Cisco 3100 Series Handbuch

Cisco Secure Firewall 3100 Series Hardware Installation Guide

First Published: 2022-04-06

Last Modified: 2023-08-10

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Overview 1

CHAPTER 1

Features 1

Deployment Options 4

Package Contents 5

Serial Number and Digital Documentation Portal QR Code 6

Front Panel 8

Front Panel LEDs 11

Rear Panel 13

8-Port 1/10/25-Gb Network Module 15

4-Port 40-Gb Network Module 17

8-Port 10/100/1000Base-T Network Module with Hardware Bypass 19

6-Port 1-Gb SX/10-Gb SR/10-Gb LR/25-Gb SR/25-Gb LR Network Module with Hardware Bypass

Power Supply Module 24

Dual Fan Modules 26

SSDs 27

Supported SFP/SFP+/QSFP+ Transceivers 28

Hardware Specifications 32

Product ID Numbers 33

Power Cord Specifications 35

Installation Preparation 43

CHAPTER 2

Installation Warnings 43

Network Equipment-Building System (NEBS) Statements 45

Safety Recommendations 47

Maintain Safety with Electricity 47

Cisco Secure Firewall 3100 Series Hardware Installation Guide

iii

Prevent ESD Damage 48

Site Environment 48

Site Considerations 48

Power Supply Considerations 49

Rack Configuration Considerations 49

Rack-Mount the Chassis 51

CHAPTER 3

Unpack and Inspect the Chassis 51

Rack-Mount the Chassis Using Brackets 52

Rack-Mount the Chassis Using Slide Rails 54

Ground the Chassis 61

Installation, Maintenance, and Upgrade 65

CHAPTER 4

Install, Remove, and Replace the Network Module 65

Remove and Replace the SSD 67

Remove and Replace the Dual Fan Module 70

Remove and Replace the Power Supply Module 71

Connect the DC Power Supply Module 74

Secure the Power Cord on the Power Supply Module 76

Cisco Secure Firewall 3100 Series Hardware Installation Guide

Contents

CHAPTER 1

Overview

•Features, on page 1

•Deployment Options, on page 4

•Package Contents, on page 5

•Serial Number and Digital Documentation Portal QR Code, on page 6

•Front Panel, on page 8

•Front Panel LEDs, on page 11

•Rear Panel, on page 13

•8-Port 1/10/25-Gb Network Module, on page 15

•4-Port 40-Gb Network Module, on page 17

•8-Port 10/100/1000Base-T Network Module with Hardware Bypass, on page 19

•6-Port 1-Gb SX/10-Gb SR/10-Gb LR/25-Gb SR/25-Gb LR Network Module with Hardware Bypass ,

on page 21

•Power Supply Module, on page 24

•Dual Fan Modules, on page 26

•SSDs, on page 27

•Supported SFP/SFP+/QSFP+ Transceivers , on page 28

•Hardware Specifications, on page 32

•Product ID Numbers, on page 33

•Power Cord Specifications, on page 35

Features

The Cisco Secure Firewall 3100 is a standalone modular security services platform that includes the Secure

Firewall 3105, 3110, 3120, 3130, and 3140.

See Product ID Numbers, on page 33 for a list of the product IDs (PIDs) associated with the 3100 series.

The Secure Firewall 3100 supports Cisco Firepower Threat Defense and Cisco ASA software. See the Cisco

Secure Firewall Threat Defense Compatibility Guide and the Cisco Secure Firewall ASA Compatibility guide,

which provide Cisco software and hardware compatibility, including operating system and hosting environment

requirements, for each supported version.

Cisco Secure Firewall 3100 Series Hardware Installation Guide

The Secure Firewall 3105 is first supported in Cisco Firepower Threat Defense 7.3 and Cisco ASA 9.19 and

later.

Note

The following figure shows the Secure Firewall 3100.

Figure 1: Secure Firewall 3100

The following table lists the features for the Secure Firewall 3100.

Table 1: Secure Firewall 3100 Features

31403130312031103105Feature

1 RU

Fits a standard 19-inch (48.3-cm) square-hole rack

Form factor

(Optional) Two 2-post mount brackets and/or two slide rails

4-post Electronic Industries Association (EIA)-310-D rack

We recommend that you order the slide rails for your Secure Firewall 3100.

