Cisco Firepower Management Center 1000, 2500, and 4500 Hardware Installation Guide

Transcription

1 Cisco Firepower Management Center 000, 500, and 4500 Hardware Installation Guide First Published: Last Modified: Americas Headquarters Cisco Systems, Inc. 70 West Tasman Drive San Jose, CA USA Tel: NETS (687) Fax:

2 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of the UNIX operating system. All rights reserved. Copyright 98, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS" WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0R) 07 Cisco Systems, Inc. All rights reserved.

3 CONTENTS CHAPTER Overview Features Package Contents Serial Number Location Front Panel 4 Front Panel LEDs and Buttons 6 Rear Panel 8 Rear Panel LEDs and Buttons 0 Hardware Specifications Power Supply Spare PIDs 4 CHAPTER Prepare for Installation 5 Installation s 5 Installation Guidelines 7 Safety Recommendations 8 Maintain Safety with Electricity 9 Prevent ESD Damage 9 Site Environment 0 Power Supply Considerations 0 Equipment Rack Configuration Considerations 0 CHAPTER Installation Unpack and Inspect the Chassis Rack-Mount the Chassis Connect Cables, Turn on Power, and Verify Connectivity 5 Ground the Chassis 8 iii

4 Contents CHAPTER 4 Maintenance and Upgrades 9 Graceful Shut Down 9 Replace Components Guidelines 0 Remove and Replace the Power Supply 0 Remove and Replace a Drive CHAPTER 5 Power Cord Specifications 5 Supported Power Cords and Plugs 5 AC Power Cord Illustrations 7 iv

5 CHAPTER Overview Features, page Package Contents, page Serial Number Location, page Front Panel, page 4 Front Panel LEDs and Buttons, page 6 Rear Panel, page 8 Rear Panel LEDs and Buttons, page 0 Hardware Specifications, page Power Supply, page Spare PIDs, page 4 Features The Firepower Management Center 000, 500, and 4500 security appliances support Cisco Firepower Threat Defense version 6. and later. Note The Cisco Firepower Management Center 000, 500, and 4500 security appliances are certified for Common Criteria (CC) and Federal Information Processing Standards (FIPS) 40. See "Security Certifications Compliance" in Firepower Management Center Configuration Guide Version 6.. for the instructions on how to enable security certifications compliance. The following table lists the features of the Firepower Management Center 000, 500, and Table : Firepower Management Center 000, 500, and 4500 Features Feature 000 Form factor RU

6 Features Overview Feature Airflow Front to rear (cold aisle to hot aisle) 4500 Processors One Intel E5-60 V4 CPU Two Intel E5-60 V4 CPUs Two Intel E5-640 V4 CPUs Memory GB 64 GB 8 GB Registered DIMMs (RDIMMs) Four 8GB DDR4-400-MHz RDIMMs Eight 8GB DDR4-400-MHz RDIMMs Eight 6GB DDR4-400-MHz RDIMMs Network management ports Two GB BASE-T Ethernet ports Two GB BASE-T Ethernet ports Two GB BASE-T Ethernet ports Two 0GB SFP+ ports Two 0GB SFP+ ports Console port System power Power consumption Cooling One GB RJ45 serial port running RS- (RS-D TIA-56) Two 770W AC power supplies (hot swappable and redundant as +) 66 BTU/hr 6 fans for front-to-rear cooling Storage Two 900GB Serial Attached SCSI (SAS) hard disk drives (RAID,.5, 0K RPM, 4Kn, hot swappable) Four 600 GB SAS hard disk drives (RAID 5,.5, 0K RPM, 4Kn, hot swappable) Six 800 GB solid-state drives (SSDs) (RAID 6,.5, 0K RPM, 4Kn, hot swappable) Asset pullout card Grounding hole Displays the serial number. Located next to the power button on the front panel. Use is optional. The supported AC power supplies have internal grounding, so no additional chassis grounding is required. Located on the upper left of the back panel.

7 Overview Package Contents Package Contents The following figure shows the package contents for the Cisco Firepower Management Center 000, 500, and Note that the contents are subject to change and your exact contents might contain additional or fewer items. Figure : Package Contents Table : Package Contents Cisco Firepower Management Center chassis RJ45 to DP9-RS console cable (Cisco part number 7-8-XX) RJ45 to RJ45 Cat 5 Ethernet cable, yellow six feet long (Cisco part number 7-48-XX) 4 Cisco RU rail kit (Cisco part number XX) Serial Number Location The serial number (SN) for the Firepower Management Center 000, 500, and 4500 is printed on the asset pullout card located on the front panel. For the location of the asset pullout card, see Front Panel, on page 4.

8 Front Panel Overview Front Panel The following figure shows the front panel features and disk-drive configuration for the Firepower Management Center 000. Figure : Firepower Management Center 000 Front Panel Features Table : Firepower Management Center 000 Front Panel Features SAS drive SAS drive Includes a disk-drive activity LED and disk-drive fault LED. Includes a disk-drive activity LED and disk-drive fault LED. Asset pullout card 4 Control panel LEDs See Front Panel LEDs and Buttons, on page 6 for a description of the LEDs. 5 Keyboard, video, and mouse (KVM) port This port is reserved. The following figure shows the front panel features and disk-drive configuration for the Firepower Management Center 500. Figure : Firepower Management Center 500 Front Panel Features Table 4: Firepower Management Center 500 Front Panel Features SAS drive SAS drive Includes a disk-drive activity LED and disk-drive fault LED. Includes a disk-drive activity LED and disk-drive fault LED. 4

9 Overview Front Panel SAS drive 4 SAS drive 4 Includes a disk-drive activity LED and disk-drive fault LED. Includes a disk-drive activity LED and disk-drive fault LED. 5 Asset pullout card 6 Control panel LEDs See Front Panel LEDs and Buttons, on page 6 for a description of the LEDs. 7 KVM port This port is reserved. The following figure shows the front panel features and disk-drive configuration for the Firepower Management Center Figure 4: Firepower Management Center 4500 Front Panel Features Table 5: Firepower Management Center 4500 Front Panel Features Solid-state drives (SSD) drive SSD drive Includes a disk-drive activity LED and disk-drive fault LED. Includes a disk-drive activity LED and disk-drive fault LED. SSD drive 4 SSD drive 4 Includes a disk-drive activity LED and disk-drive fault LED. Includes a disk-drive activity LED and disk-drive fault LED. 5 SSD drive 5 6 SSD drive 6 Includes a disk-drive activity LED and disk-drive fault LED. Includes a disk-drive activity LED and disk-drive fault LED. 7 Asset pullout card 8 Control panel LEDs See Front Panel LEDs and Buttons, on page 6 for a description of the LEDs. 9 KVM port This port is reserved. 5

10 Front Panel LEDs and Buttons Overview Front Panel LEDs and Buttons The following figure shows the front panel LEDs, buttons, and their descriptions for the Firepower Management Center 000, 500, and Figure 5: Front Panel LEDs and Buttons Disk-drive fault LED Disk-drive activity LED Off The hard drive is operating properly. Off There is no hard drive in the hard drive tray (no access, no fault). Amber Drive fault detected. Green The hard drive is ready. Amber, blinking The device is rebuilding. Green, blinking The hard drive is reading or writing data. Amber, blinking with one-second interval Drive locate function activated. Power button/power status LED 4 Unit identification button/led Off There is no AC power to the appliance. Off The unit identification function is not in use. Amber The appliance is in standby power mode. Power is supplied only to the Baseboard Management Controller (BMC) and some motherboard functions. Blue The unit identification function is activated. Green The appliance is in main power mode. Power is supplied to all appliance components. 6

11 Overview Front Panel LEDs and Buttons 5 System status LED 6 Fan status LED Green The appliance is running in normal operating condition. Green All fans are operating properly. Green, blinking The appliance is performing system initialization and memory check. Amber, steady The appliance is in a degraded operational state. For example: Amber, steady One or more fan breached the critical threshold. Amber, blinking One or more fan breached the non-recoverable threshold. Power supply redundancy is lost. CPUs are mismatched. At least one CPU is faulty. At least one DIMM is faulty. At least one drive in a RAID configuration failed. Amber, blinking The appliance is in a critical fault state. For example: Boot failed. Fatal CPU and/or bus error is detected. The appliance is in an over-temperature condition. 7 Temperature status LED 8 Power supply status LED Green The appliance is operating at normal temperature. Green All power supplies are operating normally. Amber, steady One or more temperature sensors breached the critical threshold. Amber, steady One or more power supplies are in a degraded operational state. Amber, blinking One or more temperature sensors breached the non-recoverable threshold. Amber, blinking One or more power supplies are in a critical fault state. 7

12 Rear Panel Overview 9 Network link activity LED Off The Ethernet link is idle. Green One or more Ethernet LAN-on-motherboard (LOM) ports are link-active, but there is no activity. Green, blinking One or more Ethernet LOM ports are link-active, with activity. Rear Panel Tip Although the Cisco Integrated Management Controller (CIMC) is not supported on the Firepower Management Center 000, 500, or 4500, you can use Lights-Out Management (LOM) on the default management interface (eth0) on a Serial Over LAN (SOL) connection to remotely monitor or manage the Firepower Management Center systems without logging into the system management interface (labeled M interface in the descriptions below). For information about how to use LOM and SOL, see the Firepower Management Center Configuration Guide, Version 6.. The following figure shows the rear panel of the Firepower Management Center 000. Figure 6: Firepower Management Center 000 Rear Panel Table 6: Firepower Management Center 000 Rear Panel USB interfaces M interface USB ports used with the VGA port to directly connect a keyboard, monitor, and mouse to the Firepower Management Center 000. Use of this interface is not supported. It is physically labeled as M. 8

13 Overview Rear Panel Serial interface 4 Management interface (eth0) Use the console cable (RJ45 to DB9) to connect a computer to the Firepower Management Center 000. Gigabit Ethernet (0/00/000 Mbps) interface, RJ-45. It is physically labeled as. 5 Management interface (eth) 6 VGA interface Gigabit Ethernet (0/00/000 Mbps) interface, RJ-45 It is physically labeled as. Used with the USB ports to directly connect a keyboard, monitor, and mouse to the Firepower Management Center. 7 Unit identification button/led 8 Two 770W AC power supplies The following figure shows the rear panel of the Firepower Management Center 500 and Figure 7: Firepower Management Center 500 and 4500 Rear Panel Table 7: Firepower Management Center 500 and 4500 Rear Panel USB interface M interface USB ports used with the VGA port to directly connect a keyboard, monitor, and mouse to the Firepower Management Center 500 and Use of this interface is not supported. It is physically labeled as M. Serial interface 4 Management interface (eth0) Use the console cable (RJ45 to DB9) to connect a computer to the Firepower Management Center 500 and Gigabit Ethernet (0/00/000 Mbps) interface, RJ-45. It is physically labeled as. 5 Management interface (eth) 6 VGA interface Gigabit Ethernet (0/00/000 Mbps) interface, RJ-45. It is physically labeled as. Used with the USB ports to directly connect a keyboard, monitor, and mouse to the Firepower Management Center. 7 Unit identification button/led 8 Two 770W AC power supplies 9

14 Rear Panel LEDs and Buttons Overview 9 Management interface (eth) 0 Management interface (eth) 0 Gigabit Ethernet interface, enhanced small form-factor pluggable (SFP+) 0 Gigabit Ethernet interface, SFP+ Use only the SFP+ transceiver modules that are offered by the Cisco ordering tool. Rear Panel LEDs and Buttons The following figure shows the rear panel LEDs and buttons: Figure 8: Rear Panel LEDs and Buttons Management interface link speed LED Management interface link status LED Located to the left of each Management port. Located to the right of each Management port. Off Link speed is 0 Mbps. Off No link is present. Amber Link speed is 00 Mbps. Green Link is active. Green Link speed is Gbps. Green, blinking Traffic is present on the active link. 0

15 Overview Hardware Specifications Unit identification button/led 4 Power supply status LED Used to indicate which unit you are working on. Off No AC input (V main power off, V standby power off). Off The unit identification LED is not in use. Green, blinking V main power off; V standby power on. Blue The unit identification LED is activated. Green, solid V main power on; V standby power on. Amber, blinking detected but V main power on. Amber, solid Critical error detected; V main power off. 5 Power supply fault LED Off The power supply is operating normally. Amber, blinking An event warning threshold has been reached, but the power supply continues to operate. Amber, solid A critical fault threshold has been reached, causing the power supply to shut down (for example, a fan failure or an over-temperature condition). Hardware Specifications The following table lists the hardware specifications for the Cisco Firepower Management Center 000, 500, and Table 8: Firepower Management Center 000, 500, and 4500 Hardware Specifications Specification Physical Form factor RU Dimensions (H x Wx D).7 x 6.9 x 9.8 in. (4. x 4.9 x 75.9 cm) Maximum weight (fully loaded chassis). lb (6.6 kg) 4. lb (6.8 kg) 6.0 lb (7.0 kg)

16 Hardware Specifications Overview Specification Airflow Cooling Asset pullout card Front to rear (cold aisle to hot aisle) 6 fans for front-to-rear cooling Displays the serial number. Located next to the power button on the front panel Grounding hole Use is optional. The supported AC power supplies have internal grounding, so no additional chassis grounding is required. Located on the upper left of the back panel. Storage SAS hard disk drives Two 900GB (RAID,.5, 0K RPM, 4Kn, hot swappable) Four 600GB (RAID 5,.5", 0K RPM, 4Kn, hot swappable) N/A SSDs Six 800GB (RAID 6,.5, 0K RPM, 4Kn, hot swappable) Memory RDIMMs GB (Four 8GB DDR4-400-MHz) 64 GB (Eight 8GB DDR4-400-MHz) 8 GB (Eight 6GB DDR4-400-MHz) Ports Network management ports Two GB BASE-T Ethernet ports Two GB BASE-T Ethernet ports Two GB BASE-T Ethernet ports Two 0GB SFP+ ports Two 0GB SFP+ ports Console port One GB RJ45 serial port running RS- (RS-D TIA-56) Power System power Power consumption Redundant power supplies Two 770W AC power supplies 66 BTU/hr Yes (hot swappable and redundant as +) Environmental

17 Overview Power Supply Specification Temperature Humidity (RH) Altitude Sound power level Sound pressure level Operating: 4 to 95 F (5 to 5 C) Derate the maximum temperature by C per every 05 meters of altitude above sea level. Nonoperating: 40 to 49 F ( 40 to 65 C) when the appliance is stored or transported 0 to 90 percent noncondensing Operating: 0 to 0,000 ft Nonoperating: 0 to 40,000 ft when the appliance is stored or transported 5.4 Bels (Measure A-weighted per ISO7779 LwAd) Operation at 7 F ( C) 7 Bels (Measure A-weighted per ISO7779 LwAd) Operation at 7 F ( C) Power Supply The following table lists the specifications for each 770W AC power supply (Cisco part number FMC-PWR-AC-770W) used in the Firepower Management Center 000, 500, and Table 9: Power Supply Specifications Description Power consumption AC input voltage range AC input frequency Maximum AC input current Maximum input volt amperes Maximum output power for each power supply Maximum inrush current Maximum hold-up time Specification BTU/hr Nominal range: 00 0 VAC, VAC Range: 90 VAC, VAC Nominal range: Hz Range: 47 6 Hz 9.5 A peak at 00 VAC 4.5 A peak at 08 VAC 950 VA at 00 VAC 770 W 5 A (subcycle duration) ms at 770W

18 Spare PIDs Overview Description Power supply output voltage Power supply standby voltage Efficiency rating Form factor Input connector Specification VDC VDC Climate Savers Platinum Efficiency (80Plus Platinum certified) RSP IEC0 C4 Spare PIDs The following table lists all of the Product ID (PIDs) associated with the spares for the Firepower Management Center 000, 500, and Table 0: Spare PID for Firepower Management Center 000, 500, and 4500 PID FMC-PWR-AC-770W= FMCK-HDD-900G= FMCK-HDD-600G= FMC4K-SSD-800G= UCSC-RAILB-M4= Description Cisco AC Power Supply 770W for FMC Cisco FMC 900GB GGB 0K.5" SAS Cisco FMC 600GB GGB 0K.5" SAS Cisco 800GB Gbps SAS SSD for FMC Ball bearing rail kit for C0 & C40 M4 & M5 rack servers 4

19 CHAPTER Prepare for Installation Installation s, page 5 Installation Guidelines, page 7 Safety Recommendations, page 8 Maintain Safety with Electricity, page 9 Prevent ESD Damage, page 9 Site Environment, page 0 Power Supply Considerations, page 0 Equipment Rack Configuration Considerations, page 0 Installation s Be sure to read the Regulatory and Compliance Safety Information document before installing the Firepower Management Center security appliance. Take note of the following warnings: Statement 07 Definition IMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. SAVE THESE INSTRUCTIONS 5

20 Installation s Prepare for Installation Statement 005 Circuit Breaker This product relies on the building s installation for short-circuit (overcurrent) protection. Ensure that the protective device is rated not greater than: USA: 0, 5 A (EU: 50V, 6A) Statement 004 Installation Instructions Read the installation instructions before connecting the system to the power source. Statement Power Supply Disconnection Before working on a chassis or working near power supplies, unplug the power cord on AC units; disconnect the power at the circuit breaker on DC units. Statement 4 Jewelry Removal Before working on equipment that is connected to power lines, remove jewelry (including rings, necklaces, and watches). Metal objects will heat up when connected to power and ground and can cause serious burns or weld the metal object to the terminals. Statement 94 Wrist Strap During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly touch the backplane with your hand or any metal tool, or you could shock yourself. Statement 045 Short-circuit Protection This product requires short-circuit (overcurrent) protection to be provided as part of the building installation. Install only in accordance with national and local wiring regulations. Statement 0 SELV Circuit To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network voltage (TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some LAN and WAN ports both use RJ-45 connectors. Use caution when connecting cables. Statement 04 Ground Conductor This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. 6

21 Prepare for Installation Installation Guidelines Statement 040 Product Disposal Ultimate disposal of this product should be handled according to all national laws and regulations. Statement 074 Comply with Local and National Electrical Codes Installation of the equipment must comply with local and national electrical codes. Statement 9 TN Power The device is designed to work with TN power systems. Installation Guidelines Statement 047 Overheating Prevention To prevent the system from overheating, do not operate it in an area that exceeds the maximum recommended ambient temperature of : 4 to 95 F (5 to 5 C) Statement 09 Main Disconnecting Device The plug-socket combination must be accessible at all times, because it serves as the main disconnecting device. Statement 005 Circuit Breaker This product relies on the building s installation for short-circuit (overcurrent) protection. Ensure that the protective device is rated not greater than: USA: 0, 5 A (EU: 50V, 6A) Statement 074 Comply with Local and National Electrical Codes Installation of the equipment must comply with local and national electrical codes. Statement 7 Power Cable and AC Adapter When installing the product, please use the provided or designated connection cables/power cables/ac adaptors/batteries. Using any other cables/adaptors could cause a malfunction or a fire. Electrical Appliance and Material Safety Law prohibits the use of UL-certified cables (that have the "UL" or "CSA" shown on the cord), not regulated with the subject law by showing "PSE" on the cord, for any other electrical devices than products designated by CISCO. 7

22 Safety Recommendations Prepare for Installation Statement 07 No User-Serviceable Parts No user-serviceable parts inside. Do not open. Caution To ensure proper airflow it is necessary to rack your security appliances using rail kits. Physically placing the units on top of one another or stacking without the use of the rail kits blocks the air vents on top of the appliances, which could result in overheating, higher fan speeds, and higher power consumption. We recommend that you mount your appliances on rail kits when you are installing them into the rack because these rails provide the minimal spacing required between the appliances. No additional spacing between the appliances is required when you mount the units using rail kits. Caution Avoid UPS types that use ferroresonant technology. These UPS types can become unstable with systems such as the Cisco security appliances, which can have substantial current draw fluctuations from fluctuating data traffic patterns. When you are installing an appliance, use the following guidelines: Ensure that there is adequate space around the appliance to allow for servicing the appliance and for adequate airflow. The airflow in the appliance is from front to back. Ensure that the air-conditioning can keep the security appliance at a temperature of 4 to 95 F (5 to 5 C). Ensure that the cabinet or rack meets the rack requirements. Ensure that the site power meets the power requirements listed in Power Supply, on page. If available, you can use an uninterruptible power supply (UPS) to protect against power failures. Safety Recommendations Use the information in the following sections to help ensure your safety and to protect the chassis. This information may not address all potentially hazardous situations in your working environment, so be alert and exercise good judgment at all times. Observe these safety guidelines: Keep the area clear and dust free before, during, and after installation. Keep tools away from walkways, where you and others might trip over them. Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains that could get caught in the chassis. Wear safety glasses if you are working under any conditions that might be hazardous to your eyes. Do not perform any action that creates a potential hazard to people or makes the equipment unsafe. Never attempt to lift an object that is too heavy for one person. 8

23 Prepare for Installation Maintain Safety with Electricity Maintain Safety with Electricity Before working on a chassis, be sure the power cord is unplugged. Be sure to read the Regulatory and Compliance Safety Information document before installing the security appliance. Follow these guidelines when working on equipment powered by electricity: Before beginning procedures that require access to the interior of the chassis, locate the emergency power-off switch for the room in which you are working. Then, if an electrical accident occurs, you can act quickly to turn off the power. Do not work alone if potentially hazardous conditions exist anywhere in your work space. Never assume that power is disconnected; always check. Look carefully for possible hazards in your work area, such as moist floors, ungrounded power extension cables, frayed power cords, and missing safety grounds. If an electrical accident occurs: Use caution; do not become a victim yourself. Disconnect power from the system. If possible, send another person to get medical aid. Otherwise, assess the condition of the victim, and then call for help. Determine whether the person needs rescue breathing or external cardiac compressions; then take appropriate action. Use the chassis within its marked electrical ratings and product usage instructions. The Firepower Management Center security appliances are equipped with an AC-input power supply, which is shipped with a three-wire electrical cord with a grounding-type plug that fits into a grounding-type power outlet only. Do not circumvent this safety feature. Equipment grounding should comply with local and national electrical codes. Prevent ESD Damage ESD occurs when electronic components are improperly handled, and it can damage equipment and impair electrical circuitry, which can result in intermittent or complete failure of your equipment. Always follow ESD-prevention procedures when removing and replacing components. Ensure that the chassis is electrically connected to an earth ground. Wear an ESD-preventive wrist strap, ensuring that it makes good skin contact. Connect the grounding clip to an unpainted surface of the chassis frame to safely ground ESD voltages. To properly guard against ESD damage and shocks, the wrist strap and cord must operate effectively. If no wrist strap is available, ground yourself by touching the metal part of the chassis. For safety, periodically check the resistance value of the antistatic strap, which should be between one and 0 megohms. 9

24 Site Environment Prepare for Installation Site Environment When planning the site layout and equipment locations, consider the information in the next section to help avoid equipment failures and reduce the possibility of environmentally caused shutdowns. If you are currently experiencing shutdowns or unusually high error rates with your existing equipment, these considerations may help you isolate the cause of failures and prevent future problems. Power Supply Considerations See Power Supply, on page for more detailed information about the power supply in the Firepower Management Center appliance. When installing the chassis, consider the following: Check the power at the site before installing the chassis to ensure that it is clean (free of spikes and noise). Install a power conditioner, if necessary, to ensure proper voltages and power levels in the appliance-input voltage. Install proper grounding for the site to avoid damage from lightning and power surges. The chassis does not have a user-selectable operating range. Refer to the label on the chassis for the correct appliance input-power requirement. Several styles of AC-input power supply cords are available for the appliance; make sure that you have the correct style for your site. If you are using dual redundant (+) power supplies, we recommend that you use independent electrical circuits for each power supply. Install an uninterruptible power source for your site, if possible. Equipment Rack Configuration Considerations Consider the following when planning an equipment-rack configuration: If you are mounting a chassis in an open rack, make sure that the rack frame does not block the intake or exhaust ports. Be sure enclosed racks have adequate ventilation. Make sure that the rack is not overly congested as each chassis generates heat. An enclosed rack should have louvered sides and a fan to provide cooling air. In an enclosed rack with a ventilation fan in the top, heat generated by equipment near the bottom of the rack can be drawn upward and into the intake ports of the equipment above it in the rack. Ensure that you provide adequate ventilation for equipment at the bottom of the rack. Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. 0

25 CHAPTER Installation Caution Before you install, operate, or service an appliance, review the Regulatory and Compliance Safety Information. for Cisco Firepower Management Center 000, 500, and 4500 for important safety information. Statement 07 Definition IMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. SAVE THESE INSTRUCTIONS Unpack and Inspect the Chassis, page Rack-Mount the Chassis, page Connect Cables, Turn on Power, and Verify Connectivity, page 5 Ground the Chassis, page 8 Unpack and Inspect the Chassis Tip Note Keep the shipping container in case the appliance requires shipping in the future. The chassis is thoroughly inspected before shipment. If any damage occurred during transportation or any items are missing, contact your customer service representative immediately.

26 Rack-Mount the Chassis Installation See Package Contents, on page for a list of what shipped with the appliance. Step Step Step Remove the chassis from its cardboard container and save all packaging material. Compare the shipment to the equipment list provided by your customer service representative. Verify that you have all items. Check for damage and report any discrepancies or damage to your customer service representative. Have the following information ready: Invoice number of shipper (see the packing slip) Model and serial number of the damaged unit Description of damage Effect of damage on the installation Rack-Mount the Chassis You can install the appliance in a rack using the Cisco rack kit. The rack must be of the following type: A standard 9-in. (48.-cm) wide, 4-post EIA rack with mounting posts that conform to English universal hole spacing per section of ANSI/EIA-0-D-99. The rack post holes can be square 0.8-in. (9.6 mm), round 0.8-in. (7. mm), #-4 UNC, or #0- UNC when you use the supplied slide rails. The minimum vertical rack space per appliance must be RU, equal to.75 in. (44.45 mm). The slide rails for the appliance have an adjustment range of 4 to 6 in. (60 to 94 mm). Note The slide rails supplied by Cisco Systems for the appliance do not require tools for installation if you install them in a rack that has square 0.8-in. (9.6 mm), round 0.8-in. (7. mm), or #-4 UNC threaded holes.

27 Installation Rack-Mount the Chassis Statement 006 Chassis for Rack-Mounting and Servicing To prevent bodily injury when mounting or servicing this unit in a rack, you must take special precautions to ensure that the system remains stable. The following guidelines are provided to ensure your safety: This unit should be mounted at the bottom of the rack if it is the only unit in the rack. When mounting this unit in a partially filled rack, load the rack from the bottom to the top with the heaviest component at the bottom of the rack. If the rack is provided with stabilizing devices, install the stabilizers before mounting or servicing the unit in the rack. Step Attach the inner rails to the sides of the appliance: a) Align an inner rail with side of the appliance so that the keyed slots in the rail align with the pegs on the side of the appliance. b) Set the keyed slots over the pegs, and then slide the rail toward the front to lock it in place on the pegs. The front slot has a metal clip that locks over the front peg. c) Install the second inner rail to the opposite side of the appliance. Figure 9: Attach the Inner Rail to Side of Server Front of appliance Locking clip on inner rail Step Open the front securing plate on both slide-rail assemblies. The front end of the slide-rail assembly has a spring-loaded securing plate that must be open before you can insert the mounting pegs into the rack-post holes.

28 Rack-Mount the Chassis Installation On the outside of the assembly, push the green arrow button toward the rear to open the securing plate. Figure 0: Front Securing Mechanism, Inside of Front End Front mounting pegs Rack post Securing plate shown pulled back to open position Step Step 4 Install the slide rails into the rack: a) Align slide-rail assembly front end with the front rack-post holes that you want to use. The slide rail front end wraps around the outside of the rack post and the mounting pegs enter the rack-post holes from the outside-front. Note The rack post must be between the mounting pegs and the open securing plate. b) Push the mounting pegs into the rack-post holes from the outside-front. c) Press the securing plate release button, marked PUSH. The spring-loaded securing plate closes to lock the pegs in place. d) Attach the second slide-rail assembly to the opposite side of the rack. Make sure that the slide-rail assemblies are at the same height with each other and are level front-to-back. e) Pull the inner slide rails on each assembly out toward the rack front until they hit the internal stops and lock in place. Insert the appliance into the slide rails: a) Align the rear of the inner rails that are attached to the appliance sides with the front ends of the empty slide rails on the rack. b) Push the inner rails into the slide rails on the rack until they stop at the internal stops. 4

29 Installation Connect Cables, Turn on Power, and Verify Connectivity c) Slide the release clip toward the rear on both inner rails, and then continue pushing the appliance into the rack until its front slam latches engage with the rack posts Figure : Inner Rail Release Clip Inner rail release clip Inner rail attached to appliance and inserted into outer rail Outer rail attached to rack post Step 5 (Optional) Secure the appliance in the rack more permanently by using the screws that are provided with the slide rails. Perform this step if you plan to move the rack with appliances installed. With the appliance fully pushed into the slide rails, open a hinged slam latch lever on the front of the appliance and insert the screw through the hole that is under the lever. The screw threads into the static part of the rail on the rack post and prevents the appliance from being pulled out. Repeat for the opposite slam latch. Connect Cables, Turn on Power, and Verify Connectivity Take note of the following warnings. Statement 009 Laser Radiation Laser radiation is present when the system is open. Statement 04 Laser Radiation Laser radiation is present when the system is open and interlocks bypassed. Statement 05 Laser Radiation Invisible laser radiation may be emitted from disconnected fibers or connectors. Do not stare into beams or view directly with optical instruments. 5

