Cisco Firepower 9300 Hardware Installation Manual Download Page 6

Page: 6 / 80

The Firepower 9300 is certified for Common Criteria (CC) and Federal Information Processing Standards
(FIPS). See "

Security Certifications Compliance

" in the

Cisco FXOS CLI Configuration Guide

for the procedure

for enabling these modes using the CLI. See "

Security Certifications Compliance

" in the

Cisco FXOS Firepower

Chassis Manager Configuration Guide

for information for enabling these modes using the Firepower Chassis

Manager.

Note

The following figure shows a fully populated Firepower 9300.

Figure 1: Firepower 9300

See the

Cisco Interactive Library

for a video that displays the features and components of the Firepower 9300.

The following table lists the hardware features of the Firepower 9300.

Table 1: Firepower 9300 Features

Description

Feature

3 RU

Form factor

Yes

Mount rails included (4-post EIA-310-D rack) with span between front and rear rails
of 24 to 36 in.

Rack mount

Front to rear

Cold aisle to hot aisle

Airflow

Cisco Firepower 9000 Supervisor with eight 10-Gigabit Ethernet ports and 2 network
module slots for I/O expansion

Supervisor

Security module
slots

Located in the Supervisor

Network module
slots

Cisco Firepower 9300 Hardware Installation Guide

Overview

Features

Summary of Contents for Firepower 9300

Page 1: ... Installation Guide First Published 2015 07 16 Last Modified 2018 11 14 Americas Headquarters Cisco Systems Inc 170 West Tasman Drive San Jose CA 95134 1706 USA http www cisco com Tel 408 526 4000 800 553 NETS 6387 Fax 408 527 0883 ...

Page 2: ...RSE OF DEALING USAGE OR TRADE PRACTICE IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT SPECIAL CONSEQUENTIAL OR INCIDENTAL DAMAGES INCLUDING WITHOUT LIMITATION LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES Any Internet Protocol IP addresses and pho...

Page 3: ...G Network Module Two Ports Single Wide 16 100 G Network Module Four Ports Single Wide 17 100 G Network Module Double Wide 18 Hardware Bypass Network Modules 19 40 G Network Module with Hardware Bypass 20 10 G SR 10 G LR Network Module with Hardware Bypass 22 Power Supply Modules 24 Fan Modules 26 Supported SFP SFP and QSFP Transceivers 26 Hardware Specifications 29 Product ID Numbers 30 Power Cord...

Page 4: ...sis 50 Install the FIPS Opacity Shield 52 Connect Cables Turn on Power and Verify Connectivity 56 Maintenance and Upgrade 59 C H A P T E R 4 Remove and Replace the Supervisor 59 Remove and Replace the Security Module 60 Remove and Replace the SSD 61 Remove and Replace the Single Wide Network Module 63 Remove and Replace the Double Wide Network Module 66 Remove and Replace the Power Supply Module 6...

Page 5: ...ecifications on page 29 Product ID Numbers on page 30 Power Cord Specifications on page 33 Features The Cisco Firepower 9300 security appliance is a next generation network and content security platform Its modular standalone chassis offers high performance and flexible I O options which enable it to run multiple security services simultaneously See Product ID Numbers on page 30 for a list of the ...

Page 6: ...re 1 Firepower 9300 See the Cisco Interactive Library for a video that displays the features and components of the Firepower 9300 The following table lists the hardware features of the Firepower 9300 Table 1 Firepower 9300 Features Description Feature 3 RU Form factor Yes Mount rails included 4 post EIA 310 D rack with span between front and rear rails of 24 to 36 in Rack mount Front to rear Cold ...

Page 7: ...y the Firepower 9300 as a dedicated threat sensor with fail to wire network modules Note Network modules 256 GB DDR4 DRAM per security module Memory Up to twenty four 10 Gigabit Ethernet SFP interfaces up to eight 40 Gigabit Ethernet QSFP interfaces with 2 network modules up to four 100 Gigabit Ethernet SFP interfaces Maximum number of interfaces One Gigabit Ethernet port on the Supervisor Support...

