Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA

Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Cisco ASA 5580 Adaptive Security
Appliance Hardware Maintenance Guide
Text Part Number: OL-12920-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required
to correct the interference at their own expense.
The following information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy. If it is not
installed in accordance with Cisco’s installation instructions, it may cause interference with radio and television reception. This equipment has been tested and found to
comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules. These specifications are designed to provide reasonable
protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation.
Modifying the equipment without Cisco’s written authorization may result in the equipment no longer complying with FCC requirements for Class A or Class B digital
devices. In that event, your right to use the equipment may be limited by FCC regulations, and you may be required to correct any interference to radio or television

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0804R)
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide

©2008 Cisco Systems, Inc. All rights reserved.

iii
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
CONTENTS
About This Guide
v
Document Objectives
v
Audience
v
Document Organization
v
Installation Warnings
vi
Where to Find Safety and Warning Information
ix
Obtaining Documentation and Submitting a Service Request
ix
CHAPTER

1
Preparing for Installation
1-1
Overview

Front Panel LEDs
2-3
Rear Panel LEDs and Ports
2-5
Internal Components
2-8
Diagnostic Panel
2-10
Specifications
2-10
Working in an ESD Environment
2-11
CHAPTER

3
Maintenance and Upgrade Procedures
3-1
Removing and Replacing the Chassis Cover
3-1

Contents
iv
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
Removing the Chassis Cover
3-2
Replacing the Chassis Cover
3-3
Accessing the Diagnostic Panel
3-4

A-1
10/100/1000BaseT Connectors
A-1
Console Port (RJ-45)
A-2
RJ-45 to DB-9
A-3
MGMT 10/100/1000 Ethernet Port
A-4
Gigabit and Fibre Channel Ports
A-4
I
NDEX

v
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
About This Guide
This preface includes the following sections:
•
Document Objectives, page v
•
Audience, page v
•
Document Organization, page v
•
Installation Warnings, page vi
•
Obtaining Documentation and Submitting a Service Request, page ix
Document Objectives

•
Wrist Strap Warning, page vii
•
Work During Lightning Activity Warning, page vii
•
Installation Instructions Warning, page vii
•
Chassis Warning for Rack-Mounting and Servicing, page vii
•
Short-Circuit Protection Warning, page vii
•
SELV Circuit Warning, page vii
•
Ground Conductor Warning, page vii
•
Blank Faceplates and Cover Panels Warning, page viii
•
Product Disposal Warning, page viii
•
Short-Circuit Protection Warning, page viii
•
Compliance with Local and National Electrical Codes Warning, page viii
•
TN Power Warning, page viii
•
Multiple Power Cord, page viii
•
Circuit Breaker (15A) Warning, page viii
•
Grounded Equipment Warning, page ix

Installation Instructions Warning
Warning
Read the installation instructions before connecting the system to the power source.
Statement 1004
Chassis Warning for Rack-Mounting and Servicing
Warning
To prevent bodily injury when mounting or servicing this unit in a rack, you must take special
precautions to ensure that the system remains stable. The following guidelines are provided to ensure
your safety:
This unit should be mounted at the bottom of the rack if it is the only unit in the rack.When mounting
this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom
of the rack.If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit
in the rack.
Statement 1006
Short-Circuit Protection Warning
Warning
This product requires short-circuit (overcurrent) protection, to be provided as part of the building
installation. Install only in accordance with national and local wiring regulations.
Statement 1045
SELV Circuit Warning
Warning
To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network
voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some
LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables.
Statement 1021
Ground Conductor Warning
Warning
This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the
absence of a suitably installed ground conductor. Contact the appropriate electrical inspection
authority or an electrician if you are uncertain that suitable grounding is available.

Warning
The device is designed to work with TN power systems.
Statement 19
Multiple Power Cord
Warning
This unit has more than one power cord. To reduce the risk of electric shock when servicing a unit,
disconnect the power cord of the power strip that the unit is plugged into.
Statement 137
Circuit Breaker (15A) Warning
Warning
This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that
a fuse or circuit breaker no larger than 120
VAC, 15A U.S. (240 VAC, 10A international) is used on the
phase conductors (all current-carrying conductors).
Statement 13

ix
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
About This Guide
Grounded Equipment Warning
Warning
This equipment is intended to be grounded. Ensure that the host is connected to earth ground during
normal use.
Statement 39
Safety Cover Requirement
Warning
The safety cover is an integral part of the product. Do not operate the unit without the safety cover
installed. Operating the unit without the cover in place will invalidate the safety approvals and pose
a risk of fire and electrical hazards.

CHAPTER

1-1
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
1
Preparing for Installation
The information in this guide applies to the Cisco ASA 5580 adaptive security appliance. In this guide,
references to “adaptive security appliance” and “ASA 5580 ” apply to the Cisco ASA 5580 adaptive
security appliance.
This chapter describes the steps to follow before installing new hardware or performing hardware
upgrades, and includes the following sections:
•
Overview, page 1-1
•
Installation Overview, page 1-1
•
Safety Recommendations, page 1-2
•
General Site Requirements, page 1-3
Overview
The adaptive security appliance delivers unprecedented levels of defense against threats to the network
with deeper web inspection and flow-specific analysis, improved secure connectivity via end-point
security posture validation, and voice and video over VPN support. It also provides enhanced support
for intelligent information networks through improved network integration, resiliency, and scalability.
The adaptive security appliance software combines firewall, VPN concentrator, and intrusion prevention
software functionality into one software image. Previously, these functions were available in three
separate devices, each with its own software and hardware. Combining the functionality into just one
software image provides significant improvements in the available features.
Additionally, the adaptive security appliance software supports Adaptive Security Device Manager

appliance does not require any special tools and does not create any radio frequency leaks.
The safety guidelines are as follows:
•
Keep the chassis area clear and dust-free before, during and after installation.
•
Keep tools away from walk areas where you and others could fall over them.
•
Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains, that could get caught
in the chassis.
•
Wear safety glasses if you are working under any conditions that might be hazardous to your eyes.
•
Do not perform any action that creates a potential hazard to people or makes the equipment unsafe.
•
Never attempt to lift an object that is too heavy for one person to handle.
This section includes the following topics:
•
Maintaining Safety with Electricity, page 1-2
•
Preventing Electrostatic Discharge Damage, page 1-3
Maintaining Safety with Electricity
Warning
Before working on a chassis or working near power supplies, unplug the power cord on AC units.
Statement 246
Follow these guidelines when working on equipment powered by electricity:
•
Before beginning procedures that require access to the interior of the chassis, locate the emergency
power-off switch for the room in which you are working. Then, if an electrical accident occurs, you
can act quickly to turn off the power.
•

ASA 5580 document.
•
The adaptive security appliance model equipped with AC-input power supplies are shipped with a
3-wire electrical cord with a grounding-type plug that fits only a grounding-type power outlet. Do
not circumvent this safety feature. Equipment grounding should comply with local and national
electrical codes.
Preventing Electrostatic Discharge Damage
Electrostatic discharge (ESD) can damage equipment and impair electrical circuitry. ESD damage occurs
when electronic components are improperly handled and can result in complete or intermittent failures.
•
Always follow ESD-prevention procedures when removing and replacing components. Ensure that
the chassis is electrically connected to earth ground. Wear an ESD-preventive wrist strap, ensuring
that it makes good skin contact. Connect the grounding clip to an unpainted surface of the chassis
frame to safely ground ESD voltages. To properly guard against ESD damage and shocks, the wrist
strap and cord must operate effectively. If no wrist strap is available, ground yourself by touching
the metal part of the chassis.
•
For safety, periodically check the resistance value of the antistatic strap, which should be between
1 and 10 megohms (Mohms).
General Site Requirements
The topics in this section describe the requirements your site must meet for safe installation and
operation of your system. Ensure that your site is properly prepared before beginning installation.
This section includes the following topics:
•
Site Environment, page 1-4
•
Preventive Site Configuration, page 1-4
•
Power Supply Considerations, page 1-4
•

effectively within it. An open chassis allows air leaks, which may interrupt and redirect the flow of
cooling air from the internal components.
Power Supply Considerations
The adaptive security appliance can have an AC power supply.
Observe the following considerations:
•
Check the power at the site before installing the chassis to ensure that the power is “clean” (free of
spikes and noise). Install a power conditioner if necessary, to ensure proper voltages and power
levels in the source voltage.
•
Install proper grounding for the site to avoid damage from lightning and power surges.
•
In a chassis equipped with an AC-input power supply, use the following guidelines:
–
The chassis does not have a user-selectable operating range. Refer to the label on the chassis for
the correct AC-input power requirement.
–
Several styles of AC-input power supply cords are available; make sure you have the correct
style for your site.
–
Install an uninterruptible power source for your site, if possible.
–
Install proper site grounding facilities to guard against damage from lightning or power surges.

