Cisco Firepower 2120 Manual

Cisco Firepower 2100 Series Hardware Installation Guide

First Published: 2017-05-25

Last Modified: 2017-06-20

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

CONTENTS

CHAPTER 1

Overview 1

Cisco Firepower 2100 Series Features 1

Deployment Options 3

Package Contents 4

Serial Number Location 6

Front Panel 6

Front Panel LEDs 9

Rear Panel 14

Network Modules 15

Power Supply Modules 17

Fans 20

SSDs 20

Supported SFP/SFP+ Transceivers 20

Hardware Specifications 23

CHAPTER 2

Installation Preparation 27

Installation Notes and Warnings 27

Safety Recommendations 30

Maintain Safety with Electricity 30

Prevent Electrostatic Discharge Damage 31

Site Environment 31

Site Considerations 31

Power Supply Considerations 31

Equipment Rack Configuration Considerations 32

CHAPTER 3

Mount and Connect 33

Rack-Mount the Chassis 33

Ground the Chassis 38

Cisco Firepower 2100 Series Hardware Installation Guide

iii

Connect Cables, Turn on Power, and Verify Connectivity 39

CHAPTER 4

Maintenance and Upgrades 43

Remove and Replace the Network Module 43

Remove and Replace the SSD 45

Remove and Replace the Power Supply Module 46

Connect the DC Power Supply Module 48

Secure the Power Cord on the Power Supply Module 51

Remove and Replace the Fan Tray 54

Install the Optional Cable Management Brackets 55

Cisco Firepower 2100 Series Hardware Installation Guide

Contents

CHAPTER 1

Overview

This chapter describes the hardware features of the Cisco Firepower 2100 security appliance, and contains

the following sections:

•Cisco Firepower 2100 Series Features, page 1

•Deployment Options, page 3

•Package Contents, page 4

•Serial Number Location, page 6

•Front Panel, page 6

•Front Panel LEDs, page 9

•Rear Panel, page 14

•Network Modules, page 15

•Power Supply Modules, page 17

•Fans, page 20

•SSDs, page 20

•Supported SFP/SFP+ Transceivers, page 20

•Hardware Specifications, page 23

Cisco Firepower 2100 Series Features

The Cisco Firepower 2100 series security appliance is a standalone modular security services platform. The

series includes the Firepower 2110, 2120, 2130, and 2140.

Figure 1: Firepower 2110/2120 and Firepower 2130/2140

Cisco Firepower 2100 Series Hardware Installation Guide

The following table lists the features for the Firepower 2100 series.

Table 1: Cisco Firepower 2100 Series Features

2140213021202110Feature

1 RU

Fits standard 19-in (48.3-cm) square-hole rack.

Form factor

Yes

4-post EIA-310-D rack

(Optional) 2-two-post mount brackets

Yes

2 two-post mount brackets

(Optional) 4-post EIA-310-D rack

Rack mountable

Front to rear (cold aisle to hot aisle)Airflow

Single 16-core at

1.3G

Single 8-core at

2.0G

Single 6-core at

1.9G

Single 4-core at

1.8G

Intel x86 processor

64 GB32 GB16 GBIntel x86 memory

Single 16-core at

1.8G

Single 12-core at

1.2G

Single 8-core at

1.2G

Single 6-core at

1.2G

Cavium Network

Processor Unit

(NPU)

16G8GCavium NPU RAM

8G (nominal)Flash

2416Maximum number

of interfaces

1 Gigabit Ethernet (10M/100M/1G Base-T)Management port

RJ-45 serial portConsole port

Type A 2.0 (500mA)USB port

12 fixed RJ-45 1G/100M/10M ports

Named Ethernet 1/1 through 1/12

Network ports

4 fixed 1G/10G SFP+ ports4 fixed 1G SFP portsSmall Form-Factor

Pluggable (SFP)

ports

Yes

Displays serial number.

Pull-out label card

YesGrounding lug

Cisco Firepower 2100 Series Hardware Installation Guide

Overview

Cisco Firepower 2100 Series Features

2140213021202110Feature

YesLocator beacon

YesPower switch

1 network module slot

NOT hot swappable

NoNetwork modules

2 power supply slots

Ships with two

400W AC power

supplies

Hot swappable

2 power supply slots

Ships with one

400W AC power

supply

Hot swappable

1 fixed AC power supply moduleAC power supply

Yes (optional)NoDC power supply

YesNoRedundant power

1 hot-swappable fan tray with 4 fans4 fixed fansFan

Two SSD slots (200GB )

Ships with one 200GB SSD installed in

slot 1.

Two SSD slots (100GB )

Ships with one 100GB SSD installed in

slot 1.

Storage

Yes

You can install the MSP in the SSD slot 2.