30 Connect Cables, Turn on Power, and Verify Connectivity Installation Statement 05 Class M Laser Radiation Class M laser radiation when open. Do not view directly with optical instruments. Statement 055 Class and Class M Laser Class I (CDRH) and Class M (IEC) laser products. Statement 057 Hazardous Radiation Exposure Use of controls, adjustments, or performing procedures other than those specified may result in hazardous radiation exposure. Note This procedure references the rear panel ports of the Firepower Management Center 500 and The Firepower Management Center 000 is the same except that it does not have the two 0G SFP+ ports above the Ethernet ports. After rack mounting the Firepower Management Center chassis, follow these steps to connect cables, turn on power, and verify connectivity. Note AC power supplies have internal grounding and so no additional chassis grounding is required when the supported AC power cords are used. For more information about supported power cords, see Supported Power Cords and Plugs, on page 5. Tip Although CIMC is not supported on the Firepower Management Center 000, 500, or 4500, you can use LOM on the default management interface (eth0) on a SOL connection to remotely monitor or manage the Firepower Management Center systems without logging into the system management interface (labeled M interface in the descriptions below). For information about how to use LOM and SOL, see the Firepower Management Center Configuration Guide, Version 6.. Figure : Cable Connections 6

31 Installation Connect Cables, Turn on Power, and Verify Connectivity Management interface (eth) Management interface (eth) 0 Gigabit Ethernet interface, SFP+ 0 Gigabit Ethernet interface, SFP+ Use only supported SFPs. Use only supported SFPs. Serial Interface 4 Management interface (eth0) Use the console cable (RJ45 to DB9) to connect a computer to the appliance. Gigabit Ethernet (0/00/000 Mbps) interface, RJ-45. It is physically labeled as. 5 Management interface (eth) Gigabit Ethernet (0/00/000 Mbps) interface, RJ-45. It is physically labeled as. Step Step Step Step 4 Step 5 Step 6 Step 7 Console port Use a serial console cable to connect a computer or terminal server to the RJ-45 serial console port (baud rate is 9600). You can use the CLI on this port to initially set up the appliance. After initial setup you can connect to the Management interface using SSH, Telnet, or HTTPs to continue configuring the appliance. SFP+ management interfaces If your model provides 0-Gigibit SFP+ interfaces, install any supported SFP+ cables and transceiver modules you need in the appropriate network interfaces. Each Cisco-certified SFP+ transceiver module has an internal serial EEPROM that is encoded with security information. This encoding allows us to identify and validate that the SFP module meets the requirements for the Firepower Management Center. Caution Only the SFP+ transceiver modules offered by the Cisco Commerce Workspace (CCW) ordering tool are compatible with the 0-Gigibit interfaces (FSK-NIC-SFP/FS4K-NIC-SFP). Gigabit Ethernet management interfaces Use -Gigabit Ethernet cables to connect to these management interfaces. (Optional) Chassis grounding AC power supplies have internal grounding and so no additional chassis grounding is required when the supported AC power cords are used. However, you can optionally provide additional grounding of the chassis to the earth ground of the rack, as described in Ground the Chassis, on page 8. Power Use one of the supported power cords to connect the power supplies of the appliance to your power source. For more information about supported power cords, see Supported Power Cords and Plugs, on page 5. Press the Power button on the front of the appliance, and verify that the power status LED is on. See the Cisco Firepower Management Center Getting Started Guide for Models 000, 500, and 4500 for further configuration information. 7

32 Ground the Chassis Installation Ground the Chassis Statement 04 Ground Conductor This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. AC power supplies have internal grounding and so no additional chassis grounding is required when the supported AC power cords are used. However, you can optionally provide additional grounding of the chassis to the earth ground of the rack using your grounding lug, grounding wire, and the screw hole supplied on the chassis rear panel. The following figure shows the location of the grounding screw hole on the chassis. Figure : Chassis Grounding Hole Chassis grounding hole The grounding point on the chassis is sized for a single #0- screw. A lock washer is required to secure the lug to the chassis. You must provide your own screw with lock washer, grounding lug, and grounding wire. The grounding lug must be a single-hole lug that fits a #0- screw and 4 AWG wire. The grounding cable that you provide must be 4 AWG ( mm), minimum 60 C wire, or as permitted by the local code. 8

33 CHAPTER 4 Maintenance and Upgrades Graceful Shut Down, page 9 Replace Components Guidelines, page 0 Remove and Replace the Power Supply, page 0 Remove and Replace a Drive, page Graceful Shut Down The appliance can run in two power modes: Main power mode Power is supplied to all appliance components and the operating system. Standby power mode Power is supplied only to the service processor and the cooling fans. It is safe to power off the appliance from this mode. Before You Begin You can gracefully shut down the appliance by using the shutdown command or the Power button on the appliance front panel.: Step Check the color of the Power Status LED (see Front Panel, on page 4). Amber The appliance is already in standby mode and can be safely powered off. Go to Step. Green The appliance is in main power mode and must be shut down before it can be safely powered off. Go to Step. Step Use one the following methods to shut down the appliance. If possible, invoke a graceful shutdown. Otherwise invoke a hard shutdown: Caution To avoid data loss or damage to your operating system, you should always invoke a graceful shutdown of the operating system. Graceful shutdown using the CLI Enter the shutdown command. The operating system performs a graceful shutdown and the appliance goes to standby mode, which is indicated by an amber Power Status LED. 9