1-5
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
Chapter 1 Preparing for Installation
General Site Requirements
Configuring Equipment Racks

This chapter introduces the ASA 5580 adaptive security appliance. This chapter includes the following
sections:
•
Introduction, page 2-1
•
Supported Interface Cards, page 2-2
•
Ports and LEDs, page 2-3
•
Internal Components, page 2-8
•
Diagnostic Panel, page 2-10
•
Specifications, page 2-10
•
Working in an ESD Environment, page 2-11
Introduction
The Cisco ASA 5580 series adaptive security appliance comes in two models the ASA 5580-20 and
ASA
5580-40. In addition to world-class performance, the adaptive security appliances also introduces
new features and capabilities in the areas of scalable logging, system environmental monitoring, VPN
Remote Access user limits, 10 Gigabit Ethernet interfaces, and more.
The ASA 5580-20 delivers 5 Gigabits per second of TCP traffic and UDP performance is even greater.
Many features in the system are made multi-core capable to achieve this high throughput. In addition the
system delivers greater than 60,000 TCP connections per second and supports up to 1 million
connections.
The ASA 5580-40 delivers 10 Gigabits per second of TCP traffic and similar to ASA 5580-20 the UDP
performance will be even greater. The ASA 5580-40 delivers greater than 120,000 TCP connections per
second and up to 2 million connections in total.
The ASA 5580-20 and the ASA 5580-40 supports 50 security contexts and up to 100 VLAN interfaces

ASDM provides you with a quick view into these items on the Device Dashboard and the new show
environment command has been introduced to provide the information as well.
The ASA 5580 will also support up to 1000 SSL VPN peers, and up to 10,000 total VPN peers.
This release also introduces support for 10 Gigabit Ethernet interfaces and support for jumbo frames up
to 9216.
In addition to the above, enhancements have been made to many existing commands to provide greater
visibility to the operations of the high performance ASA 5580. You will find changes in the following
commands: show version, show activation-key, show interface, show tech, show asp, and more.
Supported Interface Cards
The adaptive security appliance supports the following interface cards:
•
4-Port Gigabit Ethernet Copper PCI Express card
Provides four 10/100/1000BASE-T interfaces, which allow up to 24 total Gigabit Ethernet interfaces
in a fully populated chassis.
Figure 2-1 shows the Gigabit Ethernet interface card.
Figure 2-1 4-Port Gigabit Ethernet Copper PCI Express Card
153325

2-3
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
Chapter 2 ASA 5580
Ports and LEDs
•
2-Port 10-Gigabit Ethernet Fiber PCI Express card
Provides two 10000BASE-SX (fiber) interfaces (allowing up to 12 total 10-Gigabit Ethernet fiber
interfaces in a fully populated chassis).
The card ports require a multi-mode fiber cable with an LC connector to connect to the SX interface
of the chassis.
Figure 2-2 shows the 2-Port 10-Gigabit Ethernet Fiber PCI Express card.

Cisco IPS 4270 SERIES
Intrusion Prevention Sensor
U
ID
S
Y
S
T
E
M
P
W
R
S
T
A
T
U
S
MGM
T 0
M
GM
T 1
1
2
4
3
5
6

•
Flashing amber—Power supply health degraded
•
Flashing red—Power supply health critical
•
Off—Power supply off
MGMT0/0 indicator Indicates the status of the management port:
•
Green—Linked to network
•
Flashing green—Linked with activity on the
network
•
Off—No network connection
MGMT0/1 indicator Indicates the status of the management port:
•
Green—Linked to network
•
Flashing green—Linked with activity on the
network
•
Off—No network connection
Power switch and
indicator
Turns power on and off:
•
Amber—System has AC power and is in standby
mode
•
Green—System has AC power and is turned on

5 6 8 9 107

2-7
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
Chapter 2 ASA 5580
Ports and LEDs
Figure 2-5 shows the activity indicators on the Ethernet ports, which has two indicators per port and the
power supply indicators.
Figure 2-5 Rear Panel LEDs
Table 2-2 describes the Ethernet port indicators. The behavior of the port indicators varies based on the
type of port—management port, port in a Gigabit Ethernet interface card, port in a 10-Gigabit Ethernet
Fiber interface card, or a port in a Gigabit Ethernet Fiber interface card.
1 Power indicator 2 Link indicator
3 Activity indicator
1
23456789
PCI-E x4
PCI-E x8 PCI-E x4 PCI-E x8 PCI-E x4 PCI-X 100 MHz
PS2
PS1
UID
MGMT0/0
MGMT0/1
241230
CONSOLE
1
2 3
Ta b l e 2-2 Ethernet Port Indicators
Indicator Description

•
AC power present
•
Standby mode
Off On Normal

2-9
Cisco ASA 5580 Adaptive Security Appliance Hardware Maintenance Guide
OL-12920-01
Chapter 2 ASA 5580
Internal Components
Internal Components
Figure 2-6 shows the internal components of the adaptive security appliance.
Figure 2-6 Internal Components
1, 3 Power supply 4, 5, 7 Fans
2 Interface expansion slots 6 Diagnostic panel
241974
1 3
5
7
6
4
2