Cisco ISE-3315, ISE-3355, ISE-3395 Hardware Manual

Page 1

Beta Draft - Cisco Confidential

Introducing the Cisco ISE-3300 Series Hardware

This chapter introduces the Cisco ISE-3300 series appliance hardware and provides descriptions of the support appliance hardware, the major components, controls, connectors, and front- and rear-panel LED indicators. This chapter contains information about the following topics:

• Product Overview, page 21

• Input/Output Ports and Connectors, page 218

• Regulatory Compliance, page 219

Product Overview

The following sections provide important details about the ISE-3300 series appliances (ISE-3315, ISE-3355, and ISE-3395):

• ISE-3300 Series Appliance Overview, page 21

CHAP T E R

• ISE-3315 Serial Number Location, page 26

• Cisco ISE-3315 Front and Rear Panels, page 26

• ISE-3355 Serial Number Location, page 29

• Cisco ISE-3355 Front and Rear Panels, page 210

• ISE-3395 Serial Number Location, page 214

• Cisco ISE-3395 Front and Rear Panels, page 214

• Cisco Product Identification Tool, page 218

ISE-3300 Series Appliance Overview

The ISE-3300 series appliances can all be mounted in a standard shelf-rack enclosure. This section provides descriptions of the supported ISE-3300 series appliances in this release:

• ISE-3315 Appliance Overview, page 22

• ISE-3355 and ISE-3395 Appliance Overview, page 23

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-1

Page 2

Product Overview

Beta Draft - Cisco Confidential

ISE-3315 Appliance Overview

The Cisco 3315 (ISE-3315) is intended for small network environments and the following list provides some general physical, environmental, and feature information about the ISE-3315 appliance (for more details, see Tabl e 2-1):

• Weight —from 24.25 lb (11.0 kg) to 28.0 lb (12.7 kg) depending on what options are installed.

• Dimensions—1.75 inches high x 17.3 inches wide x 22.0 inches deep (44.5 mm x 440.0 mm x

559.0 mm); these dimensions do not include the rack handles.

• Cooling fans—five (plus two on the power supply).

• Rack mounting—Uses slide-rails (see Installing the Slide Rails in a Rack, page 44); mounts in a

standard 19-inch (48.3 cm), 4-post equipment rack (using the provided rack-mount brackets).

• Maximum operating altitude—7,000 feet (2,133 meters).

• Operating temperature range—50 to 90° F (10 to 35° C) up to 3,000 feet (914.4 meters); 50 to 90° F

(10 to 32° C) 3,000 to 7,000 feet (914.4 to 2,133 meters).

• Power—configured for AC-input power; has a single auto-ranging AC-input power supply.

• Front-panel features:

–

Power status LED

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

–

Power button

–

Reset button

–

Hard disk drive (HDD) activity LED

–

Locator button/LED

–

System health LED

–

USB port 1 and port 2

–

Two HDD bays

–

CD-ROM/DVD drive

For the location of the front panel features, see ISE-3315 Front Panel Features, page 27.

• Rear panel features:

–

NIC 1 (eth0) activity LED

–

NIC 1 (eth0) link LED

–

NIC 2 (eth10) activity LED

–

NIC 2 (eth1) link LED

–

Power supply cable socket

–

NIC 3 (eth2) and NIC 4 (eth3) add-on cards

–

Serial port

–

Video port

–

NIC 2 (eth1) and NIC 1 (eth0) Gigabit Ethernet interfaces

–

USB port 3 and port 4

–

Console port

For the location of the rear panel features, see ISE-3315 Rear Panel Features, page 28.

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-2

OL-22971-01

Page 3

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

The ISE-3315 appliance is based on the IBM System x3250M2 server platform, and is normally shipped with a rack-mount hardware kit that includes brackets or rails for mounting it in a 4-post equipment rack. For more information, see Mounting an ISE-3300 Series Appliance in a 4-Post

Rack, page 42.

ISE-3355 and ISE-3395 Appliance Overview

The Cisco 3355 and Cisco 3395 (ISE-3315 and ISE-3395) are intended for the medium and large network environments, respectively. Both these appliances are based upon the same physical platform, and the following list provides some general physical, environmental, and feature information about the ISE-3355 and ISE-3395 appliances (for more details, see Ta b le 2-1):

• Weight —from 28 lb (12.7 kg) to 34.5 lb (15.6 kg) depending on what options are installed.

• Dimensions—1.7 inches high x 17.3 inches wide x 28.0 inches deep (43 mm x 440.0 mm x

711.4 mm); these dimensions do not include the rack handles.

• Cooling fans—six for single-processor (ISE-3355) or dual-processor (ISE-3395).

• Rack mounting—Uses slide-rails (see Installing the Slide Rails in a Rack, page 44); mounts in a

standard 19-inch (48.3 cm), 4-post equipment rack (using the provided rack-mount brackets).

• Maximum operating altitude—7,000 feet (2,133 meters).

• Operating temperature range—50 to 90° F (10 to 35° C) up to 3,000 feet (914.4 meters); 50 to 90° F

(10 to 32° C) 3,000 to 7,000 feet (914.4 to 2,133 meters).

Product Overview

• Power—configured for AC-input power; has dual redundant auto-switching power supplies.

• Front-panel features:

–

Power button with LED (bi-color, green and amber)

–

Power button switch cover

–

Two HDDs (bay 0 and 1)

–

Four empty HDDs bays

–

USB port 1 and port 2

–

CD-ROM/DVD drive

–

Operator information panel

–

Operator information panel release switch

–

Video port

–

HDD activity LED

–

HDD status LED

–

Ethernet interfaces status LED

–

Ethernet interface activity LEDs (NIC 1 and NIC 2)

–

Ethernet interface activity LEDs (NIC 3 and NIC 4)

–

Information LED

–

System health LED

–

Locator button/LED

For the location of the front panel features, see ISE-3355 Front Panel Features, page 210 or

ISE-3395 Front Panel Features, page 214.

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-3

Page 4

Cisco ISE and FIPS-Compliance

• Rear panel features:

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

–

Empty (unused) PCI Express slot

–

Video port

–

USB port 3 and port 4

–

Power supply cable sockets

–

Serial Port

–

NIC 2 (eth1) and NIC 1 (eth0) Gigabit Ethernet interfaces

–

NIC 3 (eth2) and NIC 4 (eth3) add-on cards

–

NIC 1 (eth0) activity LED

–

NIC 1 (eth0) link LED

–

AC power LED

–

DC power LED

–

Power supply error LED

–

System error LED

–

Locator LED

–

Power LED

–

Console port

For the location of the rear panel features, see ISE-3355 Rear Panel Features, page 212 or ISE-3395

Rear Panel Features, page 216.

The ISE-3355/ISE-3395 appliances are based on the IBM System 3550M2 server platform and are normally shipped with a rack-mount hardware kit that includes brackets or rails for mounting it in a 4-post equipment rack. For more information, see Mounting an ISE-3300 Series Appliance in a

4-Post Rack, page 42

Note The rack-mount hardware kits for ISE-3300 series appliances do not include a 2-post equipment

rack.

Cisco ISE and FIPS-Compliance

This release of the supported Cisco Identity Services Engine (ISE-3300 series) appliances are non-FIPS compliant Linux-based network hardware platforms. In Release 1.0, the Cisco ISE operating system comprises a hardened Linux kernel based on CentOS 5.3, and runs the Application Deployment Engine operating system (ADE-OS) version 2.0 and the Cisco ISE Release 1.0 system software.

The ADE-OS and Cisco ISE system software run on either a dedicated Cisco Identity Services Engine appliance or on a VMware server (Cisco ISE-VM-K9). Cisco ISE does not support the installation of any other packages or applications on this dedicated platform. FIPS 140-2 compliance will be addressed in future releases of Cisco ISE.

Cisco ISE Release 1.0 only supports installations on the following Cisco ISE 3300-series appliance platforms:

• ISE-3315

• ISE-3355

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-4

OL-22971-01

Page 5

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Beta Draft - Cisco Confidential

• ISE-3395

Refer to the Release Notes for Cisco Identity Service Engine, Release 1.0 for additional hardware compatibility information. Tab le 2- 1 summarizes the hardware specifications for each of the supported Cisco ISE appliances.