Note

Rack mount

Front to rear (I/O side to non-I/O side)

Cold aisle to hot aisle

Airflow

AMD 7452AMD 7352AMD 7282

AMD 7272Processor

32241612Core count

2.35 GHz2.3 GHz2.8 GHz2.9 GHzCore clock

4 x 64 GB4 x 32 GB2 x 64 GB2 x 32 GBSystem memory

One 1/10-Gb small form-factor pluggable (SFP) portManagement

port

One RJ-45 serial portConsole port

USB 3.1 Type A (900 mA) portUSB port

8 SFP fixed ports and 8 copper RJ-45 ports

Named Ethernet 1/1 through 1/16

Network ports

Cisco Secure Firewall 3100 Series Hardware Installation Guide

Overview

Features

31403130312031103105Feature

Eight 1/10/25-Gb SFP ports

Four 40-Gb QSFP ports

Network module

ports

One

Hot-swapping of identical modules is supported, but if you replace a network

module with another type, you must reboot the system so that the new network

module is recognized.

Note

Network module

slots

• 8-port 1Gb/10Gb/25Gb SFP+

(FPR3K-XNM-8X25G)

• 8-port 1Gb/10Gb SFP+

(FPR3K-XNM-8X10G)

• 4-port 40-Gb QSFP+

(FPR3K-XNM-4X40G)

• 6-port 1-Gb SFP SX

multimode hardware

bypass(FPR3K-XNM-6X1SXF)

• 6-port 10-Gb SFP SR

multimode hardware bypass

(FPR3K-XNM-6X10SRF)

• 6-port 10-Gb SFP LR single

mode hardware bypass

(FPR3K-XNM-6X10LRF)

• 6-port 25-Gb SFP SR

multimode hardware bypass

(FPR3K-XNM-6X25SRF)

• 6-port 25-Gb SFP LR single

mode hardware bypass

(FPR3K-XNM-6X25LRF)

• 8-port 10/100/1000Base-T

hardware bypass

(FPR3K-XNM-8X1GF)

•8-port 1Gb/10Gb SFP+ (FPR3K-XNM-8X10G)

•6-port 1-Gb SFP SX multimode hardware bypass

(FPR3K-XNM-6X1SXF)

• 6-port 10-Gb SFP SR multimode hardware

bypass (FPR3K-XNM-6X10SRF)

• 6-port 10-Gb SFP LR single mode hardware

bypass (FPR3K-XNM-6X10LRF)

• 6-port 25-Gb SFP SR multimode hardware

bypass (FPR3K-XNM-6X25SRF)

• 6-port 25-Gb SFP LR single mode hardware

bypass (FPR3K-XNM-6X25LRF)

• 8-port 10/100/1000Base-T hardware bypass

(FPR3K-XNM-8X1GF)

Network

modules

Two power supply slots

Ships with two 400-W AC power

supply modules

Hot-swappable

Two power supply slots

Ships with one 400-W AC power supply module

Hot-swappable

AC power

supply

Yes (optional)

Hot-swappable

DC power

supply

Cisco Secure Firewall 3100 Series Hardware Installation Guide

Overview

Features

31403130312031103105Feature

Yes

Ships with two power

supplies.

Note

Yes, if you order an extra power supply.

Note

Redundant

power

Two dual fan module slots (3 + 1)

The dual fan modules are hot-swappable.

Note

Fans

Two Nonvolatile Memory Express (NVMe) SSD slots

Ships with one 900-GB SSD installed in slot 1. You can order a second RAID1 SSD for

slot 2. The RAID1 SSD is preconfigured for RAID1.

Slot 2 is reserved for the optional software RAID1 configuration.

Note

Hot-swapping is supported with 2 SSDs. However, you must enter a CLI

command to remove one disk from the RAID before hot swapping. See the

CLI configuration guide for your software for the procedure.

Note

Storage

Displays the serial number and a QR code that points to the low touch provisioning (LTP)

guide.

Pullout asset

card

On rear panelGrounding lug

On rear panelPower switch

Resets the system to factory default without requiring serial console access

The reset button is recessed. Press with a pin and hold longer than 5 seconds

to set the system back to the factory default.

Note

Reset button

Deployment Options

Here are some examples of how you can deploy the Secure Firewall 3100:

• As a firewall:

• At the enterprise internet edge in a redundant configuration

• At branch offices in either a high availability pair or standalone

• At data centers in a high availability pair or clustered, which serves the needs of smaller enterprises

•As a device that provides additional application control, URL filtering, or IPS/threat-centered capabilities:

• Behind an enterprise internet edge firewall in an inline configuration or as a standalone (requires

hardware fail-open network module support)

• Deployed passively off a SPAN port on a switch or a tap on a network, or standalone

Cisco Secure Firewall 3100 Series Hardware Installation Guide

Overview

Deployment Options

• As a branch native SD-WAN solution that offers remote deployment and is managed over a 4G LTE

• As a VPN device:

• For remote access VPN

• For site-to-site VPN

Package Contents

The following figure shows the package contents for the Secure Firewall 3100. The contents are subject to

change and your exact contents contain additional or fewer items depending on whether you order the optional

parts. See Product ID Numbers for a list of PIDs associated with the package contents.

There are two sets of four screws that you can use to secure the chassis to your rack. Chose the screws that

fit your rack.

Note

Figure 2: Secure Firewall 3100 Package Contents

Console cable RJ-45 to DB-9 (part number

72-3383-01)

2Secure Firewall 3100 chassis1

Cisco Secure Firewall 3100 Series Hardware Installation Guide

Overview

Package Contents

SFP transceiver

(Optional; in package if ordered)

4One or two power cords (country-specific)

See Power Cord Specifications, on page 35 for

a list of supported power cords.

Cable management bracket kit (part number

69-100376-01)

• Two cable management brackets (part

number 700-128334-01)

• Four 8-32 x 0.375-inch Phillips screws (part

number 48-2696-01)

(Optional; in package if ordered)

6One ground lug kit (part number 69-100359-01)

• One #6 AWG, 90 degree, #10 post ground

lug (part number 32-0608-01)

• Two 10-32 x 0.38-inch Phillips screws (part

number 48-0700-01)

Rack-mount bracket kit (53-101510-02):

• Two rack-mount brackets (700-127244-01)

• Six 8-32 x 0.375-inch Phillips screws (part

number 48-2286) for securing the brackets

to the chassis

• Four 10-32 x 0.75-inch Phillips screws (part

number 48-0441-01) for securing the chassis

to your rack

• Four 12-24 x 0.75-inch Phillips screws (part

number 48-0440-01) for securing the chassis

to your rack

(Optional; in package if ordered)

8Two slide rails (800-110033-01)

Slide rail accessories kit (53-101509-02):

•Two slide rail locking brackets (part number

700-121935-01)

• Six 8-32 x 0.302-inch slide rail locking

bracket Phillips screws (part number

48-102184-01)

• Two M3 x 0.5 x 6-mm Phillips screws (part

number 48-101144-01)

(Optional; in package if ordered)

Two power supply module tie wraps and clamps

(part number 52-100162-01)

10Cisco Secure Firewall 3100

This document has a URL and QR code that point

to the Digital Documentation Portal. The portal

contains links to the Product Information page,

the Hardware Installation Guide, the Regulatory

and Safety Information Guide, the Getting Started

Guide, and the Easy Deployment Guide.

Serial Number and Digital Documentation Portal QR Code

The pullout asset card on the front panel of your Secure Firewall 3100 chassis contains the chassis serial

number and the Digital Documentation Portal QR code, which points to the getting started guide, the regulatory

and compliance guide, the easy deployment guide, and the hardware installation guide.

Cisco Secure Firewall 3100 Series Hardware Installation Guide

Overview

Serial Number and Digital Documentation Portal QR Code

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Cisco Firewall Handbücher

Cisco

Cisco Spam Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Handbuch

Cisco

Cisco Firepower 4100 Series Bedienungsanleitung

Cisco

Cisco PIX 501 Bedienungsanleitung

Cisco

Cisco Firepower 4100 Series Bedienungsanleitung

Cisco

Cisco Firepower 1600 Handbuch

Cisco

Cisco ASA 5506-X Kurzanleitung

Cisco

Cisco LightStream 1010 Montageanleitung

Cisco

Cisco Meraki MX100 Bedienungsanleitung

Cisco

Cisco ASA 5580 Bedienungsanleitung

Cisco

Cisco MEREAKI MX65W Bedienungsanleitung

Cisco

Cisco RV110W Bedienungsanleitung

Cisco

Cisco PIX 501 - Security Appliance Bedienungsanleitung

Cisco

Cisco Firepower 1010 Handbuch

Cisco

Cisco Cisco ASA 5510 Bedienungsanleitung

Cisco

Cisco C170 Bedienungsanleitung

Cisco

Cisco Firepower 4100 Series Installationshandbuch

Cisco

Cisco PIX-515E Bedienungsanleitung

Cisco

Cisco PIX 506E - Security Appliance Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Cisco

Cisco C690 Bedienungsanleitung

Cisco

Cisco RV110W Bedienungsanleitung

Cisco

Cisco Firepower 7010, Firepower 7020, Firepower 7030, Firepower 7050, Firepower 7110, Firepower 7120, Firepower 7115, Firepower... Bedienungsanleitung