Cisco Firepower 2130 Maintenance and service guide

Installation, Maintenance, and Upgrade
•Install, Remove, and Replace the Network Module, on page 1
•Remove and Replace the SSD, on page 3
•Remove and Replace the Power Supply Module, on page 6
•Connect the DC Power Supply Module, on page 9
•Secure the Power Cord on the Power Supply Module, on page 14
•Remove and Replace the Fan Tray, on page 18
•Install the FIPS Opacity Shield in a Two-Post Rack, on page 20
•Install the FIPS Opacity Shield in a Four-Post Rack, on page 23
Install, Remove, and Replace the Network Module
You can remove and replace the network module in the Firepower 2130 and 2140. Although the hardware
supports removing and replacing the network module while the system is running, the software does not
currently support hot swapping. You must power down the chassis to remove and replace network modules.
See Network Modules for more information.
This procedure describes how to install a network module into an empty slot that has never contained a network
module, and how to remove an installed network module and replace it with another network module.
Safety Warnings
Take note of the following component replacement safety warnings:
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove
all connections to de-energize the unit.
Warning
Installation, Maintenance, and Upgrade
1

Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the
necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089
for the definition of a skilled person.
Warning
Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment.
See statement 1089 for the definition of an instructed or skilled person.
Warning
Step 1 To install a new network module for the first time into an empty slot, do the following:
a) Power down the chassis by moving the power switch to the OFF position.
See Rear Panel for more information about the power switch.
b) Follow Steps 4 through 7 to install the new network module.
c) Power on the chassis by moving the power switch to the ON position.
Step 2 To remove and replace an existing network module, do the following:
a) Save your configuration.
b) Power down the chassis by moving the power switch to the OFF position.
See Rear Panel for more information about the power switch.
c) Continue with Step 3.
Step 3 To remove a network module, loosen the captive screw on the lower left side of the network module and pull out the
handle that is connected to the screw. This mechanically ejects the network module from the slot.
Installation, Maintenance, and Upgrade
2
Installation, Maintenance, and Upgrade
Install, Remove, and Replace the Network Module

Figure 1: Remove the Network Module
If the slot is to remain empty, install a blank faceplate to ensure proper airflow and to keep dust out of the chassis;
otherwise, install another network module.
Step 4 To replace a network module, hold the network module in front of the network module slot on the right of the chassis
and pull the network module handle out.
Step 5 Slide the network module into the slot and push it firmly into place until the handle is flush with the front of the network
module.
Step 6 Tighten the captive screw on the lower left side of the network module.
Step 7 Power on the chassis so that the new network module is recognized.
Remove and Replace the SSD
Although the hardware supports removing and replacing SSDs while the system is running, the software does
not currently support hot swapping. You must power down the chassis to remove and replace SSDs.
The 100-GB SSD is restricted to the 2110 and 2120. The 200-GB SSD is restricted to the 2130 and 2140. Do
not mix them.
Note
We may ship larger capacity SSDs depending on component supply availability. The larger capacity SSDs
are formatted to 100-GB for the 2110 and 2120 and formatted to 200-GB for the 2130 and 2140.
Note
Installation, Maintenance, and Upgrade
3
Installation, Maintenance, and Upgrade
Remove and Replace the SSD

You can install a Malware Storage Pack (MSP) in slot 2. The MSP stores threat detection data for use in future
analysis. It supports the Advanced Malware Protection (AMP) software feature. It is used as both storage and
as the Malware application repository. RAID is not supported.
Do not switch the two SSDs. You must install the MSP in slot 2. If you remove it and install it in slot 1, all
stored capture data are lost.
Caution
Safety Warnings
Take note of the following component replacement safety warnings:
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove
all connections to de-energize the unit.
Warning
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the
necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089
for the definition of a skilled person.
Warning
Installation, Maintenance, and Upgrade
4
Installation, Maintenance, and Upgrade
Remove and Replace the SSD

Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment.
See statement 1089 for the definition of an instructed or skilled person.
Warning
Step 1 Save your configuration.
Step 2 Power down the chassis by moving the power switch to the OFF position. See Rear Panel for more information on the
power switch.
Step 3 To remove the SSD in slot 1, face the front of the chassis, loosen the two captive screws on the SSD, and gently pull it
out of the chassis. See Front Panel for the location of the SSD slots for each model. The figure below shows the 2130
and 2140 front panel.
Figure 2: Remove the SSD
Step 4 To replace the SSD in slot 1, make sure the power switch is still in the OFF position, and then hold the SSD in front of
slot 1 and push it in gently until it is seated.
Step 5 To install the MSP SSD, make sure the power switch is still in the OFF position, and then remove the blank faceplate in
Slot 2 by loosening the captive screws on either side of the faceplate.
Step 6 Hold the MSP SSD in front of slot 2 and push it in gently until it is seated.
Do not switch the two SSDs. The MSP must be installed in slot 2. If you remove it and install it in slot 1, all
stored file capture data are lost.
Caution
Step 7 Tighten the captive screws on either side of the SSD.
Installation, Maintenance, and Upgrade
5
Installation, Maintenance, and Upgrade
Remove and Replace the SSD

Step 8 Check the SSD LED to make sure the SSD is operative. See Front Panel LEDs for a description of the SSD LEDs.
Remove and Replace the Power Supply Module
Power supply modules are hot-swappable. You can remove and replace power supply modules while the
system is running.
Safety Warnings
Take note of the following power and component removal safety warnings:
Statement 1003—DC Power Disconnection
To reduce risk of electric shock or personal injury, disconnect DC power before removing or replacing
components or performing upgrades.
Warning
Statement 1005—Circuit Breaker
This product relies on the building’s installation for short-circuit (overcurrent) protection. To reduce risk
of electric shock or fire, ensure that the protective device is rated not greater than:
AC: 20A
DC: 40A
Warning
Statement 1017—Restricted Area
This unit is intended for installation in restricted access areas. Only skilled, instructed, or qualified
personnel can access a restricted access area.
Warning
Statement 1018—Supply Circuit
To reduce risk of electric shock and fire, take care when connecting units to the supply circuit so that
wiring is not overloaded.
Warning
Statement 1022—Disconnect Device
To reduce risk of electric shock and fire, a readily accessible two-poled disconnect device must be
incorporated in the fixed wiring.
Warning
Installation, Maintenance, and Upgrade
6
Installation, Maintenance, and Upgrade
Remove and Replace the Power Supply Module

Statement 1025—Use Copper Conductors Only
To reduce risk of fire, use copper conductors only.
Warning
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove
all connections to de-energize the unit.
Warning
Statement 1029—Blank Faceplates and Cover Panels
Blank faceplates and cover panels serve three important functions: they reduce the risk of electric shock
and fire, they contain electromagnetic interference (EMI) that might disrupt other equipment, and they
direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates,
front covers, and rear covers are in place.
Warning
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1046—Installing or Replacing the Unit
To reduce risk of electric shock, when installing or replacing the unit, the ground connection must always
be made first and disconnected last.
Warning
Installation, Maintenance, and Upgrade
7
Installation, Maintenance, and Upgrade
Remove and Replace the Power Supply Module

Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the
necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089
for the definition of a skilled person.
Warning
Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment.
See statement 1089 for the definition of an instructed or skilled person.
Warning
Step 1 Unplug the power supply cable before removing the power supply module. You cannot disengage the power supply
module latch without first removing the cable.
Step 2 To remove a power supply module, face the back of the chassis and grasp the handle.
Step 3 Press the latch found on the right of the power supply to disengage the power supply.
Step 4 Place your other hand under the power supply module to support it while you slide it out of the chassis.
Installation, Maintenance, and Upgrade
8
Installation, Maintenance, and Upgrade
Remove and Replace the Power Supply Module

Figure 3: Remove the Power Supply Module
Power supply module handle2Power supply module 11
Power supply module 2Power supply module latch3
If the slot is to remain empty, install a blank faceplate to ensure proper airflow and to keep dust out of the chassis;
otherwise, install another power supply module.
Step 5 To replace a power supply module, hold the power supply module with both hands and slide it into the power supply
module bay.
Step 6 Push in the power supply module gently until you hear the latch engage and it is seated.
Step 7 Plug in the power supply cable.
Step 8 Check the LED on the power supply to make sure the power supply is operative. See Power Supply Modules.
Connect the DC Power Supply Module
For the Firepower 2130 and 2140, the input connector and plug must be UL-recognized under UL 486 for
field wiring. The connection polarity is from left to right: negative (–), positive (+), and ground.
Use the handle on the power supply for installation and removal. You must support the module with one hand
because of its length.
Installation, Maintenance, and Upgrade
9
Installation, Maintenance, and Upgrade
Connect the DC Power Supply Module

Figure 4: Firepower 2100 DC Power Supply Module
FAIL and OK LEDs2Handle1
Ejector latch4DC power connector3
Safety Warnings
Take note of the following warnings:
Statement 1003—DC Power Disconnection
To reduce risk of electric shock or personal injury, disconnect DC power before removing or replacing
components or performing upgrades.
Warning
Statement 1005—Circuit Breaker
This product relies on the building’s installation for short-circuit (overcurrent) protection. To reduce risk
of electric shock or fire, ensure that the protective device is rated not greater than:
AC: 20A
DC: 40A
Warning
Installation, Maintenance, and Upgrade
10
Installation, Maintenance, and Upgrade
Connect the DC Power Supply Module

Statement 1017—Restricted Area
This unit is intended for installation in restricted access areas. Only skilled, instructed, or qualified
personnel can access a restricted access area.
Warning
Statement 1018—Supply Circuit
To reduce risk of electric shock and fire, take care when connecting units to the supply circuit so that
wiring is not overloaded.
Warning
Statement 1022—Disconnect Device
To reduce risk of electric shock and fire, a readily accessible two-poled disconnect device must be
incorporated in the fixed wiring.
Warning
Statement 1025—Use Copper Conductors Only
To reduce risk of fire, use copper conductors only.
Warning
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove
all connections to de-energize the unit.
Warning
Statement 1029—Blank Faceplates and Cover Panels
Blank faceplates and cover panels serve three important functions: they reduce the risk of electric shock
and fire, they contain electromagnetic interference (EMI) that might disrupt other equipment, and they
direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates,
front covers, and rear covers are in place.
Warning
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Installation, Maintenance, and Upgrade
11
Installation, Maintenance, and Upgrade
Connect the DC Power Supply Module

Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1046—Installing or Replacing the Unit
To reduce risk of electric shock, when installing or replacing the unit, the ground connection must always
be made first and disconnected last.
Warning
Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the
necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089
for the definition of a skilled person.
Warning
Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment.
See statement 1089 for the definition of an instructed or skilled person.
Warning
Before you begin
• The color coding of the DC input power supply leads depends on the color coding of the DC power
source at your site. Make sure that the lead color coding you choose for the DC input power supply
matches the lead color coding used at the DC power source and verify that the power source is connected
to the negative (–) terminal and to the positive (+) terminal on the power supply.
• Make sure that the chassis ground is connected on the chassis before you begin installing the DC power
supply. See Ground the Chassis for the procedure.
Step 1 Verify that the power is off to the DC circuit on the power supply module that you are installing.
Step 2 While supporting the power supply module with one hand, insert the power supply module into the power supply bay
and gently push it in. See the figure above for the location of the handle.
Step 3 Use a wire-stripping tool to strip each of the 2 wires coming from the DC input power source. Strip the wires to
approximately 0.39 inch (10 mm) + 0.02 inch (0.5 mm). We recommend you use 14 AWG insulated wire.
Installation, Maintenance, and Upgrade
12
Installation, Maintenance, and Upgrade
Connect the DC Power Supply Module

Do not strip more than the recommended length of wire because doing so could leave the wire exposed from
the terminal block.
Note
Figure 5: Stripped DC Input Source Wire
—Strip the wires to approximately 0.39 inch (10 mm) +
0.02 inch (0.5 mm)
1
Step 4 Insert the exposed wire into the terminal block. Make sure that you cannot see any wire lead outside the plastic cover.
Only wires with insulation should extend from the terminal block.
Step 5 Use a screwdriver to tighten the terminal block captive screws.
Do not over torque the terminal block captive screws. Make sure that the connection is snug, but the wire is
not crushed. Verify by tugging lightly on each wire to make sure that they do not move.
Caution
Installation, Maintenance, and Upgrade
13
Installation, Maintenance, and Upgrade
Connect the DC Power Supply Module

Figure 6: Tighten the Terminal Block Captive Screws
Positive (+) lead wire2Negative (-) lead wire1
Step 6 Repeat these steps for the remaining DC input power source wire as applicable.
Step 7 Use a tie wrap to secure the wires to the rack, so that the wires are not pulled from the terminal block.
Step 8 Set the DC disconnect switch in the circuit to ON. In a system with multiple power supplies, connect each power supply
to a separate DC power source. In the event of a power source failure, if the second source is still available, it can maintain
system operation.
Step 9 Verify power supply operation by checking the power supply LED on the front of the chassis. See Front Panel LEDs for
the LED values.
Secure the Power Cord on the Power Supply Module
To secure the power supply module against accidental removal and thus prevent disrupting system performance,
use the tie wrap and clamp provided in the accessories kit that ships with your Firepower 2100.
Safety Warnings
Take note of the following component replacement safety warnings:
Installation, Maintenance, and Upgrade
14
Installation, Maintenance, and Upgrade
Secure the Power Cord on the Power Supply Module

Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove
all connections to de-energize the unit.
Warning
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the
necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089
for the definition of a skilled person.
Warning
Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment.
See statement 1089 for the definition of an instructed or skilled person.
Warning
Step 1 Attach the clamp to the tie wrap by holding the clamp with the loop side on the bottom and sliding the tie wrap through
the box-shaped channel above the clamp (see the following figure).
Installation, Maintenance, and Upgrade
15
Installation, Maintenance, and Upgrade
Secure the Power Cord on the Power Supply Module

One side of the tie wrap has evenly spaced ridges and the other is smooth. Be sure the ridged side is face up and that you
slide it through the open side of the channel. You will hear a click as the tie slides through—it moves in one direction
only. To remove the tie wrap from the clamp, push the lever on the closed side of the box-shaped channel and slide out
the tie wrap.
Figure 7: Tie Wrap Through the Box Channel of the Clamp
Tie wrap2Box channel1
Step 2 Attach the clamp to the power supply module:
a) Locate the hexagonal ventilation hole on the power supply module at the center of the plug just below the power
connector body (see the following figures).
b) Plug the snapping portion of the tie wrap into the hexagonal hole.
c) With the clamp side facing up, push the tie wrap in until it is fully engaged.
Make sure you have the correct location because you cannot remove the tie wrap from the power supply
module once you have installed it without damaging the tie wrap.
Caution
Installation, Maintenance, and Upgrade
16
Installation, Maintenance, and Upgrade
Secure the Power Cord on the Power Supply Module

Figure 8: Connect the Tie Wrap
Hexagonal hole2Tie wrap1
Step 3 Secure the clamp:
a) Plug in the power supply power cord and wrap the clamp around the over mold portion of the power cord.
b) Squeeze the clamp tabs together so that the annular teeth engage with the mate on the clamp.
c) Make sure the clamp fits snugly into the over mold.
d) Adjust the clamp position on the tie wrap so that the clamp is tight against the front of the over mold and the power
cord cannot be removed by lightly pulling on it.
Figure 9: Clamp on Over Mold of Power Cord
Power cord over mold2Power cord1
Direction to squeeze the clamp tabs4Tie clamp annular teeth3
Installation, Maintenance, and Upgrade
17
Installation, Maintenance, and Upgrade
Secure the Power Cord on the Power Supply Module

—Clamp release tabs5
Step 4 If you need to remove the power cord, push the release tab on the clamp to force the annular clamp teeth to disengage
and the clamp opens up. You can then remove the clamp from the power cord.
Remove and Replace the Fan Tray
You can remove and replace the fan tray while the Firepower 2130 and 2140 are running. The air flow moves
from front to back. All fan modules are integrated in a single fan tray.
Removing the fan tray exposes the appliance to no airflow. Replace the fan tray within 30 seconds after
removal to avoid overheating the appliance. If you wait longer than 30 seconds, the appliance may power off
automatically to prevent damage to components. The appliance does not power up and boot properly if the
fan tray is missing.
Caution
Safety Warnings
Take note of the following component replacement safety warnings:
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock, remove
all connections to de-energize the unit.
Warning
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Installation, Maintenance, and Upgrade
18
Installation, Maintenance, and Upgrade
Remove and Replace the Fan Tray

Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes the
necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement 1089
for the definition of a skilled person.
Warning
Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this equipment.
See statement 1089 for the definition of an instructed or skilled person.
Warning
Step 1 Have the fan tray ready for immediate insertion and near the appliance so that you can reinstall the fan tray within 30
seconds.
Step 2 To remove a fan tray, face the rear of the chassis, and loosen the two captive screws on the fan tray.
Step 3 Pull the fan tray out of the chassis.
Figure 10: Remove the Fan Tray
Step 4 To replace a fan tray, hold the fan tray in front of the fan slot.
Step 5 Push the fan tray into the chassis until it is properly seated, and tighten the captive screws.
Installation, Maintenance, and Upgrade
19
Installation, Maintenance, and Upgrade
Remove and Replace the Fan Tray

If the system is powered on, listen for the fans. You should immediately hear the fans operating. If you do not hear the
fans, make sure the fan tray is inserted completely into the chassis and the faceplate is flush with the outside surface of
the chassis.
Step 6 Verify that the fan is operational by checking the fan tray LED. See Front Panel LEDs for a description of the fan LEDs.
Install the FIPS Opacity Shield in a Two-Post Rack
Because the FIPS opacity shield covers the serial number on the chassis, the Crypto Officer (CO) should copy
the serial number and store it in a secure place. The serial number is needed when you call Cisco TAC.
Note
This procedure should be performed only by the CO.
Caution
You need the following to install the FIPS opacity shield:
• #1 Phillips screwdriver
• The following items from the FIPS kit:
• One FIPS opacity shield
•Four 8-32 x 0.375-inch Phillips screws used to attach the FIPS opacity shield to the cable management
brackets
• Seven Tamper Evidence Labels (TEL)
The TELs are made of a special thin gauge vinyl with self-adhesive backing.
Once the CO attaches them on the chassis, any attempt to open the chassis damages
the TELs or the chassis cover. Because the TELs have nonrepeated serial numbers,
the CO can inspect them for damage and compare them against the applied serial
numbers to verify whether the chassis has been tampered with. TELs with curled
corners, rips, and slices indicate tampering. The word “FIPS” or “OPEN” may
appear if the label has been peeled back.
Note
Step 1 Copy the serial number and store in a secure place. To find the serial number, see Serial Number Location.
Step 2 Perform the steps described in Rack-Mount the Chassis Using Brackets including installing the cable management
bracket (Step 2).
Step 3 Connect the cables to the ports. Make sure that the cables have enough slack to route them through the cable mounting
brackets.
Installation, Maintenance, and Upgrade
20
Installation, Maintenance, and Upgrade
Install the FIPS Opacity Shield in a Two-Post Rack