Page 8: ...wide network modules or one double wide network module Two power supply modules AC or DC Four fan modules Power Switch The initial Firepower 9300 AC chassis has no external power switch You reset the Firepower 9300 using CLI commands To physically power cycle the 9300 you must unplug the power cord and then plug the power cord back in Note After removing power from the chassis either by moving the...

Page 9: ...button briefly on the front panel of each security module When the power button changes to amber you can move the power switch on the rear of the chassis to OFF Shut the security modules down individually when you are replacing a security module You must push the power button on every security module installed in the 9300 chassis You can have up to 3 security modules installed in the chassis Note ...

Page 10: ...ntents might contain additional or fewer items Figure 2 Firepower 9300 Package Contents Blue console cable PC terminal adapter 2 Firepower 9300 chassis 1 2 rack static rails Adjusts to fit racks with a 24 in to 36 in front to rear rail span 4 2 power cords country specific 3 Four 10 32 retention nuts for rack mounting 6 Four 10 32 x 5 in screws used to attach the rails to rack 5 10 100 1000BASE T ...

Page 11: ... Serial Number Location The serial number for the Firepower 9300 chassis is located on the pullout asset card on the front panel on the side of the chassis and on the Supervisor Figure 3 Serial Numbers on the 9300 Chassis You can also view additional model information on the compliance label located on the bottom of the chassis Cisco Firepower 9300 Hardware Installation Guide 7 Overview Serial Num...

Page 12: ...move the Supervisor so that you can see the serial number see Remove and Replace the Supervisor on page 59 Front Panel The following figure shows the front panel of the Firepower 9300 Figure 5 Firepower 9300 Front Panel Cisco Firepower 9300 Hardware Installation Guide 8 Overview Front Panel ...

Page 13: ...ormation about the Supervisor See Security Modules on page 12 for detailed information about the security modules See Network Modules on page 14 for detailed information about the network modules See Hardware Bypass Network Modules on page 19 for detailed information about fail to wire network modules See Power Supply Modules on page 24 for detailed information about the power supply modules Rear ...

Page 14: ...r provides chassis management and eight 1 or 10 G SFP interfaces and it directs traffic to from the Firepower 9300 security modules Unless you are running FXOS software if you change the SFP transceiver for the management interface you must reboot the Firepower 9300 FXOS then detects the new SFP module Note The Supervisor has the following ports RJ 45 console port One Gigabit Ethernet SFP manageme...

Page 15: ...ailed Amber flashing Alarm power up diagnostics are running 9 RJ 45 Console Port The Firepower 9300 has a standard RJ 45 console port You can use the CLI to configure your Firepower 9300 through the RJ 45 serial console port by using a terminal server or a terminal emulation program on a computer The RJ 45 8P8C port supports RS 232 signaling to an internal UART controller The console port does not...

Page 16: ...umbered from left to right starting with 1 and are named Ethernet 1 1 through Ethernet 1 8 Each port has LEDs that represent link activity status Management Port The Firepower 9300 chassis has a management port that supports 1 G fiber or copper SFPs Security Modules The Firepower 9300 has three slots for security modules The security modules are hot swappable Figure 8 Firepower 9300 Security Modul...

Page 17: ...atures SM 24 and SM 36 are supported in FXOS 1 1 1 and later SM 44 is supported in FXOS 2 0 1 and later and requires ASA 9 6 2 or FTD 6 1 256 GB of DDR4 memory Two 800 GB SSDs The security module ships with two 800 GB SSDs in a default RAID 1 configuration that provides storage support There are two LEDs on the front of the SSDs One security acceleration module All security module components excep...

Page 18: ... 17 See 100 G Network Module Double Wide on page 18 for a description of the 100 G double wide network module See Supported SFP SFP and QSFP Transceivers on page 26 for a list of supported SFPs See Remove and Replace the Single Wide Network Module on page 63 for the procedure for removing and replacing single wide network modules See Remove and Replace the Double Wide Network Module on page 66 for...

Page 19: ... Network activity 10 Ethernet X 8 9 For More Information For a list of copper SFPs see Supported SFP SFP and QSFP Transceivers on page 26 40 G Network Module The following figure shows the front panel of the 40 G network module FPR9K NM 4X40G The FPR9K NM 4X40G is a single wide module that supports hot swapping The four ports are numbered left to right The FPR9K NM 4X40G is NEBS compliant Note Cis...

Page 20: ... Two Ports Single Wide The following figure shows the front panel of the 100 G network module FPRK9 NM 2X100G The FPRK9 NM 2X100G is a single wide module that supports hot swapping The two ports are numbered left to right You must upgrade your Firepower 9300 to firmware package 1 0 16 or later and have FXOS 2 3 2 or later installed to support this network module Note Cisco Firepower 9300 Hardware ...

Page 21: ...ber No link or network failure Green Link up Green flashing Network activity 3 Captive screw handle 6 Ethernet X 2 5 100 G Network Module Four Ports Single Wide The following figure shows the front panel of the 100 G network module FPR NM 4X100G The FPR NM 4X100G is a single wide module that supports hot swapping The four ports are numbered left to right Cisco Firepower 9300 Hardware Installation ...

Page 22: ...link or network failure Green Link up Green flashing Network activity 7 100 G Network Module Double Wide The following figure shows the front panel of the 100 G network module FPRK9 DNM 2X100G The FPRK9 DNM 2X100G is a double wide module that does not support hot swapping The two ports are numbered left to right Your Firepower 9300 must have firmware package 1 0 10 or later installed before you ca...

Page 23: ...ion Fail to wire provides network connectivity when there are software or hardware failures Hardware bypass is useful on ports where the Firepower security appliance is only monitoring or logging traffic The hardware bypass network modules have an optical switch that is capable of connecting the two ports when needed The fail to wire network modules have built in SFPs Hardware bypass is supported ...

Page 24: ...set For the 40 G network module you connect the two ports to form a paired set For the 1 10 G network modules you connect the top port to the bottom port to form a fail to wire paired set This allows traffic to flow even if the security appliance fails or loses power If you have a inline interface set with a mix of fail to wire and non fail to wire interfaces you cannot enable hardware bypass on t...

Page 25: ...ty LEDs Amber No connection or port is not in use or no link or network failure Green Link up no network activity Green flashing Network activity 5 The following table describes the cable specifications needed to keep the insertion loss as low as possible Table 2 40 G BASE SR Cable Specifications Supported Cable Interface 50 microns core diameter Ethernet 40 G BASE SR4 2000 4700 OM3 4 modal bandwi...

Page 26: ...wire network modules FPRK9 NM 6X10SR F FPR9K NM 6X10LR F This is a single wide module that does not support hot swapping The six ports are numbered from top to bottom left to right Pair ports 1 and 2 3 and 4 and 5 and 6 to form hardware bypass paired sets Figure 15 FPR9K NM 6X10SR F FPR9K NM 6X10LR F 6 network activity LEDs Amber No connection or port is not in use or no link or network failure Gr...

Page 27: ...surements Insertion loss measurements help you to troubleshoot the network by verifying cable installation and performance Table 4 10 G SR Network Module FPR9K NM 6X10SR F Maximum Typical Operating Mode 1 4 dB 1 7 dB 0 9 dB 1 2 dB Normal Hardware bypass Insertion loss Cable distance Half the distance specified by the IEEE standard Note Modal bandwidth MHz km Core diameter microns 13 m 16 5 m 33 m ...

Page 28: ...power supply modules run at 2500 W for 200 to 240 V AC The load is shared when both power supply modules are plugged in and running at the same time The power supply modules support hot swapping The power supply entry module is not removable This is the module that you plug the power cords into After removing power from the chassis either by moving the power switch to OFF or unplugging the power c...

Page 29: ...V Off Off On No input DC power Off Off Off On Off On Power supply failure Off Off Off Off On On Input DC present Off Flashing 1 Hz Off HVDC Power Supply Module The HVDC power supply modules run at 2500 W for 240 to 380 V DC The load is shared when both power supply modules are plugged in and running at the same time The power supply modules are hot swappable The power supply entry module is not re...

Page 30: ...ceivers The SFP SFP and QSFP transceivers are bidirectional devices with a transmitter and receiver in the same physical package They are a hot swappable optical or electrical copper interface that plugs into the SFP SFP QSFP ports on the fixed ports and the network module ports and provides Ethernet connectivity Use appropriate ESD procedures when inserting the transceiver Avoid touching the cont...

Page 31: ...ncounter problems with the GLC TE SFP Caution The following table lists the Cisco supported transceivers Table 8 Supported Cisco SFP SFP and QSFP Transceivers PID Optics Type 1 G GLC SX MMD 1G SX GLC LH SMD 1G LH LX GLC EX SMD 1G EX GLC ZX SMD 1G ZX GLC T 1G 1000Base T GLC TE 1G 1000Base T 10 G SFP 10G SR 10G SR SFP 10G SR S 10G SR S SFP 10G LR 10G LR SFP 10G LR S 10G LR S SFP 10G LRM 10G LRM SFP ...

Page 32: ... S QSFP 40G CSR4 40G CSR4 QSFP 40G SR BD 40G SR BD QSFP 40GE LR4 40GE LR4 QSFP 40GE LR4 S 40GE LR4 S WSP Q40GLR4L 40G LR4L Cisco QSFP H40G CU 40G CU 1M 3M 5M QSFP 4SFP10G CU 40G 4X10G CU 1M 3M 5M Cisco QSFP H40G ACU 40G CU A 7M 10M QSFP 4X10G AC 40G 4X10G CU A 7M 10M QSFP H40G AOC 40G AOC 1M 2M 3M 5M 7M 10M 15M 100 G QSFP 100G SR4 S 100G SR4 S QSFP 100G LR4 S 100G LR4 S QSFP 100G AOCxM 100G AOC 1m...

Page 33: ...5 lb 61 2 kg fully configured Weight Physical Specification for the 9300 Security Module 1 95 x 8 x 24 2 in 50 x 203 x 620 mm Dimensions 15 5 lb 7 03 kg Weight Memory Per 9300 Security Module 256 GB SM 24 SM 36 SM 44 DDR4 DIMM Power AC 200 to 240 V AC DC 40 to 60 V DC HVDV 240 to 380 V DC Input voltage AC 2500 W DC 2500 W HVDC 2500 W Maximum output power AC 15 5 A to 12 9 A DC 69 A to 42 A HVDC 14...

Page 34: ...ng altitude 75 5 dBa at maximum fan speed Acoustic noise Product ID Numbers The following table lists all of the PIDs associated with the Firepower 9300 Table 9 Firepower 9300 PIDs Description PID Firepower 9300 chassis no power supply modules and no fan modules spare FPR C9300 Firepower 9300 chassis for AC power FPR C9300 AC Firepower 9300 chassis for AC power no power supply modules and no fan m...

Page 35: ... FPR9K SM 44 Firepower 9000 series NEBS security module FPR9K SM 44 NEB Firepower 9000 series NEBS security module spare FPR9K SM 44 NEB Firepower 9000 series security module blank slot cover FPR9K SM BLANK Firepower 9000 series security module blank slot cover spare FPR9K SM BLANK Firepower 2 port 100 G double wide network module FPR9K DNM 2X100G Firepower 2 port 100 G double wide network module ...

Page 36: ...000 series 8 port SFP network module FPR9K NM 8X10G Firepower 9000 series 8 port SFP network module spare FPR9K NM 8X10G Firepower 9000 series network module blank slot cover FPR9K NM BLANK Firepower 9000 series network module blank slot cover spare FPR9K NM BLANK Firepower 9000 series AC power supply module FPR9K PS AC Firepower 9000 series AC power supply module spare FPR9K PS AC Firepower 9000 ...

Page 37: ...oose the country specific power cord when ordering you security appliance If you do not order the optional power cord with the system you are responsible for selecting the appropriate power cord for the product Using an incompatible power cord with this product may result in electrical safety hazard Orders delivered to Argentina Brazil and Japan must have the appropriate power cord ordered with th...

Page 38: ... Figure 19 Brazil UCSB CABL C19 BRZ Cord set rating 16 A 250 V 2 Plug NBR 14136 1 Connector IEC 60320 C19 3 Figure 20 Cabinet Jumper Power Cord CAB C19 CBN Cord set rating 16 A 250 V 2 Plug IEC 60320 20 1 Connector IEC 60320 C19 3 Cisco Firepower 9300 Hardware Installation Guide 34 Overview Power Cord Specifications ...

Page 39: ...19 3 Figure 22 Europe CAB AC 2500 EU Cord set rating 16 A 250 V 2 Plug CEE 7 VII 1 Connector IEC 60320 C19 3 Figure 23 India CAB SABS C19 IND Cord set rating 16 A 250 V 2 Plug SABS1641 1992 1 Connector IEC 60320 C19 3 Cisco Firepower 9300 Hardware Installation Guide 35 Overview Power Cord Specifications ...

Page 40: ...ure 25 Israel CAB AC 2500W ISRL and CAB S132 C19 ISRL Cord set rating 16 A 250 V 2 Plug SI 32 PART 1 01 1 Connector IEC 60320 C19 3 Figure 26 Italy CAB C2316 C19 IT Cord set rating 16 A 250 V 2 Plug CEI 23 50 1 Connector IEC 60320 C19 3 Cisco Firepower 9300 Hardware Installation Guide 36 Overview Power Cord Specifications ...

Page 41: ...C19 3 Figure 28 Korea CAB 9K16A KOR Cord set rating 16 A 250 V 2 Plug KTL SUO4007 1001 1 Connector IEC 60320 C19 3 Figure 29 Molded CAB US620P C19 US Cord set rating 16 A 250 V 2 Plug NEMA L6 20P 1 Connector IEC 60320 C19 3 Cisco Firepower 9300 Hardware Installation Guide 37 Overview Power Cord Specifications ...

Page 42: ...igure 31 Twist Lock CAB AC C6K TWLK Cord set rating 16 A 250 V 2 Plug NEMA L6 20P 1 Connector IEC 60320 C19 3 Figure 32 United Kingdom CAB BS1363 C19 UK Cord set rating 13 A 250 V 2 Plug BS1363A 1 Connector IEC 60320 C19 3 Cisco Firepower 9300 Hardware Installation Guide 38 Overview Power Cord Specifications ...

Page 43: ...finition IMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger You are in a situation that could cause bodily injury Before you work on any equipment be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents Use the statement number provided at the end of each warning to locate its translation in the translated safety warni...

Page 44: ...ing Statement 1017 Restricted Area This unit is intended for installation in restricted access areas A restricted access area can be accessed only through the use of a special tool lock and key or other means of security Warning Statement 1021 SELV Circuit To avoid electric shock do not connect safety extra low voltage SELV circuits to telephone network voltage TNV circuits LAN ports contain SELV ...

Page 45: ...t 1040 Product Disposal Ultimate disposal of this product should be handled according to all national laws and regulations Warning Statement 1005 Circuit Breaker This product relies on the building s installation for short circuit overcurrent protection Ensure that the protective device is rated not greater than 20 A 120 V and 16 A 250 V Warning Statement 1045 Short Circuit Protection This product...

Page 46: ...en if an electrical accident occurs you can act quickly to turn off the power Do not work alone if potentially hazardous conditions exist anywhere in your work space Never assume that power is disconnected always check Look carefully for possible hazards in your work area such as moist floors ungrounded power extension cables frayed power cords and missing safety grounds If an electrical accident ...

Page 47: ...tes heat Ambient air temperature might not be adequate to cool equipment to acceptable operating temperatures without adequate circulation Ensure that the room in which you operate your system has adequate air circulation Ensure that the chassis cover is secure The chassis is designed to allow cooling air to flow effectively within it An open chassis allows air leaks which may interrupt and redire...

Page 48: ...have louvered sides and a fan to provide cooling air In an enclosed rack with a ventilation fan in the top heat generated by equipment near the bottom of the rack can be drawn upward and into the intake ports of the equipment above it in the rack Ensure that you provide adequate ventilation for equipment at the bottom of the rack Baffles can help to isolate exhaust air from intake air which also h...

Page 49: ...ct your customer service representative immediately Note See Package Contents on page 6 for a list of what shipped with the chassis Step 1 Remove the chassis from its cardboard container and save all packaging material Step 2 Compare the shipment to the equipment list provided by your customer service representative Verify that you have all items Step 3 Check for damage and report any discrepancie...

Page 50: ...he system to the rack You will also need a Phillips head screw driver and the four 10 32 in screws and retention nuts that came in the Firepower 9300 accessory kit For information about the accessory kit see Package Contents on page 6 Note Step 1 Determine what type of rack you have You can use the rails in three different rack types The following figure shows the three rack types Figure 33 Round ...

Page 51: ...nding on your rack type you may want to install the 4 retention nuts in the rack before sliding the chassis in because the chassis is heavy and it may be difficult to install the retention nuts after the chassis is on the rails Note Step 6 Set the rear of the empty Firepower 9300 chassis on the static rails Step 7 Carefully push the empty chassis into the rack until the chassis ears sit flush to t...

Page 52: ...cure the chassis ears to the rack with the four 10 32 in screws and retention nuts if you did not already install them in Step 5 that were provided in the Firepower 9300 accessory kit Cisco Firepower 9300 Hardware Installation Guide 48 Mount and Connect Rack Mount the Chassis ...

Page 53: ...ee Maintenance and Upgrade on page 59 Ground the chassis See Ground the Chassis on page 50 for the procedure Install the FIPS opacity shield if necessary See Install the FIPS Opacity Shield on page 52 for the procedure Continue with Connect Cables Turn on Power and Verify Connectivity on page 56 Cisco Firepower 9300 Hardware Installation Guide 49 Mount and Connect Rack Mount the Chassis ...

Page 54: ...ounding pad with 2 threaded M4 holes is provided on the chassis for attaching a grounding lug The ground lug must be NRTL listed In addition a copper conductor wires must be used and the copper conductor must comply with NEC code for ampacity Caution Before you begin You need the following items that you provide Wire striping tool Crimping tool Grounding cable Two star lock washers for the 10 32 x...

Page 55: ...olid metal to metal contact and insert the 2 screws with washers through the holes in the grounding lug and into the grounding pad Figure 38 Attach the Grounding Lug Step 6 Make sure that the lug and cable do not interfere with other equipment Step 7 Prepare the other end of the grounding cable and connect it to an appropriate grounding point in your site to ensure adequate earth ground Cisco Fire...

Page 56: ...o captive screws The FIPS opacity shield covers the pullout asset card on the front panel that contains the serial number but there is another pullout asset card on the side of the chassis and the serial number is also printed on the top of the Supervisor See Serial Number Location on page 7 for the placements of the serial number on the chassis You need the serial number whenever you contact Cisc...

Page 57: ...ield 2 Screws 1 Rack mount rails 3 Step 3 Unscrew the two captive screws on the front of the access cover to remove the access cover so that you can connect the cables to the ports Cisco Firepower 9300 Hardware Installation Guide 53 Mount and Connect Install the FIPS Opacity Shield ...

Page 58: ...bles Turn on Power and Verify Connectivity on page 56 for the procedure Step 5 Run the cables through the openings on either side of the FIPS opacity shield and reattach the FIPS access cover by tightening the captive screws Cisco Firepower 9300 Hardware Installation Guide 54 Mount and Connect Install the FIPS Opacity Shield ...

Page 59: ...e Note When you toggle the power switch from ON to OFF it takes several seconds for the system to power down Do not remove the power cable until the power LED is off After removing power from the chassis either by moving the power switch to OFF or unplugging the power cord wait at least 10 seconds before turning power back ON Note Step 8 Check the SYS LED on the front of the chassis See Supervisor...

Page 60: ...Management port and then using an Ethernet cable connect a management computer directly to the transceiver on the Supervisor Figure 42 Connect the Cables to the Firepower 9300 1 Gigabit Ethernet Management interface RJ 45 with the cable and SFP transceiver 2 Console port RJ 45 1 10 Gigabit Ethernet data interfaces for SFP transceivers showing the cable and SFP transceiver See Front Panel on page 8...

Page 61: ...it to the ON position The initial AC power chassis does not have an on off switch it powers on when you plug it into a power source Note After removing power from the chassis either by moving the power switch to OFF or unplugging the power cord wait at least 10 seconds before turning power back ON Note Step 6 Verify Check the SYS LED on the front of the chassis See Supervisor on page 10 for a desc...

Page 62: ...Cisco Firepower 9300 Hardware Installation Guide 58 Mount and Connect Connect Cables Turn on Power and Verify Connectivity ...

Page 63: ...9300 Supervisor while the system is powered on without damage to the Supervisor hardware or system However because the supervisor is controlling the entire chassis including the power system we recommend that you use the power switch on the rear panel of chassis to put the system in standby mode See Supervisor on page 10 for more information about the Supervisor Step 1 To remove the Supervisor loo...

Page 64: ...ed or damaged captive screws Remove and Replace the Security Module You can remove the Firepower 9300 security module while the system is running but we recommend that you use the power switch on the rear of the chassis to put the security module in standby mode before removal See Security Modules on page 12 for more information about the security module If you want to replace an existing security...

Page 65: ...grasp the front of the security module and place your other hand under the security module to support it Step 6 Open the handle in the front of the security module Step 7 Gently slide the security module into the opening until you cannot push it any farther Step 8 Press the handle so that it catches the edge of the chassis and presses the security module all the way in Step 9 Using your fingers ti...

Page 66: ...tore the others data Breaking the RAID pair to use in another service modules causes the service module to fail discovery by the Supervisor Note Step 1 Decommission the security module Step 2 To remove an SSD face the front of the chassis press the handle release on the SSD and gently pull it out of the slot Figure 45 Remove the SSD Handle release 2 Handle 1 Step 3 To replace the SSD hold the SSD ...

Page 67: ...visor to support hot swapping For the ROMMON upgrade procedure see the Firmware Upgrade topic in the Image Management chapter in the Cisco FXOS Firepower Chassis Manager Configuration Guide for your software version Note To remove and replace the network modules that do not currently support hot swapping power off the chassis replace the network module and then power the chassis back on You must h...

Page 68: ... 1 Do one of the following a Power down the chassis by moving the power switch to the OFF position if removing a network module that does not support hot swapping See Chassis Components on page 4 for more information about the power switch b Bring the network module offline using the appropriate CLI command if removing a network module that supports hot swapping All network module configuration is...

