background image

C H A P T E R

5-1

Cisco PIX Security Appliance Hardware Installation Guide

78-15170-02

5

PIX 520

This chapter guides you through the installation of the PIX 520, and includes the following sections:

PIX 520 Product Overview, page 5-1

Installing the PIX 520, page 5-4

PIX 520 Feature Licenses, page 5-6

Installing Failover, page 5-7

Installing LAN-Based Failover, page 5-8

Removing and Replacing the PIX 520 Chassis Cover, page 5-10

Replacing a Lithium Battery, page 5-12

Installing a Memory Upgrade, page 5-12

Installing a Circuit Board in the PIX 520, page 5-15

Installing the PIX 520 DC Model, page 5-21

PIX 520 Product Overview

This section describes the PIX 520 front and rear panels and the panel LEDs.

Figure 5-1

 shows the front view of the PIX 520.

Figure 5-1

PIX 520 Front Panel

PIX Firewall

SERIES

RESET

67852

Summary of Contents for PIX 520

Page 1: ...alling Failover page 5 7 Installing LAN Based Failover page 5 8 Removing and Replacing the PIX 520 Chassis Cover page 5 10 Replacing a Lithium Battery page 5 12 Installing a Memory Upgrade page 5 12 Installing a Circuit Board in the PIX 520 page 5 15 Installing the PIX 520 DC Model page 5 21 PIX 520 Product Overview This section describes the PIX 520 front and rear panels and the panel LEDs Figure...

Page 2: ...ernet circuit board are numbered top to bottom sequentially however the actual device number depends on the slot in which the four port Ethernet circuit board is installed Table 5 1 describes how the top connector is numbered With the four port Ethernet circuit board having a circuit board in slot 3 makes the number of interfaces greater than six while the circuit board in slot 3 cannot be accesse...

Page 3: ... Figure 5 4 Single Port Ethernet Circuit Board Installed in Slot 0 and Four Port Ethernet Circuit Board Installed in Slot 1 Figure 5 5 shows how the slots are numbered if single port Ethernet circuit boards are installed in slot 0 and in slot 1 and a four port Ethernet circuit board is inserted in slot 2 Figure 5 5 Single Port Ethernet Circuit Board Installed in Slot 0 and 1 and Four Port Ethernet...

Page 4: ...the front of the unit PIX FirewallSERIES RESET Auto Range Selection L 90 135V H 180 270V Power connector DC power connector Slots for network interfaces Front Rear Power switch Power switch Ground lugs Diskette compartment Right side Left side Fan duct Holes to connect rackmount slide rails must be purchased separately from outside vendor AC DC Failover connector Console connector Insert PIX secur...

Page 5: ...nnector as shown in Figure 5 8 Step 2 Install the serial cable between the PIX security appliance and your console computer Figure 5 8 PIX Security Appliance Serial Cable Assembly Step 3 Connect one of the DB 9 serial connectors to the console connector on the front panel of the PIX security appliance Step 4 Connect one end of the RJ 45 null modem cable to the DB 9 connector Step 5 If you are inst...

Page 6: ...figuration guide online at http www cisco com en US docs security pix pix63 configuration guide config html Always check the release notes first before configuring the PIX security appliance for the latest release details You can find the latest versions of release notes online at http preview cisco com en US products sw secursw ps2120 prod_release_notes_list html PIX 520 Feature Licenses If you h...

Page 7: ... first PIX security appliance unit that is the one you have already configured Step 4 Connect the Secondary end of the Failover cable to the standby unit Step 5 Connect a power cord to the power connector on the rear panel of each unit and the other end of each power cord to preferably separate power outlets Step 6 If you are using Stateful Failover use one of the following types of connections th...

Page 8: ...ation guide online at http www cisco com en US docs security pix pix63 configuration guide config html Note Both chassis must be the same model number have the same amount of RAM Flash memory number and type of interfaces and be running the same software version To set up a LAN based failover connection perform the following steps Step 1 Disconnect both the PIX security appliances so that there is...

Page 9: ...dicated switch or dedicated VLAN of a switch Note For Stateful Failover on the PIX 520 if you have Gigabit Ethernet GE interfaces then the failover link must be GE Caution Do not turn the power on until the units are connected and the primary unit is configured completely Step 6 Power the primary unit on first then power on the secondary unit Within a few seconds the active unit automatically down...

Page 10: ...y appliance case does not affect your Cisco warranty Upgrading the PIX security appliance does not require any special tools and does not create any radio frequency leaks Step 1 Read the Regulatory Compliance and Safety Information document Step 2 Ensure that the PIX security appliance is powered off Unplug the power cord from the power outlet Once the upgrade is complete you can safely reconnect ...

Page 11: ...ts without the chassis cover installed The chassis cover protects the internal components prevents electrical shorts and provides proper air flow for cooling the electronic components To replace the chassis cover perform the following steps Step 1 Replace the chassis cover as shown in Figure 5 13 Step 2 Secure the three screws Step 3 Reinstall all interface cables Figure 5 13 Replacing the Chassis...

Page 12: ...dditional PIX security appliance system memory The following statement applies to DC models Warning Before performing any of the following procedures ensure that power is removed from the DC circuit To ensure that all power is OFF locate the circuit breaker on the panel board that services the DC circuit switch the circuit breaker to the OFF position and tape the switch handle of the circuit break...

Page 13: ... 4 Use the markings on the motherboard to determine the socket numbers Always install the first memory strip into the lowest socket number Progressively add memory boards into higher numbered sockets Figure 5 14 PIX 520 System Memory Location Step 5 Locate the wrist grounding strap in the accessory kit and connect one end to the unit as shown in Figure 5 17 or to the PIX security appliance chassis...

Page 14: ...cover on the chassis Reattach the screws If desired rack mount the PIX security appliance and attach all cables and cords as discussed in previous sections After the PIX security appliance is installed you can view the amount of RAM memory in the system startup messages or with the show version command in the command reference online at http cisco com en US products sw secursw ps2120 prod_command_...

Page 15: ...ach port Retains bus performance when installed with other 66 MHz devices Does not support auto MDI MDIX operation This section includes the following topics 16 MB Flash Circuit Board page 5 18 VPN Accelerator Circuit Board page 5 19 Gigabit Ethernet Circuit Board page 5 20 Installing the PIX 520 DC Model page 5 21 To install a circuit board in the PIX 520 perform the following steps Step 1 Locate...

Page 16: ... 3 Figure 5 19 displays how the circuit boards are numbered according to their position If you have Version 4 4 and a four port Ethernet circuit board refer to the PIX 520 Product Overview section on page 5 1 Note When adding a network interface or encryption circuit board install the new circuit board in the first empty slot to the right of the existing network interface circuit board Figure 5 19...

Page 17: ...ling a Circuit Board in the PIX 520 Step 4 If you are installing a 4 port circuit board note that the circuit board will overlap the slot connector on the motherboard This does not affect the use or operation of the circuit board See Figure 5 20 Figure 5 20 4 Port Circuit Board Overlap 27884 Overlap ...

Page 18: ...sh Circuit Board Use the following information to install a 16 MB Flash circuit board The PIX security appliance must have a minimum of 32 MB of RAM memory You must obtain a new activation key if you will be using 3DES The PIX security appliance should not be downgraded to a software revision lower than 5 0 3 after the new software from the 16 MB circuit board is installed If you downgrade from so...

Page 19: ...stalled Flash memory circuit boards from the unit Caution Do not remove or reposition the 16 MB Flash circuit board The PIX security appliance will not work if this jumper is moved Step 6 Install the 16 MB Flash circuit board into an available ISA slot in the PIX security appliance chassis VPN Accelerator Circuit Board The VPN Accelerator PIX VPN ACCEL is an encryption and accelerator circuit boar...

Page 20: ...wn in Figure 5 22 Figure 5 22 VPN Accelerator Circuit Board Gigabit Ethernet Circuit Board PIX security appliance supports 1000 Mbps Gigabit Ethernet The Gigabit Ethernet circuit board uses only has one hardware speed and the following duplex options 1000SXfull Forces full duplex operation 1000BaseSX Forces half duplex operation 1000auto Auto negotiates full or half duplex 61921 ...

Page 21: ...moved from the DC circuit To ensure that all power is OFF locate the circuit breaker on the panel board that services the DC circuit switch the circuit breaker to the OFF position and tape the switch handle of the circuit breaker in the OFF position To install the PIX 520 DC power model perform the following steps Step 1 Read the Regulatory Compliance and Safety Information document Step 2 Termina...

Page 22: ...rity Appliance Step 5 Ensure that power is removed from the DC circuit To ensure that all power is OFF locate the circuit breaker on the panel board that services the DC circuit switch the circuit breaker to the OFF position and tape the switch handle of the circuit breaker in the OFF position Step 6 Strip the ends of the wires for insertion into the power connect lugs on the PIX 520 Step 7 Insert...

Page 23: ...ving the handle of the circuit breaker to the ON position Step 9 Insert the PIX 520 system diskette in the drive at the front of the unit Step 10 If needed install the interface boards as described in the Installing a Circuit Board in the PIX 520 section on page 5 15 Step 11 Power on the unit from the switch at the rear of the unit Note If you need to power cycle the DC PIX security appliance wait...

Page 24: ...5 24 Cisco PIX Security Appliance Hardware Installation Guide 78 15170 02 Chapter 5 PIX 520 Installing the PIX 520 DC Model ...

Reviews: