Table Of Contents
Preparing to Install the Cisco ISE 3300 Series Hardware
Preparing Your Site for Installation
Rack Installation Safety Guidelines
Temperature and Humidity Guidelines
Unpacking and Checking the Contents of Your Shipment
Cisco Information Packet and Warranty
Ethernet Connector and Console Port Guidelines
Preparing to Install the Cisco ISE 3300 Series Hardware
This appendix briefly describes safety guidelines, site requirements, and Ethernet connector and console port guidelines that you must observe before installing the Cisco Identity Services Engine (ISE) 3300 Series appliance. This information is provided in the following topics:
•Preparing Your Site for Installation
•Ethernet Connector and Console Port Guidelines
Safety Guidelines
Before you begin installing the Cisco ISE 3300 Series appliance, review the safety guidelines in this appendix and Rack-Mounting Configuration Guidelines, page B-1 to avoid injuring yourself or damaging the equipment.
In addition, before replacing, configuring, or maintaining the appliance, review the safety warnings that are listed in Related Documentation, page xiii. This section contains the following topics:
General Precautions
Observe the following general precautions for using and working with your appliance:
•Observe and follow service markings. Do not service any Cisco product except as explained in your appliance documentation. Opening or removing covers that are marked with the triangular symbol with a lightning bolt can expose you to electrical shock. Components that are inside these compartments should be serviced only by an authorized service technician.
•If any of the following conditions occur, unplug the product from the electrical outlet and replace the part, or contact your authorized service provider:
–The power cable, extension cord, or plug is damaged.
–An object has fallen into the product.
–The product has been exposed to water.
–The product has been dropped or damaged.
–The product does not operate correctly when you follow the operating instructions.
•Keep your appliance away from radiators and heat sources. Also, do not block cooling vents.
•Do not spill food or liquids on your appliance, and never operate the product in a wet environment.
•Do not push any objects into the openings of your appliance. Doing so can cause fire or electric shock by shorting out interior components.
•Use the product only with other equipment that is approved by Cisco.
•Allow the product to cool before removing covers or touching internal components.
•Use the correct external power source. Operate the product only from the type of power source that is indicated on the electrical ratings label of the product. If you are not sure of the type of power source required, consult your service representative or local power company.
•Use only approved power cables. If you have not been provided with a power cable for your appliance or for any AC-powered option that is intended for your appliance, purchase a power cable that is approved for use in your country.
The power cable must be rated for the product and for the voltage and current that is marked on the product's electrical ratings label. The voltage and current rating of the cable should be greater than the ratings that are marked on the product.
•To help prevent electric shock, plug the appliance and power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable. If you must use an extension cord, use a three-wire cord with properly grounded plugs.
•Observe extension cord and power strip ratings. Make sure that the total ampere rating of all products that are plugged into the extension cord or power strip does not exceed 80 percent of the extension cord or power strip ampere ratings limit.
•Do not use appliance voltage converters, or kits that are sold for appliances with your product.
•To help protect your appliance from sudden, transient increases and decreases in electrical power, use a surge suppressor, line conditioner, or uninterruptible power supply (UPS).
•Position cables and power cords carefully; route cables and the power cord and plug so that they cannot be stepped on or tripped over. Be sure that nothing rests on your appliance cables or power cord.
•Do not modify power cables or plugs. Consult a licensed electrician or your power company for site modifications. Always follow your local or national wiring rules.
Safety with Equipment
The following guidelines help ensure your safety and protect the equipment. However, this list does not include all potentially hazardous situations, so be alert.
Warning Read the installation instructions before connecting the system to the power source. Statement 1004
•Always disconnect all power cords and interface cables before moving the appliance.
•Never assume that power is disconnected from a circuit; always check.
•Keep the appliance chassis area clear and dust-free before and after installation.
•Keep tools and assembly components away from walk areas where you or others could trip over them.
•Do not work alone if potentially hazardous conditions exist.
•Do not perform any action that creates a potential hazard to people or makes the equipment unsafe.
•Do not wear loose clothing that may get caught in the appliance chassis.
• Wear safety glasses when working under conditions that may be hazardous to your eyes.
Safety with Electricity
Warning This unit is intended for installation in restricted access areas. A restricted access area can be accessed only through the use of a special tool, lock and key, or other means of security.
Statement 1017
Warning To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some LAN and WAN ports both use RJ-45 connectors. Statement 1021
Warning Do not touch the power supply when the power cord is connected. For systems with a power switch, line voltages are present within the power supply even when the power switch is off and the power cord is connected. For systems without a power switch, line voltages are present within the power supply when the power cord is connected. Statement 4
Warning Before working on equipment that is connected to power lines, remove jewelry (including rings, necklaces, and watches). Metal objects will heat up when connected to power and ground and can cause serious burns or weld the metal object to the terminals. Statement 43
Warning Before working on a chassis or working near power supplies, unplug the power cord on AC units; disconnect the power at the circuit breaker on DC units. Statement 12
Warning Do not work on the system or connect or disconnect cables during periods of lightning activity. Statement 1001
Warning This equipment is intended to be grounded. Ensure that the host is connected to earth ground during normal use. Statement 39
Warning When installing or replacing the unit, the ground connection must always be made first and disconnected last. Statement 1046
Follow these guidelines when working on equipment powered by electricity:
•Locate the room's emergency power-off switch. Then, if an electrical accident occurs, you can quickly turn off the power.
•Disconnect all power before performing the following tasks:
–Working on or near power supplies
–Installing or removing an appliance
–Performing most hardware upgrades
•Never install equipment that appears damaged.
•Carefully examine your work area for possible hazards, such as moist floors, ungrounded power extension cables, and missing safety grounds.
•Never assume that power is disconnected from a circuit; always check.
•Never perform any action that creates a potential hazard to people or makes the equipment unsafe.
•Never work alone when potentially hazardous conditions exist.
•If an electrical accident occurs, proceed as follows:
–Use caution, and do not become a victim yourself.
–Turn off power to the appliance.
–If possible, send another person to get medical aid. Otherwise, determine the condition of the victim, and then call for help.
–Determine whether the person needs rescue breathing, external cardiac compressions, or other medical attention; then take appropriate action.
In addition, use the following guidelines when working with any equipment that is disconnected from a power source but still connected to telephone wiring or network cabling:
•Never install telephone wiring during a lightning storm.
•Never install telephone jacks in wet locations unless the jack is specifically designed for it.
•Never touch uninsulated telephone wires or terminals unless the telephone line is disconnected at the network interface.
•Use caution when installing or modifying telephone lines.
Preventing ESD Damage
ESD can damage equipment and impair electrical circuitry. ESD can occur when electronic printed circuit cards are improperly handled and can cause complete or intermittent failures. Always follow ESD-prevention procedures when removing and replacing modules:
•When unpacking a static-sensitive component from its shipping carton, do not remove the component from the antistatic packing material until you are ready to install the component in your appliance. Just before unwrapping the antistatic packaging, be sure to discharge static electricity from your body.
•When transporting a sensitive component, first place it in an antistatic container or packaging.
•Handle all sensitive components in a static-safe area. If possible, use antistatic floor pads and workbench pads.
•Ensure that the Cisco ISE 3300 Series appliance is electrically connected to earth ground.
•Wear an ESD-preventive wrist strap, ensuring that it makes good skin contact. Connect the clip to an unpainted surface of the appliance to channel unwanted ESD voltages safely to ground. To guard against ESD damage and shocks, the wrist strap and cord must operate effectively.
•If no wrist strap is available, ground yourself by touching a metal part of the appliance.
Caution For the safety of your equipment, periodically check the resistance value of the antistatic wrist strap. It should be between 1 and 10 Mohm.
Lifting Guidelines
The Cisco ISE 3300 Series appliance weighs between 15 lb (9.071 kg) and 33 lb (14.96 kg) depending on what hardware options are installed in the appliance. The appliance is not intended to be moved frequently. Before you install the appliance, ensure that your site is properly prepared so that you can avoid having to move the appliance later to accommodate power sources and network connections.
Whenever you lift the appliance or any heavy object, follow these guidelines:
•Always disconnect all external cables before lifting or moving the appliance.
•Ensure that your footing is solid, and balance the weight of the object between your feet.
•Lift the appliance slowly; never move suddenly or twist your body as you lift.
•Keep your back straight and lift with your legs, not your back. If you must bend down to lift the appliance, bend at the knees, not at the waist, to reduce the strain on your lower back muscles.
•Lift the appliance from the bottom; grasp the underside of the appliance exterior with both hands.
Preparing Your Site for Installation
This section contains information about site planning, site preparation, and preparing to install the Cisco ISE 3300 Series appliance in the following topics:
•Unpacking and Checking the Contents of Your Shipment
Before you install the Cisco ISE 3300 Series appliance, complete the following steps:
Step 1 Prepare the site (see Site Planning) and review any installation plans or deployment site survey documentation.
Step 2 Unpack and inspect the appliance.
Step 3 Gather the tools and test equipment that are required to properly install the appliance.
Site Planning
Warning This unit is intended for installation in restricted access areas. A restricted access area can be accessed only through the use of a special tool, lock and key, or other means of security.
Statement 1017
Typically, you should have prepared the installation site beforehand. As part of your preparation, obtain a floor plan of the site and the equipment rack where the Cisco ISE 3300 Series appliance will be housed.
Determine the location of any existing appliances and their interconnections, including communications and power. Follow the airflow guidelines (see Airflow Guidelines) to ensure that adequate cooling air is provided to the appliance.
All personnel who are involved in the installation of the appliance, including installers, engineers, and supervisors, should participate in the preparation of a method of procedure (MOP) for approval by the customer. For more information, see Method of Procedure.
The following sections provide the site requirement guidelines that you must consider before installing the appliance:
•Rack Installation Safety Guidelines
•Temperature and Humidity Guidelines
Rack Installation Safety Guidelines
The Cisco ISE 3300 Series appliance can be mounted in most four-post telephone company (telco-type), 19-inch equipment racks that comply with the EIA standard for equipment racks (EIA-310-D). The distance between the center lines of the mounting holes on the two mounting posts must be 18.31 inches +/- 0.06 inch (46.50 cm +/- 0.15 cm). The rack-mounting hardware that is included with the appliance is suitable for most 19-inch equipment racks or telco-type frames.
Note Cisco strongly recommends using four-post racks whenever possible, but your rack must have at least two posts that provide mounting flanges for mounting an appliance.
Figure A-1 shows a couple of common examples of four-post equipment racks.
Figure A-1 Four-Post Equipment Rack Types
Four-Post (Partially-Enclosed) Rack
Image "1" in Figure A-1 shows a freestanding, partially-enclosed rack with two mounting posts in the front and two more at the rear. The Cisco ISE 3300 Series appliance may be installed in this type of enclosed rack, because the appliance only requires an unobstructed flow of cooling air into the front of the chassis and pushed out of the rear to maintain acceptable operating temperatures for its internal components.
Four-Post (Open) Rack
Image "2" Figure A-1 shows a freestanding, four-post open rack with two mounting posts in front and two mounting posts at the back. The mounting posts in this type of rack are often adjustable so that you can position the rack-mounted unit within the depth of the rack rather than flush-mount it with the front of the rack.
Before installing your Cisco ISE 3300 Series appliance in a rack, review the following guidelines:
•Two or more people are required to install the appliance in a rack.
•Ensure that the room air temperature is below 95°F (35°C).
•Do not block any air vents; usually, 6 inches (15 cm) of space provides proper airflow.
•Plan the appliance installation starting from the bottom of the rack.
•Do not extend more than one appliance out of the rack at the same time.
•Connect the appliance to a properly grounded outlet.
