Cisco Firepower 9300 Maintenance and service guide

Installation, Maintenance, and Upgrade

•Remove and Replace the Supervisor, on page 1

•Install, Remove, and Replace the Security Module, on page 3

•Remove and Replace the SSD, on page 6

•Install, Remove, and Replace the Single-Wide Network Module, on page 8

•Install, Remove, and Replace the Double-Wide Network Module, on page 13

•Remove and Replace the Power Supply Module, on page 17

•Connect the DC Power Supply Module, on page 22

•Connect the HVDC Power Supply Module, on page 25

•Remove and Replace the Fan Module, on page 29

•Install the FIPS Opacity Shield, on page 32

Remove and Replace the Supervisor

You can remove the Firepower 9300 Supervisor while the system is powered on without damage to the

Supervisor hardware or system. However, because the supervisor is controlling the entire chassis, including

the power system, we recommend that you use the power switch on the rear panel of the chassis to put the

system in standby mode. See Supervisor for more information about the Supervisor.

Safety Warnings

Take note of the following component replacement safety warnings:

Statement 1028—More Than One Power Supply

This unit might have more than one power supply connection. To reduce risk of electric shock,

remove all connections to de-energize the unit.

Warning

Installation, Maintenance, and Upgrade

Statement 1030—Equipment Installation

Only trained and qualified personnel should be allowed to install, replace, or service this equipment.

Warning

Statement 1073—No User-Serviceable Parts

There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Warning

Statement 1089—Instructed and Skilled Person Definitions

An instructed person is someone who has been instructed and trained by a skilled person and takes

the necessary precautions when working with equipment.

A skilled person or qualified personnel is someone who has training or experience in the equipment

technology and understands potential hazards when working with equipment.

Warning

Statement 1090—Installation by Skilled Person

Only a skilled person should be allowed to install, replace, or service this equipment. See statement

1089 for the definition of a skilled person.

Warning

Statement 1091—Installation by an Instructed Person

Only an instructed person or skilled person should be allowed to install, replace, or service this

equipment. See statement 1089 for the definition of an instructed or skilled person.

Warning

Step 1 To remove the Supervisor, loosen the two captive screws on the Supervisor tray.

Step 2 Remove the Supervisor tray from the chassis by pulling the handle on the Supervisor until it is unseated.

Step 3 Slide the tray partway out of the chassis, place your other hand under the tray to support its weight, and remove it from

the chassis.

Installation, Maintenance, and Upgrade

Remove and Replace the Supervisor

Figure 1: Remove and Replace the Supervisor

Step 4 To install a new Supervisor tray, grasp the front of the tray and place your other hand under the tray to support it.

Step 5 Open the handle on the front of the tray.

Step 6 Gently slide the tray into the opening until you cannot push it any farther.

Step 7 Press the handle so that it catches the edge of the chassis and presses the tray all the way in.

Step 8 When the tray is all the way in the chassis, push in the handle to fully seat the tray.

Step 9 Using your fingers, tighten the captive screw on the front of the Supervisor; if using a screw driver, tighten to no more

than 3 in-lbs.

Tightening the captive screws with your fingers is unlikely to lead to stripped or damaged captive screws.

Install, Remove, and Replace the Security Module

This procedure describes how to install a security module into an empty slot that has never contained a security

module, and how to remove an installed security module and replace it with another security module.

You can remove the Firepower 9300 security module while the system is running, but we recommend that

you use the power switch on the rear of the chassis to put the security module in standby mode before removal

and reinstallation. If you install a new service module in an empty slot, you do not need to power off the

system.

Make sure you have the correct firmware package and software version installed to support your security

module. For instructions on how to verify your firmware package version and to upgrade the firmware

if necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower

4100/9300 FXOS Compatibility for the software compatibility matrix.

Note

Installation, Maintenance, and Upgrade

Install, Remove, and Replace the Security Module

If you want to replace an existing security module with another security module, you must decommission

the old security module before removing it. See the "Security Module/Engine Management" chapter in

the Cisco FXOS Firepower Chassis Manager Configuration Guide for the instructions. After you

decommission the old security module, you can remove it, install the new security module, have the

system acknowledge it, and then reinitialize it.

Caution

Safety Warnings

Take note of the following component replacement safety warnings:

Statement 1028—More Than One Power Supply

This unit might have more than one power supply connection. To reduce risk of electric shock,

remove all connections to de-energize the unit.

Warning

Statement 1030—Equipment Installation

Only trained and qualified personnel should be allowed to install, replace, or service this equipment.

Warning

Statement 1073—No User-Serviceable Parts

There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Warning

Statement 1089—Instructed and Skilled Person Definitions

An instructed person is someone who has been instructed and trained by a skilled person and takes

the necessary precautions when working with equipment.

A skilled person or qualified personnel is someone who has training or experience in the equipment

technology and understands potential hazards when working with equipment.

Warning

Statement 1090—Installation by Skilled Person

Only a skilled person should be allowed to install, replace, or service this equipment. See statement

1089 for the definition of a skilled person.

