Cisco Firepower 4100 Series User manual

Overview
•Features, on page 1
•Deployment Options, on page 4
•Package Contents, on page 4
•Serial Number Location, on page 5
•Front Panel, on page 6
•Front Panel LEDs, on page 7
•Rear Panel, on page 8
•Network Modules, on page 9
•Hardware Bypass Network Modules, on page 11
•Power Supply Modules, on page 18
•Fan Modules, on page 20
•Supported SFP/SFP+ and QSFP Transceivers, on page 21
•Hardware Specifications, on page 24
•Product ID Numbers, on page 26
•Power Cord Specifications, on page 29
Features
The Cisco Firepower 4100 series security appliance is a standalone modular security services platform. It is
capable of running multiple security services simultaneously and so is targeted at the data center as a
multiservice platform. The series includes the Firepower 4110, 4120, 4140, and 4150. See Product ID Numbers,
on page 26 for a list of the product IDs (PIDs) associated with the 4100 series.
The Firepower 4100 series supports Cisco Firepower Threat Defense, Cisco Firepower eXtensible Operating
System (FXOS), and Cisco ASA software. See Cisco Firepower 4100/9300 FXOS Compatibility, which lists
software and hardware compatibility information for the Firepower 4100 series.
The Firepower 4100 is certified for the following security standards on ASA 9.8.xand FTD 6.2.x:
• Common Criteria (CC) and Commercial Solutions for Classified (CSFC)
• Federal Information Processing Standards (FIPS)
• Department of Defense Information Network Approved Product List (DoDIN APL)
• US Government Compliance for IPv6 (USGv6)
Overview
1

The Firepower 4100 series is certified for the following security standards on ASA 9.12.xand FTD 6.4.x:
• DoDIN APL
See the "Security Certifications Compliance" chapter in the Cisco FXOS CLI Configuration Guide or Cisco
FXOS Firepower Chassis Manager Configuration Guide for the procedure to enable security modes.
The following figure shows the Firepower 4100 series security appliance.
Figure 1: Firepower 4100 Series
See the Cisco Interactive Library for a video that displays the features and components of the Firepower 4100.
The following table lists the features for the Firepower 4100 series.
Table 1: Firepower 4100 Series Features
4150414041204110Feature
1 RU
Fits a standard 19-in. (48.3cm) square-hole rack
Form factor
Yes
Slide rails, mount ears, and screws included (4-post EIA-310-D rack)
Rack mount
Front to rear
Cold aisle to hot aisle
Airflow
Single 22-coreSingle 18-core
Single 12-coreProcessor
256-GB DDR4
DRAM
256-GB DDR4
DRAM
128-GB DDR4
DRAM
64-GB DDR4
DRAM
Memory
24
With two 8-port network modules installed
Maximum number
of interfaces
One Gigabit Ethernet
Supports 1-Gb fiber or copper SFPs
Management port
One RJ-45 consoleSerial port
One USB 2.0 Type AUSB port
Overview
2
Overview
Features

4150414041204110Feature
Eight fixed 1-Gb and 10-Gb SFP ports (named Ethernet 1/1 through 1/8)Network ports
Eight fixed 1-Gb and 10-Gb SFP portsSFP ports
Displays the serial number; on the front panelPullout asset card
On rear panelGrounding lug
On front panelLocator beacon
On rear panelPower switch
Two network module slots (named network module 2 and network module 3)Network modules
• 8-port 10-Gigabit Ethernet SFP+
• 4-port 40-Gigabit Ethernet QSFP+
• 8-port 1-Gigabit Ethernet copper with hardware bypass
• 2-port 40-Gigabit Ethernet QSFP+ (built-in) with hardware bypass
• 6-port 1-Gigabit Ethernet SX fiber SFP+ (built-in) with hardware bypass
• 6-port 10-Gigabit Ethernet SR fiber SFP+ (built-in) with hardware bypass
• 6-port 10-Gigabit Ethernet LR fiber SFP+ (built-in) with hardware bypass
Supported network
modules
Two (1+1) power supply module slots
Ships with two 400-W AC power supply
modules
Hot-swappable
Two (1+1) power supply module slots
Ships with one 400-W AC power supply
modules
Hot-swappable
AC power supply
Yes (optional)NoDC power supply
Yes 1+1Redundant power
Six fan module slots
3+1 redundancy
Hot-swappable
Fan
Two SSD slots (400 GB)
Ships with one SSD installed in slot 1.
RAID is not supported.
Note
Slot 2 is reserved for the MSP.
Two SSD slots (200 GB)
Ships with one SSD installed in slot 1.
RAID is not supported.
Note
Slot 2 is reserved for the Malware Storage
Pack (MSP).
Storage
Installed in the second SSD slot onlyMSP
Overview
3
Overview
Features

Deployment Options
Here are some examples of how you can deploy the Firepower 4100:
• In a data center using NGFW and ASA
• At the core/aggregation layer of a 3-tier data center in a high availability configuration
• As a dedicated multifunctional security service within converged infrastructure stacks, for example,
vBlock, FlexPod, and so forth, at the access layer
• As a high-performance data center security appliance between the WAN edge and the data center core
in a high availability configuration
• Inter-DC clustering deployments
• In newer spine/leaf data center designs, deployment as a leaf that exclusively offers security functions
Package Contents
The following figure shows the package contents for the Firepower 4100. Note that the contents are subject
to change and your exact contents might contain additional or fewer items.
Figure 2: Firepower 4100 Package Contents
Blue console cable PC terminal adapter2Firepower 4100 chassis1
10/100/1000BASE-T SFP transceiver4Two power cords (country-specific)3
Tie wrap clamp6Two slide rails5
Overview
4
Overview
Deployment Options

Flextronics tie wrap8Artesyn tie wrap7
Ten 8-32 x .375-in. countersink screws used to
secure the mounting bracket to chassis (6 screws),
and the cable management brackets to the
mounting brackets (4 screws)
10Two M3X6 mm screws used to secure the inner
slide rail to the chassis
9
Two 10-32 x .375-in. screws used to secure the
ground lug
12Two slide rail locking brackets11
Two cable management brackets14One ground lug #6 AWG, 90 degree, #10 post13
Welcome to the Cisco Firepower 410015
Serial Number Location
The serial number for the Firepower 4100 series chassis is located on the pullout asset card on the front panel.
Figure 3: Serial Number on the 4100 Chassis
You can also view additional model information on the compliance label located on the bottom of the chassis.
Overview
5
Overview
Serial Number Location

Figure 4: Compliance Label on the 4100 Chassis
Front Panel
The following figure shows the front panel of the Firepower 4100.
Figure 5: Firepower 4100 Front Panel
Gigabit Ethernet management port2RJ-45 console port1
Eight fixed SFP+ (1-Gb/10-Gb) ports (in network
module slot 1)
Gigabit Ethernet 1/1 through 1/8 labeled top to
bottom, left to right
4USB 2.0 Type A port3
SSD 26SSD 15
Locator LED8Power LED7
Network module 2
The 10-Gb network module is shown.
Note
10Pullout asset card9
Overview
6
Overview
Front Panel

Network module 3
The 10-Gb network module is shown.
Note
11
Front Panel LEDs
The following figure and table describe the Firepower 4100 front panel LEDs.
Figure 6: Front Panel LEDs
Health (SYS)
• Off—System is not booting yet.
• Green, flashing—Power-up diagnostics are
complete and system is booting up.
• Green—The system has passed power-up
diagnostics.
• Amber—Power-up diagnostics has failed.
• Amber, flashing—Alarm; power-up
diagnostics are running.
2Management
• Off—No connection or port is not in use.
• Amber—No link or network failure.
• Green—Link up.
• Green, flashing—Network activity.
1
Power
• Off—Input power not detected.
• Green, flashing—Appears only when you
move the power switch from ON to OFF.
System is shutting down and powers off once
shutdown is completed.
• Amber—System is powering up.
• Green—System fully powered up.
• Amber, flashing—Reserved.
4SSD
• Off— SSD not present.
• Green—SSD is present; no activity.
• Green, flashing—SSD is active.
• Amber—SSD failure.
• Amber, flashing—Rebuilding, flashes at 1
Hz.
•Amber, flashing—Predictive failure analysis
(PFA) and hot spare; two fast flashes at 4
Hz, pause for 0.5 seconds.
3
Overview
7
Overview
Front Panel LEDs

Locator LED
• Off—Locate is off.
• Blue—Locate is on.
6Active (ACT)
This LED is not supported; reserved for future
use.
5
Network activity
• Off—No connection or port is not in use.
• Amber—No link or network failure.
• Green—Link up.
• Green, flashing—Network activity.
7
Rear Panel
The following figure shows the rear panel of the Firepower 4100.
Figure 7: Firepower 4100 Rear Panel
Power supply module 12Power on/off switch1
Fan module 14Power supply module 23
Fan module 36Fan module 25
Fan module 58Fan module 47
Location for the two-post grounding lug
The two-post grounding lug is
included in the accessory kit.
Note
10Fan module 69
The power switch is located to the left of power supply module 1 on the rear of the chassis. It is a toggle
switch that controls power to the system. If the power switch is in standby position, only the 3.3-V standby
power is enabled from the power supply module and the 12-V main power is OFF. When the switch is in the
ON position, the 12-V main power is turned on and the system boots.
You can shut down the chassis in one of two ways:
• Perform a graceful shutdown using the shutdown commands (see the FXOS CLI Configuration Guide
for the procedure). This may take several minutes to complete. Then toggle the power switch to the OFF
position. The power LED changes from solid green to off immediately.
Overview
8
Overview
Rear Panel

If you move the power switch to the OFF position before the shutdown command
sequence is complete or if you remove the system power cords before the graceful
shutdown is complete, disk corruption can occur.
Caution
• Toggle the power switch to the OFF position. The power LED changes from solid green to off.
After removing power from the chassis either by moving the power switch to OFF or unplugging the power
cord, wait at least 10 seconds before turning power back ON.
Note
Network Modules
The Firepower 4100 contains two network module slots that provide optical or electrical network interfaces.
Network modules are optional, removable I/O modules that provide either additional ports or different interface
types (1/10/40 Gb). The Firepower network modules plug into the chassis on the front panel.
For More Information
• See 10-Gb Network Module, on page 9 for a description of the 10-GB network module.
• See 40-Gb Network Module, on page 10 for a description of the 40-GB network module.
• See Hardware Bypass Network Modules, on page 11 for the location and description of the LEDs,
and the port configurations for the hardware bypass network modules.
• See Install the Network Module for the procedure for removing and replacing network modules.
10-Gb Network Module
The following figure shows the front panel of the 10-Gb network module (FPR4K-NM-8X10G). The
FPR4K-NM-8X10G is a single-wide module that supports hot swapping. The eight ports are numbered from
top to bottom, left to right.
Make sure you have the correct firmware package and software version installed to support this network
module. For instructions on how to verify your firmware package version and to upgrade the firmware if
necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower 4100/9300
FXOS Compatibility for the software compatibility matrix.
Note
The FPR4K-NM-8X10G is NEBS-compliant.
Note
Overview
9
Overview
Network Modules

You can fit four copper SFPs in either the top row of ports or the bottom row of ports. Both rows cannot be
populated at the same time, because of the port row spacing.
Note
Figure 8: FPR4K-NM-8X10G
Ethernet X/12Captive screw/handle1
Ethernet X/54Ethernet X/33
Ethernet X/26Ethernet X/75
Ethernet X/68Ethernet X/47
Network activity LEDs
• Off—No connection or port is not in use.
• Amber—No link or network failure.
• Green—Link up.
• Green, flashing—Network activity.
10Ethernet X/89
For More Information
• For a list of copper SFPs, see Supported SFP/SFP+ and QSFP Transceivers, on page 21.
40-Gb Network Module
The following figure shows the front panel of the 40-Gb network module (FPR4K-NM-4X40G.) The
FPR4K-NM-4X40G is a single-wide module that supports hot swapping. The four ports are numbered left to
right.
Overview
10
Overview
40-Gb Network Module

Make sure you have the correct firmware package and software version installed to support this network
module. For instructions on how to verify your firmware package version and to upgrade the firmware if
necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower 4100/9300
FXOS Compatibility for the software compatibility matrix.
Note
The FPR4K-NM-4X40G is NEBS-compliant.
Note
Figure 9: FPR4K-NM-4X40G
Network activity LEDs
• Off—No connection or port is not in use.
• Amber—No link or network failure.
• Green—Link up.
• Green, flashing—Network activity.
2Captive screw/handle1
Ethernet X/24Ethernet X/13
Ethernet X/46Ethernet X/35
Hardware Bypass Network Modules
Hardware bypass (also known as fail-to-wire) is a physical layer (Layer 1) bypass that allows paired interfaces
to go into bypass mode so that the hardware forwards packets between these port pairs without software
intervention. Hardware bypass provides network connectivity when there are software or hardware failures.
Hardware bypass is useful on ports where the Firepower security appliance is only monitoring or logging
traffic. The hardware bypass network modules have an optical switch that is capable of connecting the two
ports when needed. The hardware bypass network modules have built-in SFPs.
Hardware bypass is supported only on a fixed set of ports. You can pair Port 1 with Port 2, Port 3 with Port
4, but you cannot pair Port 1 with Port 4 for example.
Overview
11
Overview
Hardware Bypass Network Modules

Hardware bypass is only supported in inline mode. Also, hardware bypass support depends on your software
application.
Note
When the appliance switches from normal operation to hardware bypass or from hardware bypass back to
normal operation, traffic may be interrupted for several seconds. A number of factors can affect the length of
the interruption; for example, behavior of the optical link partner such as how it handles link faults and
debounce timing; spanning tree protocol convergence; dynamic routing protocol convergence; and so on.
During this time, you may experience dropped connections.
Note
There are three configuration options for hardware bypass network modules:
• Passive interfaces—Connection to a single port.
For each network segment you want to monitor passively, connect the cables to one interface. This is
how the nonhardware bypass network modules operate.
•Inline interfaces—Connection to any two like ports (10 Gb to 10 Gb for example) on one network module,
across network modules, or fixed ports.
For each network segment you want to monitor inline, connect the cables to pairs of interfaces.
• Inline with hardware bypass interfaces—Connection of a hardware bypass paired set.
For each network segment that you want to configure inline with fail-open, connect the cables to the
paired interface set.
For the 40-Gb network module, you connect the two ports to form a paired set. For the 1/10-Gb network
modules, you connect the top port to the bottom port to form a hardware bypass paired set. This allows
traffic to flow even if the security appliance fails or loses power.
If you have an inline interface set with a mix of hardware bypass and nonhardware bypass interfaces, you
cannot enable hardware bypass on this inline interface set. You can only enable hardware bypass on an inline
interface set if all the pairs in the inline set are valid hardware bypass pairs.
Note
For More Information
• See 1-Gb Network Module with Hardware Bypass, on page 13 for a description of the 1-Gb network
module.
• See 40-Gb Network Module with Hardware Bypass, on page 14 for a description of the 40-Gb
network module.
• See 1-Gb SX/10-Gb SR/10-Gb LR Network Module with Hardware Bypass, on page 15 for a
description of the 1-Gb SX, 10-Gb SR and LR network modules.
• See Install the Network Module for the procedure for removing and replacing single-wide network
modules.
Overview
12
Overview
Hardware Bypass Network Modules

1-Gb Network Module with Hardware Bypass
The following figure shows the front panel view of the 1-Gb network module with hardware bypass
(FPR4K-NM-8X1G-F). Pair ports 1 and 2, 3 and 4, 5 and 6, and 7 and 8 to form hardware bypass paired sets.
Make sure you have the correct firmware package and software version installed to support this network
module. For instructions on how to verify your firmware package version and to upgrade the firmware if
necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower 4100/9300
FXOS Compatibility for the software compatibility matrix.
Note
Figure 10: FPR-NM-8X1G-F
8 network activity LEDs
•Left LED—Green indicates network activity
when a 10M/100M/1G connection is made.
• Right LED—Not in use at this time.
2Captive screw/handle1
Ethernet X/2
Ports 3 and 4 are paired together to form a
hardware bypass pair. LED B2 applies to this
paired port.
4Ethernet X/1
Ports 1 and 2 are paired together to form a
hardware bypass pair. LED B1 applies to this
paired port.
3
Ethernet X/2
Ports 7 and 8 are paired together to form a
hardware bypass pair. LED B4 applies to this
paired port.
6Ethernet X/2
Ports 5 and 6 are paired together to form a
hardware bypass pair. LED B3 applies to this
paired port.
5
Overview
13
Overview
1-Gb Network Module with Hardware Bypass

Bypass LEDs B1 through B4
• Green—In standby mode.
•Amber, flashing—Port is in hardware bypass
mode, failure event.
• Amber—Port is in hardware bypass mode,
forced.
7
40-Gb Network Module with Hardware Bypass
The following figure shows the front panel of the 40-Gb hardware bypass network module
(FPR4K-NM-2X40G-F). The FPR4K-NM-2X40G-F is a single-wide module that does not support hot
swapping. The two ports are numbered left to right. Pair the two ports to create a hardware bypass paired set.
Make sure you have the correct firmware package and software version installed to support this network
module. For instructions on how to verify your firmware package version and to upgrade the firmware if
necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower 4100/9300
FXOS Compatibility for the software compatibility matrix.
Note
Figure 11: FPR4K-NM-2X40G-F
Ethernet X/1
Ports 1 and 2 are paired together to form a
hardware bypass pair.
2Captive screw/handle1
Overview
14
Overview
40-Gb Network Module with Hardware Bypass

Ethernet X/2
Ports 1 and 2 are paired together to form a
hardware bypass pair.
4Bypass LED BP:
• Green—In standby mode.
•Amber, flashing—Port is in hardware bypass
mode, failure event.
• Amber—Port is in hardware bypass mode,
forced.
3
Network activity LEDs for Pair 2:
•Amber—No connection, or port is not in use,
or no link or network failure.
• Green—Link up, no network activity.
• Green, flashing—Network activity.
6Network activity LEDs for Pair 1:
• Amber—No connection, or port is not in
use, or no link or network failure.
• Green—Link up, no network activity.
• Green, flashing—Network activity.
5
The following table describes the cable specifications needed to keep the insertion loss as low as possible.
Table 2: 40-Gb BASE-SR Cable Specifications
Supported CableInterface
50 microns core diameterEthernet 40-G BASE-SR4
2000/4700 (OM3/4) modal bandwidth (MHz*km)850 nm wavelength
50 m cable distanceMPO-12 port adapter
See the Cisco 40GBASE QSFP Modules Data Sheet for specifications of the QSFP for the 40-Gb BASE-SR-4.
Note
We recommend the following Cisco OM3 MTP/MPO cables.
Table 3: Cisco Cables
Cable LengthCisco Part Number
5 mCAB-ETH-40G-5M
10 mCAB-ETH-40G-10M
20 mCAB-ETH-40G-20M
1-Gb SX/10-Gb SR/10-Gb LR Network Module with Hardware Bypass
The following figure shows the front panel of the 1-Gb SX, 10-Gb SR and 10-Gb LR hardware bypass network
modules (FPR4K-NM-6X1SX-F, FPR4K-NM-6X10SR-F, FPR4K-NM-6X10LR-F). This is a single-wide
module that does not support hot swapping. The six ports are numbered from top to bottom, left to right. Pair
ports 1 and 2, 3 and 4, and 5 and 6 to form hardware bypass paired sets.
Overview
15
Overview
1-Gb SX/10-Gb SR/10-Gb LR Network Module with Hardware Bypass

Make sure you have the correct firmware package and software version installed to support this network
module. For instructions on how to verify your firmware package version and to upgrade the firmware if
necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower 4100/9300
FXOS Compatibility for the software compatibility matrix.
Note
Figure 12: FPR4K-NM-6X1SX-F, FPR4K-NM-6X10SR-F, FPR4K-NM-6X10LR-F
Six network activity LEDs
•Amber—No connection, or port is not in use,
or no link or network failure.
• Green—Link up, no network activity.
• Green, flashing—Network activity.
2Captive screw/handle1
Ethernet X/1 (top port)
Ethernet X/2 (bottom port)
Ports 1 and 2 are paired together to form a
hardware bypass pair.
4Bypass LEDs B1 through B3:
• Green—In standby mode.
•Amber, flashing—Port is in hardware bypass
mode, failure event.
• Amber—Port is in hardware bypass mode,
forced.
3
Ethernet X/5 (top port)
Ethernet X/6 (bottom port)
Ports 5 and 6 are paired together to form a
hardware bypass pair.
6Ethernet X/3 (top port)
Ethernet X/4 (bottom port)
Ports 3 and 4 are paired together to form a
hardware bypass pair.
5
The 1-Gb SX /10-Gb SR/10-Gb LR network modules have the following insertion loss measurements. Insertion
loss measurements help you to troubleshoot the network by verifying cable installation and performance.
Overview
16
Overview
1-Gb SX/10-Gb SR/10-Gb LR Network Module with Hardware Bypass

