-
Cisco 7100 Series VPN Router Installation and Configuration Guide
-
Index
-
7100 ICG - Title
-
7100 ICG - Preface
-
7100 ICG - Overview
-
7100 ICG - Preparing for Installation
-
7100 ICG - Installing the Router
-
7100 ICG - Configuring the Router
-
7100 ICG - Troubleshooting the Installation
-
7100 ICG - Appendix A - Modular Port Adapter Configuration Guidelines
-
7100 ICG - Appendix B - System Specs
-
7100 ICG - Appendix C - Cable Specifications
-
7100 ICG - Index
-
Table Of Contents
Cisco 7120-AT3, Cisco 7120-AE3, and Cisco 7120-SMI3
Cisco 7140-2AT3, Cisco 7140-2AE3, and Cisco 7140-2MM3
Integrated Service Module (ISM)/Integrated Service Adapter (ISA)
Rack-Mount and Cable-Management Kit
Chassis Slot and Logical Interface Numbering
Interface Information in the Software
Peripheral Component Interconnect Buses
Environmental Monitoring and Reporting Functions
Displaying Environmental Status Reports
Overview
This chapter provides physical and functional overviews of Cisco 7100 series VPN routers and contains the following sections that describe router hardware, major components, and functions of hardware-related features:
Product Description
Cisco 7100 series VPN routers support Virtual Private Networks (VPNs) and provide an integrated solution for security, quality of service (QoS), and service-level validation with emphasis on network technologies such as encryption and tunneling using IP Security (IPSec), Layer 2 Tunneling Protocol (L2TP), Generic Routing Encapsulation (GRE), and Layer 2 Forwarding (L2F) tunneling to ensure private transactions over public data networks. Cisco 7100 series VPN routers are designed for the enterprise WAN edge market and customer premises equipment (CPE) for the service provider as shown in Figure 1-1.
Note
For more information on VPN software features, refer to the Cisco 7100 Series VPN Configuration Guide available online and on the Documentation CD.
Figure 1-1 Cisco 7100 Series Routers in a Virtual Private Network
Cisco 7100 series VPN routers include the following:
•
•
The Cisco 7120 series is available in six models, and the Cisco 7140 series is available in five models. The models are defined by the WAN interface.
Figure 1-2 shows the front of a Cisco 7100 series VPN router. The front of the router is the same on both Cisco 7120 series and Cisco 7140 series routers. The specific model number is located on the back of each unit.
Figure 1-2 Cisco 7100 Series—Front View
Cisco 7100 series VPN routers support the following features:
•
•
•
•
–
–
•
Figure 1-3 shows a Cisco 7120 series router from the back and Figure 1-4 shows a Cisco 7140 series router. All interface connections and LEDs are located at the back of the router.
The Cisco 7100 series VPN routers have the following components:
•
•
•
•
•
•
•
•
•
•
•
•
Figure 1-3 Cisco 7120 Series—Back View
Figure 1-4 Cisco 7140 Series—Back View
Cisco 7120 series routers have one power supply with one AC-input power receptacle; Cisco 7140 series routers have two power supplies with two AC-input power receptacles for power load-sharing and redundancy. A modular power cable connects each AC-input power supply to the site AC power source. The router's main power switch is located next to the AC-input power receptacles.
Cisco 7140 series routers will operate with power connected to either of the two power supplies. The second AC-input power supply simply enables power load-sharing and redundancy. There is no primary or secondary power supply for Cisco 7140 series routers.
We recommend powering the router from a 15A receptacle at the power source.
On the side of each chassis are two chassis ground receptacles that provide a chassis ground connection for a two-hole grounding lug. On the back of the chassis, there is a receptacle for electrostatic discharge (ESD) equipment. (See Figure 1-3 and Figure 1-4.)
Four internal fans draw cooling air into the chassis (back to front) and across internal components to maintain an acceptable operating temperature. There are four environmental sensors for monitoring the cooling air as it leaves the chassis. For more information on environmental monitoring, see the "Environmental Monitoring and Reporting Functions" section.
Caution
The modular port adapter slides into the chassis slot and connects directly to the router; there are no internal cables to connect.
The port adapter, service module, fixed WAN interfaces, and fixed LAN interfaces connect to two Peripheral Component Interconnect (PCI) buses on the router's backplane that provide a path to packet I/O memory and the system processor. For more information, see the "Peripheral Component Interconnect Buses" section.
Cisco 7100 series VPN routers can be installed on a tabletop or in an equipment rack. Rubber feet for tabletop installation are included in the accessory kit that shipped with your router. A rack-mount and cable-management kit is also standard equipment when Cisco 7100 series VPN routers are shipped from the factory. The kit provides the hardware needed to mount the router in a standard 19- or 23-inch, four-post or telco-type equipment rack. The kit also provides the hardware necessary to manage the interface cables attached to the router. The product number for the rack-mount kit is ACS-7100-RMK=. Instructions for setting the router on a tabletop, installing the router in an equipment rack, and attaching the cable-management bracket are the same for all Cisco 7100 series VPN models and are explained in "Installing a Cisco 7100 VPN Series Router."
