Installing the Cisco 1121 Secure Access Control System Hardware

4-Post Rack-Mount Hardware Kit

Figure 4-1 shows the items that you need to install the CSACS-1121 Series appliance in a 4-post rack.

Figure 4-1 Release Levers on the Slide Rail Hardware

The following table describes the callouts in Figure 4-1.

Table 4-1 lists the contents of the rack-mount hardware kit (Cisco part number CSACS-1U-RAILS).

Installing the Slide Rails in a Rack

To install the CSACS-1121 Series appliance in a rack:

Step 1 Press on the rail-adjustment bracket on the rear of the slide rail (see Figure 4-2) to prevent the bracket from moving.

Step 2 Press the adjustment tabs 1 and 2 (see Figure 4-2) and slide the rail-locking carrier toward the front of the slide rail until it snaps into place.

Step 3 Press the adjustment Tabs 1 and 2 and slide the rail-locking carrier toward the rear of the slide until it snaps into place.

Figure 4-2 Installing the Slide Rail into the Rack

The following table describes the callouts in Figure 4-2.

If you need to adjust the slide-rail length, lift the release tab (see Figure 4-3) and fully extend the rail-adjustment bracket from the rear of the slide rail until it snaps into place.

Step 4 Align the pins on the rear rail-locking carrier with the holes on the rear mounting flange.

Step 5 Press the adjustment tab (see Figure 4-3) to secure the rear of the slide rail to the rear mounting flange.

Note Ensure that the pins are fully extended through the mounting flange and slide rail.

Figure 4-3 Adjusting the Slide-rail Length

The following table describes the callouts in Figure 4-3.

Step 6 Align the pins (see Figure 4-4) on the front rail-locking carrier to the front mounting flange.

If you have adjusted the rail length, push the rail-locking carrier back toward the rear of the slide rail to align the slide rail with the mounting flange.

Step 7 Press the adjustment tab to secure the front of the slide rail to the front mounting flange.

Note Ensure that the pins are fully extended through the mounting flange and the slide rail.

Step 8 Repeat these steps for the other slide rail.

Figure 4-4 Aligning the Slide Rail with the Mounting Flange

The following table describes the callouts in Figure 4-4.

Installing the Appliance into the Slide Rails

To install the CSACS-1121 Series appliance into the slide rails:

Step 1 Align the server on the slide rails and push it fully into the rack cabinet.

Step 2 Secure the server to the front mounting flanges with the captive thumbscrews (see Figure 4-5).

Note You must leave the shipping brackets attached to the slide rails unless the shipping brackets impede the server from sliding fully into the rack cabinet. If you need to remove the shipping brackets, see Step 3 .

Figure 4-5 Aligning the Server on the Slide Rails

The following table describes the callouts in Figure 4-5.

Step 3 Press the release tab (see Figure 4-6) as indicated on the shipping bracket, and remove the shipping bracket from the slide rail.

Step 4 Repeat step 3 for the other shipping bracket. Store the shipping brackets for future use.

Note You must reinstall the shipping brackets on the slide rails before you transport the rack cabinet with the server installed. To reinstall the shipping brackets, reverse the steps.

Figure 4-6 Removing the Shipping Brackets

The following table describes the callout in Figure 4-6.

Connecting the Network Interface

Warning Do not work on the system or connect or disconnect cables during periods of lightning activity. Statement 1001

This section describes how to connect the CSACS-1121 Series appliance Ethernet port.

The Ethernet connector supports Serial over Lan (SOL). The RJ-45 port supports standard straight-through and crossover Category 5 unshielded twisted-pair (UTP) cables. Cisco does not supply Category 5 UTP cables; these cables are available commercially.

To connect the cable to the appliance Ethernet port:

Step 1 Verify that the appliance is turned off.

Step 2 Connect one end of the cable to the Gigabit Ethernet 0 port on the appliance.

Step 3 Connect the other end to a switch in your network.

Ethernet Port Connector

The CSACS 1121 Series appliance comes with two integrated dual-port Ethernet controllers. ACS 5.4 supports multiple NICs. See Multiple Network Interface Connector for more information. These controllers provide an interface for connecting to 10-Mb/s, 100-Mb/s, or 1000-Mb/s networks and provide full-duplex (FDX) capability, which enables simultaneous transmission and reception of data on the Ethernet LAN.

To access the Ethernet port, connect a Category 3, 4, 5, 5E, or 6 unshielded twisted-pair (UTP) cable to the RJ-45 connector on the back of the appliance.

Table 4-2 describes the UTP cable Categories.

Figure 4-9 shows the Ethernet RJ-45 port and plug.

Figure 4-9 RJ-45 Port and Plug

Table 4-3 lists and describes the RJ-45 pin signals used on the connector.

Multiple Network Interface Connector

ACS 5.4 with the SNS-3415, Virtual machine, or CSACS-1121 platform allows you to use up to four network interfaces: Ethernet 0, Ethernet 1, Ethernet 2, and Ethernet 3.

Note You need to make sure that the Ethernet 0 interface is up and running successfully, to avoid system failure.

Table 4-4 lists the ACS 5.4 functional interfaces which are distributed among the network interfaces.

CS management functions use only the Ethernet 0 interface, whereas authentication, authorization, and accounting (AAA) protocols use all of the configured network interfaces. You must connect the ACS nodes in the distributed deployment only to Ethernet 0. The syslog messages are sent and received at the log collector’s Ethernet 0 interface. Data forwarding from one interface to another interface is prohibited to prevent potential security issues. The external identity stores are supported only on the Ethernet 0 interface. In ACS 5.4, multiple network interface connectors are also supported for the RADIUS and TACACS+ proxy functionalities.

The CLI and ACS management interfaces are accessible from both Ethernet 0 and Ethernet 1 interfaces if you configure both the Ethernet 0 and Ethernet 1 interfaces with IP addresses from the same subnet. Therefore, to restrict CLI and ACS management interface only to Ethernet 0 interface, the IP addresses for the Ethernet 0 and Ethernet 1 interfaces should be from different subnets.

Configuring Multiple Network Interfaces

By default, Ethernet 0 interface takes the IP address that is assigned for ACS. However, for the other Ethernet ports, you must configure the IP address manually.

To configure the IP address for Ethernet ports, complete the following steps:

Step 1 Login to the ACS CLI using the CLI username and password.

Step 2 Enter su admin to enter in to the EXEC mode.

Step 3 Enter config t to enter in to the configuration mode of the ACS CLI.

Step 4 Enter the command interface GigabitEthernet <interface_number>.

Step 5 Enter the command no shutdown to bring the interface up.

Step 6 Enter the command ip address <IP address> <Subnet Mask>.

The console displays the following message:

Changing the IP may result in undesired side effects on any installed application(s).

Are you sure you want to proceed? Y/N [N]:

Step 7 Enter Y.

The specified interface is configured with the given IP address.

ACS restarts automatically. Wait for some time to make sure that all the processes are up and running successfully.

In an IPv6 enabled network, the Ethernet interfaces other than Ethernet 0 use an IPv6 address. If you want to use IPv4 address for the other Ethernet ports, you must configure IPv4 addresses using the ip address <IPv4 address> <IP-Mask> command as described above.

Note ACS 5.4 supports IPv4 and IPv6 dual stack networking and does not support pure IPv6 network.

Connecting the Console

Warning Do not work on the system or connect or disconnect cables during periods of lightning activity. Statement 1001

Your CSACS-1121 Series appliance has a DCE-mode console port for connecting a console terminal to your appliance. The appliance uses a DB-9 serial connector for the console port.

The console port on the CSACS-1121 Series appliance includes an EIA/TIA-232 asynchronous serial (DB-9) connector. This serial console connector (port) allows you to access the appliance locally by connecting a terminal—either a PC running terminal-emulation software or an ASCII terminal—to the console port.

To connect a PC running terminal-emulation software to the console port, use a DB-9 female to DB-9 female straight-through cable.

To connect an ASCII terminal to the console port, use a DB-9 female to DB-25 male straight-through cable with a DB-25 female to DB-25 female gender changer.

To connect a terminal or a PC running terminal-emulation software to the console port on the CSACS-1121 Series appliance:

Step 1 Connect the terminal using a straight-through cable to the console port.

Step 2 Configure your terminal or terminal-emulation software for 9600 baud, 8 data bits, no parity, 1 stop bit, and no hardware flow control.

Serial (Console) Port Connector

The CSACS 1121 Series appliance has one serial port connector located on the back panel of the appliance.

Figure 4-10 shows the pin number assignments for the 9-pin, male D-shell serial port connector located on the back panel of the appliance. These pin number assignments are those defined for RS-232-C and conform to industry standards.

Figure 4-10 Serial Port Connector

Table 4-5 lists and describes the serial (console) port pinout.

Connecting the Keyboard and Video Monitor

Warning Do not work on the system or connect or disconnect cables during periods of lightning activity. Statement 1001

This section describes how to connect a keyboard and video monitor to the CSACS-1121 Series appliance.

As an alternative to the keyboard and video monitor, you can use a serial console to connect to the CSACS-1121 appliance.

The CSACS-1121 appliance does not provide support for a mouse.

The CSACS-1121 provides USB ports on the front and rear of the appliance that can be used to connect a keyboard and video monitor.

To connect a keyboard and video monitor to the appliance:

Step 1 Verify that the appliance is turned off.

Step 2 Connect the end of the keyboard cable to the PS/2 (keyboard) port which is located on the back panel of the appliance.

Step 3 Connect the end of the video monitor cable to the PS/2 (video monitor) port which is located on the back panel of the appliance.

Step 4 Power on the appliance.

Cable Management

Cable management is the most visual aspect of your appliance setup. However, cable management is often overlooked because it can be time consuming.

Equipment racks and enclosures house more equipment today than ever before. This growth has increased the need for organized cable management both inside and outside the rack. Poor cable management not only leads to damaged cables or increased time for adding or changing cables, but also blocks critical airflow or access. These problems can lead to inefficiencies in the performance of your equipment or even downtime.

There are many solutions to address cable management. They can range from simple cable management rings, to vertical or horizontal organizers, to troughs and ladders.

All CSACS-1121 Series appliance cables should be properly dressed so as not to interfere with each other or other pieces of equipment. Use local practices to ensure that the cables attached to your appliance are properly dressed.

Proceed to the next section, Powering Up the CSACS-1121 Series Appliance, to continue the installation process.

Checklist for Power Up

You are ready to power up the CSACS-1121 Series appliance if:

• The appliance is securely mounted.
• Power, network, and interface cables are properly connected.

Power-Up Procedure

To power up the CSACS-1121 Series appliance and verify its initialization and self-test, follow this procedure. When the procedure is completed, the appliance is ready to be configured.

Step 1 Review the information in Safety Guidelines.

Step 2 Plug the AC power cord into the power cord receptacle at the rear of the appliance. (See location 1 in Figure 4-7.)

Step 3 Connect the other end of the power cord to a power source at your installation site.

Step 4 Press the power button on the front of the appliance. (See location 2 in Figure 4-11.)

The appliance should begin booting. After the operating system boots, you are ready to initialize the basic software configuration. For configuration procedures, see the software installation guide or user guide.

Figure 4-11 CSACS-1121 Series Appliance Front View

The following table describes the callouts in Figure 4-11.

Checking the LEDs

When the CSACS-1121 Series appliance is up and running, observe the front-panel LEDs. The following LEDs provide power, activity, and status information:

CSACS-1121 Appliance Front-Panel LEDs

• Appliance power, green:

– On when power is on.

– Off when power is off or an error condition has been detected in the operating voltages.

• Hard disk activity, green:

– On when appliance software has booted up and the appliance is operational.

– Off when appliance has not yet booted or an error condition has been detected in the boot process.

For more detailed information about the LEDs, see Troubleshooting.

Removing a CSACS-1121 Series Appliance

To remove a CSACS-1121 Series appliance from your network:

Step 1 Power down the appliance.

Step 2 Disconnect the power cords and network cables.

Step 3 Physically remove the appliance from the rack.

The appliance is in constant communication on your network; thus, when the network notices that the appliance is no longer responding to it, the network stops sending requests to the appliance. This change is visible to users.

Note If other appliances are attached to the network, the network continues sending requests to the other appliances.

Replacing a CSACS-1121 Series Appliance

To replace an appliance:

Step 1 Remove the appliance from the network.

Step 2 Install a new appliance using the same installation procedures that you used for the previous appliance.

Step 3 Configure the new appliance using the same configuration parameters that you used for the removed appliance.