Table 4: 1-Gb SX Network Module (FPR4K-NM-6X1SX-F)
MaximumTypicalOperating Mode
1.4 dB
1.7 dB
0.9 dB
1.2 dB
Normal
Hardware bypass
Insertion loss
Cable distance
Half the
distance
specified by
the IEEE
standard.
Note
Modal bandwidth
(MHz/km)
Core diameter (microns)
110 m
137 m
250 m
275 m
500 m
160 (FDDI)
200 (OM1)
400
500 (OM2)
2000 (OM3)
62.5
62.5
50
50
50
Cable and operating
distance
Table 5: 10-Gb SR Network Module (FPR4K-NM-6X10SR-F)
MaximumTypicalOperating Mode
1.4 dB
1.7 dB
0.9 dB
1.2 dB
Normal
Hardware bypass
Insertion loss
Cable distance
Half the
distance
specified by
the IEEE
standard.
Note
Modal bandwidth
(MHz/km)
Core diameter (microns)
13 m
16.5 m
33 m
41 m
150 m
200 m
160 (FDDI)
200 (OM1)
400
500 (OM2)
2000 (OM3)
4700 (OM4)
62.5
62.5
50
50
50
50
Cable and operating
distance
Table 6: 10-Gb LR Network Module (FPR4K-NM-6X10LR-F)
MaximumTypicalOperating Mode
Overview
17
Overview
1-Gb SX/10-Gb SR/10-Gb LR Network Module with Hardware Bypass

1.6 dB
1.9 dB
1.2 dB
1.5 dB
Normal
Hardware bypass
Insertion loss
Cable distance
Half the
distance
specified by
the IEEE
standard.
Note
Modal bandwidth
(MHz/km)
Core diameter (microns)
5 kmSingle modeG.652Cable and operating
distance
Power Supply Modules
The Firepower 4100 supports two AC or DC power supply modules so that dual power supply redundancy
protection is available. Facing the back of the chassis, the power supply modules are numbered left to right,
for example, PSU1 and PSU2.
Do not mix AC and DC power supply modules in one chassis.
Note
After removing power from the chassis either by moving the power switch to OFF or unplugging the power
cord, wait at least 10 seconds before turning power back ON.
Note
Make sure that one power supply module is always active.
Attention
See Remove and Replace the Power Supply Module for the procedure for removing and replacing the power
supply module.
AC Power Supply
The power supplies can supply up to 1100-W power across the input voltage range. The load is shared when
both power supply modules are plugged in and running at the same time. The power supply modules are
hot-swappable.
Table 7: AC Power Supply Module Hardware Specifications
SpecificationDescription
100 to 240 V ACInput voltage
Overview
18
Overview
Power Supply Modules

13 A (at 100 V AC)
The system power requirements are lower than the power
supply module capabilities. See Hardware Specifications, on
page 24 for the system power requirements.
Note
Maximum current
1100 WMaximum output power
50 to 60 HzFrequency
1+1 redundantRedundancy
92%Efficiency at 50% load
DC Power Supply
The power supplies can supply up to 950 W of power across the input voltage range. The load is shared when
both power supply modules are plugged in and running at the same time. The power supply modules are
hot-swappable.
Table 8: DC Power Supply Module Hardware Specifications
SpecificationDescription
-40 to -60 V DCInput voltage
26A (at 40 V DC)
The system power requirements are lower than the power
supply module capabilities. See Hardware Specifications, on
page 24 for the system power requirements.
Note
Maximum current
950 WMaximum output power
1+1 redundantRedundancy
92%Efficiency at 50% load
Power Supply Module LEDs
The following figure shows the two-color power supply LEDs. The LEDs are located on the upper right side.
Overview
19
Overview
Power Supply Modules

Figure 13: Power Supply Module LEDs
Green OK LED2Amber FAIL LED1
The following table describes the power module supply LEDs and their states.
Table 9: Power Supply Module LEDs
Green LED (OK Status)Amber LED (Fail
Status)
OffOffNo power to all power supplies
OffOnPower supply module failure
Includes overvoltage, overcurrent, overtemperature,
and fan failure
Off1 Hz flashingPower supply module warning events
Power supply continues to operate.
With high temperature, high power, and slow fan
1 Hz flashingOffPower is present.
3.3 VSB on (power supply module off)
OnOffPower supply module is OK and on.
Fan Modules
The Firepower 4100 requires six fan modules, which are hot-swappable. They are installed in the rear of the
chassis. The system supports operation with a single fan failure (N+1 fan redundancy), but do not run the
system for an extended amount of time without all fan modules installed. Keep removal and replacement time
at three minutes. Remove and replace one fan module at a time.
If you remove a fan or a fan fails, the other fans operate at full speed, which can be noisy.
Overview
20
Overview
Fan Modules