Warning

Installation, Maintenance, and Upgrade

Install, Remove, and Replace the Security Module

Statement 1091—Installation by an Instructed Person

Only an instructed person or skilled person should be allowed to install, replace, or service this

equipment. See statement 1089 for the definition of an instructed or skilled person.

Warning

Step 1 To install a new security module for the first time into an empty slot, do the following:

a) Follow steps 6 through 10.

b) Enter scope slot > acknowledge to bring the new security module online.

Step 2 To remove a security module, loosen the captive screw on the front of the security module.

Step 3 Remove the security module from the chassis by pulling the handle on the security module until it is unseated.

Step 4 Slide the security module partway out of the chassis, place your other hand under the security module to support its

weight, and remove it from the chassis.

Figure 2: Remove and Install the Security Module

Step 5 Place the security module on an antistatic mat or antistatic foam if you are not immediately reinstalling it in another

slot.

If the slot is to remain empty, install a blank faceplate to ensure proper airflow and to keep dust out of the chassis;

otherwise install another security module.

Step 6 To install a new security module, grasp the front of the security module and place your other hand under the security

module to support it.

Step 7 Open the handle in the front of the security module.

Step 8 Gently slide the security module into the opening until you cannot push it any farther.

Step 9 Press the handle so that it catches the edge of the chassis and presses the security module all the way in.

Installation, Maintenance, and Upgrade

Install, Remove, and Replace the Security Module

Step 10 Using your fingers, tighten the captive screw on the front of the security module; if using a screw driver, tighten to no

more than 3 in-lbs.

Tightening the captive screws with your fingers is unlikely to lead to stripped or damaged captive screws.

Remove and Replace the SSD

There are two SSDs in each security module. They are configured in a RAID 1 configuration. If one or both

SSDs fail, you must decommission the security module and acknowledge the slot to start the SSD installation

and update the inventory. See the "Security Module/Engine Management" chapter in the Cisco FXOS Firepower

Chassis Manager Configuration Guide for the instructions. After you decommission the security module, you

can remove the SSDs, install the new SSDs, and acknowledge the slot to bring the security module back

online.

Once you replace the SSD, the storage controller rebuilds the newly installed SSD and no loss of data

should occur. If both SSDs fail, no data can be recovered.

Note

The two SSDs in RAID 1 store each other's data. Breaking the RAID pair to use in another service

module causes the service module to fail discovery by the Supervisor.

Note

Safety Warnings

Take note of the following warnings:

Statement 1028—More Than One Power Supply

This unit might have more than one power supply connection. To reduce risk of electric shock,

remove all connections to de-energize the unit.

Warning

Statement 1030—Equipment Installation

Only trained and qualified personnel should be allowed to install, replace, or service this equipment.

Warning

Installation, Maintenance, and Upgrade

Remove and Replace the SSD

Statement 1073—No User-Serviceable Parts

There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Warning

Statement 1089—Instructed and Skilled Person Definitions

An instructed person is someone who has been instructed and trained by a skilled person and takes

the necessary precautions when working with equipment.

A skilled person or qualified personnel is someone who has training or experience in the equipment

technology and understands potential hazards when working with equipment.

Warning

Statement 1090—Installation by Skilled Person

Only a skilled person should be allowed to install, replace, or service this equipment. See statement

1089 for the definition of a skilled person.

Warning

Statement 1091—Installation by an Instructed Person

Only an instructed person or skilled person should be allowed to install, replace, or service this

equipment. See statement 1089 for the definition of an instructed or skilled person.

Warning

Step 1 Decommission the security module.

Step 2 To remove an SSD, face the front of the chassis, press the handle release on the SSD and gently pull it out of the slot.

Installation, Maintenance, and Upgrade

Remove and Replace the SSD

Figure 3: Remove the SSD

Handle release2Handle1

Step 3 To replace the SSD, hold the SSD in front of slot 1, push it in gently until it is seated, and close the handle.

Step 4 Tighten the captive screws on either side of the SSD.

Step 5 Acknowledge the slot to start the SSD installation.

Install, Remove, and Replace the Single-Wide Network Module

This procedure describes how to install a network module into an empty slot that has never contained a network

module, and how to remove an installed network module and replace it with another network module.

Hot Swapping

Verify that you have the correct software to support hot swapping on the Firepower 10-Gb and 40-Gb

nonhardware bypass network modules. See Cisco Firepower 4100/9300 FXOS Compatibility for the

software compatibility matrix. You must hot swap with an identical network module, that is, a network

module with the same PID. See Product ID Numbers for a list of the network module PIDs. You must

bring the network module offline using the appropriate CLI commands before removing the network

module from the chassis so that all network module configuration is saved.

We do not recommend that you remove the network module without bringing it properly offline

using the appropriate CLI commands.

Caution

Installation, Maintenance, and Upgrade

Install, Remove, and Replace the Single-Wide Network Module

Verify that you have the correct ROMMON on the Supervisor to support hot swapping. For

instructions on how to verify your firmware package version and to upgrade the firmware if

necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide.

