Cisco Firepower 2130 / 2140 / 2120 / 2110 Manual

Install, Remove, and Replace the Network Module

You can remove and replace the network module in the Firepower 2130 and 2140 (the Firepower 2110 and 2120 do not support network modules). Although the hardware supports removing and replacing the network module while the system is running, the software does not currently support hot swapping. You must power down the chassis to remove and replace network modules.
See Network Modules for more information.

This procedure describes how to install a network module into an empty slot that has never contained a network module, and how to remove an installed network module and replace it with another network module.

Safety Warnings

Take note of the following component replacement safety warnings:

Statement 1028 — More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.

Statement 1073 — No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1089 — Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1090 — Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of a skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1091 — Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Procedure

Step 1
To install a new network module for the first time into an empty slot, do the following:

1. Power down the chassis by moving the power switch to the OFF position.
   See Rear Panel for more information about the power switch.
2. Follow Steps 4 through 7 to install the new network module.
3. Power on the chassis by moving the power switch to the ON position.

Step 2
To remove and replace an existing network module, do the following:

1. Save your configuration.
2. Power down the chassis by moving the power switch to the OFF position.
   See Rear Panel for more information about the power switch.
3. Continue with Step 3.

Step 3
To remove a network module, loosen the captive screw on the lower left side of the network module and pull out the handle that is connected to the screw. This mechanically ejects the network module from the slot.

Figure 1: Remove the Network Module

If the slot is to remain empty, install a blank faceplate to ensure proper airflow and to keep dust out of the chassis; otherwise, install another network module.

Step 4
To replace a network module, hold the network module in front of the network module slot on the right of the chassis and pull the network module handle out.

Step 5
Slide the network module into the slot and push it firmly into place until the handle is flush with the front of the network module.

Step 6
Tighten the captive screw on the lower left side of the network module.

Step 7
Power on the chassis so that the new network module is recognized.

Remove and Replace the SSD

Although the hardware supports removing and replacing SSDs while the system is running, the software does not currently support hot swapping. You must power down the chassis to remove and replace SSDs.

Note
The 100-GB SSD is restricted to the Firepower 2110 and 2120. The 200-GB SSD is restricted to the Firepower 2130 and 2140. Do not mix them.

Note
We may ship larger capacity SSDs depending on component supply availability. The larger capacity SSDs are formatted to 100-GB for the Firepower 2110 and 2120 and formatted to 200-GB for the Firepower 2130 and 2140.

You can install a Malware Storage Pack (MSP) in slot 2. The MSP stores threat detection data for use in future analysis. It supports the Advanced Malware Protection (AMP) software feature. It is used as both storage and as the Malware application repository. RAID is not supported.

Do not switch the two SSDs. You must install the MSP in slot 2. If you remove it and install it in slot 1, all stored capture data are lost.

Safety Warnings

Take note of the following component replacement safety warnings:

Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.

Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of a skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Procedure

Step 1
Save your configuration.

Step 2
Power down the chassis by moving the power switch to the OFF position. See Rear Panel for more information on the power switch.

Step 3
To remove the SSD in slot 1, face the front of the chassis, loosen the two captive screws on the SSD, and gently pull it out of the chassis. See Front Panel for the location of the SSD slots for each model. The figure below shows the 2130 and 2140 front panel.

Figure 2: Remove the SSD

Step 4
To replace the SSD in slot 1, make sure the power switch is still in the OFF position, and then hold the SSD in front of slot 1 and push it in gently until it is seated.

Step 5
To install the MSP SSD, make sure the power switch is still in the OFF position, and then remove the blank faceplate in Slot 2 by loosening the captive screws on either side of the faceplate.

Step 6
Hold the MSP SSD in front of slot 2 and push it in gently until it is seated.

Do not switch the two SSDs. The MSP must be installed in slot 2. If you remove it and install it in slot 1, all stored file capture data are lost.

Step 7
Tighten the captive screws on either side of the SSD.

Step 8
Check the SSD LED to make sure the SSD is operative. See Front Panel LEDs for a description of the SSD LEDs.

Remove and Replace the Power Supply Module

You can remove and replace the power supply module in the Firepower 2130 and 2140 (the Firepower 2110 and 2120 have one fixed AC power supply module). Power supply modules are hot-swappable. You can remove and replace them while the system is running.

Safety Warnings

Take note of the following power and component removal safety warnings:

Statement 1003—DC Power Disconnection
To reduce risk of electric shock or personal injury, disconnect DC power before removing or replacing components or performing upgrades.

Statement 1005—Circuit Breaker
This product relies on the building's installation for short-circuit (overcurrent) protection. To reduce risk of electric shock or fire, ensure that the protective device is rated not greater than:
AC: 20A
DC: 40A

Statement 1017—Restricted Area
This unit is intended for installation in restricted access areas. Only skilled, instructed, or qualified personnel can access a restricted access area.

Statement 1022—Disconnect Device
To reduce the risk of electric shock and fire, a readily accessible disconnect device must be incorporated in the fixed wiring.

Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.

Statement 1029—Blank Faceplates and Cover Panels
Blank faceplates and cover panels serve three important functions: they reduce the risk of electric shock and fire, they contain electromagnetic interference (EMI) that might disrupt other equipment, and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place.

Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1046—Installing or Replacing the Unit
To reduce risk of electric shock, when installing or replacing the unit, the ground connection must always be made first and disconnected last.
If your unit has modules, secure them with the provided screws.

Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of a skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Procedure

Step 1
Unplug the power supply cable before removing the power supply module. You cannot disengage the power supply module latch without first removing the cable.

Step 2
To remove a power supply module, face the back of the chassis and grasp the handle.

Step 3
Press the latch found on the right of the power supply to disengage the power supply.Step 4
Place your other hand under the power supply module to support it while you slide it out of the chassis.


Figure 3: Remove the Power Supply Module

1. Power supply module 1
2. Power supply module handle
3. Power supply module latch
4. Power supply module 2

If the slot is to remain empty, install a blank faceplate to ensure proper airflow and to keep dust out of the chassis; otherwise, install another power supply module.

Step 5
To replace a power supply module, hold the power supply module with both hands and slide it into the power supply module bay.

Step 6
Push in the power supply module gently until you hear the latch engage and it is seated.

Step 7
Plug in the power supply cable.

Step 8
Check the LED on the power supply to make sure the power supply is operative. See Power Supply Modules.

Connect the DC Power Supply Module

For the Firepower 2130 and 2140 (the Firepower 2110 and 2120 do not support DC power), the input connector and plug must be UL-recognized under UL 486 for field wiring. The connection polarity is from left to right: negative (–), positive (+), and ground.

Use the handle on the power supply for installation and removal. You must support the module with one hand because of its length.


Figure 4: Firepower 2100 DC Power Supply Module

1. Handle
2. FAIL and OK LEDs
3. DC power connector
4. Ejector latch

Safety Warnings

Take note of the following warnings:

Statement 1003—DC Power Disconnection
To reduce risk of electric shock or personal injury, disconnect DC power before removing or replacing components or performing upgrades.

Statement 1005—Circuit Breaker
This product relies on the building's installation for short-circuit (overcurrent) protection. To reduce risk of electric shock or fire, ensure that the protective device is rated not greater than:
AC: 20A
DC: 40A

Statement 1017—Restricted Area
This unit is intended for installation in restricted access areas. Only skilled, instructed, or qualified personnel can access a restricted access area.

Statement 1022—Disconnect Device
To reduce the risk of electric shock and fire, a readily accessible disconnect device must be incorporated in the fixed wiring.

Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.

Statement 1029—Blank Faceplates and Cover Panels
Blank faceplates and cover panels serve three important functions: they reduce the risk of electric shock and fire, they contain electromagnetic interference (EMI) that might disrupt other equipment, and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place.

Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1046—Installing or Replacing the Unit
To reduce risk of electric shock, when installing or replacing the unit, the ground connection must always be made first and disconnected last.
If your unit has modules, secure them with the provided screws.

Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of a skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Before you begin

• The color coding of the DC input power supply leads depends on the color coding of the DC power source at your site. Make sure that the lead color coding you choose for the DC input power supply matches the lead color coding used at the DC power source and verify that the power source is connected to the negative (–) terminal and to the positive (+) terminal on the power supply.
• Make sure that the chassis ground is connected on the chassis before you begin installing the DC power supply. See Ground the Chassis for the procedure.

Procedure

Step 1
Verify that the power is off to the DC circuit on the power supply module that you are installing.

Step 2
While supporting the power supply module with one hand, insert the power supply module into the power supply bay and gently push it in. See the figure above for the location of the handle.

