Catalyst 6500 Series Switch Content Switching
Module with SSL Installation Note
Product Number: WS-X6066-SLB-S-K9
This publication describes how to install the Content Switching Module with SSL (CSM-S) in the
Catalyst 6500 series switches and includes the software and hardware requirements.
NoteThe term SSL daughter card refers to a Secure Socket Layer (SSL) termination daughter card that
accelerates SSL transactions. Except where specifically differentiated, the term Content Switching
Module and its acronym CSM include both the Content Switching Module and the Content Switching
Module with SSL. The term Content Switching Module with SSL and its acronym CSM-S are used only
where the information presented is specific to the CSM-S.
Contents
This publication contains these sections:
• Safety Overview, page 2
• Front Panel Description, page 7
• Environmental and System Requirements, page 9
• Installing the CSM-S, page 11
• Verifying the Installation, page 20
• Using the CLI, page 20
• Related Documentation, page 21
• Translated Safety Warnings, page 21
• Obtaining Documentation, page 24
• Documentation Feedback, page 25
• Cisco Product Security Overview, page 25
Corporate Headquarters:
Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
• Obtaining Additional Publications and Information, page 27
Safety Overview
Warning
Waarschuwing
Varoitus
IMPORTANT SAFETY INSTRUCTIONS
This warning symbol means danger. You are in a situation that could cause bodily injury. Before you
work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar
with standard practices for preventing accidents. Use the statement number provided at the end of
each warning to locate its translation in the translated safety warnings that accompanied this
device.
SAVE THESE INSTRUCTIONS
BELANGRIJKE VEILIGHEIDSINSTRUCTIES
Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie die lichamelijk letsel kan
veroorzaken. Voordat u aan enige apparatuur gaat werken, dient u zich bewust te zijn van de bij
elektrische schakelingen betrokken risico's en dient u op de hoogte te zijn van de standaard
praktijken om ongelukken te voorkomen. Gebruik het nummer van de verklaring onderaan de
waarschuwing als u een vertaling van de waarschuwing die bij het apparaat wordt geleverd, wilt
raadplegen.
BEWAAR DEZE INSTRUCTIES
TÄRKEITÄ TURVALLISUUSOHJEITA
Tämä varoitusmerkki merkitsee vaaraa. Tilanne voi aiheuttaa ruumiillisia vammoja. Ennen kuin
käsittelet laitteistoa, huomioi sähköpiirien käsittelemiseen liittyvät riskit ja tutustu
onnettomuuksien yleisiin ehkäisytapoihin. Turvallisuusvaroitusten käännökset löytyvät laitteen
mukana toimitettujen käännettyjen turvallisuusvaroitusten joukosta varoitusten lopussa näkyvien
lausuntonumeroiden avulla.
Statement 1071
SÄILYTÄ NÄMÄ OHJEET
Attention
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
IMPORTANTES INFORMATIONS DE SÉCURITÉ
Ce symbole d'avertissement indique un danger. Vous vous trouvez dans une situation pouvant
entraîner des blessures ou des dommages corporels. Avant de travailler sur un équipement, soyez
conscient des dangers liés aux circuits électriques et familiarisez-vous avec les procédures
couramment utilisées pour éviter les accidents. Pour prendre connaissance des traductions des
avertissements figurant dans les consignes de sécurité traduites qui accompagnent cet appareil,
référez-vous au numéro de l'instruction situé à la fin de chaque avertissement.
CONSERVEZ CES INFORMATIONS
2
78-16856-01
Page 3
Safety Overview
Warnung
Avvertenza
Advarsel
WICHTIGE SICHERHEITSHINWEISE
Dieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, die zu Verletzungen führen
kann. Machen Sie sich vor der Arbeit mit Geräten mit den Gefahren elektrischer Schaltungen und
den üblichen Verfahren zur Vorbeugung vor Unfällen vertraut. Suchen Sie mit der am Ende jeder
Warnung angegebenen Anweisungsnummer nach der jeweiligen Übersetzung in den übersetzten
Sicherheitshinweisen, die zusammen mit diesem Gerät ausgeliefert wurden.
BEWAHREN SIE DIESE HINWEISE GUT AUF.
IMPORTANTI ISTRUZIONI SULLA SICUREZZA
Questo simbolo di avvertenza indica un pericolo. La situazione potrebbe causare infortuni alle
persone. Prima di intervenire su qualsiasi apparecchiatura, occorre essere al corrente dei pericoli
relativi ai circuiti elettrici e conoscere le procedure standard per la prevenzione di incidenti.
Utilizzare il numero di istruzione presente alla fine di ciascuna avvertenza per individuare le
traduzioni delle avvertenze riportate in questo documento.
CONSERVARE QUESTE ISTRUZIONI
VIKTIGE SIKKERHETSINSTRUKSJONER
Dette advarselssymbolet betyr fare. Du er i en situasjon som kan føre til skade på person. Før du
begynner å arbeide med noe av utstyret, må du være oppmerksom på farene forbundet med
elektriske kretser, og kjenne til standardprosedyrer for å forhindre ulykker. Bruk nummeret i slutten
av hver advarsel for å finne oversettelsen i de oversatte sikkerhetsadvarslene som fulgte med denne
enheten.
Aviso
¡Advertencia!
TA VARE PÅ DISSE INSTRUKSJONENE
INSTRUÇÕES IMPORTANTES DE SEGURANÇA
Este símbolo de aviso significa perigo. Você está em uma situação que poderá ser causadora de
lesões corporais. Antes de iniciar a utilização de qualquer equipamento, tenha conhecimento dos
perigos envolvidos no manuseio de circuitos elétricos e familiarize-se com as práticas habituais de
prevenção de acidentes. Utilize o número da instrução fornecido ao final de cada aviso para
localizar sua tradução nos avisos de segurança traduzidos que acompanham este dispositivo.
