Cisco PIX 501 Manual de usuario

Quick Start Guide

Cisco PIX 501 Firewall Quick Start Guide,

Version 6.1

1Check Items Included 3

2Connect the Cables 4

3Power On the PIX 501 5

4Check the LEDs 6

5(Optional) Install a Cable Lock 7

6(Optional) Configuration Changes 8

AbouttheCiscoPIX501Firewall

The Cisco PIX 501 Firewall delivers enterprise-class

security for small offices and telecommuters in a

reliable, plug-and-play security appliance. Ideal for

securing high-speed “always on” broadband

environments, the Cisco PIX 501 Firewall, part of the

market-leading Cisco PIX Firewall Series, provides

robust security capabilities, small office networking

features, and powerful remote management capabilities in a compact, all-in-one solution:

•Stateful inspection security based on state-of-the-art Adaptive Security Algorithm (ASA)

•Supports over 100 predefined applications, services, and protocols for flexible access control

•Virtual Private Networking (VPN) for secure remote network access using IKE/IPSec standards

•Intrusion protection from over 55 different network-based attacks

•URL filtering of outbound web traffic via Websense server support

•Integrated switch allows multiple users to share a single broadband connection

POWER

VPNTUNNEL

LINK/ACT

100 MBPS

1234

CISCO PIX 501

FIREWALL

Hardware Features

•Compact, desktop chassis

•External power supply

•133-MHz processor

•16-MB RAM, 8-MB Flash memory

•1 10BaseT Ethernet port (half duplex) for an

outside connection to the Internet (port 0)

•Integrated 4-port 10/100-Mbps Ethernet

switch for inside private LAN (ports 1

through 4)

•Serial console port for administrative access

•Security lock slot for added physical security

•Front panel LEDs for appliance and link

status

•10-Mbps cleartext firewall throughput

•3-Mbps VPN throughput (3DES/SHA1)

Software Features

•Supports PIX Firewall OS version 6.2 (and

later), a secure, purpose-built embedded

operating system

•Includesplug-and-playdefaultconfiguration

for simplified installation

•Includes Cisco PIX Device Manager (PDM)

for intuitive, web-based administration of

PIX Firewalls

•Supports up to 10 active hosts (an active

host is one that has passed traffic within 30

seconds, or has reserved an authentication

connection); up to 50 users with optional

50-user license

•Internal DHCP server supports up to

32 DHCP address leases; up to 128 with

optional 50-user license

•Supports 56-bit DES and 168-bit 3DES, with

tional licenses

1Check Items Included

POWER

43210CONSOLE 3.3V 4.5A

PIX 501

Quick Start

Guide

Safety and

Compliance

Guide

PIX 501

(800-17211-01)

PC terminal adapter

(74-0495-01)

Documentation

Power supply and cable

(US shown) (34-1776-01)

Blue console cable

(72-1259-01)

Yellow Ethernet cable

(72-1482-01)

Orange Ethernet cable

(72-3515-01)

Documentation

CD-ROM

2Connect the Cables

To connect the cables:

Step 1 Place the chassis on a flat, stable surface. The chassis is not rack mountable.

Step 2 Connect Port 0, the outside Ethernet port, to the public network:

•Use the yellow Ethernet cable (72-1482-01) to connect the device to a switch or hub.

•Use the orange Ethernet cable (72-3515-01) to connect the device to a DSL modem, cable

modem, or router.

Step 3 Connect your PC orother network devices to one of the four switched inside ports (numbered

1 through 4).

POWER

43210CONSOLE

3.3V4.5A

Computer or other

network device

Power

adapter

DSL/Cable/ISDN

modem

Orange

Ethernet

cable

Yellow

Ethernet

cable

PIX 501

Internet

61277

ptop computer Printer

3Power On the PIX 501

To power on the PIX 501:

Step 1 Connect the small, round connector of the power supply cable to the power connector on the

rear panel.

Step 2 Connect the AC power connector of the power supply input cable to an electrical outlet.

Note The PIX 501 does not have a power switch. Completing Step 2 powers on the

PIX 501.

POWER

43210CONSOLE

3.3V4.5A

60974

Power supply

4Check the LEDs

The LINK/ACT LED indicators on the front panel of the PIX 501 are normally solid green when a

link is established and flashing green when the ports are active. Each inside Ethernet interface

(1 through 4) has two LEDs to indicate the operating speed and that the physical link is established.

Note If all LEDs are operating as expected (see Table 1), this concludes the PIX 501

installation. The pages that follow include additional optional procedures.

Table 1 PIX 501 LEDs

LED State Description

POWER Green The device is powered on.

Off The device is powered off.

LINK/ACT Flashing

green Network activity, such as Internet access, is present.

Green The correct cable is in use, and the connected equipment has power.

Off No link is established.

Tip If the LINK/ACT LED does not light up, you might be

using the wrong type of cable. Try replacing the yellow

(straight-through) Ethernet cable with the orange (crossover)

Ethernet cable.

VPN TUNNEL Green One or more IKE/IPSec VPN tunnels are active.

Off No VPN tunnels are active. If the default configuration has not been

modified to support IKE/IPSec VPN tunnels, the LED does not light up

because it is disabled by default. Also, the LED does not light up when

PPTP/L2TP tunnels are established.

100 MBPS Green The interface is enabled at 100-Mbps half or full duplex

(autonegotiated).

Off The interface is enabled at 10-Mbps half or full duplex.

POWER

VPN TUNNEL

LINK/ACT

100 MBPS

1234

CISCO PIX 501

FIREWALL

61392

5(Optional) Install a Cable Lock

The PIX 501 includes a slot that accepts standard desktop cable locks to provide physical security for

small portable equipment, such as a laptop computer. The cable lock is not included with the PIX 501.

To install a cable lock:

Step 1 Attach the cable lock (not included) to the lock slot on the back panel of the PIX 501.

Step 2 Follow the directions from the manufacturer for attaching the other end of the device for

securing the PIX 501.

POWER

43210CONSOLE

3.3V4.5A

61394

Lock slot

Cable lock

(

not included

)

Cisco PIX 501

6(Optional) Configuration Changes

The PIX 501 is manufactured with a default configuration that meets the needs of most broadband

networking environments. The default configuration enables a DHCP client on the outside interface

and a DHCP server with a predefined IP address pool on the inside interface. For most users,

additional configuration of the PIX 501 is not necessary.

There are only a few instances when it might be necessary to change the default configuration:

•To create administrative and Telnet passwords

•To configure a static IP address for an outside interface

•To upgrade to a DES or 3DES encryption software license

•To upgrade the user license from 10 to 50 users

•To restore the default configuration

Administrative Access

There are three ways to modify the default configuration:

•PDM—Use a web browser to run PDM.

•Console—Use a serial terminal emulator from a PC or workstation connected to the Console port

for local administrative access.

•Telnet—Use PDM or a console to configure Telnet access to the PIX 501. By default, Telnet access

is not permitted. To Telnet to the PIX 501 from the outside perimeter of the firewall, configure an

outside IP address and IPSec for a secure Telnet session. For more information, refer to the

Cisco PIX Firewall and VPN Configuration Guide.

PDM

PDM is a web browser-based configuration tool

designed to help you set up, configure, and monitor

the PIX Firewallby use of a graphicaluser interface

(GUI). PDM is installed on the PIX 501 before it

ships to you. To use PDM, make sure JavaScript and

Java are enabled in your web browser. Then use

your web browser to create a Secure HTTP

(HTTPS), encrypted and keyed, connection to the

PIX501.For best performance,we recommend that

you use Microsoft Internet Explorer 5.0 (Service

Pack 1) or a later release. Refer to the Cisco PIX

Device Manager Installation Guide for more

information on operating system and web browser environments supported by PDM.

To load PDM:

Step 1 Verify that your PC has basic connectivity to the PIX 501 on one of the inside ports (1 through

4) using the LINK LEDs. When connectivity occurs, the LINK LEDs on both your PC and the

PIX 501 port light up solid green.

Step 2 Use your web browser to create an HTTPS connection to the inside

IP address of your PIX 501. If you are using the default configuration

and have not changed it, the inside IP address is 192.168.1.1. PDM begins to load.

Step 3 When prompted for a password, press Enter and PDM completes the loading process.

Connect a Console

To connect a console for local administrative access:

Step 1 Plug one end of the console cable adapter (29-0810-01) into a standard 9-pin PC serial port.

Step 2 Plug one end of the blue console cable (72-1259-01) into the console cable adapter.

Step 3 Plug the other end of the blue console cable into the Console port of the PIX 501.

Step 4 Configure the PC terminal emulation software or terminal for 9600 baud, 8 data bits, no

parity, and 1 stop bit.

Refer to the Cisco PIX Firewall and VPN Configuration Guide for information about how to use the

command-line interface (CLI).

61391

POWER

43210CONSOLE

3.3V4.5A

PC terminal adapter

(74-0495-01)

Blue console cable Cisco PIX 501

Otros manuales para PIX 501

Tabla de contenidos

Otros manuales de Cortafuegos de Cisco

Cisco

Cisco PIX 501 - Security Appliance Manual de usuario

Cisco

Cisco Firepower 4100 Series Manual de usuario

Cisco

Cisco RV110W Manual de usuario

Cisco

Cisco Firepower 2100 Series Manual de usuario

Cisco

Cisco S195 Manual

Cisco

Cisco ASA 5506-X Manual de usuario

Cisco

Cisco 3100 Series Manual

Cisco

Cisco PIX 501 Manual

Cisco

Cisco M170 Manual de usuario

Cisco

Cisco Firepower 4100 Series Manual

Cisco

Cisco Firepower 4100 Series Manual de instalación y operación

Cisco

Cisco RV110W Manual de usuario

Cisco

Cisco ASA 5508-X Manual de usuario

Cisco

Cisco PIX 501 Manual de usuario

Cisco

Cisco ISA3000-4C-K9 Manual

Cisco

Cisco IronPort M1070 Manual de usuario

Cisco

Cisco TelePresence Server 7010 Manual de usuario

Cisco

Cisco Firepower 1600 Manual

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual

Cisco

Cisco FirePOWER 7000 Manual de usuario

Cisco

Cisco Small Business RV215W Manual de usuario

Cisco

Cisco PIX 506E - Security Appliance Manual de usuario

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario

Cisco

Cisco Cisco ASA 5500 Series Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario