C H A P T E R 4 PIX 515/515E This chapter describes how to install the PIX 515/515E, and includes the following sections: • PIX 515/515E Product Overview • Installing a PIX 515/515E • PIX 515/515E Feature Licenses • Installing Failover • Removing and Replacing a PIX 515/515E Chassis Cover • Replacing a Lithium Battery • Installing a Memory Upgrade • Installing a Circuit Board in a PIX 515/515E • Installing a PIX 515/515E DC Model The PIX 515 and the PIX 515E are the same except the PIX 5
Chapter 4 PIX 515/515E PIX 515/515E Product Overview Figure 4-2 shows the rear view of the PIX 515/515E. PIX 515/515E Rear Panel 67850 Figure 4-2 100 Mbps Link PIX-515 DO NOT INSTALL INTERFACE CARDS WITH POWER APPLIED FDX 10/100 ETHERNET 0/0 100 Mbps Link FAILOVER FDX 10/100 ETHERNET 0/0 CONSOLE Figure 4-3 shows the PIX 515/515E front panel LEDs. Figure 4-3 ACT NETWORK 25735 POWER PIX 515/515E Front Panel LEDs Table 4-1 lists the state of the PIX 515/515E front panel LEDs.
Chapter 4 PIX 515/515E Installing a PIX 515/515E Figure 4-4 shows the PIX 515/515E rear panel LEDs.
Chapter 4 PIX 515/515E Installing a PIX 515/515E PIX 515/515E Surface Mounting If you do not want to rack mount the unit, attach the rubber feet to the bottom of the unit as shown in Figure 4-5.
Chapter 4 PIX 515/515E Installing a PIX 515/515E PIX 515/515E Vertical Mounting To mount the PIX 515/515E vertically, attach the brackets to the side of the unit and mount the unit vertically as shown in Figure 4-6.
Chapter 4 PIX 515/515E Installing a PIX 515/515E PIX 515/515E Serial Console Cable PIX-515 Figure 4-7 100 Mbps Link FAILOVER FDX 10/100 ETHERNET 0 CONSOLE Computer serial port DB-9 or DB-25 Console port (RJ-45) Note 29226 RJ-45 to DB-9 or DB-25 serial cable (null-modem) If your unit has a four-port Ethernet circuit board already installed, refer to Figure 4-8. (The four-port Ethernet circuit board requires the PIX-515/515E-UR license to be accessed.
Chapter 4 PIX 515/515E PIX 515/515E Feature Licenses Figure 4-9 Two Single-Port Ethernet Connectors in a PIX 515/515E 25734 Ethernet 2 100 Mbps Link PIX-515 DO NOT INSTALL INTERFACE CARDS WITH POWER APPLIED FDX 10/100 ETHERNET 1 Ethernet 3 100 Mbps Link FAILOVER FDX 10/100 ETHERNET 0 CONSOLE Ethernet 1 Ethernet 0 Note As shown in Figure 4-9, if your unit has one or two single-port Ethernet circuit boards installed in the auxiliary assembly on the left of the unit at the rear, the circuit
Chapter 4 PIX 515/515E Installing Failover Installing Failover Complete these steps to set up a failover connection: Caution Step 1 Before starting the installation, make sure that the power is off on both the primary and secondary units. Do not turn the power on until the units are connected and the primary unit has been completely configured. Power the primary unit on first, then power on the secondary unit. Locate the failover cable (shown in Figure 4-10).
Chapter 4 PIX 515/515E Installing Failover Step 5 If you are using Stateful Failover, use one of the following types of connections, that is appropriate for your system, between the dedicated interfaces on the PIX Firewall units: • Cat 5 crossover cable directly connecting the primary unit to the secondary unit. • 100BaseTX half-duplex hub using straight Cat 5 cables. • 100BaseTX full duplex on a dedicated switch or dedicated VLAN of a switch.
Chapter 4 PIX 515/515E Removing and Replacing a PIX 515/515E Chassis Cover Removing and Replacing a PIX 515/515E Chassis Cover This section describes how to remove and replace the chassis cover from a PIX 515/515E. This section includes the following topics: • Removing the Chassis Cover • Replacing the Chassis Cover Removing the Chassis Cover Complete these steps to remove the chassis cover: Note Removing the PIX Firewall case does not affect your Cisco warranty.
Chapter 4 PIX 515/515E Removing and Replacing a PIX 515/515E Chassis Cover Figure 4-13 Pushing Back the Top Panel Step 5 ACT SERIES 24285 PIX Firewall POWER NETWORK Pull the top panel up as shown in Figure 4-14. Put the top panel in a safe place. Figure 4-14 Pull the Top Panel up to Remove ACT SERIES 24286 PIX Firewall POWER NETWORK Replacing the Chassis Cover Caution Do not operate PIX Firewall units without the top panel installed.
Chapter 4 PIX 515/515E Replacing a Lithium Battery Step 5 Fasten the top panel with the screws you set aside earlier. Step 6 Reinstall the chassis on a rack, wall, desktop, or table. Step 7 Reinstall network interface cables. Replacing a Lithium Battery The PIX Firewall has a lithium battery on its main circuit board. This battery has an operating life of about 10 years. When the battery loses its charge, the PIX Firewall cannot function. Contact Cisco TAC to replace the battery.
Chapter 4 PIX 515/515E Installing a Memory Upgrade Caution If you remove a PIX Firewall chassis top panel, always reinstall the top panel. Running a PIX Firewall without the top panel may cause overheating and damage to electrical components. Memory Installation Steps Complete these steps to install additional system memory: Step 1 Remove network wires and any cords connecting to the PIX Firewall unit if the unit is rack-mounted.
Chapter 4 PIX 515/515E Installing a Memory Upgrade Note Do not install a 64 MB DIMM in a PIX 515. You will not be able to properly replace the top panel because of the height of a 64 MB DIMM. Operating a PIX Firewall chassis without a top panel installed may cause damage to the unit. The standard memory configuration for a PIX 515 is a 32 MB DIMM memory strip installed into one of two slots. If you are upgrading a 32 MB system, add a second 32 MB DIMM memory strip into the empty slot.
Chapter 4 PIX 515/515E Installing a Memory Upgrade Figure 4-17 Inserting a DIMM Memory Strip in a PIX 515/515E 24299 DIMM 24300 Figure 4-18 Securing a DIMM Memory Strip in a PIX 515/515E When you finish inserting new RAM memory, replace the top panel on the PIX Firewall chassis. Reattach the screws. If desired, rack mount the PIX Firewall and attach all cables and cords as discussed in previous sections.
Chapter 4 PIX 515/515E Installing a Circuit Board in a PIX 515/515E Installing a Circuit Board in a PIX 515/515E The information in this section refers to both the AC and DC models of the PIX 515/515E. Complete these steps to install a circuit board in a PIX 515/515E: Step 1 Locate the grounding strap from the accessory kit. Fasten the grounding strap to your wrist so that it contacts your bare skin. Attach the other end to bare metal inside the PIX 515/515E chassis as shown in Figure 4-19.
Chapter 4 PIX 515/515E Installing a Circuit Board in a PIX 515/515E Step 3 Insert a circuit board through the cage opening and into the slot as shown in Figure 4-20. 61904 Figure 4-20 Inserting a Circuit Board into a PIX 515/515E Note Step 4 When you insert a four-port Ethernet circuit board in the slot, the end of the circuit board’s connector extends past the end of the slot. This does not affect the use or operation of the circuit board.
Chapter 4 PIX 515/515E Installing a Circuit Board in a PIX 515/515E 61905 Figure 4-21 Attaching PIX 515/515E Back Cover Plate Step 5 Attach the screw to hold the circuit board’s connecting flange to the cover plate, and install the screws to attach the cover plate to the PIX 515/515E unit. Step 6 Reattach the top panel. PIX Firewall VPN Accelerator Circuit Board The VPN Accelerator (PIX-VPN-ACCEL) is an encryption and compression accelerator circuit board.
Chapter 4 PIX 515/515E Installing a PIX 515/515E DC Model Installing a PIX 515/515E DC Model Warning Before performing any of the following procedures, ensure that power is removed from the DC circuit. To ensure that all power is OFF, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the switch handle of the circuit breaker in the OFF position.
Chapter 4 PIX 515/515E Installing a PIX 515/515E DC Model Step 10 Note Power on the unit from the switch at the rear of the unit. If you need to power cycle the DC PIX 515/515E, wait at least 5 seconds between powering off the unit and powering it back on.