ASA 5585-X part numbers & licensing?

andrew.butterworth · ‎09-29-2011

I am struggling trying to decypher the part numbers for the ASA 5585-X.

I have never installed one of these so don't physically know how it all bolts together (other than the hardware guide on CCO). As far as I can tell its a 2-slot chassis and in slot 0 you have your SSP module (SSP-10, SSP-40 or SSP-60). In slot 1 you can have another SSP of the same type or an IPS-SSP of the same type - i.e. SSP-40 in slot 1 and either another SSP40 or an IPS-SSP-40. What I don't understand is the part numbers:

ASA5585-S40P40-K9 is desribed as 'Cisco ASA 5585-X IPS Edition SSP-40 IPS SSP-40 bundle includes firewall services, 6 Gigabit Ethernet interfaces, 4 10 Gigabit Ethernet SFP+ interfaces, 2 Gigabit Ethernet management interfaces,10,000 IPsec VPN peers, 2 Premium VPN peers, dual AC power, 3DES/AES license'

Surely this has both an SSP-40 and an IPS-SSP-40 so should have 12 * 10/100/1000 interfaces and 8 * 10GB SFP+ slots?

ASA5585-S40P40SK9 is described as 'Cisco ASA 5585-X Integrated Edition SSP-40 IPS SSP-40 Bundle with firewall services, IPS services, 10,000 IPsec VPN peers, 10,000 Premium VPN peers, 12 Gigabit Ethernet interfaces, 8 10 Gigabit Ethernet SFP+ interfaces, 4 management interfaces, 3DES/AES license'

Is this physically the same hardware with a different license enabling all the ports or am I missing something?

Cheers

Andy

Fawadnoorkhan_2 · ‎09-30-2011

in Slot1, you can only have an IPS module. In slot 0 you can only have Firewall module.... Both the firewall and IPS modules must be matching like SSP40 should have ips-ssp-40.... but you cannot have two SSP40 in slot0 and slot1.

This is from experience and several discussions with Cisco SEs.

andrew.butterworth · ‎10-03-2011

Hi and thanks for the response. Unfortunately this doesn't answer my question.

I need to know what part numbers I need to specify to get me 12 * Gigabit Ethernet interfaces and at least 2 * 10GB interfaces.

I am sure this is a simple request and there is a fundamental piece of information I am missing here?

Andy

Fawadnoorkhan_2 · ‎10-03-2011

you need at least SSP-10 and IPS SSP-10 to to thave kind of functionality. This will give you 16 *Gig and 4* tenG interfaces. I think ASA5585-S10X-K9 and ASA5585-S10P10XK9 would do the trick for you. Dont bet on this information, you may want to check with your Csico Accoutn rep or SE for confirmation.

In addition do check the following Video data sheet for valueable information.

http://tools.cisco.com/search/display?url=http%3A%2F%2Fwww.cisco.com%2Fen%2FUS%2Fpartner%2Fprod%2Fcollateral%2Fvpndevc%2Fps6032%2Fps6094%2Fps6120%2Fvds_asa_5585x.html&pos=3&strqueryid=1&websessionid=MkAbAhV1E5bNpMrno05u5fY

This presentation is good as well.

http://www.google.com/url?q=http://tucson.issa.org/Doc/Presentation%2520-%2520ASA%25205585-X.pdf&sa=U&ei=3L-JToudHor50gHBr7jdDw&ved=0CBIQFjAA&usg=AFQjCNGek0mLsoZ5TT1xrgWXMe93_6V-jw