GUARDE ESTAS INSTRUÇÕES
INSTRUCCIONES IMPORTANTES DE SEGURIDAD
Este símbolo de aviso indica peligro. Existe riesgo para su integridad física. Antes de manipular
cualquier equipo, considere los riesgos de la corriente eléctrica y familiarícese con los
procedimientos estándar de prevención de accidentes. Al final de cada advertencia encontrará el
número que le ayudará a encontrar el texto traducido en el apartado de traducciones que acompaña
a este dispositivo.
GUARDE ESTAS INSTRUCCIONES
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
3
Page 4
Safety Overview
Varning!
VIKTIGA SÄKERHETSANVISNINGAR
Denna varningssignal signalerar fara. Du befinner dig i en situation som kan leda till personskada.
Innan du utför arbete på någon utrustning måste du vara medveten om farorna med elkretsar och
känna till vanliga förfaranden för att förebygga olyckor. Använd det nummer som finns i slutet av
varje varning för att hitta dess översättning i de översatta säkerhetsvarningar som medföljer denna
anordning.
SPARA DESSA ANVISNINGAR
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
4
78-16856-01
Page 5
Safety Overview
Aviso
Advarsel
INSTRUÇÕES IMPORTANTES DE SEGURANÇA
Este símbolo de aviso significa perigo. Você se encontra em uma situação em que há risco de lesões
corporais. Antes de trabalhar com qualquer equipamento, esteja ciente dos riscos que envolvem os
circuitos elétricos e familiarize-se com as práticas padrão de prevenção de acidentes. Use o
número da declaração fornecido ao final de cada aviso para localizar sua tradução nos avisos de
segurança traduzidos que acompanham o dispositivo.
GUARDE ESTAS INSTRUÇÕES
VIGTIGE SIKKERHEDSANVISNINGER
Dette advarselssymbol betyder fare. Du befinder dig i en situation med risiko for
legemesbeskadigelse. Før du begynder arbejde på udstyr, skal du være opmærksom på de
involverede risici, der er ved elektriske kredsløb, og du skal sætte dig ind i standardprocedurer til
undgåelse af ulykker. Brug erklæringsnummeret efter hver advarsel for at finde oversættelsen i de
oversatte advarsler, der fulgte med denne enhed.
GEM DISSE ANVISNINGER
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
5
Page 6
Safety Overview
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
6
78-16856-01
Page 7
Front Panel Description
Front Panel Description
These sections describe the physical attributes of the CSM-S:
• LEDs, page 8
• RJ-45 Connector, page 9
• SSL Connector, page 9
Figure 1 shows the CSM-S front panel.
Figure 1Content Switching Module with SSL Front Panel
Status
LED
NoteThe RJ-45 connector is covered by a removable plate.
SSL Certificate Management
RJ-45
Connector
Crypto
113438
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
7
Page 8
Front Panel Description
LEDs
NoteYou are required to make initial SSL daughter card configurations through a direct connection to the
CSM-S Certificate Management port (Cert. Mgt). After the initial configurations, you can make an SSH
or Telnet connection to further configure the module. See Chapter 5 in the Catalyst 6500 Series Content Switching Module with SSL Installation and Configuration Note.
When the CSM-S powers up, it initializes various hardware components and communicates with the
supervisor engine. The Status LED indicates the supervisor engine operations and the initialization
results. During the normal initialization sequence, the status LED changes from off to red, orange, and
green. The SSL daughter card Crypto LED is unused in this release.
NoteFor more information on the supervisor engine LEDs, refer to the Catalyst 6500 Series Switch Module
Installation Guide.
Table 1 describes the Status LED operation.
Table 1Content Switching Module LEDs
LEDColor Description
StatusOff
• The module is waiting for the supervisor engine to provide power.
• The module is not online.
• The module is not receiving power, which could be caused by the following:
–
Power is not available to the CSM-S.
–
Module temperature is over the limit1.
Red• The module is released from reset by the supervisor engine and is booting.
• If the boot code fails to run, the LED stays red after power up.
Orange
• The module is initializing hardware or communicating with the supervisor engine.
• A fault occurred during the initialization sequence.
• The module has failed to download its Field Programmable Gate Arrays (FPGAs) on power up but
continues with the remainder of the initialization sequence and provides the module online status from
the supervisor engine.
• The module has not received module online status from the supervisor engine. This problem could be
caused by the supervisor engine detecting a failure in an external loopback test that it issued to the
CSM-S.
Green
Green
to
• The module is operational; the supervisor engine has provided module online status.
• The module is disabled through the supervisor engine CLI
2
using the set module disable mod
command.
orange
Crypto None.• Not used. Reserved for future releases.
1. Enter the show environment temperaturemod command to display the temperature of each of the four sensors on the CSM-S.
2. CLI = command-line interface.
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
8
78-16856-01
Page 9
RJ-45 Connector
The RJ-45 connector, which is covered by a removable plate, is used to connect a management station
device or a test device. This connector is used by field engineers to perform testing and to obtain dump
information.
SSL Connector
The Certificate Management (Cert. Mgt.) port connector is used for SSL certificate management and is
available to make the necessary connection to the SSL daughter card for initial configuration purposes.
After the initial configurations, you can make an SSH or Telnet connection to further configure the
module. See Chapter 5 in the Catalyst 6500 Series Content Switching Module with SSL Installation and Configuration Note.
Environmental and System Requirements
These sections describe the environmental and system requirements:
• Environmental Requirements, page 9
• System Requirements, page 10
Environmental and System Requirements
• Memory Requirements, page 10
• Power Supply, page 10
• Hardware Supported, page 10
• Software Requirements, page 11
• Software Compatibility, page 11
Environmental Requirements
Table 2 lists the environmental requirements for the CSM-S.
Table 2CSM-S Environmental Requirements
Item Specification
Temperature, ambient operating0
Temperature, ambient nonoperating–40
Humidity (RH), ambient (noncondensing)
operating
Nonoperating relative humidity (noncondensing) 5% to 95%
o
to 40oC (32o to 104oF)
o
to 70oC (–40o to 158oF)
10% to 90%
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
9
Page 10
Environmental and System Requirements
System Requirements
Before you install the CSM-S in the Catalyst 6500 series switch, make sure that the switch meets the
hardware and software requirements listed in this section.
CautionYou can use the Multilayer Switch Feature Card (MSFC2), which is internal to the Catalyst 6500 series
switch, to route traffic on either the client side or the server side of the CSM-S, but not both
simultaneously (unless policy-based routing is used).
Memory Requirements
The CSM-S memory is not configurable.
Power Supply
You can place the CSM-S in any slot in the Catalyst 6500 series chassis except for the slots that are
occupied by the supervisor engine and the standby supervisor engine. The CSM-S operates on power that
is supplied by the chassis. Up to four CSM-S modules can be supported by each switch chassis.
Hardware Supported
Before you can use the Catalyst 6500 series CSM-S, you must have a Supervisor Engine 2 with an
MSFC2 and any module that has ports to connect server and client networks.
CautionThe WS-X6066-SLB-S-K9 CSM-S are not fabric enabled, but the module can operate in a fabric-enabled
chassis like any other nonfabric module.
Table 3 lists the supported hardware and software for the CSM-S.
Table 3Supported Hardware and Software
Product NumberMinimum Cisco
IOS Release
Content Switching Module
Supervisor Engine 2 with MSFC212.2(18)SXD12.2(18)SXD Not applicable
Console Cable
72-876-01Not applicable
Accessory Kit
800-05097-01Not applicable
Recommended
Cisco IOS Release
Recommended
Catalyst OS Releases
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
10
78-16856-01
Page 11
Installing the CSM-S
Software Requirements
CautionThe CSM-S release is not supported by the Catalyst operating system.
Table 4 lists the software versions for the CSM-S.
Table 4CSM-S Software Requirements
CSM-S Software ReleaseSoftware Part NumberHardware Catalyst Operating System Cisco IOS Release
The minimum software version that is listed is the minimum release that is required to support the
CSM-S hardware with a given supervisor engine to perform basic CSM-S configuration.
The recommended version is the base version to support the new commands for a given CSM release.
Table 5 and Ta bl e 6 list the CSM-S software release compatibility.
Table 5Cisco IOS Software on the Supervisor Engine 2 and MSFC 2
CSM-S SoftwareCisco IOS Software
2.1(1)12.2(18)SXD or higher for the features new to CSM-S release 2.1(1).
Table 6Catalyst Operating System on the Supervisor Engine and Cisco IOS Software on the MSFC
CSM-S SoftwareCatalyst Operating System Software
2.1(1)The CSM-S is currently not supported by the Catalyst operating system.
Installing the CSM-S
These sections describe how to install the CSM-S:
• Preparing to Install the CSM-S, page 12
• Required Tools, page 12
• Installing and Removing the Module, page 12
CautionThe WS-X6066-SLB-S-K9 Content Switching Module with SSL is not fabric enabled.
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
11
Page 12
Installing the CSM-S
Preparing to Install the CSM-S
Before installing the CSM-S, make sure that the following items are available:
• Catalyst 6500 series switch chassis
• Management station that is available through a Telnet or a console connection to perform
configuration tasks
Required Tools
These tools are required to install the CSM-S in the Catalyst 6500 series switches:
• Flat-blade screwdriver
• Phillips-head screwdriver
• Wrist strap or other grounding device
• Antistatic mat or antistatic foam
Whenever you handle the CSM-S, always use a wrist strap or other grounding device to prevent
electrostatic discharge (ESD).
Installing and Removing the Module
CautionDuring this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly
touch the backplane with your hand or any metal tool, or you could shock yourself.
All Catalyst 6500 series switches support hot swapping, which allows you to install, remove, replace,
and rearrange modules without turning off the system power. For more information on removing the
CSM-S from a switch, see the “Removing the Module” section on page 13.
When the system detects that a module has been installed or removed, the system automatically runs
diagnostic and discovery routines, acknowledges the presence or absence of the module, and resumes
system operation.
These sections describe how to install and verify the operation of the CSM-S in the Catalyst 6500 series
switches:
• Slot Assignments, page 12
• Removing the Module, page 13
• Installing a Module, page 14
Slot Assignments
The Catalyst 6006 and 6506 switch chassis have 6 slots, the Catalyst 6009 and 6509 switch chassis have
9 slots, and the Catalyst 6513 switch chassis has 13 slots. The slot assignments are as follows:
NoteThe Catalyst 6509-NEB switch has vertical slots, which are numbered 1 to 9 from right to left. Install
the modules with the component side facing to the right.
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
12
78-16856-01
Page 13
• Slot 1 is reserved for the supervisor engine.
• Slot 2 can be used for a redundant supervisor engine if the supervisor engine in slot 1 fails.
• If a redundant supervisor engine is not required, slots 2 through 6 on the 6-slot chassis, slots 2
• The empty slots require filler plates, which are blank switching-module carriers that maintain
Removing the Module
This section describes how to remove an existing module from a Catalyst 6500 series switch chassis slot.
CautionDuring this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly
touch the backplane with your hand or any metal tool, or you could shock yourself.
Installing the CSM-S
through 9 on the 9-slot chassis, and slots 2 through 13 on the 13-slot chassis are available for
switching modules, such as the CSM-S.
consistent airflow through the switch chassis.
Warning
Invisible laser radiation may be emitted from disconnected fibers or connectors. Do not stare into
beams or view directly with optical instruments.
To remove a module from the chassis, perform these steps:
Step 1Disconnect any network interface cables that are attached to the module.
Step 2Verify that the captive installation screws on all of the modules in the chassis are tight.
This step assures that the space that is created by the removed module is maintained.
NoteIf the captive installation screws are loose, the electromagnetic interference (EMI) gaskets on
the installed modules will push the modules toward the open slot, reducing the opening size and
making it difficult to install the replacement module.
Step 3Loosen the two captive installation screws on the module.
Step 4Depending on the orientation of the slots in the chassis (horizontal or vertical), perform one of the
following sets of substeps:
Horizontal slots
a. Place your thumbs on the left and right ejector levers, and simultaneously rotate the levers outward
to unseat the module from the backplane connector.
b. Grasp the front edge of the module, and slide the module part of the way out of the slot. Place your
other hand under the module to support the weight of the module. Do not touch the module circuitry.
Vertical slots
a. Place your thumbs on the ejector levers that are located at the top and bottom of the module, and
simultaneously rotate the levers outward to unseat the module from the backplane connector.
b. Grasp the edges of the module, and slide the module straight out of the slot. Do not touch the module
circuitry.
Step 5Place the module on an antistatic mat or antistatic foam, or immediately reinstall it in another slot.
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
13
Page 14
Installing the CSM-S
Step 6If the slot from which you removed the module is to remain empty, install a module filler plate to keep
dust out of the chassis and to maintain proper airflow through the chassis.
Warning
Blank faceplates (filler panels) serve three important functions: they prevent exposure to hazardous
voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might
disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate
the system unless all cards and faceplates are in place.
Installing a Module
This section describes how to install a module in the Catalyst 6500 series switches.
CautionTo prevent ESD damage, handle modules by the carrier edges only.
CautionDuring this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly
touch the backplane with your hand or any metal tool, or you could shock yourself.
Warning
Invisible laser radiation may be emitted from disconnected fibers or connectors. Do not stare into
beams or view directly with optical instruments.
To install a module in the chassis, perform these steps:
Step 1Choose a slot for the module.
Step 2Verify that there is enough clearance to accommodate any interface equipment that you will connect
directly to the module ports. If possible, place modules between empty slots that contain only module
filler plates.
Step 3Verify that the captive installation screws are tightened on all modules installed in the chassis.
This action ensures that the EMI gaskets on all modules are fully compressed to maximize the opening
space for the replacement module.
NoteIf the captive installation screws are loose, the EMI gaskets on the installed modules will push
adjacent modules toward the open slot, reducing the opening size and making it difficult to
install the replacement module.
Step 4Remove the module filler plate by removing the two Phillips pan-head screws from the filler plate. (To
remove a module, see the “Removing the Module” section on page 13.)
Step 5Fully open both ejector levers on the new or replacement module. (See Figure 2.)
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
14
78-16856-01
Page 15
4
3
5
5
4
6
6
SWITCH FABRIC MDL
WS-C6500-SFM
S
TA
TU
S
A
C
TIV
E
Figure 2Positioning the Module in a Horizontal Slot Chassis
Insert module
between slot guides
WS-X6224
S
E
U
T
IV
A
T
T
C
S
A
2
4
P
O
R
T
1
0
0
F
X
FAN
STATUS
1
2
3
4
5
6
W
S
-X
6
K
-S
U
P
2
-2G
E
E
L
S
M
O
U
E
M
S
T
T
A
N
R
S
T
Y
O
W
S
S
C
P
S
U
P
E
R
V
IS
O
R
2
W
S
-X
6K
-S
U
P
2
-2G
E
E
L
S
M
O
U
E
M
S
T
T
A
N
R
S
T
Y
O
W
S
S
C
P
S
U
P
E
R
V
IS
O
R
2
EMI gasket
T
M
G
T
E
S
E
C
O
N
S
R
O
L
E
P
O
R
T
M
O
D
E
C
O
N
S
O
L
E
T
M
G
T
E
S
E
C
O
N
S
R
O
L
E
P
O
R
T
M
O
D
E
C
O
N
S
O
L
E
T
C
E
L
E
S
T
X
E
N
S
w
i
tc
h
L
o
a
d
1
0
0
%
P
O
R
T
1
P
O
R
T
P
C
M
C
IA
E
J
E
C
T
1
%
S
w
it
c
h
L
o
a
d
1
0
0
P
C
M
C
I
A
%
E
J
E
C
T
1
%
2
P
O
R
T
1
P
O
R
T
2
Installing the CSM-S
EMI gasket
o
INPUT
FAN
OUTPUT
OK
OK
FAIL
o
INPUT
FAN
OUTPUT
OK
OK
FAIL
58569
Ejector lever fully
extended
Step 6
Depending on the orientation of the slots in the chassis (horizontal or vertical), perform one of the
following sets of substeps:
Horizontal slots
a. Position the module in the slot. Make sure that you align the sides of the module carrier with the slot
guides on each side of the slot. (See Figure 2.)
b. Carefully slide the module into the slot until the EMI gasket along the top edge of the module makes
contact with the module in the slot above it and both ejector levers have closed to approximately 45
degrees with respect to the module faceplate. (See Figure 3.)
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
15
Page 16
Installing the CSM-S
4
3
5
5
4
6
6
SWITCH FABIRD MDL
WS-C6500-SFM
S
T
A
T
U
S
A
C
TIV
E
Figure 3Clearing the EMI Gasket in a Horizontal Slot Chassis
W
S
-X
6
K-S
U
P
2-2
G
1
S
UP
E
W
S
-X
2
SU
P
E
3
Press down
4
W
S-X6224
FAN
STATUS
5
24
P
O
R
T
1
00
F
X
6
E
STATUS
SYSTEM
CONSOLE
PWR MGMT
C
ON
S
RESET
OLE
PO
RT
M
O
DE
CO
NS
O
R
V
ISO
6
K
-S
R
V
IS
LE
R
2
U
P
2-2G
E
T
E
M
L
S
M
G
O
U
E
M
T
S
T
T
E
A
N
R
S
S
T
Y
O
W
E
S
S
C
P
CO
NS
R
O
LE
P
OR
T
M
O
DE
CO
N
SO
LE
O
R
2
S
E
U
T
IV
A
T
T
C
S
A
PC
MC
IAEJEC
PC
M
CIAEJ
T
EC
T
Sw
itch Load
100%
PO
R
T 1
1%
LINK
Sw
itch Load
100%
P
O
RT 1
1%
LINK
T
C
E
L
E
S
T
X
E
N
PO
RT 2
LINK
PO
R
T 2
LINK
Press down
1 mm
Gap between the module
EMI gasket and the
module above it
c.
Using the thumb and forefinger of each hand, grasp the two ejector levers and press down to create
a small (0.040 inch [1 mm]) gap between the EMI gasket and the module above it. (See Figure 3.)
CautionPressing down too firmly on the levers will bend and damage them.
d. While pressing down, simultaneously close the left and right ejector levers to fully seat the module
in the backplane connector. The ejector levers are fully closed when they are flush with the module
faceplate. (See Figure 4.)
58570
16
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
78-16856-01
Page 17
Figure 4Ejector Lever Closure in a Horizontal Slot Chassis
W
S
-X
6
K
-SU
P
2
-2G
FAN
STATUS
1
2
E
R MGMT
STATUS
SYSTEM
CONSOLE
PW
CO
NSO
RESET
LE
P
OR
T
M
O
D
E
C
ONS
O
S
U
P
E
RV
IS
W
S
-X
6K-S
S
U
P
ER
V
IS
LE
O
R
2
U
P
2
-2
G
E
T
E
M
L
S
M
G
O
U
E
M
T
S
T
T
E
A
N
R
S
S
T
Y
O
W
E
S
S
C
P
C
ON
S
R
OLE
P
O
R
T
M
O
DE
C
O
N
SO
LE
O
R
2
PCM
C
IAEJECT
P
CM
C
IAEJE
C
T
3
4
W
S-C
6500-SFM
5
S
E
U
T
IV
A
T
T
C
S
A
S
W
IT
C
H
FA
B
R
IC
M
D
L
6
Ejector levers flush
with module faceplate
Sw
itch Load
100%
PO
RT 1
1%
S
w
itch Load
100%
P
O
RT 1
1%
T
C
E
L
E
S
T
X
E
N
PO
R
T 2
LINK
LINK
LINK
PO
R
T
2
LINK
Installing the CSM-S
58571
NoteFailure to fully seat the module in the backplane connector can result in system messages.
e. Tighten the two captive installation screws on the module.
NoteMake sure that the ejector levers are fully closed before tightening the captive installation
screws.
Vertical slots
a. Position the switching module in the slot. (See Figure 5.) Make sure that you align the sides of the
switching-module carrier with the slot guides on the top and bottom of the slot.
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
17
Page 18
Installing the CSM-S
S
W
IT
C
H
F
A
BR
IC
M
D
L
W
S-C6500-SFM
S
TA
TU
S
A
C
T
IV
E
4
3
6
Figure 5Positioning the Module in a Vertical Slot Chassis
Ejector lever fully
extended
FAN
STATUS
S
W
U
S
P
S
W
U
E
X
P
S
R
E
6
-X6
V
K
R
I
S
-
V
K
S
O
IS
-S
U
R
P
O
U
2
2
S
R
P
T
-
A
2
2
2
S
T
TA
U
G
-2G
S
T
S
U
E
Y
S
S
S
E
T
Y
E
S
M
T
C
E
O
M
N
C
S
O
O
N
L
S
P
E
O
W
LE
P
R
W
M
R
G
M
R
M
E
G
T
S
R
M
E
E
T
T
S
E
T
C
O
C
N
O
S
N
O
S
L
O
E
L
E
C
C
O
O
N
M
P
N
S
M
O
24 PO
WS-X6224
RT 100FX
S
TA
T
U
S
A
C
T
IV
E
N
S
E
E
X
L
T
E
C
T
O
P
S
O
O
D
O
R
O
L
D
E
R
T
E
L
E
T
E
P
P
C
C
M
M
C
C
I
IA
A
E
E
J
J
E
E
C
C
T
T
1
1
0
0
1
0
1
0
%
%
%
%
S
S
w
w
itc
i
t
c
h
h
L
L
o
o
a
a
d
d
P
P
O
O
R
R
T
T
1
1
P
O
P
R
O
T
R
2
T
2
EMI
gasket
EMI
gasket
o
INPUT
OK
o
FAN
OUTPUT
OK
FAIL
INPUT
FAN
OUTPUT
OK
OK
FAIL
63585
Insert module
between slot guides
b.
Carefully slide the module into the slot until the EMI gasket along the right edge of the module
makes contact with the module in the slot adjacent to it and both ejector levers have closed to
approximately 45 degrees with respect to the module faceplate. (See Figure 6.)
c. Using the thumb and forefinger of each hand, grasp the two ejector levers and exert a slight pressure
to the left, deflecting the module approximately 0.040 inches (1 mm) to create a small gap between
the module EMI gasket and the module adjacent to it. (See Figure 6.)
18
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
78-16856-01
Page 19
SWITCH FABIRD MDL
WS-C6500-SFM
STATUS
ACTIVE
Figure 6Clearing the EMI Gasket in a Vertical Slot Chassis
Gap between the module
EMI gasket and the
module above it
FAN
STATUS
24 PORT 100FX
Press left
Press left
WS-X6224
STATUS
ACTIV
E
NEXT
SELECT
S
W
U
S
P
S
W
U
E
X
P
S
R
E
6
-X
V
K
R
I
6K
S
-
VIS
S
O
-S
U
R
P
O
U
2
2
S
R
P
T
-
A
2
2
2
S
T
T
U
G
-2G
A
S
T
S
US
E
Y
S
S
E
T
Y
E
S
M
T
C
E
O
M
N
C
S
O
O
N
L
S
P
E
O
W
L
P
R
E
W
M
R
G
R
M
M
E
G
T
S
R
M
E
E
T
T
S
E
T
C
O
C
N
O
S
N
O
S
L
O
E
L
E
C
C
O
O
N
M
P
N
S
M
O
O
P
S
O
O
D
O
R
O
L
D
E
R
T
E
L
E
T
E
P
P
C
C
M
M
C
C
I
IA
A
E
E
J
J
E
E
C
C
T
T
1
1
0
0
1
0
1
0
%
%
%
%
S
S
w
w
it
i
c
t
c
h
h
L
L
o
o
a
a
d
d
P
P
O
O
R
R
T
T
1
1
P
O
P
R
O
T
R
2
T
2
Installing the CSM-S
1 mm
o
INPUT
o
FAN
OUTPUT
OK
OK
FAIL
INPUT
FAN
OUTPUT
OK
OK
FAIL
63586
CautionExerting too much pressure on the ejector levers will bend and damage them.
d. While pressing on the ejector levers, simultaneously close them to fully seat the module in the
backplane connector. The ejector levers are fully closed when they are flush with the module
faceplate. (See Figure 7.)
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
19
Page 20
Verifying the Installation
Figure 7Ejector Lever Closure in a Vertical Slot Chassis
F
AN
ST
A
TU
S
2
W
4
P
S
-X
O
6
R
2
T
2
10
4
0
F
X
STATUS
ACTIVE
N
S
EX
E
LE
T
C
T
SUPERVISOR2
S
U
P
E
R
V
IS
O
R
2
C
O
N
S
O
L
E
M
O
D
E
P
C
M
C
IA
E
J
E
C
T
1
%
WS-X6K-SUP2-2GE
W
S
-X
6
K
-S
U
S
P
T
A
2-2
S
T
T
U
A
S
T
S
U
G
Y
S
S
S
E
T
Y
E
S
M
T
C
E
O
M
N
C
S
O
O
N
L
S
P
E
O
W
L
P
R
E
W
M
R
G
R
M
M
E
G
T
S
R
M
E
E
T
T
S
E
T
CONSOLE
CONSOLE
C
O
M
PORT
N
ODE
P
S
O
O
R
L
E
T
PCMCIA
EJECT
1
100%
0
0
1%
%
S
Switch Load
w
i
tc
h
L
o
a
d
P
PORT 1
O
R
T
1
P
O
PO
R
T
RT 2
2
All ejector levers flush
with module faceplate
e.
Tighten the two captive installation screws on the module.
NoteMake sure that the ejector levers are fully closed before tightening the captive installation
screws.
This completes the CSM-S installation procedure.
Verifying the Installation
When you install the CSM-S into the Catalyst 6500 series switch, the module goes through a startup
sequence that requires no intervention. At the successful conclusion of the startup sequence, the green
Status LED will light and remain on. If the Status LED does not show green, or if it shows a different
color, refer to Table 1 on page 8 to determine the module status.
63587
Using the CLI
The software interface for the module is the Cisco IOS and the Catalyst operating system command-line
interface that is accessed through a Telnet connection to the switch or through the switch console
interface. Refer to the Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide and the
Catalyst 6500 Series Switch Software Configuration Guide for details.
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
20
78-16856-01
Page 21
To understand the Cisco IOS command-line interface and Cisco IOS command modes, refer to
Chapter 2, “Command-Line Interfaces,” in the Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide.
To understand the Catalyst operating system command-line interface and Catalyst operating system
command modes, refer to Chapter 2, “Command-Line Interfaces,” in the Catalyst 6500 Series Switch Configuration Guide.
Unless your switch is located in a fully trusted environment, we recommend that you configure the
module through a Telnet connection using Secure Shell (SSH) encryption.
You can session into the module from the switch console and configure the CSM-S. The session is a
Telnet interface through the Ethernet out-of-band channel (EOBC) of the switch backplane.
You can also make a Telnet connection into the module from a specified host and on a specific interface.
Telnet support for this host should be configured or enabled from the module console.
Console output is redirected to all active Telnet sessions. When no Telnet session is available, the output
is saved to a buffer. The buffer output can be subsequently examined when you make a Telnet connection
into the module.
Related Documentation
Related Documentation
For more detailed installation and configuration information for the Content Switching Module with
SSL, refer to the following publications:
• Release Notes for the Catalyst 6500 Series Switch Content Switching Module with SSL
• Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
• Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference
• Regulatory Compliance and Safety Information for the Catalyst 6500 Series Switches
For more detailed installation and configuration information for SSL services, refer to the following
publications:
• Release Notes for Catalyst 6500 Series SSL Services Module Software Release 2.x
• Catalyst 6500 Series Switch SSL Services Module Installation and Verification Note
• Catalyst 6500 Series Switch SSL Services Module Command Reference
• Catalyst 6500 Series Switch SSL Services Module System Messages
Translated Safety Warnings
Warning
Invisible laser radiation present.
Statement 1016
Waarschuwing
Varoitus
Attention
78-16856-01
Onzichtbare laserstraling aanwezig.
Näkymättömiä lasersäteitä.
Rayonnement laser actif mais invisible.
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
21
Page 22
Translated Safety Warnings
Warnung
Avvertenza
Advarsel
Aviso
¡Advertencia!
Varning!
Unsichtbare Laserstrahlung.
Radiazione laser invisibile.
Usynlig laserstråling.
Radiação laser invisível presente.
Existe radiación láser invisible.
Nu pågående osynlig laserstrålning.
Warning
Waarschuwing
Varoitus
Attention
Blank faceplates and cover panels serve three important functions: they prevent exposure to
hazardous voltages and currents inside the chassis; they contain electromagnetic interference
(EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis.
Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place.
Statement 1029
Lege vlakplaten en afdekpanelen vervullen drie belangrijke functies: ze voorkomen blootstelling
aan gevaarlijke voltages en stroom binnenin het frame, ze bevatten elektromagnetische storing
(EMI) hetgeen andere apparaten kan verstoren en ze leiden de stroom van koellucht door het frame.
Het systeem niet bedienen tenzij alle kaarten, vlakplaten en afdekkingen aan de voor- en achterkant
zich op hun plaats bevinden.
Tyhjillä tasolaikoilla ja suojapaneeleilla on kolme tärkeää käyttötarkoitusta: Ne suojaavat
asennuspohjan sisäisille vaarallisille jännitteille ja sähkövirralle altistumiselta; ne pitävät
sisällään elektromagneettisen häiriön (EMI), joka voi häiritä muita laitteita; ja ne suuntaavat
tuuletusilman asennuspohjan läpi. Järjestelmää ei saa käyttää, elleivät kaikki tasolaikat, etukannet
ja takakannet ole kunnolla paikoillaan.
Ne jamais faire fonctionner le système sans que l’intégralité des cartes, des plaques métalliques et
des panneaux avant et arrière ne soient fixés à leur emplacement. Ceux-ci remplissent trois
fonctions essentielles : ils évitent tout risque de contact avec des tensions et des courants
dangereux à l’intérieur du châssis, ils évitent toute diffusion d’interférences électromagnétiques
qui pourraient perturber le fonctionnement des autres équipements, et ils canalisent le flux d’air de
refroidissement dans le châssis.
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
22
78-16856-01
Page 23
Translated Safety Warnings
Warnung
Avvertenza
Advarsel
Aviso
¡Advertencia!
Blanke Faceplates und Abdeckungen haben drei wichtigen Funktionen: (1) Sie schützen vor
gefährlichen Spannungen und Strom innerhalb des Chassis; (2) sie halten elektromagnetische
Interferenzen (EMI) zurück, die andere Geräte stören könnten; (3) sie lenken den kühlenden
Luftstrom durch das Chassis. Das System darf nur betrieben werden, wenn alle Karten, Faceplates,
Voder- und Rückabdeckungen an Ort und Stelle sind.
Le piattaforme bianche e i panelli di protezione hanno tre funzioni importanti: Evitano l'esposizione
a voltaggi e correnti elettriche pericolose nello chassis, trattengono le interferenze
elettromagnetiche (EMI) che potrebbero scombussolare altri apparati e dirigono il flusso di aria per
il raffreddamento attraverso lo chassis. Non mettete in funzione il sistema se le schede, le
piattaforme, i panelli frontali e posteriori non sono in posizione.
Blanke ytterplater og deksler sørger for tre viktige funksjoner: de forhindrer utsettelse for farlig
spenning og strøm inni kabinettet; de inneholder elektromagnetisk forstyrrelse (EMI) som kan
avbryte annet utstyr, og de dirigerer luftavkjølingsstrømmen gjennom kabinettet. Betjen ikke
systemet med mindre alle kort, ytterplater, frontdeksler og bakdeksler sitter på plass.
As faces furadas e os painéis de protecção desempenham três importantes funções: previnem
contra uma exposição perigosa a voltagens e correntes existentes no interior do chassis; previnem
contra interferência electromagnética (EMI) que poderá danificar outro equipamento; e canalizam
o fluxo do ar de refrigeração através do chassis. Não deverá operar o sistema sem que todas as
placas, faces, protecções anteriores e posteriores estejam nos seus lugares.
Las placas frontales y los paneles de relleno cumplen tres funciones importantes: evitan la
exposición a niveles peligrosos de voltaje y corriente dentro del chasis; reducen la interferencia
electromagnética (EMI) que podría perturbar la operación de otros equipos y dirigen el flujo de aire
de enfriamiento a través del chasis. No haga funcionar el sistema a menos que todas las tarjetas,
placas frontales, cubiertas frontales y cubiertas traseras estén en su lugar.
Varning!
Tomma framplattor och skyddspaneler har tre viktiga funktioner: de förhindrar att personer utsätts
för farlig spänning och ström som finns inuti chassit; de innehåller elektromagnetisk interferens
(EMI) som kan störa annan utrustning; och de styr riktningen på kylluftsflödet genom chassit. Använd
inte systemet om inte alla kort, framplattor, fram- och bakskydd är på plats.
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
23
Page 24
Obtaining Documentation
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several
ways to obtain technical assistance and other technical resources. These sections explain how to obtain
technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/univercd/home/home.htm
You can access the Cisco website at this URL:
http://www.cisco.com
You can access international Cisco websites at this URL:
Cisco documentation and additional literature are available in a Documentation DVD package, which
may have shipped with your product. The Documentation DVD is updated regularly and may be more
current than printed documentation. The Documentation DVD package is available as a single unit.
Registered Cisco.com users (Cisco direct customers) can order a Cisco Documentation DVD (product
number DOC-DOCDVD=) from the Ordering tool or Cisco Marketplace.
Cisco Ordering tool:
http://www.cisco.com/en/US/partner/ordering/
Cisco Marketplace:
http://www.cisco.com/go/marketplace/
Ordering Documentation
You can find instructions for ordering documentation at this URL:
• Report security vulnerabilities in Cisco products.
• Obtain assistance with security incidents that involve Cisco products.
• Register to receive security information from Cisco.
A current list of security advisories and notices for Cisco products is available at this URL:
http://www.cisco.com/go/psirt
If you prefer to see advisories and notices as they are updated in real time, you can access a Product
Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:
Cisco is committed to delivering secure products. We test our products internally before we release them,
and we strive to correct all vulnerabilities quickly. If you think that you might have identified a
vulnerability in a Cisco product, contact PSIRT:
• Emergencies—security-alert@cisco.com
• Nonemergencies— psirt@cisco.com
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
25
Page 26
Obtaining Technical Assistance
TipWe encourage you to use Pretty Good Privacy (PGP) or a compatible product to encrypt any sensitive
information that you send to Cisco. PSIRT can work from encrypted information that is compatible with
PGP versions 2.x through 8.x.
Never use a revoked or an expired encryption key. The correct public key to use in your correspondence
with PSIRT is the one that has the most recent creation date in this public key server list:
In an emergency, you can also reach PSIRT by telephone:
• 1 877 228-7302
• 1 408 525-6532
Obtaining Technical Assistance
For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, Cisco
Technical Support provides 24-hour-a-day, award-winning technical assistance. The Cisco Technical
Support Website on Cisco.com features extensive online support resources. In addition, Cisco Technical
Assistance Center (TAC) engineers provide telephone support. If you do not hold a valid Cisco service
contract, contact your reseller.
Cisco Technical Support Website
The Cisco Technical Support Website provides online documents and tools for troubleshooting and
resolving technical issues with Cisco products and technologies. The website is available 24 hours a day,
365 days a year, at this URL:
http://www.cisco.com/techsupport
Access to all tools on the Cisco Technical Support Website requires a Cisco.com user ID and password.
If you have a valid service contract but do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
NoteUse the Cisco Product Identification (CPI) tool to locate your product serial number before submitting
a web or phone request for service. You can access the CPI tool from the Cisco Technical Support
Website by clicking the Too l s & Re s ou r c e s link under Documentation & Tools.Choose Cisco Product
Identification Tool from the Alphabetical Index drop-down list, or click the Cisco Product
Identification Tool link under Alerts & RMAs. The CPI tool offers three search options: by product ID
or model name; by tree view; or for certain products, by copying and pasting show command output.
Search results show an illustration of your product with the serial number label location highlighted.
Locate the serial number label on your product and record the information before placing a service call.
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
26
78-16856-01
Page 27
Submitting a Service Request
Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3
and S4 service requests are those in which your network is minimally impaired or for which you require
product information.) After you describe your situation, the TAC Service Request Tool provides
recommended solutions. If your issue is not resolved using the recommended resources, your service
request is assigned to a Cisco TAC engineer. The TAC Service Request Tool is located at this URL:
http://www.cisco.com/techsupport/servicerequest
For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone.
(S1 or S2 service requests are those in which your production network is down or severely degraded.)
Cisco TAC engineers are assigned immediately to S1 and S2 service requests to help keep your business
operations running smoothly.
To open a service request by telephone, use one of the following numbers:
For a complete list of Cisco TAC contacts, go to this URL:
http://www.cisco.com/techsupport/contacts
Obtaining Additional Publications and Information
Definitions of Service Request Severity
To ensure that all service requests are reported in a standard format, Cisco has established severity
definitions.
Severity 1 (S1)—Your network is “down,” or there is a critical impact to your business operations. You
and Cisco will commit all necessary resources around the clock to resolve the situation.
Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your
business operation are negatively affected by inadequate performance of Cisco products. You and Cisco
will commit full-time resources during normal business hours to resolve the situation.
Severity 3 (S3)—Operational performance of your network is impaired, but most business operations
remain functional. You and Cisco will commit resources during normal business hours to restore service
to satisfactory levels.
Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or
configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online
and printed sources.
• Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Visit
Cisco Marketplace, the company store, at this URL:
http://www.cisco.com/go/marketplace/
78-16856-01
Catalyst 6500 Series Switch Content Switching Module with SSL Installation Note
27
Page 28
Obtaining Additional Publications and Information
• Cisco Press publishes a wide range of general networking, training and certification titles. Both new
and experienced users will benefit from these publications. For current Cisco Press titles and other
information, go to Cisco Press at this URL:
http://www.ciscopress.com
• Pack e t magazine is the Cisco Systems technical user magazine for maximizing Internet and
networking investments. Each quarter, Packet delivers coverage of the latest industry trends,
technology breakthroughs, and Cisco products and solutions, as well as network deployment and
troubleshooting tips, configuration examples, customer case studies, certification and training
information, and links to scores of in-depth online resources. You can access Packet magazine at
this URL:
http://www.cisco.com/packet
• iQ Magazine is the quarterly publication from Cisco Systems designed to help growing companies
learn how they can use technology to increase revenue, streamline their business, and expand
services. The publication identifies the challenges facing these companies and the technologies to
help solve them, using real-world case studies and business strategies to help readers make sound
technology investment decisions. You can access iQ Magazine at this URL:
http://www.cisco.com/go/iqmagazine
• Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering
professionals involved in designing, developing, and operating public and private internets and
intranets. You can access the Internet Protocol Journal at this URL:
http://www.cisco.com/ipj
• World-class networking training is available from Cisco. You can view current offerings at
this URL:
http://www.cisco.com/en/US/learning/index.html
This document is to be used in conjunction with the documents listed in the “Related Documentation” section.