Malware Storage

Pack (MSP)

Deployment Options

You can deploy the Firepower 2100 in the following ways:

•As a firewall:

◦At the enterprise Internet edge deployed in a high availability configuration

◦At branch offices in either an HA pair or standalone

•As a device that provides additional application control, URL filtering, or IPS/threat-centric capabilities:

◦Behind an enterprise Internet edge firewall in an inline in a transparent bump-in-the-wire

configuration or as a standalone (requires hardware fail open network module support)

◦Deployed passively off a SPAN port on a switch or a tap on a network, or standalone

•As a VPN device:

◦For remote access VPN

Cisco Firepower 2100 Series Hardware Installation Guide

Overview

Deployment Options

◦For site-to-site VPN

Package Contents

The following illustration shows the package contents for the Firepower 2110 and 2120. The contents are

subject to change and your exact contents will contain additional or fewer items depending on whether you

order the optional parts.

Figure 2: Firepower 2110 and 2120 Package Contents

Blue console cable PC terminal

adapter

2Firepower 2110 or 2120 chassis1

SFP transceiver

(Optional; in package if ordered)

4One power cord

(country-specific)

One ground lug kit

#6 AWG lug, two 10-32 x .38"

screws

62 rack-mount brackets and

screws:

•Six 8-32, 0.281#

•Four 12-24, 0.75#

•Four 10-32, 0.75#

•Four M6, 19mm

Useful Links Cisco Firepower 2100

Series

8Two cable management brackets

(Optional; in package if ordered)

Cisco Firepower 2100 Series Hardware Installation Guide

Overview

Package Contents

The following illustration shows the package contents for the Firepower 2130 and 2140. The contents are

subject to change and your exact contents will contain additional or fewer items depending on whether you

order the optional parts.

Figure 3: Firepower 2130 and 2140 Package Contents

Blue console cable PC terminal

adapter

2Firepower 2130 or 2140 chassis1

SFP transceiver

(Optional; in package if ordered)

4One or two power cords

(country-specific)

Six 8-32 x .25" slide rail locking

bracket screws

6Slide rail kit

Left and right slide rails, two

M3X6mm wafer head screws

One ground lug kit

#6 AWG lug, two 10-32 x .38"

screws

8Two slide rail locking brackets7

Useful Links Cisco Firepower 2100

Series

10Cable management bracket kit

Two cable management brackets

and four 8-32 x 0.375" screws

(Optional; in package if ordered)

Power supply module tie wrap

and clamp

Cisco Firepower 2100 Series Hardware Installation Guide

Overview

Package Contents

Serial Number Location

The serial number for the Firepower 2100 series chassis is located on the pull-out label card on the front panel.

Figure 4: Serial Number on 2100 Chassis

Front Panel

The following figure shows the front panel of the Firepower 2110 and 2120 security appliances. See Front

Panel LEDs, on page 9 for a description of the LEDs.

Figure 5: Firepower 2110 and 2120 Front Panel

Gigabit Ethernet management port

Management 0 (also referred to as

Management 1/1 and Diagnostic 1/1)

2Power LED1

Cisco Firepower 2100 Series Hardware Installation Guide

Overview

Serial Number Location

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Cortafuegos de Cisco

Cisco

Cisco Cisco ASA Series Instrucciones de instalación

Cisco

Cisco ASA 5512-X Manual

Cisco

Cisco Meraki MX64W Manual de usuario

Cisco

Cisco Firepower 1100 Series Manual

Cisco

Cisco RV110W Manual de usuario

Cisco

Cisco 3100 Series Manual

Cisco

Cisco S195 Manual

Cisco

Cisco Firepower 7010, Firepower 7020, Firepower 7030, Firepower 7050, Firepower 7110, Firepower 7120, Firepower 7115, Firepower... Manual de usuario

Cisco

Cisco 881W - Integrated Services Router Wireless Manual de instrucciones

Cisco

Cisco ISA 3000 Manual de usuario

Cisco

Cisco Cisco ASA Series Manual de usuario

Cisco

Cisco PIX 506E - Security Appliance Manual de usuario

Cisco

Cisco M195 Manual

Cisco

Cisco C170 Manual de usuario

Cisco

Cisco PIX 520 - PIX Firewall 520 Manual de usuario

Cisco

Cisco Firepower 2100 Series Guía de referencia rápida

Cisco

Cisco IronPort M1070 Manual de usuario

Cisco

Cisco MEREAKI MX65W Manual de usuario

Cisco

Cisco Firepower 2100 Manual de usuario

Cisco

Cisco Firepower 4110 Manual de usuario

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario

Cisco

Cisco 2100 Series Manual de usuario

Cisco

Cisco ASA 5550 Series Manual de usuario

Cisco

Cisco 5510 - ASA SSL / IPsec VPN Edition Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario