Cisco Firepower 1100 Series Hardware Installation Guide
First Published: 2019-06-13
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown forillustrative purposes only. Any use of actual IP addresses or phone numbers inillustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. Toview a list of Cisco trademarks, go to this URL: www.cisco.com
go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
other company. (1721R)
©
2019 Cisco Systems, Inc. All rights reserved.
CONTENTS
CHAPTER 1
CHAPTER 2
Overview 1
Features 1
Package Contents 4
Serial Number Location 5
Front Panel 5
Rear Panel 6
Rear Panel LEDs 7
Hardware Specifications 8
Product ID Numbers 9
Installation Preparation 11
Installation Warnings 11
Safety Recommendations 13
Maintain Safety with Electricity 14
Prevent ESD Damage 14
Site Environment 15
CHAPTER 3
CHAPTER 4
Site Considerations 15
Power Supply Considerations 15
Rack Configuration Considerations 16
Mount the Chassis 17
Unpack and Inspect the Chassis 17
Rack-Mount the Chassis 17
Connect to the Console Port 21
Connect to the Console Port with Microsoft Windows 21
Cisco Firepower 1100 Series Hardware Installation Guide
iii
Contents
Connect to the Console Port with Mac OS X 22
Connect to the Console Port with Linux 23
CHAPTER 5
Maintenance and Upgrade 25
Replace the SSD 25
Cisco Firepower 1100 Series Hardware Installation Guide
iv
Features
CHAPTER 1
Overview
• Features, on page 1
• Package Contents, on page 4
• Serial Number Location, on page 5
• Front Panel, on page 5
• Rear Panel, on page 6
• Rear Panel LEDs, on page 7
• Hardware Specifications, on page 8
• Product ID Numbers, on page 9
The Cisco Firepower 1100 series security appliances are a standalone modular security services platform.
They are capable of running multiple security services simultaneously and so are targeted at the data center
as a multiservice platform. See Product ID Numbers, on page 9 for a list of the product IDs (PIDs) associated
with the Firepower 1100 series.
The Firepower 1100 series support Cisco Firepower software version 6.4 and later. See the Cisco Firepower
Compatibility Guide, which provides Cisco Firepower software and hardware compatibility, including operating
system and hosting environment requirements, for each supported Firepower version.
The following figure shows the Cisco Firepower 1100 Series.
Figure 1: Cisco Firepower 1100 Series
The following table lists the features for the Firepower 1100 series.
Cisco Firepower 1100 Series Hardware Installation Guide
1
Features
Overview
Table 1: Firepower 1120, 1140, and 1150 Features
11401120Feature
1 RUForm factor
Mounting
Processor
L2 switch
Network ports
Rack mount
Mount rails included (4-post EIA-310-D rack)
Front to back (cold aisle to hot aisle)Airflow
One 12-core Intel Atom C3000
Series CPU
2.0 GHz with QuickAssist
One 16-core Intel Atom C3000
Series CPU
2.0 GHz with QAT
Technology (QAT)
16-GB DDR4 DRAMMemory
Marvel 98DX3236
Supported in a future software release.
One Gigabit Ethernet RJ-45 10/100/1000 BaseTManagement port
One RJ-45 or one USB Mini BConsole ports
One USB 3.0 Type AUSB port
Eight Gigabit Ethernet RJ-45 10/100/1000 BaseT
Each RJ-45 (8P8C) copper port supports auto MDI/X as well as
auto-negotiation for interface speed, duplex, and other negotiated
parameters, and are MDI/MDIX-compliant.
Port numbering is left to right, top to bottom; ports are named Ethernet
1/1 through 1/8.
Four fixed 1-Gb SFP portsSFP ports
Supported SFPs
GLC-SX-MMD
GLC-LH-SMD
GLC-EX-SMD
GLC-ZX-SMD
GLC-T/TE
The SPFs are hot-swappable.
Power switch
Yes
On rear panel
Note
To shut down the Firepower 1100 series gracefully, see the
"Power Off the Device" section for FDM and FMC in the
Cisco Firepower 1100 Series Getting Started Guide.
Cisco Firepower 1100 Series Hardware Installation Guide
2
Overview
Features
11401120Feature
AC power supply
One fixed AC power supply
The power supply is internal; there is no user access.
The power supply is not field-replaceable; you must return the chassis
to Cisco for power supply replacement.
NoRedundant power
Fan
One fixed fan
The fan is internal; there is no user access.
The fan is not field-replaceable; you must return the chassis to Cisco
for fan replacement.
Storage
One SSD slot
200-GB 2.5-in. SATA
The SSD is field-replaceable.
Console Ports
The Firepower 1100 series has two external console ports, a standard RJ-45 port and a USB Mini B serial
port. Only one console port can be active at a time. When a cable is plugged into the USB console port,
the RJ-45 port becomes inactive. Conversely, when the USB cable is removed from the USB port, the
RJ-45 port becomes active. The console ports do not have any hardware flow control. You can use the
CLI to configure the chassis through either serial console port by using a terminal server or a terminal
emulation program on a computer.
• RJ-45 (8P8C) port—Supports RS-232 signaling to an internal UART controller. The RJ-45 console
port does not support a remote dial-in modem. You can use a standard management cable (Cisco
part number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.
• USB Mini B port—Lets you connect to a USB port on an external computer. For Linux and Macintosh
systems, no special driver is required. For Windows systems, you must download and install a USB
driver (available on software.cisco.com). You can plug and unplug the USB cable from the console
port without affecting Windows HyperTerminal operations. We recommend shielded USB cables
with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800, 9600,
19200, 38400, 57600, and 115200 bps.
Note
For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC
connected to the console port before using the USB console port. See Connect to the Console Port with
Microsoft Windows for information on installing the driver.
External Flash Storage
The chassis contains a standard USB Type A port that you can use to attach an external device. The USB
port can provide output power of 5 volts, up to a maximum of 1 A (5 USB power units).
• External USB drive (optional)—You can use the external USB Type A port to attach a data-storage
device. The external USB drive identifier is disk1. When the chassis is powered on, a connected
USB drive is mounted as disk1 and is available for you to use. Additionally, the file-system
Cisco Firepower 1100 Series Hardware Installation Guide
3
Package Contents
commands that are available to disk0 are also available to disk1, including copy, format, delete,
mkdir, pwd, cd, and so on.
• FAT-32 File System—The Firepower 1100 series only supports FAT-32-formatted file systems for
the external USB drive. If you insert an external USB drive that is not in FAT-32 format, the system
mounting process fails, and you receive an error message. You can enter the command format
disk1: to format the partition to FAT-32 and mount the partition to disk1 again; however, data might
be lost.
Package Contents
The following figure shows the package contents for the Firepower 1100 series. Note that the contents are
subject to change, and your exact contents might contain additional or fewer items.
Figure 2: Firepower 1100 Series Package Contents
Overview
USB console cable (Type A to Type B)2Chassis1
4Power cord3
5
mounting
Cisco Firepower 1100 Series Hardware Installation Guide
4
Four 10-32-in. Phillips screws for rack
mounting
Four M6 Phillip screws for rack mounting6Four 12-14 Phillips screws for rack
Overview
Serial Number Location
Serial Number Location
You can view the serial number and additional model information on the compliance label located on the
bottom of the chassis. The following figure shows a sample compliance label.
Figure 3: Compliance Label on the Firepower Chassis
8Four M4 Phillips screws for rack mounting7
Useful Links Cisco Firepower 1120 and
1140
The steps in the Useful Links document
send you to the documentation you need
to install, set up, and configure your 1120
and 1140.
Start Here Cisco Firepower 1120 and 1140
for Firepower Threat Defense
This document tells how to cable and set
up the FTD using Firepower Device
Manager (FDM) (a simplified, single
device manager included on the device).
Front Panel
The following figure shows the front panel of the Firepower 1100 series. Note that there are no connectors
or LEDs on the front panel.
Cisco Firepower 1100 Series Hardware Installation Guide
5
Rear Panel
Rear Panel
Overview
Figure 4: Firepower 1100 Series Front Panel
The following figure shows the rear panel of the Firepower 1100 series. See Rear Panel LEDs, on page 7
for a description of the LEDs.
Figure 5: Firepower 1100 Series Rear Panel
1
Power cord socket2Power switch
Standard rocker-type power on/off switch.
3
4Management port
A Gigabit Ethernet interface restricted to
network management access only. Connect
SFP ports
Additional 1-Gb data ports numbered 9
through 12
with an RJ-45 cable.
5
6USB Type A port
Allows attachment of an external device
such as mass storage.
7
8RJ-45 (8P8C) console port
Provides management access through an
external system.
USB Mini B console port
Provides management access through an
external system.
Network data ports
Eight Gigabit Ethernet RJ-45 (8P8C)
network I/O interfaces. The ports are
numbered (left to right, top to bottom) 1,
2, 3, 4, 5, 6, 7, 8. Each port includes a pair
of LEDs, one each for connection status
and link status. The ports are named and
numbered Gigabit Ethernet 1/1 through
Gigabit Ethernet 1/8.
Cisco Firepower 1100 Series Hardware Installation Guide
6
Overview
Rear Panel LEDs
9
11
Rear Panel LEDs
The following figure shows the LEDs on the rear panel of the Firepower 1100 series and describes their states.
Figure 6: Firepower 1100 Series Rear Panel LEDs
The locations and meanings of the status
LEDs are described in Rear Panel LEDs,
on page 7.
Status light for the installed SSD. See Rear
Panel LEDs, on page 7 for more
information.
10Status LEDs
12SSD LED
Reset button
A small recessed button that if pressed for
longer than three seconds resets the chassis
to its default state following the next
reboot. Configuration variables are reset
to factory default. However, the flash is
not erased, and no files are removed.
SSD bay
You can replace the SSD if it fails. See
Replace the SSD , on page 25 for more
information.
1
Status of the network ports.
Link status (L):
• Off—No link, or port is not in use.
• Green—Link established.
• Green, flashing—Link activity.
Cisco Firepower 1100 Series Hardware Installation Guide
2Network
Network
Status of the network ports.
Connection-speed status (S):
• Green, flashing—One flash every three
seconds = 10 Mbps.
• Green, flashing—Two rapid flashes =
100 Mbps.
• Green, flashing—Three rapid flashes =
1000 Mbps.
7
Hardware Specifications
Overview
3
Status of the SFP transceiver.
Link status (L):
• Off—No SFP.
• Amber—SFP present, but no link.
• Green, flashing—Link established and
transmitting.
5
System operating status:
• Green—Normal system function.
• Amber—Critical alarm indicating one
or more of the following:
• Major failure of a hardware or
software component.
• Over-temperature condition.
• Power voltage outside the tolerance
range.
4SFP
6Status
Power
Power supply status:
• Off —Power supply off.
• Green—Power supply on.
Active
Status of the failover pair:
• Off— Failover is not operational.
• Green—Failover pair operating
normally. The LED is green always
unless the chassis in a high availability
pair.
• Amber—When the chassis is in a high
availability pair, the LED is amber for
the standby unit.
7
SSD
Status of the SSD:
• Off— No SSD present or no activity on
the SSD.
• Green—Activity on the SSD.
Note
See Replace the SSD , on page
25 for the procedure for replacing
a failed SSD.
Hardware Specifications
The following table contains hardware specifications for the Firepower 1100 series.
Table 2: Firepower 1100 Series Hardware Specifications
11401120Specification
17.2 in. x 10.58 in. x 1.72 in. (43.69 x 26.87 x 4.37 cm)Dimensions (H x W x D)
8 lb (3.63 kg)Weight
Cisco Firepower 1100 Series Hardware Installation Guide
8
Overview
Product ID Numbers
11401120Specification
Temperature
Humidity
Altitude
Acoustic noise
Product ID Numbers
The following table lists the field-replaceable PIDs associated with the Firepower 1100 series. The spare
components are ones that you can order and replace yourself. If any internal components fail, you must RMA
the entire chassis. See the show inventory command in the Cisco Firepower Threat Defense Command
Reference or the Cisco ASA Series Command Reference to display a list of the PIDs for your Firepower 1100
series.
Table 3: Firepower 1120 and 1140 PIDs
Operating: 32 to 104⁰F (0 to 40⁰C)
Nonoperating: -13 to 158°F (-25 to 70°C)
Operating: 90%
Nonoperating: 10 to 90%
Operating: 0 to 3,000 (9843 m)
Nonoperating: 0 to 15,000 ft (4570 m)
56.8 dBa (sound pressure) at
maximum fan speed at 40C
31.7 dBa at room temperature
56.8 dBa (sound pressure) at
maximum fan speed at 40C
34.2 dBa at room temperature
FPR1K-CBL-MGMT
FPR1K-CBL-MGMT=
FPR1K-RM-BRKT=
DescriptionPID
Cisco Firepower 1120 NGFW applianceFPR1120-NGFW-K9
Cisco Firepower 1140 NGFW applianceFPR1140-NGFW-K9
Cisco Firepower 1120/1140 200-GB driveFPR1K-RM-SSD200
Cisco Firepower 1120/1140 200-GB drive (spare)FPR1K-RM-SSD200=
Cisco Firepower 1120/1140 cable management
brackets
Cisco Firepower 1120/1140 cable management
brackets (spare)
Cisco Firepower 1120/1140 accessory kitFPR1K-RM-ACY-KIT
Cisco Firepower 1120/1140 rack mount brackets
(spare)
Cisco Firepower 1100 Series Hardware Installation Guide
9
Product ID Numbers
Overview
Cisco Firepower 1100 Series Hardware Installation Guide
10
Installation Preparation
• Installation Warnings, on page 11
• Safety Recommendations, on page 13
• Maintain Safety with Electricity, on page 14
• Prevent ESD Damage, on page 14
• Site Environment, on page 15
• Site Considerations, on page 15
• Power Supply Considerations, on page 15
• Rack Configuration Considerations, on page 16
Installation Warnings
Be sure to read the Regulatory and Compliance Information document before installing the chassis.
Take note of the following warnings:
CHAPTER 2
Warning
Warning
Statement 1071—Warning Definition
IMPORTANT SAFETY INSTRUCTIONS
This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work
on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard
practices for preventing accidents. Use the statement number provided at the end of each warning to locate
its translation in the translated safety warnings that accompanied this device.
SAVE THESE INSTRUCTIONS
Statement 1029—Blank Faceplates and Cover Panels
Blank faceplates and cover panels serve three important functions: they prevent exposure to hazardous voltages
and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other
equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all
cards, faceplates, front covers, and rear covers are in place.
Cisco Firepower 1100 Series Hardware Installation Guide
11
Installation Warnings
Installation Preparation
Warning
Warning
Warning
Warning
Statement 1017—Restricted Area
This unit is intended for installation in restricted access areas. A restricted access area can be accessed by
skilled, instructed or qualified personnel.
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Statement 1004—Installation Instructions
Read the installation instructions before using, installing or connecting the system to the power source.
Statement 12—Power Supply Disconnection Warning
Before working on a chassis or working near power supplies, unplug the power cord on AC units; disconnect
the power at the circuit breaker on DC units.
Warning
Warning
Warning
Warning
Statement 43—Jewelry Removal Warning
Before working on equipment that is connected to power lines, remove jewelry (including rings, necklaces,
and watches). Metal objects will heat up when connected to power and ground and can cause serious burns
or weld the metal object to the terminals.
Statement 94—Wrist Strap Warning
During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not directly touch
the backplane with your hand or any metal tool, or you could shock yourself.
Statement 1005—Circuit Breaker
This product relies on the building's installation for short-circuit (overcurrent) protection. Ensure that the
protective device is rated not greater than: 20 A, 120 V, and 16 A, 250 V
Statement 1045—Short-Circuit Protection
This product requires short-circuit (overcurrent) protection to be provided as part of the building installation.
Install only in accordance with national and local wiring regulations.
Cisco Firepower 1100 Series Hardware Installation Guide
12
Installation Preparation
Safety Recommendations
Warning
Warning
Warning
Warning
Statement 1021—SELV Circuit
To avoid electric shock, do not connect safety extra-low voltage (SELV) circuits to telephone-network voltage
(TNV) circuits. LAN ports contain SELV circuits, and WAN ports contain TNV circuits. Some LAN and
WAN ports both use RJ-45 connectors. Use caution when connecting cables.
Statement 1024—Ground Conductor
This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence
of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician
if you are uncertain that suitable grounding is available.
Statement 1040—Product Disposal
Ultimate disposal of this product should be handled according to all national laws and regulations.
Statement 1074—Comply with Local and National Electrical Codes
To reduce risk of electric shock or fire, installation of the equipment must comply with local and national
electrical codes.
Warning
Statement 19—TN Power Warning
The device is designed to work with TN power systems.
Safety Recommendations
Observe these safety guidelines:
• Keep the area clear and dust free before, during, and after installation.
• Keep tools away from walkways, where you and others might trip over them.
• Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains that could get caught in the
chassis.
• Wear safety glasses if you are working under any conditions that might be hazardous to your eyes.
• Do not perform any action that creates a potential hazard to people or makes the equipment unsafe.
• Never attempt to lift an object that is too heavy for one person.
Cisco Firepower 1100 Series Hardware Installation Guide
13
Maintain Safety with Electricity
Maintain Safety with Electricity
Installation Preparation
Warning
Before working on a chassis, be sure the power cord is unplugged.
Be sure to read the Regulatory and Compliance Information document before installing the chassis.
Follow these guidelines when working on equipment powered by electricity:
• Before beginning procedures that require access to the interior of the chassis, locate the emergency
power-off switch for the room in which you are working. Then, if an electrical accident occurs, you can
act quickly to turn off the power.
• Do not work alone if potentially hazardous conditions exist anywhere in your work space.
• Never assume that power is disconnected; always check.
• Look carefully for possible hazards in your work area, such as moist floors, ungrounded power extension
cables, frayed power cords, and missing safety grounds.
• If an electrical accident occurs:
• Use caution; do not become a victim yourself.
• Disconnect power from the system.
• If possible, send another person to get medical aid. Otherwise, assess the condition of the victim,
and then call for help.
• Determine whether the person needs rescue breathing or external cardiac compressions; then take
appropriate action.
• Use the chassis within its marked electrical ratings and product usage instructions.
• The chassis is equipped with an AC-input power supply, which is shipped with a three-wire electrical
cord with a grounding-type plug that fits into a grounding-type power outlet only. Do not circumvent
this safety feature. Equipment grounding should comply with local and national electrical codes.
Prevent ESD Damage
ESD occurs when electronic components are improperly handled, and it can damage equipment and impair
electrical circuitry, which can result in intermittent or complete failure of your equipment.
Always follow ESD-prevention procedures when removing and replacing components. Ensure that the chassis
is electrically connected to an earth ground. Wear an ESD-preventive wrist strap, ensuring that it makes good
skin contact. Connect the grounding clip to an unpainted surface of the chassis frame to safely ground ESD
voltages. To properly guard against ESD damage and shocks, the wrist strap and cord must operate effectively.
If no wrist strap is available, ground yourself by touching the metal part of the chassis.
For safety, periodically check the resistance value of the antistatic strap, which should be between one and
10 megohms.
Cisco Firepower 1100 Series Hardware Installation Guide
14
Installation Preparation
Site Environment
See Hardware Specifications, on page 8 for information about physical specifications.
To avoid equipment failures and reduce the possibility of environmentally caused shutdowns, plan the site
layout and equipment locations carefully. If you are currently experiencing shutdowns or unusually high error
rates with your existing equipment, these considerations may help you isolate the cause of failures and prevent
future problems.
Site Considerations
Considering the following helps you plan an acceptable operating environment for the chassis, and avoid
environmentally-caused equipment failures.
• Electrical equipment generates heat. Ambient air temperature might not be adequate to cool equipment
to acceptable operating temperatures without adequate circulation. Make sure that the room in which
you operate your system has adequate air circulation.
Site Environment
• Ensure that the chassis cover is secure. The chassis is designed to allow cooling air to flow effectively
within it. An open chassis allows air leaks, which may interrupt and redirect the flow of cooling air from
the internal components.
• Always follow ESD-prevention procedures to avoid damage to equipment. Damage from static discharge
can cause immediate or intermittent equipment failure.
Power Supply Considerations
See Hardware Specifications, on page 8 for more detailed information about the power supply in the chassis.
