Quick Start Guide
Page 1
Quick Start Guide Cisco PIX 501 Firewall Quick Start Guide For Cisco PIX Firewall Version 6.2 and PDM Version 2.1 1 About the Cisco PIX 501 Firewall 2 2 Check Items Included 3 3 Connect the Cables 4 4 Power On the PIX 501 5 5 Check the LEDs 6 6 (Optional) Install a Cable Lock 7 7 Configuring the PIX 501 8 8 PDM Startup Wizard 8 9 Alternative Ways to Access the PIX 501 10 10 Upgrade to DES, 3DES, or a 50-User License 11 11 Restore the Default Configuration 13
Quick Start Guide Cisco PIX 501 Firewall Quick Start Guide For Cisco PIX Firewall Version 6.2 and PDM Version 2.1 1 About the Cisco PIX 501 Firewall 2 2 Check Items Included 3 3 Connect the Cables 4 4 Power On the PIX 501 5 5 Check the LEDs 6 6 (Optional) Install a Cable Lock 7 7 Configuring the PIX 501 8 8 PDM Startup Wizard 8 9 Alternative Ways to Access the PIX 501 10 10 Upgrade to DES, 3DES, or a 50-User License 11 11 Restore the Default Configuration 13
Quick Start Guide
Page 2
...; Supports up to 5 remote access, or site-to-site, VPN peers 2 1 About the Cisco PIX 501 Firewall The PIX 501 delivers enterprise-class security for intuitive, web-based administration of outbound web traffic via industry-leading, third-party URL filtering products • Integrated switch allows multiple users to share a single broadband connection Hardware Features Software Features • Compact, desktop chassis • External power supply • 133-MHz processor • 16-MB RAM, 8-MB Flash memory • 1 10BaseT Ethernet port...
...; Supports up to 5 remote access, or site-to-site, VPN peers 2 1 About the Cisco PIX 501 Firewall The PIX 501 delivers enterprise-class security for intuitive, web-based administration of outbound web traffic via industry-leading, third-party URL filtering products • Integrated switch allows multiple users to share a single broadband connection Hardware Features Software Features • Compact, desktop chassis • External power supply • 133-MHz processor • 16-MB RAM, 8-MB Flash memory • 1 10BaseT Ethernet port...
Quick Start Guide
Page 4
Connect Port 0, the outside Ethernet port, to a cable/DSL/ISDN modem. b. Connect your PC or other network device aptop computer Printer PIX 501 Yellow Ethernet cable 4 3 2 1 0 CONSOLE POWER 3.3V 4.5A Orange Ethernet cable DSL/Cable/ISDN modem Internet Power adapter 61277 Follow these steps to connect the cables: Step 1 Step 2 Step 3 Place the chassis on a flat, stable surface. 3 Connect the Cables Computer or other network devices with an Ethernet cable (not provided) to one of the four switched inside ports (numbered 1 through 4). 4 Use the orange Ethernet cable (72-...
Connect Port 0, the outside Ethernet port, to a cable/DSL/ISDN modem. b. Connect your PC or other network device aptop computer Printer PIX 501 Yellow Ethernet cable 4 3 2 1 0 CONSOLE POWER 3.3V 4.5A Orange Ethernet cable DSL/Cable/ISDN modem Internet Power adapter 61277 Follow these steps to connect the cables: Step 1 Step 2 Step 3 Place the chassis on a flat, stable surface. 3 Connect the Cables Computer or other network devices with an Ethernet cable (not provided) to one of the four switched inside ports (numbered 1 through 4). 4 Use the orange Ethernet cable (72-...
Quick Start Guide
Page 5
... has TCP/IP installed and is configured to an electrical outlet. Connect the AC power connector of the power supply cable to the power connector on the device. 5 Completing Step 2 powers on the rear panel. This allows the PC to communicate with the PIX 501 and the Internet as well as run the PDM Startup Wizard. 4 Power On the PIX 501 4 3 2 1 POWER 0 CONSOLE 3.3V 4.5A Cisco PIX 501 71331 Power supply Follow these steps to power on the PIX Firewall: Step 1 Step 2 Connect the...
... has TCP/IP installed and is configured to an electrical outlet. Connect the AC power connector of the power supply cable to the power connector on the device. 5 Completing Step 2 powers on the rear panel. This allows the PC to communicate with the PIX 501 and the Internet as well as run the PDM Startup Wizard. 4 Power On the PIX 501 4 3 2 1 POWER 0 CONSOLE 3.3V 4.5A Cisco PIX 501 71331 Power supply Follow these steps to power on the PIX Firewall: Step 1 Step 2 Connect the...
Quick Start Guide
Page 6
.... Flashing Network activity, such as expected (see Table 1), this concludes the hardware installation. Thus, the VPN tunnel LED will only be using the wrong type of the PIX Firewall are normally solid green when a link is established and flashing green when the ports are active. Off The device is established. green Green The correct cable is autonegotiated at 10-Mbps half or full duplex. 5 Check the LEDs CISCO PIX 501...
.... Flashing Network activity, such as expected (see Table 1), this concludes the hardware installation. Thus, the VPN tunnel LED will only be using the wrong type of the PIX Firewall are normally solid green when a link is established and flashing green when the ports are active. Off The device is established. green Green The correct cable is autonegotiated at 10-Mbps half or full duplex. 5 Check the LEDs CISCO PIX 501...
Quick Start Guide
Page 8
... use Microsoft Internet Explorer 5.5 or a higher release. It is included for more information on the PIX 501. Instances in your inside interface. For best performance, we recommend that lets you set up, configure, and monitor the PIX Firewall. A default DHCP server address pool is configured to the Cisco PIX Device Manager Installation Guide for hosts on the outside interface • To configure VPN and Auto Update features 8 PDM Startup Wizard The PIX 501 contains an integrated configuration utility called Cisco PIX Device Manager...
... use Microsoft Internet Explorer 5.5 or a higher release. It is included for more information on the PIX 501. Instances in your inside interface. For best performance, we recommend that lets you set up, configure, and monitor the PIX Firewall. A default DHCP server address pool is configured to the Cisco PIX Device Manager Installation Guide for hosts on the outside interface • To configure VPN and Auto Update features 8 PDM Startup Wizard The PIX 501 contains an integrated configuration utility called Cisco PIX Device Manager...
Quick Start Guide
Page 9
... use the Startup Wizard: Step 1 Step 2 Use an Ethernet cable to connect your browser. For online help, click the Help button at the bottom of the PIX Firewall lights up solid green. Note It is assigned 192.168.1.1, so choose a different IP address. When connectivity occurs, the LINK LED on the rear panel of the PIX Firewall. PDM version 2.0 and higher releases include a Startup Wizard for initial configuration. Step 5 Accept the certificates and follow the instructions...
... use the Startup Wizard: Step 1 Step 2 Use an Ethernet cable to connect your browser. For online help, click the Help button at the bottom of the PIX Firewall lights up solid green. Note It is assigned 192.168.1.1, so choose a different IP address. When connectivity occurs, the LINK LED on the rear panel of the PIX Firewall. PDM version 2.0 and higher releases include a Startup Wizard for initial configuration. Step 5 Accept the certificates and follow the instructions...
Quick Start Guide
Page 10
... workstation connected to the Console port for local administrative access: Step 1 Step 2 Step 3 Step 4 Plug one end of the blue console cable into the Console port. Plug the other end of the blue console cable (72-1259-01) into a standard 9-pin PC serial port. Plug one end of the firewall, configure an outside perimeter of the console cable adapter (29-0810-01) into the console cable adapter. 9 Alternative Ways to Access the PIX 501 You can also use the command-line interface (CLI). 10...
... workstation connected to the Console port for local administrative access: Step 1 Step 2 Step 3 Step 4 Plug one end of the blue console cable into the Console port. Plug the other end of the blue console cable (72-1259-01) into a standard 9-pin PC serial port. Plug one end of the firewall, configure an outside perimeter of the console cable adapter (29-0810-01) into the console cable adapter. 9 Alternative Ways to Access the PIX 501 You can also use the command-line interface (CLI). 10...
Quick Start Guide
Page 11
...-user license features using the show version command and request a free 56-bit DES key. To request a free activation key for DES, complete the online form at the time of software installed on your Cisco PIX Firewall. To upgrade features you did not specify at the following instructions are applicable to PIX Firewall version 6.2 and higher releases. To purchase an activation key for the version of purchase, you have a CCO login, send...
...-user license features using the show version command and request a free 56-bit DES key. To request a free activation key for DES, complete the online form at the time of software installed on your Cisco PIX Firewall. To upgrade features you did not specify at the following instructions are applicable to PIX Firewall version 6.2 and higher releases. To purchase an activation key for the version of purchase, you have a CCO login, send...
Quick Start Guide
Page 12
Step 3 Reboot the PIX Firewall by powering it off and then on the inside network if the optional 50-User License has been purchased. Note Make sure that the image in config mode to enter a new activation key. For activation key examples or upgrade troubleshooting, refer to the Cisco PIX Firewall and VPN Configuration Guide, available at the following statements are true: • The host has passed traffic through the PIX Firewall during the time configured for...
Step 3 Reboot the PIX Firewall by powering it off and then on the inside network if the optional 50-User License has been purchased. Note Make sure that the image in config mode to enter a new activation key. For activation key examples or upgrade troubleshooting, refer to the Cisco PIX Firewall and VPN Configuration Guide, available at the following statements are true: • The host has passed traffic through the PIX Firewall during the time configured for...
Quick Start Guide
Page 13
.../cc/td/doc/product/iaabu/pix/pix_62/cmd_ref/index.htm The Cisco TAC website is available to the following commands: Step 1 Step 2 Command Description configure factory-default [inside IP address and optional address mask are specified, the factory-default configuration will reflect the specified IP address. To access the TAC Website go to Flash memory. 1. 11 Restore the Default Configuration Caution Entering the config factory-default command erases the current running configuration and replaces it with ip address [address_mask]] 1 the factory default configuration. Note The...
.../cc/td/doc/product/iaabu/pix/pix_62/cmd_ref/index.htm The Cisco TAC website is available to the following commands: Step 1 Step 2 Command Description configure factory-default [inside IP address and optional address mask are specified, the factory-default configuration will reflect the specified IP address. To access the TAC Website go to Flash memory. 1. 11 Restore the Default Configuration Caution Entering the config factory-default command erases the current running configuration and replaces it with ip address [address_mask]] 1 the factory default configuration. Note The...
Quick Start Guide
Page 15
... as an online starting point for troubleshooting and resolving technical issues with Cisco products and technologies. You can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA.) at 408 526-7208 or, elsewhere in North America, by writing to the following address: Cisco Systems Attn: Customer Document Ordering 170 West Tasman Drive San Jose, CA 95134...
... as an online starting point for troubleshooting and resolving technical issues with Cisco products and technologies. You can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA.) at 408 526-7208 or, elsewhere in North America, by writing to the following address: Cisco Systems Attn: Customer Document Ordering 170 West Tasman Drive San Jose, CA 95134...
Data Sheet
Page 1
... remote access VPN, in-line intrusion prevention, and robust multimedia and voice security-all authorized network communications and by tracking the state of rich, integrated security services, advanced networking services, and powerful remote management capabilities in a single, integrated solution. Part of the market-leading Cisco PIX Security Appliance Series, the Cisco PIX 501 Security Appliance provides a wide range of all in a compact, all-inone security solution. Its compact, high performance design incorporates a four-port 10/100 Fast Ethernet switch, making...
... remote access VPN, in-line intrusion prevention, and robust multimedia and voice security-all authorized network communications and by tracking the state of rich, integrated security services, advanced networking services, and powerful remote management capabilities in a single, integrated solution. Part of the market-leading Cisco PIX Security Appliance Series, the Cisco PIX 501 Security Appliance provides a wide range of all in a compact, all-inone security solution. Its compact, high performance design incorporates a four-port 10/100 Fast Ethernet switch, making...
Data Sheet
Page 2
... Advanced Encryption Standard (AES) encryption. Flexible VPN Services Extend Networks Economically to Remote Networks and Mobile Users Using the full-featured VPN capabilities of the Cisco PIX 501 Security Appliance, businesses can provide real-time notification to administrators. All contents are typically required by Cisco PIX Security Appliances including network and service object groups, turbo access control lists (ACLs), user- Solutions supported range from standards-based site-to-site VPN using 56-bit Data Encryption Standard (DES), 168...
... Advanced Encryption Standard (AES) encryption. Flexible VPN Services Extend Networks Economically to Remote Networks and Mobile Users Using the full-featured VPN capabilities of the Cisco PIX 501 Security Appliance, businesses can provide real-time notification to administrators. All contents are typically required by Cisco PIX Security Appliances including network and service object groups, turbo access control lists (ACLs), user- Solutions supported range from standards-based site-to-site VPN using 56-bit Data Encryption Standard (DES), 168...
Data Sheet
Page 3
... Host Configuration Protocol (DHCP) server within PIX, which automatically assigns their Cisco PIX 501 Security Appliances using a command-line interface (CLI). Users can also enjoy plug-and-play networking by taking advantage of devices on . Robust Remote-Management Solutions Lower Total Cost of configuration, monitoring, and troubleshooting methods. Management solutions range from across the enterprise-enabling you to identify and respond to share a single broadband connection via its integrated, high-performance four-port 10/100-Mbps switch...
... Host Configuration Protocol (DHCP) server within PIX, which automatically assigns their Cisco PIX 501 Security Appliances using a command-line interface (CLI). Users can also enjoy plug-and-play networking by taking advantage of devices on . Robust Remote-Management Solutions Lower Total Cost of configuration, monitoring, and troubleshooting methods. Management solutions range from across the enterprise-enabling you to identify and respond to share a single broadband connection via its integrated, high-performance four-port 10/100-Mbps switch...
Data Sheet
Page 4
... ● Provides robust client-side VPN resiliency with support for up to 10 Cisco Easy VPN Servers with automatic failover, in addition to Dead Peer Detection (DPD) support ● Supports optional authentication of individual users behind a Cisco PIX Security Appliance through an easy-to-use, Web-based interface with support for standard and one-time passwords (including authentication tokens) ● Extends VPN reach into environments using NAT or PAT, via support of Internet Engineering Task Force...
... ● Provides robust client-side VPN resiliency with support for up to 10 Cisco Easy VPN Servers with automatic failover, in addition to Dead Peer Detection (DPD) support ● Supports optional authentication of individual users behind a Cisco PIX Security Appliance through an easy-to-use, Web-based interface with support for standard and one-time passwords (including authentication tokens) ● Extends VPN reach into environments using NAT or PAT, via support of Internet Engineering Task Force...
Data Sheet
Page 5
... 4-port 10/100 switch ● Provides convenient, high-speed networking environment for small office environments in addition to firewalls with static IP addresses ● Integrates seamlessly with Management Center for Firewalls and Auto Update Server for robust, scalable remote management of up to 1000 Cisco PIX Security Appliances (per management server) Cisco PIX command-line interface ● Allows customers to use crossover cables with devices connected to an administrator-specified DHCP server, enabling centralized distribution, tracking and maintenance of IP addresses NAT/PAT...
... 4-port 10/100 switch ● Provides convenient, high-speed networking environment for small office environments in addition to firewalls with static IP addresses ● Integrates seamlessly with Management Center for Firewalls and Auto Update Server for robust, scalable remote management of up to 1000 Cisco PIX Security Appliances (per management server) Cisco PIX command-line interface ● Allows customers to use crossover cables with devices connected to an administrator-specified DHCP server, enabling centralized distribution, tracking and maintenance of IP addresses NAT/PAT...
Data Sheet
Page 6
... Cisco PIX 501 Security Appliance, or can be installed to activate encryption services which are available, allowing you to 32 DHCP leases. Page 6 of devices from your internal network to traverse through Cisco.com. Product Specifications Feature Specifications Software Licenses ● 10-User License ◦ The Cisco PIX 501 10-user license supports up to 10 concurrent source IP addresses from your needs grow, both 50 user and unlimited user upgrade licenses are required before using certain features including VPN...
... Cisco PIX 501 Security Appliance, or can be installed to activate encryption services which are available, allowing you to 32 DHCP leases. Page 6 of devices from your internal network to traverse through Cisco.com. Product Specifications Feature Specifications Software Licenses ● 10-User License ◦ The Cisco PIX 501 10-user license supports up to 10 concurrent source IP addresses from your needs grow, both 50 user and unlimited user upgrade licenses are required before using certain features including VPN...
Data Sheet
Page 7
... replacement. Table 4. Cisco SMARTnet® service augments customer support resources, and provides anywhere, anytime access to technical resources (both online and by telephone), the ability to -unlimited user upgrade license for Cisco PIX 501 (requires Cisco PIX Security Appliance Software Version 6.3) Spare AC power supply for Cisco PIX 501 Cisco PIX DES VPN/SSH/SSL encryption license Cisco PIX 501 3DES/AES VPN/SSH/SSL encryption license Support Services Support services are Copyright © 1992-2007 Cisco Systems, Inc. Cisco SMARTnet Ordering Information Product Number...
... replacement. Table 4. Cisco SMARTnet® service augments customer support resources, and provides anywhere, anytime access to technical resources (both online and by telephone), the ability to -unlimited user upgrade license for Cisco PIX 501 (requires Cisco PIX Security Appliance Software Version 6.3) Spare AC power supply for Cisco PIX 501 Cisco PIX DES VPN/SSH/SSL encryption license Cisco PIX 501 3DES/AES VPN/SSH/SSL encryption license Support Services Support services are Copyright © 1992-2007 Cisco Systems, Inc. Cisco SMARTnet Ordering Information Product Number...
Data Sheet
Page 8
... links: ● Cisco PIX Security Appliance Series: http://www.cisco.com/go/pix ● Cisco PIX Device Manager: http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/prodlit/pixd3_ds.pdf ● Current list of 8 C78-448035-00 12/07 Page 8 of Cisco product security certifications: http://www.cisco.com/go/securitycert ● Cisco Secure ACS: http://www.cisco.com/go/acs ● CiscoWorks VMS, Management Center for Firewalls, Auto Update Server Software, and Security Monitor: http://www.cisco...
... links: ● Cisco PIX Security Appliance Series: http://www.cisco.com/go/pix ● Cisco PIX Device Manager: http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/prodlit/pixd3_ds.pdf ● Current list of 8 C78-448035-00 12/07 Page 8 of Cisco product security certifications: http://www.cisco.com/go/securitycert ● Cisco Secure ACS: http://www.cisco.com/go/acs ● CiscoWorks VMS, Management Center for Firewalls, Auto Update Server Software, and Security Monitor: http://www.cisco...