground Wear an ESD-preventive wrist strap, ensuring that it makes good skin contact Connect the grounding clip to an unpainted surface of the chassis frame to safely ground ESD voltages To properly guard against ESD damage and shocks, the wrist strap and cord must operate effectively If no wrist strap is available, ground yourself by touching the metal part of the chassis

• For safety, periodically check the resistance value of the antistatic strap, which should be between

1 and 10 megohms (Mohms)

General Site Requirements

The topics in this section describe the requirements your site must meet for safe installation and operation of your system Ensure that your site is properly prepared before beginning installation This section includes the following topics:

Chapter 1 Preparing for Installation General Site Requirements

Site Environment

Place the chassis on a desktop or mount it on a rack The location of the chassis and the layout of the equipment rack or wiring room are extremely important for proper system operation Equipment placed too close together, inadequate ventilation, and inaccessible panels can cause system malfunctions and shutdowns, and can make the chassis maintenance difficult

When planning the site layout and equipment locations, keep in mind the precautions described in the next section “Preventive Site Configuration, page 1-4,” to help avoid equipment failures and reduce the possibility of environmentally caused shutdowns If you are currently experiencing shutdowns or unusually high error rates with your existing equipment, these precautions may help you isolate the cause of failures and prevent future problems

Preventive Site Configuration

The following precautions will help plan an acceptable operating environment for the chassis and avoid environmentally caused equipment failures:

• Electrical equipment generates heat Ambient air temperature might not be adequate to cool equipment to acceptable operating temperatures without adequate circulation Ensure that the room

in which you operate your system has adequate air circulation

• Always follow the ESD-prevention procedures described previously to avoid damage to equipment Damage from static discharge can cause immediate or intermittent equipment failure

• Ensure that the chassis top panel is secure The chassis is designed to allow cooling air to flow effectively within it An open chassis allows air leaks, which may interrupt and redirect the flow of cooling air from the internal components

Power Supply Considerations

The adaptive security appliance can have an AC power supply

Observe the following considerations:

• Check the power at the site before installing the chassis to ensure that the power is “clean” (free of spikes and noise) Install a power conditioner if necessary, to ensure proper voltages and power levels in the source voltage

• Install proper grounding for the site to avoid damage from lightning and power surges

• In a chassis equipped with an AC-input power supply, use the following guidelines:

– The chassis does not have a user-selectable operating range Refer to the label on the chassis for the correct AC-input power requirement

– Several styles of AC-input power supply cords are available; make sure you have the correct style for your site

– Install an uninterruptible power source for your site, if possible

– Install proper site grounding facilities to guard against damage from lightning or power surges

Chapter 1 Preparing for Installation

General Site Requirements

Configuring Equipment Racks

The following tips help you plan an acceptable equipment rack configuration:

• Enclosed racks must have adequate ventilation Ensure that the rack is not overly congested, because each chassis generates heat An enclosed rack should have louvered sides and a fan to provide cooling air

• When mounting a chassis in an open rack, ensure that the rack frame does not block the intake or exhaust ports If the chassis is installed on slides, check the position of the chassis when it is seated all the way into the rack

• In an enclosed rack with a ventilation fan in the top, excessive heat generated by equipment near the bottom of the rack can be drawn upward and into the intake ports of the equipment above it in the rack Ensure that you provide adequate ventilation for equipment at the bottom of the rack

• Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the chassis The best placement of the baffles depends on the airflow patterns in the rack

Experiment with different arrangements to position the baffles effectively

Chapter 1 Preparing for Installation General Site Requirements

The ASA 5580-20 delivers 5 Gigabits per second of TCP traffic and UDP performance is even greater Many features in the system are made multi-core capable to achieve this high throughput In addition the system delivers greater than 60,000 TCP connections per second and supports up to 1 million

connections

The ASA 5580-40 delivers 10 Gigabits per second of TCP traffic and similar to ASA 5580-20 the UDP performance will be even greater The ASA 5580-40 delivers greater than 120,000 TCP connections per second and up to 2 million connections in total

The ASA 5580-20 and the ASA 5580-40 supports 50 security contexts and up to 100 VLAN interfaces (250 VLAN interfaces will be supported in a future release) and 1 Gigabit of IPSec VPN 3DES performance They support up to 24 Gigabit data ports or up to 12 Ten Gigabit data ports as well as two additional Gigabit ports for management Optional redundant, hot-swappable power capabilities are available as well as hot-swappable cooling fans in case of a fan failure