Cisco 7120 Series Overview
Cisco 7120 series routers include the following models:
•
•
•
•
•
•
Cisco 7120-4T1
The Cisco 7120-4T1 provides four channel-independent, synchronous serial ports that support full-duplex operation at T1 (1.544-Mbps) and E1 (2.048-Mbps) speeds. The Cisco 7120-4T1 provides the following features:
•
•
•
•
•
Figure 1-5 shows the back of the Cisco 7120-4T1. Access to the interfaces is located at the back of the router.
Figure 1-5 Cisco 7120-4T1—Back View
The Cisco 7120-4T1 WAN ports have one enabled (EN) LED and five status LEDs (each of the four ports has a set of status LEDs). After system initialization, the enabled LED goes on to indicate that all ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-6 and described in Table 1-1.
Figure 1-6 Cisco 7120-4T1 WAN Port LEDs
1 DTR = Data Terminal Ready.
2 DSR = Data Set Ready.
3 RTS = Request To Send.
4 CTS = Clear To Send.
5 DCD = Data Carrier Detect.
Cisco 7120-T3
The Cisco 7120-T3 provides one high-speed, synchronous serial port that supports full-duplex operation at T3 (45-Mbps) speeds. The Cisco 7120-T3 provides the following features:
•
•
•
•
•
•
•
Figure 1-7 shows the back of the Cisco 7120-T3. Access to the interfaces is located at the back of the router.
Figure 1-7 Cisco 7120-T3—Back View
The Cisco 7120-T3 WAN port has one enabled LED and six uplink port status LEDs. After system initialization, the enabled LED goes on to indicate that the port has been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-8 and described in Table 1-2.
Figure 1-8 Cisco 7120-T3 WAN Port LEDs
Cisco 7120-E3
The Cisco 7120-E3 provides one high-speed, synchronous serial port that supports full-duplex operation at E3 (34-Mbps) speeds. The Cisco 7120-E3 provides the following features:
•
•
•
•
•
•
•
•
•
Figure 1-9 shows the back of the Cisco 7120-E3. Access to the interfaces is located at the back of the router.
Figure 1-9 Cisco 7120-E3—Back View
The Cisco 7120-E3 WAN port has one enabled LED and six uplink port status LEDs. After system initialization, the enabled LED goes on to indicate that the port has been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-10 and described in Table 1-3.
Figure 1-10 Cisco 7120-E3 WAN Port LEDs
Cisco 7120-AT3, Cisco 7120-AE3, and Cisco 7120-SMI3
The Cisco 7120-AT3 provides one high-speed, ATM port that supports full-duplex operation at T3 (45-Mbps) speeds. The Cisco 7120-AE3 provides one high-speed, ATM port that supports full-duplex operation at E3 (34-Mbps) speeds. The Cisco 7120-SMI3 provides one ATM port that supports full-duplex operation at OC-3c/STM1 single-mode intermediate reach (155-Mbps) speeds.
These models provide the following features:
•
•
•
•
•
•
•
•
•
•
•
•
Figure 1-11 shows the back of the Cisco 7120-AT3. Access to the interfaces is located at the back of the router.
Figure 1-11 Cisco 7120-AT3—Back View
Figure 1-12 shows the back of the Cisco 7120-AE3. Access to the interfaces is located at the back of the router.
Figure 1-12 Cisco 7120-AE3—Back View
Figure 1-13 shows the back of the Cisco 7120-SMI3. Access to the interfaces is located at the back of the router.
Figure 1-13 Cisco 7120-SMI3—Back View
The Cisco 7120-AT3, Cisco 7120-AE3, and Cisco 7120-SMI3 WAN ports have one enabled LED and three status LEDs. The LEDs are in the same location and labeled the same on each model. After system initialization, the enabled LED goes on to indicate that the port has been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-14 and described in Table 1-4.
Figure 1-14 Cisco 7120-AT3 WAN Port LEDs
Cisco 7140 Series Overview
Cisco 7140 series routers consist of the following models:
•
•
•
•
•
•
•
Cisco 7140-2T3
The Cisco 7140-2T3 provides two high-speed, synchronous serial ports that support full-duplex operation at T3 (45-Mbps) speeds. The Cisco 7140-2T3 provides the following features:
•
•
•
•
•
•
•
Figure 1-15 shows the back of the Cisco 7140-2T3. Access to the interfaces is located at the back of the router.