34 Replace Components Guidelines Maintenance and Upgrades Graceful shutdown using the front panel Press and release the Power button. The operating system performs a graceful shutdown and the appliance goes to standby mode, which is indicated by an amber Power Status LED. Emergency shutdown Press and hold the Power button for four seconds to force the main power off and immediately enter standby mode. Step Disconnect the power cords from the power supplies in your appliance to completely power off the appliance. Replace Components Guidelines Statement 09 Blank Faceplates and Cover Panels Blank faceplates and cover panels serve three important functions: they prevent exposure to hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place. Caution When handling appliance components, wear an ESD strap to avoid damage. Tip You can press the Unit Identification button on the front panel or rear panel to turn on a flashing Unit Identification LED on the front and rear panels of the appliance. This button allows you to locate the specific appliance that you are servicing when you go to the opposite side of the rack. For locations of these LEDs, see Front Panel, on page 4. Remove and Replace the Power Supply The power supplies included with your appliance are redundant and hot-swappable. One is the active power supply and the other is the standby power supply (+). This appliance also supports cold redundancy. Depending on the power being drawn by the appliance, power supply might actively provide all power to the system while the remaining power supply is put into a standby state. For example, if the power consumption can be satisfied by power supply, then power supply is put into a standby state. Statement 08 Supply Circuit Take care when connecting units to the supply circuit so that wiring is not overloaded. 0

35 Maintenance and Upgrades Remove and Replace the Power Supply Statement 09 Main Disconnecting Device The plug-socket combination must be accessible at all times, because it serves as the main disconnecting device. Statement 04 Ground Conductor This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Statement 00 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 00 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 07 No User-Serviceable Parts No user-serviceable parts inside. Do not open. Statement 074 Comply with Local and National Electrical Codes Installation of the equipment must comply with local and national electrical codes. Caution When you replace power supplies, do not mix power supply types in the appliance. Both power supplies must be the same wattage and Cisco PID. For example, you cannot mix SAS drives and SSDs in appliance, or install SAS drives in the 4500, or SSDs in the 000 and 500. Step Remove the power supply that you are replacing: a) Remove the power cord from the power supply. b) Grasp the power supply handle while pinching the green release lever towards the handle (see the following figure).

36 Remove and Replace a Drive Maintenance and Upgrades c) Pull the power supply out of the bay. Figure 4: Removing and Replacing Power Supplies Power supply handle Power supply release lever Step Install a new power supply: a) Grasp the power supply handle and insert the new power supply into the empty bay. b) Push the power supply into the bay until the release lever locks. c) Connect the power cord to the new power supply. d) If you shut down the appliance, press the Power button to return the appliance to main power mode. Remove and Replace a Drive Tip We recommend that you shut down or power off the appliance to replace the SSD or SAS drives even though they are hot swappable. If you do not turn power off while replacing the drive, you should restart the appliance afterward. Note You cannot add more drives to your Firepower Management Center. You can only replace the drives in the slots that are supported for your model. Statement 08 Supply Circuit Take care when connecting units to the supply circuit so that wiring is not overloaded.

37 Maintenance and Upgrades Remove and Replace a Drive Statement 09 Main Disconnecting Device The plug-socket combination must be accessible at all times, because it serves as the main disconnecting device. Statement 04 Ground Conductor This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Statement 00 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 07 No User-Serviceable Parts No user-serviceable parts inside. Do not open. Statement 074 Comply with Local and National Electrical Codes Installation of the equipment must comply with local and national electrical codes. Step Remove the drive that you are replacing: a) Press the release button on the face of the drive tray. See the following figure.

38 Remove and Replace a Drive Maintenance and Upgrades b) Grasp and open the ejector lever and then pull the drive tray out of the slot. Figure 5: Replacing Hard Drives Release button Ejector lever Drive tray securing screws (4) Step Install a new drive: Note Replacement drives are already installed in a tray. a) Make sure that the new drive is safely secured by the 4 drive-tray screws. b) With the ejector lever on the drive tray open, insert the drive tray into the empty drive bay. c) Push the tray into the slot until it touches the backplane, and then close the ejector lever to lock the drive in place. 4

39 CHAPTER 5 Power Cord Specifications Supported Power Cords and Plugs, page 5 AC Power Cord Illustrations, page 7 Supported Power Cords and Plugs Each power supply has a separate power cord. Standard power cords or jumper power cords are available for connection to the appliance. The jumper power cords, for use in racks, are available as an optional alternative to the standard power cords. Note Only the approved power cords or jumper power cords provided with the appliance are supported. The following power cords are supported. Argentina Figure 6: CAB-50V-0A-AR (Argentina), AC power cord, 0A, 50V, IRAM 07, IEC 600-C, CAB-50V-0A-AR Australia Figure 7: CAB-9K0A-AU (Australia), AC power cord, 0A, 50V, A.S. -000, IEC 600-C5, CAB-9K0A-AU Brazil Figure 8: PWR-50V-0A-BZ (Brazil), AC power cord, 0A, 50V, NBR 46, IEC 600-C, CAB-50V-0A-BZ China Figure 9: CAB-50V-0A-CH (China), AC power cord, 0A, 50V, GB , IEC 600-C, CAB-50V-0A-CH Europe Figure 0: CAB-9K0A-EU (Europe), AC power cord, 0A, 50V, CEE 7 VII, IEC 600-C5, CAB-9K0A-EU 5