Cisco Firepower 2120 Manual
Cisco Firepower 2100 Series Hardware Installation Guide
First Published: 2017-05-25
Last Modified: 2017-06-20
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2017 Cisco Systems, Inc. All rights reserved.
CONTENTS
CHAPTER 1
Overview 1
Cisco Firepower 2100 Series Features 1
Deployment Options 3
Package Contents 4
Serial Number Location 6
Front Panel 6
Front Panel LEDs 9
Rear Panel 14
Network Modules 15
Power Supply Modules 17
Fans 20
SSDs 20
Supported SFP/SFP+ Transceivers 20
Hardware Specifications 23
CHAPTER 2
Installation Preparation 27
Installation Notes and Warnings 27
Safety Recommendations 30
Maintain Safety with Electricity 30
Prevent Electrostatic Discharge Damage 31
Site Environment 31
Site Considerations 31
Power Supply Considerations 31
Equipment Rack Configuration Considerations 32
CHAPTER 3
Mount and Connect 33
Rack-Mount the Chassis 33
Ground the Chassis 38
Cisco Firepower 2100 Series Hardware Installation Guide
iii
Connect Cables, Turn on Power, and Verify Connectivity 39
CHAPTER 4
Maintenance and Upgrades 43
Remove and Replace the Network Module 43
Remove and Replace the SSD 45
Remove and Replace the Power Supply Module 46
Connect the DC Power Supply Module 48
Secure the Power Cord on the Power Supply Module 51
Remove and Replace the Fan Tray 54
Install the Optional Cable Management Brackets 55
Cisco Firepower 2100 Series Hardware Installation Guide
iv
Contents
CHAPTER 1
Overview
This chapter describes the hardware features of the Cisco Firepower 2100 security appliance, and contains
the following sections:
•Cisco Firepower 2100 Series Features, page 1
•Deployment Options, page 3
•Package Contents, page 4
•Serial Number Location, page 6
•Front Panel, page 6
•Front Panel LEDs, page 9
•Rear Panel, page 14
•Network Modules, page 15
•Power Supply Modules, page 17
•Fans, page 20
•SSDs, page 20
•Supported SFP/SFP+ Transceivers, page 20
•Hardware Specifications, page 23
Cisco Firepower 2100 Series Features
The Cisco Firepower 2100 series security appliance is a standalone modular security services platform. The
series includes the Firepower 2110, 2120, 2130, and 2140.
Figure 1: Firepower 2110/2120 and Firepower 2130/2140
Cisco Firepower 2100 Series Hardware Installation Guide
1
The following table lists the features for the Firepower 2100 series.
Table 1: Cisco Firepower 2100 Series Features
2140213021202110Feature
1 RU
Fits standard 19-in (48.3-cm) square-hole rack.
Form factor
Yes
4-post EIA-310-D rack
(Optional) 2-two-post mount brackets
Yes
2 two-post mount brackets
(Optional) 4-post EIA-310-D rack
Rack mountable
Front to rear (cold aisle to hot aisle)Airflow
Single 16-core at
1.3G
Single 8-core at
2.0G
Single 6-core at
1.9G
Single 4-core at
1.8G
Intel x86 processor
64 GB32 GB16 GBIntel x86 memory
Single 16-core at
1.8G
Single 12-core at
1.2G
Single 8-core at
1.2G
Single 6-core at
1.2G
Cavium Network
Processor Unit
(NPU)
16G8GCavium NPU RAM
8G (nominal)Flash
2416Maximum number
of interfaces
1 Gigabit Ethernet (10M/100M/1G Base-T)Management port
RJ-45 serial portConsole port
Type A 2.0 (500mA)USB port
12 fixed RJ-45 1G/100M/10M ports
Named Ethernet 1/1 through 1/12
Network ports
4 fixed 1G/10G SFP+ ports4 fixed 1G SFP portsSmall Form-Factor
Pluggable (SFP)
ports
Yes
Displays serial number.
Pull-out label card
YesGrounding lug
Cisco Firepower 2100 Series Hardware Installation Guide
2
Overview
Cisco Firepower 2100 Series Features
2140213021202110Feature
YesLocator beacon
YesPower switch
1 network module slot
NOT hot swappable
NoNetwork modules
2 power supply slots
Ships with two
400W AC power
supplies
Hot swappable
2 power supply slots
Ships with one
400W AC power
supply
Hot swappable
1 fixed AC power supply moduleAC power supply
Yes (optional)NoDC power supply
YesNoRedundant power
1 hot-swappable fan tray with 4 fans4 fixed fansFan
Two SSD slots (200GB )
Ships with one 200GB SSD installed in
slot 1.
Two SSD slots (100GB )
Ships with one 100GB SSD installed in
slot 1.
Storage
Yes
You can install the MSP in the SSD slot 2.
Malware Storage
Pack (MSP)
Deployment Options
You can deploy the Firepower 2100 in the following ways:
•As a firewall:
◦At the enterprise Internet edge deployed in a high availability configuration
◦At branch offices in either an HA pair or standalone
•As a device that provides additional application control, URL filtering, or IPS/threat-centric capabilities:
◦Behind an enterprise Internet edge firewall in an inline in a transparent bump-in-the-wire
configuration or as a standalone (requires hardware fail open network module support)
◦Deployed passively off a SPAN port on a switch or a tap on a network, or standalone
•As a VPN device:
◦For remote access VPN
Cisco Firepower 2100 Series Hardware Installation Guide
3
Overview
Deployment Options
◦For site-to-site VPN
Package Contents
The following illustration shows the package contents for the Firepower 2110 and 2120. The contents are
subject to change and your exact contents will contain additional or fewer items depending on whether you
order the optional parts.
Figure 2: Firepower 2110 and 2120 Package Contents
Blue console cable PC terminal
adapter
2Firepower 2110 or 2120 chassis1
SFP transceiver
(Optional; in package if ordered)
4One power cord
(country-specific)
3
One ground lug kit
#6 AWG lug, two 10-32 x .38"
screws
62 rack-mount brackets and
screws:
•Six 8-32, 0.281#
•Four 12-24, 0.75#
•Four 10-32, 0.75#
•Four M6, 19mm
5
Useful Links Cisco Firepower 2100
Series
8Two cable management brackets
(Optional; in package if ordered)
7
Cisco Firepower 2100 Series Hardware Installation Guide
4
Overview
Package Contents
The following illustration shows the package contents for the Firepower 2130 and 2140. The contents are
subject to change and your exact contents will contain additional or fewer items depending on whether you
order the optional parts.
Figure 3: Firepower 2130 and 2140 Package Contents
Blue console cable PC terminal
adapter
2Firepower 2130 or 2140 chassis1
SFP transceiver
(Optional; in package if ordered)
4One or two power cords
(country-specific)
3
Six 8-32 x .25" slide rail locking
bracket screws
6Slide rail kit
Left and right slide rails, two
M3X6mm wafer head screws
5
One ground lug kit
#6 AWG lug, two 10-32 x .38"
screws
8Two slide rail locking brackets7
Useful Links Cisco Firepower 2100
Series
10Cable management bracket kit
Two cable management brackets
and four 8-32 x 0.375" screws
(Optional; in package if ordered)
9
Power supply module tie wrap
and clamp
11
Cisco Firepower 2100 Series Hardware Installation Guide
5
Overview
Package Contents
Serial Number Location
The serial number for the Firepower 2100 series chassis is located on the pull-out label card on the front panel.
Figure 4: Serial Number on 2100 Chassis
Front Panel
The following figure shows the front panel of the Firepower 2110 and 2120 security appliances. See Front
Panel LEDs, on page 9 for a description of the LEDs.
Figure 5: Firepower 2110 and 2120 Front Panel
Gigabit Ethernet management port
Management 0 (also referred to as
Management 1/1 and Diagnostic 1/1)
2Power LED1
Cisco Firepower 2100 Series Hardware Installation Guide
6
Overview
Serial Number Location
Este manual sirve para los siguientes modelos
3
Tabla de contenidos
Otros manuales de Cortafuegos de Cisco
Cisco
Cisco ASA 5508-X Manual de usuario
Cisco
Cisco ASA 5585-X Manual de usuario
Cisco
Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario
Cisco
Cisco RV110W Manual de instrucciones
Cisco
Cisco RV120W Manual de usuario
Cisco
Cisco 5510 - ASA SSL / IPsec VPN Edition Manual de usuario
Cisco
Cisco 380 Series Manual
Cisco
Cisco CSA 90 Series Manual del producto
Cisco
Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario
Cisco
Cisco Firepower 1600 Manual
Cisco
Cisco MX400 Manual de usuario
Cisco
Cisco PIX 506E - Security Appliance Manual de usuario
Cisco
Cisco LightStream 1010 Manual de usuario
Cisco
Cisco Small Business RV215W Manual de instrucciones
Cisco
Cisco LightStream 1010 Instrucciones de instalación
Cisco
Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario
Cisco
Cisco M190 Manual de usuario
Cisco
Cisco PIX 506 - Firewall Manual de usuario
Cisco
Cisco Firepower 4100 Series Manual de instalación y operación
Cisco
Cisco RV120W Manual de instrucciones
Manuales populares de Cortafuegos de otras marcas
H3C
H3C SecPath F5000-AI-15 Manual de usuario
Nexcom
Nexcom DNA 1150 Manual de usuario
Fortinet
Fortinet FortiGate-60 series Manual de usuario
Draytek
Draytek Vigor2860 Series Manual de usuario
Lanner electronics
Lanner electronics FW-7650 Series Manual de usuario
Swisscom
Swisscom Internet Backup Manual de usuario
