Cisco Cisco Email Security Appliance C160 Guía De Instalación
These simple-to-follow steps will allow you to
install, confi gure, and start using your IronPort
Email Security appliance right away.
install, confi gure, and start using your IronPort
Email Security appliance right away.
Before you start, be sure you have the following:
• Rack cabinet enclosure
• Dell 9G Combination Rails - Rapid/Versa Combination Rails
and adaptor kits (optional)
• 10/100/Gigabit BaseT TCP/IP local area network (LAN)
• Web browser software (or SSH and terminal software)
• Network cable(s) for connecting to your network
Check to make sure the following items are present in the IronPor t
Email Security appliance system box:
• IronPort X1060 Email Security appliance
• Dual-head power cable
• Straight power cables (2)
• Null modem serial cable
• IronPor t X1060 Quickstar t Guide (this guide)
• IronPor t AsyncOS Documentation CD
• IronPor t AsyncOS For Email User Guide
• IronPor t AsyncOS For Email Advanced User Guide
• Safety and Compliance Guide
• AsyncOS Release Notes
• Terms and Conditions of Use
IronPort X1060
Documentation
CD
Quickstar t
Guide
Release
Notes
Safety and
Compliance Guide
Advanced
User Guide
User
Guide
PLAN THE INSTALLATION WITHIN YOUR NETWORK
Your IronPort appliance is designed to serve as your SMTP email
gateway at your network perimeter — that is, the fi rst machine with
an IP address that is directly accessible to the Internet for sending
and receiving email. Many of the features (including Email Security
Monitor, Reputation Filtering, Content Scanning, Spam Detection,
and Virus Protection) require you to install the IronPor t appliance
into your existing network infrastructure in the following way.
Depending on your network confi guration, your fi rewall may need to
be confi gured to allow access on the following por ts.
SMTP and DNS ser vices must have access to the Internet. For other
system functions, the following ser vices may be required:
• SMTP: por t 25
• DNS: por t 53
• HTTP: por t 80
• HTTPS: por t 443
• SSH: por t 22
• Telnet: por t 23
• LDAP: por t 389 or 3268
• NTP: por t 123
• LDAP over SSL: por t 636
• LDAP with SSL for Global Catalog queries: por t 3269
• FTP: por t 21, data por t TCP 1024 and higher
See the appendix, “Firewall Information” in the AsyncOS For Email
User Guide for more information.
INSTALL IN RACK
Install the IronPor t appliance into your rack cabinet. Ensure the
ambient temperature around the system is within the specifi ed
limits. Ensure there is suffi cient airfl ow around the unit.
DATA
The IronPor t appliance requires at least one IP address to send
and receive email. Ideally, two IP addresses should be used:
• Connect the Data 1 network por t to your public network
• Connect the Data 2 network por t to your private network
Alternately, you can receive and deliver email from a single
connection to either network por t, if your network topology dictates it.
Multiple IP addresses can be confi gured on one network inter face.
Note: Some IronPor t X1060 appliances contain fi ber optic inter faces
installed as the Data 3 and Data 4 network por ts. You can also use
these fi ber optic inter faces if your network topology dictates it.
SETUP AND MANAGEMENT
• For access by Ethernet™, connect to the Management Network
Port. Use a browser to access the web-based inter face on the
default IP address 192.168.42.42. You can also access the
command line inter face by SSH or terminal emulation software
on the same IP address. (The netmask is /24.)
• Or, for Serial access, connect to the Serial Por t. Access the
command line inter face by a terminal emulator using 9600 bits, 8
bits, no parity, 1 stop bit (9600, 8, N, 1), fl ow control = Hardware.
POWER
• Plug the female end of each straight power cable into the
redundant power supplies on the back panel of the appliance.
• Or, plug the female ends of the dual-headed power cable into the
redundant power supplies on the back panel of the appliance.
Turn on the system power by pressing the On/Off switch on the
front panel of the the appliance. You must wait fi ve minutes for the
system to initialize the ver y fi rst time you power up before moving
to Step 5.
Wait 5
minutes
IronPor t
Email Security
appliance
Clients
Firewall
Groupware Ser ver
(Microsoft Exchange™, Lotus
Notes™, SunONE Messaging™)
Public
Network
Private
Network
Public and
Private Networks
OR
OR
Serial via Terminal
(9600, 8, N, 1)
Ethernet via SSH or HTTP
(on 192.168.42.42)
OR
Dual-headed
Power Cable
Straight
Power
Cables
OR
OR
• Fill out the Networking Worksheet on the back of this
Quickstart Guide. Contact your network administrator if you
need assistance.
• Use a browser to connect to the following URL:
http://192.168.42.42
• Log in as:
Username:
admin
Password:
ironport
(Or, you may connect using SSH or terminal emulation software. Initiate
a session to the IP address 192.168.42.42. Log in as admin with
the password ironport and, at the prompt, run the systemsetup
command.)
Admin
Choose a new Password: *
Fully-Qualified Hostname of IronPort Messaging Gateway appliance: *
Data 1 Choose an Interface Name (e.g. ÒPrivateNetÓ):
*
IP A
ddress: *
Netmask: *
Broadcast A
ddress: *
Data
2
Choose anInterface Name (e.g. ÒPublicNetÓ)
:
IP A
ddress:
Netmask:
Broadcast Address:
Gateway
Default Router (gateway) I
P Address: *
DNS
Primary DNS Server Hostname:
Primary DNS Server I
P Address:
Secondary DNS Server Hostname:
Secondary DNS Server I
P Address:
Choose anInjector Name (e.g. ÒOutboundMailÓ): *
IP Interface Name (from above, e.g. ÒPrivateNetÓ):
*
NTP
NTP Server (I
P address or hostname)
:
* Indicates required informatio
n
Mail
Injector
IronPort Messaging Gateway Networking
W
orksheet
Technical Support:
1-877-641-IRON (4766
1-877-641-IRON (4766
)
Record critical
information from the
Networking Worksheet to
assist in completing the
System Setup Wizard.
• The System Setup Wizard begins and the end user license
agreement is displayed. Please read and accept the license
agreement to continue.
• Use the information from the Networking Worksheet to complete
the System Setup Wizard.