Table Of Contents
Installing a Circuit Board
Installing a Circuit Board in a PIX 515
Installing a Circuit Board in a PIX 520 and Earlier Model
Installing a Circuit Board in a PIX 525
PIX Firewall 16 MB Flash Card
PIX Firewall 16 MB Flash Card Installation
Gigabit Ethernet Card Installation
FDDI Card Installation
Installing a Circuit Board
Before using this chapter, refer to "Opening a PIX Firewall Chassis," for instructions on how to open the chassis for each model of PIX Firewall. You can use the information in this chapter to install an interface card, such as Ethernet, Gigabit Ethernet, Token Ring, FDDI, Flash memory, or a Private Link VPN card.
The information in this chapter does not apply to the PIX 506.
The following statement applies to DC models:
Warning Before performing any of the following procedures, ensure that power is removed from the DC circuit. To ensure that all power is OFF, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the switch handle of the circuit breaker in the OFF position.
The following statement applies to both AC and DC models:
Warning Before working on a system that has an On/Off switch, turn OFF the power and unplug the power cord.
This chapter includes the following sections:
•Installing a Circuit Board in a PIX 515
•Installing a Circuit Board in a PIX 520 and Earlier Model
•Installing a Circuit Board in a PIX 525
•PIX Firewall 16 MB Flash Card
•Gigabit Ethernet Card Installation
•FDDI Card Installation
Installing a Circuit Board in a PIX 515
The information in this section refers to both the AC and DC models of the PIX 515.
Use the following steps to install a circuit board in a PIX 515:
Step 1 Locate the grounding strap from the accessory kit. Fasten the grounding strap to your wrist so that it contacts your bare skin. Attach the other end to bare metal inside the PIX 515 chassis as shown in Figure 7-1.
Figure 7-1 Attaching the PIX 515 Grounding Strap
Step 2 Remove the screws from the rear assembly on the left and put the assembly aside.
Step 3 Insert a board through the cage opening and into the slot as shown in Figure 7-2.
Figure 7-2 Inserting a Board into a PIX 515
Note When you insert a four-port Ethernet board in the slot, the end of the board's connector extends past the end of the slot. This does not affect the use or operation of the board.
Step 4 Attach the back cover plate making sure that the connecting flange on the board goes through the slot on the back cover plate as shown in Figure 7-3.
Figure 7-3 Attaching PIX 515 Back Cover Plate
Step 5 Attach the screw to hold the board's connecting flange to the cover plate, and install the screws to attach the cover plate to the PIX 515 unit.
Step 6 Reattach the top panel.
Installing a Circuit Board in a PIX 520 and Earlier Model
Follow these steps to install a circuit board in a PIX 520 and earlier model:
Step 1 Locate the grounding strap from the accessory kit. Fasten the grounding strap to your wrist so that it contacts your bare skin. Attach the other end to bare metal inside the PIX Firewall chassis as shown in Figure 7-4.
Figure 7-4 Attaching Grounding Strap to Your Wrist and to the PIX Firewall
Step 2 Insert the new board, as shown in Figure 7-5, and secure it using the screw provided with the board.
Figure 7-5 Installing the New Board
Step 3 Figure 7-6 displays how the interfaces are numbered according to their position. If you have version 4.4 and a four-port Ethernet board, refer to the section, "PIX Firewall with a Four-Port Interface Card" in "Installing a PIX Firewall."
Note When adding a network interface or encryption card, install the new card in the first empty slot to the right of the existing network interface cards.
Figure 7-6 PIX Firewall Network Interfaces
Step 4 If you are installing a Private Link VPN board, insert the board in any remaining PCI slot after you have installed all of the required interface boards. Refer to Figure 7-7 for how a PCI slot compares to an ISA slot.
Figure 7-7 Identifying ISA and PCI Slots
Step 5 If you are installing a PIX Firewall Flash memory upgrade, remove the existing Flash card and place the new Flash card into the same ISA slot. If you are installing the PIX Firewall 16 MB Flash card, refer to the section, "PIX Firewall 16 MB Flash Card" for more details.
Step 6 If you are installing an AccessPro router, the board requires two contiguous ISA slots.
Step 7 If you are installing a 4-port card, note that the board will overlap the slot connector on the motherboard. This does not affect the use or operation of the board. Figure 7-8 illustrates how this appears.
Figure 7-8 4-Port Card Overlap
Installing a Circuit Board in a PIX 525
The information in this section refers to all models of the PIX 525.
Use the following steps to install a circuit board in a PIX 525:
Step 1 Locate the grounding strap from the accessory kit. Fasten the grounding strap to your wrist so that it contacts your bare skin. Attach the other end to bare metal on the PIX 525 chassis.
Step 2 Using Figure 7-9 as a guide, remove the screws from the rear panel of the component tray and slide the tray out.
Figure 7-9 The Component Tray at the Back of the PIX 525
Step 3 Remove the screw and cover plate from the expansion slot.
Step 4 Use Figure 7-10 as a guide to install an expansion board into a PCI slot on the component tray.
Step 5 Attach the screw to hold the board's connecting flange to the rear cover plate on the component tray.
Figure 7-10 Inserting an Expansion Board into a PCI Slot on the PIX 525 Component Tray
Step 6 Figure 7-11 shows expansion boards in PCI slots on the component tray.
Figure 7-11 Expansion Boards in PCI Slots on the PIX 525 Component Tray
Step 7 Reinstall the component tray into the PIX 525 chassis.
PIX Firewall 16 MB Flash Card
Along with upgrading your Flash memory to 16 MB, the PIX Firewall 16 MB Flash card includes pre-installed 5.2 software and a UR (unrestricted) 56-bit DES encryption license. The 16 MB Flash card installs into a PIX Firewall ISA slot. An illustration of the 16 MB Flash card is shown in Figure 7-12.
Figure 7-12 PIX Firewall 16 MB Flash Card
PIX Firewall 16 MB Flash Card Installation
The installation of the 16 MB Flash card does not apply to the PIX 506, PIX 515, the latest version of PIX 520 (Version D0), or PIX 525. Use the following information to install a 16 MB Flash card:
Caution You must observe the following when installing a 16 MB Flash card:
•The PIX Firewall must have a minimum of 32 MB of RAM memory.
•You must obtain a new activation key if you will be using 3DES.
•The PIX Firewall may not be downgraded to a software revision lower than 5.0(3) after the new software from the 16 MB card is installed.
•If you downgrade from software version 5.2 to a 5.0 version or 5.1 version, you will lose private data (keys, certifications, and CRLs) that are stored in Flash memory. You need to use the clear flashfs command, downgrade 5.0 | 5.1 options if your PIX Firewall has 16 MB Flash memory, private data stored in the Flash memory, and you used the ca save all command to save these items in Flash memory.
Caution Before installing the 16 MB Flash card, you must perform the following steps.
Use the following steps when installing the 16 MB Flash card:
Step 1 Record the present PIX Firewall unit serial number.
Step 2 Record the new serial number from the 16 MB Flash card.
After installation, the serial number of the PIX Firewall will be the serial number supplied with the
16 MB Flash card.
Step 3 Create a backup of your present configuration (to use later to reconfigure your system).
Step 4 Obtain a new Activation key (if using 3DES).
For information on activation keys, see the section, "Upgrading the Activation Key" in "Installing a PIX Firewall."
Step 5 Remove any previously installed Flash memory cards from the unit.
Step 6 The jumper on the PIX Firewall 16 MB Flash card must not be removed or repositioned. The PIX Firewall system will not work if this jumper is moved.
Step 7 Install the 16 MB Flash card into an available ISA slot in a PIX Firewall chassis.
For details and instructions on software installation or upgrades, refer to the Cisco PIX Firewall Release Notes, Version 5.2 or the Cisco PIX Firewall Configuration Guide, Version 5.2.
Gigabit Ethernet Card Installation
PIX Firewall supports 1000 Mbps (Gigabit) Ethernet. The following describes the features and limitations of the Gigabit Ethernet card:
•The PIX 520 and PIX 525 support up to two Gigabit Ethernet cards.
•The PIX 506 and the PIX 515 do not support the Gigabit Ethernet card.
•The Gigabit Ethernet card uses the gb-ethernet device name and only has one hardware speed and the following duplex options:
–1000sxfull—forces full duplex operation
–1000basesx—forces half duplex operation
–1000auto—auto negotiates full or half duplex
The Gigabit Ethernet card and the fiber optic cable connection are shown in Figure 7-13.
Figure 7-13 Gigabit Ethernet Card
The Gigabit Ethernet card has three LEDs:
•TX—transmitting data
•RX—receiving data
•LINK—the Gigabit Ethernet card has established a network connection
FDDI Card Installation
After inserting a FDDI card into a PIX Firewall expansion slot, connect the cable as shown in Figure 7-14.
Figure 7-14 Connecting a FDDI Card Cable