Cisco Firepower 9300 Installation & Maintenance

Installation, maintenance, and upgrade guide

Advertisement

Quick Links

Installation, Maintenance, and Upgrade

Remove and Replace the Supervisor

You can remove the Firepower 9300 Supervisor while the system is powered on without damage to the
Supervisor hardware or system. However, because the supervisor is controlling the entire chassis, including
the power system, we recommend that you use the power switch on the rear panel of the chassis to put the
system in standby mode. See
Safety Warnings
Warning
Supervisor
Take note of the following component replacement safety warnings:
Statement 1028 More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock,
remove all connections to de-energize the unit.
for more information about the Supervisor.
Installation, Maintenance, and Upgrade
1

Advertisement

Table of Contents
loading

Summary of Contents for Cisco Firepower 9300

  • Page 1: Table Of Contents

    Install the FIPS Opacity Shield, on page 32 Remove and Replace the Supervisor You can remove the Firepower 9300 Supervisor while the system is powered on without damage to the Supervisor hardware or system. However, because the supervisor is controlling the entire chassis, including the power system, we recommend that you use the power switch on the rear panel of the chassis to put the system in standby mode.
  • Page 2 Installation, Maintenance, and Upgrade Remove and Replace the Supervisor Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Warning Statement 1073 No User-Serviceable Parts There are no serviceable parts inside. To avoid risk of electric shock, do not open. Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes...
  • Page 3: Install, Remove, And Replace The Security Module

    You can remove the Firepower 9300 security module while the system is running, but we recommend that you use the power switch on the rear of the chassis to put the security module in standby mode before removal and reinstallation.
  • Page 4 If you want to replace an existing security module with another security module, you must decommission the old security module before removing it. See the "Security Module/Engine Management" chapter in Cisco FXOS Firepower Chassis Manager Configuration Guide for the instructions. After you decommission the old security module, you can remove it, install the new security module, have the system acknowledge it, and then reinitialize it.
  • Page 5 Installation, Maintenance, and Upgrade Install, Remove, and Replace the Security Module Warning Statement 1091 Installation by an Instructed Person Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person. Step 1 To install a new security module for the first time into an empty slot, do the following: a) Follow steps 6 through 10.
  • Page 6: Remove And Replace The Ssd

    SSDs fail, you must decommission the security module and acknowledge the slot to start the SSD installation and update the inventory. See the "Security Module/Engine Management" chapter in the Cisco FXOS Firepower Chassis Manager Configuration Guide for the instructions. After you decommission the security module, you can remove the SSDs, install the new SSDs, and acknowledge the slot to bring the security module back online.
  • Page 7 Installation, Maintenance, and Upgrade Remove and Replace the SSD Warning Statement 1073 No User-Serviceable Parts There are no serviceable parts inside. To avoid risk of electric shock, do not open. Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
  • Page 8: Install, Remove, And Replace The Single-Wide Network Module

    Verify that you have the correct software to support hot swapping on the Firepower 10-Gb and 40-Gb nonhardware bypass network modules. See Cisco Firepower 4100/9300 FXOS Compatibility for the software compatibility matrix. You must hot swap with an identical network module, that is, a network module with the same PID.
  • Page 9 Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. To remove and replace the network modules that do not currently support hot swapping, power off the chassis, replace the network module, and then power the chassis back on.
  • Page 10 Installation, Maintenance, and Upgrade Install, Remove, and Replace the Single-Wide Network Module Safety Warnings Take note of the following component replacement safety warnings: Warning Statement 1028 More Than One Power Supply This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.
  • Page 11 Installation, Maintenance, and Upgrade Install, Remove, and Replace the Single-Wide Network Module Step 1 To install a new network module for the first time into an empty slot, do the following: a) Power down the chassis by moving the power switch to the OFF position. b) Follow Steps 5 through 7 to install the new network module.
  • Page 12 Installation, Maintenance, and Upgrade Install, Remove, and Replace the Single-Wide Network Module Figure 5: Remove and Replace the Single-Wide Network Module If the slot is to remain empty, install a blank faceplate to ensure proper airflow and to keep dust out of the chassis; otherwise, install another network module.
  • Page 13: Install, Remove, And Replace The Double-Wide Network Module

    The Firepower 100-Gb network module is an optional, removable I/O module that provides two fiber 100 Gigabit Ethernet interfaces. It takes up two slots in the Firepower 9300 and supports single and multimode. Verify that your software supports hot swapping. See Cisco Firepower 4100/9300 FXOS Compatibility the software compatibility matrix.
  • Page 14 Installation, Maintenance, and Upgrade Install, Remove, and Replace the Double-Wide Network Module Figure 6: 100-Gb Network Module Captive screw on handle 100-Gigabit Ethernet QSFP28 fiber port Ethernet X/1 100-Gigabit Ethernet QSFP28 fiber port Network activity LEDs Ethernet X/2 • Off—No connection or port is not in use. •...
  • Page 15 Installation, Maintenance, and Upgrade Install, Remove, and Replace the Double-Wide Network Module Warning Statement 1073 No User-Serviceable Parts There are no serviceable parts inside. To avoid risk of electric shock, do not open. Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
  • Page 16 Installation, Maintenance, and Upgrade Install, Remove, and Replace the Double-Wide Network Module Save the divider in case you ever want to replace the 100-Gb double-wide network module with one or two Note single-wide network modules. Or you can order the divider kit (FPR9K-NM-DIV=), which contains two dividers, one for the original 9300 chassis and one for the newer 9300 chassis.
  • Page 17: Remove And Replace The Power Supply Module

    FXOS Configuration Guide to connect to the network module and make sure that it has been discovered correctly by the Firepower 9300. Remove and Replace the Power Supply Module You can remove and replace the power supply module while the system is running. Make sure that at least one of the power supply modules is active while hot-swapping.
  • Page 18 Installation, Maintenance, and Upgrade Remove and Replace the Power Supply Module Safety Warnings Take note of the following power and component removal safety warnings: Warning Statement 347 Failure to Secure the Expansion Module To reduce the risk of electric shock, secure the modules with the provided screws. Warning Statement 1003 DC Power Disconnection Before performing any of the following procedures, ensure that power is removed from the DC...
  • Page 19 Installation, Maintenance, and Upgrade Remove and Replace the Power Supply Module Warning Statement 1028 More Than One Power Supply This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit. Warning Statement 1029 Blank Faceplates and Cover Panels Blank faceplates and cover panels serve three important functions: they reduce the risk of electric...
  • Page 20 Installation, Maintenance, and Upgrade Remove and Replace the Power Supply Module Warning Statement 1090 Installation by Skilled Person Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of a skilled person. Warning Statement 1091 Installation by an Instructed Person Only an instructed person or skilled person should be allowed to install, replace, or service this...
  • Page 21 Installation, Maintenance, and Upgrade Remove and Replace the Power Supply Module Figure 9: Remove and Replace the Power Supply Module Step 4 To install a new power supply, place the handle of the power supply module in the up position. Step 5 Hold the power supply module with both hands and slide it into the power supply module bay.
  • Page 22: Connect The Dc Power Supply Module

    Installation, Maintenance, and Upgrade Connect the DC Power Supply Module Connect the DC Power Supply Module Note Replace power supplies immediately. Power supply blanks are not available. This procedure describes how to install and connect the DC power supply module to the rear PDU terminals on the chassis.
  • Page 23 Installation, Maintenance, and Upgrade Connect the DC Power Supply Module Warning Statement 1022 Disconnect Device To reduce risk of electric shock and fire, a readily accessible two-poled disconnect device must be incorporated in the fixed wiring. Warning Statement 1025 Use Copper Conductors Only To reduce risk of fire, use copper conductors only.
  • Page 24 Installation, Maintenance, and Upgrade Connect the DC Power Supply Module Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment. A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
  • Page 25: Connect The Hvdc Power Supply Module

    Installation, Maintenance, and Upgrade Connect the HVDC Power Supply Module Figure 10: Connect the DC Power Connectors and Ground Lugs DC terminal covers Nuts Two 2-hole lugs (not provided in accessory kit) DC terminals Chassis ground lug Step 7 Connect the DC-input wires to the power entry module terminal block. The proper wiring sequence is positive to positive (red wire) and negative to negative (black wire).
  • Page 26 Installation, Maintenance, and Upgrade Connect the HVDC Power Supply Module This procedure describes how to install and connect the high-voltage (HV) DC power supply module to the rear power supply power feeds on the chassis. The load is shared when both power supply modules are plugged in and running at the same time.
  • Page 27 Installation, Maintenance, and Upgrade Connect the HVDC Power Supply Module Warning Statement 1025 Use Copper Conductors Only To reduce risk of fire, use copper conductors only. Warning Statement 1028 More Than One Power Supply This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.
  • Page 28 Installation, Maintenance, and Upgrade Connect the HVDC Power Supply Module Warning Statement 1089 Instructed and Skilled Person Definitions An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment. A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
  • Page 29: Remove And Replace The Fan Module

    Installation, Maintenance, and Upgrade Remove and Replace the Fan Module Figure 11: HVDC Power Feeds Power feed for PSU-2 Power feed for PSU-1 Step 5 Set the HVDC disconnect switch in the circuit to ON. In a system with multiple power supplies, connect each power supply to a separate HVDC power source. In Caution the event of a power source failure, if the second source is still available, it can maintain system operation.
  • Page 30 Installation, Maintenance, and Upgrade Remove and Replace the Fan Module Note The chassis is designed to have all fan modules in place and operating at all times. Do not leave the fan module bay empty for longer than is necessary to replace it with a new fan module. Safety Warnings Take note of the following component replacement safety warnings Warning...
  • Page 31 Installation, Maintenance, and Upgrade Remove and Replace the Fan Module Warning Statement 1091 Installation by an Instructed Person Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person. Step 1 To remove a fan module, face the rear of the chassis, and hold the handle of the fan module.
  • Page 32: Install The Fips Opacity Shield

    Crypto Officer. This procedure describes how to install the FIPS opacity shield on the front of a Firepower 9300 that is already rack-mounted. The FIPS opacity shield has an access cover that is already attached with two captive screws.
  • Page 33 Installation, Maintenance, and Upgrade Install the FIPS Opacity Shield Figure 13: Install the FIPS Opacity Shield to the Rack-Mount Rails Screws FIPS opacity shield Rack-mount rails Step 3 Unscrew the two captive screws on the front of the access cover to remove the access cover so that you can connect the cables to the ports.
  • Page 34 Installation, Maintenance, and Upgrade Install the FIPS Opacity Shield Figure 14: Remove the FIPS Access Cover Captive screws Access cover Step 4 Connect the cables to the ports. See the getting started guides listed in Step 9 for the procedure. Step 5 Run the cables through the openings on either side of the FIPS opacity shield and reattach the FIPS access cover by tightening the captive screws.
  • Page 35 Check the SYS LED on the front of the chassis. See Supervisor for a description of the SYS LED. When the SYS LED is solid green, the chassis has booted up successfully. Step 9 See the Cisco Firepower 9300 Getting Started Guide for further configuration information. Installation, Maintenance, and Upgrade...
  • Page 36 Installation, Maintenance, and Upgrade Install the FIPS Opacity Shield Installation, Maintenance, and Upgrade...

Table of Contents