Cisco Secure Network Server 3600 Series Manual

Cisco Secure Network Server 3600 Series Appliance Hardware
Installation Guide
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com
go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
other company. (1721R)
©2019 Cisco Systems, Inc. All rights reserved.

CONTENTS
Cisco Secure Network Server 3600 Series Appliance Overview 1
CHAPTER 1
Cisco Secure Network Server 3600 Series Appliances 1
Cisco SNS 3600 Series Appliance Hardware Specifications 1
External Features 3
Status LEDs and Buttons 5
Front Panel LEDs 5
Rear Panel LEDs 8
Internal Diagnostic LEDs 9
Serviceable Component Locations 10
Summary of Server Features 12
Installing the Appliance 15
CHAPTER 2
Installation Warnings and Guidelines 15
Rack Requirements 16
Installing the Appliance in a Rack 17
Installing the Cable Management Arm (Optional) 19
Reversing the Cable Management Arm (Optional) 20
Initial Setup 21
Connecting to the Appliance Locally For Setup 22
Connecting to the Appliance Remotely For Setup 23
Setting Up the System With the Cisco IMC Configuration Utility 24
Updating the BIOS and Cisco IMC Firmware 26
Accessing the System BIOS 26
Server Specifications 27
CHAPTER 3
Server Specifications 27
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
iii

Physical Specifications 27
Environmental Specifications 27
Power Specifications 28
770 W AC Power Supply 28
1050 W AC Power Supply 29
1600 W AC Power Supply 30
1050 W DC Power Supply 30
Power Cord Specifications 31
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
iv
Contents

CHAPTER 1
Cisco Secure Network Server 3600 Series
Appliance Overview
•Cisco Secure Network Server 3600 Series Appliances, on page 1
•Cisco SNS 3600 Series Appliance Hardware Specifications , on page 1
•External Features, on page 3
•Serviceable Component Locations, on page 10
•Summary of Server Features, on page 12
Cisco Secure Network Server 3600 Series Appliances
Cisco Secure Network Server (SNS) 3600 series appliances are designed to deliver high performance and
efficiency for a wide range of workloads.
Cisco SNS 3600 series appliances support the Unified Extensible Firmware Interface (UEFI) secure boot
feature. This feature ensures that only a Cisco-signed ISE image can be installed on the Cisco SNS 3600 series
appliances, and prevents installation of any unsigned operating system even with physical access to the device.
For example, generic operating systems, such as Red Hat Enterprise Linux or Microsoft Windows cannot
boot on this appliance.
Cisco SNS 3600 Series Appliance Hardware Specifications
The following table describes the hardware specifications of Cisco SNS 3600 series appliances.
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
1

Table 1: Cisco SNS 3600 Series Appliance Hardware Specifications
DiagramsHardware SpecificationsCisco SNS 3600 Series Appliance
Figure 1: Cisco SNS 3600 Series
Appliance Front Panel, on page 3
Figure 2: Cisco SNS 3600 Series
Appliance Rear Panel, on page 4
• Cisco UCS C220 M5
• Intel Xeon Silver 2.1 GHz
4110, 8 CPU Cores, 16
Threads
• 32 GB RAM
• 1 x 600-GB disk
• RAID-0
• 6 GbE network interfaces
• For physical, environmental,
and power specifications, see
Server Specifications, on page
27
Cisco SNS-3615-K9
• Cisco UCS C220 M5
• Intel Xeon Silver 2.1 GHz
4116, 12 CPU Cores, 24
Threads
• 96 GB RAM
• 4 x 600-GB disk
• RAID 10
• 6 GbE network interfaces
• For physical, environmental,
and power specifications, see
Server Specifications, on page
27
Cisco SNS-3655-K9
Cisco SNS-3695-K9
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
2
Cisco Secure Network Server 3600 Series Appliance Overview
Cisco SNS 3600 Series Appliance Hardware Specifications