Figure 1-15 Cisco 7140-2T3—Back View
The Cisco 7140-2T3 WAN ports have one enabled (EN) LED and six uplink port status LEDs (each port has a set of status LEDs). After system initialization, the enabled LED goes on to indicate that the ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-16 and described in Table 1-5.
Figure 1-16 Cisco 7140-2T3 WAN Port LEDs
Cisco 7140-2E3
The Cisco 7140-2E3 provides two high-speed, synchronous serial ports that support full-duplex operation at E3 (34-Mbps) speeds. The Cisco 7140-2E3 provides the following features:
•
•
•
•
•
•
•
•
•
Figure 1-17 shows the back of the Cisco 7140-2E3. Access to the interfaces is located at the back of the router.
Figure 1-17 Cisco 7140-2E3—Back View
The Cisco 7140-2E3 WAN ports have one enabled (EN) LED and six uplink port status LEDs (each port has a set of status LEDs). After system initialization, the enabled LED goes on to indicate that the ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-18 and described in Table 1-6.
Figure 1-18 Cisco 7140-2E3 WAN Port LEDs
Cisco 7140-2AT3, Cisco 7140-2AE3, and Cisco 7140-2MM3
The Cisco 7140-2AT3 provides two high-speed, ATM ports that support full-duplex operation at T3 (45-Mbps) speeds. The Cisco 7140-2AE3 provides two high-speed, ATM ports that support full-duplex operation at E3 (34-Mbps) speeds. The Cisco 7140-2MM3 provides two ATM ports that support full-duplex operation at OC-3c/STM1 multimode (155-Mbps) speeds.
These models provides the following features:
•
•
•
•
•
•
•
•
•
•
•
•
Figure 1-19 shows the back of the Cisco 7140-2AT3. Access to the interfaces is located at the back of the router.
Figure 1-19 Cisco 7140-2AT3—Back View
Figure 1-20 shows the back of the Cisco 7140-2AE3. Access to the interfaces is located at the back of the router.
Figure 1-20 Cisco 7140-2AE3—Back View
Figure 1-21 shows the back of the Cisco 7140-2MM3. Access to the interfaces is located at the back of the router.
Figure 1-21 Cisco 7140-2MM3—Back View
The Cisco 7140-2AT3, Cisco 7140-2AE3, and Cisco 7140-2MM3 WAN ports have one enabled (EN) LED and three status LEDs (each port has a set of status LEDs). The LEDs are in the same location and labeled the same on each model. After system initialization, the enabled LED goes on to indicate that the ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-22 and described in Table 1-7.
Figure 1-22 Cisco 7140-2AT3 WAN Port LEDs
Cisco 7140-8T
The Cisco 7140-8T provides eight high-speed, synchronous serial ports that support full-duplex operation at T1 (1.544-Mbps) and E1 (2.048-Mbps) speeds. The Cisco 7140-8T provides the following features:
•
•
•
•
•
Figure 1-23 shows the back of the Cisco 7140-8T. Access to the interfaces is located at the back of the router.
Figure 1-23 Cisco 7140-8T—Back View
The Cisco 7140-8T WAN ports have one enabled (EN) LED and five status LEDs (each of the eight ports has a set of status LEDs). After system initialization, the enabled LED goes on to indicate that all ports have been enabled for operation. If the initialization fails for any reason, the enabled LED will not go on. The LEDs are shown in Figure 1-24 and described in Table 1-8.
Figure 1-24 Cisco 7140-8T WAN Port LEDs
1 DTR = Data Terminal Ready.
2 DSR = Data Set Ready.
3 RTS = Request To Send.
4 CTS = Clear To Send.
5 DCD = Data Carrier Detect.
Cisco 7140-2FE
The Cisco 7140-2FE provides two fixed LAN ports—10BaseT/100BaseTX autosensing Ethernet/Fast Ethernet (full and half duplex) equipped with an RJ-45 receptacle.
Figure 1-25 Cisco 7140-2FE—Back View
Field-Replaceable Units
Cisco 7100 series VPN routers have the following field-replaceable units (FRUs):
•
•
•
Note
Replacement instructions for removing and replacing other FRUs are contained in separate documents found online, and on the Documentation CD-ROM.
Port Adapters
The port adapters installed in Cisco 7100 series VPN routers are of the same type as those installed in the Cisco 72xx family routers. For information on supported port adapters, refer to the Cisco Product Catalog or contact your local sales representative. The port adapters provide network interfaces to connect the router to external networks.
For a complete list of port adapters available to the Cisco 7100 series VPN routers, see the Cisco 7100 Series VPN Router Documentation—DOC-7814391=
http://www.cisco.com/en/US/products/hw/vpndevc/ps333/products_product_index09186a00800fa142.htmlAll port adapters available for the Cisco 7100 series connect directly to the router and are locked into position by a locking tab with two screws (see Figure 1-26). To remove or replace a port adapter, you must loosen the screws (using a number 2 Phillips screwdriver) and slide the tab down. To lock the port adapter in place, slide the tab up and tighten the screws.
Note
Figure 1-26 Port Adapter Locking Tabs—Cisco 7120 Series
Caution
Integrated Service Module (ISM)/Integrated Service Adapter (ISA)
The ISM/ISA is a Layer 3 encryption module that supports IP Security Protocol (IPSec) encryption of IP datagrams. In addition to enabling the secure use of public switched networks and the Internet through encryption, the ISM/ISA supports all encryption features supported by the Cisco IOS software. The hardware-based services provided by the ISM/ISA improve the overall performance of Cisco 7100 series routers by off-loading data encryption processing from the main system processor.
For more information on ISM or ISA features and for installation and configuration information, refer to the Integrated Service Adapter and Integrated Service Module Installation and Configuration online. This document is also available on the Documentation CD-ROM.
Note
The boot LED remains lit when the ISA/ISM is configured for MPPE, and it starts to pulsate after booting when the ISA/ISM is configured for IPSec. The ISA/ISM functions normally whether the boot LED is pulsating or is solid. See the Integrated Service Adapter and Integrated Service Module Installation and Configuration for more information on configuring the ISA/ISM.
Caution
ISM
The Integrated Service Module (ISM) is a service module that resides in slot 5 in Cisco 7100 series VPN routers. The ISM has three LEDs, as shown in Figure 1-27. Table 1-9 lists the colors and functions of the LEDs.
Figure 1-27 ISM LEDs
Note
Table 1-9 ISM LEDs
EN
Green
On
Indicates the ISM is powered up and enabled for operation.
BOOT
Amber
Pulses1
On
Indicates the ISM is operating.
Indicates the ISM is booting or a packet is being encrypted or decrypted.
ERROR
Amber
On
Indicates an encryption error has occurred. This LED is normally off.
1 After successfully booting, the boot LED pulses in a "heartbeat" pattern to indicate that the ISM is operating. As crypto traffic increases, the nominal level of this LED increases in proportion to the traffic level.
The following conditions must all be met before the enabled LED goes on:
•
•
If either of these conditions is not met, or if the router initialization fails for other reasons, the enabled LED does not go on.
Caution
ISA
The Integrated Service Adapter (ISA) is a service adapter that resides in slot 3 in Cisco 7120 series routers, and slot 4 in the Cisco 7140 series routers. The ISA has three LEDs, as shown in Figure 1-28. Table 1-10 lists the colors and functions of the ISA LEDs.
Figure 1-28 ISA Front Panel LEDs (SA-ISA shown)
Table 1-10 ISA LEDs
ENABLE
Green
On
Indicates the ISA is powered up and enabled for operation.
BOOT
Amber
Pulses1
On
Indicates the ISA is operating.
Indicates the ISA is booting or a packet is being encrypted or decrypted.
ERROR
Amber
On
Indicates an encryption error has occurred.
This LED is normally off.
1 After successfully booting, the boot LED pulses in a "heartbeat" pattern to indicate that the ISA is operating. As crypto traffic increases, the nominal level of this LED increases in proportion to the traffic level.
The following conditions must all be met before the enabled LED goes on:
•
•
If either of these conditions is not met, or if the router initialization fails, the enabled LED does not go on.
VPN Acceleration Module (VAM)
The VPN Acceleration Module (VAM) is a single-width acceleration module. The VAM supports LAN/WAN media and full Layer 3 routing services. VAMs provide hardware-assisted tunneling and encryption services for virtual private network (VPN) remote access, site-to-site intranet and extranet applications, including security, quality of service (QoS), firewall and intrusion detection, and service-level validation and management. The VAM off-loads IPSec processing from the main processor to permit resources on the processor engines for other tasks. The VAM provides hardware-accelerated support for multiple encryption functions.
The VAM is available as a service adapter (SA-VAM), and as a service module (SM-VAM).
SA-VAM
The SA-VAM resides in slot 3 in the Cisco 7120 series routers, and slot 4 in the Cisco 7140 series routers. The SA-VAM has three LEDs, as shown in Figure 1-29. Table 1-11 lists the colors and functions of the SA-VAM LEDs.
Figure 1-29 SA-VAM LEDs
Table 1-11 SA-VAM LEDs
ENABLE
Green
On
Indicates the VAM is powered up and enabled for operation.
BOOT
Amber
Pulses1
On
Indicates the VAM is operating.
Indicates the VAM is booting or a packet is being encrypted or decrypted.
ERROR
Amber
On
Indicates an encryption error has occurred. This LED is normally off.
1 After successfully booting, the boot LED pulses in a "heartbeat" pattern to indicate that the VAM is operating. As crypto traffic increases, the nominal level of this LED increases in proportion to the traffic level.
The following conditions must be met before the enabled LED goes on:
•
•
If either of these conditions is not met, or if the router initialization fails, the enabled LED does not go on.
SM-VAM
The SM-VAM resides in slot 5 in the Cisco 7100 series VPN routers. The SM-VAM has three LEDs, as shown in Figure 1-30. Table 1-12 lists the colors and functions of the LEDs.
Figure 1-30 SM-VAM LEDs
Table 1-12 SM-VAM LEDs
ERROR
Amber
On
Indicates an encryption error has occurred. This LED is normally off.
BOOT
Amber
Pulses1
On
Indicates the SM-VAM is operating.
Indicates the SM-VAM is booting or a packet is being encrypted or decrypted.
ENABLE
Green
On
Indicates the SM-VAM is powered up and enabled for operation.
1 After successfully booting, the boot LED pulses in a "heartbeat" pattern to indicate that the VAM is operating. As crypto traffic increases, the nominal level of this LED increases in proportion to the traffic level.
The following conditions must be met before the enabled LED goes on:
•
•
If either of these conditions is not met, or if the router initialization fails for other reasons, the enabled LED does not go on.
Flash Disks
A Flash Disk is the default memory device that ships with your Cisco 7100 series VPN router.
Cisco 7100 series VPN routers support up to two installed Flash Disks that contain the default Cisco IOS software image. Flash Disks can be installed in slot 0 and slot 1 of the PC Card slots located at the back of the router. Slot 0 is the top slot and slot 1 is the bottom slot.
The PC Card must be installed with the back label facing up. The PC Card is keyed and cannot be seated the wrong way. The ejector button will not pop out if the card is not completely inserted.
To ensure proper electromagnetic compatibility (EMC), the PC Card slot has a cover that is secured with a captive screw. To install or remove a Flash Disk from slot 0 or slot 1, you must loosen the captive screw.
Note
See the Using the Flash Disk document for additional information on the Flash Disk.This document is also available on cisco.com and on the Documentation CD-ROM.
Table 1-13 lists the Flash Disk memory options and their product numbers.
Table 1-13 Flash Disk Memory Options
48 MB
MEM-7100-FLD48M
128 MB
MEM-7100-FLD128M
1 These products are also available as Flash Disk upgrades. To order an upgrade, add an equal sign (=) after the product number, for example, MEM-7100-FLD48M=.
Note
SDRAM Memory
Warning
SDRAM memory consists of three DIMMs on the network processor card that contain the packet and system memory. By default, each chassis comes with 64 MB of fixed packet memory and 64 MB of upgradable system memory. You can have up to 256 MB of SDRAM system memory. (For more information on the network processor, see the "Network Processor Card" section.)
Note
Table 1-14 lists the SDRAM product numbers.
Table 1-14 SDRAM DIMM Configurations
64 MB1
1 64-MB DIMM in slot DIMM 1
1 64-MB DIMM in slot DIMM 02
MEM-7120/40-64S(=)
MEM-7120/40-64P
128 MB3
1 128-MB DIMM in slot DIMM 1
MEM-7120/40-128S=
192 MB
1 128-MB DIMM in slot DIMM 1 and
1 64-MB DIMM in slot DIMM 2MEM-7120/40-192P=
256 MB
2 128-MB DIMMs; 1 in each slot (DIMM 1 and DIMM 2)
MEM-7120/40-256P=
1 This is the default memory configuration for all Cisco 7100 series routers.
2 Slot DIMM 0 is used exclusively for packet memory and is fixed at 64 MB.
3 This memory product will be available in the future.
Note
Slot DIMM 0 is used exclusively for packet memory and is fixed at 64 MB in the factory.
Rack-Mount and Cable-Management Kit
The rack-mount and cable-management kit for Cisco 7100 series routers consists of rack-mount brackets and a cable-management bracket that are designed for mounting your router in 19- or 23-inch, four-post or telco-type equipment racks. The kit is shipped with each Cisco 7100 series router and is also available as a single FRU. The product number for the rack-mount and cable-management kit is ACS-7100-RMK=.
Note
For detailed instructions about how to install the rack-mount and cable-management brackets on your Cisco 7100 series router, see the "Rack-Mounting the Chassis" section and the "Connecting to the Network" section.
Note
Functional Overview
The following sections provide a functional overview of Cisco 7100 series VPN routers to help you become familiar with the capabilities of the router:
•
•
•
Chassis Slot and Logical Interface Numbering
In Cisco 7100 series VPN routers, the slot number is the location in the chassis where the interface resides and the port number is the physical port associated with that slot. Cisco 7100 series router slots are numbered 0 through 5. Interfaces in the Cisco IOS software are identified by a type, slot number, and port number. The number of physical ports depends on the type of modular port adapter or fixed interface. For example, in a Cisco 7120-4T1, serial 1/0 indicates port 0 on the fixed serial interface in slot 1. (See Figure 1-5.)
Slots in the Cisco 7120 series are numbered as follows and are shown in Figure 1-31:
•
•
•
•
•
•
Figure 1-31 Port Adapter Slot Numbering—Cisco 7120 Series
Slots in the Cisco 7140 series are numbered as follows and are shown in Figure 1-32:
•
•
•
•
•
•
Figure 1-32 Port Adapter Slot Numbering—Cisco 7140 Series
Interface Information in the Software
You can identify interfaces by using software commands. To display information about all interfaces, use the show interfaces command. To display information about a specific interface, use the show interfaces command with the interface type, slot number, and port number in the format show interfaces type slot/port.
The following example shows how the show interfaces command, used without arguments, displays status information (including the slot and port number) for each interface in a Cisco 7100 series VPN router. In the following example, most of the status information for each interface is omitted:
Router# show interfacesFastEthernet0/0 is up, line protocol is upHardware is DEC21140A, address is 0050.73ff.6300 (bia 0050.73ff.6300)Internet address is 10.0.0.0/1MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,(display text omitted)FastEthernet0/1 is administratively down, line protocol is downHardware is DEC21140A, address is 0050.73ff.6301 (bia 0050.73ff.6301)Internet address is 10.0.0.0/2MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,(display text omitted)Serial1/0 is administratively down, line protocol is downHardware is M2T-T3 paMTU 4470 bytes, BW 44210 Kbit, DLY 200 usec,(display text omitted)Serial1/1 is administratively down, line protocol is downHardware is M2T-T3 paMTU 4470 bytes, BW 44210 Kbit, DLY 200 usec,(display text omitted)FastEthernet4/0 is administratively down, line protocol is downHardware is DEC21140, address is 0050.73ff.6370 (bia 0050.73ff.6370)MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,(display text omitted)You can also use arguments such as the interface type (Ethernet, Token Ring, ATM, and so forth) and the slot/port number to display information about a specific interface only. The following example shows the display for the fixed LAN (Fast Ethernet interface) port 0 in slot 0:Router# show interfaces fastethernet 0/0FastEthernet0/0 is up, line protocol is upHardware is DEC21140A, address is 0050.73ff.6300 (bia 0050.73ff.6300)Internet address is 10.0.0.0/1MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,reliablility 255/255, txload 1/255, rxload 1/255Encapsulation ARPA, loopback not setKeepalive set (10 sec)Half-duplex, 10Mb/s, 100BaseTX/FXARP type:ARPA, ARP Timeout 04:00:00Last input 00:00:04, output 00:00:03, output hang neverLast clearing of "show interface" counters neverQueueing strategy:fifoOutput queue 0/40, 0 drops; input queue 0/75, 0 drops5 minute input rate 2000 bits/sec, 1 packets/sec5 minute output rate 0 bits/sec, 0 packets/sec134 packets input, 41451 bytesReceived 134 broadcasts, 0 runts, 0 giants, 0 throttles0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 0 multicast0 input packets with dribble condition detected26 packets output, 5281 bytes, 0 underruns0 output errors, 0 collisions, 0 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier0 output buffer failures, 0 output buffers swapped outFor information on the other commands used to configure the router, refer to the Cisco IOS configuration guides and command references, which are available on the Documentation CD-ROM or in print.
MAC Addresses
The Media Access Control (MAC) or hardware address is a standardized data-link layer address that is required for certain network interface types. These addresses are not used by other devices in the network; they are specific and unique to each port. The router uses a specific method to assign and control the MAC addresses of its port adapters.
All LAN interfaces (ports) require unique MAC addresses. Typically, the MAC address of an interface is stored on a memory component that resides directly on the interface circuitry; however, the online insertion and removal (OIR) feature requires a different method. (For a description of OIR, see "Online Insertion and Removal" section.)
The OIR feature allows you to remove a port adapter and replace it with another identically configured one. If the new port adapter matches the port adapter you removed, the system immediately brings it on line. To allow OIR, an address allocator with unique MAC addresses is stored in an EEPROM on the router. Each address is reserved for a specific port and slot in the router regardless of whether a port adapter resides in that slot. The MAC addresses are assigned to slot 3 in Cisco 7120 series routers and slot 4 in Cisco 7140 series routers. This address scheme allows you to remove a port adapter and insert the port adapter into other routers without causing the MAC addresses to move around the network or be assigned to multiple devices.
If the MAC addresses were stored on each port adapter, OIR would not function because you could never replace one port adapter with an identical one; the MAC addresses would always be different. Also, each time a port adapter was replaced, other devices on the network would have to update their data structures with the new address and, if they did not do so quickly enough, could cause the same MAC address to appear in more than one device at the same time.
Note
Online Insertion and Removal
The modular port adapter installed in Cisco 7100 series VPN routers supports OIR. This function allows you to install and replace a port adapter while the router is operating; you do not need to notify the software or shut down the system power. This provides a method that is seamless to end users on the network, maintains all routing information, and preserves sessions.
The following is a functional description of OIR for background information only; for specific procedures for installing and replacing a port adapter in a Cisco 7100 series VPN router, see the configuration note that ships with each port adapter.
Each port adapter has a bus connector that connects it to the router. Each connector has a set of tiered pins in three lengths that send specific signals to the system as they make contact with the port adapter. The system assesses the signals it receives and the order in which it receives them to determine if a port adapter is being removed or inserted into the router. From these signals, the system determines whether to reinitialize a new interface or shut down a removed interface. For example, when you insert a port adapter, the longest pins make contact with the port adapter first, and the shortest pins make contact last. The system recognizes the signals and the sequence in which it receives them.
When you remove or insert a port adapter in a Cisco 7100 series VPN router, the port adapter pins send signals to notify the system, which then performs as follows:
1.
2.
3.
Peripheral Component Interconnect Buses
All interfaces connect to two Peripheral Component Interconnect (PCI) buses on the router that provide a path to packet I/O memory and the network processor. Interfaces in slots 1, 3, and 5 use PCI bus 0 and interfaces in slots 0, 2, and 4 use PCI bus 1. For port adapters that are installed in the modular port adapter slots (slot 3 or slot 4), use the guidelines described in "Modular Port Adapter Configuration Guidelines," to ensure sufficient bandwidth.
The maximum recommended bandwidth points on each PCI bus is 600 points. For best performance we recommend that you avoid using port adapters that exceed the total available bandwidth for your router.
Network Processor Card
The network processor card resides inside the chassis and is shown in Figure 1-33. The network processor card provides the following features:
•
•
•
•
The network processor card also performs the following system management functions:
•
•
•
•
•
•
•
Note
Figure 1-33 Network Processor Card
The network processor card consists of the following components:
•
•
•
Note
Slot DIMM 0 is used exclusively for packet memory and is fixed at 64 MB in the factory.•
–
–
•
•
•
•
•
•
•
•
Table 1-15 describes the memory types on the network processor card.
Table 1-15 Network Processor Memory Components
SDRAM memory
64 to 128 MB
2 configurable1 SDRAM slots
64-128-MB DIMMs (based on maximum SDRAM required)
DIMM 1 = U13
DIMM 2 = U14Boot ROM
512 KB
1
OTP2 ROM for the ROM monitor program
Socket U21
Primary cache
Cisco 7120
32 KB (instruction), 32 KB (data)
-
Processor's primary internal cache
Internal to processor
Cisco 7140
16 KB (instruction), 16 KB (data)
-
Processor's primary internal cache
Internal to processor
Secondary cache3
256 KB
-
Processor's secondary unified instruction and data cache
Internal to Cisco 7140 processors only
External cache
2 MB (fixed)
-
Secondary external cache for Cisco 7120 series processors
Tertiary external cache for Cisco 7140 series processors
-
Flash memory SIMM
8 MB
1
Contains the default boot helper image
Flash SIMM socket P2
Flash Disk
48 MB and 128 MB
Up to 2
Contains the default Cisco IOS image
PC Card slot 0 and slot 1
NVRAM
128 KB
1
Nonvolatile EPROM for the system configuration file
U69
1 Slot DIMM 0 (U16) is used exclusively for packet memory and is not user-configurable.
2 OTP = one-time programmable.
3 Cisco 7120 series routers do not have a secondary internal cache.
To identify the processor and software version installed in your Cisco 7100 series VPN router, use the show version command. The following example using a Cisco 7120 series router shows sample output from the show version command:
Router# show versionCisco Internetwork Operating System SoftwareIOS (tm) EGR Software (c7100-P-M), Released Version 12.0(4)XE Copyright (c) 1986-1999 by cisco Systems, Inc.Compiled Mon 07-Jun-99 17:49 by biffImage text-base:0x600088F8, data-base:0x60A54000ROM:System Bootstrap, Version 12.0(4)XE, RELEASED SOFTWAREBOOTFLASH:EGR Software (c7100-BOOT-M), Released Version 12.0(4)XERouter uptime is 19 minutesSystem restarted by reloadSystem image file is "c7100-p-mz"cisco 7120-T3 (EGR) processor with 61440K/69632K bytes of memory.R527x CPU at 225Mhz, Implementation 40, Rev 10.0, 2048KB L2 CacheLast reset from power-onX.25 software, Version 3.0.0.3 FastEthernet/IEEE 802.3 interface(s)1 Serial network interface(s)125K bytes of non-volatile configuration memory.4096K bytes of Flash internal SIMM (Sector size 256K).Configuration register is 0x2000System LEDs and Reset Button
Cisco 7100 series VPN routers provide LEDs to indicate the status of the router and a CPU reset button that allows you to reset the entire system. The LEDs are shown in Figure 1-34 and described in Table 1-16.