Note

To remove and replace the network modules that do not currently support hot swapping, power off the chassis,

replace the network module, and then power the chassis back on.

Verify that you have the correct ROMMON on the Supervisor to support the 100-Gb network modules

(FPR9K-NM-4X100G and FPR9K-NM-2X100G). For instructions on how to verify your firmware

package version and to upgrade the firmware if necessary, see the Cisco Firepower 4100/9300 FXOS

Firmware Upgrade Guide.

Note

The following figure shows the front panel of the 10-Gb nonhardware bypass network module. The location

of the captive screw, ports, and LEDs is shown. See Network Modules for more information about the other

single-wide network modules.

Figure 4: Firepower Network Module 10 Gb

Ethernet X/12Captive screw/handle1

Ethernet X/54Ethernet X/33

Ethernet X/26Ethernet X/75

Ethernet X/68Ethernet X/47

Network activity LEDs

• Off—No connection or port is not in use.

• Amber—No link or network failure.

• Green—Link up.

• Green, flashing—Network activity.

10Ethernet X/89

Installation, Maintenance, and Upgrade

Install, Remove, and Replace the Single-Wide Network Module

Safety Warnings

Take note of the following component replacement safety warnings:

Statement 1028—More Than One Power Supply

This unit might have more than one power supply connection. To reduce risk of electric shock,

remove all connections to de-energize the unit.

Warning

Statement 1030—Equipment Installation

Only trained and qualified personnel should be allowed to install, replace, or service this equipment.

Warning

Statement 1073—No User-Serviceable Parts

There are no serviceable parts inside. To avoid risk of electric shock, do not open.

Warning

Statement 1089—Instructed and Skilled Person Definitions

An instructed person is someone who has been instructed and trained by a skilled person and takes

the necessary precautions when working with equipment.

A skilled person or qualified personnel is someone who has training or experience in the equipment

technology and understands potential hazards when working with equipment.

Warning

Statement 1090—Installation by Skilled Person

Only a skilled person should be allowed to install, replace, or service this equipment. See statement

1089 for the definition of a skilled person.

Warning

Statement 1091—Installation by an Instructed Person

Only an instructed person or skilled person should be allowed to install, replace, or service this

equipment. See statement 1089 for the definition of an instructed or skilled person.

Warning

Installation, Maintenance, and Upgrade

Install, Remove, and Replace the Single-Wide Network Module

Other manuals for Firepower 9300

Table of contents

Other Cisco Network Hardware manuals

Cisco

Cisco CTM GateWay Installation guide

Cisco

Cisco AIR-BR1410A-A-K9 - Aironet 1410 Wireless... User manual

Cisco

Cisco MERAKI MR57 User manual

Cisco

Cisco AIR-WLC2106-K9 - Wireless LAN Controller... User manual

Cisco

Cisco GS7000 Operating instructions

Cisco

Cisco CGR 1240 User manual

Cisco

Cisco Catalyst 8510 User manual

Cisco

Cisco Firepower 1010 FPR1010-NGFW-K9 Manual

Cisco

Cisco IAD2430 Series Installation guide

Cisco

Cisco NCS 1004 User manual

Cisco

Cisco Aironet 340 Series User manual

Cisco

Cisco UCS-FI-6332-16UP User manual

Cisco

Cisco Meraki MX65W User manual

Cisco

Cisco AGS+ Instruction Manual

Cisco

Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control... User manual

Cisco

Cisco GS7000 Guide

Cisco

Cisco ASR 5000 Series User manual

Cisco

Cisco SCE8000 GBE Operator's manual

Cisco

Cisco IronPort C670 User manual

Cisco

Cisco FPR1150-ASA-K9 Manual

Cisco

Cisco C7200-I - Input/Output Controller - Control... User manual

Cisco

Cisco CVPN3015-NR - VPN Concentrator 3015 User manual

Cisco

Cisco CiscoWorks Wireless LAN Solution Engine Operator's manual

Cisco

Cisco MC3810 Series User manual

Popular Network Hardware manuals by other brands

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL product manual

B&B Electronics

B&B Electronics ZXT9-IO-222R2 product manual

Yudor

Yudor YDS-16 user manual

D-Link

D-Link ShareCenter DNS-320L datasheet

Samsung

Samsung ES1642dc Hardware user manual

Honeywell Home

Honeywell Home LTEM-PV Installation and setup guide

evertz

evertz 7700 Series manual

D-Link

D-Link ShareCenter DNS-343 Quick installation guide

Asante

Asante AsanteBridge 1012 user guide

FireBrick

FireBrick FB2700 user manual

Audiovox Electronics

Audiovox Electronics ARWH2T user manual

ADC

ADC DSX-1 Operational Procedures Guide

NetComm

NetComm NF2 user guide

Alcatel-Lucent

Alcatel-Lucent 5620 user guide

Dell EMC

Dell EMC XC6420 Series Solution guide

Lanner

Lanner NCA-1020A user manual

Allied Telesis

Allied Telesis AT-TN121-A Specifications

Arista

Arista CCA-ETM-Q12 quick start guide