Cisco Firepower 9300 Maintenance and service guide

Installation, Maintenance, and Upgrade
•Remove and Replace the Supervisor, on page 1
•Install, Remove, and Replace the Security Module, on page 3
•Remove and Replace the SSD, on page 6
•Install, Remove, and Replace the Single-Wide Network Module, on page 8
•Install, Remove, and Replace the Double-Wide Network Module, on page 13
•Remove and Replace the Power Supply Module, on page 17
•Connect the DC Power Supply Module, on page 22
•Connect the HVDC Power Supply Module, on page 25
•Remove and Replace the Fan Module, on page 29
•Install the FIPS Opacity Shield, on page 32
Remove and Replace the Supervisor
You can remove the Firepower 9300 Supervisor while the system is powered on without damage to the
Supervisor hardware or system. However, because the supervisor is controlling the entire chassis, including
the power system, we recommend that you use the power switch on the rear panel of the chassis to put the
system in standby mode. See Supervisor for more information about the Supervisor.
Safety Warnings
Take note of the following component replacement safety warnings:
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock,
remove all connections to de-energize the unit.
Warning
Installation, Maintenance, and Upgrade
1

Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes
the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement
1089 for the definition of a skilled person.
Warning
Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this
equipment. See statement 1089 for the definition of an instructed or skilled person.
Warning
Step 1 To remove the Supervisor, loosen the two captive screws on the Supervisor tray.
Step 2 Remove the Supervisor tray from the chassis by pulling the handle on the Supervisor until it is unseated.
Step 3 Slide the tray partway out of the chassis, place your other hand under the tray to support its weight, and remove it from
the chassis.
Installation, Maintenance, and Upgrade
2
Installation, Maintenance, and Upgrade
Remove and Replace the Supervisor

Figure 1: Remove and Replace the Supervisor
Step 4 To install a new Supervisor tray, grasp the front of the tray and place your other hand under the tray to support it.
Step 5 Open the handle on the front of the tray.
Step 6 Gently slide the tray into the opening until you cannot push it any farther.
Step 7 Press the handle so that it catches the edge of the chassis and presses the tray all the way in.
Step 8 When the tray is all the way in the chassis, push in the handle to fully seat the tray.
Step 9 Using your fingers, tighten the captive screw on the front of the Supervisor; if using a screw driver, tighten to no more
than 3 in-lbs.
Tightening the captive screws with your fingers is unlikely to lead to stripped or damaged captive screws.
Install, Remove, and Replace the Security Module
This procedure describes how to install a security module into an empty slot that has never contained a security
module, and how to remove an installed security module and replace it with another security module.
You can remove the Firepower 9300 security module while the system is running, but we recommend that
you use the power switch on the rear of the chassis to put the security module in standby mode before removal
and reinstallation. If you install a new service module in an empty slot, you do not need to power off the
system.
Make sure you have the correct firmware package and software version installed to support your security
module. For instructions on how to verify your firmware package version and to upgrade the firmware
if necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower
4100/9300 FXOS Compatibility for the software compatibility matrix.
Note
Installation, Maintenance, and Upgrade
3
Installation, Maintenance, and Upgrade
Install, Remove, and Replace the Security Module

If you want to replace an existing security module with another security module, you must decommission
the old security module before removing it. See the "Security Module/Engine Management" chapter in
the Cisco FXOS Firepower Chassis Manager Configuration Guide for the instructions. After you
decommission the old security module, you can remove it, install the new security module, have the
system acknowledge it, and then reinitialize it.
Caution
Safety Warnings
Take note of the following component replacement safety warnings:
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock,
remove all connections to de-energize the unit.
Warning
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes
the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement
1089 for the definition of a skilled person.
Warning
Installation, Maintenance, and Upgrade
4
Installation, Maintenance, and Upgrade
Install, Remove, and Replace the Security Module

Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this
equipment. See statement 1089 for the definition of an instructed or skilled person.
Warning
Step 1 To install a new security module for the first time into an empty slot, do the following:
a) Follow steps 6 through 10.
b) Enter scope slot > acknowledge to bring the new security module online.
Step 2 To remove a security module, loosen the captive screw on the front of the security module.
Step 3 Remove the security module from the chassis by pulling the handle on the security module until it is unseated.
Step 4 Slide the security module partway out of the chassis, place your other hand under the security module to support its
weight, and remove it from the chassis.
Figure 2: Remove and Install the Security Module
Step 5 Place the security module on an antistatic mat or antistatic foam if you are not immediately reinstalling it in another
slot.
If the slot is to remain empty, install a blank faceplate to ensure proper airflow and to keep dust out of the chassis;
otherwise install another security module.
Step 6 To install a new security module, grasp the front of the security module and place your other hand under the security
module to support it.
Step 7 Open the handle in the front of the security module.
Step 8 Gently slide the security module into the opening until you cannot push it any farther.
Step 9 Press the handle so that it catches the edge of the chassis and presses the security module all the way in.
Installation, Maintenance, and Upgrade
5
Installation, Maintenance, and Upgrade
Install, Remove, and Replace the Security Module