DiagramsHardware SpecificationsCisco SNS 3600 Series Appliance
• Cisco UCS C220 M5
• Intel Xeon Silver 2.1 GHz
4116, 12 CPU Cores, 24
Threads
• 256 GB RAM
• 8 x 600-GB disk
• RAID 10
• 6 GbE network interfaces
• For physical, environmental,
and power specifications, see
Server Specifications, on page
27
External Features
This section describes the external features of Cisco SNS 3600 series appliance.
Cisco SNS 3600 Front Panel Features
The following figure shows the front panel features of Cisco SNS 3600 series appliance.
For definitions of LED states, see Front Panel LEDs, on page 5.
Figure 1: Cisco SNS 3600 Series Appliance Front Panel
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
3
Cisco Secure Network Server 3600 Series Appliance Overview
External Features

Fan status LED7Drive bays 1 – 10 support Serial Attached SCSI
(SAS) and Serial Advanced Technology
Attachment (SATA) hard disk drives (HDDs) and
solid state drives (SSDs)
1
Network link activity LED8Drive bays 1 – 10 support Non-Volatile Memory
express (NVMe) based Peripheral Component
Interconnect Express (PCIe) SSDs
2
Temperature status LED9Power button or power status LED3
Pull-out asset tag10Unit identification button or LED4
KVM connector
(used with KVM cable that provides one DB-15
VGA, one DB-9 serial, and two USB connectors)
11System status LED5
-Power supply status LED6
Cisco SNS 3600 Series Appliance Rear Panel Features
The following figure shows the rear panel features of Cisco SNS 3600 series appliance.
For definitions of LED states, see Rear Panel LEDs, on page 8.
Figure 2: Cisco SNS 3600 Series Appliance Rear Panel
Rear unit identification button or LED7Modular LAN-on-motherboard (mLOM) card bay
(x16 PCIe lane)
1
Power supplies (two, redundant as 1+1)8Two USB 3.0 ports2
PCIe riser 2 or slot 2 (x16 lane)
Includes PCIe cable connectors for front-loading
NVMe SSDs (x8 lane)
9Dual 1-Gb or 10-Gb Ethernet ports (LAN1 and
LAN2)
The dual LAN ports can support 1 Gbps or 10 Gbps
depending on the link partner capability.
3
PCIe riser 1 or slot 1 (x16 lane)10VGA video port (DB-15 connector)4
Threaded holes for dual-hole grounding lug111-Gb Ethernet dedicated management port5
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
4
Cisco Secure Network Server 3600 Series Appliance Overview
External Features

-Serial port (RJ-45 connector)6
Status LEDs and Buttons
This section contains information for interpreting front, rear, and internal LED states.
Front Panel LEDs
The following figure shows the front panel LEDs of Cisco SNS 3600 series appliance.
Figure 3: Front Panel LEDs
Table 2: Front Panel LEDs
StatesLED Name
• Off—The hard drive is operating properly.
• Amber—Drive fault detected.
• Amber, blinking—The device is rebuilding.
• Amber, blinking with one-second interval—Drive
locate function activated in the software.
SAS/SATA drive fault
NVMe SSD drive tray LEDs have different
behavior than SAS/SATA drive trays.
Note
1
SAS
• Off—There is no hard drive in the hard drive tray (no
access, no fault).
• Green—The hard drive is ready.
•Green, blinking—The hard drive is reading or writing
data.
SAS/SATA drive activity LED2
SAS
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
5
Cisco Secure Network Server 3600 Series Appliance Overview
Status LEDs and Buttons

• Off—The drive is not in use and can be safely
removed.
• Green—The drive is in use and functioning properly.
• Green, blinking—The driver is initializing following
insertion or the driver is unloading following an eject
command.
• Amber—The drive has failed.
• Amber, blinking—Drive locate function activated in
the software.
NVMe SSD drive fault
NVMe SSD drive tray LEDs have different
behavior than SAS/SATA drive trays.
Note
1
NVMe
• Off—No drive activity.
• Green, blinking—There is drive activity.
NVMe SSD activity2
NVMe
• Off—There is no AC power to the server.
•Amber—The server is in standby power mode. Power
is supplied only to the Cisco Integrated Management
Controller (Cisco IMC) and some motherboard
functions.
• Green—The server is in main power mode. Power is
supplied to all server components.
Power button or LED3
• Off—The unit identification function is not in use.
• Blue, blinking—The unit identification function is
activated.
Unit identification4
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
6
Cisco Secure Network Server 3600 Series Appliance Overview
Front Panel LEDs

