Cisco Cisco ASA 5510 Manuale utente

Quick Start Guide

Cisco ASA 5500 Series Adaptive Security Appliance

Quick Start Guide

1Verifying the Package Contents

2Installing the Cisco ASA 5500 Series Adaptive Security Appliance

3Configuring the Cisco ASA 5500 Series Adaptive Security Appliance

4Common Configuration Scenarios

5Optional SSM Setup and Configuration Procedures

6Optional Maintenance and Upgrade Procedures

About the Cisco ASA 5500 Series Adaptive Security Appliance

The Cisco ASA 5500 series adaptive security appliance family delivers enterprise-class security for

medium business-to-enterprise networks in a modular, purpose-built appliance. Its versatile one-rack

unit (1RU) design supports up to 8 10/100/1000 Gigabit Ethernet interfaces (on the 5520 and 5540)

and 1 10/100 Fast Ethernet Management interface, making it an excellent choice for businesses

requiring a cost-effective, resilient security solution with demilitarized zone (DMZ) support. The

optional 4GE SSM provides four ports, each with two interfaces, copper RJ-45 (Ethernet) and SFP for

optical fiber connections. Part of the market-leading Cisco adaptive security appliance series, the

Cisco ASA 5500 provides a wide range of integrated security services, hardware VPN acceleration, full

intrusion prevention, award-winning high-availability and powerful remote management capabilities

in an easy-to-deploy, high-performance solution.

About This Document

This document describes how to install and configure the Cisco ASA 5510, 5520, and 5540 adaptive

security appliance to be used in VPN, DMZ, remote-access, and intrusion protection deployments.

When you have completed the procedures outlined in this document, the adaptive security appliance

will be running a robust VPN, DMZ, or remote-access configuration appropriate for most

deployments. The document provides only enough information to get the adaptive security appliance

up and running with a basic configuration.

For more information, see the following documentation:

•Cisco ASA 5500 Series Release Notes

•Cisco ASA 5500 Series Hardware Installation Guide

•Cisco Security Appliance Command Line Configuration Guide

•Cisco Security Appliance Command Reference

•Cisco Security Appliance Logging Configuration and System Log Messages

132228

POWER STATUS FLASH

ACTIVE VPN

CISCOASA5530

SERIES

Adaptive Security Appliance

1 Verifying the Package Contents

Verify the contents of the packing box to ensure that you have received all items necessary to install

your Cisco ASA 5500 series adaptive security appliance.

Yellow Ethernet cable

(72-1482-01)

Mounting brackets

(700-18797-01 AO) right

(700-18798-01 AO) left

4 flathead screws

(48-0451-01 AO)

2 long cap screws

(48-0654-01 AO)

4 cap screws

(48-0523-01 AO)

Cisco ASA

5500 Series

Hardware

Installation

Guide

Safety and

Compliance

Guide

Cisco ASA 5500 adaptive

security appliance

Documentation

Cisco ASA

5500 Adaptive

Security Appliance

Product CD

4 rubber feet

Cable holder

92574

Blue console cable

PC terminal adapter

LINKSPD

3LINKSPD

2LINKSPD

1LINKSPD

MGMT USB2 USB1

FLASH

POWER

STATUS

FLASH

VPN

ACTIVE

2 Installing the Cisco ASA 5500 Series Adaptive Security

Appliance

Warning

This warning symbol means danger. You are in a situation that could cause bodily injury.

Before you work on any equipment, be aware of the hazards involved with electrical

circuitry and be familiar with standard practices for preventing accidents. Use the

statement number provided at the end of each warning to locate its translation in the

translated safety warnings that accompanied this device.

Statement 1071

Caution Be sure to read the safety warnings in the Regulatory Compliance and Safety Information

for the Cisco ASA 5500 Series and follow proper safety procedures when performing these

steps.

Warning

To prevent bodily injury when mounting or servicing this unit in a rack, you must take

special precautions to ensure that the system remains stable. The following guidelines

are provided to ensure your safety:

•This unit should be mounted at the bottom of the rack if it is the only unit in the rack.

•When mounting this unit in a partially filled rack, load the rack from the bottom to the top

with the heaviest component at the bottom of the rack.

•If the rack is provided with stabilizing devices, install the stabilizers before mounting or

servicing the unit in the rack. Statement 1006

Use the following guidelines when installing the adaptive security appliance in a rack:

•Allow clearance around the rack for maintenance.

•When mounting a device in an enclosed rack, ensure adequate ventilation. An enclosed rack

should never be overcrowded. Each unit generates heat.

•When mounting a device in an open rack, make sure that the rack frame does not block the intake

or exhaust ports.

Warning

Before performing any of the following procedures, ensure that power is removed from

the DC circuit. To ensure that all power is OFF, locate the circuit breaker on the panel

boardthatservicestheDCcircuit,switchthecircuitbreakertotheOFFposition,andtape

the switch handle of the circuit breaker in the OFF position.

Statement 7

Rack Mounting the Chassis

To rack mount the chassis, perform the following steps:

Step 1 Attach the rack-mount brackets to the chassis by using the supplied screws. Attach the

brackets to the holes near the front or at the rear of the chassis. (See Figure 1.)

Figure 1 Installing the Brackets

Step 2 Attach the chassis to the rack by using the supplied screws. (See Figure 2.)

92591

CISCO ASA 5540

SERIES

Adaptive Security Appliance

Figure 2 Rack Mounting the Chassis

Connecting the Interface Cables

To connect the interface cables, perform the following steps:

Step 1 Connect a computer or terminal to the adaptive security appliance for management access.

Note Before connecting a computer or terminal to the Console port, check the baud rate. The baud

ratemustmatchthedefault baudrate (9600baud)oftheconsole porton theadaptivesecurity

appliance. Set up the computer or terminal as follows: 9600 baud (default), 8 data bits, no

parity, 1 stop bits, and FC=hardware.

Step 2 Locate the blue console cable from the accessory kit. The console cable has an RJ-45

connector on one end and a DB-9 connector on the other.

92592

POWERSTATUSFLASH

ACTIVE VPN

CISCOASA5540

SERIES

AdaptiveSecurityAppliance

Step 3 Connect the RJ-45 connector of the blue console cable to the Console port on the rear panel

of the adaptive security appliance. (See Figure 3.)

Step 4 Connect the DB-9 connector of the blue cable to the serial port on your computer or terminal.

Figure 3 Connecting the Chassis Console Cable

Note Alternatively, for management purposes, you can also connect an Ethernet cable to the

adaptive security appliance MGMT port. TheMGMT port isaFastEthernetinterfacedesigned

for management traffic only and is specified as Management0/0. The MGMT port is similar to the

Console port, but the MGMT port accepts only incoming traffic.

Step 5 Locate the yellow Ethernet cable in the accessory kit.

Step 6 Attach one end of the Ethernet cable to an Ethernet port and the other end to a network

device, such as a router, switch, or hub.

Step 7 Attach the power cord to the adaptive security appliance and the power source.

Step 8 Power on the chassis.

1RJ-45 console port

2RJ-45 to DB-9 serial console cable (null modem)

92593

FLASH

CONSOLE AUX

POWER

STATUS

FLASH

VPN

ACTIVE

3 ConfiguringtheCiscoASA5500SeriesAdaptiveSecurity

Appliance

This section describes the initial configuration of the adaptive security appliance. You can perform the

configuration steps using either the browser-based Cisco Adaptive Security Device Manager (ASDM)

or the command-line interface (CLI).

Note To use ASDM, you must have a DES license or a 3DES-AES license. For more information,

see Obtaining DES and 3DES/AES Encryption Licenses, page 52.

About the Factory Default Configuration

Cisco adaptive security appliances are shipped with a factory-default configuration that enables quick

startup. This configuration meets the needs of most small and medium business networking

environments. By default, the adaptive security appliance is configured as follows:

•The inside (GigabitEthernet0/1) interface is configured with a default DHCP address pool.

This configuration enables a client on the inside network to obtain a DHCP address from the

adaptive security appliance in order to connect to the appliance. Administrators can then

configure and manage the adaptive security appliance using ASDM.

•The outside (GigabitEthernet0/0) interface is used to connect to the public network and is

configured to deny all inbound traffic.

This configuration protects your inside network from unsolicited traffic.

Based on your network security policy, you should also consider configuring the adaptive security

appliance to deny all ICMP traffic through the outside interface or any other interface that is necessary.

You can configure this access control policy using the icmp command. For more information about the

icmp command, see the Cisco Security Appliance Command Reference.

About the Adaptive Security Device Manager

The Adaptive Security Device

Manager (ASDM) is a feature-rich

graphical interface that enables you to

manage and monitor the adaptive

security appliance. Its web-based

design provides secure access so that

you can connect to and manage the

adaptive security appliance from any

location by using a web browser.

In addition to complete configuration

and management capability, ASDM

features intelligent wizards to simplify

and accelerate the deployment of the

adaptive security appliance.

To use ASDM, you must have a DES

license or a 3DES-AES license. In

addition, Java and JavaScript must be

enabled in your web browser.

About Configuration from the Command-Line Interface

In addition to the ASDM web configuration tool, you can configure the adaptive security appliance by

using the command-line interface. For more information, see the Cisco Security Appliance Command

Line Configuration Guide and the Cisco Security Appliance Command Reference.

Using the Startup Wizard

ASDM includes a Startup Wizard to simplify the initial configuration of your adaptive security

appliance. With a few steps, the Startup Wizard enables you to configure the adaptive security appliance

so that it allows packets to flow securely between the inside network (GigabitEthernet0/1) and the outside

network (GigabitEthernet0/0).

