hit counter script
Download
Share
Print this page
Cisco ASA 5505 Quick Start Manual
  1. Manuals
  2. Brands
  3. Cisco Manuals
  4. Firewall
  5. 5505 - ASA Firewall Edition Bundle
  6. Quick start manual

Cisco ASA 5505 Quick Start Manual

Adaptive security appliance
Hide thumbs Also See for ASA 5505:
1
2

Advertisement

Quick Links

Download this manual See also: Administrator's Manual, Installation Manual
Enlarged version
Before you install the Cisco ASA 5505 Adaptive Security Appliance, please read the Regulatory Compliance and Safety Information
for the Cisco ASA 5500 Series Adaptive Security Appliance document on Cisco.com or in the product CD that ships with the chassis.

1. Verifying the Package Contents

Secu rity
POW ER
Serv ices
48
VDC
Card Slot
CON SOLE
7
POWE R
over ETHE
RNET
6
5
4
1
3
2
1
Cisco ASA 5505
0
2
RESE T
Power supply adapter
Yellow Ethernet cable
Power cable
(US shown)
Documentation
3. Powering on and Verifying Interface Connectivity
Step 1 Connect the power supply adaptor to the power cable.
Step 2 Connect the rectangular connector of the power supply adaptor to the power connector on the rear panel of the adaptive security
appliance.
Step 3 Connect the AC power connector of the power cable to an electrical outlet. (The adaptive security appliance does not have a
power switch. Completing this step powers on the device.)
Step 4 Check the Power LED on the front of the adaptive security appliance; if it is solid green, the device is powered on.
Step 5 If you connected a PC to the adaptive security appliance to run ASDM, restart the PC. (The PC obtains a dynamic IP address
from the adaptive security appliance and must be restarted.)
Step 6 Check the LINK/ACT indicators to verify interface connectivity.
Interface Connectivity
Each Ethernet interface has an LED to indicate a physical link is established. When the LED is solid green, a link is established. When
the LED is flashing green, there is network activity.
LINK/ACT Indicator
Power Indicator
LINK/ACT
Power
Status
100 MBPS
0
0
0
0
0
0
0
0
Cisco ASA 5505 series
Adaptive Security Appliance
0
If a LINK/ACT LED is not lit, the link could be down due to a duplex mismatch. If auto-negotiation is disabled, verify you are using
a straight-through Ethernet cable.
For a description of all chassis components, see the Cisco ASA 5500 Series Hardware Installation Guide on the product CD or
Cisco.com.
5. Launching ASDM (Adaptive Security Device Manager)
Step 1 On the PC connected to the adaptive security appliance, launch a web browser. (Verify that Java and JavaScript are enabled in
your web browser. See "Requirements for Running ASDM" for information.)
Step 2 In the Address field, enter the following URL: https://192.168.1.1/admin. The Cisco ASDM web page appears.
Step 3 Click Run Startup Wizard.
Step 4 Click Yes in each dialog box to accept the certificates. The Cisco ASDM-IDM Launcher appears.
Step 5 Leave the username and password fields empty and click OK.
The main ASDM window appears and the Startup Wizard opens. See "6. Running the Startup Wizard in ASDM."
Blue console cable
Active
VPN
SSC
2. Installing the Chassis
The adaptive security appliance ships with a default configuration that includes two preconfigured networks (the Inside network and
the Outside network) and an Inside interface configured with dynamic addressing. Clients on the Inside network obtain a dynamic IP
address from the adaptive security appliance so that they can communicate with each other as well as with devices on the Internet.
Step 1 Connect one end of a yellow straight-through Ethernet cable to port 0 on the adaptive security appliance. (By default, switch
port 0 is the Outside interface.) Connect the other end to a cable/DSL/ISDN modem (the Outside network).
Step 2 Connect your devices (such as PCs, printers, and servers) with straight-through Ethernet cables to ports 1 through 7.
Note Connect a PC to the adaptive security appliance so that you can run Adaptive Security Device Manager (ASDM). See "4.
Initial Configuration Considerations."
Step 3 Connect PoE devices (such as Cisco IP Phones or network cameras) with straight-through Ethernet cables to switch ports 6 or
7 (the only ports providing power to PoE devices).
Inside Network
Ports 1 − 7
Port 0
Inside Network Interfaces
Outside Network Interface
Security
Services
Console
Card Slot
POWER
2
48
VDC
1
7
POWER over ETHERNET
6
5
4
3
2
1
0
3
2
Cisco IP Phone
Web Server
PC
If you connect a server (such as a web server) to the adaptive security appliance, you can use ASDM to make services on that server
accessible by internal and external users. See "7. (Optional) Making Internal Services Accessible from the Internet."
4. Initial Configuration Considerations
The adaptive security appliance ships with a default configuration that, in most cases, is sufficient for your basic deployment. You
configure the adaptive security appliance by using Adaptive Security Device Manager (ASDM). ASDM is a graphical interface that allows
you to manage the adaptive security appliance from any location by using a web browser.
However, changing certain settings is recommended or required. For example, you should change the following settings from their
defaults:
• The privileged mode (enable) password that is required to administer the adaptive security appliance through ASDM and the CLI
• When using the adaptive security appliance as a VPN endpoint (using the SSL VPN features):
The hostname, domain name, and DNS server names
–
Setting a static Outside interface IP address
–
Creating an identity certificate
–
Configuring WINS names when access to Windows file shares is required
–
Use the Start up Wizard in ASDM to make these changes. See "6. Running the Startup Wizard in ASDM."
Requirements for Running ASDM
The PC connected to the adaptive security appliance must meet the following requirements to run ASDM.
Operating System and Version
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2003 Server (English or Japanese)
Microsoft Windows 2000 (Service Pack 4 or higher)
®
Apple Macintosh
OS X
Red Hat Linux Desktop
Red Hat Enterprise Linux WS version 4 running
GNOME or KDE
.
1. Obtain Sun Java from
java.sun.com
2. With Apple Macintosh, only 32-bit Java SE will be supported. Currently, this also excludes Java 6. The 32-bit Java can run on a 64-bit Mac OS.
6. Running the Startup Wizard in ASDM
Run the Startup Wizard to modify the default configuration so that you can customize the security policy to suit your deployment.
What you set:
• Hostname
• Domain name
• Administrative
passwords
• IP address of
Outside interface
• Interfaces, such as
DMZ interfaces
• Address translation rules
• Dynamic IP address
settings for Inside interface
To run the Startup Wizard:
Step 1 In the main ASDM window, choose Wizards > Startup Wizard.
Step 2 Follow the instructions in the Startup Wizard to configure your adaptive security appliance.
If you get an error when launching the wizard requesting a DES license or a 3DES-AES license or you want to review your license
information, choose Configuration > Device Management > Licensing.
Step 3 While running the wizard, you can accept the default settings or change them as required. (For information about any wizard
field, click Help in the window.)
After running the Startup Wizard, you can run other wizards to configure remote access with the adaptive security appliance. See "8.
(Optional) Running the IPsec VPN Wizard in ASDM" and "9. (Optional) Running the SSL VPN Wizard in ASDM."
Outside Network
RESET
Internet
1
ISP Connection
Browser
1
Internet Explorer 6.0 or higher with Sun Java (JRE)
Firefox 1.5 or higher with Sun Java (JRE) 5.0 (1.5) or 6.0
Firefox 1.5 or 2.0 or Safari 2.0 with Java SE Plug-in 1.4.2, 5.0 (1.5.0), or
2
6.0
Firefox 1.5 or higher with Sun Java (JRE) 5.0 (1.5) or 6.0
5.0 (1.5) or 6.0

Advertisement

loading

Related Manuals for Cisco ASA 5505

Summary of Contents for Cisco ASA 5505

  • Page 1: Verifying The Package Contents

    2. Installing the Chassis for the Cisco ASA 5500 Series Adaptive Security Appliance document on Cisco.com or in the product CD that ships with the chassis. The adaptive security appliance ships with a default configuration that includes two preconfigured networks (the Inside network and the Outside network) and an Inside interface configured with dynamic addressing.
  • Page 2 Cisco and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.