|
Table Of Contents
Introducing the Cisco ISE-3300 Series Hardware
ISE-3300 Series Appliance Overview
ISE-3355 and ISE-3395 Appliance Overview
ISE-3315, ISE-3355, and ISE-3395 Hardware Summary
ISE-3315 Serial Number Location
Cisco ISE-3315 Front and Rear Panels
ISE-3355 Serial Number Location
Cisco ISE-3355 Front and Rear Panels
ISE-3395 Serial Number Location
Cisco ISE-3395 Front and Rear Panels
Cisco Product Identification Tool
Input/Output Ports and Connectors
Introducing the Cisco ISE-3300 Series Hardware
This chapter introduces the Cisco ISE-3300 series appliance hardware and provides descriptions of the support appliance hardware, the major components, controls, connectors, and front- and rear-panel LED indicators. This chapter contains information about the following topics:
•Input/Output Ports and Connectors
Product Overview
The following sections provide important details about the ISE-3300 series appliances (ISE-3315, ISE-3355, and ISE-3395):
•ISE-3300 Series Appliance Overview
•ISE-3315 Serial Number Location
•Cisco ISE-3315 Front and Rear Panels
•ISE-3355 Serial Number Location
•Cisco ISE-3355 Front and Rear Panels
•ISE-3395 Serial Number Location
•Cisco ISE-3395 Front and Rear Panels
•Cisco Product Identification Tool
ISE-3300 Series Appliance Overview
The ISE-3300 series appliances can all be mounted in a standard shelf-rack enclosure. This section provides descriptions of the supported ISE-3300 series appliances in this release:
•ISE-3355 and ISE-3395 Appliance Overview
ISE-3315 Appliance Overview
The Cisco 3315 (ISE-3315) is intended for small network environments and the following list provides some general physical, environmental, and feature information about the ISE-3315 appliance (for more details, see Table 2-1):
•Weight—from 24.25 lb (11.0 kg) to 28.0 lb (12.7 kg) depending on what options are installed.
•Dimensions—1.75 inches high x 17.3 inches wide x 22.0 inches deep (44.5 mm x 440.0 mm x 559.0 mm); these dimensions do not include the rack handles.
•Cooling fans—five (plus two on the power supply).
•Rack mounting—Uses slide-rails (see Installing the Slide Rails in a Rack, page 44); mounts in a standard 19-inch (48.3 cm), 4-post equipment rack (using the provided rack-mount brackets).
•Maximum operating altitude—7,000 feet (2,133 meters).
•Operating temperature range—50 to 90° F (10 to 35° C) up to 3,000 feet (914.4 meters); 50 to 90° F (10 to 32° C) 3,000 to 7,000 feet (914.4 to 2,133 meters).
•Power—configured for AC-input power; has a single auto-ranging AC-input power supply.
•Front-panel features:
–Power status LED
–Power button
–Reset button
–Hard disk drive (HDD) activity LED
–Locator button/LED
–System health LED
–USB port 1 and port 2
–Two HDD bays
–CD-ROM/DVD drive
For the location of the front panel features, see ISE-3315 Front Panel Features.
•Rear panel features:
–NIC 1 (eth0) activity LED
–NIC 1 (eth0) link LED
–NIC 2 (eth10) activity LED
–NIC 2 (eth1) link LED
–Power supply cable socket
–NIC 3 (eth2) and NIC 4 (eth3) add-on cards
–Serial port
–Video port
–NIC 2 (eth1) and NIC 1 (eth0) Gigabit Ethernet interfaces
–USB port 3 and port 4
–Console port
For the location of the rear panel features, see ISE-3315 Rear Panel Features.
The ISE-3315 appliance is based on the IBM System x3250M2 server platform, and is normally shipped with a rack-mount hardware kit that includes brackets or rails for mounting it in a 4-post equipment rack. For more information, see Mounting an ISE-3300 Series Appliance in a 4-Post Rack, page 42.
ISE-3355 and ISE-3395 Appliance Overview
The Cisco 3355 and Cisco 3395 (ISE-3315 and ISE-3395) are intended for the medium and large network environments, respectively. Both these appliances are based upon the same physical platform, and the following list provides some general physical, environmental, and feature information about the ISE-3355 and ISE-3395 appliances (for more details, see Table 2-1):
•Weight—from 28 lb (12.7 kg) to 34.5 lb (15.6 kg) depending on what options are installed.
•Dimensions—1.7 inches high x 17.3 inches wide x 28.0 inches deep (43 mm x 440.0 mm x 711.4 mm); these dimensions do not include the rack handles.
•Cooling fans—six for single-processor (ISE-3355) or dual-processor (ISE-3395).