Step 10 Using your fingers, tighten the captive screw on the front of the security module; if using a screw driver, tighten to no
more than 3 in-lbs.
Tightening the captive screws with your fingers is unlikely to lead to stripped or damaged captive screws.
Remove and Replace the SSD
There are two SSDs in each security module. They are configured in a RAID 1 configuration. If one or both
SSDs fail, you must decommission the security module and acknowledge the slot to start the SSD installation
and update the inventory. See the "Security Module/Engine Management" chapter in the Cisco FXOS Firepower
Chassis Manager Configuration Guide for the instructions. After you decommission the security module, you
can remove the SSDs, install the new SSDs, and acknowledge the slot to bring the security module back
online.
Once you replace the SSD, the storage controller rebuilds the newly installed SSD and no loss of data
should occur. If both SSDs fail, no data can be recovered.
Note
The two SSDs in RAID 1 store each other's data. Breaking the RAID pair to use in another service
module causes the service module to fail discovery by the Supervisor.
Note
Safety Warnings
Take note of the following warnings:
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock,
remove all connections to de-energize the unit.
Warning
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Installation, Maintenance, and Upgrade
6
Installation, Maintenance, and Upgrade
Remove and Replace the SSD

Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes
the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement
1089 for the definition of a skilled person.
Warning
Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this
equipment. See statement 1089 for the definition of an instructed or skilled person.
Warning
Step 1 Decommission the security module.
Step 2 To remove an SSD, face the front of the chassis, press the handle release on the SSD and gently pull it out of the slot.
Installation, Maintenance, and Upgrade
7
Installation, Maintenance, and Upgrade
Remove and Replace the SSD

Figure 3: Remove the SSD
Handle release2Handle1
Step 3 To replace the SSD, hold the SSD in front of slot 1, push it in gently until it is seated, and close the handle.
Step 4 Tighten the captive screws on either side of the SSD.
Step 5 Acknowledge the slot to start the SSD installation.
Install, Remove, and Replace the Single-Wide Network Module
This procedure describes how to install a network module into an empty slot that has never contained a network
module, and how to remove an installed network module and replace it with another network module.
Hot Swapping
Verify that you have the correct software to support hot swapping on the Firepower 10-Gb and 40-Gb
nonhardware bypass network modules. See Cisco Firepower 4100/9300 FXOS Compatibility for the
software compatibility matrix. You must hot swap with an identical network module, that is, a network
module with the same PID. See Product ID Numbers for a list of the network module PIDs. You must
bring the network module offline using the appropriate CLI commands before removing the network
module from the chassis so that all network module configuration is saved.
We do not recommend that you remove the network module without bringing it properly offline
using the appropriate CLI commands.
Caution
Installation, Maintenance, and Upgrade
8
Installation, Maintenance, and Upgrade
Install, Remove, and Replace the Single-Wide Network Module

Verify that you have the correct ROMMON on the Supervisor to support hot swapping. For
instructions on how to verify your firmware package version and to upgrade the firmware if
necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide.
Note
To remove and replace the network modules that do not currently support hot swapping, power off the chassis,
replace the network module, and then power the chassis back on.
Verify that you have the correct ROMMON on the Supervisor to support the 100-Gb network modules
(FPR9K-NM-4X100G and FPR9K-NM-2X100G). For instructions on how to verify your firmware
package version and to upgrade the firmware if necessary, see the Cisco Firepower 4100/9300 FXOS
Firmware Upgrade Guide.
Note
The following figure shows the front panel of the 10-Gb nonhardware bypass network module. The location
of the captive screw, ports, and LEDs is shown. See Network Modules for more information about the other
single-wide network modules.
Figure 4: Firepower Network Module 10 Gb
Ethernet X/12Captive screw/handle1
Ethernet X/54Ethernet X/33
Ethernet X/26Ethernet X/75
Ethernet X/68Ethernet X/47
Network activity LEDs
• Off—No connection or port is not in use.
• Amber—No link or network failure.
• Green—Link up.
• Green, flashing—Network activity.
10Ethernet X/89
Installation, Maintenance, and Upgrade
9
Installation, Maintenance, and Upgrade
Install, Remove, and Replace the Single-Wide Network Module

Safety Warnings
Take note of the following component replacement safety warnings:
Statement 1028—More Than One Power Supply
This unit might have more than one power supply connection. To reduce risk of electric shock,
remove all connections to de-energize the unit.
Warning
Statement 1030—Equipment Installation
Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning
Statement 1073—No User-Serviceable Parts
There are no serviceable parts inside. To avoid risk of electric shock, do not open.
Warning
Statement 1089—Instructed and Skilled Person Definitions
An instructed person is someone who has been instructed and trained by a skilled person and takes
the necessary precautions when working with equipment.
A skilled person or qualified personnel is someone who has training or experience in the equipment
technology and understands potential hazards when working with equipment.
Warning
Statement 1090—Installation by Skilled Person
Only a skilled person should be allowed to install, replace, or service this equipment. See statement
1089 for the definition of a skilled person.
Warning
Statement 1091—Installation by an Instructed Person
Only an instructed person or skilled person should be allowed to install, replace, or service this
equipment. See statement 1089 for the definition of an instructed or skilled person.
Warning
Installation, Maintenance, and Upgrade
10
Installation, Maintenance, and Upgrade
Install, Remove, and Replace the Single-Wide Network Module