Cisco Firepower 1010, Hardware Installation Manual

Page 1: ... Installation Guide First Published 2019 07 24 Last Modified 2022 03 21 Americas Headquarters Cisco Systems Inc 170 West Tasman Drive San Jose CA 95134 1706 USA http www cisco com Tel 408 526 4000 800 553 NETS 6387 Fax 408 527 0883 ...

Page 2: ...SCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES Any Internet Protocol IP addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers Any examples command display output network topology diagrams and other figures included in the document are shown for illustrative purposes only Any use of actual IP addresses or phone numbers...

Page 3: ...stallation Preparation 19 C H A P T E R 2 Installation Warnings 19 Position the Chassis 22 Safety Recommendations 23 Maintain Safety with Electricity 23 Prevent ESD Damage 24 Site Environment 24 Site Considerations 24 Power Supply Considerations 25 Rack Configuration Considerations 25 Mount the Chassis 27 C H A P T E R 3 Unpack and Inspect the Chassis 27 Desktop Mount the Chassis 28 Cisco Firepowe...

Page 4: ...R 4 Connect to the Console Port with Microsoft Windows 37 Connect to the Console Port with Mac OS X 39 Connect to the Console Port with Linux 39 Installation Maintenance and Upgrade 41 C H A P T E R 5 Install the FIPS Opacity Shield 41 Cisco Firepower 1010 Hardware Installation Guide iv Contents ...

Page 5: ... of devices with Power over Ethernet PoE and L2 switch support The PoE and L2 switch features are supported starting with Firepower Threat Defense FTD Version 6 5 and ASA Version 9 13 Note See the Cisco Firepower Compatibility Guide which provides Cisco Firepower software and hardware compatibility including operating system and hosting environment requirements for each supported Firepower version...

Page 6: ...IN APL US Government Compliance for IPv6 USGv6 on FTD 7 0 x Certification Approval under the R1 Profile for the Product Classification NPP See the Security Certifications Compliance topic in the Appliance Platform Settings chapter in the Firepower Management Center Configuration Guide Version 6 7 for the instructions on how to enable security certifications compliance Security standards certificat...

Page 7: ...5 6 7 8 Each port includes a pair of LEDs one each for connection status and link status The ports are named and numbered Gigabit Ethernet 1 1 through Gigabit Ethernet 1 8 You can use ports 7 and 8 as PoE ports PoE is first supported in Firepower Version 6 5 and ASA Version 9 13 Note Network ports Ports 7 and 8 are PoE ports first supported in Firepower Version 6 5 and ASA Version 9 13 Note PoE co...

Page 8: ...sole port does not support a remote dial in modem You can use a standard management cable Cisco part number 72 3383 01 to convert the RJ45 to DB9 connection if necessary USB Mini B port Lets you connect to a USB port on an external computer For Linux and Macintosh systems no special driver is required For Windows systems you must download and install a USB driver available on software cisco com Yo...

Page 9: ...Package Contents The following figure shows the package contents for the Firepower 1010 Note that the contents are subject to change and your exact contents might contain additional or fewer items Figure 2 Firepower 1010 Package Contents USB console cable Type A to Mini Type B Part number 37 19770 01 2 Chassis 1 Power supply 4 Power cord See Power Cord Specifications on page 12 for a list of the a...

Page 10: ...network so that the IT department can onboard the device to CDO and configure it remotely CDO supports Firepower Threat Defense FTD version 6 7 and later The following figure shows the QR code sticker Figure 3 QR Code Sticker The following figure shows the placement of the QR code sticker on the front panel of the chassis Figure 4 Firepower 1010 QR Code Sticker QR code sticker 1 Cisco Firepower 10...

Page 11: ...liance Label on the Chassis Front Panel The following figure shows the front panel of the Firepower 1010 Note that there are no connectors or LEDs on the front panel Figure 6 Firepower 1010 Front Panel Rear Panel The following figure shows the rear panel of the Firepower 1010 See Status LEDs on page 8 for a description of the LEDs Cisco Firepower 1010 Hardware Installation Guide 7 Overview Serial ...

Page 12: ...ton 9 Status LEDs Facing the rear of the chassis the LEDs are located on the top left edge facing the front of the chassis they are in the back right corner of the top The network port LEDs are at the top sides of each network port The following figure shows the status LEDs on the rear panel and on the cover of the chassis Cisco Firepower 1010 Hardware Installation Guide 8 Overview Status LEDs ...

