Install the FIPS Opacity Shield, on page 32 Remove and Replace the Supervisor You can remove the Firepower 9300 Supervisor while the system is powered on without damage to the Supervisor hardware or system. However, because the supervisor is controlling the entire chassis, including the power system, we recommend that you use the power switch on the rear panel of the chassis to put the system in standby mode.
Page 2
Installation, Maintenance, and Upgrade Remove and Replace the Supervisor Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Warning Statement 1073 No User-Serviceable Parts There are no serviceable parts inside. To avoid risk of electric shock, do not open. Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes...
You can remove the Firepower 9300 security module while the system is running, but we recommend that you use the power switch on the rear of the chassis to put the security module in standby mode before removal and reinstallation.
Page 4
If you want to replace an existing security module with another security module, you must decommission the old security module before removing it. See the "Security Module/Engine Management" chapter in Cisco FXOS Firepower Chassis Manager Configuration Guide for the instructions. After you decommission the old security module, you can remove it, install the new security module, have the system acknowledge it, and then reinitialize it.
Page 5
Installation, Maintenance, and Upgrade Install, Remove, and Replace the Security Module Warning Statement 1091 Installation by an Instructed Person Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person. Step 1 To install a new security module for the first time into an empty slot, do the following: a) Follow steps 6 through 10.
SSDs fail, you must decommission the security module and acknowledge the slot to start the SSD installation and update the inventory. See the "Security Module/Engine Management" chapter in the Cisco FXOS Firepower Chassis Manager Configuration Guide for the instructions. After you decommission the security module, you can remove the SSDs, install the new SSDs, and acknowledge the slot to bring the security module back online.
Page 7
Installation, Maintenance, and Upgrade Remove and Replace the SSD Warning Statement 1073 No User-Serviceable Parts There are no serviceable parts inside. To avoid risk of electric shock, do not open. Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
Verify that you have the correct software to support hot swapping on the Firepower 10-Gb and 40-Gb nonhardware bypass network modules. See Cisco Firepower 4100/9300 FXOS Compatibility for the software compatibility matrix. You must hot swap with an identical network module, that is, a network module with the same PID.
Page 9
Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. To remove and replace the network modules that do not currently support hot swapping, power off the chassis, replace the network module, and then power the chassis back on.
Page 10
Installation, Maintenance, and Upgrade Install, Remove, and Replace the Single-Wide Network Module Safety Warnings Take note of the following component replacement safety warnings: Warning Statement 1028 More Than One Power Supply This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.
Page 11
Installation, Maintenance, and Upgrade Install, Remove, and Replace the Single-Wide Network Module Step 1 To install a new network module for the first time into an empty slot, do the following: a) Power down the chassis by moving the power switch to the OFF position. b) Follow Steps 5 through 7 to install the new network module.
Page 12
Installation, Maintenance, and Upgrade Install, Remove, and Replace the Single-Wide Network Module Figure 5: Remove and Replace the Single-Wide Network Module If the slot is to remain empty, install a blank faceplate to ensure proper airflow and to keep dust out of the chassis; otherwise, install another network module.
The Firepower 100-Gb network module is an optional, removable I/O module that provides two fiber 100 Gigabit Ethernet interfaces. It takes up two slots in the Firepower 9300 and supports single and multimode. Verify that your software supports hot swapping. See Cisco Firepower 4100/9300 FXOS Compatibility the software compatibility matrix.
Page 14
Installation, Maintenance, and Upgrade Install, Remove, and Replace the Double-Wide Network Module Figure 6: 100-Gb Network Module Captive screw on handle 100-Gigabit Ethernet QSFP28 fiber port Ethernet X/1 100-Gigabit Ethernet QSFP28 fiber port Network activity LEDs Ethernet X/2 • Off—No connection or port is not in use. •...
Page 15
Installation, Maintenance, and Upgrade Install, Remove, and Replace the Double-Wide Network Module Warning Statement 1073 No User-Serviceable Parts There are no serviceable parts inside. To avoid risk of electric shock, do not open. Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
Page 16
Installation, Maintenance, and Upgrade Install, Remove, and Replace the Double-Wide Network Module Save the divider in case you ever want to replace the 100-Gb double-wide network module with one or two Note single-wide network modules. Or you can order the divider kit (FPR9K-NM-DIV=), which contains two dividers, one for the original 9300 chassis and one for the newer 9300 chassis.
FXOS Configuration Guide to connect to the network module and make sure that it has been discovered correctly by the Firepower 9300. Remove and Replace the Power Supply Module You can remove and replace the power supply module while the system is running. Make sure that at least one of the power supply modules is active while hot-swapping.
Page 18
Installation, Maintenance, and Upgrade Remove and Replace the Power Supply Module Safety Warnings Take note of the following power and component removal safety warnings: Warning Statement 347 Failure to Secure the Expansion Module To reduce the risk of electric shock, secure the modules with the provided screws. Warning Statement 1003 DC Power Disconnection Before performing any of the following procedures, ensure that power is removed from the DC...
Page 19
Installation, Maintenance, and Upgrade Remove and Replace the Power Supply Module Warning Statement 1028 More Than One Power Supply This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit. Warning Statement 1029 Blank Faceplates and Cover Panels Blank faceplates and cover panels serve three important functions: they reduce the risk of electric...
Page 20
Installation, Maintenance, and Upgrade Remove and Replace the Power Supply Module Warning Statement 1090 Installation by Skilled Person Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of a skilled person. Warning Statement 1091 Installation by an Instructed Person Only an instructed person or skilled person should be allowed to install, replace, or service this...
Page 21
Installation, Maintenance, and Upgrade Remove and Replace the Power Supply Module Figure 9: Remove and Replace the Power Supply Module Step 4 To install a new power supply, place the handle of the power supply module in the up position. Step 5 Hold the power supply module with both hands and slide it into the power supply module bay.
Installation, Maintenance, and Upgrade Connect the DC Power Supply Module Connect the DC Power Supply Module Note Replace power supplies immediately. Power supply blanks are not available. This procedure describes how to install and connect the DC power supply module to the rear PDU terminals on the chassis.
Page 23
Installation, Maintenance, and Upgrade Connect the DC Power Supply Module Warning Statement 1022 Disconnect Device To reduce risk of electric shock and fire, a readily accessible two-poled disconnect device must be incorporated in the fixed wiring. Warning Statement 1025 Use Copper Conductors Only To reduce risk of fire, use copper conductors only.
Page 24
Installation, Maintenance, and Upgrade Connect the DC Power Supply Module Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment. A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
Installation, Maintenance, and Upgrade Connect the HVDC Power Supply Module Figure 10: Connect the DC Power Connectors and Ground Lugs DC terminal covers Nuts Two 2-hole lugs (not provided in accessory kit) DC terminals Chassis ground lug Step 7 Connect the DC-input wires to the power entry module terminal block. The proper wiring sequence is positive to positive (red wire) and negative to negative (black wire).
Page 26
Installation, Maintenance, and Upgrade Connect the HVDC Power Supply Module This procedure describes how to install and connect the high-voltage (HV) DC power supply module to the rear power supply power feeds on the chassis. The load is shared when both power supply modules are plugged in and running at the same time.
Page 27
Installation, Maintenance, and Upgrade Connect the HVDC Power Supply Module Warning Statement 1025 Use Copper Conductors Only To reduce risk of fire, use copper conductors only. Warning Statement 1028 More Than One Power Supply This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.
Page 28
Installation, Maintenance, and Upgrade Connect the HVDC Power Supply Module Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment. A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
Installation, Maintenance, and Upgrade Remove and Replace the Fan Module Figure 11: HVDC Power Feeds Power feed for PSU-2 Power feed for PSU-1 Step 5 Set the HVDC disconnect switch in the circuit to ON. In a system with multiple power supplies, connect each power supply to a separate HVDC power source. In Caution the event of a power source failure, if the second source is still available, it can maintain system operation.
Page 30
Installation, Maintenance, and Upgrade Remove and Replace the Fan Module Note The chassis is designed to have all fan modules in place and operating at all times. Do not leave the fan module bay empty for longer than is necessary to replace it with a new fan module. Safety Warnings Take note of the following component replacement safety warnings Warning...
Page 31
Installation, Maintenance, and Upgrade Remove and Replace the Fan Module Warning Statement 1091 Installation by an Instructed Person Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person. Step 1 To remove a fan module, face the rear of the chassis, and hold the handle of the fan module.
Crypto Officer. This procedure describes how to install the FIPS opacity shield on the front of a Firepower 9300 that is already rack-mounted. The FIPS opacity shield has an access cover that is already attached with two captive screws.
Page 33
Installation, Maintenance, and Upgrade Install the FIPS Opacity Shield Figure 13: Install the FIPS Opacity Shield to the Rack-Mount Rails Screws FIPS opacity shield Rack-mount rails Step 3 Unscrew the two captive screws on the front of the access cover to remove the access cover so that you can connect the cables to the ports.
Page 34
Installation, Maintenance, and Upgrade Install the FIPS Opacity Shield Figure 14: Remove the FIPS Access Cover Captive screws Access cover Step 4 Connect the cables to the ports. See the getting started guides listed in Step 9 for the procedure. Step 5 Run the cables through the openings on either side of the FIPS opacity shield and reattach the FIPS access cover by tightening the captive screws.
Page 35
Check the SYS LED on the front of the chassis. See Supervisor for a description of the SYS LED. When the SYS LED is solid green, the chassis has booted up successfully. Step 9 See the Cisco Firepower 9300 Getting Started Guide for further configuration information. Installation, Maintenance, and Upgrade...
Page 36
Installation, Maintenance, and Upgrade Install the FIPS Opacity Shield Installation, Maintenance, and Upgrade...