Table of Contents
Advertisement
Quick Links
Advertisement
Chapters
Table of Contents
Related Manuals for Cisco 4200 Series
Summary of Contents for Cisco 4200 Series
- Page 1 Cisco Secure Firewall 4200 Series Hardware Installation Guide First Published: 2023-09-07 Last Modified: 2023-09-13 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
- Page 2 Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/c/en/us/about/legal/trademarks.html.
-
Page 3: Table Of Contents
Dual Fan Modules SSDs Supported SFP/SFP+/QSFP+ Transceivers Hardware Specifications Product ID Numbers Power Cord Specifications C H A P T E R 2 Installation Preparation Installation Warnings Safety Recommendations Maintain Safety with Electricity Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 4 C H A P T E R 4 Installation, Maintenance, and Upgrade Install, Remove, and Replace the Network Module Remove and Replace the SSD Remove and Replace the Dual Fan Module Remove and Replace the Power Supply Module Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 5: Overview
Power Cord Specifications, on page 38 Features The Cisco Secure Firewall 4200 is a standalone modular security services platform that includes the Secure Firewall 4215, 4225, and 4245. The Secure Firewall 4200 supports Cisco Firepower Threat Defense and Cisco ASA software. See the... - Page 6 Two (hot-swappable) Note Hot-swapping of identical modules is supported, but if you replace a network module with another type, you must reboot the system so that the new network module is recognized. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 7 Resets the system to factory default without requiring serial console access Note The reset button is recessed. Press with a pin and hold longer than 5 seconds to set the system back to the factory default. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 8: Deployment Options
See Product ID Numbers for a list of PIDs associated with the package contents. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 9 • Two M4.0 x 0.6 mm flat head Phillips screws (part number 48-2030-01) • Two ¼-20 x 0.297-inch screws (part number 48-102252-01) • Two 0.469-inch OD, 0.261-inch ID, 0.025-inch T washers (part number 49-100464-01) Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 10: Serial Number And Documentation Portal Qr Code
The pullout asset card on the front panel of your Secure Firewall 4200 chassis contains the chassis serial number and the Documentation Portal QR code, which points to the getting started guide, the regulatory and compliance guide, and the hardware installation guide. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 11 The compliance label on the bottom of the chassis contains the chassis serial number, regulatory compliance marks, and also the Documentation Portal QR code that points to the guides listed above. The following figure shows an example compliance label found on the bottom of the chassis. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 12: Front Panel
Documentation Portal QR code Serial number — Front Panel The following figure shows the front panel of the Secure Firewall 4200. See Front Panel LEDs, on page 11 for a description of the LEDs. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 13 Pullout asset card with chassis serial number and QR code to the Digital Documentation Portal that has links to the getting started guide, hardware guide, and regulatory and compliance guide. Network module slot (NM-3) — Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 14 • Security module log files • Platform bundle image upload using download image usbA: The Type A USB port does not support Cisco Secure Package (CSP) image upload support. Network Ports The Secure Firewall 4200 chassis has two network module slots that support the following network modules: •...
-
Page 15: Front Panel Leds
If power is lost between when you pushed the reset button and when the reset process is complete, the process stops and you have to push the button again after the system powers back on. Front Panel LEDs The following figure shows the Secure Firewall 4200 front panel LEDs. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 16 5 seconds, and persists is detected. until the software has completely • Amber—No link or network failure. applied all factory default settings or it is interrupted by a power cycle. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 17 LED is blinking so that the system has time to perform a graceful shutdown. • Amber—The system is powering up (before the BIOS boots). This takes one to five seconds at most. • Green—The system is fully powered up. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 18: Rear Panel
AC power cables. See Front Panel LEDs, on page 11 for the power status LED description. Note Threat defense requires a graceful shutdown. See the Cisco Secure 4200 Getting Started Guide for the procedure. Cisco Secure Firewall 4200 Series Hardware Installation Guide... -
Page 19: 8-Port 1/10/25-Gb Network Module
See the configuration guide for your operating system for the detailed procedures for managing network modules. The following figure shows the front panel of the 1/10-Gb and 1/10/25-Gb network module. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 20 6-Port 10-Gb SR/10-Gb LR/25-Gb SR/25-Gb LR Network Module with Hardware Bypass , on page 24 for a description of the 1/10/25-Gb network module. • See 8-Port 1000Base-T Network Module with Hardware Bypass, on page 22 for a description of the 10/100/1000Base-T network module. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 21: 4-Port 40-Gb Network Module
See the configuration guide for your operating system for the detailed procedures for managing network modules. The following figure shows the front panel of the 4-port 40-Gb network module. Figure 9: 4-Port 40-Gb Network Module (FPR-X-NM-4X40G) Cisco Secure Firewall 4200 Series Hardware Installation Guide... -
Page 22: 2-Port 100-Gb Network Module
You can break each 100-Gb port into four 10-Gb or 25-Gb ports using the supported breakout cables. With the two-port 100-Gb network module, you now have 8 10-Gb or 25-Gb interfaces. The added interfaces are Ethernet 2/1/1 or 3/1/1 through Ethernet 2/1/8 or 3/1/8 Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 23 Power on LED • Off—No SFP. • Amber—No link or a network failure. • Green—Link is up. • Green, flashing—Network activity. Ejector handle Ethernet 2/1 or 3/1 Ethernet 2/2 or 3/2 — Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 24: 4-Port 200-Gb Network Module
See the configuration guide for your operating system for the detailed procedures for managing network modules. The following figure shows the front panel of the 4-port 200-Gb network module. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 25 8-Port 1000Base-T Network Module with Hardware Bypass, on page 22 for a description of the 8-port 10/100/1000Base-T network module. • See Install, Remove, and Replace the Network Module, on page 63 for the procedure for removing and replacing network modules. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 26: 8-Port 1000Base-T Network Module With Hardware Bypass
If you replace the 8-port 10/100/1000Base-T network module with another supported network module, you must reboot the chassis so that the new network module is recognized. See the configuration guide for your operating system for the detailed procedures for managing network modules. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 27 Ports 5 and 6 are paired together to form a Ports 3 and 4 are paired together to form a hardware bypass pair. LED B3 applies to this hardware bypass pair. LED B2 applies to this paired port. paired port. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 28: 6-Port 10-Gb Sr/10-Gb Lr/25-Gb Sr/25-Gb Lr Network Module With Hardware Bypass
Hardware bypass is useful on ports where the secure firewall is only monitoring or logging traffic. The hardware bypass network modules have a switch that is capable of connecting the two ports when needed. This hardware bypass network module has built-in SFPs. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 29 Cisco Secure Firewall ASA Compatibility guide, which provide Cisco software and hardware compatibility, including operating system and hosting environment requirements, for each supported version The following figure shows the front panel of the 6-port 1/10/25-Gb network module. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 30 Bypass LEDs B1 through B3: Captive screw • Off—Bypass mode is disabled. • Green—Port is in standby mode. • Amber, flashing—Port is in hardware bypass mode, failure event. Power LED Handle ejector Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 31: Power Supply Module
Note The system does not consume more than the capacity of one power supply module, so it always operates in full redundancy mode when two power supply modules are installed. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 32 12 V +/- 5% at 158 A (high line) Output standby voltage at 12 V at 2.5 A current Output power 1200 W (low line) 1900 W (high line) Energy efficiency > 90% (platinum) Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 33: Dual Fan Modules
When one fan fails, the other dual fan modules spin at maximum speed so that the system continues to function. The dual fan modules are hot-swappable and installed in the rear of the chassis. The following figure shows the location of the fan LED on the fan module. Cisco Secure Firewall 4200 Series Hardware Installation Guide... -
Page 34: Ssds
The raid remove-secure local disk command securely erases the specified SSD data. Caution You cannot swap SSDs between different platforms. For example, you cannot use a 3100 series SSD in a 4200 series model. Cisco Secure Firewall 4200 Series Hardware Installation Guide... -
Page 35: Supported Sfp/Sfp+/Qsfp+ Transceivers
Ethernet connectivity. Figure 18: SFP Transceiver Dust plug Bail clasp Receive optical bore Transmit optical bore Safety Warnings Take note of the following warnings: Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 36 Caution Although non-Cisco SFPs are allowed, we do not recommend using them because they have not been tested and validated by Cisco. Cisco TAC may refuse support for any interoperability problems that result from using an untested third-party SFP transceiver.
- Page 37 The following table lists the supported transceivers for the FPR4K-X-NM-4X40G, FPR4K-X-NM-2X100G, and FPR4K-X-NM-4X2000G network modules. Table 6: Supported 40-Gb SFP Transceivers for FPR4K-X-NM-4X40G, FPR4K-X-NM-2X100G, and FPR4K-X-NM-4X200G Optics Type Comments 40G-SR4 QSFP-40G-SR4 — 40G-SR4-S QSFP-40G-SR4-S Ethernet only Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 38 20, 25, 30 m 100G-CR4 QSFP-100G-CUxM 100G copper up to 5 m (direct attach); length 1, 2, 3, 5 m 100G-CR4 breakout QSFP-4SFP25G-CUxM 100G copper breakout; length 1, 2, 3, 5 m) Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 39: Hardware Specifications
Operating: 0 to 10,000 ft (0 to 1829 m) maximum Nonoperating: 40,000 ft (12,192 m) maximum Sound pressure < 63 dBA (typical) <85 dBA (maximum) Sound power <76 dB (typical) <96 dB (maximum) Cisco Secure Firewall 4200 Series Hardware Installation Guide... -
Page 40: Product Id Numbers
Power supply blank slot cover FPR4200-PSU-BLANK= Power supply blank slot cover (spare) FPR4200-SSD1800 1800 GB SSD FPR4200-SSD1800= 1800 GB SSD (spare) FPR4200-FAN Dual fan module FPR4200-FAN= Dual fan module (spare) FPR4200-SLD-RAILS Slide rail kit Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 41 FPR4K-XNM-8X10G= 8-port 1/10-Gb SFP+ network module (spare) FPR4K-XNM-8X25G 8-port 1/10/25-Gb SFP network module FPR4K-XNM-8X25G= 8-port 1/10/25-Gb SFP network module (spare) FPR4K-XNM-4X40G 4-port 40-Gb QSFP+ network module FPR4K-XNM-4X40G= 4-port 40-Gb QSFP+ network module Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 42: Power Cord Specifications
The following power cords are supported. Figure 19: Argentina PID: PWR-CAB-AC-ARG Part number: 37-1711-01 Plug: IRAM 2073 Cord set rating: 20 A, 250 V Connector: IEC 60320/C21 Cord length: 14 ft (4.25 m) Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 43 Cord length: 14 ft (4.3 m) Figure 22: China PID: PWR-CAB-AC-CHN Part number: 72-5207-01 Plug: GB16C Cord set rating: 16 A, 250 V Connector: IEC 60320/C21 Cord length: 14 ft (4.3 m) Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 44 Cord length: 14 ft (4.3 m) Figure 25: International PID: PWR-CAB-AC-BLK Part number: 72-5595-01 Plug: IEC 60320/20 Cord set rating: 20 A, 250 V Connector: IEC 60320/C21 Cord length: 14 ft (4.3 m) Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 45 Cord length: 14 ft (4.3 m) Figure 28: Japan PID: PWR-CAB-AC-JPN Part number: 72-5210-01 Plug: NEMA L6-20 Cord set rating: 20 A, 250 V Connector: IEC 60320/C21 Cord length: 14 ft (4.3 m) Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 46 Cord length: 14 ft (4.3 m) Figure 31: North America PID: PWR-CAB-AC-USA Part number: 72-5200-01 Plug: NEMA L6-20P Cord set rating: 20 A, 250 V Connector: IEC 60320/C21 Cord length: 14 ft (4.3 m) Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 47 Core length: 14 ft (4.3 m) Figure 34: United Kingdom PID: PWR-AC-UK Part number: 72-5205-01 Plug: IEC309 Cord set rating: 16 A, 250 V Connector: IEC 60320/C21 Length: 14 ft (4.3 m) Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 48 Overview Power Cord Specifications Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 49: Installation Preparation
SAVE THESE INSTRUCTIONS Warning Statement 1004 Installation Instructions Read the installation instructions before using, installing, or connecting the system to the power source. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 50 This equipment must be grounded. To reduce the risk of electric shock, never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
-
Page 51: Safety Recommendations
• Keep tools away from walkways, where you and others might trip over them. • Do not wear loose clothing or jewelry, such as earrings, bracelets, or chains that could get caught in the chassis. Cisco Secure Firewall 4200 Series Hardware Installation Guide... -
Page 52: Maintain Safety With Electricity
Wear an ESD-preventive wrist strap, ensuring that it makes good skin contact. Connect the grounding clip to an unpainted surface of the chassis frame to safely ground ESD Cisco Secure Firewall 4200 Series Hardware Installation Guide... -
Page 53: Site Environment
• Several styles of AC-input power supply cords are available for the chassis; make sure that you have the correct style for your site. • If you are using dual redundant (1+1) power supplies, we recommend that you use independent electrical circuits for each power supply. Cisco Secure Firewall 4200 Series Hardware Installation Guide... -
Page 54: Rack Configuration Considerations
• Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco Secure Firewall 4200 Series Hardware Installation Guide... - Page 55 This procedure describes how to install the Secure Firewall 4200 in a rack using slide rails. It applies to all models of the 4200 series. You use the pegs on the chassis to secure the slide rail. See Product ID Numbers,...
- Page 56 Take note of the following warnings: Warning Statement 164—Lifting Requirement Two people are required to lift the heavy parts of the product. To prevent injury, keep your back straight and lift with your legs, not your back. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 57 There are no serviceable parts inside. To avoid risk of electric shock, do not open. Step 1 Attach the slide-rail locking brackets to each side of the chassis using the six 8-32 x 0.302-inch Phillips screws (three per side). Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 58 8-32 x 0.302-inch Phillips screws (three per side) Step 2 (Optional) Attach the cable management bracket to the slide-rail locking bracket: a) Install the cable management screws into the slide-rail locking bracket. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 59 Align an inner rail with each side of the chassis: • Align the inner rail so that the three slots on the rail line up with the three pegs on the side of the chassis. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 60 On the outside of the assembly, push the green arrow button toward the rear to open the securing plate. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 61 Slide the release clip toward the rear on both inner rails, and then continue pushing the chassis into the rack until the mounting brackets meet the front of the slide rail. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 62 In addition, a copper conductor (wires) must be used and the copper conductor must comply with National Electrical Code (NEC) code for ampacity. You need the following items that you provide: • Wire-striping tool • Crimping tool • Grounding cable Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 63 Use a wire-stripping tool to remove approximately 0.75 inches (19 mm) of the covering from the end of the grounding cable. Step 2 Insert the stripped end of the grounding cable into the open end of the grounding lug. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 64 Two ¼-20 x .297 inch button-head screws Two lock-internal washers Grounding lug Grounding lug bracket Two M4.0 x .06 mm flat-head screws — Step 7 Make sure that the lug and cable do not interfere with other equipment. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 65 Mount the Chassis Ground the Chassis Step 8 Prepare the other end of the grounding cable and connect it to an appropriate grounding point in your site to ensure adequate earth ground. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 66 Mount the Chassis Ground the Chassis Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 67 Rear Panel, on page 14 for more information about the power switch. See the configuration guide for your operating system for the procedure for installing a network module for the first time into an empty slot. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 68 The captive screw is not attached to the handle. Be sure the captive screw is completely loosened before pulling the ejector handle out. Otherwise you could damage the ejector handle as the captive screw and handle fight each other. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 69 Power on the chassis so that the new network module is recognized. Remove and Replace the SSD The chassis supports two NVMe SSDs. The SSDs are configured for SW RAID1 support. See SSDs, on page for more information. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 70 To remove the SSD from the slot, face the front of the chassis, and pinch the release tab on the front of the SSD. This causes the ejector handle to spring open. Step 4 Grasp the ejector handle to gently pull the SSD out of the chassis. Figure 43: Remove the SSD Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 71 Risk of personal injury. Avoid sharp edges when installing or removing replaceable units. Step 1 Have the dual fan module ready for immediate insertion and near the chassis so that you can reinstall it within 30 seconds. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 72 Remove and Replace the Power Supply Module Power supply modules are hot-swappable. You can remove and replace power supply modules while the system is running. Safety Warnings Take note of the following warnings: Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 73 Unplug the power supply cable before removing the power supply module. You cannot disengage the power supply module release tab without first removing the cable. Step 2 To remove a power supply module, face the back of the chassis and grasp the handle. Cisco Secure Firewall 4200 Series Hardware Installation Guide...
- Page 74 Push in the power supply module gently until you hear the release tab engage and the power supply is seated. Step 7 Plug in the power supply cable. Step 8 Check the LED on the power supply to make sure the power supply is operative. Cisco Secure Firewall 4200 Series Hardware Installation Guide...