NetFlow version 9 will be used to export information about the progression of a flow from start to finish The NetFlow implementation will export records indicating significant events in the life of a flow This

is different from traditional NetFlow which exports data about flows at regular intervals The NetFlow module will also export records about the flows that are denied by Access Lists You can configure an ASA 5580 to send the following events using NetFlow:

Chapter 2 ASA 5580 Supported Interface Cards

• Flow Creation

• Flow Teardown

• Flow Denied - Only flows denied by ACL will be reported in the first release

Additionally, the adaptive security appliance software supports Cisco Adaptive Security Device Manager (ASDM) ASDM delivers world-class security management and monitoring through an intuitive, easy-to-use web-based management interface Bundled with the adaptive security appliance, ASDM accelerates adaptive security appliance deployment with intelligent wizards, robust

administration tools, and versatile monitoring services that complement the advanced integrated security and networking features offered by the market-leading suite of the adaptive security appliance Its secure, web-based design enables anytime, anywhere access to adaptive security appliances

The system includes environmental monitoring which tracks the operational status of the fans and power supplies In addition, it tracks the temperatures of the CPUs and the ambient temperature of the system

ASDM provides you with a quick view into these items on the Device Dashboard and the new show environment command has been introduced to provide the information as well.

The ASA 5580 will also support up to 1000 SSL VPN peers, and up to 10,000 total VPN peers This release also introduces support for 10 Gigabit Ethernet interfaces and support for jumbo frames up

to 9216

In addition to the above, enhancements have been made to many existing commands to provide greater visibility to the operations of the high performance ASA 5580 You will find changes in the following commands: show version, show activation-key, show interface, show tech, show asp, and more

Supported Interface Cards

The adaptive security appliance supports the following interface cards:

• 4-Port Gigabit Ethernet Copper PCI Express cardProvides four 10/100/1000BASE-T interfaces, which allow up to 24 total Gigabit Ethernet interfaces

in a fully populated chassis Figure 2-1 shows the Gigabit Ethernet interface card

Chapter 2 ASA 5580

Ports and LEDs

• 2-Port 10-Gigabit Ethernet Fiber PCI Express cardProvides two 10000BASE-SX (fiber) interfaces (allowing up to 12 total 10-Gigabit Ethernet fiber interfaces in a fully populated chassis)

The card ports require a multi-mode fiber cable with an LC connector to connect to the SX interface

of the chassis Figure 2-2 shows the 2-Port 10-Gigabit Ethernet Fiber PCI Express card

• 4-Port Gigabit Ethernet Fiber PCI Express cardProvides four 10000BASE-SX (fiber) interfaces (allowing up to 24 total Gigabit Ethernet fiber interfaces in a fully populated chassis)

The card ports require a multi-mode fiber cable with an LC connector to connect to the SX interface

of the chassis

Ports and LEDs

This section describes the front and rear panels This section includes the following topics:

Chapter 2 ASA 5580 Ports and LEDs

Front Panel LEDs

• Flashing amber—System health degraded

• Flashing red—System health critical

• Off—System off

Chapter 2 ASA 5580

Ports and LEDs

For more information on the Management Port, see the management-onlycommandin the Cisco ASA

5580 Adaptive Security Appliance Command Reference

Power status indicator

Indicates the power supply status:

• Green—Power supply on

• Flashing amber—Power supply health degraded

• Flashing red—Power supply health critical

• Off—Power supply offMGMT0/0 indicator Indicates the status of the management port:

Turns power on and off:

• Amber—System has AC power and is in standby mode

• Green—System has AC power and is turned on

• Off—System has no AC power

Chapter 2 ASA 5580 Ports and LEDs

Rear Panel LEDs and Ports

1 2 3 4 5 6 7 8 9

Chapter 2 ASA 5580

Ports and LEDs

power supply indicators

type of port—management port, port in a Gigabit Ethernet interface card, port in a 10-Gigabit Ethernet Fiber interface card, or a port in a Gigabit Ethernet Fiber interface card

3 Activity indicator

1 2 3 4 5 6 7 8 9

Gigabit Ethernet Green (top): link to network

Flashing Green (top): linked with activity on the network

Amber (bottom): Speed 1000Green (bottom): Speed 100Off (bottom): Speed 1010-Gigabit Ethernet