Page 69: ...contains a screw and both dividers in case you have lost the divider part number 800 101936 01 for the older chassis or you need the new divider part number 700 112465 01 for the newer chassis Note Step 4 To install a new network module hold the network module in front of the network module slot on the right side of the chassis with the handle fully extended Slowly push the module into the network...

Page 70: ...y by the Firepower 9300 Remove and Replace the Double Wide Network Module The Firepower 100 G network module is an optional removable I O module that provides two fiber 100 Gigabit Ethernet interfaces It takes up two slots in the Firepower 9300 and supports single and multimode Although the hardware supports removing and replacing the network module while the system is running the software does no...

Page 71: ... to the OFF position See Chassis Components on page 4 for more information on the power switch Step 3 Do one of the following a If you are removing single wide network modules installed in the two network module slots loosen the captive screw on the left of the network modules release the handles and then gently pull the network modules out of the chassis Remove the divider between the two network...

Page 72: ... out of the chassis otherwise install another network module Step 4 Hold the 100 G network module in front of the double network module slot on the right side of the chassis with the handle rotated fully out Slowly push the module into the network module slot until the handle catches on the mating feature in the chassis The handle should engage correctly Cisco Firepower 9300 Hardware Installation ...

Page 73: ...cedures in the FXOS Configuration Guide to connect to the network module and make sure that it has been discovered correctly by the Firepower 9300 Remove and Replace the Power Supply Module You can remove and replace the power supply module while the system is running Make sure that at least one of the power supply modules is active while hot swapping Replace power supplies immediately Power suppl...

Page 74: ...he Power Supply Module Step 4 To install a new power supply place the handle of the power supply module in the up position Step 5 Hold the power supply module with both hands and slide it into the power supply module bay Step 6 Press the handle down and gently push the power supply module into the chassis until it is fully seated Step 7 Tighten the captive screw on the right Step 8 Verify the powe...

Page 75: ...essory kit We recommend lugs similar to the 90 degree DC Burndy YAZ6C2TC1490 lug It accepts 20 threaded studs and has the correct stud spacing Step 1 Install the DC power supply module in the chassis and make note of the bay number so you can connect the wiring to the correct terminals on the DC power supply module at the rear of the chassis See Remove and Replace the Power Supply Module on page 6...

Page 76: ... power is applied to the terminals Step 9 Set the DC disconnect switch in the circuit to ON In a system with multiple power supplies connect each power supply to a separate DC power source In the event of a power source failure if the second source is still available it can maintain system operation Caution Step 10 Verify power supply operation by checking the power supply LED on the front of the ...

Page 77: ...wer feeds on the chassis The load is shared when both power supply modules are plugged in and running at the same time The HVDC power supply modules are hot swappable Step 1 Install the HVDC power supply module in the chassis and make note of the bay number so you can connect the HVDC power cord to the correct power feed on the HVDC power supply module at the rear of the chassis See Remove and Rep...

Page 78: ... it can maintain system operation Caution Step 6 Verify power supply operation by checking the power supply LED on the front of the chassis See Power Supply Modules on page 24 for the LED values Remove and Replace the Fan Module You can remove and replace fan modules while the system is running The airflow moves from front to back See Fan Modules on page 26 for more information about the fan modul...

Page 79: ...e spring latch at the top of the module Step 5 Push the fan module into the chassis until it is properly seated and the spring latch snaps into place If the system is powered on listen for the fans You should immediately hear the fans operating If you do not hear the fans make sure the fan module is inserted completely into the chassis and the faceplate is flush with the outside surface of the cha...

Page 80: ...Cisco Firepower 9300 Hardware Installation Guide 76 Maintenance and Upgrade Remove and Replace the Fan Module ...

Search results

Summary of Contents for Firepower 9300

Reviews:

Brands by name

Popular brands

Cisco Firepower 9300, Hardware Installation Manual

Search results

Summary of Contents for Firepower 9300

Reviews:

Brands by name

Popular brands