
Quick Start Guide
Cisco PIX 501 Firewall Quick Start Guide
For Cisco PIX Firewall Version 6.2 and PDM Version 2.1
1 About the Cisco PIX 501 Firewall 2
2 Check Items Included 3
3 Connect the Cables 4
4 Power On the PIX 501 5
5 Check the LEDs 6
6 (Optional) Install a Cable Lock 7
7 Configuring the PIX 501 8
8 PDM Startup Wizard 8
9 Alternative Ways to Access the PIX 501 10
10 Upgrade to DES, 3DES, or a 50-User License 11
11 Restore the Default Configuration 13

2
1 About the Cisco PIX 501 Firewall
The PIX 501 delivers enterprise-class security for small
offices and telecommuters in a reliable, plug-and-play
security appliance. Ideal for securing high-speed “always
on” broadband environments, the PIX 501, part of the
market-leading Cisco PIX Firewall Series, provides robust
security capabilities, small office networking features, and
powerful remote management capabilities in a compact,
all-in-one solution:
• Stateful inspection security based on state-of-the-art Adaptive Security Algorithm (ASA)
• Supports over 100 predefined applications, services, and protocols for flexible access control
• Virtual Private Networking (VPN) for secure remote network access using IKE/IPSec standards
• Intrusion protection from over 55 different network-based attacks
• URL filtering of outbound web traffic via industry-leading, third-party URL filtering products
• Integrated switch allows multiple users to share a single broadband connection
POWER
VPN TUNNEL
12
34
CISCO PIX 501
FIREWALL
• Compact, desktop chassis
• External power supply
• 133-MHz processor
• 16-MB RAM, 8-MB Flash memory
• 1 10BaseT Ethernet port (half duplex) for an
outside connection to the Internet (port 0)
• Integrated 4-port 10/100-Mbps Ethernet
switch for inside private LAN
(ports 1 through 4)
• Serial console port for administrative access
• Security lock slot for added physical security
• Front panel LEDs for appliance and link
status
• 10-Mbps cleartext firewall throughput
• 3-Mbps VPN throughput (3DES/SHA1)
• Supports PIX Firewall version 6.1 (and
higher), a secure, purpose-built embedded
operating system
• Includes plug-and-play default configuration
for simplified installation
• Includes Cisco PIX Device Manager (PDM)
for intuitive, web-based administration of
PIX Firewalls
• Supports up to 10 active hosts (an active
host is one that has passed traffic through
the PIX in the last xlate timeout seconds, or
has reserved an authentication connection);
up to 50 users with optional 50-user license
• Internal DHCP server supports up to
32 DHCP address leases; up to 128 with
optional 50-user license
• Supports up to 5 remote access, or
site-to-site, VPN peers

4
3 Connect the Cables
Follow these steps to connect the cables:
Step 1 Place the chassis on a flat, stable surface. The chassis is not rack mountable.
Step 2 Connect Port 0, the outside Ethernet port, to the public network:
a. Use the yellow Ethernet cable (72-1482-01) to connect the device to a switch or hub.
b. Use the orange Ethernet cable (72-3515-01) to connect the device to a cable/DSL/ISDN
modem.
Step 3 Connect your PC or other network devices with an Ethernet cable (not provided) to one of
the four switched inside ports (numbered 1 through 4).
P
O
W
E
R
4
3
2
1
0
CO
N
SO
LE
3
.3
V
4
.5
A
Computer or other
network device
Power
adapter
DSL/Cable/ISDN
modem
Orange
Ethernet
cable
Yellow
Ethernet
cable
PIX 501
Internet
61277

5
Note Make sure that one of the PCs has TCP/IP installed and is configured to obtain an IP
address automatically through DHCP. This allows the PC to communicate with the
PIX 501 and the Internet as well as run the PDM Startup Wizard.
4 Power On the PIX 501
Follow these steps to power on the PIX Firewall:
Step 1 Connect the small, round connector of the power supply cable to the power connector on the
rear panel.
Step 2 Connect the AC power connector of the power supply input cable to an electrical outlet.
Note The PIX 501 does not have a power switch. Completing Step 2 powers on the device.
POWER
4
3
2
1
0
CONSOLE
3.3V 4.5A
71331
Power supply
Cisco PIX 501

6
5 Check the LEDs
The LINK/ACT LED indicators on the front panel of the PIX Firewall are normally solid green when
a link is established and flashing green when the ports are active. Each inside Ethernet interface
(1 through 4) has two LEDs to indicate the operating speed and that the physical link is established.
Note If all LEDs are operating as expected (see Table 1), this concludes the hardware installation. The
pages that follow include instructions on running PDM and additional optional procedures.
Table 1 PIX 501 LEDs
LED State Description
POWER Green The device is powered on.
Off The device is powered off.
LINK/ACT Flashing
green
Network activity, such as Internet access, is present.
Green The correct cable is in use, and the connected equipment has power.
Off No link is established.
Tip If the LINK/ACT LED does not light up, you might be using the
wrong type of cable. Try replacing the yellow (straight-through)
Ethernet cable with the orange (crossover) Ethernet cable.
VPN TUNNEL Green One or more IKE/IPSec VPN tunnels are active.
Off
No VPN tunnels are active. The default configuration does not include
VPN. Thus, the VPN tunnel LED will only be enabled if VPN is added to
your configuration and a VPN tunnel is then established. Also, the LED
does not light up when PPTP/L2TP tunnels are established.
100 MBPS Green The interface is autonegotiated at 100-Mbps half or full duplex.
Flashing
green
The interface is functioning at 10-Mbps half or full duplex.
POWER
VPN TUNNEL
LINK/ACT
100 MBPS
1234
CISCO PIX 501
FIREWALL
61392
0