When installing the chassis, consider the following:
• Check the power at the site before installing the chassis to ensure that it is free of spikes and noise. Install
a power conditioner, if necessary, to ensure proper voltages and power levels in the appliance-input
voltage.
• Install proper grounding for the site to avoid damage from lightning and power surges.
• The chassis does not have a user-selectable operating range. Refer to the label on the chassis for the
correct appliance input-power requirement.
• Several styles of AC-input power supply cords are available for the chassis; make sure that you have the
correct style for your site.
• If you are using dual redundant (1+1) power supplies, we recommend that you use independent electrical
circuits for each power supply.
• Install an uninterruptible power source for your site, if possible.
Cisco Firepower 1100 Series Hardware Installation Guide
15
Rack Configuration Considerations
Rack Configuration Considerations
See Rack-Mount the Chassis, on page 17 for the procedure for rack-mounting the chassis.
Consider the following when planning a rack configuration:
• If you are mounting a chassis in an open rack, make sure that the rack frame does not block the intake
or exhaust ports.
• Be sure enclosed racks have adequate ventilation. Make sure that the rack is not overly congested as each
chassis generates heat. An enclosed rack should have louvered sides and a fan to provide cooling air.
• In an enclosed rack with a ventilation fan in the top, heat generated by equipment near the bottom of the
rack can be drawn upward and into the intake ports of the equipment above it in the rack. Ensure that
you provide adequate ventilation for equipment at the bottom of the rack.
• Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the
chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with
different arrangements to position the baffles effectively.
Installation Preparation
Cisco Firepower 1100 Series Hardware Installation Guide
16
CHAPTER 3
Mount the Chassis
• Unpack and Inspect the Chassis, on page 17
• Rack-Mount the Chassis, on page 17
Unpack and Inspect the Chassis
Note
The chassis is thoroughly inspected before shipment. If any damage occurred during transportation or any
items are missing, contact your customer service representative immediately. Keep the shipping container in
case you need to send the chassis back due to damage.
See Package Contents, on page 4 for a list of what shipped with the chassis.
Step 1 Remove the chassis from its cardboard container and save all packaging material.
Step 2 Compare the shipment to the equipment list provided by your customer service representative. Verify that you have all
items.
Step 3 Check for damage and report any discrepancies or damage to your customer service representative. Have the following
information ready:
• Invoice number of shipper (see the packing slip)
• Model and serial number of the damaged unit
• Description of damage
• Effect of damage on the installation
Rack-Mount the Chassis
The chassis ships with rack-mount brackets, which you can install on the front or the rear of the chassis.
Cisco Firepower 1100 Series Hardware Installation Guide
17
Rack-Mount the Chassis
Step 1 Attach both brackets to the sides of the chassis, either to the front or rear.
After the brackets are secured to the chassis, you can mount it in the rack.
Step 2 Attach the chassis to the rack.
We recommend that you install the chassis with the rear panel facing the cold aisle. (See the following illustration for an
example of air flow from back to front.)
Figure 7: Chassis Installed in the Rack
Mount the Chassis
Right rack-mount bracket2Left rack-mount bracket1
Hot aisle (chassi front panel)4Cold aisle (chassis rear panel)3
Air flow direction5
Cisco Firepower 1100 Series Hardware Installation Guide
18
Mount the Chassis
Rack-Mount the Chassis
What to do next
You can now install the cables and power cord, as described in the Cisco Firepower 1100 Series Getting
Started Guide.
Cisco Firepower 1100 Series Hardware Installation Guide
19
Rack-Mount the Chassis
Mount the Chassis
Cisco Firepower 1100 Series Hardware Installation Guide
20
CHAPTER 4
Connect to the Console Port
• Connect to the Console Port with Microsoft Windows, on page 21
• Connect to the Console Port with Mac OS X, on page 22
• Connect to the Console Port with Linux, on page 23
Connect to the Console Port with Microsoft Windows
You must install a USB device driver the first time a Microsoft Windows-based PC is connected to the USB
console port on the chassis, otherwise the connection fails.
To uninstall the driver, use the Add Remove Programs utility or the Setup-exe program.
Note
Disconnect the console terminal before uninstalling the driver.
Step 1 Obtain the appropriate driver (Cisco_usbconsole_driver_X_X_zip, where X is a revision number) for your model from
the Cisco Download Software site, USB Console Software category.
Step 2 Install the driver.
Step 3 Connect a 5-pin USB Mini B to the console port as shown in the following figure.
Cisco Firepower 1100 Series Hardware Installation Guide
21
Connect to the Console Port with Mac OS X
Figure 8: Firepower 1120 and 1140 Console Port Connection
Connect to the Console Port
USB Mini B to USB Type A console cable2USB Mini B console port1
USB Type A3
Step 4 Connect the end of the cable with the DB-9 connector (or USB Type A) to the terminal or PC. If your terminal or PC has
a console port that does not accommodate a DB-9 connector, you must provide an appropriate adapter for that port.
The LED for the console port turns green and within a few moments the Found New Hardware Wizard appears.
Step 5 Follow the instructions to complete the driver installation.
Step 6 To communicate with the chassis, start a terminal emulator application. This software should be configured with the
following parameters:
• 9600 baud
• 8 data bits
• no parity
• 1 stop bit
• no flow control
Connect to the Console Port with Mac OS X
Follow these steps to connect a Mac OS X system USB port to the console using the built-in OS X Terminal
utility, or alternatively you can use a separate terminal emulator application.
Step 1 Use the Finder to go to Applications > Utilities > Terminal.
Step 2 Connect the OS X USB port to the chassis.
Step 3 Enter the following commands to find the OS X USB port number:
Cisco Firepower 1100 Series Hardware Installation Guide
22
Connect to the Console Port
Connect to the Console Port with Linux
Example:
macbook:user$ cd /dev
macbook:user$ ls -ltr /dev/*usb*
crw-rw-rw- 1 root wheel 9, 66 Apr 1 16:46 tty.usbmodem1a21
DT-macbook:dev user$
Step 4 Connect to the USB port with the following command followed by the chassis USB port speed:
Example:
macbook:user$ screen /dev/tty.usbmodem1a21 9600
Step 5 Enter Ctrl-a followed by d to disconnect the OS X USB console from the Terminal window.
Connect to the Console Port with Linux
Follow these steps to connect a Linux system USB port to the console using the built-in Linux Terminal utility.
Step 1 Open the Linux Terminal window.
Step 2 Connect the Linux USB port to the chassis.
Step 3 Enter the following commands to find the Linux USB port number:
Example:
root@usb-suse# cd /dev
root@usb-suse /dev# ls -ltr *ACM*
crw-r--r-- 1 root root 188, 0 Jan 14 18:02 ttyACM0
root@usb-suse /dev#
Step 4 Connect to the USB port with the following command followed by the chassis USB port speed
Example:
root@usb-suse /dev# screen /dev/ttyACM0 9600
Step 5 To disconnect the Linux USB console from the Terminal window, enter Ctrl-a followed by : then quit.
Cisco Firepower 1100 Series Hardware Installation Guide
23
Connect to the Console Port with Linux
Connect to the Console Port
Cisco Firepower 1100 Series Hardware Installation Guide
24
Maintenance and Upgrade
• Replace the SSD , on page 25
Replace the SSD
The Firepower 1100 series ships with an SSD installed. You can replace this SSD should it fail. You must
power off the chassis to do replace the SSD.
CHAPTER 5
Caution
Step 1 Loosen the thumb screws on both sides of the SSD bay and pull the existing SSD out of the bay.
Step 2 Insert the new SSD into the bay and push it in until it is seated.
Figure 9: Remove and Install an SSD
You will lose your configuration after you replace the existing SSD with a new SSD.
Follow these steps to replace an SSD in the chassis:
Step 3 Tighten the thumb screws on both sides of the SSD bay.
Cisco Firepower 1100 Series Hardware Installation Guide
25
Maintenance and Upgrade
Replace the SSD
Step 4 Check the SSD LED to make sure the SSD is seated properly and functioning. See Rear Panel LEDs, on page 7 for a
description of the SSD LED.
Cisco Firepower 1100 Series Hardware Installation Guide
26
Loading...