Power Supply Modules Fan Modules Supported SFP/SFP+ and QSFP Transceivers Hardware Specifications Product ID Numbers Power Cord Specifications C H A P T E R 2 Installation Preparation Installation Warnings Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 4
Remove and Replace the SSD Remove and Replace the Power Supply Module Connect the DC Power Supply Module Secure the Power Cord on the AC Power Supply Module Install the FIPS Opacity Shield Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Power Cord Specifications, on page 32 Features The Cisco Firepower 4100 series security appliance is a standalone modular security services platform. It is capable of running multiple security services simultaneously and so is targeted at the data center as a multiservice platform.
Page 6
4-post Electronic Industries Association (EIA)-310-D rack Airflow Front to rear Cold aisle to hot aisle Processor Single 12-core Single 18-core Single 22-core 256-GB DDR4 Memory 64-GB DDR4 128-GB DDR4 256-GB DDR4 DRAM DRAM DRAM DRAM Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 7
Two (1+1) power supply module slots Ships with two 400-W AC power supply Ships with one 400-W AC power supply modules modules Hot-swappable Hot-swappable DC power supply Optional Redundant power Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Package Contents The following figure shows the package contents for the Firepower 4100. Note that the contents are subject to change and your exact contents might contain additional or fewer items. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 9
This document has a URL pointing to the hardware installation guide, a URL pointing the regulatory and safety guide, and a QR code and URL pointing to the Getting Started Guide. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
The serial number for the Firepower 4100 series chassis is located on the pullout asset card on the front panel. Figure 3: Serial Number on the 4100 Chassis You can also view additional model information on the compliance label located on the bottom of the chassis. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Ethernet 1/1 through 1/8 labeled top to bottom, left to right SSD 1 SSD 2 Reserved for the primary SSD; slot 1 must always Reserved for the optional MSP. be populated. Power LED Locator LED Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 12
• Security module log files • Platform bundle image upload using download image usbA: The USB Type A port does not support Cisco Secure Package (CSP) image upload. Network Ports The Firepower 4100 chassis has eight fixed ports that require 1-Gb/10-Gb SFP/SFP+ transceivers (fiber or copper).
(PFA) and hot spare; two fast flashes at 4 Hz, pause for 0.5 seconds. Active (ACT) Locator LED This LED is not supported; reserved for future • Off—Locate is off. use. • Blue—Locate is on. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
If you move the power switch to the OFF position before the shutdown command sequence is complete or if you remove the system power cords before the graceful shutdown is complete, disk corruption can occur. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
You can fit four copper SFPs in either the top row of ports or the bottom row of ports. Both rows cannot be populated at the same time, because of the port row spacing. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
The following figure shows the front panel of the 40-Gb network module (FPR4K-NM-4X40G.) The FPR4K-NM-4X40G is a single-wide module that supports hot swapping. The four ports are numbered left to right. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 17
• 40Gb—Only the leftmost LED indicates the port status. • 4x10Gb—Each of the port LEDS indicates the status of respective 10-Gb channel. Ethernet X/1 Ethernet X/2 Ethernet X/3 Ethernet X/4 Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
This allows traffic to flow even if the security appliance fails or loses power. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
For instructions on how to verify your firmware package version and to upgrade the firmware if necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower 4100/9300 FXOS Compatibility for the software compatibility matrix. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
(FPR4K-NM-2X40G-F). The FPR4K-NM-2X40G-F is a single-wide module that does not support hot swapping. The two ports are numbered left to right. Pair the two ports to create a hardware bypass paired set. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 21
• Green—Link up, no network activity. • Green, flashing—Network activity. • Green, flashing—Network activity. The following table describes the cable specifications needed to keep the insertion loss as low as possible. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
For instructions on how to verify your firmware package version and to upgrade the firmware if necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower 4100/9300 FXOS Compatibility for the software compatibility matrix. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 23
Table 4: 1-Gb SX Network Module (FPR4K-NM-6X1SX-F) Operating Mode Typical Maximum Insertion loss Normal 0.9 dB 1.4 dB Hardware bypass 1.2 dB 1.7 dB Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 24
150 m 4700 (OM4) 200 m Table 6: 10-Gb LR Network Module (FPR4K-NM-6X10LR-F) Operating Mode Typical Maximum Insertion loss Normal 1.2 dB 1.6 dB Hardware bypass 1.5 dB 1.9 dB Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
13 A (at 100 V AC) The system power requirements are lower than the power Note supply module capabilities. See Hardware Specifications, on page 27 for the system power requirements. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 26
Efficiency at 50% load Power Supply Module LEDs The following figure shows the two-color power supply LEDs. The LEDs are located on the upper right side. Figure 13: Power Supply Module LEDs Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
The fan modules are numbered left to right, for example, FAN1, FAN2, FAN3, FAN4, FAN5, and FAN6. Remove and Replace the Fan Module, on page 58 for the procedure for removing and replacing the fan module. The following figure shows the location of the fan LED. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Keep unused transceivers in the ESD packing that they were shipped in. The following figure shows a sample SFP transceiver. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 29
Caution For some earlier production Firepower 4100 chassis, you may experience difficulty using the GLC-TE SFP on the management port or fixed ports. Contact Cisco TAC for support if you encounter problems with the GLC-TE SFP. The following table lists the Cisco supported transceivers.
Figure 16: Argentina CAB-9K10A-AR Plug: IRAM 2073 Cord set rating: 10 A, 250 V Connector: IEC 60320-C15 — Figure 17: Australia CAB-9K10A-AU Plug: A.S. 3112-2000 Cord set rating: 10 A, 250 V Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 37
Cord set rating: 10 A, 250 V Connector: IEC 60320-C13 — Figure 20: China CAB-9K10A-CH Plug: CCC GB2099.1, GB1002 Cord set rating: 10 A, 250 V Connector: IEC 60320-C15 — Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 38
Plug: CEE 7/7 Cord set rating: 10 A, 250 V Connector: IEC 60320-C15 — Figure 23: India CAB-250V-10A-ID Plug: IS 6538-1971 Cord set rating: 10 A, 250 V Connector: IEC 60320-C13 — Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 39
Plug: CEI 23-16/VII Cord set rating: 10 A, 250 V Connector: IEC 60320-C15 — Figure 26: Korea CAB-9K10A-KOR Plug: CEE 7/7 Cord set rating: 10 A, 250 V Connector: IEC 60320-C19 — Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 40
Plug: NEMA5-15P/JIS 8303 Cord set rating: 12 A, 125 V Connector: IEC 60320-C15 — Figure 29: North America CAB-TA-NA Plug: NEMA5-15P Cord set rating: 12 A, 125 V Connector: IEC 60320-C15 — Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 41
Plug: SABS 164 Cord set rating: 10 A, 250 V Connector: IEC 60320-C15 — Figure 32: Switzerland CAB-9K10A-SW Plug: SEV 1011 Cord set rating: 10 A, 250 V Connector: IEC 60320-C15 — Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 42
Plug: CNS10917-2 Cord set rating: 10 A, 125 V Connector: IEC 60320-C15 — Figure 34: United Kingdom CP-PWR-CORD-UK Plug: BS1363A/SS145 Cord set rating: 10 A, 250 V Connector: IEC 60320-C13 — Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Use the statement number provided at the end of each warning statement to locate its translation in the translated safety warnings for this device. SAVE THESE INSTRUCTIONS Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 44
• Do not use if battery is warped or swollen. • Do not store or use battery in a temperature > 60° C. • Do not store or use battery in low air pressure environment < 69.7 kPa. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 45
Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place. Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Statement 7012 Equipment Interfacing with AC Power Ports This equipment shall be connected to AC mains provided with a surge protective device (SPD) at the service equipment complying with NFPA 70, the National Electrical Code (NEC). Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
• Do not perform any action that creates a potential hazard to people or makes the equipment unsafe. • Never attempt to lift an object that is too heavy for one person. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
If no wrist strap is available, ground yourself by touching the metal part of the chassis. For safety, periodically check the resistance value of the antistatic strap, which should be between one and 10 megohms. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Ensure that you provide adequate ventilation for equipment at the bottom of the rack. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 50
• Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
• Invoice number of shipper (see the packing slip) • Model and serial number of the damaged unit • Description of damage • Effect of damage on the installation Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Warning Statement 1018 Supply Circuit To reduce risk of electric shock and fire, take care when connecting units to the supply circuit so that wiring is not overloaded. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 53
Secure the inner rail to the side of the chassis using one M3 x 6 mm screw. e) Install the second inner rail to the opposite side of the chassis and secure with the other M3 x 6 mm screw. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 54
On the outside of the assembly, push the green arrow button toward the rear to open the securing plate. Figure 37: Front Securing Mechanism Inside the Front End Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 55
Slide the release clip toward the rear on both inner rails, and then continue pushing the chassis into the rack until the mounting brackets meet the front of the slide rail. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
M4 holes is provided on the chassis for attaching a grounding lug. The grounding lug must be Nationally Recognized Testing Laboratory (NRTL)-listed. In addition, a copper conductor (wires) must be used and the copper conductor must comply with National Electrical Code (NEC) code for ampacity. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 57
Use a wire-stripping tool to remove approximately 0.75 inches (19 mm) of the covering from the end of the grounding cable. Step 2 Insert the stripped end of the grounding cable into the open end of the grounding lug. Figure 39: Insert the Cable into the Grounding Lug Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 58
Install the FIPS Opacity Shield, on page 75 for the procedure. Install the cables according to your default software configuration as described in the Cisco Firepower 4100 Getting Started Guide. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Acknowledgment is necessary if you decommission and physically remove a network module and do not replace it, or if you replace it with another PID. See the "Acknowledging a Security Module/Engine” Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 60
To install a new network module for the first time into an empty slot, do the following: a) Power down the chassis by moving the power switch to the OFF position. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 61
Step 5 Slide the network module into the slot and push it firmly into place until the handle is flush with the front of the network module. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Check the equipment manufacturer to verify/confirm that your equipment is suitable for user-installed application cards. Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 63
Pull the fan module out of the chassis. Figure 42: Remove the Fan Module Step 4 To replace a fan module, hold the fan module in front of the fan slot. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
(EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 65
Step 3 To remove an SSD, face the front of the chassis, loosen the two captive screws on the SSD, and gently pull it out of slot 1 of the chassis. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
LEDs. Remove and Replace the Power Supply Module You can remove and replace power supply modules while the system is running. Safety Warnings Take note of the following warnings: Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 67
This unit might have more than one power supply connection. To reduce risk of electric shock, all connections must be removed to de-energize the unit. Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 68
Press the latch found on the lower right of the power supply to disengage the power supply. Step 3 Place your other hand under the power supply module to support it while you slide it out of the chassis. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 69
Push in the power supply module gently until you hear the latch engage and it is seated. Verify the power supply module is operating correctly by checking the power supply module LED. See Power Supply Modules, on page 21 for a description of the power supply module LEDs. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
To avoid hazardous conditions, all components in the area where DC input power is accessible must be properly insulated. Therefore, before installing the DC cable lugs, be sure to insulate the lugs according to the manufacturer's instructions Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 71
To reduce risk of electric shock and fire, a readily accessible two-poled disconnect device must be incorporated in the fixed wiring. Warning Statement 1025 Use Copper Conductors Only To reduce risk of fire, use copper conductors only. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 72
The covers are an integral part of the safety design of the product. Do not operate the unit without the covers installed. Warning Statement 1073 No User-Serviceable Parts There are no serviceable parts inside. To avoid risk of electric shock, do not open. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 73
Insulate the lug with shrink sleeving for each lead wire if using noninsulated crimp terminals. Sleeving is not required for insulated terminals. Step 6 Remove the two M5 screws. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 74
Tighten the M5 screw with the captive washer to the recommended torque of 5 in-lbs for the positive stud and wire. Secure the wires coming in from the terminal block so that they cannot be disturbed by casual contact. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 75
Replace the terminal block plastic cover. The plastic cover is slotted and keyed to fit correctly over the terminal block. This cover should always be in place when power is applied to the terminals. Figure 50: Replace the Plastic Cover Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
You will hear a click as the tie slides through—it moves in one direction only. To remove the tie wrap from the clamp, push the lever on the closed side of the box-shaped channel and slide out the tie wrap. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 77
Make sure you have the correct location because you cannot remove the tie wrap from the power supply Caution module once you have installed it without damaging the tie wrap. Figure 52: Flextronics Power Supply Module Flextronics tie wrap Hexagonal hole Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 78
Figure 54: Clamp on Over Mold of Power Cord Power cord Power cord over mold Tie clamp annular teeth Direction to squeeze the clamp tabs Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Because the FIPS opacity shield covers the serial number on the chassis, you need to copy the serial number on a label and attach it to the chassis where it can be retrieved or viewed easily before you install the FIPS opacity shield. You need the serial number when you call Cisco TAC. Before you begin You need the following to install the FIPS opacity shield: •...
Page 80
8-32 x 0.375-inch Phillips screws (three per side) Step 4 Attach a cable management bracket to each slide rail locking bracket using the four 8-32 x 0.375-inch Phillips screws provided in the accessory kit. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 81
Step 7 below. Step 6 Route the cables through the openings in the cable management brackets. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 82
Figure 57: Route the Cables Through the Cable Management Brackets Step 7 Attach the FIPS opacity shield to the cable management brackets using the four 8-32 x 0.375-inch Phillips screws provided in the FIPS kit. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 83
OFF or unplugging the power cord, wait at least 10 seconds before turning power back ON. Step 12 See the Cisco Firepower 4100 Getting Started Guide for further configuration information. Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Page 84
Installation, Maintenance, and Upgrade Install the FIPS Opacity Shield Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide...
Need help?
Do you have a question about the Firepower 4110 and is the answer not in the manual?
Questions and answers