Firepower 4100 series; firepower 9000 series (72 pages)
Summary of Contents for Cisco 3110
Page 1
Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide First Published: 2022-04-06 Last Modified: 2022-06-28 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883...
Page 2
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/c/en/us/about/legal/trademarks.html.
Hardware Specifications Product ID Numbers Power Cord Specifications C H A P T E R 2 Installation Preparation Installation Warnings Safety Recommendations Maintain Safety with Electricity Prevent ESD Damage Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 4
Remove and Replace the Dual Fan Module Remove and Replace the Power Supply Module Connect the DC Power Supply Module Secure the Power Cord on the Power Supply Module Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
• Power Cord Specifications, on page 35 Features The Cisco Secure Firewall 3100 is a standalone modular security services platform that includes the Secure Firewall 3110, 3120, 3130, and 3140. See Product ID Numbers, on page 33 for a list of the product IDs (PIDs) associated with the 3100 series.
Page 6
Four 40-Gb QSFP ports Network module One (hot-swappable) slots Note Although the hardware supports hot-swapping, the software does not. You must power off the chassis when removing/replacing network modules. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 7
Yes, if you order an extra power Note Ships with two power supplies. Note supply. Fans Two dual fan module slots (3 + 1) The dual fan modules are hot-swappable. Note Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
• As a branch native SD-WAN solution that offers remote deployment and is managed over a 4G LTE • As a VPN device: • For remote access VPN • For site-to-site VPN Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Console cable RJ-45 to DB-9 (part number 72-3383-01) One or two power cords (country-specific) SFP transceiver Power Cord Specifications, on page 35 (Optional; in package if ordered) a list of supported power cords. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Guide for 1000, 2100, or 3100 Series Cisco Secure Firewalls, explains how to use LTP to allow anyone to connect a new Secure Firewall 3100 chassis to a network so that they can add the device to Cisco Defense Orchestrator (CDO) and configure it remotely.
Page 11
Figure 3: Pullout Asset Card The following figure shows an example compliance label found on the bottom of the chassis and the pullout asset card found on the front panel of the chassis. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
3100 Getting Started Guide Front Panel The following figure shows the front panel of the Secure Firewall 3100. See Front Panel LEDs, on page 11 for a description of the LEDs. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 13
You can use the external Type A USB port to attach a data-storage device. The external USB drive identifier is . The Type A USB port supports the following: usb: • Hot swapping Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 14
• Security module log files • Platform bundle image upload using download image usbA: The Type A USB port does not support Cisco Secure Package (CSP) image upload support. Network Ports The Secure Firewall 3100 chassis has a network module slot that supports the following network modules: •...
RJ-45 Copper Port Activity Status • Off—No link. • Off—No activity • Green—Link is up. • Green, flashing—The number of flashes determines the link speed; 1 flash=10 Mb, 2=100 Mb, 3=1 Gb. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 16
• Green—Normal system function. • Amber—The SSD has a problem or failure. • Amber—System boot up has failed. • Amber, flashing—Alarm condition, system needs service or attention and may not boot properly. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
• Green—The unit is in active mode. • Amber—The unit is in standby mode. Rear Panel The following figure shows the rear panel of the Secure Firewall 3100. Figure 7: Secure Firewall 3100 Rear Panel Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 18
After removing power from the chassis by unplugging the power cord, wait at least 10 seconds before turning power back ON. You want to keep the system power off, including the standby power, for 10 seconds. For More Information Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Note Although you can install the 8-port 1/10/25-Gb network in the Secure Firewall 3110 and 3120, the software does not recognize it because it is not supported. The following figure shows the front panel of the 1/10-Gb and 1/10/25-Gb network module.
Page 20
40-Gb network module. • See 1-Gb SX/10-Gb SR/10-Gb LR/25-Gb SR/25-Gb LR Network Module with Hardware Bypass, on page 22 for a description of the 1/10/25-Gb network module. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Note Although you can install the 4-port 40-Gb network in the Secure Firewall 3110 and 3120, the software does not recognize it because it is not supported. The following figure shows the front panel of the 40-Gb network module.