•Do not overload the power outlet when installing multiple devices in the rack.
•Do not place any object weighing more than 110 lb (50 kg) on top of rack-mounted devices.
Site Environment
The location of your appliance and the layout of your equipment rack or wiring room are extremely important considerations for proper operation. Equipment that is placed too close together, inadequate ventilation, and inaccessible panels can cause malfunctions and shutdowns, and can make maintenance difficult. Plan for access to front panel and rear panel of the appliance.
The following precautions will help you plan an acceptable operating environment for your appliance and will help you avoid environmentally caused equipment failures:
•Ensure that the room in which your appliance operates has adequate circulation. Electrical equipment generates heat. Without adequate circulation, ambient air temperature may not cool equipment to acceptable operating temperatures. For more information, see Airflow Guidelines.
•Ensure that the site of the rack includes provisions for source AC power, grounding, and network cables.
•Allow sufficient space to work around the rack during the installation. You need:
–At least 3 feet (9.14 m) adjacent to the rack to move, align, and insert the appliance.
–At least 24 inches (61 cm) of clearance in front of and behind the appliance for maintenance after installation.
•To mount the appliance between two posts or rails, the usable aperture (the width between the inner edges of the two mounting flanges) must be at least 17.7 inches (45.0 cm).
Note The rack-mount kit does not include a two-post equipment rack.
•Use appropriate strain-relief methods to protect cables and equipment connections.
•To avoid noise interference in network interface cables, do not route them directly across or along power cables.
•Always follow ESD-prevention procedures as described in Preventing ESD Damage to avoid damage to equipment. Damage from static discharge can cause immediate or intermittent equipment failure.
Airflow Guidelines
To ensure adequate airflow through the equipment rack, we recommend that you maintain a clearance of at least 6 inches (15.24 cm) at the front and the rear of the rack. If airflow through the equipment rack and the appliances that occupy it is blocked or restricted, or if the ambient air that is being drawn into the rack is too warm, the temperature within the equipment rack can get too high and the appliance(s) may overheat.
The site should also be as dust-free as possible. Dust tends to clog the appliance fans, which reduces the flow of cooling air through the equipment rack and the appliances that occupy it. This type of airflow reduction increases the risk that the temperature will get too high and the appliance(s) may overheat.
Additionally, the following guidelines will help you plan your equipment rack configuration:
•Besides airflow, you must allow clearance around the rack for maintenance.
•When mounting an appliance in an open rack, ensure that the rack frame does not block the front intakes or the rear exhausts.
Temperature and Humidity Guidelines
Table A-1 lists the operating and nonoperating environmental site requirements for the Cisco ISE 3300 Series appliance. The appliance normally operates within the ranges that are listed; however, a temperature measurement that approaches a minimum or maximum parameter indicates a potential problem.
Maintain normal operation by anticipating and correcting environmental anomalies before they approach critical values by properly planning and preparing your site before you install the appliance.
Power Considerations
You configure the Cisco ISE 3300 Series appliance with AC-input power only. Ensure that all power connections conform to the rules and regulations in the National Electrical Codes, as well as local codes. While planning power connections to your appliance, the following precautions and recommendations must be followed:
•Check the power at your site before installation and periodically after installation to ensure that you are receiving clean power (free of spikes and noise). Install a power conditioner if necessary.
•The AC power supply includes the following features:
–Autoselect feature for 110 V or 220 V operation.
–An electrical cord for all appliances. (A label near the power cord indicates the correct voltage, frequency, current draw, and power dissipation for the appliance.)
Warning This product relies on the building installation for short-circuit (overcurrent) protection. Ensure that a fuse or circuit breaker no larger than 120 VAC, 15 Amp U.S. (240 VAC, 10 Amp international) is used on the phase conductors (all current-carrying conductors). Statement 13
•Install proper grounding to your host equipment rack to avoid damage from lightning and power surges.
Warning This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Statement 1024
•Ensure that the AC-input power supply operates on input voltage and frequency within the ranges of 100 to 240 VRMS and 50 to 60 Hz without the need for operator adjustments. Table A-2 provides additional information on electrical inputs.
Method of Procedure
As described previously, part of your preparation includes reviewing installation plans or MOPs. A MOP is a preinstallation checklist or list of tasks, guidelines, or considerations that need to be addressed and agreed upon before you proceed with the installation. The following example MOP serves as a guideline:
Step 1 Assign personnel.
Step 2 Determine protection requirements for personnel, equipment, and tools.
Step 3 Evaluate potential hazards that may affect service.
Step 4 Schedule time for installation.
Step 5 Determine any space requirements.
Step 6 Determine any power requirements.
Step 7 Identify any required procedures or tests.
Step 8 In an equipment plan, make a preliminary decision that locates each Cisco ISE 3300 Series appliance that you plan to install.
Step 9 Read this hardware installation guide.
Step 10 Verify the list of replaceable parts for installation (screws, bolts, washers, and so on) so that the parts are identified.
Step 11 Check the required tools list to make sure the necessary tools and test equipment are available. For more information, see Required Tools and Equipment.
Step 12 Perform the installation.
Unpacking and Checking the Contents of Your Shipment
The shipping package for the Cisco ISE 3300 Series appliance is designed to reduce the possibility of product damage that is associated with routine material handling that is experienced during shipment. To reduce the potential for damage to the product, transport the appliance in its original Cisco packaging. Failure to do so may result in damage to the appliance. Also, do not remove the appliance from its shipping container until you are ready to install it.
The appliance, cables, and any optional equipment that you ordered may be shipped in more than one container. A Notes section has been provided to record damaged or missing items. Figure A-2 displays the shipment items with the Cisco ISE 3300 Series appliance.
Note Do not discard the packaging materials that are used in shipping your Cisco ISE 3300 Series appliance. You will need the packaging materials in the future if you move or ship your appliance.
Figure A-2 Items Shipped with the Cisco ISE 3300 Series Appliance
Inspect all items for shipping damage. If anything appears to be damaged, or if you encounter problems installing or configuring your appliance, contact your customer service representative.
Note The rack-mount kit does not include a two-post equipment rack.
Cisco Information Packet and Warranty
The Cisco Information Packet provides warranty, service, and support information. To access and download the Cisco Information Packet and your warranty and license agreements from Cisco.com, point your browser at the following location:
http://www.cisco.com/univercd/cc/td/doc/es_inpck/cetrans.htm
The Warranties and License Agreements page appears.
To read the Cisco Information Packet, complete the following steps:
Step 1 Click the Information Packet Number field, and ensure that the part number 78-5235-03D0 is highlighted.
Step 2 Choose the language in which you would like to read the document.
Step 3 Click Go.
The Cisco Limited Warranty and Software License page from the Information Packet appears.
Step 4 Read the document online, or click the PDF icon to download and print the document.
You must have Adobe Acrobat Reader to view and print PDF files. You can download the reader from the Adobe website.
To read translated and localized warranty information about your product, complete the following steps:
Step 1 Enter this part number in the Warranty Document Number field:
78-5236-01C0Step 2 Choose the language in which you would like to read the document.
Step 3 Click Go.
The Cisco warranty page appears.
Step 4 Review the document online, or click the PDF icon to download and print the document in PDF.
You can also contact the Cisco Service and Support website for assistance at:
http://www.cisco.com/en/US/support/
Duration of Hardware Warranty
Ninety (90) days.
Replacement, Repair, or Refund Policy for Hardware
Cisco or its service center will use commercially reasonable efforts to ship a replacement part within ten (10) working days after receipt of the Return Materials Authorization (RMA) request. Actual delivery times can vary depending on the customer location.
Note Cisco reserves the right to refund the purchase price as its exclusive warranty remedy.
To Receive an RMA Number
Contact the company from which you purchased the product. If you purchased the product directly from Cisco, contact your Cisco Sales and Service Representative.
Complete the following information, and keep it for reference:
Product Information DescriptionCompany product was purchased from
Company telephone number/website location
Product model number
Product serial number1
Maintenance contact number
Required Tools and Equipment
Caution The fastener pack in the rack-mount kit contains eight rack screws. You must check these screws to ensure that they are the appropriate size for the holes in your rack. Using the wrong-sized screws for your threaded rack holes can damage the rack.
You need the following tools and equipment to install the Cisco ISE 3300 Series appliance in a four-post rack:
Warning Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Statement 1030
•ESD-preventive cord and wrist strap.
•Number 2 Phillips screwdriver.
•Flat-blade screwdrivers (small, 3/16-in [0.476 cm] and medium, 1/4-inch [0.625 cm]) to remove the cover if you are upgrading memory or other components.
•Rack-mount kit. For more information on kit contents, see Using a Four-Post Rack-Mount Hardware Kit, page B-3.
•Cables for connection to the LAN ports (depending on the configuration).
•Ethernet switch for connection to the Ethernet (LAN) port or ports.
You must have either of the following for the initial configuration of the Cisco ISE 3300 Series appliance:
•USB keyboard and VGA monitor.
or
•Console terminal (an ASCII terminal or a PC that is running terminal-emulation software) that is configured for 9600 baud, 8 data bits, no parity, 1 stop bit, and no hardware flow control.
•Console cable for connection to the serial (console) port. A null-modem cable is recommended.
Installation Checklist
To assist you with your installation and to provide a historical record of what was done, and by whom, use the following installation checklist. Make a copy of this checklist and mark the entries as you complete each task.
When the checklist is complete, include a copy of it for each Cisco ISE 3300 Series appliance in your site log along with other records for your new appliance. (See Creating a Site Log for information about creating a site log.)
Creating a Site Log
You can maintain a site log that serves as a record of all installation, maintenance, upgrade, replacement, and changes that are made to the Cisco ISE 3300 Series appliance. Keep the log in an accessible place near the appliance so that anyone who performs tasks has access to it.
Use the installation checklist (see Installation Checklist) to verify the steps in the installation and maintenance of your appliance. Site log entries might include the following:
•Installation progress—Make a copy of the appliance installation checklist, and insert it into the site log. Make entries as you complete each task.
•Upgrade, removal, and maintenance procedures—Use the site log as a record of ongoing appliance maintenance and expansion history. Each time a task is performed on the appliance, update the site log to reflect the following information:
–Installation of new adapter cards
–Removal or replacement of adapter cards and other upgrades
–Configuration changes
–Maintenance schedules and requirements
–Maintenance procedures performed
–Intermittent problems
–Comments and notes
Ethernet Connector and Console Port Guidelines
This section provides the following guidelines for the Ethernet connector and asynchronous serial console port for the Cisco ISE 3300 Series appliances:
•Each Cisco ISE 3300 Series appliance provides an Ethernet connector on the rear panel, and the Gigabit Ethernet 0 port uses unshielded twisted-pair (UTP) cabling (we recommend using Category 6 UTP cable). The maximum segment distance is 328 feet (100 meters).
UTP cables look like the cables that are used for ordinary telephones. However, UTP cables meet specific electrical standards that telephone cables do not meet (these UTP cables are not included in the installation package).
•Each Cisco 3300 Series appliance provides an asynchronous serial console port on the rear panel that enables you to access the appliance locally (using a console terminal). It is important that you verify and use the proper cabling type before attempting to connect a console terminal—either an ASCII terminal or a PC running terminal-emulation software—to the console port.
Caution To help prevent a potential network security threat, Cisco strongly recommends physically disconnecting from the Cisco ISE console management port when you are not using it. For more details, see http://seclists.org/fulldisclosure/2011/Apr/55, which applies to the Cisco ISE, Cisco NAC Appliance, and Cisco Secure ACS hardware platforms.
Note The console cable is not included with the Cisco ISE 3300 Series appliance.