Cisco PIX 501 - Security Appliance Manual de usuario

Quick Start Guide

Cisco PIX 501 Firewall Quick Start Guide

For Cisco PIX Firewall Version 6.2 and PDM Version 2.1

1About the Cisco PIX 501 Firewall 2

2Check Items Included 3

3Connect the Cables 4

4Power On the PIX 501 5

5Check the LEDs 6

6(Optional) Install a Cable Lock 7

7Configuring the PIX 501 8

8PDM Startup Wizard 8

9Alternative Ways to Access the PIX 501 10

10 Upgrade to DES, 3DES, or a 50-User License 11

11 Restore the Default Configuration 13

1About the Cisco PIX 501 Firewall

The PIX 501 delivers enterprise-class security for small

offices and telecommuters in a reliable, plug-and-play

security appliance. Ideal for securing high-speed “always

on” broadband environments, the PIX 501, part of the

market-leading Cisco PIX Firewall Series, provides robust

security capabilities, small office networking features, and

powerful remote management capabilities in a compact,

all-in-one solution:

•Stateful inspection security based on state-of-the-art Adaptive Security Algorithm (ASA)

•Supports over 100 predefined applications, services, and protocols for flexible access control

•Virtual Private Networking (VPN) for secure remote network access using IKE/IPSec standards

•Intrusion protection from over 55 different network-based attacks

•URL filtering of outbound web traffic via industry-leading, third-party URL filtering products

•Integrated switch allows multiple users to share a single broadband connection

POWER

VPN TUNNEL

1234

CISCO PIX 501

FIREWALL

ware

eatures

•Compact, desktop chassis

•External power supply

•133-MHz processor

•16-MB RAM, 8-MB Flash memory

•1 10BaseT Ethernet port (half duplex) for an

outside connection to the Internet (port 0)

•Integrated 4-port 10/100-Mbps Ethernet

switch for inside private LAN

(ports 1 through 4)

•Serial console port for administrative access

•Security lock slot for added physical security

•Front panel LEDs for appliance and link

status

•10-Mbps cleartext firewall throughput

•3-Mbps VPN throughput (3DES/SHA1)

tware

eatures

•Supports PIX Firewall version 6.1 (and

higher), a secure, purpose-built embedded

operating system

•Includes plug-and-play default configuration

for simplified installation

•Includes Cisco PIX Device Manager (PDM)

for intuitive, web-based administration of

PIX Firewalls

•Supports up to 10 active hosts (an active

host is one that has passed traffic through

the PIX in the last xlate timeout seconds, or

has reserved an authentication connection);

up to 50 users with optional 50-user license

•Internal DHCP server supports up to

32 DHCP address leases; up to 128 with

optional 50-user license

•Supports up to 5 remote access, or

site-to-site, VPN peers

2Check Items Included

POWER

43210CONSOLE

3.3V 4.5A

PIX 501

Quick Start

Guide

Safety and

Compliance

Guide

PIX 501

PC terminal adapter

(74-0495-01)

Documentation

Cable

(US shown)

(72-0259)

Power supply

(341-0008-01)

Blue console cable

(72-1259-01)

Yellow Ethernet cable

(72-1482-01)

Orange Ethernet

Crossover cable

(72-3515-01)

Cisco PIX

Firewall

Product CD

3Connect the Cables

Follow these steps to connect the cables:

Step 1 Place the chassis on a flat, stable surface. The chassis is not rack mountable.

Step 2 Connect Port 0, the outside Ethernet port, to the public network:

a. Use the yellow Ethernet cable (72-1482-01) to connect the device to a switch or hub.

b. Use the orange Ethernet cable (72-3515-01) to connect the device to a cable/DSL/ISDN

modem.

Step 3 Connect your PC or other network devices with an Ethernet cable (not provided) to one of

the four switched inside ports (numbered 1 through 4).

POWER

43210CONSOLE

3.3V4.5A

Computer or other

network device

Power

adapter

DSL/Cable/ISDN

modem

Orange

Ethernet

cable

Yellow

Ethernet

cable

PIX 501

Internet

61277

ptop computer

Printer

Note Make sure that one of the PCs has TCP/IP installed and is configured to obtain an IP

address automatically through DHCP. This allows the PC to communicate with the

PIX 501 and the Internet as well as run the PDM Startup Wizard.

4Power On the PIX 501

Follow these steps to power on the PIX Firewall:

Step 1 Connect the small, round connector of the power supply cable to the power connector on the

rear panel.

Step 2 Connect the AC power connector of the power supply input cable to an electrical outlet.

Note The PIX 501 does not have a power switch. Completing Step 2 powers on the device.

POWER

43210CONSOLE

3.3V 4.5A

71331

Power supply

Cisco PIX 501

5Check the LEDs

The LINK/ACT LED indicators on the front panel of the PIX Firewall are normally solid green when

a link is established and flashing green when the ports are active. Each inside Ethernet interface

(1 through 4) has two LEDs to indicate the operating speed and that the physical link is established.

Note If all LEDs are operating as expected (see Table 1), this concludes the hardware installation. The

pages that follow include instructions on running PDM and additional optional procedures.

Table 1 PIX 501 LEDs

LED State Description

POWER Green The device is powered on.

Off The device is powered off.

LINK/ACT Flashing

green

Network activity, such as Internet access, is present.

Green The correct cable is in use, and the connected equipment has power.

Off No link is established.

Tip If the LINK/ACT LED does not light up, you might be using the

wrong type of cable. Try replacing the yellow (straight-through)

Ethernet cable with the orange (crossover) Ethernet cable.

VPN TUNNEL Green One or more IKE/IPSec VPN tunnels are active.

Off No VPN tunnels are active. The default configuration does not include

VPN. Thus, the VPN tunnel LED will only be enabled if VPN is added to

your configuration and a VPN tunnel is then established. Also, the LED

does not light up when PPTP/L2TP tunnels are established.

100 MBPS Green The interface is autonegotiated at 100-Mbps half or full duplex.

Flashing

green

The interface is functioning at 10-Mbps half or full duplex.

POWER

VPN TUNNEL

LINK/ACT

100 MBPS

1234

CISCO PIX 501

FIREWALL

61392

6(Optional) Install a Cable Lock

The PIX 501 includes a slot that accepts standard desktop cable locks to provide physical security for

small portable equipment, such as a laptop computer. The cable lock is not included.

Follow these steps to install a cable lock:

Step 1 Attach the cable lock (not included) to the lock slot on the back panel of the PIX 501.

Step 2 Follow the directions from the manufacturer for attaching the other end of the device for

securing the PIX Firewall.

POWER

43210CONSOLE

3.3V 4.5A

61394

Lock slot

Cable lock

(not included)

Cisco PIX 501

7Configuring the PIX 501

The PIX 501 comes with a factory default configuration that meets the needs of most broadband

networking environments. The factory default configuration on the PIX 501 protects your inside

network from any unsolicited traffic. It is configured to use DHCP on the outside interface to acquire its

IP address. A default DHCP server address pool is included for hosts on the inside interface.

PDM contains a Startup Wizard that lets you easily change settings to suit your needs.

Instances in which it might be necessary to change or make additional changes to the default

configuration include the following:

•To create administrative and Telnet passwords

Note We highly recommend that you change the administrative and Telnet passwords from their

default settings to secure the administration of your PIX Firewall.

•To configure Point-to-Point Protocol over Ethernet (PPPoE) or a static IP address for an outside

interface

•To configure VPN and Auto Update features

8PDM Startup Wizard

The PIX 501 contains an integrated configuration

utility called Cisco PIX Device Manager (PDM). PDM

is a web browser-based configuration tool designed to

help you set up, configure, and monitor the

PIX Firewall. PDM is preinstalled on the PIX 501.

To access PDM, make sure JavaScript and Java are

enabled in your web browser. For best performance,

we recommend that you use Microsoft Internet

Explorer 5.5 or a higher release. Refer to the Cisco

PIX Device Manager Installation Guide for more

information on the operating system and Web

browser environments supported by PDM.

PDM version 2.0 and higher releases include a Startup Wizard for initial configuration. Follow these steps

to load PDM and use the Startup Wizard:

Step 1 Use an Ethernet cable to connect your PC to one of the four switched inside ports (numbered

1 through 4) on the rear panel of the PIX Firewall.

Step 2 Configure your PC to use DHCP (to receive an IP address automatically from the

PIX Firewall) or assign a static IP address to your PC by selecting an address out of the

192.168.1.0 network.

Note The inside interface of the PIX Firewall is assigned 192.168.1.1, so choose a different

IP address.

Step 3 Check the LINK LED to verify that your PC has basic connectivity to the PIX Firewall on one

of the inside ports (1 through 4). When connectivity occurs, the LINK LED on the front panel

of the PIX Firewall lights up solid green.

Step 4 To access the Startup Wizard, use a PC connected to one of the PIX Firewall switch ports and enter

the URL https://192.168.1.1/startup.html into your browser.

Note It is very important to enter the “s” in “https://192.168.1.1,” which indicates

a secure connection. If you enter “http://192.168.1.1” without the “s” in

“https,” you cannot access the PIX Firewall.

Step 5 Accept the certificates and follow the instructions in the Startup Wizard. For online help, click

the Help button at the bottom of the Startup Wizard window.

9Alternative Ways to Access the PIX 501

You can use a serial terminal emulator from a PC or workstation connected to the Console port for

local administrative access.

You can also use PDM or a console to configure Telnet access to the PIX Firewall. By default, Telnet

access is not permitted. To Telnet to the PIX Firewall from the outside perimeter of the firewall,

configure an outside IP address and IPSec for a secure Telnet session. For more information, refer to

the Cisco PIX Firewall and VPN Configuration Guide.

Follow these steps to connect a console for local administrative access:

Step 1 Plug one end of the console cable adapter (29-0810-01) into a standard 9-pin PC serial port.

Step 2 Plug one end of the blue console cable (72-1259-01) into the console cable adapter.

Step 3 Plug the other end of the blue console cable into the Console port.

Step 4 Configure the PC terminal emulation software or terminal for 9600 baud, 8 data bits, no

parity, and 1 stop bit.

Refer to the Cisco PIX Firewall and VPN Configuration Guide for information about how to use the

command-line interface (CLI).

61391

POWER

43210CONSOLE

3.3V 4.5A

PC terminal adapter

(74-0495-01)

Blue console cable Cisco PIX 501

Otros manuales para PIX 501 - Security Appliance

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Cortafuegos de Cisco

Cisco

Cisco ASA 5580 Manual de usuario

Cisco

Cisco Firepower 9300 Manual

Cisco

Cisco ASA 5506-X Guía de inicio rápido

Cisco

Cisco Firepower 3500 Documento técnico

Cisco

Cisco ASA 5585-X Manual de usuario

Cisco

Cisco S190 Manual de usuario

Cisco

Cisco Firepower 1010 Manual

Cisco

Cisco Firepower 1100 Manual de usuario

Cisco

Cisco PIX 501 Manual de usuario

Cisco

Cisco Firepower 4100 Series Manual de usuario

Cisco

Cisco 515E - PIX Restricted Bundle Manual de usuario

Cisco

Cisco Firepower 2120 Manual

Cisco

Cisco PIX 506 - Firewall Manual de usuario

Cisco

Cisco Meraki MX64 Manual de usuario

Cisco

Cisco ASA 5550 Series Manual de usuario

Cisco

Cisco Firepower 7010, Firepower 7020, Firepower 7030, Firepower 7050, Firepower 7110, Firepower 7120, Firepower 7115, Firepower... Manual de usuario

Cisco

Cisco PIX 501 Manual

Cisco

Cisco Firepower 2100 Manual de usuario

Cisco

Cisco FMC 1600 Manual

Cisco

Cisco PIX 506E - Security Appliance Manual de usuario

Cisco

Cisco Small Business RV215W Manual de usuario

Cisco

Cisco Firepower 2100 Series Manual de usuario

Cisco

Cisco RV120W Manual de usuario

Cisco

Cisco Firepower 4110 Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario