Cisco ASA 5585-X Quick Start Guide
Last Updated: April 1, 2015
1. Package Contents
This section lists the package contents of each chassis. Note that contents are subject to change, and your exact
contents might contain additional or fewer items.
SFP1
SFP0
7
6
5
4
3
2
1
0
0
1
MGMT
1
0
USB
PW
SFP1
R
M
OT
AR
BO
T
AL
AC
R
M
OT
AR
BO
T
AL
AC
N
VP
SFP0
7
1
PS
0
PS
HD
D1
HD
D0
AUX
6
5
CONSO
RESET
CONSO
RESET
LE
4
3
2
1
0
0
1
MGMT
1
0
USB
1
PW
N
VP
1
PS
0
PS
HD
D1
HD
D0
AUX
LE
3
2
4
6
300015
5
7
1
ASA 5585-X Chassis
2
Power Cable (US Shown)
3
Blue Console Cable PC Terminal Adapter
4
Cable Management Brackets
5
4 Cable Management Bracket Screws
6
Ground Lug Kit
7
Slide Rail Kit
Note: The ASA 5585-X with SSP-10, SSP-20, or SSP-40 ships with one power supply module installed and one
power cable. The ASA 5585-X with SSP-60, ships with two power supply modules installed and two power
cables.
2. Power On the ASA
1. Attach the power cable to the back of the ASA. If you have redundant power supplies, you must connect both
power cables to the back of the chassis.
Cisco Systems, Inc.
www.cisco.com
1
Cisco ASA 5585-X Quick Start Guide
3. Network Considerations for Multiple SSPs
1
2
1
2
Power Supply Module (PS0)
249822
O
FA UT
IL
F
O AN
K
100-240V
15.0/8.0.A
56/60Hz
I
ON
K
Cisco ASA 1200W AC
O
FA UT
IL
F
O AN
K
100-240V
15.0/8.0.A
56/60Hz
I
ON
K
Cisco ASA 1200W AC
Power Supply Module (PS1)
2. Connect the power cables to the electrical outlets.
3. Power on the ASA. If you have redundant power supplies, you must power on both modules.
4. Check the Power LED on the front of the ASA; the AC ON indicator should be green, the FAN ON indicator
should be green, and the OUT OK indicator should be off.
3. Network Considerations for Multiple SSPs
The ASA SSP resides in slot 0 (bottom). A second SSP (or network module) can be installed in slot 1 (top). When
you install a non-ASA SSP in slot 1, all non-management interfaces belong to the ASA in slot 0, while the
management interfaces belong to the module. If you install dual ASA SSPs, then they are completely independent
systems.
Module Management 1/0
Default IP: Varies
0
1
SFP1
SFP0
7
6
5
4
3
2
1
0
1
MGMT
0
USB
SFP1
SFP0
7
6
5
4
3
2
1
0
1
MGMT
0
USB
R
PW
OT
BO
A
AL
RM
AC
T
N
1
PS
0
PS
D
HD
N
VP
1
PS
0
PS
HD
VP
1
D
HD
RESET
0
AUX
CONSOLE
AUX
CONSOLE
0
1
PW
R
O
BO
T
M
T
AR
AC
AL
D1
D0
HD
RESET
ASA Management 0/0
Default IP: 192.168.1.1
Default Configuration for Management
See the following table for default configurations for the Management interfaces depending on which module is
installed in slot 1. Note that the left-hand Management interface (when facing the back of the chassis) is not
configured by default.
2
Cisco ASA 5585-X Quick Start Guide
4. Connect Interface Cables and Verify Connectivity
Slot 0 Module
Management
Interface ID
Default IP
address
Slot 1 Module
Management
Interface ID
Default IP
address
ASA SSP
Management 0/0
192.168.1.1
ASA SSP
Management 0/0
192.168.1.1
The ASA SSP is
the only
supported
module in slot 0.
If you want to put
both ASA SSPs
on the same
network, you
must change
from this default.
All other SSPs
Management 1/0
Varies. See the
module quick start
guide for exact
values.
All management traffic to and from the non-ASA SSP must enter and exit the Management 1/0 or 1/1 interface.
Because this interface is not an ASA data interface, traffic cannot pass through the ASA over the backplane; you
need to physically cable the management interface to an ASA interface. Non-ASA SSPs usually need Internet
access for updates. See the following typical cabling setup to allow SSP access to the Internet through the ASA
management interface. Other options are possible, depending on how you want to connect your network; for
example, you can make the Management 1/0 interface outside facing; or you can route between it and a different
ASA interface if you have an inside router; and so on.
Module Gateway
to Internet
Layer 2
Switch
ASA
management
ASA Management 0/0
outside
Internet
Module
Module Management 1/0
Set IP to be on same network as M0/0
Management PC
4. Connect Interface Cables and Verify Connectivity
1. Cable the management and data interfaces. See 3. Network Considerations for Multiple SSPs, page 2 for a
sample cabling scenario.
3
Cisco ASA 5585-X Quick Start Guide
5. Launch ASDM
1
0
1
SFP1
SFP0
7
6
5
4
3
2
1
0
1
MGMT
0
USB
SFP1
SFP0
7
6
5
4
3
2
1
0
1
MGMT
0
USB
RM
R
PW
OT
BO
A
AL
R
PW
OT
BO
AR
AL
1
T
N
VP
1
PS
0
PS
D
HD
T
AC
N
VP
1
PS
0
PS
D1
HD
AC
D0
HD
RESET
AUX
CONSOLE
AUX
CONSOLE
2
0
3
M
HD
D0
RESET
300016
1
Management PC
Unsecure Network
Secure Network
1
(Optional) Slot 1 module, multiple types available.
3
ASA SSP Management 0/0 interface (RJ-45)
2
Slot 0 ASA SSP
2. If you do not use the Management 0/0 for ASA management, you need to configure a data interface for
management. Do one of the following, then recable the computer so it is on the new management network:
— Connect to the console port to configure a data interface for management with CLI. See the Getting Started
chapter in the general operations configuration guide for detailed steps.
— Temporarily connect to Management 0/0, launch ASDM (see 5. Launch ASDM, page 4), and configure a
data interface for management.
3. If you are using the fiber interfaces, you need an SFP+ module for 10-Gigabit Ethernet (a license may be
required) or an SFP module for Gigabit Ethernet. (SFP or SFP+ modules are not included.)
The interfaces available depend on your model. See the hardware guide for more information.
4. Check the LINK/ACT indicators to verify interface connectivity.
5. For software module configuration, see the ASA FirePOWER quick start guide, ASA CX quick start guide, or
IPS quick start guide.
5. Launch ASDM
Using ASDM, you can use wizards to configure basic and advanced features. See the ASDM release notes on
Cisco.com for the requirements to run ASDM.
Procedure
1. On the computer connected to the ASA Management 0/0 interface, launch a web browser.
2. In the Address field, enter the following URL: https://192.168.1.1/admin. The Cisco ASDM web page
appears.
3. Click one of the available options: Install ASDM Launcher, Run ASDM, or Run Startup Wizard.
4. Follow the onscreen instructions to launch ASDM according to the option you chose. The Cisco ASDM-IDM
Launcher appears.
Note: If you choose to click Install ASDM Launcher, in some cases you need to install an identity certificate
for the ASA and a separate certificate for the ASA FirePOWER module according to Install an Identity
Certificate for ASDM.
4
Cisco ASA 5585-X Quick Start Guide
6. Run ASDM Wizards and Advanced Configuration
5. Leave the username and password fields empty, and click OK. The main ASDM window appears.
6. Run ASDM Wizards and Advanced Configuration
ASDM includes many wizards to configure your security policy. See the Wizards menu for all available wizards,
including the Startup Wizard for initial deployment. To continue configuring your ASA, see the documents
available for your software version at Navigating the Cisco ASA Series Documentation.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To
view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property
of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other
company. (1110R)
© 2016 Cisco Systems, Inc. All rights reserved.
5
Cisco ASA 5585-X Quick Start Guide
6. Run ASDM Wizards and Advanced Configuration
6