Fiber (one LED)

Green: link to networkFlashing green: linked with activity on the network

Flashing green (left): linked with activity on the network

Chapter 2 ASA 5580 Ports and LEDs

Fail Indicator 1 Amber

Power Indicator 2 Green

Description

• Standby mode

Chapter 2 ASA 5580

Internal Components

Internal Components

5

7 6 4

2

Chapter 2 ASA 5580 Diagnostic Panel

Diagnostic Panel

The front panel LEDs indicate hardware status at a high level The Diagnostic Panel indicators identifies individual components experiencing an error, event, or failure All indicators are off unless one of the component fails

Note When you remove the chassis cover to view the Diagnostic Panel, leave adaptive security appliance

powered on Powering off the adaptive security appliance clears the Diagnostic Panel indicators

appliance chassis, see the “Internal Components” section on page 2-8 For information on how to access the Diagnostic Panel, see the “Accessing the Diagnostic Panel” section on page 3-4

CPU BD (interlock error) System board

Chapter 2 ASA 5580

Specifications

Specifications

Dimensions and Weight

Nonoperating 25 G, 170 inches/sec delta V

Chapter 2 ASA 5580 Working in an ESD Environment

Working in an ESD Environment

Electrostatic discharge (ESD) can damage equipment and impair electrical circuitry ESD damage occurs when electronic components are improperly handled and can result in complete or intermittent failures Always follow ESD-prevention procedures when you remove and replace components Ensure that the chassis is electrically connected to earth ground Wear an ESD-preventive wrist strap, ensuring that it makes good skin contact Connect the grounding clip to an unpainted surface of the chassis frame to safely ground unwanted ESD voltages To guard against ESD damage and shocks, the wrist strap and cord must operate properly If no wrist strap is available, ground yourself by touching the metal part of the chassis

C H A P T E R 3

Maintenance and Upgrade Procedures

This chapter describes maintenance and upgrade procedures This chapter includes the following sections:

security appliance and must only be upgraded under instructions from Cisco with BIOS files obtained from the Cisco website Installing a non-Cisco or third-party BIOS on the ASA 5580 adaptive security appliance voids the warranty

Removing and Replacing the Chassis Cover

This section describes how to remove and replace the chassis cover from the adaptive security appliance This section includes the following topics:

Statement 1

Warning This product relies on the building’s installation for short-circuit (overcurrent) protection Ensure that

the protective device is rated not greater than 120 VAC, 20 A U.S (240 VAC, 16-20 A International)

Statement 1005

Chapter 3 Maintenance and Upgrade Procedures Removing and Replacing the Chassis Cover

absence of a suitably installed ground conductor Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available Statement 1024

hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place

Statement 1029

warnings in Regulatory Compliance and Safety Information for the Cisco ASA 5580

or removed Operating it in this manner results in improper airflow and improper cooling that can lead

to thermal damage

Removing the Chassis Cover

To remove the chassis cover, perform the following steps:

Note Removing the chassis cover does not affect Cisco warranty Upgrading the adaptive security appliance

does not require any special tools and does not create any radio frequency leaks

Step 2 Extend the adaptive security appliance out of the rack if it is rack-mounted

If the locking latch is locked, use the T-15 Torx screwdriver located on the back of the chassis to unlock

it See Figure 2-4 on page 2-6 to see the location of the T-15 Torx screwdriver Turn the locking screw a quarter of a turn counterclockwise to unlock it, see Figure 3-1

Caution Do not operate the adaptive security appliance without the chassis cover installed The chassis cover

protects the internal components, prevents electrical shorts, and provides proper air flow for cooling the electronic components

Chapter 3 Maintenance and Upgrade Procedures

Removing and Replacing the Chassis Cover

Step 3 Lift up the cover latch on the top of the chassis, see Figure 3-1

Step 4 Slide the chassis cover back and up to remove it, see Figure 3-2

1 2 3 4 5 6 7 8

Cisco ASA 55

80 SERIES Adaptiv

e Security Applianc e

UID SY ST

TUS MG 0

MG 1

1 2 3 4 5 6 7 8

1 2 3 4 5 6 7 8

Cisco ASA 55

80 SERIES Adaptiv

e Security Applianc e

UID SY ST

TUS MG 0

MG 1