Cisco Systems PIX515E quick start Optional Maintenance and Upgrade Procedures

Page 29

Establishing Site-to-Site VPNs with other Cisco Products

For information on configuring VPN between a PIX 515E and other products such as a Cisco router that runs Cisco IOS software, and Cisco VPN 3000 Concentrators, go to the following links:

http://www.cisco.com/warp/customer/471/pix_router_dyn.html

http://www.cisco.com/warp/public/471/ALTIGA_pix.html

http://www.cisco.com/warp/public/110/39.html

5Optional Maintenance and Upgrade Procedures

Obtaining DES and 3DES/AES Encryption Licenses

The PIX 515E requires a DES or 3DES/AES encryption license key to enable specific features that provide encryption technology, such as secure remote management (SSH, PDM, etc.), site-to-site VPN, and remote access VPN. These encryption licenses are available for free at Cisco.com.

If you are a registered user of Cisco.com and would like to obtain a DES or 3DES/AES encryption license, go to the following website:

http://www.cisco.com/cgi-bin/Software/FormManager/formgenerator.pl

If you are not a registered user of Cisco.com, go to the following website:

http://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl

Provide your name, e-mail address, and the serial number for the PIX 515E, as it appears in the show version command output.

Note You will receive the new activation key for your PIX 515E within two hours (or less) on requesting the license upgrade.

For more information on activation key examples or upgrading software, refer to the Cisco PIX Firewall and VPN Configuration Guide.

29

Image 29
Contents Cisco PIX 515E Firewall About the Cisco PIX 515E Firewall Hardware FeaturesSoftware Features Check Items Included 69-0123-01 69-0124-01 69-0125-01 Power cable Rubber feetDMZ Install the PIX 515EConfigure the PIX 515E DMZ Configuration Example ConfigurationsManage IP Pools for Network Translations Select the Translation Rules tab Page Page Configure Address Translations on Private Networks Page Page Page Configure External Identity for the DMZ Web Server Configurations should display as shown below Provide Http Access to the DMZ Web Server Page Page Site-to-Site VPN Configuration Start the VPN Wizard Configure the VPN Peer Page Configure the IKE Policy Page Configure Internal Traffic Page View and Enable VPN Commands Obtaining DES and 3DES/AES Encryption Licenses Optional Maintenance and Upgrade ProceduresEstablishing Site-to-Site VPNs with other Cisco Products Command Description Restore the Default ConfigurationHttp 192.168.1.0 Alternative Ways to Access the PIX 515E Ethernet LED Check the LEDsColor Status Description Cisco.com Obtaining DocumentationDocumentation CD-ROM Ordering DocumentationCisco TAC Website Documentation FeedbackObtaining Technical Assistance TAC Case Priority Definitions Opening a TAC CaseObtaining Additional Publications and Information Page USA