Page 13: ...assis 2 Power Status and Active LEDs on rear of chassis 1 The following figure shows all of the LEDs on the rear panel of the Firepower 1010 and describes their states Figure 9 Rear Panel LEDs Cisco Firepower 1010 Hardware Installation Guide 9 Overview Status LEDs ...

Page 14: ...e CDO LED pattern applies to low touch provisioning LTP See the Firepower Easy Deployment Guide for Cisco Firepower 1000 or 2100 Firewalls for more information Note 2 Power Power supply status Off Power supply off Green Power supply on 1 Network Status of the network ports Link status L Off No link or port is not in use Green Link established Green flashing Link activity 4 Active Status of the fai...

Page 15: ...m power for the power supply PoE is first supported in FTD Version 6 5 Note Use the power supply part number 341 100765 01 that shipped with the chassis It supports PoE Note System power Operating 32 to 104 F 0 to 40 C Derate the maximum operating temperature 1 5 C per 1000 ft above sea level Nonoperating 13 to 158 F 25 to 70 C maximum altitude is 40 000 ft Because the Firepower 1010 has no fan th...

Page 16: ...co Firepower 1010 rack mount kit spare FPR1K DT RACK MNT Cisco Firepower 1010 wall mount kit spare FPR1K DT WALL MNT Cisco Firepower 1010 FIPS kit spare FPR1K DT FIPS KIT Power Cord Specifications Each power supply has a separate power cord Standard power cords or jumper power cords are available for connection to the security appliance The jumper power cords for use in racks are available as an o...

Page 17: ...0 C5 3 Figure 11 Australia CAB AC C5 AUS Cord set rating 2 5 A 250 V 2 Plug AUS 10S3 1 Connector IEC 60320 C5 3 Figure 12 Brazil CAB AC C5 BRA Cord set rating 2 5 A 250 V 2 Plug NBR 14136 1 Connector IEC 60320 C5 3 Cisco Firepower 1010 Hardware Installation Guide 13 Overview Power Cord Specifications ...

Page 18: ...C5 3 Figure 14 China CAB AC C5 CHI Cord set rating 2 5 A 250 V 2 Plug GB 2099 1 1 Connector IEC 60320 C5 3 Figure 15 Europe CAB AC C5 EUR Cord set rating 2 5 A 250 V 2 Plug CEE 7 VII 1 Connector IEC 60320 C5 3 Cisco Firepower 1010 Hardware Installation Guide 14 Overview Power Cord Specifications ...

Page 19: ...C5 3 Figure 17 Italy CAB AC C5 ITA Cord set rating 2 5 A 250 V 2 Plug CEI 23 06 VII 1 Connector IEC 60320 C5 3 Figure 18 Japan CAB AC C5 JAP Cord set rating 3 A 125 V 2 Plug JIS C8303 1 Connector IEC 60320 C5 3 Cisco Firepower 1010 Hardware Installation Guide 15 Overview Power Cord Specifications ...

Page 20: ...Figure 20 South Africa CAB AC C5 SAF Cord set rating 2 5 A 250 V 2 Plug SABS 164 1 1 Connector IEC 60320 C5 3 Figure 21 Switzerland CAB AC C5 SWI Cord set rating 2 5 A 250 V 2 Plug SEV 1011 1 Connector IEC 60320 C5 3 Cisco Firepower 1010 Hardware Installation Guide 16 Overview Power Cord Specifications ...

Page 21: ... 125 V 2 Plug CNS 10917 2 1 Connector IEC 60320 C5 3 Figure 23 United Kingdom CAB AC C5 UK Cord set rating 2 5 A 250 V 2 Plug BS1363A SS145 1 Connector IEC 60320 C5 3 Cisco Firepower 1010 Hardware Installation Guide 17 Overview Power Cord Specifications ...

Page 22: ...Cisco Firepower 1010 Hardware Installation Guide 18 Overview Power Cord Specifications ...

Page 23: ...ocument before installing the chassis Take note of the following warnings Statement 1071 Warning Definition IMPORTANT SAFETY INSTRUCTIONS Before you work on any equipment be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents Read the installation instructions before using installing or connecting the system to the power source U...

Page 24: ...r you could shock yourself Warning Statement 1004 Installation Instructions Read the installation instructions before using installing or connecting the system to the power source Warning Statement 1005 Circuit Breaker This product relies on the building s installation for short circuit overcurrent protection Ensure that the protective device is rated not greater than 20 A 120 V and 16 A 250 V War...

Page 25: ...uthority or an electrician if you are uncertain that suitable grounding is available Warning Statement 1028 More Than One Power Supply This unit might have more than one power supply connection To reduce risk of electric shock remove all connections to de energize the unit Warning Statement 1029 Blank Faceplates and Cover Panels Blank faceplates and cover panels serve three important functions the...

Page 26: ...es To reduce risk of electric shock or fire installation of the equipment must comply with local and national electrical codes Warning Position the Chassis See Desktop Mount the Chassis on page 28 for information on desktop mounting the chassis Figure 24 Desk Top Mount the Chassis Do not stack the chassis on top of another chassis If you stack the units they will overheat which causes the units to...

Page 27: ...is too heavy for one person Maintain Safety with Electricity Before working on a chassis be sure the power cord is unplugged Warning Read the Regulatory and Compliance Information document before installing the chassis Follow these guidelines when working on equipment powered by electricity Before beginning procedures that require access to the interior of the chassis locate the emergency power of...

Page 28: ...der no circumstances should you stack one chassis on top of one another This disrupts cooling air flow to the chassis and causes damage to the hardware Warning See Hardware Specifications on page 11 for information about physical specifications To avoid equipment failures and reduce the possibility of environmentally caused shutdowns plan the site layout and equipment locations carefully If you ar...

Page 29: ...e following when planning a rack configuration If you are mounting a chassis in an open rack make sure that the rack frame does not block the intake or exhaust ports If your rack includes closing front and rear doors the doors must have 65 percent open perforated area evenly distributed from top to bottom to permit adequate airflow Be sure enclosed racks have adequate ventilation Make sure that th...

Page 30: ...Cisco Firepower 1010 Hardware Installation Guide 26 Installation Preparation Rack Configuration Considerations ...

Page 31: ...back due to damage Note See Package Contents on page 5 for a list of what shipped with the chassis Step 1 Remove the chassis from its cardboard container and save all packaging material Step 2 Compare the shipment to the equipment list provided by your customer service representative Verify that you have all items Step 3 Check for damage and report any discrepancies or damage to your customer serv...

Page 32: ... FIPS opacity shield Install the cables according to your default software configuration as described in the Cisco Firepower 1010 Getting Started Guide Wall Mount the Chassis You can purchase an optional wall mount kit You can wall mount the chassis left right or rear panel side up You can use the wall mount bracket to mark the holes for mounting it on the wall The wall mount bracket is 7 682 x 6 ...

Page 33: ...and a location on the wall for the chassis Step 2 Use a pencil ruler and level to mark locations for the two mounting screws 6 x 1 inch You can use the wall mount bracket itself to mark either the top holes or the side holes Figure 26 Wall Mount Bracket Vertical mounting 2 Horizontal mounting 1 Step 3 Attach the wall mount bracket to the chassis using the three Phillips M3 x 6 mm screws Cisco Fire...

Page 34: ...ightly smaller in diameter than anchors if you are using them The recommended drill hole size is 3 16 inches Step 6 Insert the anchors into the holes if needed and be sure they are properly seated Step 7 Fasten each screw into its anchor until it protrudes about inch Step 8 Pick up the chassis align the screws in the anchors with the holes in the bottom of the wall mount bracket move the chassis t...

Page 35: ...four screws that you can use to secure the chassis to your rack Chose the screws that fit your rack Note Rack shelf part number 700 122662 01 Two sliding rack trays part number 800 107648 01 Two cable guides part number 700 122664 01 Twelve Phillips M3 x 7 mm screws part number 48 1921 01 use these screws to install the cable guides and to secure the rack shelf onto the chassis Four Phillips 12 24...

Page 36: ...ng six of the twelve Phillips M3 x 7 mm screws part number 48 1921 01 Drive the screws in while facing the back of the rack shelf Note c Set the rack shelf aside Continue with Step 2 to install the sliding rack tray on the chassis The figure in Step 8 shows the rack shelf with the cable guides attached Step 2 Place the chassis with the top facing down on a large stable work area Step 3 Invert the ...

Page 37: ...ottom of the sliding rack tray are aligned with the mounting holes in the bottom of the chassis Step 5 Tighten the three M3 x 7 mm screws to lock the chassis into place on the sliding rack tray see the figure above Step 6 Carefully turn the sliding rack tray right side up Step 7 Install the power supply in the sliding rack tray behind the chassis Cisco Firepower 1010 Hardware Installation Guide 33...

Page 38: ...ace the power supply on the sliding rack tray behind the chassis Make sure the AC inlet cord faces the rear b Align the power supply to the side and rear stops If the rear sliding stop is not touching the power supply loosen the two screws slide the stop up to touch the power supply and then retighten screws c Re engage the Velcro straps and tighten them to secure the power supply Cisco Firepower ...

Page 39: ... The chassis is now installed in the sliding rack tray which is installed in the rack shelf Repeat Steps 1 through 8 to install a second chassis Use the second sliding rack tray and remaining three M3 x 7 mm screws to install a second chassis to the sliding rack tray and then onto the rack shelf see Step 3 Cisco Firepower 1010 Hardware Installation Guide 35 Mount the Chassis Rack Mount the Chassis...

Page 40: ... inch from the rack mount kit that fit your rack type You can now attach your power supply cord and run it through the cable guides What to do next Install the cables according to your default software configuration as described in the Cisco Firepower 1010 Getting Started Guide Cisco Firepower 1010 Hardware Installation Guide 36 Mount the Chassis Rack Mount the Chassis ...

Page 41: ...rograms utility or the Setup exe program Disconnect the console terminal before uninstalling the driver Note Step 1 Obtain the appropriate driver Cisco_usbconsole_driver_X_X_zip where X is a revision number for your model from the Cisco Download Software site USB Console Software category The download site redirects you to a router download section where the drivers are also applicable to Firepowe...

Page 42: ...ovide an appropriate adapter for that port The LED for the console port turns green and within a few moments the Found New Hardware Wizard appears Step 5 Follow the instructions to complete the driver installation Step 6 To communicate with the chassis start a terminal emulator application This software should be configured with the following parameters 9600 baud 8 data bits Cisco Firepower 1010 H...

Page 43: ...owed by the chassis USB port speed Example macbook user screen dev tty usbmodem1a21 9600 Step 5 Enter Ctrl a followed by d to disconnect the OS X USB console from the Terminal window Connect to the Console Port with Linux Follow these steps to connect a Linux system USB port to the console using the built in Linux Terminal utility Step 1 Open the Linux Terminal window Step 2 Connect the Linux USB ...

Page 44: ...yACM0 9600 Step 5 To disconnect the Linux USB console from the Terminal window enter Ctrl a followed by then quit Cisco Firepower 1010 Hardware Installation Guide 40 Connect to the Console Port Connect to the Console Port with Linux ...

Page 45: ...t or wall mount The rack mount does not support the FIPS shield See Desktop Mount the Chassis on page 28 and Wall Mount the Chassis on page 28 for more information Note Before you begin This procedure should be performed only by the Crypto Officer CO Caution You need the following to install the FIPS opacity shield 1 Phillips head screwdriver The following items from the FIPS kit part number 69 10...

Page 46: ...ring The word FIPS or OPEN may appear if the label has been peeled back Note Step 1 Copy the serial number and store in a secure place Step 2 If the chassis is mounted on a wall uninstall it by following Steps 9 10 in Wall Mount the Chassis on page 28 Step 3 Install the FIPS cover by holding the chassis right side up and sliding the chassis into the FIPS cover front panel first Figure 35 Install C...

Page 47: ...s three on the bottom of the chassis over the screws and one on the front of the chassis See the figure below for the correct placement The figure shows the bottom of the chassis where you place three of the TELs Allow the TELs to cure for a minimum of 12 hours Any deviation in the placement of the TELs means the chassis is not in FIPS mode Caution Cisco Firepower 1010 Hardware Installation Guide ...

Page 48: ...le to the chassis and connect it to an electrical outlet Step 9 Press the power switch on the rear panel Step 10 Check the power LED on the front panel See Status LEDs on page 8 for a description of the power LED Solid green indicates that the chassis is powered on Step 11 Place the chassis in FIPS mode See the following procedures for how to place the chassis in FIPS mode See the Security Certifi...

Page 49: ...Commands for the ASA procedure to enable FIPS mode What to do next See the Cisco Firepower 1010 Getting Started Guide for further configuration information Cisco Firepower 1010 Hardware Installation Guide 45 Installation Maintenance and Upgrade Install the FIPS Opacity Shield ...

Page 50: ...Cisco Firepower 1010 Hardware Installation Guide 46 Installation Maintenance and Upgrade Install the FIPS Opacity Shield ...