Before you launch the Startup Wizard, gather the following information:

•A unique hostname to identify the adaptive security appliance on your network.

•The IP addresses of your outside interface, inside interface, and any other interfaces.

•The IP addresses to use for NAT or PAT configuration.

•The IP address range for the DHCP server.

To use the Startup Wizard to set up a basic configuration for the adaptive security appliance, perform

the following steps:

Step 1 If you have not already done so, complete one of the following steps:

•If you have an ASA 5520 or 5540, connect the inside GigabitEthernet0/1 interface to a

switch or hub by using the Ethernet cable. To this same switch, connect a PC for

configuring the adaptive security appliance.

•If you have an ASA 5510, connect the inside Ethernet 1 interface to a switch or hub by

using the Ethernet cable. To this same switch, connect a PC for configuring the adaptive

security appliance.

Step 2 Configure your PC to use DHCP (to receive an IP address automatically from the adaptive

security appliance), or assign a static IP address to your PC by selecting an address out of the

192.168.1.0 network. (Valid addresses are 192.168.1.2 through 192.168.1.254, with a mask of

255.255.255.0 and default route of 192.168.1.1.)

Note The inside interface of the adaptive security appliance is assigned 192.168.1.1 by

default, so this address is unavailable.

Step 3 Complete one of the following steps:

•If you have an ASA 5520 or 5540, check the LINK LED on the GigabitEthernet0/1

interface.

•If you have an ASA 5510, check the LINK LED on the Ethernet 1 interface.

When a connection is established, the LINK LED interface on the adaptive security appliance

and the corresponding LINK LED on the switch or hub becomes solid green.

Step 4 Launch the Startup Wizard.

a. On the PC connected to the switch or hub, launch an Internet browser.

b. In the address field of the browser, enter this URL: https://192.168.1.1/.

Note The adaptive security appliance ships with a default IP address of 192.168.1.1.

Remember to add the “s” in “https” or the connection fails. HTTPS (HTTP over SSL)

provides a secure connection between your browser and the adaptive security

appliance.

Step 5 In the dialog box that requires a username and password, leave both fields empty. Press Enter.

Step 6 Click Yes to accept the certificates. Click Yes for all subsequent authentication and certificate

dialog boxes.

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Cisco Firewall

Cisco

Cisco ASA 5506-X Manuale utente

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale

Cisco

Cisco PIX 506 - Firewall Manuale utente

Cisco

Cisco Small Business RV220W Manuale di istruzioni

Cisco

Cisco IronPort C370 Manuale utente

Cisco

Cisco PIX 506E - Security Appliance Manuale utente

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale utente

Cisco

Cisco Firepower 1600 Manuale

Cisco

Cisco S195 Manuale

Cisco

Cisco Small Business Pro SA 520W Manuale di istruzioni

Cisco

Cisco FPR1010-ASA-K9 Manuale utente

Cisco

Cisco Cisco ASA Series Manuale utente

Cisco

Cisco RV110W Manuale di istruzioni

Cisco

Cisco IronPort M1070 Manuale utente

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuale

Cisco

Cisco Cisco ASA Series Istruzioni per l'installazione

Cisco

Cisco Firepower 9300 Manuale

Cisco

Cisco RV110W Manuale utente

Cisco

Cisco Small Business RV215W Manuale utente

Cisco

Cisco ASA 5585-X Manuale utente

Cisco

Cisco S190 Manuale utente

Cisco

Cisco M690 Manuale utente

Cisco

Cisco Small Business RV220W Manuale di istruzioni

Cisco

Cisco 515E - PIX Restricted Bundle Manuale utente

Manuali Firewall popolari di altre marche

Fortinet

Fortinet FortiGate Voice Series Manuale utente

ADTRAN

ADTRAN NetVanta 2300 Manuale utente

SecureLogix

SecureLogix ETM System Manuale utente

NETGEAR

NETGEAR ProSafe FVX538 Manuale utente

Lanner

Lanner FW-8877 Manuale utente

Huawei

Huawei USG6000 Series Manuale di installazione e funzionamento

H3C

H3C SecPath F5000-AI-15 Manuale utente

Nexcom

Nexcom DNA 1150 Manuale utente

Fortinet

Fortinet FortiGate-60 series Manuale utente

Draytek

Draytek Vigor2860 Series Manuale utente

Lanner electronics

Lanner electronics FW-7650 Series Manuale utente

Swisscom

Swisscom Internet Backup Manuale utente

SonicWALL

SonicWALL NSa 5700 Manuale utente

DPtech

DPtech FW1000 SERIES Manuale utente

FEITIAN

FEITIAN MultiPass FIDO Manuale utente

EBLOCKER

EBLOCKER PRO Manuale utente

GTA

GTA GB-200 Manuale utente

Trend Micro

Trend Micro Deep Edge Manuale utente