Cisco 3110 Manual

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation

Guide

First Published: 2022-04-06

Last Modified: 2022-06-28

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

The documentation set for this product strives to use bias-free language. For purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on

age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that

is hardcoded in the user interfaces of the product software, language used based on standards documentation, or language that is used by a referenced third-party product.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Overview 1

CHAPTER 1

Features 1

Deployment Options 4

Package Contents 5

Serial Number and QR Codes 6

Front Panel 8

Front Panel LEDs 11

Rear Panel 13

1/10/25-Gb Network Module 15

40-Gb Network Module 17

Hardware Bypass Network Modules 19

10/100/1000Base-T Network Module with Hardware Bypass 20

1-Gb SX/10-Gb SR/10-Gb LR/25-Gb SR/25-Gb LR Network Module with Hardware Bypass 22

Power Supply Module 24

Dual Fan Modules 26

SSDs 27

Supported SFP/SFP+/QSFP+ Transceivers 28

Hardware Specifications 32

Product ID Numbers 33

Power Cord Specifications 35

Installation Preparation 45

CHAPTER 2

Installation Warnings 45

Safety Recommendations 47

Maintain Safety with Electricity 48

Prevent ESD Damage 49

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide

iii

Site Environment 49

Site Considerations 49

Power Supply Considerations 49

Rack Configuration Considerations 50

Rack-Mount the Chassis 51

CHAPTER 3

Unpack and Inspect the Chassis 51

Rack-Mount the Chassis Using Brackets 52

Rack-Mount the Chassis Using Slide Rails 54

Ground the Chassis 61

Installation, Maintenance, and Upgrade 65

CHAPTER 4

Install, Remove, and Replace the Network Module 65

Remove and Replace the SSD 67

Remove and Replace the Dual Fan Module 70

Remove and Replace the Power Supply Module 71

Connect the DC Power Supply Module 74

Secure the Power Cord on the Power Supply Module 77

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide

Contents

CHAPTER 1

Overview

•Features, on page 1

•Deployment Options, on page 4

•Package Contents, on page 5

•Serial Number and QR Codes, on page 6

•Front Panel, on page 8

•Front Panel LEDs, on page 11

•Rear Panel, on page 13

•1/10/25-Gb Network Module, on page 15

•40-Gb Network Module, on page 17

•Hardware Bypass Network Modules, on page 19

•10/100/1000Base-T Network Module with Hardware Bypass, on page 20

•1-Gb SX/10-Gb SR/10-Gb LR/25-Gb SR/25-Gb LR Network Module with Hardware Bypass, on page

•Power Supply Module, on page 24

•Dual Fan Modules, on page 26

•SSDs, on page 27

•Supported SFP/SFP+/QSFP+ Transceivers , on page 28

•Hardware Specifications, on page 32

•Product ID Numbers, on page 33

•Power Cord Specifications, on page 35

Features

The Cisco Secure Firewall 3100 is a standalone modular security services platform that includes the Secure

Firewall 3110, 3120, 3130, and 3140. See Product ID Numbers, on page 33 for a list of the product IDs (PIDs)

associated with the 3100 series.

The Secure Firewall 3100 supports Cisco Firepower Threat Defense and Cisco ASA software. See the Cisco

Secure Firewall Threat Defense Compatibility Guide and the Cisco Secure Firewall ASA Compatibility guide,

which provide Cisco software and hardware compatibility, including operating system and hosting environment

requirements, for each supported version.

The following figure shows the Secure Firewall 3100.

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide

Figure 1: Secure Firewall 3100

The following table lists the features for the Secure Firewall 3100.

Table 1: Secure Firewall 3100 Features

3140313031203110Feature

1 RU

Fits a standard 19-inch (48.3-cm) square-hole rack

Form factor

(Optional) Two 2-post mount brackets and/or two slide rails

4-post Electronic Industries Association (EIA)-310-D rack

We recommend that you order the slide rails for your Secure Firewall 3100.

Note

Rack mount

Front to rear (I/O side to non-I/O side)

Cold aisle to hot aisle

Airflow

AMD 7452AMD 7352AMD 7282

AMD 7272Processor

32241612Core count

2.35 GHz2.3 GHz2.8 GHz2.9 GHzCore clock

4 x 64 GB4 x 32 GB2 x 64 GB2 x 32 GBSystem memory

One 1/10-Gb small form-factor pluggable (SFP) portManagement port

One RJ-45 serial portConsole port

USB 3.1 Type A (900 mA) portUSB port

8 SFP fixed ports and 8 copper RJ-45 ports

Named Ethernet 1/1 through 1/16

Network ports

Eight 1/10/25-Gb SFP ports

Four 40-Gb QSFP ports

Network module

ports

One (hot-swappable)

Although the hardware supports hot-swapping, the software does not. You

must power off the chassis when removing/replacing network modules.

Note

Network module

slots

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide

Overview

Features

3140313031203110Feature

• 8-port 1Gb/10Gb/25Gb SFP+

(FPR3K-XNM-8X25G)

• 8-port 1Gb/10Gb SFP+

(FPR3K-XNM-8X10G)

• 4-port 40-Gb QSFP+

(FPR3K-XNM-4X40G)

• 6-port 1-Gb SFP SX multimode

hardware

bypass(FPR3K-XNM-6X1SXF)

• 6-port 10-Gb SFP SR multimode

hardware bypass

(FPR3K-XNM-6X10SRF)

• 6-port 10-Gb SFP LR single mode

hardware bypass

(FPR3K-XNM-6X10LRF)

• 6-port 25-Gb SFP SR multimode

hardware bypass

(FPR3K-XNM-6X25SRF)

• 6-port 25-Gb SFP LR single mode

hardware bypass

(FPR3K-XNM-6X25LRF)

• 8-port 10/100/1000Base-T hardware

bypass (FPR3K-XNM-8X1GF)

• 8-port 1Gb/10Gb SFP+

(FPR3K-XNM-8X10G)

• 6-port 1-Gb SFP SX multimode

hardware bypass

(FPR3K-XNM-6X1SXF)

• 6-port 10-Gb SFP SR multimode

hardware bypass

(FPR3K-XNM-6X10SRF)

• 6-port 10-Gb SFP LR single mode

hardware bypass

(FPR3K-XNM-6X10LRF)

• 6-port 25-Gb SFP SR multimode

hardware bypass

(FPR3K-XNM-6X25SRF)

• 6-port 25-Gb SFP LR single mode

hardware bypass

(FPR3K-XNM-6X25LRF)

• 8-port 10/100/1000Base-T hardware

bypass (FPR3K-XNM-8X1GF)

Network modules

Two power supply slots

Ships with two 400-W AC power supply

modules

Hot-swappable

Two power supply slots

Ships with one 400-W AC power supply

module

Hot-swappable

AC power supply

Yes (optional)

Hot-swappable

DC power supply

Yes

Ships with two power supplies.

Note

Yes, if you order an extra power

supply.

Note

Redundant power

Two dual fan module slots (3 + 1)

The dual fan modules are hot-swappable.

Note

Fans

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide

Overview

Features

3140313031203110Feature

Two Nonvolatile Memory Express (NVMe) SSD slots

Ships with one 900-GB SSD installed in slot 1. You can order a second RAID1 SSD

for slot 2. The RAID1 SSD is preconfigured for RAID1.

Slot 2 is reserved for the optional software RAID1 configuration.

Note

Hot-swapping is supported with 2 SSDs. However, you must enter a CLI

command to remove one disk from the RAID before hot swapping. See the

CLI configuration guide for your software for the procedure.

Note

Storage

Displays the serial number and a QR code that points to the low touch provisioning

(LTP) guide.

Pullout asset card

On rear panelGrounding lug

On rear panelPower switch

Resets the system to factory default without requiring serial console access

The reset button is recessed. Press with a pin and hold longer than 5 seconds

to set the system back to the factory default.

Note

Reset button

Deployment Options

Here are some examples of how you can deploy the Secure Firewall 3100:

• As a firewall:

• At the enterprise internet edge in a redundant configuration

• At branch offices in either a high availability pair or standalone

• At data centers in a high availability pair or clustered, which serves the needs of smaller enterprises

•As a device that provides additional application control, URL filtering, or IPS/threat-centered capabilities:

• Behind an enterprise internet edge firewall in an inline configuration or as a standalone (requires

hardware fail-open network module support)

• Deployed passively off a SPAN port on a switch or a tap on a network, or standalone

• As a branch native SD-WAN solution that offers remote deployment and is managed over a 4G LTE

• As a VPN device:

• For remote access VPN

• For site-to-site VPN

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide

Overview

Deployment Options

Package Contents

The following figure shows the package contents for the Secure Firewall 3100. The contents are subject to

change and your exact contents contain additional or fewer items depending on whether you order the optional

parts. See Product ID Numbers for a list of PIDs associated with the package contents.

There are two sets of four screws that you can use to secure the chassis to your rack. Chose the screws that

fit your rack.

Note

Figure 2: Secure Firewall 3100 Package Contents

Console cable RJ-45 to DB-9 (part number

72-3383-01)

2Secure Firewall 3100 chassis1

SFP transceiver

(Optional; in package if ordered)

4One or two power cords (country-specific)

See Power Cord Specifications, on page 35 for

a list of supported power cords.

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide

Overview

Package Contents

Cable management bracket kit (part number

69-100376-01)

• Two cable management brackets (part

number 700-128334-01)

• Four 8-32 x 0.375-inch Phillips screws (part

number 48-2696-01)

(Optional; in package if ordered)

6One ground lug kit (part number 69-100359-01)

• One #6 AWG, 90 degree, #10 post ground

lug (part number 32-0608-01)

• Two 10-32 x 0.38-inch Phillips screws (part

number 48-0700-01)

Rack-mount bracket kit (53-101510-02):

• Two rack-mount brackets (700-127244-01)

• Six 8-32 x 0.375-inch Phillips screws (part

number 48-2286) for securing the brackets

to the chassis

• Four 10-32 x 0.75-inch Phillips screws (part

number 48-0441-01) for securing the chassis

to your rack

• Four 12-24 x 0.75-inch Phillips screws (part

number 48-0440-01) for securing the chassis

to your rack

(Optional; in package if ordered)

8Two slide rails (800-110033-01)

Slide rail accessories kit (53-101509-02):

•Two slide rail locking brackets (part number

700-121935-01)

• Six 8-32 x 0.302-inch slide rail locking

bracket Phillips screws (part number

48-102184-01)

• Two M3 x 0.5 x 6-mm Phillips screws (part

number 48-101144-01)

(Optional; in package if ordered)

Two power supply module tie wraps and clamps

(part number 52-100162-01)

10Cisco Secure Firewall 3100

This document has a URL pointing to the

hardware installation guide, a URL pointing the

regulatory and safety guide, and a QR code and

URL pointing to the Getting Started Guide.

Serial Number and QR Codes

The pullout asset card on the front panel of your Secure Firewall 3100 chassis contains the model number,

serial number, and Low-Touch Provisioning (LTP) document QR code. The LTP document, Easy Deployment

Guide for 1000, 2100, or 3100 Series Cisco Secure Firewalls, explains how to use LTP to allow anyone to

connect a new Secure Firewall 3100 chassis to a network so that they can add the device to Cisco Defense

Orchestrator (CDO) and configure it remotely.

The compliance label on the bottom of the chassis (along with regulatory information) contains a QR code

that points to the Cisco Secure Firewall 3100 Getting Started Guide. The getting started guide explains how

to get the chassis cabled and running with your chosen operating system.

You can view additional model information on the compliance label located on the bottom of the chassis.

Note

Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide

Overview

Serial Number and QR Codes

Otros manuales para 3110

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Cortafuegos de Cisco

Cisco

Cisco Firepower 4100 Series Manual de instalación

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario

Cisco

Cisco PIX 501 Manual de usuario

Cisco

Cisco PIX 506E - Security Appliance Manual de usuario

Cisco

Cisco Firepower 3500 Documento técnico

Cisco

Cisco ASA 5512-X Manual de usuario

Cisco

Cisco LightStream 1010 Instrucciones de instalación

Cisco

Cisco M190 Manual de usuario

Cisco

Cisco Cisco ASA 5500 Series Manual de usuario

Cisco

Cisco 5510 - ASA SSL / IPsec VPN Edition Manual de usuario

Cisco

Cisco Firepower 4100 Series Manual de usuario

Cisco

Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Manual de usuario

Cisco

Cisco Firepower 1010 Manual

Cisco

Cisco ISA 3000 Manual de usuario

Cisco

Cisco Firepower 1010 Manual de usuario

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual

Cisco

Cisco amp threat grid Manual de usuario

Cisco

Cisco Cisco ASA Series Manual de usuario

Cisco

Cisco Meraki MX100 Manual de usuario

Cisco

Cisco RV110W Manual de usuario

Cisco

Cisco ASA 5585-X Manual de usuario

Cisco

Cisco C690 Manual de usuario

Cisco

Cisco LightStream 1010 Manual de usuario

Cisco

Cisco Firepower 1100 Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario