Cisco Firepower 2100 Series Hardware Installation Manual Download

Page: 1 / 92

Cisco Firepower 2100 Series Hardware Installation Guide

First Published:

2017-05-25

Last Modified:

2022-03-09

Americas Headquarters

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Summary of Contents for Firepower 2100 Series

Page 1: ...are Installation Guide First Published 2017 05 25 Last Modified 2022 03 09 Americas Headquarters Cisco Systems Inc 170 West Tasman Drive San Jose CA 95134 1706 USA http www cisco com Tel 408 526 4000 800 553 NETS 6387 Fax 408 527 0883 ...

Page 2: ...SCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES Any Internet Protocol IP addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers Any examples command display output network topology diagrams and other figures included in the document are shown for illustrative purposes only Any use of actual IP addresses or phone numbers...

Page 3: ...Network Modules 22 1 Gb SX 10 Gb SR 10 Gb LR Network Module with Hardware Bypass 23 1 Gb Network Module with Hardware Bypass 26 Power Supply Modules 27 Fan Modules 30 SSDs 30 Supported SFP SFP Transceivers 31 Hardware Specifications 33 Product ID Numbers 34 Power Cord Specifications 37 Installation Preparation 43 C H A P T E R 2 General Safety Warnings 43 Network Equipment Building System NEBS Sta...

Page 4: ...he Chassis Using Slide Rails 55 Ground the Chassis 60 Installation Maintenance and Upgrade 63 C H A P T E R 4 Install Remove and Replace the Network Module 63 Remove and Replace the SSD 65 Remove and Replace the Power Supply Module 68 Connect the DC Power Supply Module 71 Secure the Power Cord on the Power Supply Module 76 Remove and Replace the Fan Tray 80 Install the FIPS Opacity Shield in a Two...

Page 5: ...n page 37 Features The Cisco Firepower 2100 series security appliance is a standalone modular security services platform The series includes the Firepower 2110 2120 2130 and 2140 See Product ID Numbers on page 34 for a list of the product IDs PIDs associated with the 2100 series The Firepower 2100 series supports Cisco Firepower Threat Defense and Cisco ASA software See the Cisco Firepower Compati...

Page 6: ... 4 x and FX OS 2 6 x Federal Information Processing Standards FIPS 410 2 FTD 6 4 x FX OS 2 6 x and ASA 9 12 x Department of Defense Information Network Approved Product List DoDIN APL US Government Compliance for IPv6 USGv6 FTD 6 4 x and ASA 9 12 x USGv6 Certification Approval under the R1 Profile for the Product Classification NPP FTD 7 0 x See Install the FIPS Opacity Shield in a Two Post Rack o...

Page 7: ...RAM Intel x86 memory Single 16 core at 1 8 G Single 12 core at 1 2 G Single 8 core at 1 2 G Single 6 core at 1 2 G Cavium Network Processor Unit NPU 16G 8 G Cavium NPU RAM 8 G nominal Flash 24 16 Maximum number of interfaces 1 Gigabit Ethernet 10 M 100 M 1 G Base T Management port RJ 45 serial port Console port USB 2 0 Type A 500 mA USB port 12 fixed RJ 45 1 G 100 M 10 M ports named Ethernet 1 1 t...

Page 8: ...y slots Ships with one 400 W AC power supply module Hot swappable One fixed AC power supply module AC power supply Yes optional No DC power supply Yes No Redundant power One hot swappable fan tray with four fans Four fixed fans Internal component only not field replaceable Fan Two SSD slots 200 GB Ships with one 200 GB SSD installed in slot 1 Slot 2 is reserved for the MSP Two SSD slots 100 GB Shi...

Page 9: ...te access VPN For site to site VPN Package Contents The following figure shows the package contents for the Firepower 2110 and 2120 The contents are subject to change and your exact contents will contain additional or fewer items depending on whether you order the optional parts See Product ID Numbers on page 34 for a list of the PIDs associated with the 2110 and 2120 package contents There are th...

Page 10: ...anagement brackets part number 700 106377 01 Four 8 32 x 0 375 inch Phillips screws part number 48 2696 01 Optional in package if ordered 7 Rack mount screws Four 12 24 x 0 75 inch Phillips screws part number 648 0440 01 for securing the chassis to your rack Four 10 32 x 0 75 inch Phillips screws part number 48 0441 01 for securing the chassis to your rack Four M6 x 1 x 19 mm Phillips screws part ...

Page 11: ...r 48 101144 01 5 One ground lug kit part number 69 100359 01 One 6 AWG 90 degree 10 post ground lug part number 32 0608 01 Two 10 32 x 0 38 inch Phillips screws 8 Two slide rail locking brackets part number 700 105350 01 7 Cisco Firepower 2100 This document has a URL pointing to the hardware installation guide a URL pointing the regulatory and safety guide and a QR code and URL pointing to the Get...

Page 12: ...the device to CDO and configure it remotely CDO supports Firepower Threat Defense FTD version 6 7 and later The following figure shows the QR code sticker Figure 5 QR Code Sticker The following figure shows the placement of the QR code sticker on the front panel of the 2100 chassis Figure 6 QR Code Sticker on the Firepower 2100 Front Panel QR code sticker 1 Serial Number Location The serial number...

Page 13: ... You can also view additional model information on the compliance label located on the bottom of the chassis Figure 8 Compliance Label on the Chassis Cisco Firepower 2100 Series Hardware Installation Guide 9 Overview Serial Number Location ...

Page 14: ...ot 1 4 12 RJ 45 1 G 100 M 10 M auto duplex auto MDI X Base T ports Ethernet 1 1 through 1 12 labeled top to bottom left to right 3 System LEDs 6 Locator LED 5 RJ 45 console port 8 Type A USB 2 0 port 7 Four fixed SFP 1 Gb ports Fiber ports 1 13 through 1 16 labeled left to right 10 Pullout asset card with chassis serial number 9 SSD slot 2 11 The following figure shows the front panel of the Firep...

Page 15: ...d RJ 45 console port You can use the CLI to configure your 2100 through the RJ 45 serial console port by using a terminal server or a terminal emulation program on a computer The RJ 45 8P8C port supports RS 232 signaling to an internal UART controller The console port does not have any hardware flow control and does not support a remote dial in modem The baud rate is 9600 You can use the standard ...

Page 16: ...ttom left to right starting with 1 and are named Ethernet 1 1 through Ethernet 1 12 The 2110 and 2120 also have four fixed SFP 1 Gb ports and the 2130 and 2140 have four fixed SFP 1 Gb 10 Gb ports They are fiber ports numbered left to right 1 13 through 1 16 Each port has LEDs that represent Link Activity status Front Panel LEDs The following figure shows the Firepower 2110 and 2120 front panel LE...

Page 17: ... source while this LED is blinking so that the system has time to perform a graceful shutdown Note Amber System is powering up before the BIOS boots This takes one to five seconds at most Green System is fully powered up 1 Locator Off Locate is off Blue Locate is on The Locator LED helps you locate a unit that needs physical service attention This feature is activated in the software Note 4 Ethern...

Page 18: ... Cisco Firepower 1000 or 2100 Firewalls for more information Note 5 SSD2 Off SSD is not present Green SSD is present no activity Green flashing SSD is active 8 SSD1 Off SSD is not present Green SSD is present no activity Green flashing SSD is active 7 FAN Off Environmental subsystem is not active yet Green Fans are running normally It may take up to one minute for the LED status to turn green afte...

Page 19: ...software Note 2 Power Off Input power is not detected Standby power is off Green flashing The system has detected a power switch toggle event and initiated the shutdown sequence If the power switch is in the OFF position the system powers off after shutdown is completed Do not remove the AC or DC power source while this LED is blinking so that the system has time to perform a graceful shutdown Amb...

Page 20: ...er flashing Alarm condition system needs service or attention and may not boot properly Green flashing slowly twice in 5 seconds Cloud connected Cisco Defense Orchestrator CDO is valid for FTD 6 7 and later Note Green and amber flashing Cloud connection failure Green Cloud disconnected The CDO LED pattern applies to low touch provisioning LTP See the Firepower Easy Deployment Guide for Cisco Firep...

Page 21: ...stem can continue to operate normally but fan service is required Amber flashing Two or more fans have failed or the fan tray has been removed from the system Immediate attention is required 12 PSU 2 Off The power supply module is not present or not detected Green The power supply module is present and working properly Amber The power supply module is present but a fault or problem has been detect...

Page 22: ...e power supply module and the 12 V main power is OFF When the switch is in the ON position the 12 V main power is turned on and the system boots Before you move the power switch to the OFF position use the shutdown commands so that the system can perform a graceful shutdown This may take several minutes to complete After the graceful shutdown is complete the console displays It is safe to power of...

Page 23: ...n page 12 for a description of the fan LEDs Network Modules The Firepower 2130 and 2140 contain one network module slot that provides optical or electrical network interfaces Network modules are optional removable I O modules that provide either additional ports or different interface types The Firepower network module plugs into the chassis on the front panel For More Information See 10 Gb Networ...

Page 24: ...oftware and hardware compatibility including operating system and hosting environment requirements for each supported version Note The FPR2K NM 8X10G is NEBS compliant Note You can fit four copper SFPs in either the top row of ports or the bottom row of ports Both rows cannot be populated at the same time because of the port row spacing Note Figure 15 FPR2K NM 8X10G Ethernet X 1 2 Captive screw ha...

Page 25: ...sco Firepower 2100 ASA Platform Mode FXOS Configuration Guide for the procedure to upgrade the firmware package for the Firepower 2100 running ASA with FXOS See the Cisco Firepower Compatibility Guide and the Cisco ASA Compatibility guide which provide Cisco software and hardware compatibility including operating system and hosting environment requirements for each supported version Note The FPR2K...

Page 26: ...n the appliance switches from normal operation to hardware bypass or from hardware bypass back to normal operation traffic may be interrupted for several seconds A number of factors can affect the length of the interruption for example behavior of the optical link partner such as how it handles link faults and debounce timing spanning tree protocol convergence dynamic routing protocol convergence ...

Page 27: ...k Module with Hardware Bypass The following figure shows the front panel of the 1 Gb SX 10 Gb SR and 10 Gb LR hardware bypass network modules FPR2K NM 6X1SX F FPR2K NM 6X10SR F FPR2K NM 6X10LR F This is a single wide module that does not support hot swapping The six ports are numbered from top to bottom left to right Pair ports 1 and 2 3 and 4 and 5 and 6 to form hardware bypass paired sets Make s...

Page 28: ...B1 through B3 Green In standby mode Amber flashing Port is in hardware bypass mode failure event 6 Ethernet X 5 top port Ethernet X 6 bottom port Ports 5 and 6 are paired together to form a hardware bypass pair 5 The 1 Gb SX 10 Gb SR 10 Gb LR network modules have the following insertion loss measurements Insertion loss measurements help you to troubleshoot the network by verifying cable installati...

Page 29: ...dware bypass Insertion loss Cable distance Half the distance specified by the IEEE standard Note Modal bandwidth MHz km Core diameter microns 13 m 16 5 m 33 m 41 m 150 m 200 m 160 FDDI 200 OM1 400 500 OM2 2000 OM3 4700 OM4 62 5 62 5 50 50 50 50 Cable and operating distance Table 4 10 Gb LR Network Module FPR2K NM 6X10LR F Maximum Typical Operating Mode 1 6 dB 1 9 dB 1 2 dB 1 5 dB Normal Hardware b...

Page 30: ... paired sets Make sure you have the correct firmware package and software version installed to support this network module See Cisco FXOS Troubleshooting Guide for the Firepower 1000 2100 with Firepower Threat Defense for the procedure to verify your firmware package and software version See Cisco Firepower 2100 ASA Platform Mode FXOS Configuration Guide for the procedure to upgrade the firmware p...

Page 31: ... field replaceable If the power supply fails you must get a return material authorization RMA for the entire chassis See the Cisco Returns Portal for more information The Firepower 2130 and 2140 support two AC power supply modules so that dual power supply redundancy protection is available The Firepower 2130 ships with one AC power supply and the Firepower 2140 ships with two AC power supplies Yo...

Page 32: ...wer supply modules are installed Note Table 5 AC Power Supply Module Hardware Specifications 2140 2130 2120 2110 100 to 240 V AC Input voltage 6 A 4 A Maximum input current 400 W 250 W Maximum output power 50 to 60 Hz Frequency 89 at 50 load 85 at 50 load Efficiency 800W Maximum redundancy output power 1 1 redundancy with dual power supply modules Redundancy DC Power Supply The power supplies can ...

Page 33: ...or power supply LEDs on the power supply module The figure shows the AC power supply module The DC power supply module has the same LEDs Figure 19 Power Supply Module LEDs Green OK LED 2 Amber FAIL LED 1 The following describes the power module supply LEDs Green LED OK Status Off Input power not present Green flashing Input power present but system is not powered up power switch is off Green The p...

Page 34: ...n and description of the fan LED See Remove and Replace the Fan Tray on page 80 for the procedure for removing and replacing the fan tray SSDs The Firepower 2110 and 2120 have two SSD slots These models ship with one 100 GB SSD installed in slot 1 The Firepower 2130 and 2140 have two SSD slots These models ship with one 200 GB SSD installed in slot 1 See Product ID Numbers on page 34 for a list of...

Page 35: ... receiver in the same physical package It is a hot swappable optical or electrical copper interface that plugs into the SFP SFP ports on the fixed ports and the network module ports and provides Ethernet connectivity Figure 20 SFP Transceiver Bail clasp 2 Dust plug 1 Transmit optical bore 4 Receive optical bore 3 Safety Warnings Take note of the following optical connection warnings Statement 1051...

Page 36: ...re allowed we do not recommend using them because they have not been tested and validated by Cisco Cisco TAC may refuse support for any interoperability problems that result from using an untested third party SFP transceiver Caution The following table lists the supported transceivers Table 7 Supported SFPs Ports Supported PID Optics Type SFP 1Gb Ports 13 through 16 Ports 1 though 8 of the 8X10G n...

Page 37: ...CU7M SFP H10GB ACU10M H10GB ACU 7M 10M SFP 10G AOC1M SFP 10G AOC2M SFP 10G AOC3M SFP 10G AOC5M SFP 10G AOC7M SFP 10G AOC10M 10G AOC 1M 2M 3M 5M 7M 10M Hardware Specifications The following table contains hardware specifications for the Firepower 2100 series security appliance 2140 2130 2120 2110 Specification 1 73 x 16 90 x 19 76 inches 4 4 x 42 9 x 50 2 cm Chassis dimensions H x W x D 1 2 x 3 7 x...

Page 38: ... Humidity Operating 10 000 ft maximum Nonoperating 40 000 ft maximum Altitude 55 7 dBA typical 76 7 dBA maximum 47 3 dBA typical 73 4 dBA maximum Sound pressure 66 typical 84 5 maximum 60 2 typical 85 1 maximum Sound power Product ID Numbers The following table lists the PIDs associated with the Firepower 2100 series All of the PIDs in the table are field replaceable If you need to get a return ma...

Page 39: ...power supply or fan spare FPR2110 K9 Firepower 2120 appliance 1 RU with no power supply or fan spare FPR2120 K9 Firepower 2130 appliance with one network module bay and no power supply or fan spare FPR2130 K9 Firepower 2140 appliance with one network module bay and no power supply or fan spare FPR2140 K9 350 W DC power supply FPR2K PWR DC 350 350 W DC power supply spare FPR2K PWR DC 350 400 W AC p...

Page 40: ... 10 Gb LR hardware bypass network module FPR2K NM 6X10LR F 6 port 10 Gb LR hardware bypass network module spare FPR2K NM 6X10LR F 6 port 10 Gb SR hardware bypass network module FPR2K NM 6X10SR F 6 port 10 Gb SR hardware bypass network module spare FPR2K NM 6X10SR F 8 port 1 Gb copper hardware bypass network module FPR4K NM 8X1G F 8 port 1 Gb copper hardware bypass network module spare FPR4K NM 8X1...

Page 41: ...d for the product Using a incompatible power cord with this product may result in electrical safety hazard Orders delivered to Argentina Brazil and Japan must have the appropriate power cord ordered with the system Only the approved power cords or jumper power cords provided with the security appliance are supported Note The following power cords are supported Figure 21 Argentina CAB ACR Cord set ...

Page 42: ... 3 Figure 24 China CAB ACC Cord set rating 10 A 250 V 2 Plug GB2099 1 2008 GB1002 1 Connector IEC 60320 C13 3 Figure 25 Europe CAB ACE Cord set rating 10 A 250 V 2 Plug CEE 7 VII 1 Connector IEC 60320 C13 3 Cisco Firepower 2100 Series Hardware Installation Guide 38 Overview Power Cord Specifications ...

Page 43: ...ure 27 Italy CAB ACI Cord set rating 10 A 250 V 2 Plug CEI 23 16 1 Connector IEC 60320 C13 3 Figure 28 Japan CAB JPN Cord set rating 12 A 125 V 2 Plug JIS C8303 1 Connector IEC 60320 C13 3 Figure 29 Japan CAB JPN 3PIN Cisco Firepower 2100 Series Hardware Installation Guide 39 Overview Power Cord Specifications ...

Page 44: ...2 IEC 60320 C14G 1 Connector IEC 60320 C13 3 Figure 31 Korea CAB AC C13 KOR Cord set rating 10 A 250 V 2 Plug KSC 8305 1 Connector IEC 60320 C13 3 Figure 32 North America CAB AC Cord set rating 10 A 125 V 2 Plug NEMA5 15P 1 Connector IEC 60320 C13 3 Cisco Firepower 2100 Series Hardware Installation Guide 40 Overview Power Cord Specifications ...

Page 45: ... C13 3 Figure 34 Switzerland CAB ACS Cord set rating 10 A 250 V 2 Plug SEV 1011 1 Connector IEC 60320 C13 3 Figure 35 Taiwan CAB ACTW Cord set rating 10 A 125 V 2 Plug CNS10917 1 Connector IEC 60320 C13 3 Cisco Firepower 2100 Series Hardware Installation Guide 41 Overview Power Cord Specifications ...

Page 46: ...Figure 36 United Kingdom CAB ACU Cord set rating 10 A 250 V 2 Plug BS1363A SS145 1 Connector IEC 60320 C13 3 Cisco Firepower 2100 Series Hardware Installation Guide 42 Overview Power Cord Specifications ...

Page 47: ...n document before installing the security appliance Take note of the following general safety warnings Statement 1071 Warning Definition IMPORTANT SAFETY INSTRUCTIONS Before you work on any equipment be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents Read the installation instructions before using installing or connecting the...

Page 48: ...ore using installing or connecting the system to the power source Warning Statement 1015 Battery Handling To reduce risk of fire explosion or leakage of flammable liquid or gas Replace the battery only with the same or equivalent type recommended by the manufacturer Do not dismantle crush puncture use sharp tool to remove short external contacts or dispose of in fire Do not use if battery is warpe...

Page 49: ...equipment A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment Warning Statement 1090 Installation by Skilled Person Only a skilled person should be allowed to install replace or service this equipment See statement 1089 for the definition of a skilled person Warning Statement 109...

Page 50: ...ries Required to Comply with GR 1089 Emission and Immunity Requirements To comply with the emission and immunity requirements of GR 1089 shielded cables are required for the following ports Gigabit Ethernet management port RJ 45 1 G 100 M 10 M auto duplex auto MDI X Base T ports Note Statement 7005 Intrabuilding Lightning Surge and AC Power Fault The intrabuilding port s of the equipment or subass...

Page 51: ...unications Facilities This equipment is suitable for installation in network telecommunications facilities Note Statement 8016 Installation Location Where the National Electric Code NEC Applies This equipment is suitable for installation in locations where the NEC applies Note Safety Recommendations Observe these safety guidelines Keep the area clear and dust free before during and after installat...

Page 52: ...intermittent or complete failure Always follow ESD prevention procedures when removing and replacing components Ensure that the chassis is electrically connected to an earth ground Wear an ESD preventive wrist strap ensuring that it makes good skin contact Connect the grounding clip to an unpainted surface of the chassis frame to safely ground ESD voltages To properly guard against ESD damage and ...

Page 53: ... is clean free of spikes and noise Install a power conditioner if necessary to ensure proper voltages and power levels in the appliance input voltage Install proper grounding for the site to avoid damage from lightning and power surges The chassis does not have a user selectable operating range Refer to the label on the chassis for the correct appliance input power requirement Several styles of AC...

Page 54: ...ide cooling air In an enclosed rack with a ventilation fan in the top heat generated by equipment near the bottom of the rack can be drawn upward and into the intake ports of the equipment above it in the rack Ensure that you provide adequate ventilation for equipment at the bottom of the rack Baffles can help to isolate exhaust air from intake air which also helps to draw cooling air through the ...

Page 55: ...r service representative immediately Note See Package Contents on page 5 for a list of what shipped with the chassis Step 1 Remove the chassis from its cardboard container and save all packaging material Step 2 Compare the shipment to the equipment list provided by your customer service representative Verify that you have all items Step 3 Check for damage and report any discrepancies or damage to ...

Page 56: ...iver Two rack mount brackets part number 700 106374 01 with six 8 32 x 0 281 inch screws part number 48 101518 01 The rack mount brackets ship with the Firepower 2110 2120 and are orderable for the Firepower 2130 2140 Note Rack mount screws The rack mount screws ship with the Firepower 2110 2120 and are orderable for the Firepower 2130 2140 Note Four 12 24 x 0 75 inch Phillips screws part number 6...

Page 57: ...tom of the rack If the rack is provided with stabilizing devices install the stabilizers before mounting or servicing the unit in the rack Warning Statement 1032 Lifting the Chassis To prevent personal injury or damage to the chassis never attempt to lift or tilt the chassis using the handles on modules such as power supplies fans or cards These types of handles are not designed to support the wei...

Page 58: ... Step 2 Optional Attach the cable management bracket to the rack mount bracket a Install the cable management screws into the rack mount bracket Figure 38 Install the Cable Management Screws into the Rack Mount Bracket Cisco Firepower 2100 Series Hardware Installation Guide 54 Rack Mount and Ground the Chassis Rack Mount the Chassis Using Brackets ...

Page 59: ...tion EIA rack It is a 4 post EIA 310 D which is the current revision as specified by EIA The vertical hole spacing alternates at 50 inches 12 70 mm to 625 inches 15 90 mm to 625 inches 15 90 mm and repeats The start and stop space is in the middle of the 50 inch holes The horizontal spacing is 18 312 inches 465 1 mm and the rack opening is specified as a minimum of 17 75 inches 450 mm You need the...

Page 60: ...with stabilizing devices install the stabilizers before mounting or servicing the unit in the rack Warning Statement 1032 Lifting the Chassis To prevent personal injury or damage to the chassis never attempt to lift or tilt the chassis using the handles on modules such as power supplies fans or cards These types of handles are not designed to support the weight of the unit Warning Statement 1047 O...

Page 61: ...is using the six 8 32 x 0 375 inch Phillips screws three per side Figure 40 Attach the Slide Rail Locking Bracket to the Side of the Chassis Slide rail locking bracket 2 Chassis 1 8 32 x 0 25 inch Phillips screws three per side 3 Cisco Firepower 2100 Series Hardware Installation Guide 57 Rack Mount and Ground the Chassis Rack Mount the Chassis Using Slide Rails ...

Page 62: ... slots on the rail line up with the three pegs on the side of the chassis Figure 42 Line up the Inner Rail with the Pegs on the 2130 2140 Chassis M3 x 6 mm Phillips screw one per side 2 Mounting peg on the chassis for the keyed slot 1 Inner rail 3 c Set the keyed slots over the screws pegs and then slide the rail toward the front to lock it in place on the screw pegs The rear key slot has a metal ...

Page 63: ...to the rack post holes from the outside front c Press the securing plate release button marked PUSH The spring loaded securing plate closes to lock the pegs in place d Adjust the slide rail length and then push the rear mounting pegs into the corresponding rear rack post holes The slide rail must be level front to rear The rear mounting pegs enter the rear rack post holes from the inside of the ra...

Page 64: ...e cables according to your software configuration as described in the Cisco Firepower 2100 Getting Started Guide Ground the Chassis Grounding the chassis is required even if the rack is already grounded A grounding pad with two threaded M4 holes is provided on the chassis for attaching a grounding lug The grounding lug must be Nationally Recognized Testing Laboratory NRTL listed In addition a copp...

Page 65: ...ty or an electrician if you are uncertain that suitable grounding is available Warning Statement 1025 Use Copper Conductors Only To reduce risk of fire use copper conductors only Warning Statement 1052 Installing and Grounding the Antenna To reduce the risk of electric shock refer to national and local codes for proper installation and grounding of antennas Warning Step 1 Use a wire stripping tool...

Page 66: ...p 7 Prepare the other end of the grounding cable and connect it to an appropriate grounding point in your site to ensure adequate earth ground What to do next Install the FIPS opacity shield if necessary See Install the FIPS Opacity Shield in a Two Post Rack on page 82 and Install the FIPS Opacity Shield in a Four Post Rack on page 85 for the procedure Install the cables according to your default ...