Caution
Figure 1-34 Cisco 7100 Series System LEDs
Note
Environmental Monitoring and Reporting Functions
Environmental monitoring and reporting functions are controlled by the network processor and allow you to maintain normal system operation by identifying and resolving adverse conditions that might disrupt operation.
The environmental monitoring functions constantly monitor the internal chassis air temperature and power supply voltages and currents. The power supply monitors its own voltage and temperature and shuts itself down if it detects a critical condition within the power supply. The reporting functions periodically log the values of measured parameters so that you can retrieve them for analysis later, and the reporting functions display warnings on the console if any of the monitored parameters exceed defined thresholds.
The front and back of the chassis must remain unobstructed to ensure adequate airflow and prevent overheating inside the chassis; we recommend at least 3 inches (7.6 cm) of clearance. Temperature sensors in the router monitor the internal air temperature and send warning messages when the internal air temperature exceeds the specified threshold.
Environmental Monitoring
The environmental monitoring functions use four sensors to monitor the temperature of the cooling air as it moves through the chassis.
If the air temperature exceeds a defined threshold, the router displays warning messages on the console terminal. The system stores the present parameter measurements for both temperature and power voltage in NVRAM so you can retrieve them later.
In addition, the power supply monitors the internal power supply temperature and voltages. A power supply is either within tolerance (normal) or out of tolerance (critical). If the internal power supply temperature or voltage reaches a critical level, the power supply shuts down without any interaction with the system processor.
The environmental monitoring functions use the following levels of status conditions to monitor the system:
•
•
•
Note
Table 1-17 lists the typical temperature thresholds for each network processor type, and Table 1-18 lists the power thresholds for the normal, warning, and critical (power supply-monitored) levels.
Note
Displaying Environmental Status Reports
Cisco 7100 series VPN routers display warning messages on the console if chassis interface-monitored parameters exceed a desired threshold. You can also retrieve and display environmental status reports with the show environment, show environment all, show environment last, and show environment table commands. Parameters are measured and reporting functions are updated every 60 seconds. A brief description of each of these commands follows.
Caution
The show environment command displays the current environmental status of the system. The report displays parameters that are out of the normal values. No parameters are displayed if the system status is normal. The example that follows shows the display for a system in which all monitored parameters are within normal range:
Router# show environmentAll measured values are normalIf the environmental status is not normal, the system reports the worst-case status level. Following is a sample overvoltage warning:
Router# show environmentWarning: +3.3 V measured at +3.41 VThe show environment last command retrieves and displays the NVRAM log, which provides a record of environmental status readings. Air temperature is measured and displayed, and the voltage supplied by the power supply is also displayed.
Following is sample output of the show environment last command:
Router# show environment lastchassis core previously measured at 34C/93Fchassis inlet previously measured at 28C/82Fchassis outlet 1 previously measured at 31C/87Fchassis outlet 2 previously measured at 33C/91F+2.5 V previously measured at +2.59+3.3 V previously measured at +3.32+5.15 V previously measured at +5.13+12.3 V previously measured at +12.99+12.3 V previously measured at +12.33-12.5 V previously measured at -12.43The show environment table command displays the temperature and voltage thresholds for each temperature sensor and for each monitored status level, which are related to those thresholds listed in Table 1-17 and Table 1-18.
Following is sample output of the show environment table command:
Note
The show environment all command displays an extended report that includes temperature readings and voltage readings.
Following is sample output of the show environment all command:
Router# show environment allPower Supply:Power supply is standard power supply. Unit is on.Temperature readings:chassis core measured at 33C/91Fchassis inlet measured at 27C/80Fchassis outlet 1 measured at 30C/86Fchassis outlet 2 measured at 32C/89FVoltage readings:+2.5 V measured at +2.59 V+3.3 V measured at +3.32 V+5.15 V measured at +5.13 V+12.3 V measured at +12.29 V+12.3 V measured at +12.33 V-12.5 V measured at -12.43 VEnvm stats saved 2 time(s) since reloadFan Failures
When the system power is on, all four fans should be operational. The system continues to operate if a fan fails; however, if the air temperature exceeds a defined threshold, the router displays warning messages on the console terminal. (See the "Troubleshooting the Cooling Subsystem" section.)
For complete descriptions and instructions of the environmental monitor commands, refer to the Configuration Fundamentals Configuration Guide and Configuration Fundamentals Command Reference publications, available online and on the Documentation CD.
