 Feedback
|
Table Of Contents
Cisco PIX 506/506E Firewall
Quick Start Guide
For Cisco PIX Firewall Version 6.2 and PDM Version 2.0About the Cisco PIX 506/506E Firewall
Alternative Ways to Access the PIX 506/506E
Restore the Default Configuration
Obtaining Technical Assistance
Obtaining Additional Publications and Information
Quick Start Guide
Cisco PIX 506/506E Firewall
Quick Start Guide
For Cisco PIX Firewall Version 6.2 and PDM Version 2.0
1 About the Cisco PIX 506/506E Firewall
The PIX 506/506E delivers enterprise-class security for remote office/branch office environments in a robust, reliable security appliance. Ideal for securing Internet connections for remote/branch offices, the PIX 506/506E, part of the market-leading Cisco PIX Firewall Series, provides a wide range of rich security capabilities and remote management capabilities in a cost-effective, high-performance solution:
•
Stateful inspection security based on state-of-the-art Adaptive Security Algorithm (ASA)
•
•
•
•
2 Check Items Included
3 Connect the Cables
Follow these steps to connect the cables:
Step 1
Step 2
Step 3
4 Power On the PIX 506/506E
Follow these steps to power on the PIX Firewall:
Step 1
Step 2
Step 3
5 Check the LEDs
If all LEDs are operating as expected (see Table 1 and Table 2), this concludes the hardware installation. The pages that follow include instructions on running PDM and additional optional procedures.
6 Configuring the PIX 506/506E
The PIX 506/506E comes with a factory default configuration that meets the needs of most broadband networking environments. The factory default configuration on the PIX 506/506E protects your inside network from any unsolicited traffic. It is configured to use DHCP on the outside interface to acquire an IP address. A default DHCP server address pool is included for hosts on the inside interface.
PDM contains a Startup Wizard that lets you easily change settings to suit your needs.
Instances in which it might be necessary to change or make additional changes to the default configuration include the following:
•
Note
•
•
7 PDM Startup Wizard
The PIX 506/506E contains an integrated configuration utility called Cisco PIX Device Manager (PDM). PDM is a web browser-based configuration tool designed to help you set up, configure, and monitor the PIX Firewall.
PDM is preinstalled on the PIX 506/506E. To access PDM, make sure JavaScript and Java are enabled in your web browser. For best performance, we recommend that you use Microsoft Internet Explorer 5.5 or a higher release. Refer to the Cisco PIX Device Manager Installation Guide for more information on operating system and web browser environments supported by PDM.
PDM version 2.0 and higher releases include a Startup Wizard for initial configuration. Follow these steps to load PDM and use the Startup Wizard:
Step 1
Step 2
Note
Step 3
Step 4
Note
Step 5
8 Alternative Ways to Access the PIX 506/506E
You can use a serial terminal emulator from a PC or workstation connected to the Console port for local administrative access.
You can also use PDM or a console to configure Telnet access to the PIX 506/506E. By default, Telnet access is not permitted. To Telnet to the PIX 506/506E from the outside perimeter of the firewall, configure an outside IP address and IPSec for a secure Telnet session. For more information, refer to the Cisco PIX Firewall and VPN Configuration Guide.
To connect a console for local administrative access:
Step 1
Step 2
Step 3
Step 4
Refer to the Cisco PIX Firewall and VPN Configuration Guide for information about how to use the command-line interface (CLI).
9 Upgrade to DES or 3DES
Note
To upgrade features you did not specify at the time of purchase, you need to use an activation key.
The activation key lets you add software features to the PIX 506/506E, such as DES or 3DES.
To request a free activation key for DES, complete the online form at the following website:
http://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl?pid=221&fid=324
Note
To purchase an activation key for 3DES (PIX-506-SW-3DES=), go to Cisco's ordering website:
http://www.cisco.com/public/Ordering_root.shtml
Enter the activation key only after you have downloaded an image—not from the command line or without rebooting first.
Note
Follow these steps to use an activation key:
Step 1
Step 2
Note
Step 3
After the key update is complete, the system reloads again to update the running image.
10 Restore the Default Configuration
Caution
If you inadvertently erase the default configuration or need to restore the default configuration, you can restore the factory default values in one of the following ways:
•
•
•
Step 1
config factory-default [<inside ip address> [address mask]] 1
Erases the running configuration and replaces it with the factory default configuration.
Step 2
write memory
Writes the factory default configuration to Flash memory.
1 If the optional inside IP address and optional address mask are specified, the factory-default configuration will reflect the specified IP address.
Refer to the following website for detailed command information and configuration examples:
http://cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmd_ref/index.htm
The Cisco TAC website is available to all customers who need technical assistance. To access the TAC Website go to:
11 Obtaining Documentation
Cisco provides several ways to obtain documentation, technical assistance, and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation on the World Wide Web at this URL:
http://www.cisco.com/univercd/home/home.htm
You can access the Cisco website at this URL:
International Cisco websites can be accessed from this URL:
http://www.cisco.com/public/countries_languages.shtml
Documentation CD-ROM
Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which may have shipped with your product. The Documentation CD-ROM is updated regularly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual or quarterly subscription.
Registered Cisco.com users can order a single Documentation CD-ROM (product number DOC-CONDOCCD=) through the Cisco Ordering tool:
http://www.cisco.com/en/US/partner/ordering/ordering_place_order_ordering_tool_launch.html
All users can order annual or quarterly subscriptions through the online Subscription Store:
http://www.cisco.com/go/subscription
Ordering Documentation
You can find instructions for ordering documentation at this URL:
http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm
You can order Cisco documentation in these ways:
•
http://www.cisco.com/en/US/partner/ordering/index.shtml
•
Documentation Feedback
You can submit comments electronically on Cisco.com. On the Cisco Documentation home page, click Feedback at the top of the page.
You can send your comments in e-mail to bug-doc@cisco.com.
You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
12 Obtaining Technical Assistance
For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco Technical Assistance Center (TAC) provides 24-hour, award-winning technical support services, online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for technical assistance.
Cisco TAC Website
Accessing all the tools on the Cisco TAC website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a login ID or password, register at this URL:
http://tools.cisco.com/RPF/register/register.do
Opening a TAC Case
For P1 or P2 cases (your production network is down or severely degraded) or if you do not have Internet access, contact Cisco TAC by telephone. Cisco TAC engineers are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.
To open a case by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447For a complete listing of Cisco TAC contacts, go to this URL:
http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml
TAC Case Priority Definitions
To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.
Priority 1 (P1)—Your network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Priority 2 (P2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Priority 3 (P3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
13 Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
http://www.cisco.com/en/US/products/products_catalog_links_launch.html
•
Packet magazine is the Cisco quarterly publication that provides the latest networking trends, technology breakthroughs, and Cisco products and solutions to help industry professionals get the most from their networking investment. Included are networking deployment and troubleshooting tips, configuration examples, customer case studies, tutorials and training, certification information, and links to numerous in-depth online resources. You can access Packet magazine at this URL:
http://www.cisco.com/go/packet
•
http://www.cisco.com/go/iqmagazine
•
http://www.cisco.com/en/US/about/ac123/ac147/about_cisco_the_internet_protocol_journal.html
•
http://www.cisco.com/en/US/learning/index.html