Step 3
Use a wire-stripping tool to strip each of the 2 wires coming from the DC input power source. Strip the wires to approximately 0.39 inch (10 mm) + 0.02 inch (0.5 mm). We recommend you use 14 AWG insulated wire.

Note
Do not strip more than the recommended length of wire because doing so could leave the wire exposed from the terminal block.

Figure 5: Stripped DC Input Source Wire

1. Strip the wires to approximately 0.39 inch (10 mm) + 0.02 inch (0.5 mm)

Step
Insert the exposed wire into the terminal block. Make sure that you cannot see any wire lead outside the plastic cover. Only wires with insulation should extend from the terminal block.

Step 5
Use a screwdriver to tighten the terminal block captive screws.

Figure 6: Tighten the Terminal Block Captive Screws

1. Negative (-) lead wire
2. Positive (+) lead wire

Do not over torque the terminal block captive screws. Make sure that the connection is snug, but the wire is not crushed. Verify by tugging lightly on each wire to make sure that they do not move.

Step 6
Repeat these steps for the remaining DC input power source wire as applicable.

Step 7
Use a tie wrap to secure the wires to the rack, so that the wires are not pulled from the terminal block.

Step 8
Set the DC disconnect switch in the circuit to ON. In a system with multiple power supplies, connect each power supply to a separate DC power source. In the event of a power source failure, if the second source is still available, it can maintain system operation.

Step 9
Verify power supply operation by checking the power supply LED on the front of the chassis. See Front Panel LEDs for the LED values.

Secure the Power Cord on the Power Supply Module

To secure the power supply module against accidental removal and thus prevent disrupting system performance, use the tie wrap and clamp provided in the accessories kit that ships with your Firepower 2100.

Safety Warnings

Take note of the following component replacement safety warnings:

Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit
.

Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of a skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Procedure

Step 1
Attach the clamp to the tie wrap by holding the clamp with the loop side on the bottom and sliding the tie wrap through the box-shaped channel above the clamp (see the following figure).
One side of the tie wrap has evenly spaced ridges and the other is smooth. Be sure the ridged side is face up and that you slide it through the open side of the channel. You will hear a click as the tie slides through—it moves in one direction only. To remove the tie wrap from the clamp, push the lever on the closed side of the box-shaped channel and slide out the tie wrap.

Figure 7: Tie Wrap Through the Box Channel of the Clamp

1. Box channel
2. Tie wrap

Step 2
Attach the clamp to the power supply module:

1. Locate the hexagonal ventilation hole on the power supply module at the center of the plug just below the power connector body (see the following figures).
2. Plug the snapping portion of the tie wrap into the hexagonal hole.
3. With the clamp side facing up, push the tie wrap in until it is fully engaged.

Make sure you have the correct location because you cannot remove the tie wrap from the power supply module once you have installed it without damaging the tie wrap.

Figure 8: Connect the Tie Wrap

1. Tie wrap
2. Hexagonal hole

Step 3
Secure the clamp:

1. Plug in the power supply power cord and wrap the clamp around the over mold portion of the power cord.
2. Squeeze the clamp tabs together so that the annular teeth engage with the mate on the clamp.
3. Make sure the clamp fits snugly into the over mold.
4. Adjust the clamp position on the tie wrap so that the clamp is tight against the front of the over mold and the power cord cannot be removed by lightly pulling on it.
   
   Figure 9: Clamp on Over Mold of Power Cord

1. Power cord
2. Power cord over mold
3. Tie clamp annular teeth
4. Direction to squeeze the clamp tabs
5. Clamp release tabs

Step 4
If you need to remove the power cord, push the release tab on the clamp to force the annular clamp teeth to disengage and the clamp opens up. You can then remove the clamp from the power cord.

Remove and Replace the Fan Tray

You can remove and replace the fan tray while the Firepower 2130 and 2140 are running (the Firepower 2110 and 2120 have two fixed fans). The air flow moves from front to back. All fan modules are integrated in a single fan tray.

Removing the fan tray exposes the appliance to no airflow. Replace the fan tray within 30 seconds after removal to avoid overheating the appliance. If you wait longer than 30 seconds, the appliance may power off automatically to prevent damage to components. The appliance does not power up and boot properly if the fan tray is missing.

Safety Warnings

Take note of the following component replacement safety warnings:

Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove all connections to de-energize the unit.

Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment technology and understands potential hazards when working with equipment.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of a skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment. See statement 1089 for the definition of an instructed or skilled person.
There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Procedure

Step 1
Have the fan tray ready for immediate insertion and near the appliance so that you can reinstall the fan tray within 30 seconds.

Step 2
To remove a fan tray, face the rear of the chassis, and loosen the two captive screws on the fan tray.

Step 3
Pull the fan tray out of the chassis.

Figure 10: Remove the Fan Tray

Step 4
To replace a fan tray, hold the fan tray in front of the fan slot.

Step 5
Push the fan tray into the chassis until it is properly seated, and tighten the captive screws.
If the system is powered on, listen for the fans. You should immediately hear the fans operating. If you do not hear the fans, make sure the fan tray is inserted completely into the chassis and the faceplate is flush with the outside surface of the chassis.

Step 6
Verify that the fan is operational by checking the fan tray LED. See Front Panel LEDs for a description of the fan LEDs.

Install the FIPS Opacity Shield in a Two-Post Rack

Note
Because the FIPS opacity shield covers the serial number on the chassis, the Crypto Officer (CO) should copy the serial number and store it in a secure place. The serial number is needed when you call Cisco TAC.

This procedure should be performed only by the CO.

You need the following to install the FIPS opacity shield:

• #1 Phillips screwdriver
• The following items from the FIPS kit:
  • One FIPS opacity shield
  • Four 8-32 x 0.375-inch Phillips screws used to attach the FIPS opacity shield to the cable management brackets
  • Seven Tamper Evidence Labels (TEL)

Note
The TELs are made of a special thin gauge vinyl with self-adhesive backing.
Once the CO attaches them on the chassis, any attempt to open the chassis damages the TELs or the chassis cover. Because the TELs have non-repeated serial numbers, the CO can inspect them for damage and compare them against the applied serial numbers to verify whether the chassis has been tampered with. TELs with curled corners, rips, and slices indicate tampering. The word "FIPS" or "OPEN" may appear if the label has been peeled back.

Procedure

Step 1
Copy the serial number and store in a secure place. To find the serial number, see Serial Number Location.

Step 2
Perform the steps described in Rack-Mount the Chassis Using Brackets including installing the cable management bracket (Step 2).

Step 3
Connect the cables to the ports. Make sure that the cables have enough slack to route them through the cable mounting brackets.

Note
If you are installing the FIPS opacity shield after the initial product installation, the cables are connected. If the attached cables do not have enough slack to route them through the cable mounting brackets (as shown in the figure below), you will have to turn the power off on the appliance, remove the cables, route the cables through the cable mounting brackets, reattach the cables, and continue with Step 5 below.

Note
When you toggle the power switch from ON to OFF, it takes several seconds for the system to power down. Do not remove the power cable until the power LED is off. After removing power from the chassis either by moving the power switch to OFF or unplugging the power cord, wait at least 10 seconds before turning power back ON.

Step 4
Route the cables through the openings in the cable management brackets as shown in the figure below.

Step 5
Attach the FIPS opacity shield to the cable management brackets using the four 8-32 x 0.375-inch Phillips screws provided in the FIPS kit as shown in the figure below.

Figure 11: Route the Cables and Attach the Screws

1. FIPS opacity shield
2. 8-32 x 0.375-inch Phillips screws (two per side)
3. Cable management bracket

Step 6
Before you attach the TELs, clean the chassis and FIPS cover of any grease, dirt, or oil with alcohol-based cleaning pads

Step 7
Attach the seven TELs. See the figure below for the correct placement. Allow the TELs to cure for a minimum of 12 hours.\

Any deviation in the placement of the TELs means the chassis is not in FIPS mode.

Figure 12: TELs Placement on the Chassis

1. TEL 1 on the left side and top of chassis
2. TEL 2 on the right side and top of chassis
3. TEL 3 on the top and back of chassis
4. TEL 4 across the FIPS shield and the chassis (towards the left of the chassis)
5. TEL 5 across the FIPS shield and the chassis (towards the right of the chassis)
6. TEL 6 on the bottom of the chassis towards the left side of the chassis
7. TEL 7 on the bottom of the chassis towards the right side of the chassis

Step 8
Attach the power cable to the chassis and connect it to an electrical outlet.

Step 9
Press the power switch on the rear panel.

