Cisco PIX 506 - Firewall Manual de usuario
Quick Start Guide
Cisco PIX 506/506E Firewall
Quick Start Guide
For Cisco PIX Firewall Version 6.2 and PDM Version 2.0
1About the Cisco PIX 506/506E Firewall 2
2Check Items Included 3
3Connect the Cables 4
4Power On the PIX 506/506E 5
5Check the LEDs 6
6Configuring the PIX 506/506E 7
7PDM Startup Wizard 8
8Alternative Ways to Access the PIX 506/506E 10
9Upgrade to DES or 3DES 11
10 Restore the Default Configuration 12
2
1About the Cisco PIX 506/506E
Firewall
The PIX 506/506E delivers enterprise-class security for
remote office/branch office environments in a robust,
reliable security appliance. Ideal for securing Internet
connections for remote/branch offices, the PIX 506/506E,
part of the market-leading Cisco PIX Firewall Series,
provides a wide range of rich security capabilities and
remote management capabilities in a cost-effective,
high-performance solution:
•Stateful inspection security based on state-of-the-art Adaptive Security Algorithm (ASA)
•Supports over 100 predefined applications, services, and protocols for flexible access control
•Virtual Private Networking (VPN) for secure remote network access using IKE/IPSec standards
•Intrusion protection from over 55 different network-based attacks
•URL filtering of outbound web traffic via industry-leading, third-party URL filtering products
POWER
ACT NETWORK
CISCO PIX 506E
FIREWALL
H
ar
d
ware
F
eatures
•External power supply
•200-MHz (PIX 506)/300-MHz (PIX 506E)
processor
•32-MB RAM, 8-MB Flash memory
•1 autosensing 10BaseT Ethernet port for an
outside connection to the Internet (port 0)
•1 autosensing 10BaseT Ethernet port for a
connection to your internal network
•Serial console port for administrative access
•Front panel LEDs for appliance and link
status
•20-Mbps cleartext firewall throughput
•10 Mbps (PIX 506)/16 Mbps (PIX 506E)
VPN throughput (3DES/SHA1)
S
o
f
tware
F
eatures
•Supports PIX Firewall version 6.2 a secure,
purpose-built embedded operating system
•Includes plug-and-play default configuration
for simplified installation
•Includes Cisco PIX Device Manager (PDM)
for intuitive, web-based administration of
PIX Firewalls
•Internal DHCP server supports up to
256 DHCP address leases
•Supports up to 5 remote access, or
site-to-site, VPN peers
•Supports 56-bit DES and 168-bit 3DES, with
optional licenses. Refer to“Upgrade to DES
or 3DES” for more information.
3
2Check Items Included
PIX 506E
Quick Start
Guide
Safety and
Compliance
Guide
Cisco PIX 506E
Console cable adapter
(29-0810-01)
PC terminal adapter
(74-0495-01)
Documentation
Power supply and cable
(US shown)
506E power supply (341-0007-01)
Blue
console cable
(72-1259-01)
Yellow
Ethernet cable
(72-1482-01)
Yellow
Ethernet cable
(72-1482-01)
Cisco PIX
Firewall
Product CD
ETHERNET 0
ETHERNET 1 CONSOLE
LINK
USB
ACT
LINK
ACT
DC
POWER
INPUT
4
3Connect the Cables
Follow these steps to connect the cables:
Step 1 Place the chassis on a flat, stable surface. The chassis is not rack mountable.
Step 2 Use the yellow Ethernet cable (72-1482-01) provided to connect the outside Ethernet
interface, Ethernet 0, to a DSL modem, cable modem, or router.
Step 3 Use the other Ethernet cable (72-1482-01) provided to connect the inside Ethernet interface,
Ethernet 1, to a switch or hub.
ETHERNET0
ETHERNET1 CONSOLE
LINK
DC
POWER
INPUT
USB
ACT
LINK
ACT
Computer or other
network device
Power
adapter
Router
a
ptop computer
Printer
Switch
Yellow
Ethernet
cables
Yellow
Ethernet
cable
Cisco PIX 506E
Internet
71116
5
4Power On the PIX 506/506E
Follow these steps to power on the PIX Firewall:
Step 1 Connect the small, square connector of the power supply cable to the power connector on the
rear panel.
Step 2 Connect the AC power connector of the power supply input cable to an electrical outlet.
Step 3 Set the power switch to the on (|) position.
ETHERNET 0
ETHERNET 1 CONSOLE
LINK
DC
POWER
INPUT
USB
ACT
LINK
ACT
Cisco PIX 506E
DC
POWER
INPUT
67932
Power supply
6
5Check the LEDs
If all LEDs are operating as expected (see Table 1 and Table 2), this concludes the hardware
installation. The pages that follow include instructions on running PDM and additional optional
procedures.
Table 1 PIX 506/506E Front Panel LEDs
LED State Description
POWER Green The device is powered on.
Off The device is powered off.
ACT Flashing green The software image has been loaded.
Off The device is powered off.
Network Flashing green One or more network interfaces are passing traffic.
Off No network interfaces are passing traffic.
Table 2 PIX 506/506E Rear Panel LEDs
LED State Description
ACT On Network activity is present on the port.
Off No network activity is present on the port.
CISCO PIX 506E
FIREWALL
67933
POWER ACT NETWORK
Insert picture of 506/506E here.
ACT LINK LINK
DC
POWER
INPUT
ACT
CONSOLE
ETHERNET 0 USB
ETHERNET 1
78186
7
6Configuring the PIX 506/506E
The PIX 506/506E comes with a factory default configuration that meets the needs of most broadband
networking environments. The factory default configuration on the PIX 506/506E protects your inside
network from any unsolicited traffic. It is configured to use DHCP on the outside interface to acquire an
IP address. A default DHCP server address pool is included for hosts on the inside interface.
PDM contains a Startup Wizard that lets you easily change settings to suit your needs.
Instances in which it might be necessary to change or make additional changes to the default
configuration include the following:
•To create administrative and Telnet passwords
Note We highly recommend that you change the administrative and Telnet passwords from
their default settings to secure the administration of the PIX Firewall.
•To configure Point-to-Point Protocol over Ethernet (PPPoE) or a static IP address for an outside
interface
•To configure VPN and Auto Update features
LINK On Data is passing on the port.
Off No data is passing on the port.
Table 2 PIX 506/506E Rear Panel LEDs
LED State Description
8
7PDM Startup Wizard
The PIX 506/506E contains an integrated configuration
utility called Cisco PIX Device Manager (PDM). PDM is
a web browser-based configuration tool designed to help
you set up, configure, and monitor the PIX Firewall.
PDM is preinstalled on the PIX 506/506E. To access
PDM, make sure JavaScript and Java are enabled in
your web browser. For best performance, we
recommend that you use Microsoft Internet Explorer
5.5 or a higher release. Refer to the Cisco PIX Device
Manager Installation Guide for more information on
operating system and web browser environments
supported by PDM.
9
PDM version 2.0 and higher releases include a Startup Wizard for initial configuration. Follow these steps
to load PDM and use the Startup Wizard:
Step 1 Use an Ethernet cable to connect your PC to the inside port (Ethernet 1) on the rear panel of
the PIX Firewall.
Step 2 Configure your PC to use DHCP (to receive an IP address automatically from the
PIX Firewall) or assign a static IP address to your PC by selecting an address out of the
192.168.1.0 network.
Note The inside interface of the PIX Firewall is assigned 192.168.1.1, so choose a different
IP address.
Step 3 Check the ACT LED on the rear panel of the PIX Firewall (see Table 2 on page 6) to verify
that your PC has basic connectivity to the inside port (Ethernet 1). When connectivity occurs,
the ACT LED next to the port lights up solid green.
Step 4 To access the Startup Wizard, use a PC connected to the inside port and enter the URL
https://192.168.1.1/startup.html into your browser.
Note It is very important to enter the “s” in “https://192.168.1.1,” which indicates
a secure connection. If you enter “http://192.168.1.1” without the “s” in
“https,” you cannot access the PIX Firewall.
Step 5 Accept the certificates and follow the instructions in the Startup Wizard. For online help, click
the Help button at the bottom of the Startup Wizard window.
10
8Alternative Ways to Access the PIX 506/506E
You can use a serial terminal emulator from a PC or workstation connected to the Console port for
local administrative access.
You can also use PDM or a console to configure Telnet access to the PIX 506/506E. By default, Telnet
access is not permitted. To Telnet to the PIX 506/506E from the outside perimeter of the firewall,
configure an outside IP address and IPSec for a secure Telnet session. For more information, refer to
the Cisco PIX Firewall and VPN Configuration Guide.
To connect a console for local administrative access:
Step 1 Plug one end of the console cable adapter into a standard 9-pin PC serial port.
Step 2 Plug one end of the blue console cable (72-1259-01) into the PC terminal adapter.
Step 3 Plug the other end of the blue console cable into the Console port.
Step 4 Configure the PC terminal emulation software or terminal for 9600 baud, 8 data bits, no
parity, and 1 stop bit.
Refer to the Cisco PIX Firewall and VPN Configuration Guide for information about how to use the
command-line interface (CLI).
67935
ETHERNET 0
ETHERNET 1 CONSOLE
LINK
DC
POWER
INPUT
USB
ACT
LINK
ACT
Cisco PIX 506E
PC terminal adapter
Blue console cable
DC
POWER
INPUT
Este manual sirve para los siguientes modelos
2
Tabla de contenidos
Otros manuales de Cortafuegos de Cisco
Cisco
Cisco PIX-525-UR-BUN - PIX 525 Unrestricted Bundle Manual de usuario
Cisco
Cisco ASA 5508-X Manual de usuario
Cisco
Cisco LightStream 1010 Manual de instrucciones
Cisco
Cisco PIX 506E - Security Appliance Manual de usuario
Cisco
Cisco Firepower 4100 Series Manual de instalación
Cisco
Cisco ASA 5550 Series Manual de usuario
Cisco
Cisco Firepower 1100 Manual de usuario
Cisco
Cisco Meraki MX64W Manual de usuario
Cisco
Cisco Meraki MX100 Manual de usuario
Cisco
Cisco Small Business RV220W Manual de instrucciones
Cisco
Cisco PIX-515E Manual de usuario
Cisco
Cisco PIX 501 Manual
Cisco
Cisco LightStream 1010 Manual de usuario
Cisco
Cisco RV110W Manual de usuario
Cisco
Cisco amp threat grid Manual de usuario
Cisco
Cisco Firepower 4100 Series Manual de instalación y operación
Cisco
Cisco RV110W Manual de instrucciones
Cisco
Cisco ISA3000-4C-K9 Manual
Cisco
Cisco Small Business Pro SA 520W Manual de instrucciones
Cisco
Cisco RV120W Manual de instrucciones
Manuales populares de Cortafuegos de otras marcas
H3C
H3C SecPath F5000-AI-15 Manual de usuario
Nexcom
Nexcom DNA 1150 Manual de usuario
Fortinet
Fortinet FortiGate-60 series Manual de usuario
Draytek
Draytek Vigor2860 Series Manual de usuario
Lanner electronics
Lanner electronics FW-7650 Series Manual de usuario
Swisscom
Swisscom Internet Backup Manual de usuario
