If you are new users of Cisco ASA 5500-X Series Next-Generation Firewalls, are you familiar with the ASA 5500-X Series configuration? There are different Cisco ASA CX models available in a wide range of sizes, for small offices, branch locations, and Internet-edge deployments.
In this article, we will share the simple start guide of Cisco ASA 5500-X Series, including the model ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X.
First of all, let’s check the main package contents of ASA 5512-X, ASA 5515-X, or ASA 5525-X, ASA 5545-X and ASA 5555-X.
ASA 5512-X, ASA 5515-X, or ASA 5525-X
ASA 5545-X and ASA 5555-X
Note: The contents are subject to change, and your exact contents might contain additional or fewer items.
Power on the ASA
The power turns on automatically when you plug in the power cable; do not press the power button on the front panel. (For older models, the power does not turn on automatically; check the hardware installation guide for more information).
3. Check the Status LED on the front of the ASA; after it is solid green, the system has passed power-on diagnostics.
Modify the Initial Configuration for the Software Module (Optional)
The ASA ships with a default configuration that enables Adaptive Security Device Manager (ASDM) connectivity to the Management 0/0 interface. When you use a software module such as the ASA FirePOWER module, we recommend that you do not use the default configuration, which can preclude the module from reaching the Internet for updates. This section describes how to apply a new configuration so the module can access the Internet. This configuration also enables a basic usable configuration for an inside and outside network.
The following figure shows the suggested network deployment for the ASA 5500-X with a software module:
Note: If you have an inside router instead of a switch, you can skip this section and instead configure the ASA to route between management and an inside network. In this case, configure the ASA and the module Management 0/0 IP addresses to be on the same network. Be sure to configure appropriate routes on the ASA and on the module so the management network can reach the inside network, and vice versa.
This procedure lets you connect to the ASA console port and paste in a new configuration that configures the following behavior:
- inside --> outside traffic flow
- outside IP address from DHCP
- DHCP for clients on inside
- Management 0/0 interface is Up, but otherwise unconfigured. The software module can then use this interface to access the ASA inside network and use the inside interface as the gateway to the Internet.
- ASDM access on the inside interface
To achieve the above configuration, perform the following steps.
1. Connect your computer to the ASA console port with the supplied console cable. You might need to use a third party serial-to-USB cable to make the connection.
10. Cable the inside GigabitEthernet 0/1 interface, Management 0/0 interface, and your computer to a Layer 2 Ethernet switch.
12. For software module configuration, see the ASA FirePOWER quick start guide, ASA CX quick start guide, or IPS quick start guide. Use the following network settings for the module:
4. Launch ASDM
Using ASDM, you can use wizards to configure basic and advanced features. ASDM is a graphical user interface that allows you to manage the ASA using a web browser. See the ASDM release notes on Cisco.com for the requirements to run ASDM.
1. On the computer connected to the ASA, launch a web browser. If you are using the default configuration and did not use 3. Modify the Initial Configuration for the Software Module (Optional), you need to connect the computer to the Management 0/0 interface.
2. In the Address field, enter the following URL: https://192.168.1.1/admin. The Cisco ASDM web page appears.
ASDM-IDM Launcher appears.
The Full Cisco ASA 5500-X Series Start Guide you can read the http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/5500X/5500x_quick_start.html