Table Of Contents
Cisco Guard and Traffic Anomaly Detector Hardware Installation and Configuration Note
Maintaining Safety with Electricity
Protecting Against Electrostatic Discharge
Preparing Your Site for Installation
Connecting the Appliance to Your Network
Establishing a Console Connection
Configuring Passwords for System User Accounts
Power Disconnection Warning—Statement 1
Installation Warning—Statement 10
Power Cord Warning—Statement 14
SELV Circuit Warning—Statement 22
Jewelry Removal Warning—Statement 43
Safety Cover Requirement—Statement 117
Unit Grounding Protection Warning—Statement 213
AC Power Disconnection Warning—Statement 246
Work During Lightning Activity—Statement 1001
Chassis Warning for Rack-Mounting and Servicing—Statement 1006
Battery Handling—Statement 1015
Blank Faceplates and Cover Panels—Statement 1029
Equipment Installation—Statement 1030
Product Disposal—Statement 1040
Disconnecting Telephone-Network Cables—Statement 1041
Short-circuit Protection—Statement 1045
Grounded Equipment—Statement 1064
Warning Definition—Statement 1071
Comply with Local and National Electrical Codes—Statement 1074
Cisco Product Security Overview
Reporting Security Problems in Cisco Products
Obtaining Technical Assistance
Cisco Technical Support & Documentation Website
Definitions of Service Request Severity
Obtaining Additional Publications and Information
Cisco Guard and Traffic Anomaly Detector Hardware Installation and Configuration Note
Product names: Cisco Guard XT 5650 and Cisco Traffic Anomaly Detector XT 5600
Product numbers: AGXT-5650-GET-A-K9, AGXT-5650-MMF-A-K9, ADXT-5600-GET-A-K9, ADXT-5600-MMF-A-K9
This document describes how to install the Cisco Guard (Guard) and the Traffic Anomaly Detector (Detector). This document refers to both the Guard and the Detector as the "appliance."
The Cisco Guard is a distributed denial-of-service (DDoS) mitigation product that receives traffic diverted from attacked targets, cleans this traffic, and forwards the cleaned traffic to its original path.
The Cisco Traffic Anomaly Detector is a distributed denial-of-service (DDoS) detection product that receives a copy of the traffic that is destined to the target, analyzes that traffic, and sends out an alert when it detects a DDoS attack. The Detector can also activate a configured Guard to mitigate these attacks.
Contents
This publication contains the following sections:
•
Cisco Product Security Overview
•
Obtaining Technical Assistance
•
Obtaining Additional Publications and Information
Safety Overview
Safety warnings appear throughout this publication in procedures that, if performed incorrectly, may harm you. A warning symbol precedes each warning statement.
Parts List
These parts are in the appliance kit:
•
One Cisco Guard XT5650 or Cisco Traffic Anomaly Detector XT 5600
•
One bracket
•
One bag of mounting screws to connect the bracket
•
One external power supply
•
Two black power supply cords
•
One disposable grounding wrist strap
•
Two console connectors for the accelerator card
•
Two copper cables (copper accelerator card only)
•
Two fiber cables (fiber accelerator card only)
•
One black mini-USB cable
•
Documentation for the accelerator card and the appliance hardware
Required Tools and Equipment
You need the following tools and equipment to install the appliance:
•
RJ-45 console cable (provided)
•
Power cord (provided)
•
Number 2 Phillips screwdriver
•
Antistatic mat or antistatic foam
•
ESD grounding strap
•
Ethernet cable
•
Rack-mount kit (provided)
–
Two chassis-support rails
–
Cable support bracket (optional)
–
Cable tray clamp (optional)
Installation Guidelines
Follow these guidelines when installing the appliance:
•
Preparing Your Site for Installation
•
Precautions for Rack-Mounting
Safety Guidelines
This section provides safety information for installing the appliance and contains the following topics:
•
Maintaining Safety with Electricity
•
Protecting Against Electrostatic Discharge
Read the installation instructions in this document before you connect the system to its power source. Failure to read and follow these guidelines could lead to an unsuccessful installation and possibly damage the system and components.
You should observe the following safety guidelines when working with any equipment that connects to electrical power or telephone wiring. They can help you avoid injuring yourself or damaging the appliance.
The following warnings and cautions are provided to help you prevent injury to yourself or damage to the devices:
Warning
Before working on a system that has an on/off switch, turn OFF the power and unplug the power cord. Statement 1
Warning
Read the installation instructions before you connect the system to its power source. Statement 10
Warning
This unit might have more than one power cord. To reduce the risk of electric shock, disconnect the two power supply cords before servicing the unit. Statement 14
Warning
The ports labeled "Ethernet," "10BaseT," "Token Ring," "Console," and "AUX" are safety extra-low voltage (SELV) circuits. SELV circuits should only be connected to other SELV circuits. Because the BRI circuits are treated like telephone-network voltage, avoid connecting the SELV circuit to the telephone network voltage (TNV) circuits. Statement 22
Warning
Before working on equipment that is connected to power lines, remove jewelry (including rings, necklaces, and watches). Metal objects will heat up when connected to power and ground and can cause serious burns or weld the metal object to the terminals. Statement 43
Warning
The safety cover is an integral part of the product. Do not operate the unit without the safety cover installed. Operating the unit without the cover in place will invalidate the safety approvals and pose a risk of fire and electrical hazards. Statement 117
Warning
Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Statement 213
Warning
Before working on a chassis or working near power supplies, unplug the power cord on AC units. Statement 246
Warning
Do not work on the system or connect or disconnect cables during periods of lightning activity. Statement 1001
Warning
There is the danger of explosion if the battery is replaced incorrectly. Replace the battery only with the same or equivalent type recommended by the manufacturer. Dispose of used batteries according to the manufacturer's instructions. Statement 1015
Warning
Blank faceplates and cover panels serve three important functions: they prevent exposure to hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place. Statement 1029
Warning
Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 1030
Warning
Ultimate disposal of this product should be handled according to all national laws and regulations. Statement 1040
Warning
Before opening the unit, disconnect the telephone-network cables to avoid contact with telephone-network voltages. Statement 1041
Warning
This product requires short-circuit (overcurrent) protection, to be provided as part of the building installation. Install only in accordance with national and local wiring regulations. Statement 1045
Warning
This equipment is intended to be grounded to comply with emission and immunity requirements. Ensure that the switch functional ground lug is connected to earth ground during normal use. Statement 1064
Warning
Installation of the equipment must comply with local and national electrical codes. Statement 1074
General Precautions
Observe the following general precautions when using your appliance:
•
Keep all system components away from radiators and heat sources, and do not block cooling vents.
•
Do not spill food or liquids on your system components, and never operate the product in a wet environment. If the computer gets wet, see the appropriate chapter in your troubleshooting guide or contact the Cisco Technical Assistance Center. For instructions on contacting the Technical Assistance Center, see Obtaining Technical Assistance.
•
Do not push any objects into the openings of your system components. Doing so can cause fire or electric shock by shorting out interior components.
•
Position system cables and power cables carefully; Be sure to route the system cables and the power cable and plug so that they cannot be stepped on or tripped over. Be sure that nothing rests on your system component cables or power cable.
•
Do not modify power cables or plugs. Consult a licensed electrician or your power company for site modifications. Always follow your local/national wiring rules.
•
To help avoid possible damage to the system board, wait 5 seconds after turning off the system before removing a component from the system board or before disconnecting a peripheral device from the computer.
Maintaining Safety with Electricity
Follow these guidelines when working on equipment powered by electricity:
•
If any of the following conditions occur contact the Cisco Technical Assistance Center:
–
The power cable or plug is damaged.
–
An object has fallen into the appliance.
–
The appliance has been exposed to water.
–
The appliance has been dropped or damaged.
–
The appliance does not operate correctly when you follow the operating instructions.
•
Use the correct external power source. Operate the appliance only from the type of power source indicated on the electrical ratings label. If you are not sure of the type of power source required, consult the Cisco Technical Assistance Center or a local power company.
•
Use only approved power cables. An approved power cable arrived with your appliance and is intended for use with your system (approved for use in your country, based on the shipping location). If you must purchase an additional power cable, ensure that it is rated for the appliance and for the voltage and the specific current that are marked on the appliance's electrical ratings label. The voltage and current rating for the cable should be greater than the ratings that are marked on the appliance.
•
To prevent electric shock, plug the appliance components and peripheral power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs to ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable.
•
To protect your system and components from sudden, transient increases and decreases in electrical power, use a surge suppressor, line conditioner, or uninterruptable power supply (UPS).
•
Do not modify power cables or plugs. Consult a licensed electrician or your power company for site modifications. Always follow your local and national wiring rules.
Protecting Against Electrostatic Discharge
Static electricity can harm the delicate components inside of your computer. To prevent static damage, discharge static electricity from your body before you touch any electronic components on your computer, such as the microprocessor. You can do so by touching an unpainted metal surface on the computer chassis.
As you continue to work inside the computer, periodically touch an unpainted metal surface to remove any static charge your body may have accumulated.
You can also take the following steps to prevent damage from electrostatic discharge (ESD):
•
When unpacking a static-sensitive component from its shipping carton, do not remove the component from the antistatic packing material until you are ready to install the component in your computer. Just before unwrapping the antistatic packaging, be sure to discharge static electricity from your body.
•
When transporting a sensitive component, first place it in an antistatic container or packaging.
•
Handle all sensitive components in a static-safe area. If possible, use antistatic floor pads and workbench pads.
Preventing EMI
When you run wires for any significant distance in an electromagnetic field, electromagnetic interference (EMI) can occur between the field and the signals on the wires.
Strong EMI, especially when it is caused by lightning or radio transmitters, can destroy the signal drivers and receivers in the system and can create an electrical hazard by conducting power surges through lines and into the system.
Be aware that improper plant wiring can result in radio frequency interference (RFI).
To predict and remedy strong EMI, consult RFI experts.
Preparing Your Site for Installation
This section describes the site requirements for safe installation and operation of your appliance. Ensure that your site is properly prepared before beginning installation.
This section contains the following topics:
Environmental
When planning your site layout and equipment locations, follow the precautions described in this section to help avoid equipment failures and reduce the possibility of environmentally caused shutdowns. If you experience shutdowns or unusually high errors with your existing equipment, these precautions will help you to isolate the cause of the failures and prevent future problems.
Use the following precautions when planning the operating environment for your appliance:
•
Always follow the ESD-prevention procedures described in Preventing EMI, to avoid damage to the appliance. Damage from static discharge can cause immediate or intermittent equipment failure.
•
Make sure that the chassis cover is secure. An open chassis allows air leaks, which could interrupt and redirect the flow of cooling air from internal components.
•
Electrical equipment generates heat. Ambient air temperature might not be adequate to cool equipment to acceptable operating temperatures without adequate circulation. Make sure that the room in which you operate has adequate air circulation.
When choosing a site for installation, follow these guidelines:
•
Install the appliance in a restricted access area, where access can be gained only by service personnel through the use of a special tool, lock and key, or other means of security.
•
Choose a site that is dry, clean, well-ventilated, and air-conditioned.
•
Choose a site that maintains an ambient temperature of 10° to 35°C (50° to 95°F).
Follow these guidelines to create a safe operating environment:
•
Keep tools and chassis components off of the floor and away from foot traffic.
•
Clear the area of possible hazards, such as moist floors, ungrounded power extension cables, and missing safety grounds.
•
Keep the area around the chassis free from dust and foreign conductive material (such as metal flakes from nearby construction activity).
AC Power
Ensure that the plug-socket combination is accessible at all times because it serves as the main disconnecting device. For the Guard and the Detector power requirements, see Connecting the Appliance.
Cabling
Use the cables in the accessory kit to connect the appliance console port to a console or computer that is running a console program. In addition to using the console cable, use the provided standard Ethernet cable to connect the appliance to your network.
Precautions for Rack-Mounting
Observe the following precautions for rack stability and safety. Also, for specific warning and caution statements and procedures, refer to the rack installation documentation that accompanied the rack.
Note
The term "component" refers to any server, storage system, or appliance, and to various peripherals or supporting hardware.
•
Do not move large racks by yourself. Due to the height and weight of the rack, a minimum of two people are needed to accomplish this task.
•
Ensure that the rack is level and stable before extending a component from the rack.
•
Do not overload the AC supply branch circuit that provides power to the rack. The total rack load should not exceed 80 percent of the branch circuit rating.
•
Ensure that proper airflow is provided to components in the rack.
•
Do not step on or stand on any system or component when servicing other systems and components in a rack.
•
This unit should be mounted at the bottom of the rack if it is the only unit in the rack.
•
When mounting this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom of the rack.
•
If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit in the rack.
Front Panel Description
Figure 1 shows the front panel of the appliance.
Figure 1 Front Panel
Table 1 describes items on the front panel of the appliance.
Rear Panel Description
Figure 2 displays the rear panel of the appliance.
Figure 2 Rear Panel
Table 2 describes items on the rear panel of the appliance.
Table 2 Rear Panel Items
No Item Description1
Console serial socket
RS-232 port.
Use this port to attach a console.
2
Monitor cable socket
Console monitor connector.
3
Keyboard cable socket
Console keyboard connector.
4
Mouse cable socket
Console mouse connector.
5
Eth0 socket
10/100/1000 BASE-T ethernet network interface socket.
Use this port to connect out-of-band management.
6
Eth1 socket
10/100/1000 BASE-T ethernet network interface socket.
Use this port to connect out-of-band management.
7
USB socket
USB port.
Use this port to connect the mini-USB cable to the hardware diagnostics card.
CautionYou must connect the mini-USB cable before you power up the appliance.
8
Accelerator card
Cisco proprietary accelerator card.
9
Giga1 socket
Network interface socket. The socket may be copper or fiber. See Table 3 for more information.
Use this socket to connect the appliance to the network.
10
Giga0 socket
Network interface socket. The socket may be copper or fiber. See Table 3 for more information.
Use this socket to connect the appliance to the network.
11
Accelerator card serial socket
Accelerator card serial socket.
Note
Do not use this port. This port is intended for use by Cisco TAC personnel only.
12
USB socket on hardware diagnostics card
USB port.
Use this port to connect the mini-USB cable.
13
Hardware diagnostics card
Hardware diagnostic card.
14
Power Cable Socket
AC power receptacle.
Use this port to connect the appliance to an AC power source.
15
Power Cable Socket
AC power receptacle.
Use this port to connect the appliance to an AC power source.
Warning
The Cisco proprietary accelerator card contains a CLASS I LASER product. This module satisfies Class I Laser Safety requirements in accordance with the US FDA/CDRH and international IEC-825 standards.
Connecting the Appliance
This section describes how to connect the appliance to the network and power sources, and contains it the following topics:
•
Connecting the Mini-USB Cable
•
Connecting the Appliance to Your Network
•
Establishing a Console Connection
•
Configuring Passwords for System User Accounts
Connecting the Mini-USB Cable
CautionYou must connect the mini-USB cable before you power up the appliance.
To connect the mini-USB cable, perform the following steps:
Step 1
Connect the small plug on the mini-USB cable to the USB socket on the hardware diagnostics card. (See item 12 in Figure 2.)
Step 2
Connect the other plug to either of the USB ports on the chassis. (See item 7 in Figure 2.)
Connecting the Appliance to Your Network
To connect the appliance to your network, perform the following steps:
Step 1
Connect the in-band cable (copper or fiber) to the in-band network socket. (See items 9 and 10 in Figure 2.)
Step 2
Connect the other end of the in-band cable (copper or fiber) to a hub, switch, or router in your network.
You can connect one or two in-band network interface cards.
Note
Ensure that you connect the Detector to a port-mirroring switch or to an optical splitter.
Step 3
Connect the Ethernet 10/100/1000BASE-T cable to the network socket of the appliance. (See items 5 and 6 in Figure 2.)
Step 4
Connect the other end of the Ethernet 10/100/1000BASE-T to your management network socket.
Connecting AC Power
To connect AC power to your appliance, perform the following steps:
Step 1
Review the safety information that is outlined in Maintaining Safety with Electricity and AC Power.
Step 2
Plug the AC power cord into a power cable receptacle at the rear of the appliance. (See item 15 in Figure 2.)
Step 3
Connect the other end of the power cord to an AC power source.
Step 4
Plug the AC power cord into the second power cable receptacle at the rear of the appliance. (See item 14 in Figure 2.)
Step 5
Connect the other end of the power cord to an AC power source.
CautionBoth cables must be connected to a power source for the appliance to work properly.
Step 6
Press the power control button on the front of the appliance. (See item 2 in Figure 1.)
The system LED lights to indicate the connection. (See item 1 in Figure 1.)
Establishing a Console Connection
You must establish a serial console connection to the appliance as part of the initial configuration process.
To establish a console connection, perform the following steps:
Step 1
Connect a console to the serial console port on the rear panel:
a.
Attach the RS-232 cable to the console serial socket (see item 1 in Figure 2) and the other end of RS-232 cable to a console.
b.
Connect the monitor and keyboard cables to the corresponding appliance sockets. (See items 2 and 3 in Figure 2.) You can also connect a mouse. (See item 4 in Figure 2.)
c.
Power up the appliance. (See Connecting AC Power for more information.)
Step 2
Open the terminal emulation application on your PC to access the appliance CLI. The following procedure uses HyperTerminal for Windows:
a.
Launch HyperTerminal. The Connection Description window appears.
b.
Enter a name for your session in the Name field, for example "Cisco Guard," and then click OK.
The Connect To window appears.
c.
In the Connect Using field, select the COM port to which the device is connected, and then click OK.
The COM Port Properties dialog box opens.
d.
Set the port properties as follows, and then click OK:
•
Bits per second: 9600
•
Data bits: 8
•
Parity: None
•
Stop bits: 1
•
Flow control: None
Step 3
Set up the terminal emulation software to emulate a VT100 terminal:
a.
From the File menu, choose Properties.
b.
Select the Settings screen tab.
c.
Insert the following values and then click OK:
•
Emulation: VT100
•
Telnet terminal ID: VT100
•
Backscroll buffer lines: 500
Step 4
Press Enter to display the CLI prompt.
If this is the first time that you are connecting to the appliance, you must configure passwords for the system user accounts (root, admin, and riverhead). (See the "Configuring Passwords for System User Accounts", section for more information.
Step 5
After you create a session, you can save the connection settings for future use by choosing File > Save as.
You need to save the console connection settings only once on any given PC. Saving the console connection settings enables you to connect to the appliance CLI directly, without repeating the configuration steps. The next time you launch HyperTerminal, the session is listed as an option under Start > Programs > Accessories > HyperTerminal > Name_of_session.
Configuring Passwords for System User Accounts
The appliance has preconfigured system users. You must set passwords for the system users when you log in for the first time.
To configure the passwords for the system user accounts, perform the following steps:
Step 1
Establish a console connection with the appliance. (See the "Establishing a Console Connection" section for more information.
Step 2
Choose a password for the administrative (root) account.
The password must have a minimum length of six characters and should be a combination of letters and numbers. Retype the new password to verify it.
Step 3
Choose a password for the admin username.
The password must have a minimum length of six characters and should be a combination of letters and numbers. Retype the new password to verify it.
Step 4
Choose a password for the riverhead username.
The password must have a minimum length of six characters and should be a combination of letters and numbers. Retype the new password to verify it.
Note
You can change the passwords for the admin and riverhead usernames at any time by using the password command.
Step 5
To enter the appliance CLI, enter admin for the username and enter the password you have configured in Step 3.
Technical Specifications
Table 3 describes the Guard and the Detector rack-mount specifications.
Related Documentation
For configuration information on the Guard, refer to the following publications:
•
Cisco Guard Configuration Guide
•
Cisco Guard Web-Based Manager Configuration Guide
For configuration information on the Detector, refer to the following publications:
•
Cisco Traffic Anomaly Detector Configuration Guide
•
Cisco Traffic Anomaly Detector Web-Based Manager Configuration Guide
Translated Safety Warnings
This section repeats in multiple languages the basic warnings appropriate for the Cisco Guard and a Traffic Anomaly Detector appliance.
Power Disconnection Warning—Statement 1
Installation Warning—Statement 10
Power Cord Warning—Statement 14
SELV Circuit Warning—Statement 22
Jewelry Removal Warning—Statement 43
Safety Cover Requirement—Statement 117



































