Cisco Firepower 1600, Hardware Installation Manual

Page 1: ... 1600 2600 and 4600 Hardware Installation Guide First Published 2019 06 26 Americas Headquarters Cisco Systems Inc 170 West Tasman Drive San Jose CA 95134 1706 USA http www cisco com Tel 408 526 4000 800 553 NETS 6387 Fax 408 527 0883 ...

Page 2: ...COURSE OF DEALING USAGE OR TRADE PRACTICE IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT SPECIAL CONSEQUENTIAL OR INCIDENTAL DAMAGES INCLUDING WITHOUT LIMITATION LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES Any Internet Protocol IP addresses and ...

Page 3: ...ion Preparation 23 C H A P T E R 2 Installation Warnings 23 Safety Recommendations 25 Maintain Safety with Electricity 25 Prevent ESD Damage 26 Site Environment 26 Power Supply Considerations 26 Rack Configuration Considerations 27 Mount and Connect 29 C H A P T E R 3 Unpack and Inspect the Chassis 29 Rack Mount the Chassis 29 Connect Cables Turn on Power and Verify Connectivity 32 Cisco Firepower...

Page 4: ...nd Upgrade 35 C H A P T E R 4 Power Button Shutdown 35 Remove and Replace a Drive 36 Remove and Replace a Power Supply 38 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide iv Contents ...

Page 5: ...he field replaceable product IDs PIDs associated with the FMC 1600 2600 and 4600 You can remove and replace drives and power supplies For all other internal component failures you must send your chassis for RMA The FMC management appliances support Cisco Firepower Threat Defense software See the Cisco Firepower Compatibility Guide which provides Cisco Firepower software and hardware compatibility ...

Page 6: ...tor beacon Yes Power switch Two Intel Xeon 4116 processors Two Intel Xeon 4110 processors One Intel Xeon 4110 processor Processor 128 GB RAM 64 GB RAM 32 GB RAM Memory Eight 16 GB DDR4 2400 MHz DIMMs Four 16 GB DDR4 2400 MHz DIMMs Two 16 GB DDR4 2400 MHz DIMMs RDIMMs Internal component only not field replaceable Two built in RJ 45 SFP ports Support for 1000 Mbps 1 Gbps and 10 Gbps The primary mana...

Page 7: ...RAID 1 hot swappable Storage One The chassis has a dedicated internal riser for a PCIe style Cisco modular RAID controller card Internal component only not field replaceable RAID controller Package Contents The following figure shows the package contents for the FMC 1600 2600 and 4600 Note that the contents are subject to change and your exact contents might contain additional or fewer items Figur...

Page 8: ...erial Number Locations The serial number SN for the FMC 1600 2600 and 4600 is printed on the pullout asset card located on the front panel as shown in the following figure of the FMC 1600 Figure 2 Serial Number on Pullout Asset Card The serial number is also on the label on the cover of the chassis as shown in the following figure The cover latch on the top of the chassis cover is not supported Th...

Page 9: ... panel features and disk drive configuration for the FMC 1600 See Front Panel LEDs on page 7 for a description of the LEDs Figure 4 FMC 1600 Front Panel Power button power status LED 2 Drive bays Supports two SAS HDDs in slots 1 and 2 1 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 5 Overview Front Panel ...

Page 10: ...s Figure 5 FMC 2600 Front Panel Power button power status LED 2 Drive bays Supports four SAS HDDs in slots 1 through 4 1 System status LED 4 Unit identification button LED 3 Fan status LED 6 Power supply status LED 5 Temperature status LED 8 Network link activity LED 7 KVM port Not supported use the VGA and USB keyboard ports instead 10 Pullout asset card 9 The following figure shows the front pan...

Page 11: ...tus LED 6 Power supply status LED 5 Temperature status LED 8 Network link activity LED 7 KVM port Not supported use the VGA and USB keyboard ports instead 10 Pullout asset card 9 Front Panel LEDs The following figure shows the front panel LEDs and describes their states Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 7 Overview Front Panel LEDs ...

Page 12: ...rebuilding Amber flashing with 1 second interval Drive locate function activated in the software 1 Unit identification LED Off The unit identification function is not in use Blue flashing The unit identification function is activated 4 Power LED Off There is no AC power to the chassis Amber The chassis is in standby mode Green The chassis is in main power mode Power is supplied to all components 3...

Page 13: ...is faulty At least one DIMM is faulty At least one drive in a RAID configuration failed Amber two flashes There is a major fault with the system board Amber three flashes There is a major fault with the DIMMs Amber four flashes There is a major fault with the CPUs 5 Network link activity LED Off The Ethernet port link is idle Green One or more Ethernet ports are link active but there is no activit...

Page 14: ...g Started Guide for Models 1600 2600 and 4600 for more information Note The following figure shows the rear panel of the FMC 1600 2600 and 4600 Figure 8 Rear Panel USB 3 0 Type A USB 2 You can connect a keyboard and along with a monitor on the VGA port you can access the console 2 USB 3 0 Type A USB 1 You can connect a keyboard and along with a monitor on the VGA port you can access the console 1 ...

Page 15: ...dle Not in use 14 eth3 management interface 10 Gigabit Ethernet SFP support Use only Cisco supported SFP transceivers 13 Rear Panel LEDs The following figure shows the rear panel LEDs and describes their states Figure 9 Rear Panel LEDs and Their States 100 Mbps 1 Gbps 10 Gbps Ethernet link status speed on both LAN1 and LAN2 Off No link is present Green Link is active Green flashing Traffic is pres...

Page 16: ... on Amber Critical error detected 12 V main power off for example overcurrent overvoltage or overtemperature failure 6 Rear unit identification Off The unit identification function is not in use Blue flashing The unit identification function is activated 5 Power Supply The following table lists the specifications for each 770 W AC power supply used in the FMC 1600 2600 and 4600 Table 2 Power Suppl...

Page 17: ...00 2600 and 4600 Table 3 FMC 1600 2600 and 4600 Hardware Specifications 4600 2600 1600 Specification 1 7 x 16 89 x 29 8 in 4 32 x 43 0 x 75 6 cm Dimensions H x W x D 36 0 lb 17 0 kg 34 1 lb 16 8 kg 32 2 lb 16 6 kg Maximum weight fully loaded chassis Operating 50 to 95 F 10 to 35 C Maximum temperature is derated by 1 F 547 ft 1 C 300 m of altitude above 3117 ft 950 m Nonoperating 40 to 149 F 40 to ...

Page 18: ...2600 600 GB hard disk drive FMC M5 HDD 600G FMC 2600 600 GB hard disk drive spare FMC M5 HDD 600G Rail kit UCSC RAILB M4 Power Cord Specifications Each power supply has a separate power cord Standard power cords or jumper power cords are available for connection to the FMC 1600 2600 and 4600 The jumper power cords for use in racks are available as an optional alternative to the standard power cord...

Page 19: ...ustralia CAB 9K10A AU Cord set rating 10 A 250 V 2 Plug A S 3112 2000 1 Connector IEC 60320 C15 3 Figure 12 Brazil PWR 250V 10A BZ Cord set rating 10 A 250 V 2 Plug NBR 14136 1 Connector IEC 60320 C13 3 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 15 Overview Power Cord Specifications ...

Page 20: ... CAB C13 C14 AC Cord set rating 10 A 250 V 2 Plug SS10A 1 Connector HS10S C 13 to C 14 recessed receptacle 3 Figure 15 Cabinet Jumper CAB C13 CBN Cord set rating 10 A 250 V 2 Plug SS10A 1 Connector HS10S C 13 to C 14 3 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 16 Overview Power Cord Specifications ...

Page 21: ...CAB 9K10A EU Cord set rating 10 A 16 A 250 V 2 Plug CEE 7 7 M2511 1 Connector IEC 60320 C15 VSCC 15 3 Figure 18 India CAB 250V 10A ID Cord set rating 16 A 250 V 2 Plug IS 6538 1971 1 Connector IEC 60320 C13 3 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 17 Overview Power Cord Specifications ...

Page 22: ...9K10A IT Cord set rating 10 A 250 V 2 Plug CEI 23 16 VII I 3G 1 Connector IEC 60320 C15 EN 60320 C15M 3 Figure 21 Japan CAB JPN 3PIN Cord set rating 12 A 125 V 2 Plug JIS 8303 1 Connector IEC 60320 C13 3 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 18 Overview Power Cord Specifications ...

Page 23: ...3 Korea CAB 9K10S KOR Cord set rating 10 A 250 V 2 Plug EL211 KSC 8305 1 Connector IEC 60320 C15 3 Figure 24 North America CAB 9K12A NA Cord set rating 13 A 125 V 2 Plug NEMA5 15P 1 Connector IEC 60320 C15 3 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 19 Overview Power Cord Specifications ...

Page 24: ...B AC L620 C13 Cord set rating 13 A 250 V 2 Plug NEMA L6 20 molded twist lock 1 Connector IEC 60320 C13 3 Figure 27 Switzerland CAB 9K10A SW Cord set rating 10 A 250 V 2 Plug SEV 1011 MP232 R 1 Connector IEC 60320 C15 3 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 20 Overview Power Cord Specifications ...

Page 25: ...CNS10917 1 Connector IEC 60320 C13 3 Figure 29 United Kingdom CAB 9K10A UK Cord set rating 10 A 250 V 2 Plug BS1363A SS145 1 Connector IEC 60320 C15 3 Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 21 Overview Power Cord Specifications ...

Page 26: ...Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 22 Overview Power Cord Specifications ...

Page 27: ...arning Definition IMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger You are in a situation that could cause bodily injury Before you work on any equipment be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents Use the statement number provided at the end of each warning to locate its translation in the translated saf...

Page 28: ...l tool or you could shock yourself Warning Statement 1045 Short Circuit Protection This product requires short circuit overcurrent protection to be provided as part of the building installation Install only in accordance with national and local wiring regulations Warning Statement 1021 SELV Circuit To avoid electric shock do not connect safety extra low voltage SELV circuits to telephone network v...

Page 29: ...re working under any conditions that might be hazardous to your eyes Do not perform any action that creates a potential hazard to people or makes the equipment unsafe Never attempt to lift an object that is too heavy for one person Maintain Safety with Electricity Before working on a chassis be sure the power cord is unplugged Warning Be sure to read the REGULATORY COMPLIANCE SAFETY INFORMATION do...

Page 30: ...D prevention procedures when removing and replacing components Ensure that the chassis is electrically connected to an earth ground Wear an ESD preventive wrist strap ensuring that it makes good skin contact Connect the grounding clip to an unpainted surface of the chassis frame to safely ground ESD voltages To properly guard against ESD damage and shocks the wrist strap and cord must operate effe...

Page 31: ...ing the chassis Consider the following when planning a rack configuration If you are mounting a chassis in an open rack make sure that the rack frame does not block the intake or exhaust ports Be sure enclosed racks have adequate ventilation Make sure that the rack is not overly congested as each chassis generates heat An enclosed rack should have louvered sides and a fan to provide cooling air In...

Page 32: ...Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 28 Installation Preparation Rack Configuration Considerations ...

Page 33: ...ist of what shipped with the chassis Step 1 Remove the chassis from its cardboard container and save all packaging material Step 2 Compare the shipment to the equipment list provided by your customer service representative Verify that you have all items Step 3 Check for damage and report any discrepancies or damage to your customer service representative Have the following information ready Invoic...

Page 34: ...pecial precautions to ensure that the system remains stable The following guidelines are provided to ensure your safety This unit should be mounted at the bottom of the rack if it is the only unit in the rack When mounting this unit in a partially filled rack load the rack from the bottom to the top with the heaviest component at the bottom of the rack If the rack is provided with stabilizing devi...

Page 35: ...ote b Push the mounting pegs into the rack post holes from the outside front c Press the securing plate release button marked PUSH The spring loaded securing plate closes to lock the pegs in place d Attach the second slide rail assembly to the opposite side of the rack Make sure that the two slide rail assemblies are at the same height with each other and are level front to back e Pull the inner s...

Page 36: ...n Power and Verify Connectivity on page 32 Connect Cables Turn on Power and Verify Connectivity This procedure references the rear panel ports of the FMC 2600 and 4600 The FMC 1600 is the same except that it does not have the two 10 G SFP ports above the Ethernet ports After rack mounting the chassis follow these steps to connect cables turn on power and verify connectivity AC power supplies have ...

Page 37: ... not view directly with optical instruments Warning Step 1 Optional VGA port and USB port Connect a monitor to the VGA port and a keyboard to the USB port to complete initial setup at the CLI You can alternatively complete initial setup using HTTPS on eth0 see Step 2 The serial console port is not enabled for initial setup Note Figure 33 Cable Connections eth3 management interface 10 Gigabit Ether...

Page 38: ...ment interfaces and network topology see the Firepower Management Center Configuration Guide for your version Step 4 eth2 and eth3 management interfaces If your model includes 10 Gigabit Ethernet SFP interfaces install any Cisco supported SFP transceivers and cables as needed You can connect these interfaces to the same or different network from your other management interfaces depending on your n...

Page 39: ...er supplies on the FMC Caution You can shut down the FMC using the front panel Power button or software management See the system shutdown procedure in the Firepower Management Center Configuration Guide for your version for the software procedures Step 1 Check the Power LED Amber The FMC is already in standby mode and you can safely remove power Green The FMC is in main power mode and you must sh...

Page 40: ...combination must be accessible at all times because it serves as the main disconnecting device Warning Statement 1024 Ground Conductor This equipment must be grounded Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding...

Page 41: ...Press the release button on the face of the drive tray b Grasp and open the ejector lever and then pull the drive tray out of the slot Figure 34 Remove the Drive Release button 2 Ejector handle 1 Step 2 Remove the four drive tray screws that secure the drive to the tray and then lift the drive out of the tray Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 37 Maint...

Page 42: ...undant and hot swappable One is the active power supply and the other is the standby power supply 1 1 This FMC also supports cold redundancy Depending on the power being drawn by the FMC one power supply might actively provide all power to the system while the remaining power supply is put into a standby state For example if the power consumption can be satisfied by power supply 1 then power suppl...

Page 43: ...rounded Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install replace or service this equipment...

Page 44: ...pply a Grasp the power supply handle and insert the new power supply into the empty bay b Push the power supply into the bay until the release lever locks c Connect the power cord to the new power supply d If you shut down the FMC press the Power button to return it to main power mode Cisco Firepower Management Center 1600 2600 and 4600 Hardware Installation Guide 40 Maintenance and Upgrade Remove...