Cisco ISA 3000 Quick start guide

Connecting the Cisco ISA 3000
This chapter describes how to connect the Cisco ISA 3000 to Ethernet devices and a network.
•Preparing to Connect the Cisco ISA 3000, on page 1
•Preventing Damage to the Cisco ISA 3000, on page 1
•Connecting a PC to the Cisco ISA 3000 For Configuration, on page 2
•Connecting to DC Power, on page 3
•Attaching the DC Power Connectors to the Device, on page 6
•Verifying Connections, on page 7
•Connecting Alarm Circuits, on page 8
•Wiring the External Alarms, on page 9
•Attaching the Alarm Connector to the Device, on page 11
Preparing to Connect the Cisco ISA 3000
Before you connect the Cisco ISA 3000 to the devices, install the ISA 3000 according to the instructions in
Installing the Cisco ISA 3000 Industrial Security Appliance.
To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network
voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some
LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables. Statement 1021
Warning
If this product will be installed in a hazardous location, read the Getting Started/Printed Document of
Compliance included in the package.
Caution
Preventing Damage to the Cisco ISA 3000
Before installation, observe these general guidelines:
• Proper ESD protection should be observed
• Ensure the device is properly grounded
Connecting the Cisco ISA 3000
1

• Ensure there is proper airflow around the device
Connecting a PC to the Cisco ISA 3000 For Configuration
The console connection of the ISA 3000 is not available for configuration. It is only used for troubleshooting
when directed by a support person. All configuration of the device is done through Cisco IoT Field Network
Director (FND) version 4.3 or greater.
There are two methods of connecting to the Cisco ISA 3000 in case of troubleshooting:
• Connect a PC to the console connector of the Cisco ISA 3000 and launch a console terminal to use the
CLI. ASA has a full CLI set, however, FTD only supports a setup script plus a few commands.
• Connect the PC to the Cisco ISA 3000 management sub-network which will then receive an IP address
through DHCP.
Step 1 Choose which console connection will be used. In the following figure, Item 1is the RJ-45 console connector, and item
2is the mini-USB connector.
Figure 1: Console Connection Ports
Connecting the Cisco ISA 3000
2
Connecting the Cisco ISA 3000
Connecting a PC to the Cisco ISA 3000 For Configuration

Step 2 If the mini-USB connector is being used, the protective cover will need to be removed first. The red arrow in the following
figure shows the location of the cover. Remove the cover with a Phillips screw driver and set it aside to be reinstalled
after completing the configuration.
Figure 2: mini-USB Cover
Step 3 Connect the mini-USB side of a cable to the USB Console port on the Cisco ISA 3000.
Step 4 Connect the opposite end of the mini-USB cable to the USB port on your PC. If your PC warns you that you do not have
the proper drivers to communicate with the device, you can obtain them from your computers manufacturer, or go here:
https://software.cisco.com/download/home/282774227/type/282855122/release/3.1
Step 5 Start up a console terminal.
Step 6 See the initial configuration section for more details.
Connecting to DC Power
Before you begin
This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that
the protective device is rated not greater than 60 VDC minimum, 5A maximum. Statement 1005
Warning
Connecting the Cisco ISA 3000
3
Connecting the Cisco ISA 3000
Connecting to DC Power

Installation of the equipment must comply with local and national electrical codes. Statement 1074
Warning
Before performing any of the following procedures, ensure that power is removed from the DC circuit.
Statement 1003
Warning
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Statement 1030
Warning
A readily accessible two-poled disconnect device must be incorporated in the fixed wiring. Statement
1022
Warning
You connect DC power to the device through the front panel connectors. The device has a dual-feed DC power
supply; two connectors provide primary and secondary DC power (DC-A and DC-B).
Each power connector has an LED status indicator. The device power connectors are attached to the device
chassis. Each power connector has screw terminals for terminating the DC power. All connectors are attached
to the device front panel with the provided captive screws.
The power connector labeling is on the panel. The positive DC power connection is labeled “+”, and the return
connection is labeled “–”.
The device can operate with a single power source or with dual power sources. When both power sources are
operational, the device draws power from the DC source with the higher voltage. If one of the two power
sources fail, the other continues to power the device.
To connect DC power to your Cisco ISA 3000, follow these steps:
Step 1 Locate the two power connectors on the device front panel labeled DC-A and DC-B.
Figure 3: Power Connector
Step 2 Identify the connector positive and return DC power connections. The "+" is the Positive DC power connection, and the
"-" is the Return DC power connection.
Step 3 Measure two strands of twisted-pair copper wire long enough to connect the power converter to the DC power source.
For DC connections from the power converter to the DC source, use 18 to 20 AWG (2.6mm) twisted-pair copper wire.
Connecting the Cisco ISA 3000
4
Connecting the Cisco ISA 3000
Connecting to DC Power

Step 4 Using a 18-gauge (1.02mm) wire-stripping tool, strip the ground wire and both ends of the twisted pair wires to 0.25 inch
(6.3 mm) ± 0.02 inch (0.5 mm). See the following figure, number 1. Do not strip more than 0.27 inch (6.8 mm) of insulation
from the wires. Stripping more than the recommended amount of wire can leave exposed wire from the power and relay
connector after installation.
Figure 4: Stripping the Power Connection Wire
Step 5 Remove the two captive screws that attach the power connector to the device, and remove the power connector. Remove
both connectors if you are connecting to two power sources.
Step 6 On the power connector, insert the exposed part of the positive wire into the connection labeled “+” and the exposed part
of the return wire into the connection labeled “–”. The "+" is the Power source positive connection, and the "-" is the
Power source return connection. See the following figure.
Figure 5: Inserting Wires into the Power Connector
Power source positive connection1
Power source return connection2
Ensure that you cannot see any wire lead. Only wire with insulation should extend from the connector.
Note
Step 7 Use a ratcheting torque flathead screwdriver to torque the power connector captive screws (above the installed wire leads)
to 2 in-lb (0.23 N-m). See the following figure.
Do not over-torque the power connector’s captive screws. The torque should not exceed 2 inch-lbs (0.23 N-m).
Note
Connecting the Cisco ISA 3000
5
Connecting the Cisco ISA 3000
Connecting to DC Power

Figure 6: Torquing the Power Connector Captive Screws
Power connector captive screws1
An exposed wire lead from a DC-input power source can conduct harmful levels of electricity. Be sure that no
exposed portion of the DC-input power source wire extends from the power and relay connector. Statement
122
Warning
Step 8 Connect the other end of the positive wire to the positive terminal on the DC power source, and connect the other end of
the return wire to the return terminal on the DC power source.
When you are testing the device, one power connection is sufficient. If you are installing the device and are using a second
power source, repeat steps 4 through 8 using the second power connector.
Attaching the DC Power Connectors to the Device
To attach the power connectors to the front panel of the device, follow these steps:
Failure to securely tighten the captive screws can result in an electrical arc if the connector is accidentally
removed. Statement 397
Warning
Connecting the Cisco ISA 3000
6
Connecting the Cisco ISA 3000
Attaching the DC Power Connectors to the Device

When you connect or disconnect the power and/or alarm connector with power applied, an electrical
arc can occur. This could cause an explosion in hazardous area installations. Be sure that all power is
removed from the device and any other circuits. Be sure that power cannot be accidentally turned on or
verify that the area is nonhazardous before proceeding. Statement 1058
Warning
1. Insert one power connector into the DC-A receptacle on the device front panel, and the other into the
DC-B receptacle.
2. Use a ratcheting torque flathead screwdriver to tighten the captive screws on the sides of the power
connectors to 2 in-lb (0.23 N-m).
3. When you are testing the device, one power source is sufficient. If you are installing the device and are
using a second power source, repeat this procedure for the second power connector (DC-B), which installs
just below the primary power connector (DC-A).
4. When you are installing the device, secure the wires coming from the power connector so that they cannot
be disturbed by casual contact. For example, use tie wraps to secure the wires to the rack.
Verifying Connections
To verify that all devices are properly connected to the Cisco ISA 3000, first turn on all the connected devices,
then check the LEDs. To verify Cisco ISA 3000 operation, refer to the following table:
DescriptionActivityLED
Off — No power
Green Steady on — Normal operation
Green Flashing — Boot up phase and POST
Red Flashing — BIOS
Red — System is not functioning properly.
Power StatusSystem
Off — No link (default)
Green Steady on — Port link with no activity
Green Flashing — Transmitting and Receiving
data
Management Port StatusMGMT
Off — Power is not present
Green Steady on — Power is present on the
associated circuit. (Hardware controlled)
Red Steady on — Power is not present on the
associated circuit, and the system is configured for
dual-input power.
DC Power StatusDC_A
DC_B
Connecting the Cisco ISA 3000
7
Connecting the Cisco ISA 3000
Verifying Connections

DescriptionActivityLED
Off — Alarm Out not configured or the system is
off (Default)
Green Steady on — Alarm Out is configured, no
alarm detected.
Red Steady on — Minor alarm detected
Red Flashing — Major alarm detected
Alarm monitoringAlarm Out
Off — Alarm Out not configured or the system is
off (Default)
Green Steady on — Alarm Out is configured, no
alarm detected.
Red Steady on — Minor alarm detected
Red Flashing — Major alarm detected
Alarm monitoringAlarm In 1&2
Off — No link
Green Steady on — Link is up
Green Flashing — Transmitting and Receiving
data
Amber — Fault, check log.
Port 1&2 or 3&4 LEDs flashing amber together
— Those two ports are in bypass mode and the
system is up.
Link StatusEthernet Ports
Off — RJ-45 is being used for console
Green — Mini USB is being used for console
Console connection statusConsole
The Ethernet LAN Ports pairs 1&2 or 3&4 (copper
sku only) will blink amber together every 100ms
(fast blink), when there is system power.
Bypass Mode IndicatorBYPASS
Connecting Alarm Circuits
After the device is installed, you are ready to connect the DC power and alarm connections.
The device has two alarm input and one alarm output relay circuits for external alarms. The alarm input circuits
are designed to sense if the alarm input is open or closed relative to the alarm input reference pin. Each alarm
input can be configured as an open or closed contact. The alarm output relay circuit has a normally open and
a normally closed contact.
Alarm signals are connected to the device through the six-pin alarm connector. Three connections are dedicated
to the two alarm input circuits: alarm input 1, alarm input 2, and a reference ground. An alarm input and the
reference ground wiring connection are required to complete a single alarm input circuit. The three remaining
connections are for the alarm output circuit: a normally open output, a normally closed output, and a common
Connecting the Cisco ISA 3000
8
Connecting the Cisco ISA 3000
Connecting Alarm Circuits