• Green—The server is running in normal operating
condition.
• Green, blinking—The server is performing system
initialization and memory check.
• Amber, steady—The server is in a degraded
operational state (minor fault). For example:
• Power supply redundancy is lost.
• CPUs are mismatched.
• At least one CPU is faulty.
• At least one dual in-line memory module
(DIMM) is faulty.
•At least one drive in a RAID configuration failed.
• Amber, 2 blinks—There is a major fault with the
system board.
• Amber, 3 blinks—There is a major fault with the
DIMMs.
• Amber, 4 blinks—There is a major fault with the
CPUs.
System health5
• Green—All power supplies are operating normally.
• Amber, steady—One or more power supplies are in
a degraded operational state.
• Amber, blinking—One or more power supplies are
in a critical fault state.
Power supply status6
• Green—All fan modules are operating properly.
•Amber, blinking—One or more fan modules breached
the non-recoverable threshold.
Fan status7
• Off—The Ethernet Lights Out Management (LOM)
port link is idle.
• Green—One or more Ethernet LOM ports are
link-active, but there is no activity.
• Green, blinking—One or more Ethernet LOM ports
are link-active, with activity.
Network link activity8
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
7
Cisco Secure Network Server 3600 Series Appliance Overview
Front Panel LEDs

•Green—The server is operating at normal temperature.
• Amber, steady—One or more temperature sensors
breached the critical threshold.
• Amber, blinking—One or more temperature sensors
breached the non-recoverable threshold.
Temperature status9
Rear Panel LEDs
The following figure shows the rear panel LEDs of Cisco SNS 3600 series appliance.
Figure 4: Rear Panel LEDs
Table 3: Rear Panel LEDs
StatesLED Name
• Off—Link speed is 100 Mbps.
• Amber—Link speed is 1 Gbps.
• Green—Link speed is 10 Gbps.
1-Gb or 10-Gb Ethernet link speed (on
both LAN1 and LAN2)
1
• Off—No link is present.
• Green—Link is active.
• Green, blinking—Traffic is present on the
active link.
1-Gb or 10-Gb Ethernet link status (on
both LAN1 and LAN2)
2
• Off—Link speed is 10 Mbps.
• Amber—Link speed is 100 Mbps.
• Green—Link speed is 1 Gbps.
1-Gb Ethernet dedicated management
link speed
3
• Off—No link is present.
• Green—Link is active.
• Green, blinking—Traffic is present on the
active link.
1-Gb Ethernet dedicated management
link status
4
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
8
Cisco Secure Network Server 3600 Series Appliance Overview
Rear Panel LEDs

• Off—The unit identification function is not
in use.
• Blue, blinking—The unit identification
function is activated.
Rear unit identification5
AC power supplies:
• Off—No AC input (12 V main power off,
12 V standby power off).
• Green, blinking—12 V main power off; 12
V standby power on.
• Green, solid—12 V main power on; 12 V
standby power on.
• Amber, blinking—Warning threshold
detected, but 12 V main power on.
• Amber, solid—Critical error detected; 12
V main power off (for example,
over-current, over-voltage, or
over-temperature failure).
DC power supplies:
• Off—No DC input (12 V main power off,
12 V standby power off).
• Green, blinking—12 V main power off; 12
V standby power on.
• Green, solid—12 V main power on; 12 V
standby power on.
• Amber, blinking—Warning threshold
detected, but 12 V main power on.
• Amber, solid—Critical error detected; 12
V main power off (for example,
over-current, over-voltage, or
over-temperature failure).
Power supply status (one LED for each
power supply unit)
6
Internal Diagnostic LEDs
The server has internal fault LEDs for CPUs, DIMMs, and fan modules.
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
9
Cisco Secure Network Server 3600 Series Appliance Overview
Internal Diagnostic LEDs

Figure 5: Internal Diagnostic LED Locations
DIMM fault LEDs (one behind each DIMM socket
on the motherboard)
These LEDs operate only when the server is in
standby power mode.
• Amber—DIMM has a fault.
• Off—DIMM is OK.
3Fan module fault LEDs (one behind each fan
connector on the motherboard)
• Amber—Fan has a fault or is not fully seated.
• Green—Fan is OK.
1
-CPU fault LEDs (one behind each CPU socket on
the motherboard).
These LEDs operate only when the server is in
standby power mode.
• Amber—CPU has a fault.
• Off—CPU is OK.
2
Serviceable Component Locations
This section describes the field-replaceable components and service related items. The view in the following
figure shows the appliance with the top cover removed.
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
10
Cisco Secure Network Server 3600 Series Appliance Overview
Serviceable Component Locations

Figure 6: Serviceable Component Locations
Power supplies (hot-swappable when redundant as
1+1)
10Front-loading drive bays 1–10 support SAS/SATA
drives
1
Trusted platform module (TPM) socket on
motherboard (not visible in this view)
11Cooling fan modules (seven, hot-swappable)2
PCIe riser 2 or slot 2 (half-height, x16 lane)
Includes PCIe cable connectors for front-loading
NVMe SSDs (x8 lane)
12Supercap unit mounting bracket (RAID backup)3
PCIe riser 1 or slot 1 (full-height, x16 lane)
Includes socket for Micro-SD card
13DIMM sockets on motherboard (12 per CPU)4
Modular LOM (mLOM) card bay on chassis floor
(x16 PCIe lane), not visible in this view
14CPUs and heatsinks (up to two)5
Modular RAID (mRAID) riser, can optionally be a
riser that supports either:
• Hardware RAID controller card
• Interposer card for embedded SATA RAID
15Mini storage module socket
Supports either an SD card module with two SD
card slots; or an M.2 module with two NVMe or
SATA M.2 SSD slots.
6
PCIe cable connectors for front-loading NVMe SSDs
on PCIe riser 2
16Chassis intrusion switch (optional)7
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
11
Cisco Secure Network Server 3600 Series Appliance Overview
Serviceable Component Locations

Micro-SD card socket on PCIe riser 117Internal USB 3.0 port on motherboard8
-RTC battery, vertical socket9
Summary of Server Features
The following table lists a summary of server features.
DescriptionFeature
One rack-unit (1RU) chassisChassis
• Intel Xeon 2.1 GHz 4110
• Intel Xeon 2.1 GHz 4116
Central Processor
24 DDR4 DIMM sockets on the motherboard (12 each CPU)Memory
Multi-bit error protection is supportedMulti-bit error protection
Board management controller (BMC), running Cisco Integrated
Management Controller (Cisco IMC) firmware.
Depending on your Cisco IMC settings, Cisco IMC can be
accessed through the 1-Gb dedicated management port, the
1-Gb/10-Gb Ethernet LAN ports, or a Cisco virtual interface card.
Baseboard management
Rear panel:
• One 1-Gb Ethernet dedicated management port (RJ-45
connector)
• Two 1-Gb/10-Gb BASE-T Ethernet LAN ports (RJ-45
connectors)
The dual LAN ports can support 1 Gbps or 10 Gbps
depending on the link partner capability.
• One RS-232 serial port (RJ-45 connector)
• One Video Graphics Array (VGA) connector port (DB-15
connector)
• Two USB 3.0 ports
Front panel:
• One front-panel keyboard/video/mouse (KVM) connector
that is used with the KVM cable, which provides two USB
2.0, one VGA, and one DB-9 serial connector.
Network and management I/O
One dedicated socket (x16 PCIe lane) that can be used to add an
mLOM card for additional rear-panel connectivity.
Modular LOM
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
12
Cisco Secure Network Server 3600 Series Appliance Overview
Summary of Server Features

DescriptionFeature
The two 1-Gb/10-Gb BASE-T Ethernet LAN ports support the
wake-on-LAN (WoL) standard.
WoL
Two power supplies, redundant as 1+1:
• AC power supplies 770 W AC each
• AC power supplies 1050 W AC each
• AC power supplies 1600 W AC each
• DC power supplies 1050 W DC each
Do not mix power supply types or wattages in the server.
Power
The advanced configuration and power interface (ACPI) 4.0
standard is supported.
ACPI
Seven hot-swappable fan modules for front-to-rear cooling.Cooling
Two horizontal PCIe expansion slots on a PCIe riser assembly.PCIe I/O
The PCIe bus slots in this server support the InfiniBand
architecture.
InfiniBand
The following internal storage options are available:
• One USB port on the motherboard.
• Mini-storage module socket, optionally with either:
• SD card module. Supports up to two SD cards.
•M.2 SSD module. Supports either two SATA M.2 SSDs
or two NVMe M.2 SSDs.
• One micro-SD card socket on PCIe riser 1.
Storage, internal
The appliance has a dedicated internal mRAID riser that supports
one of the following storage-controller options:
• A PCIe-style Cisco modular RAID controller card
(SAS/SATA).
• A PCIe-style interposer card for the server’s embedded
SATA RAID controller.
Storage management
The appliance has a mounting bracket near the cooling fans for
the supercap unit that is used with the Cisco modular RAID
controller card.
RAID backup
Integrated VGA video.Integrated video
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
13
Cisco Secure Network Server 3600 Series Appliance Overview
Summary of Server Features

Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
14
Cisco Secure Network Server 3600 Series Appliance Overview
Summary of Server Features

CHAPTER 2
Installing the Appliance
•Installation Warnings and Guidelines, on page 15
•Rack Requirements, on page 16
•Installing the Appliance in a Rack, on page 17
•Initial Setup, on page 21
•Updating the BIOS and Cisco IMC Firmware, on page 26
•Accessing the System BIOS, on page 26
Installation Warnings and Guidelines
IMPORTANT SAFETY INSTRUCTIONS
This warning symbol means danger. You are in a situation that could cause bodily injury. Before you
work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with
standard practices for preventing accidents. Use the statement number provided at the end of each
warning to locate its translation in the translated safety warnings that accompanied this device.
Statement 1071
Warning
To prevent the system from overheating, do not operate it in an area that exceeds the maximum
recommended ambient temperature of: 35° C (95° F).
Statement 1047
Warning
The plug-socket combination must be accessible at all times, because it serves as the main disconnecting
device.
Statement 1019
Warning
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
15

This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that
the protective device is rated not greater than: 250 V, 15 A.
Statement 1005
Warning
Installation of the equipment must comply with local and national electrical codes.
Statement 1074
Warning
This unit is intended for installation in restricted access areas. A restricted access area can be accessed
only through the use of a special tool, lock, and key, or other means of security.
Statement 1017
Warning
Rack the appliance using rail kits to ensure proper airflow. Physically placing the units on top of one another
or stacking without the use of the rail kits, blocks the air vents on the top, which could result in overheating,
higher fan speeds, and higher power consumption. We recommend that you mount your appliance on rail kits
while installing in the rack because these rails provide the minimal spacing required between the units. No
additional spacing is required when you mount the units using rail kits.
Caution
Follow these guidelines while installing the appliance:
•Ensure that there is adequate space around the appliance to allow for easy access and for adequate airflow.
•Ensure that the air-conditioning meets the thermal requirements listed in the Environmental Specifications,
on page 27.
• Ensure that the cabinet or rack meets the requirements listed in the Rack Requirements, on page 16.
• Ensure that the site power meets the power requirements listed in the Power Specifications, on page 28.
If available, you can use an uninterruptible power supply (UPS) to protect against power failures.
Rack Requirements
The rack must be of the following type:
• A standard 19-inch (48.3 cm) wide, four-post EIA rack, with mounting posts that conform to English
universal hole spacing, per section 1 of ANSI/EIA-310-D-1992.
• The rack-post holes can be square 0.38 inch (9.6 mm), round 0.28 inch (7.1 mm), #12-24 UNC, or #10-32
UNC when you use the Cisco-supplied slide rails.
• The minimum vertical rack space per server must be one rack unit (RU), which is equal to 1.75 inch
(44.45 mm).
Cisco Secure Network Server 3600 Series Appliance Hardware Installation Guide
16
Installing the Appliance
Rack Requirements