Step 10
Check the power LED on the front panel. See Front Panel LEDs for a description of the power LED. Solid green indicates that the chassis is powered on.

Step 11
Place the chassis in FIPS mode.
See the following procedures for how to place the chassis in FIPS mode:

• ASA in Platform Mode
• ASA in Appliance mode
• FTD managed by FMC

What to do next

See the Cisco Firepower 2100 Getting Started Guide for your operating system for further configuration information.

Install the FIPS Opacity Shield in a Four-Post Rack

This procedure should be performed only by the Crypto Officer (CO).

Note
Because the FIPS opacity shield covers the serial number on the chassis, the CO should copy the serial number and store it in a secure place. The serial number is needed when you call Cisco TAC.

You need the following to install the FIPS opacity shield:

• #1 Phillips screwdriver
• The following items from the FIPS kit:
  • One FIPS opacity shield
  • Four 8-32 x 0.375-inch-Phillips screws used to attach the FIPS opacity shield to the cable management brackets
  • Seven Tamper Evidence Labels (TEL)

Note
The TELs are made of a special thin gauge vinyl with self-adhesive backing.
Once the CO attaches them on the chassis, any attempt to open the chassis damages the TELs or the chassis cover. Because the TELs have non-repeated serial numbers, the CO can inspect them for damage and compare them against the applied serial numbers to verify whether the chassis has been tampered with. TELs with curled corners, rips, and slices indicate tampering. The word "FIPS" or "OPEN" may appear if the label has been peeled back.

Procedure

Step 1
Copy the serial number and store it in a secure place. To find the serial number, see Serial Number Location.

Step 2
Perform the steps described in Rack-Mount the Chassis Using Slide Rails.

Step 3
Connect the cables to the ports. Make sure the cables have enough slack to route them through the cable mounting brackets.

Note
If you are installing the FIPS opacity shield after the initial product installation, the cables are connected. If the attached cables do not have enough slack to route them through the cable mounting brackets (as shown below), you will have to turn the power off on the appliance, remove the cables, route the cables through the cable mounting brackets, reattach the cables, and continue with Step 5 below.

Note
When you toggle the power switch from ON to OFF, it takes several seconds for the system to power down. Do not remove the power cable until the power LED is off. After removing power from the chassis either by moving the power switch to OFF or unplugging the power cord, wait at least 10 seconds before turning power back ON.

Step 4
Route the cables through the openings in the cable management brackets (see figure below).

Step 5
Attach the FIPS opacity shield to the cable management brackets using the four 8-32 x 0.375 inch Phillips screws provided in the FIPS kit.

Figure 13: Route the Cables and Attach the Screws

1. FIPS opacity shield
2. 8-32 x 0.375 inch-Phillips screws (two per side)
3. Cable management bracket

Step 6
Before you attach the TELs, clean the chassis of any grease, dirt, or oil with alcohol-based cleaning pads.

Step 7
Attach the seven TELs. See the figure below for the correct placement. Allow the TELs to cure for a minimum of 12 hours.

Any deviation in the placement of the TELs means the chassis is not in FIPS mode.

Figure 14: TELs Placement on the Chassis

1. TEL 1 on the left side and top of chassis
2. TEL 2 on the right side and top of chassis
3. TEL 3 on the top and back of chassis
4. TEL 4 across the FIPS shield and the chassis (towards the left of the chassis)
5. TEL 5 across the FIPS shield and the chassis (towards the right of the chassis)
6. TEL 6 on the bottom of the chassis towards the left side of the chassis
7. TEL 7 on the bottom of the chassis towards the right side of the chassis

Step 8
Attach the power cable to the chassis and connect it to an electrical outlet.

Step 9
Press the power switch on the rear panel.

Step 10
Check the power LED on the front panel. See Front Panel LEDs for a description of the power LED. Solid green indicates that the chassis is powered on.

Step 11
Place the chassis in FIPS mode

See the following procedures for how to place the chassis in FIPS mode:

• ASA in Platform Mode
• ASA in Appliance mode
• FTD managed by FMC

What to do next

See the Cisco Firepower 2100 Getting Started Guide for your operating system for further configuration information.

Documents / Resources

References

• Cisco Firepower 2100 Getting Started Guide - Cisco

Download manual

Here you can download full pdf version of manual, it may contain additional safety instructions, warranty information, FCC rules, etc.

Download Cisco Firepower 2130 / 2140 / 2120 / 2110 Manual