See the “Diagrams” column for hyperlinks to detailed diagrams showing NIC ports, power supply sockets, LEDs, and important controls or buttons on the corresponding panel.

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Table 2-1 Cisco ISE Appliance Hardware Summary

Cisco ISE Appliance Product Hardware Specifications Diagrams

ISE-3315 Platform

Supports the following:

• Between 50 and 500 concurrent

users

• Up to three standalone or High

Availability (HA) pairs

ISE-3355 Platform

Supports the following:

• Between 500 and 1000

concurrent users

• Up to 20 standalone or HA-pairs

• Single processor: Quad-core Intel Xeon (Core 2

quad)

• 4GB RAM

• 250GB SATA HDD

• 4 10/100/1000 LAN ports [2 integrated NICs; 2

Gigabit NICs (PCI-E)]

• CD/DVD-ROM Drive

• 4 USB Ports (2 front, 2 rear)

• Power supply: 350W

Note The ISE-3315 is based on the IBM System

x3250 M2 server platform.

• Single processor: Quad-core Intel Xeon (Nehalem)

• 4 GB RAM

• 2 x 300 GB SAS RAID HDD

• 4 10/100/1000 LAN ports [2 integrated NICs; 2

Gigabit NICs (PCI-E)]

• CD/DVD-ROM Drive

• 4 USB Ports (1 front, 1 internal, 2 rear)

• Cavium CN1120-NHB-E SSL Accelerator Card or

nCipher Card (FIPS 140-2 Level 2 Common Criteria EAL2)

• Power supply: Dual 675W (redundant)

Note The ISE-3355 is based on the IBM System

x3550 M2 server platform.

• Figure 2-2 on

page 2-7, “Cisco ISE-3315 Front Panel Features”

• Figure 2-3 on

page 2-7, “Cisco ISE-3315 Front Panel LEDs/Buttons”

• Figure 2-4 on

page 2-8,“Cisco ISE-3315 Rear Panel Features”

• Figure 2-5 on

page 2-9, “Cisco ISE-3315 Rear Panel LEDs”

• Figure 2-7 on

page 2-10, “Cisco ISE-3355 Front Panel”

• Figure 2-8 on

page 2-11, “Cisco ISE-3355 Front Panel LEDs/Buttons”

• Figure 2-9 on

page 2-12, “Cisco ISE-3355 Rear Panel Features”

• Figure 2-10 on

page 2-13, “Cisco ISE-3355 Rear Panel LEDs”

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-5

Page 6

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Beta Draft - Cisco Confidential

Table 2-1 Cisco ISE Appliance Hardware Summary (continued)

Cisco ISE Appliance Product Hardware Specifications Diagrams

ISE-3395 Platform

Supports the following:

• Between 1000 and 5000

concurrent users

• Up to 40 standalone or HA-pairs

• Dual processor: 2 x Quad-core Intel Xeon

(Nehalem)

• 8GB RAM

• 4 x 300 GB SAS RAID HDD

• 4 10/100/1000 LAN ports [2 integrated NICs; 2

Gigabit NICs (PCI-E)]

• CD/DVD-ROM Drive

• 4 USB Ports (1 front, 1 internal, 2 rear)

• Cavium CN1120-NHB-E SSL Accelerator Card or

nCipher Card (FIPS 140-2 Level 2 Common Criteria EAL2)

• Power supply: Dual 675W (redundant)

Note The ISE-3395 is based on the IBM System

x3550 M2 server platform.

• Figure 2-12 on

page 2-14, “Cisco ISE-3395 Front Panel Features”

• Figure 2-13 on

page 2-15, “Cisco ISE-3395 Front Panel LEDs/Buttons”

• Figure 2-14 on

page 2-16, “Cisco ISE-3395 Rear Panel Features”

• Figure 2-15 on

page 2-17, “Cisco ISE-3395 Rear Panel LEDs”

ISE-3315 Serial Number Location

The serial number label is located at the lower left of the front-panel of the ISE-3315 (see Figure 2-1).

CPI figure for the Cisco ISE-3315 still needs to be created.

Figure 2-1 Cisco ISE-3315 Appliance Serial Number Location

Note The serial number for the ISE-3315 is seven characters in length. You can also view the ISE-3315 serial

number location on the Cisco Support website using the Cisco Product Identification Tool. For details, see Cisco Product Identification Tool, page 218.

Cisco ISE-3315 Front and Rear Panels

XXXXNNNNNNN

Cisco ISE 3315 Series

Identity Services Engine

CISCO

279775

The Cisco ISE-3315 platform is recommended for deployments serving from between 100 and 500 users and managing up to three additional appliances or three HA pairs. The Cisco ISE-3315 comes equipped with four network interfaces that provide flexibility in NIC interface selection and also make it capable for use in high-availability configurations. For additional details, see Cisco ISE and FIPS-Compliance,

page 24.

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-6

OL-22971-01

Page 7

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

ISE-3315 Front Panel Features

Figure 2-2, Figure 2-3, and the accompanying tables illustrate and describe the ISE-3315 front panel

features, LEDs, and buttons.

Figure 2-2 Cisco ISE-3315 Front Panel Features

1 3 4

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Cisco ISE 3315 Series

CISCO

Identity Services Engine

195197

Front USB Port 1

Front USB Port 2

Hard Disk Drive (HDD) Bay 0

HDD Bay 2

CD-ROM/DVD Drive

Figure 2-3 Cisco ISE-3315 Front Panel LEDs/Buttons

Power Status LED Green = The appliance has AC power and is powered up

Off = The appliance is powered off (AC power disconnected)

Power Button (Recessed)

Reset Button (Recessed)

CISCO

Cisco ISE 3315 Series Identity Services Engine

195198

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-7

Page 8

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Beta Draft - Cisco Confidential

HDD Activity LED Flashing green = Ongoing drive activity

Locator Button/LED Flashing blue = The Locator button has been pressed

System Health LED Off = System health is normal

ISE-3315 Rear Panel Features

Figure 2-4, Figure 2-5, and the accompanying tables illustrate and describe the ISE-3315 rear panel

features and LEDs.

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Off = No drive activity

Amber = A pre-failure system threshold has been reached, which can be caused by any of the following conditions:

• At least one fan failure (system or processor fan)

• At least one of the temperature sensors reached critical level

(system or processor thermal sensors)

• At least one memory module failure

• A power supply unit error has occurred

Figure 2-4 Cisco ISE-3315 Rear Panel Features

Power Supply Cable Socket

NIC 3 (eth2) Add-On Card

NIC 4 (eth3) Add-On Card

Serial Port

Video Port

NIC 2 (eth1) GbE Interface

NIC 1 (eth0) GbE Interface

Rear USB Port 4

Rear USB Port 3

Console Port

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-8

OL-22971-01

Page 9

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

Figure 2-5 Cisco ISE-3315 Rear Panel LEDs

NIC 1 (eth0) Activity LED Green = Activity exists

NIC 1 (eth0) link LED Green = Link exists

NIC 2 (eth1) activity LED Green = Activity exists

NIC 2 (eth1) link LED Green = Link exists

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Flashing green = Activity exists Off = No activity exists

Off = No link exists

Flashing green = Activity exists Off = No activity exists

Off = No link exists

ISE-3355 Serial Number Location

The serial number label is located at the lower left of the front-panel of the ISE-3355. (See Figure 2-6.)

CPI figure for the Cisco ISE-3355 still needs to be created.

Figure 2-6 ISE-3355 Appliance Serial Number Location

XXXXNNNNNNN

Note The serial number for the ISE-3355 is seven characters in length. You can also view the ISE-3355 serial

number location on the Cisco Support website using the Cisco Product Identification Tool. For details, see Cisco Product Identification Tool, page 218.

Cisco ISE 3355 Series Identity Services Engine

CISCO

279776

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-9

Page 10

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Beta Draft - Cisco Confidential

Cisco ISE-3355 Front and Rear Panels

The Cisco ISE-3355 platform provides enhanced capability for enterprise-wide deployments serving from between 1500 and 3500 users and managing up to 20 other appliances or HA pairs.

Similar to the Cisco ISE-3315, the Cisco ISE-3355 comes equipped with four network interfaces that provide flexibility in NIC interface selection and also make it capable for use in high availability configurations.

The Cisco ISE-3355 additionally provides 2 GB of RAM, two SAS drives configured in RAID 0 and 1, dual power supplies, and an SSL accelerator card to support larger network deployments and provide added reliability for a centralized management of the deployment in the network core. For additional details, see Cisco ISE and FIPS-Compliance, page 24.

ISE-3355 Front Panel Features

Figure 2-7, Figure 2-8, and the accompanying tables illustrate and describe the ISE-3355 front panel

features, LEDs, and buttons.

Figure 2-7 Cisco ISE-3355 Front Panel

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

1 2 3 4 5 6 7 8

Cisco ISE 3355 Series Identity Services Engine

13 12 11

1 Hard Disk Drive (HDD) Bay 0 8 Front USB Port 1

2 Empty (unused) HDD Bay

3 Empty (unused) HDD Bay

4 Power Button with LED Indicator

(bi-color: green/amber)

5 Operator Information Panel 12 Empty (unused) HDD Bay

6 Operator Information Panel Release Switch 13 HDD Bay 1

7 Video Port

1. Cisco does not support installing additional hard drives in the ISE-3355 appliance.

9 Front USB Port 2

10 CD-ROM/DVD Drive

11 Empty (unused) HDD Bay

CISCO

195201

910

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-10

OL-22971-01

Page 11

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

Figure 2-8 Cisco ISE-3355 Front Panel LEDs/Buttons

1 HDD Activity LED Green = Hard disk drive activity

2 HDD Status LED Amber = Hard disk drive is in error state

3 Power Switch Button Cover Cover slides left or right to expose or protect the power switch

4 Ethernet Icon LED Green = Ethernet interfaces are configured and up

5 Ethernet Interface Activity

LEDs (NIC 1 and NIC 2)

6 Information LED Amber = A non-critical system event has occurred

7 System Health LED Off = System health is normal

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

3 4 5 6 7

8910

Cisco ISE 3355 Series Identity Services Engine

CISCO

Flashing Green = Hard disk drive activity Off = Hard disk drive is idle or disabled

Off = Hard disk drive is functioning or disconnected from power

Off = No Ethernet interfaces are currently configured or Ethernet interfaces are all down

Green = Activity exists Flashing green = Activity exists Off = No activity exists

Off = System is functioning normally

Amber = A pre-failure system threshold has been reached, which can be caused by any of the following conditions:

• At least one fan failure (system or processor fan)

195202

OL-22971-01

• At least one of the temperature sensors reached critical

level (system or processor thermal sensors)

• At least one memory module failure

• A power supply unit error has occurred

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-11

Page 12

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Beta Draft - Cisco Confidential

8 Front Locator Button/LED Flashing blue = Locator button has been pressed

9 Ethernet Interface Activity

LEDs (NIC 3 and NIC 4)

10 Power Button with LED Green = The appliance has AC power and is powered up

ISE-3355 Rear Panel Features

Figure 2-9, Figure 2-10, and the accompanying tables illustrate and describe the ISE-3355 rear panel

features and LEDs.

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Green = Activity exists Flashing green = Activity exists Off = No activity exists

Rapidly flashing green = The appliance is off and is not yet ready to be turned On (the appliance typically only remains in this state for 1 to 3 minutes) Slowly flashing green = The appliance is currently Off and ready to be turned On Slowly fading On/Off green = The appliance is in power-save mode and is ready to be turned On Off = The appliance is powered Off (AC power disconnected)

Figure 2-9 Cisco ISE-3355 Rear Panel Features

1 Empty (unused) PCI Express Slot 8 NIC 1 (eth0) GbE Interface

2 Video Port 9 NIC 4 (eth3) Add-On Card

3 Rear USB Port 4 10 NIC 3 (eth2) Add-On Card

4 Power Supply Cable Sockets 11 Console Port

5 Rear USB Port 3

6 Serial Port

7 NIC 2 (eth1) GbE Interface

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-12

OL-22971-01

Page 13

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

Figure 2-10 Cisco ISE-3355 Rear Panel LEDs

1 NIC 1 (eth0) Activity LED Green = Activity exists

2 NIC 1 (eth0) link LED Green = Link exists

3 AC Power LED Green = AC power source is connected to power supply

4 DC Power LED Green = DC power source is connected to power supply

5 Power Supply Error LED Amber = Power source to power supply is present, but power

6 System error LED Amber = Indicates that a system error has occurred

7 Rear Locator LED Flashing blue = Front Locator button has been pressed

8 Power LED Green = The appliance has AC power and is powered On

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Flashing green = Activity exists Off = No activity exists

Off = No link exists

Off = No AC power source is connected to power supply

Off = No DC power source is connected to power supply

supply is in error state Off = Power supply is functioning normally (if AC and DC power indicators are green) or power supply is disconnected

Off = The system is functioning normally

Rapidly flashing green = The appliance is Off and is not yet ready to be turned On (the appliance typically only remains in this state for 1 to 3 minutes) Slowly flashing green = The appliance is currently Off and ready to be turned On Slowly fading On/Off green = The appliance is in power-save mode and is ready to be turned On Off = The appliance is powered Off (power is disconnected)

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-13

Page 14

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Beta Draft - Cisco Confidential

ISE-3395 Serial Number Location

The serial number label is located at the lower left of the front-panel of the ISE-3395 (see Figure 2-11).

CPI figure for the Cisco ISE-3395 still needs to be created.

Figure 2-11 Cisco ISE-3395 Appliance Serial Number Location

XXXXNNNNNNN

Note The serial number for the ISE-3395 is seven characters in length. You can also view the ISE-3395 serial

number location on the Cisco Support website using the Cisco Product Identification Tool. For details, see Cisco Product Identification Tool, page 218.

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Cisco ISE 3395 Series Identity Services Engine

CISCO

279777

Cisco ISE-3395 Front and Rear Panels

The Cisco ISE-3395 appliance provides the enhanced processing, memory, and power necessary for an enterprise-wide deployment serving from between 1000 and 5000 users and managing up to 40 additional appliances or HA pairs. The Cisco ISE-3395 features dual processors, dual power supplies, 4 GB of RAM, four hard disk drives, four network interfaces, and an SSL accelerator card. For additional details, see Cisco ISE and FIPS-Compliance, page 24.

ISE-3395 Front Panel Features

Figure 2-12, Figure 2-13, and the accompanying tables illustrate and describe the ISE-3355 front panel

features, LEDs, and buttons.

Figure 2-12 Cisco ISE-3395 Front Panel Features

1 2 3 4 5 6 7 8

13 12 11

Cisco ISE 3395 Series Identity Services Engine

910

CISCO

195206

1 Hard Disk Drive (HDD) Bay 0 8 Front USB Port 1

2 HDD Bay 2 9 Front USB Port 2

3 Empty (unused) HDD Bay

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-14

10 CD-ROM/DVD Drive

OL-22971-01

Page 15

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

4 Power Button with LED Indicator (bi-color:

11 Empty (unused) HDD Bay

green/amber)

5 Operator Information Panel 12 HDD Bay 3

6 Operator Information Panel Release Switch 13 HDD Bay 1

7 Video Port

1. Cisco does not support installing additional hard drives in the ISE-3395 appliance.

Figure 2-13 Cisco ISE-3395 Front Panel LEDs/Buttons

3 4 5 6 7

8910

Cisco ISE 3395 Series Identity Services Engine

CISCO

195207

1 HDD Activity LED Green = Hard disk drive activity

Flashing Green = Hard disk drive activity Off = Hard disk drive is idle or disabled

2 HDD Status LED Amber = Hard disk drive is in error state

Off = Hard disk drive is functioning or disconnected from power

3 Power Switch Button Cover Cover slides left or right to expose or protect power switch

4 Ethernet Icon LED Green = Ethernet interfaces are configured and up

Off = No Ethernet interfaces are currently configured or Ethernet interfaces are all down

5 Ethernet Interface Activity

LEDs (NIC 1 and NIC 2)

Green = Activity exists Flashing green = Activity exists Off = No activity exists

6 Information LED Amber = A non-critical system event has occurred

Off = System is functioning normally

7 System Health LED Off = System health is normal

Amber = A pre-failure system threshold has been reached, which can be caused by any of the following conditions:

• At least one fan failure (system or processor fan)

• At least one of the temperature sensors reached critical level

(system or processor thermal sensors)

• At least one memory module failure

• A power supply unit error has occurred

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-15

Page 16

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Beta Draft - Cisco Confidential

8 Locator Button/LED Flashing blue = Locator button has been pressed

9 Ethernet Interface Activity

LEDs (NIC 3 and NIC 4)

10 Power Button/LED Green = The appliance has AC power and is powered On

ISE-3395 Rear Panel Features

Figure 2-14, Figure 2-15, and the accompanying tables illustrate and describe the ISE-3395 rear panel

features and LEDs.

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Green = Activity exists Flashing green = Activity exists Off = No activity exists

Figure 2-14 Cisco ISE-3395 Rear Panel Features

1 Empty (unused) PCI Express Slot 8 NIC 2 (eth0) GbE Interface

2 Video Port 9 NIC 4 (eth3) Add-On Card

3 Rear USB Port 4 10 NIC 3 (eth2) Add-On Card

4 Power Supply Cable Sockets 11 Console Port

5 Rear USB Port 3

6 Serial Port

7 NIC 2 (eth1) GbE Interface

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-16

OL-22971-01

Page 17

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

Figure 2-15 Cisco ISE-3395 Rear Panel LEDs

1 NIC 1 (eth0) Activity LED Green = Activity exists

2 NIC 1 (eth0) Link LED Green = Link exists

3 AC Power LED Green = AC power source is connected to power supply

4 DC Power LED Green = DC power source is connected to power supply

5 Power Supply Error LED Amber = Power source to power supply is present, but power

6 System Error LED Amber = Indicates that a system error has occurred

7 Rear Locator LED Flashing blue = Front Locator button has been pressed

8 Power LED Green = The appliance has AC power and is powered On

ISE-3315, ISE-3355, and ISE-3395 Hardware Summary

Flashing green = Activity exists Off = No activity exists

Off = No link exists

Off = No AC power source is connected to power supply

Off = No DC power source is connected to power supply

supply is in error state Off = Power supply is functioning normally (if AC and DC power indicators are green) or power supply is disconnected

Off = The system is functioning normally

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-17

Page 18

Input/Output Ports and Connectors

Beta Draft - Cisco Confidential

Cisco Product Identification Tool

The Cisco Product Identification (CPI) tool helps you retrieve the serial number of your Cisco products. Before you submit a request for service online or by phone, use the CPI tool to locate your product serial number. You can access this tool from the Cisco Support website at:

http://tools.cisco.com/Support/CPI/index.do

There are two prerequisites to being able to access the CPI tool:

• You must have a valid service contract with Cisco.

• You must have a valid Cisco.com user ID and password.

If you have a valid service contract, but do not have a user ID or password, you can re-register at:

http://tools.cisco.com/RPF/register/register.do

After you have met the prerequisites, perform the following to access this tool:

Step 1 Click the Get Tools & Resources link.

Step 2 Click the All Tools (A-Z) tab.

Step 3 Select Cisco Product Identification Tool from the alphabetical drop-down list.

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

This tool offers three search options:

• Search by product ID or model name.

• Browse for Cisco model.

• Copy and paste the output of the show command to identify the product.

Search results show an illustration of your product with the serial number label location highlighted. Locate the serial number label on your product and record the information before you place a service call.

Input/Output Ports and Connectors

The ISE-3300 series appliances support the following types of Input/Output connectors:

• Two Gigabit Ethernet ports (on the rear panel)

• One serial port (on the rear panel)

• USB 2.0 ports (2 on the front panel, 2 on the rear panel)

Warning

To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables.

Statement 1021

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-18

OL-22971-01

Page 19

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

Regulatory Compliance

For regulatory compliance and safety information, see Regulatory Compliance and Safety Information for the Cisco ISE-3300 Series Appliances. This document is available online at Cisco.com:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_identity_services_engine/1.0/regulatory/ compliance/cisesrcsi.html

For more information, see Obtaining Documentation and Submitting a Service Request, page xvi.

Regulatory Compliance

OL-22971-01

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-19

Page 20

Regulatory Compliance

Chapter 2 Introducing the Cisco ISE-3300 Series Hardware

Beta Draft - Cisco Confidential

Cisco Identity Services Engine Appliance Hardware Installation Guide 1.0

2-20

OL-22971-01