-
Cisco 7100 Series VPN Router Installation and Configuration Guide
-
Index
-
7100 ICG - Title
-
7100 ICG - Preface
-
7100 ICG - Overview
-
7100 ICG - Preparing for Installation
-
7100 ICG - Installing the Router
-
7100 ICG - Configuring the Router
-
7100 ICG - Troubleshooting the Installation
-
7100 ICG - Appendix A - Modular Port Adapter Configuration Guidelines
-
7100 ICG - Appendix B - System Specs
-
7100 ICG - Appendix C - Cable Specifications
-
7100 ICG - Index
-
Table Of Contents
Cisco 7120-AT3, Cisco 7120-AE3, and Cisco 7120-SMI3
Cisco 7140-2AT3, Cisco 7140-2AE3, and Cisco 7140-2MM3
Integrated Service Module (ISM)/Integrated Service Adapter (ISA)
Rack-Mount and Cable-Management Kit
Chassis Slot and Logical Interface Numbering
Interface Information in the Software
Peripheral Component Interconnect Buses
Environmental Monitoring and Reporting Functions
Displaying Environmental Status Reports
Overview
This chapter provides physical and functional overviews of Cisco 7100 series VPN routers and contains the following sections that describe router hardware, major components, and functions of hardware-related features:
Product Description
Cisco 7100 series VPN routers support Virtual Private Networks (VPNs) and provide an integrated solution for security, quality of service (QoS), and service-level validation with emphasis on network technologies such as encryption and tunneling using IP Security (IPSec), Layer 2 Tunneling Protocol (L2TP), Generic Routing Encapsulation (GRE), and Layer 2 Forwarding (L2F) tunneling to ensure private transactions over public data networks. Cisco 7100 series VPN routers are designed for the enterprise WAN edge market and customer premises equipment (CPE) for the service provider as shown in Figure 1-1.
Note
For more information on VPN software features, refer to the Cisco 7100 Series VPN Configuration Guide available online and on the Documentation CD.
Figure 1-1 Cisco 7100 Series Routers in a Virtual Private Network
Cisco 7100 series VPN routers include the following:
•
•
The Cisco 7120 series is available in six models, and the Cisco 7140 series is available in five models. The models are defined by the WAN interface.
Figure 1-2 shows the front of a Cisco 7100 series VPN router. The front of the router is the same on both Cisco 7120 series and Cisco 7140 series routers. The specific model number is located on the back of each unit.
Figure 1-2 Cisco 7100 Series—Front View
Cisco 7100 series VPN routers support the following features:
•
•
•
•
–
–
•
Figure 1-3 shows a Cisco 7120 series router from the back and Figure 1-4 shows a Cisco 7140 series router. All interface connections and LEDs are located at the back of the router.
The Cisco 7100 series VPN routers have the following components:
•
•
•
•
•
•
•
•
•
•
•
•
Figure 1-3 Cisco 7120 Series—Back View
Figure 1-4 Cisco 7140 Series—Back View
Cisco 7120 series routers have one power supply with one AC-input power receptacle; Cisco 7140 series routers have two power supplies with two AC-input power receptacles for power load-sharing and redundancy. A modular power cable connects each AC-input power supply to the site AC power source. The router's main power switch is located next to the AC-input power receptacles.
Cisco 7140 series routers will operate with power connected to either of the two power supplies. The second AC-input power supply simply enables power load-sharing and redundancy. There is no primary or secondary power supply for Cisco 7140 series routers.
We recommend powering the router from a 15A receptacle at the power source.
On the side of each chassis are two chassis ground receptacles that provide a chassis ground connection for a two-hole grounding lug. On the back of the chassis, there is a receptacle for electrostatic discharge (ESD) equipment. (See Figure 1-3 and Figure 1-4.)
Four internal fans draw cooling air into the chassis (back to front) and across internal components to maintain an acceptable operating temperature. There are four environmental sensors for monitoring the cooling air as it leaves the chassis. For more information on environmental monitoring, see the "Environmental Monitoring and Reporting Functions" section.
Caution
The modular port adapter slides into the chassis slot and connects directly to the router; there are no internal cables to connect.
The port adapter, service module, fixed WAN interfaces, and fixed LAN interfaces connect to two Peripheral Component Interconnect (PCI) buses on the router's backplane that provide a path to packet I/O memory and the system processor. For more information, see the "Peripheral Component Interconnect Buses" section.
Cisco 7100 series VPN routers can be installed on a tabletop or in an equipment rack. Rubber feet for tabletop installation are included in the accessory kit that shipped with your router. A rack-mount and cable-management kit is also standard equipment when Cisco 7100 series VPN routers are shipped from the factory. The kit provides the hardware needed to mount the router in a standard 19- or 23-inch, four-post or telco-type equipment rack. The kit also provides the hardware necessary to manage the interface cables attached to the router. The product number for the rack-mount kit is ACS-7100-RMK=. Instructions for setting the router on a tabletop, installing the router in an equipment rack, and attaching the cable-management bracket are the same for all Cisco 7100 series VPN models and are explained in "Installing a Cisco 7100 VPN Series Router."
Cisco 7120 Series Overview
Cisco 7120 series routers include the following models:
•
•
•
•
•
•
Cisco 7120-4T1
The Cisco 7120-4T1 provides four channel-independent, synchronous serial ports that support full-duplex operation at T1 (1.544-Mbps) and E1 (2.048-Mbps) speeds. The Cisco 7120-4T1 provides the following features:
•
•
•
•
•
Figure 1-5 shows the back of the Cisco 7120-4T1. Access to the interfaces is located at the back of the router.
Figure 1-5 Cisco 7120-4T1—Back View
The Cisco 7120-4T1 WAN ports have one enabled (EN) LED and five status LEDs (each of the four ports has a set of status LEDs). After system initialization, the enabled LED goes on to indicate that all ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-6 and described in Table 1-1.
Figure 1-6 Cisco 7120-4T1 WAN Port LEDs
1 DTR = Data Terminal Ready.
2 DSR = Data Set Ready.
3 RTS = Request To Send.
4 CTS = Clear To Send.
5 DCD = Data Carrier Detect.
Cisco 7120-T3
The Cisco 7120-T3 provides one high-speed, synchronous serial port that supports full-duplex operation at T3 (45-Mbps) speeds. The Cisco 7120-T3 provides the following features:
•
•
•
•
•
•
•
Figure 1-7 shows the back of the Cisco 7120-T3. Access to the interfaces is located at the back of the router.
Figure 1-7 Cisco 7120-T3—Back View
The Cisco 7120-T3 WAN port has one enabled LED and six uplink port status LEDs. After system initialization, the enabled LED goes on to indicate that the port has been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-8 and described in Table 1-2.
Figure 1-8 Cisco 7120-T3 WAN Port LEDs
Cisco 7120-E3
The Cisco 7120-E3 provides one high-speed, synchronous serial port that supports full-duplex operation at E3 (34-Mbps) speeds. The Cisco 7120-E3 provides the following features:
•
•
•
•
•
•
•
•
•
Figure 1-9 shows the back of the Cisco 7120-E3. Access to the interfaces is located at the back of the router.
Figure 1-9 Cisco 7120-E3—Back View
The Cisco 7120-E3 WAN port has one enabled LED and six uplink port status LEDs. After system initialization, the enabled LED goes on to indicate that the port has been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-10 and described in Table 1-3.
Figure 1-10 Cisco 7120-E3 WAN Port LEDs
Cisco 7120-AT3, Cisco 7120-AE3, and Cisco 7120-SMI3
The Cisco 7120-AT3 provides one high-speed, ATM port that supports full-duplex operation at T3 (45-Mbps) speeds. The Cisco 7120-AE3 provides one high-speed, ATM port that supports full-duplex operation at E3 (34-Mbps) speeds. The Cisco 7120-SMI3 provides one ATM port that supports full-duplex operation at OC-3c/STM1 single-mode intermediate reach (155-Mbps) speeds.
These models provide the following features:
•
•
•
•
•
•
•
•
•
•
•
•
Figure 1-11 shows the back of the Cisco 7120-AT3. Access to the interfaces is located at the back of the router.
Figure 1-11 Cisco 7120-AT3—Back View
Figure 1-12 shows the back of the Cisco 7120-AE3. Access to the interfaces is located at the back of the router.
Figure 1-12 Cisco 7120-AE3—Back View
Figure 1-13 shows the back of the Cisco 7120-SMI3. Access to the interfaces is located at the back of the router.
Figure 1-13 Cisco 7120-SMI3—Back View
The Cisco 7120-AT3, Cisco 7120-AE3, and Cisco 7120-SMI3 WAN ports have one enabled LED and three status LEDs. The LEDs are in the same location and labeled the same on each model. After system initialization, the enabled LED goes on to indicate that the port has been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-14 and described in Table 1-4.
Figure 1-14 Cisco 7120-AT3 WAN Port LEDs
Cisco 7140 Series Overview
Cisco 7140 series routers consist of the following models:
•
•
•
•
•
•
•
Cisco 7140-2T3
The Cisco 7140-2T3 provides two high-speed, synchronous serial ports that support full-duplex operation at T3 (45-Mbps) speeds. The Cisco 7140-2T3 provides the following features:
•
•
•
•
•
•
•
Figure 1-15 shows the back of the Cisco 7140-2T3. Access to the interfaces is located at the back of the router.
Figure 1-15 Cisco 7140-2T3—Back View
The Cisco 7140-2T3 WAN ports have one enabled (EN) LED and six uplink port status LEDs (each port has a set of status LEDs). After system initialization, the enabled LED goes on to indicate that the ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-16 and described in Table 1-5.
Figure 1-16 Cisco 7140-2T3 WAN Port LEDs
Cisco 7140-2E3
The Cisco 7140-2E3 provides two high-speed, synchronous serial ports that support full-duplex operation at E3 (34-Mbps) speeds. The Cisco 7140-2E3 provides the following features:
•
•
•
•
•
•
•
•
•
Figure 1-17 shows the back of the Cisco 7140-2E3. Access to the interfaces is located at the back of the router.
Figure 1-17 Cisco 7140-2E3—Back View
The Cisco 7140-2E3 WAN ports have one enabled (EN) LED and six uplink port status LEDs (each port has a set of status LEDs). After system initialization, the enabled LED goes on to indicate that the ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-18 and described in Table 1-6.
Figure 1-18 Cisco 7140-2E3 WAN Port LEDs
Cisco 7140-2AT3, Cisco 7140-2AE3, and Cisco 7140-2MM3
The Cisco 7140-2AT3 provides two high-speed, ATM ports that support full-duplex operation at T3 (45-Mbps) speeds. The Cisco 7140-2AE3 provides two high-speed, ATM ports that support full-duplex operation at E3 (34-Mbps) speeds. The Cisco 7140-2MM3 provides two ATM ports that support full-duplex operation at OC-3c/STM1 multimode (155-Mbps) speeds.
These models provides the following features:
•
•
•
•
•
•
•
•
•
•
•
•
Figure 1-19 shows the back of the Cisco 7140-2AT3. Access to the interfaces is located at the back of the router.
Figure 1-19 Cisco 7140-2AT3—Back View
Figure 1-20 shows the back of the Cisco 7140-2AE3. Access to the interfaces is located at the back of the router.
Figure 1-20 Cisco 7140-2AE3—Back View
Figure 1-21 shows the back of the Cisco 7140-2MM3. Access to the interfaces is located at the back of the router.
Figure 1-21 Cisco 7140-2MM3—Back View
The Cisco 7140-2AT3, Cisco 7140-2AE3, and Cisco 7140-2MM3 WAN ports have one enabled (EN) LED and three status LEDs (each port has a set of status LEDs). The LEDs are in the same location and labeled the same on each model. After system initialization, the enabled LED goes on to indicate that the ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-22 and described in Table 1-7.
Figure 1-22 Cisco 7140-2AT3 WAN Port LEDs
Cisco 7140-8T
The Cisco 7140-8T provides eight high-speed, synchronous serial ports that support full-duplex operation at T1 (1.544-Mbps) and E1 (2.048-Mbps) speeds. The Cisco 7140-8T provides the following features:
•
•
•
•
•
Figure 1-23 shows the back of the Cisco 7140-8T. Access to the interfaces is located at the back of the router.
Figure 1-23 Cisco 7140-8T—Back View
The Cisco 7140-8T WAN ports have one enabled (EN) LED and five status LEDs (each of the eight ports has a set of status LEDs). After system initialization, the enabled LED goes on to indicate that all ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-24 and described in Table 1-8.
Figure 1-24 Cisco 7140-8T WAN Port LEDs
1 DTR = Data Terminal Ready.
2 DSR = Data Set Ready.
3 RTS = Request To Send.
4 CTS = Clear To Send.
5 DCD = Data Carrier Detect.
Cisco 7140-2FE
The Cisco 7140-2FE provides two fixed LAN ports—10BaseT/100BaseTX autosensing Ethernet/Fast Ethernet (full and half duplex) equipped with an RJ-45 receptacle.
Figure 1-25 Cisco 7140-2FE—Back View
Field-Replaceable Units
Cisco 7100 series VPN routers have the following field-replaceable units (FRUs):
•
•
•
Note
Replacement instructions for removing and replacing other FRUs are contained in separate documents found online, and on the Documentation CD-ROM.
Port Adapters
The port adapters installed in Cisco 7100 series VPN routers are of the same type as those installed in the Cisco 72xx family routers. For information on supported port adapters, refer to the Cisco Product Catalog or contact your local sales representative. The port adapters provide network interfaces to connect the router to external networks.
For a complete list of port adapters available to the Cisco 7100 series VPN routers, see the Cisco 7100 Series VPN Router Documentation—DOC-7814391=
http://www.cisco.com/en/US/products/hw/vpndevc/ps333/products_product_index09186a00800fa142.htmlAll port adapters available for the Cisco 7100 series connect directly to the router and are locked into position by a locking tab with two screws (see Figure 1-26). To remove or replace a port adapter, you must loosen the screws (using a number 2 Phillips screwdriver) and slide the tab down. To lock the port adapter in place, slide the tab up and tighten the screws.
Note
Figure 1-26 Port Adapter Locking Tabs—Cisco 7120 Series
Caution
Integrated Service Module (ISM)/Integrated Service Adapter (ISA)
The ISM/ISA is a Layer 3 encryption module that supports IP Security Protocol (IPSec) encryption of IP datagrams. In addition to enabling the secure use of public switched networks and the Internet through encryption, the ISM/ISA supports all encryption features supported by the Cisco IOS software. The hardware-based services provided by the ISM/ISA improve the overall performance of Cisco 7100 series routers by off-loading data encryption processing from the main system processor.
For more information on ISM or ISA features and for installation and configuration information, refer to the Integrated Service Adapter and Integrated Service Module Installation and Configuration online. This document is also available on the Documentation CD-ROM.
Note
The boot LED remains lit when the ISA/ISM is configured for MPPE, and it starts to pulsate after booting when the ISA/ISM is configured for IPSec. The ISA/ISM functions normally whether the boot LED is pulsating or is solid. See the Integrated Service Adapter and Integrated Service Module Installation and Configuration for more information on configuring the ISA/ISM.
Caution
ISM
The Integrated Service Module (ISM) is a service module that resides in slot 5 in Cisco 7100 series VPN routers. The ISM has three LEDs, as shown in Figure 1-27. Table 1-9 lists the colors and functions of the LEDs.
Figure 1-27 ISM LEDs
Note
Table 1-9 ISM LEDs
EN
Green
On
Indicates the ISM is powered up and enabled for operation.
BOOT
Amber
Pulses1
On
Indicates the ISM is operating.
Indicates the ISM is booting or a packet is being encrypted or decrypted.
ERROR
Amber
On
Indicates an encryption error has occurred. This LED is normally off.
1 After successfully booting, the boot LED pulses in a "heartbeat" pattern to indicate that the ISM is operating. As crypto traffic increases, the nominal level of this LED increases in proportion to the traffic level.
The following conditions must all be met before the enabled LED goes on:
•
•
If either of these conditions is not met, or if the router initialization fails for other reasons, the enabled LED does not go on.
Caution
ISA
The Integrated Service Adapter (ISA) is a service adapter that resides in slot 3 in Cisco 7120 series routers, and slot 4 in the Cisco 7140 series routers. The ISA has three LEDs, as shown in Figure 1-28. Table 1-10 lists the colors and functions of the ISA LEDs.
Figure 1-28 ISA Front Panel LEDs (SA-ISA shown)
Table 1-10 ISA LEDs
ENABLE
Green
On
Indicates the ISA is powered up and enabled for operation.
BOOT
Amber
Pulses1
On
Indicates the ISA is operating.
Indicates the ISA is booting or a packet is being encrypted or decrypted.
ERROR
Amber
On
Indicates an encryption error has occurred.
This LED is normally off.
1 After successfully booting, the boot LED pulses in a "heartbeat" pattern to indicate that the ISA is operating. As crypto traffic increases, the nominal level of this LED increases in proportion to the traffic level.
The following conditions must all be met before the enabled LED goes on:
•
•
If either of these conditions is not met, or if the router initialization fails, the enabled LED does not go on.
VPN Acceleration Module (VAM)
The VPN Acceleration Module (VAM) is a single-width acceleration module. The VAM supports LAN/WAN media and full Layer 3 routing services. VAMs provide hardware-assisted tunneling and encryption services for virtual private network (VPN) remote access, site-to-site intranet and extranet applications, including security, quality of service (QoS), firewall and intrusion detection, and service-level validation and management. The VAM off-loads IPSec processing from the main processor to permit resources on the processor engines for other tasks. The VAM provides hardware-accelerated support for multiple encryption functions.
The VAM is available as a service adapter (SA-VAM), and as a service module (SM-VAM).
SA-VAM
The SA-VAM resides in slot 3 in the Cisco 7120 series routers, and slot 4 in the Cisco 7140 series routers. The SA-VAM has three LEDs, as shown in Figure 1-29. Table 1-11 lists the colors and functions of the SA-VAM LEDs.
Figure 1-29 SA-VAM LEDs
Table 1-11 SA-VAM LEDs
ENABLE
Green
On
Indicates the VAM is powered up and enabled for operation.
BOOT
Amber
Pulses1
On
Indicates the VAM is operating.
Indicates the VAM is booting or a packet is being encrypted or decrypted.
ERROR
Amber
On
Indicates an encryption error has occurred. This LED is normally off.
1 After successfully booting, the boot LED pulses in a "heartbeat" pattern to indicate that the VAM is operating. As crypto traffic increases, the nominal level of this LED increases in proportion to the traffic level.
The following conditions must be met before the enabled LED goes on:
•
•
If either of these conditions is not met, or if the router initialization fails, the enabled LED does not go on.
SM-VAM
The SM-VAM resides in slot 5 in the Cisco 7100 series VPN routers. The SM-VAM has three LEDs, as shown in Figure 1-30. Table 1-12 lists the colors and functions of the LEDs.
Figure 1-30 SM-VAM LEDs
Table 1-12 SM-VAM LEDs
ERROR
Amber
On
Indicates an encryption error has occurred. This LED is normally off.
BOOT
Amber
Pulses1
On
Indicates the SM-VAM is operating.
Indicates the SM-VAM is booting or a packet is being encrypted or decrypted.
ENABLE
Green
On
Indicates the SM-VAM is powered up and enabled for operation.
1 After successfully booting, the boot LED pulses in a "heartbeat" pattern to indicate that the VAM is operating. As crypto traffic increases, the nominal level of this LED increases in proportion to the traffic level.
The following conditions must be met before the enabled LED goes on:
•
•
If either of these conditions is not met, or if the router initialization fails for other reasons, the enabled LED does not go on.
Flash Disks
A Flash Disk is the default memory device that ships with your Cisco 7100 series VPN router.
Cisco 7100 series VPN routers support up to two installed Flash Disks that contain the default Cisco IOS software image. Flash Disks can be installed in slot 0 and slot 1 of the PC Card slots located at the back of the router. Slot 0 is the top slot and slot 1 is the bottom slot.
The PC Card must be installed with the back label facing up. The PC Card is keyed and cannot be seated the wrong way. The ejector button will not pop out if the card is not completely inserted.
To ensure proper electromagnetic compatibility (EMC), the PC Card slot has a cover that is secured with a captive screw. To install or remove a Flash Disk from slot 0 or slot 1, you must loosen the captive screw.
Note
See the Using the Flash Disk document for additional information on the Flash Disk.This document is also available on cisco.com and on the Documentation CD-ROM.
Table 1-13 lists the Flash Disk memory options and their product numbers.
Table 1-13 Flash Disk Memory Options
48 MB
MEM-7100-FLD48M
128 MB
MEM-7100-FLD128M
1 These products are also available as Flash Disk upgrades. To order an upgrade, add an equal sign (=) after the product number, for example, MEM-7100-FLD48M=.
Note
SDRAM Memory
Warning
SDRAM memory consists of three DIMMs on the network processor card that contain the packet and system memory. By default, each chassis comes with 64 MB of fixed packet memory and 64 MB of upgradable system memory. You can have up to 256 MB of SDRAM system memory. (For more information on the network processor, see the "Network Processor Card" section.)
Note
Table 1-14 lists the SDRAM product numbers.
Table 1-14 SDRAM DIMM Configurations
64 MB1
1 64-MB DIMM in slot DIMM 1
1 64-MB DIMM in slot DIMM 02
MEM-7120/40-64S(=)
MEM-7120/40-64P
128 MB3
1 128-MB DIMM in slot DIMM 1
MEM-7120/40-128S=
192 MB
1 128-MB DIMM in slot DIMM 1 and
1 64-MB DIMM in slot DIMM 2MEM-7120/40-192P=
256 MB
2 128-MB DIMMs; 1 in each slot (DIMM 1 and DIMM 2)
MEM-7120/40-256P=
1 This is the default memory configuration for all Cisco 7100 series routers.
2 Slot DIMM 0 is used exclusively for packet memory and is fixed at 64 MB.
3 This memory product will be available in the future.
Note
Slot DIMM 0 is used exclusively for packet memory and is fixed at 64 MB in the factory.
Rack-Mount and Cable-Management Kit
The rack-mount and cable-management kit for Cisco 7100 series routers consists of rack-mount brackets and a cable-management bracket that are designed for mounting your router in 19- or 23-inch, four-post or telco-type equipment racks. The kit is shipped with each Cisco 7100 series router and is also available as a single FRU. The product number for the rack-mount and cable-management kit is ACS-7100-RMK=.