•Rack mounting—Uses slide-rails (see Installing the Slide Rails in a Rack, page 44); mounts in a standard 19-inch (48.3 cm), 4-post equipment rack (using the provided rack-mount brackets).
•Maximum operating altitude—7,000 feet (2,133 meters).
•Operating temperature range—50 to 90° F (10 to 35° C) up to 3,000 feet (914.4 meters); 50 to 90° F (10 to 32° C) 3,000 to 7,000 feet (914.4 to 2,133 meters).
•Power—configured for AC-input power; has dual redundant auto-switching power supplies.
•Front-panel features:
–Power button with LED (bi-color, green and amber)
–Power button switch cover
–Two HDDs (bay 0 and 1)
–Four empty HDDs bays
–USB port 1 and port 2
–CD-ROM/DVD drive
–Operator information panel
–Operator information panel release switch
–Video port
–HDD activity LED
–HDD status LED
–Ethernet interfaces status LED
–Ethernet interface activity LEDs (NIC 1 and NIC 2)
–Ethernet interface activity LEDs (NIC 3 and NIC 4)
–Information LED
–System health LED
–Locator button/LED
For the location of the front panel features, see ISE-3355 Front Panel Features or ISE-3395 Front Panel Features.
•Rear panel features:
–Empty (unused) PCI Express slot
–Video port
–USB port 3 and port 4
–Power supply cable sockets
–Serial Port
–NIC 2 (eth1) and NIC 1 (eth0) Gigabit Ethernet interfaces
–NIC 3 (eth2) and NIC 4 (eth3) add-on cards
–NIC 1 (eth0) activity LED
–NIC 1 (eth0) link LED
–AC power LED
–DC power LED
–Power supply error LED
–System error LED
–Locator LED
–Power LED
–Console port
For the location of the rear panel features, see ISE-3355 Rear Panel Features or ISE-3395 Rear Panel Features.
The ISE-3355/ISE-3395 appliances are based on the IBM System 3550M2 server platform and are normally shipped with a rack-mount hardware kit that includes brackets or rails for mounting it in a 4-post equipment rack. For more information, see Mounting an ISE-3300 Series Appliance in a 4-Post Rack, page 42
Note The rack-mount hardware kits for ISE-3300 series appliances do not include a 2-post equipment rack.
Cisco ISE and FIPS-Compliance
This release of the supported Cisco Identity Services Engine (ISE-3300 series) appliances are non-FIPS compliant Linux-based network hardware platforms. In Release 1.0, the Cisco ISE operating system comprises a hardened Linux kernel based on CentOS 5.3, and runs the Application Deployment Engine operating system (ADE-OS) version 2.0 and the Cisco ISE Release 1.0 system software.
The ADE-OS and Cisco ISE system software run on either a dedicated Cisco Identity Services Engine appliance or on a VMware server (Cisco ISE-VM-K9). Cisco ISE does not support the installation of any other packages or applications on this dedicated platform. FIPS 140-2 compliance will be addressed in future releases of Cisco ISE.
Cisco ISE Release 1.0 only supports installations on the following Cisco ISE 3300-series appliance platforms:
•ISE-3315
•ISE-3355
•ISE-3395
Refer to the Release Notes for Cisco Identity Service Engine, Release 1.0 for additional hardware compatibility information. Table 2-1 summarizes the hardware specifications for each of the supported Cisco ISE appliances.
See the "Diagrams" column for hyperlinks to detailed diagrams showing NIC ports, power supply sockets, LEDs, and important controls or buttons on the corresponding panel.
ISE-3315, ISE-3355, and ISE-3395 Hardware Summary
Table 2-1 Cisco ISE Appliance Hardware Summary
Cisco ISE Appliance Product Hardware Specifications DiagramsISE-3315 Platform
Supports the following:
•Between 50 and 500 concurrent users
•Up to three standalone or High Availability (HA) pairs
•Single processor: Quad-core Intel Xeon (Core 2 quad)
•4GB RAM
•250GB SATA HDD
•4 10/100/1000 LAN ports [2 integrated NICs; 2 Gigabit NICs (PCI-E)]
•CD/DVD-ROM Drive
•4 USB Ports (2 front, 2 rear)
•Power supply: 350W
Note The ISE-3315 is based on the IBM System x3250 M2 server platform.
•Figure 2-2, "Cisco ISE-3315 Front Panel Features"
•Figure 2-3, "Cisco ISE-3315 Front Panel LEDs/Buttons"
•Figure 2-4,"Cisco ISE-3315 Rear Panel Features"
ISE-3355 Platform
Supports the following:
•Between 500 and 1000 concurrent users
•Up to 20 standalone or HA-pairs
•Single processor: Quad-core Intel Xeon (Nehalem)
•4 GB RAM
•2 x 300 GB SAS RAID HDD
•4 10/100/1000 LAN ports [2 integrated NICs; 2 Gigabit NICs (PCI-E)]
•CD/DVD-ROM Drive
•4 USB Ports (1 front, 1 internal, 2 rear)
•Cavium CN1120-NHB-E SSL Accelerator Card or nCipher Card (FIPS 140-2 Level 2 Common Criteria EAL2)
•Power supply: Dual 675W (redundant)
Note The ISE-3355 is based on the IBM System x3550 M2 server platform.
•Figure 2-7, "Cisco ISE-3355 Front Panel"
•Figure 2-8, "Cisco ISE-3355 Front Panel LEDs/Buttons"
•Figure 2-9, "Cisco ISE-3355 Rear Panel Features"
ISE-3395 Platform
Supports the following:
•Between 1000 and 5000 concurrent users
•Up to 40 standalone or HA-pairs
•Dual processor: 2 x Quad-core Intel Xeon (Nehalem)
•8GB RAM
•4 x 300 GB SAS RAID HDD
•4 10/100/1000 LAN ports [2 integrated NICs; 2 Gigabit NICs (PCI-E)]
•CD/DVD-ROM Drive
•4 USB Ports (1 front, 1 internal, 2 rear)
•Cavium CN1120-NHB-E SSL Accelerator Card or nCipher Card (FIPS 140-2 Level 2 Common Criteria EAL2)
•Power supply: Dual 675W (redundant)
Note The ISE-3395 is based on the IBM System x3550 M2 server platform.
•Figure 2-12, "Cisco ISE-3395 Front Panel Features"
•Figure 2-13, "Cisco ISE-3395 Front Panel LEDs/Buttons"
•Figure 2-14, "Cisco ISE-3395 Rear Panel Features"
ISE-3315 Serial Number Location
The serial number label is located at the lower left of the front-panel of the ISE-3315 (see Figure 2-1).
CPI figure for the Cisco ISE-3315 still needs to be created.
Figure 2-1 Cisco ISE-3315 Appliance Serial Number Location
Note The serial number for the ISE-3315 is seven characters in length. You can also view the ISE-3315 serial number location on the Cisco Support website using the Cisco Product Identification Tool. For details, see Cisco Product Identification Tool.
Cisco ISE-3315 Front and Rear Panels
The Cisco ISE-3315 platform is recommended for deployments serving from between 100 and 500 users and managing up to three additional appliances or three HA pairs. The Cisco ISE-3315 comes equipped with four network interfaces that provide flexibility in NIC interface selection and also make it capable for use in high-availability configurations. For additional details, see Cisco ISE and FIPS-Compliance.
ISE-3315 Front Panel Features
Figure 2-2, Figure 2-3, and the accompanying tables illustrate and describe the ISE-3315 front panel features, LEDs, and buttons.
Figure 2-2 Cisco ISE-3315 Front Panel Features
Figure 2-3 Cisco ISE-3315 Front Panel LEDs/Buttons
ISE-3315 Rear Panel Features
Figure 2-4, Figure 2-5, and the accompanying tables illustrate and describe the ISE-3315 rear panel features and LEDs.
Figure 2-4 Cisco ISE-3315 Rear Panel Features
Figure 2-5 Cisco ISE-3315 Rear Panel LEDs
ISE-3355 Serial Number Location
The serial number label is located at the lower left of the front-panel of the ISE-3355. (See Figure 2-6.)
CPI figure for the Cisco ISE-3355 still needs to be created.
Figure 2-6 ISE-3355 Appliance Serial Number Location
Note The serial number for the ISE-3355 is seven characters in length. You can also view the ISE-3355 serial number location on the Cisco Support website using the Cisco Product Identification Tool. For details, see Cisco Product Identification Tool.
Cisco ISE-3355 Front and Rear Panels
The Cisco ISE-3355 platform provides enhanced capability for enterprise-wide deployments serving from between 1500 and 3500 users and managing up to 20 other appliances or HA pairs.
Similar to the Cisco ISE-3315, the Cisco ISE-3355 comes equipped with four network interfaces that provide flexibility in NIC interface selection and also make it capable for use in high availability configurations.
The Cisco ISE-3355 additionally provides 2 GB of RAM, two SAS drives configured in RAID 0 and 1, dual power supplies, and an SSL accelerator card to support larger network deployments and provide added reliability for a centralized management of the deployment in the network core. For additional details, see Cisco ISE and FIPS-Compliance.
ISE-3355 Front Panel Features
Figure 2-7, Figure 2-8, and the accompanying tables illustrate and describe the ISE-3355 front panel features, LEDs, and buttons.
Figure 2-7 Cisco ISE-3355 Front Panel
1Hard Disk Drive (HDD) Bay 0
8Front USB Port 1
2Empty (unused) HDD Bay1
9Front USB Port 2
3Empty (unused) HDD Bay1
10CD-ROM/DVD Drive
4Power Button with LED Indicator
(bi-color: green/amber) 11Empty (unused) HDD Bay1
5Operator Information Panel
12Empty (unused) HDD Bay1
6Operator Information Panel Release Switch
13HDD Bay 1
7Video Port
1 Cisco does not support installing additional hard drives in the ISE-3355 appliance.
Figure 2-8 Cisco ISE-3355 Front Panel LEDs/Buttons
ISE-3355 Rear Panel Features
Figure 2-9, Figure 2-10, and the accompanying tables illustrate and describe the ISE-3355 rear panel features and LEDs.
Figure 2-9 Cisco ISE-3355 Rear Panel Features
Figure 2-10 Cisco ISE-3355 Rear Panel LEDs
ISE-3395 Serial Number Location
The serial number label is located at the lower left of the front-panel of the ISE-3395 (see Figure 2-11).
CPI figure for the Cisco ISE-3395 still needs to be created.
Figure 2-11 Cisco ISE-3395 Appliance Serial Number Location
Note The serial number for the ISE-3395 is seven characters in length. You can also view the ISE-3395 serial number location on the Cisco Support website using the Cisco Product Identification Tool. For details, see Cisco Product Identification Tool.
Cisco ISE-3395 Front and Rear Panels
The Cisco ISE-3395 appliance provides the enhanced processing, memory, and power necessary for an enterprise-wide deployment serving from between 1000 and 5000 users and managing up to 40 additional appliances or HA pairs. The Cisco ISE-3395 features dual processors, dual power supplies, 4 GB of RAM, four hard disk drives, four network interfaces, and an SSL accelerator card. For additional details, see Cisco ISE and FIPS-Compliance.
ISE-3395 Front Panel Features
Figure 2-12, Figure 2-13, and the accompanying tables illustrate and describe the ISE-3355 front panel features, LEDs, and buttons.
Figure 2-12 Cisco ISE-3395 Front Panel Features
1Hard Disk Drive (HDD) Bay 0
8Front USB Port 1
2HDD Bay 2
9Front USB Port 2
3Empty (unused) HDD Bay1
10CD-ROM/DVD Drive
4Power Button with LED Indicator (bi-color: green/amber)
11Empty (unused) HDD Bay1
5Operator Information Panel
12HDD Bay 3
6Operator Information Panel Release Switch
13HDD Bay 1
7Video Port
1 Cisco does not support installing additional hard drives in the ISE-3395 appliance.
Figure 2-13 Cisco ISE-3395 Front Panel LEDs/Buttons
ISE-3395 Rear Panel Features
Figure 2-14, Figure 2-15, and the accompanying tables illustrate and describe the ISE-3395 rear panel features and LEDs.
Figure 2-14 Cisco ISE-3395 Rear Panel Features
Figure 2-15 Cisco ISE-3395 Rear Panel LEDs
Cisco Product Identification Tool
The Cisco Product Identification (CPI) tool helps you retrieve the serial number of your Cisco products. Before you submit a request for service online or by phone, use the CPI tool to locate your product serial number. You can access this tool from the Cisco Support website at:
http://tools.cisco.com/Support/CPI/index.do
There are two prerequisites to being able to access the CPI tool:
•You must have a valid service contract with Cisco.
•You must have a valid Cisco.com user ID and password.
If you have a valid service contract, but do not have a user ID or password, you can re-register at:
http://tools.cisco.com/RPF/register/register.do
After you have met the prerequisites, perform the following to access this tool:
Step 1 Click the Get Tools & Resources link.
Step 2 Click the All Tools (A-Z) tab.
Step 3 Select Cisco Product Identification Tool from the alphabetical drop-down list.
This tool offers three search options:
•Search by product ID or model name.
•Browse for Cisco model.
•Copy and paste the output of the show command to identify the product.
Search results show an illustration of your product with the serial number label location highlighted. Locate the serial number label on your product and record the information before you place a service call.
Input/Output Ports and Connectors
The ISE-3300 series appliances support the following types of Input/Output connectors:
•Two Gigabit Ethernet ports (on the rear panel)
•One serial port (on the rear panel)
•USB 2.0 ports (2 on the front panel, 2 on the rear panel)
Warning To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables. Statement 1021
Regulatory Compliance
For regulatory compliance and safety information, see Regulatory Compliance and Safety Information for the Cisco ISE-3300 Series Appliances. This document is available online at Cisco.com:
For more information, see Obtaining Documentation and Submitting a Service Request, page xvi.