Page 22
10/100/1000Base-T Network Module with Hardware Bypass, on page 20 for a description of the 1-Gb network module. • See Hardware Bypass Network Modules, on page 19 for a description of hardware bypass. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
For More Information • See 1-Gb SX/10-Gb SR/10-Gb LR/25-Gb SR/25-Gb LR Network Module with Hardware Bypass, on page 22 for a description of the 1/10/25-Gb network module. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Cisco software and hardware compatibility, including operating system and hosting environment requirements, for each supported version. The following figure shows the front panel of the 10/100/1000Base-T network module. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 25
Right Port LED • Unlit—No connection or port is not in use. • Unlit—No connection or port is not in use. • Green—Link up. • Green—Link up. • Green, flashing—Network activity. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Cisco software and hardware compatibility, including operating system and hosting environment requirements, for each supported version The following figure shows the front panel of the 1/10/25-Gb network module. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 27
Bypass LEDs B1 through B3: Captive screw • Off—Bypass mode is disabled. • Green—Port is in standby mode. • Amber, flashing—Port is in hardware bypass mode, failure event. Power LED Handle ejector Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
The Secure Firewall 3100 supports two AC power supply modules so that dual power supply redundancy protection is available. The 3110 and 3120 ship with one AC power supply (you can order two) and the 3130 and 3140 ship with two AC power supplies. You can also install DC power supply modules instead of AC power.
Page 29
Input voltage -48 to -60 VDC Maximum input < 15 A at -48 V current Redundancy 1+1 redundancy with dual power supply modules Efficiency > 88% at 50% load Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
The dual fan modules are hot-swappable and installed in the rear of the chassis. The following figure shows the location of the fan LED on the fan module. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
If you have only one SSD, you cannot remove it while the firewall is powered on. Caution You cannot swap SSDs between different platforms. For example, you cannot use a 2100 series SSD in a 3100 series model. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
It is a hot-swappable optical or electrical (copper) interface that plugs into the SFP/SFP+/QSFP+ ports on the fixed ports and the network module ports, and provides Ethernet connectivity. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 33
100 mm, may pose an eye hazard. Warning Statement 1057 Hazardous Radiation Exposure Use of controls, adjustments, or performance of procedures other than those specified may result in hazardous radiation exposure. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 34
Caution Although non-Cisco SFPs are allowed, we do not recommend using them because they have not been tested and validated by Cisco. Cisco TAC may refuse support for any interoperability problems that result from using an untested third-party SFP transceiver.
Page 35
QSFP to QSFP copper direct-attach cables (passive) 40G-CU-breakout QSFP-4SFP10G-CUxM (1M, 2M, QSFP to 4xSFP copper 3M, 4M, 5M) direct-attach cables Supported beginning Note with FTD 7.2 and ASA 7.18.1. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Nonoperating: -4 to 149°F (-20 to 65°C) maximum altitude is 40,000 ft Humidity Operating and nonoperating: 10 to 85% noncondensing Altitude Operating: 10,000 ft maximum Nonoperating: 40,000 ft maximum Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Using a incompatible power cord with this product may result in electrical safety hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with the system. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 40
Connector: IEC 60320/C13 — Figure 17: Australia (CAB-ACA) Plug: A.S. 3112 Cord set rating: 10 A, 250 V Length: 2.5 m Connector: IEC 60320/C13 — Figure 18: Brazil (CAB-C13-ACB) Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 41
Connector: IEC 60320/C13 — Figure 20: Europe (CAB-ACE) Plug: CEE 7 VII Cord set rating: 10 A, 250 V Length: 1.5 m Connector: IEC 60320/C13 — Figure 21: India Jumper (CAB-C13-C14-3M-IN) Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 42
Cord set rating: 10 A, 250 V Length: 1.4 m Connector: IEC 60320/C13 — Figure 23: India (PWR-CORD-IND-D) Plug: IS 6538-1971 Cord set rating: 10 A, 250 V Length: 1.8 Connector: IEC 60320/C13 — Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 43
Cord set rating: 10 A, 250 V Length: 2.5 m Connector: IEC 60320/C13 — Figure 26: Japan (CAB-JPN) Plug: JIS C8303 Cord set rating: 12 A, 125 V Length: 2.5 m Connector: IEC 60320/C13 — Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 44
Cord set rating: 10 A, 250 V Length: 2 m/6.5 ft Connector: IEC 60320/C13 — Figure 29: Jumper (CAB-C13-C14-2M) IEC 60320/C14G Cord set rating: 10 A, 250 V Length: 2 m Connector: IEC 60320/C13 — Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 45
Length: 1.8 m Connector: IEC 60320/C13 — Figure 32: North America (CAB-AC) Plug: NEMA 5-15P Cord set rating: 10 A, 125 V Length: 2.1 m Connector: IEC 60320/C13 — Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 46
Cord set rating: 10 A, 250 V Length: 2.5 m Connector: IEC 60320/C13 — Figure 35: Taiwan (CAB-ACTW) Plug: CNS10917 Cord set rating: 10 A, 125 V Length: 2.29 m Connector: IEC 60320/C13 Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 47
Overview Power Cord Specifications Figure 36: United Kingdom (CAB-ACU) Plug: BS1363A/SS145 Cord set rating: 10 A, 250 V Length: 2.5 m Connector: IEC 60320/C13 — Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 48
Overview Power Cord Specifications Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
SAVE THESE INSTRUCTIONS Warning Statement 1004 Installation Instructions Read the installation instructions before using, installing, or connecting the system to the power source. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 50
Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
To reduce risk of electric shock or fire, installation of the equipment must comply with local and national electrical codes. Safety Recommendations Observe these safety guidelines: • Keep the area clear and dust free before, during, and after installation. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Do not circumvent this safety feature. Equipment grounding should comply with local and national electrical codes. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
• Check the power at the site before installing the chassis to ensure that it is free of spikes and noise. Install a power conditioner, if necessary, to ensure proper voltages and power levels in the appliance-input voltage. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
• Baffles can help to isolate exhaust air from intake air, which also helps to draw cooling air through the chassis. The best placement of the baffles depends on the airflow patterns in the rack. Experiment with different arrangements to position the baffles effectively. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 55
• Invoice number of shipper (see the packing slip) • Model and serial number of the damaged unit • Description of damage • Effect of damage on the installation Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 56
• Four 8-32 x 0.375 inch Phillips screws (part number 48-2696-01) Step 1 Attach a rack-mount bracket to each side of the chassis using the six 8-32 x 0.375 inch Phillips screws (three per side). Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 57
8-32 x 0.375-inch Phillips screws (three per side) Step 2 (Optional) Attach the cable management bracket to the rack-mount bracket: a) Install the cable management screws into the rack-mount bracket. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 58
EIA. The vertical hole spacing alternates at .50 inches (12.70 mm) to .625 inches (15.90 mm) to .625 inches (15.90 mm) and repeats. The start and stop space is in the middle of the Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 59
Warning Statement 1018 Supply Circuit To reduce risk of electric shock and fire, take care when connecting units to the supply circuit so that wiring is not overloaded. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 60
There are no serviceable parts inside. To avoid risk of electric shock, do not open. Step 1 Attach the slide-rail locking brackets to each side of the chassis using the six 8-32 x 0.302-inch Phillips screws (three per side). Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 61
8-32 x 0.302-inch Phillips screws (three per side) Step 2 (Optional) Attach the cable management bracket to the slide-rail locking bracket: a) Install the cable management screws into the slide-rail locking bracket. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 62
Align an inner rail with each side of the chassis: • Align the inner rail so that the three slots on the rail line up with the three pegs on the side of the chassis. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 63
On the outside of the assembly, push the green arrow button toward the rear to open the securing plate. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 64
Slide the release clip toward the rear on both inner rails, and then continue pushing the chassis into the rack until the mounting brackets meet the front of the slide rail. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 65
M4 holes is provided on the chassis for attaching a grounding lug. The grounding lug must be Nationally Recognized Testing Laboratory (NRTL)-listed. In addition, a copper conductor (wires) must be used and the copper conductor must comply with National Electrical Code (NEC) code for ampacity. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 66
Use a wire-stripping tool to remove approximately 0.75 inches (19 mm) of the covering from the end of the grounding cable. Step 2 Insert the stripped end of the grounding cable into the open end of the grounding lug. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 67
Place the grounding lug against the grounding pad so that there is solid metal-to-metal contact, and insert the two screws with washers through the holes in the grounding lug and into the grounding pad. Figure 45: Attach the Grounding Lug Grounding lug Two 10-32 x 0.38-inch screws Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 68
Prepare the other end of the grounding cable and connect it to an appropriate grounding point in your site to ensure adequate earth ground. What to do next Install the cables according to your default software configuration as described in the Cisco Secure Firewall 3100 Getting Started Guide. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 69
Safety Warnings Take note of the following warnings: Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 70
The captive screw is not attached to the handle. Be sure the captive screw is completely loosened before pulling the ejector handle out. Otherwise you could damage the ejector handle as the captive screw and handle fight each other. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 71
The chassis supports two NVMe SSDs. The first SSD slot (SSD-1) is for storage. The second slot (SSD-2) is for the optional SW RAID1 support only. See SSDs, on page 27 for more information. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 72
To remove the SSD in slot 1, face the front of the chassis, and pinch the release tab on the front of the SSD. This causes the ejector handle to spring open. Step 4 Grasp the ejector handle to gently pull the SSD out of the chassis. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 73
Check the SSD LED to make sure the SSD is operative. See Front Panel LEDs, on page 11 for a description of the SSD LEDs. Step 9 Add SSD-2 to the RAID configuration using the raid add local-disk 1|2 command. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 74
To remove a fan module, face the rear of the chassis, and press the squeeze tabs on the sides of the fan module to loosen it from the chassis. Step 3 Grasp the handle and pull the fan module out of the chassis. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 75
LEDs. Remove and Replace the Power Supply Module Power supply modules are hot-swappable. You can remove and replace power supply modules while the system is running. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 76
To reduce risk of fire, use copper conductors only. Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 77
Step 4 Place your other hand under the power supply module to support it while you slide it out of the chassis. Figure 49: Remove the Power Supply Module Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 78
Use the handle on the power supply installation and removal. You must support the module with one hand because of its length. Figure 50: DC Power Supply Module Handle FAIL and OK LEDs DC power connector Ejector latch Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 79
Do not strip more than the recommended length of wire because doing so could leave the wire exposed from Note the terminal block. Figure 51: Stripped DC Input Source Wire Strip the wires to approximately 0.39 inch (10 mm) + — 0.02 inch (0.5 mm) Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 80
Step 9 Verify power supply operation by checking the power supply LED on the front of the chassis. See Front Panel LEDs, on page 11 for the LED values. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 81
Attach the clamp to the power supply module: a) Locate the hexagonal ventilation hole on the power supply module at the center of the plug just below the power connector body (see the following figures). Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 82
Adjust the clamp position on the tie wrap so that the clamp is tight against the front of the over mold and the power cord cannot be removed by lightly pulling on it. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 83
If you need to remove the power cord, push the release tab on the clamp to force the annular clamp teeth to disengage and the clamp opens up. You can then remove the clamp from the power cord. Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...
Page 84
Installation, Maintenance, and Upgrade Secure the Power Cord on the Power Supply Module Cisco Secure Firewall 3110, 3120, 3130, and 3140 Hardware Installation Guide...