Page 67: ...ugh the hardware supports removing and replacing the network module while the system is running the software does not currently support hot swapping You must power down the chassis to remove and replace network modules See Network Modules on page 19 for more information This procedure describes how to install a network module into an empty slot that has never contained a network module and how to ...

Page 68: ...person or skilled person should be allowed to install replace or service this equipment See statement 1089 for the definition of an instructed or skilled person Warning Step 1 To install a new network module for the first time into an empty slot do the following a Power down the chassis by moving the power switch to the OFF position See Rear Panel for more information about the power switch b Foll...

Page 69: ... so that the new network module is recognized Remove and Replace the SSD Although the hardware supports removing and replacing SSDs while the system is running the software does not currently support hot swapping You must power down the chassis to remove and replace SSDs The 100 GB SSD is restricted to the 2110 and 2120 models The 200 GB SSD is restricted to the 2130 and 2140 models Do not mix the...

Page 70: ...ts There are no serviceable parts inside To avoid risk of electric shock do not open Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment A skilled person or qualified personnel is someone who has training or experience in the equipment...

Page 71: ...ow shows the 2130 and 2140 front panel Figure 48 Remove the SSD Step 4 To replace the SSD in slot 1 make sure the power switch is still in the OFF position and then hold the SSD in front of slot 1 and push it in gently until it is seated Step 5 To install the MSP SSD make sure the power switch is still in the OFF position and then remove the blank faceplate in Slot 2 by loosening the captive screw...

Page 72: ...es ensure that power is removed from the DC circuit Warning Statement 1005 Circuit Breaker This product relies on the building s installation for short circuit overcurrent protection To reduce risk of electric shock or fire ensure that the protective device is rated not greater than AC 20A DC 40A Warning Statement 1017 Restricted Area This unit is intended for installation in restricted access are...

Page 73: ...ectromagnetic interference EMI that might disrupt other equipment and they direct the flow of cooling air through the chassis Do not operate the system unless all cards faceplates front covers and rear covers are in place Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install replace or service this equipment Warning Statement 1073 No User S...

Page 74: ...ation by an Instructed Person Only an instructed person or skilled person should be allowed to install replace or service this equipment See statement 1089 for the definition of an instructed or skilled person Warning Step 1 Unplug the power supply cable before removing the power supply module You cannot disengage the power supply module latch without first removing the cable Step 2 To remove a po...

Page 75: ...ntil you hear the latch engage and it is seated Step 7 Plug in the power supply cable Step 8 Check the LED on the power supply to make sure the power supply is operative See Power Supply Modules on page 27 Connect the DC Power Supply Module For the Firepower 2130 and 2140 the input connector and plug must be UL recognized under UL 486 for field wiring The connection polarity is from left to right ...

Page 76: ...Secure the Expansion Module To reduce the risk of electric shock secure the modules with the provided screws Warning Statement 1003 DC Power Disconnection Before performing any of the following procedures ensure that power is removed from the DC circuit Warning Cisco Firepower 2100 Series Hardware Installation Guide 72 Installation Maintenance and Upgrade Connect the DC Power Supply Module ...

Page 77: ... and fire take care when connecting units to the supply circuit so that wiring is not overloaded Warning Statement 1022 Disconnect Device To reduce risk of electric shock and fire a readily accessible two poled disconnect device must be incorporated in the fixed wiring Warning Statement 1025 Use Copper Conductors Only To reduce risk of fire use copper conductors only Warning Statement 1028 More Th...

Page 78: ...nection must always be made first and disconnected last Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands p...

Page 79: ...handle Step 3 Use a wire stripping tool to strip each of the 2 wires coming from the DC input power source Strip the wires to approximately 0 39 inch 10 mm 0 02 inch 0 5 mm We recommend you use 14 AWG insulated wire Do not strip more than the recommended length of wire because doing so could leave the wire exposed from the terminal block Note Figure 51 Stripped DC Input Source Wire Strip the wires...

Page 80: ...second source is still available it can maintain system operation Step 9 Verify power supply operation by checking the power supply LED on the front of the chassis See Front Panel LEDs on page 12 for the LED values Secure the Power Cord on the Power Supply Module To secure the power supply module against accidental removal and thus prevent disrupting system performance use the tie wrap and clamp p...

Page 81: ...l is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment Warning Statement 1090 Installation by Skilled Person Only a skilled person should be allowed to install replace or service this equipment See statement 1089 for the definition of a skilled person Warning Statement 1091 Installation by an Instructed Person Only an i...

Page 82: ...ttach the clamp to the power supply module a Locate the hexagonal ventilation hole on the power supply module at the center of the plug just below the power connector body see the following figures b Plug the snapping portion of the tie wrap into the hexagonal hole c With the clamp side facing up push the tie wrap in until it is fully engaged Make sure you have the correct location because you can...

Page 83: ...he clamp fits snugly into the over mold d Adjust the clamp position on the tie wrap so that the clamp is tight against the front of the over mold and the power cord cannot be removed by lightly pulling on it Figure 55 Clamp on Over Mold of Power Cord Power cord over mold 2 Power cord 1 Direction to squeeze the clamp tabs 4 Tie clamp annular teeth 3 Cisco Firepower 2100 Series Hardware Installation...

Page 84: ...e may power off automatically to prevent damage to components The appliance does not power up and boot properly if the fan tray is missing Caution Safety Warnings Take note of the following component replacement safety warnings Statement 1028 More Than One Power Supply This unit might have more than one power supply connection To reduce risk of electric shock remove all connections to de energize ...

Page 85: ...Instructed Person Only an instructed person or skilled person should be allowed to install replace or service this equipment See statement 1089 for the definition of an instructed or skilled person Warning Step 1 Have the fan tray ready for immediate insertion and near the appliance so that you can reinstall the fan tray within 30 seconds Step 2 To remove a fan tray face the rear of the chassis an...

Page 86: ...IPS opacity shield to the cable management brackets Seven Tamper Evidence Labels TEL The TELs are made of a special thin gauge vinyl with self adhesive backing Once the CO attaches them on the chassis any attempt to open the chassis damages the TELs or the chassis cover Because the TELs have nonrepeated serial numbers the CO can inspect them for damage and compare them against the applied serial n...

Page 87: ...r back ON Note Step 4 Route the cables through the openings in the cable management brackets as shown in the figure below Step 5 Attach the FIPS opacity shield to the cable management brackets using the four 8 32 x 0 375 inch Phillips screws provided in the FIPS kit as shown in the figure below Figure 57 Route the Cables and Attach the Screws 8 32 x 0 375 inch Phillips screws two per side 2 FIPS o...

Page 88: ...rds the right side of the chassis 7 Step 8 Attach the power cable to the chassis and connect it to an electrical outlet Step 9 Press the power switch on the rear panel Step 10 Check the power LED on the front panel See Front Panel LEDs for a description of the power LED Solid green indicates that the chassis is powered on Step 11 Place the chassis in FIPS mode See the following procedures for how ...

Page 89: ...d serial numbers the CO can inspect them for damage and compare them against the applied serial numbers to verify whether the chassis has been tampered with TELs with curled corners rips and slices indicate tampering The word FIPS or OPEN may appear if the label has been peeled back Note Step 1 Copy the serial number and store it in a secure place To find the serial number see Serial Number Locati...

Page 90: ...using the four 8 32 x 0 375 inch Phillips screws provided in the FIPS kit Figure 59 Route the Cables and Attach the Screws 8 32 x 0 375 inch Phillips screws two per side 2 FIPS opacity shield 1 Cable management bracket 3 Step 6 Before you attach the TELs clean the chassis of any grease dirt or oil with alcohol based cleaning pads Step 7 Attach the seven TELs See the figure below for the correct pl...

Page 91: ...ds the right side of the chassis 7 Step 8 Attach the power cable to the chassis and connect it to an electrical outlet Step 9 Press the power switch on the rear panel Step 10 Check the power LED on the front panel See Front Panel LEDs for a description of the power LED Solid green indicates that the chassis is powered on Step 11 Place the chassis in FIPS mode See the following procedures for how t...

Page 92: ...r 2100 Getting Started Guide for your operating system for further configuration information Cisco Firepower 2100 Series Hardware Installation Guide 88 Installation Maintenance and Upgrade Install the FIPS Opacity Shield in a Four Post Rack ...

Search results

Summary of Contents for Firepower 2100 Series

Reviews:

Related manuals for Firepower 2100 Series

Brands by name

Popular brands

Cisco Firepower 2100 Series, Hardware Installation Manual

Search results

Summary of Contents for Firepower 2100 Series

Reviews:

Related manuals for Firepower 2100 Series

Brands by name

Popular brands