signal. An alarm output and the common wiring connection are required to complete a single alarm output
circuit.
The alarm connectors are on the device panel and are detailed in the following table:
ConnectionPin
Alarm Output Normally Open (NO) connection1
Alarm Output Common connection2 (COM)
Alarm Output Normally Closed (NC) connection3
Alarm Input 24 (IN2)
Alarm Input Reference Ground connection5 (REF)
Alarm Input 16 (IN1)
Explosion Hazard—Do not connect or disconnect wiring while the field-side power is on; an electrical
arc can occur. This could cause an explosion in hazardous location installations. Be sure that power is
removed or that the area is nonhazardous before proceeding. Statement 1081
Warning
The input voltage source of the alarm output relay circuit must be an isolated source and limited to less
than or equal to 24 VDC, 1.0 A or 48 VDC, 0.5 A.
Caution
Wire connections to the power and alarm connectors must be UL- and CSA-rated, style 1007 or 1569
twisted-pair copper appliance wiring material (AWM) wire (such as Belden part number 9318).
Note
Wiring the External Alarms
To wire the device to an external alarm device, follow these steps:
Step 1 Remove the captive screws that hold the alarm connector on the device, and remove the connector from the device chassis.
Step 2 Measure two strands of twisted-pair wire (18-to-20 AWG) long enough to connect to the external alarm device.
You can choose between setting up an external alarm input or output circuit.
Step 3 Use a wire stripper to remove the casing from both ends of each wire to 0.25 inch (6.3 mm) ± 0.02 inch (0.5 mm).
Do not strip more than 0.27 inch (6.8 mm) of insulation from the wires. Stripping more than the recommended amount
of wire can leave exposed wire from the alarm connector after installation.
Step 4 Insert the exposed wires for the external alarm device into the connections based on an alarm input or output circuit setup.
For example, to wire an alarm input circuit, complete the IN1 and REF connections as shown in the following figure:
Connecting the Cisco ISA 3000
9
Connecting the Cisco ISA 3000
Wiring the External Alarms

IN1 - External device connection 11
REF - External device connection 22
Step 5 Use a ratcheting torque flathead screwdriver to tighten the alarm connector captive screw (above the installed wire leads)
to 2 in-lb (0.23 N-m).
Do not over-torque the power and alarm connectors’ captive screws. Do not exceed 2 inch-lbs (0.23 N-m)
torque.
Note
Step 6 Repeat the above steps to insert the input and output wires of one additional external alarm device into the alarm connector.
What to do next
The following figure shows the completed wiring for two external alarm devices. The first alarm device circuit
is wired as an alarm input circuit; the IN1 and REF connections complete the circuit. The second alarm device
circuit is wired as an alarm output circuit that works on a normally open contact basis; the NO and COM
connections complete the circuit.
Connecting the Cisco ISA 3000
10
Connecting the Cisco ISA 3000
Wiring the External Alarms

Figure 7: Completed Connections for Two External Alarm Devices on the Alarm Connector
IN1 wired connection1
REF wired connection2
COM wired connection3
NO wired connection4
Attaching the Alarm Connector to the Device
Failure to securely tighten the captive screws can result in an electrical arc if the connector is accidentally
removed. Statement 397
Warning
When you connect or disconnect the power and/or alarm connector with power applied, an electrical
arc can occur. This could cause an explosion in hazardous area installations. Be sure that all power is
removed from the device and any other circuits. Be sure that power cannot be accidentally turned on or
verify that the area is nonhazardous before proceeding. Statement 1058
Warning
To attach the alarm connector to the front panel of the device:
Step 1 Insert the alarm connector into the receptacle on the device front panel.
Connecting the Cisco ISA 3000
11
Connecting the Cisco ISA 3000
Attaching the Alarm Connector to the Device

Step 2 Use a ratcheting torque flathead screwdriver to tighten the captive screws on the sides of the alarm connector. Torque to
2 in-lb (0.23 N-m).
Connecting the Cisco ISA 3000
12
Connecting the Cisco ISA 3000
Attaching the Alarm Connector to the Device