Table of Contents
Advertisement
Quick Links
Overview
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Features
The Cisco Secure Firewall 3100 is a standalone modular security services platform that includes the Secure
Firewall 3105, 3110, 3120, 3130, and 3140.
See
Product ID Numbers, on page 33
The Secure Firewall 3100 supports Cisco Firepower Threat Defense and Cisco ASA software. See the
Secure Firewall Threat Defense Compatibility Guide
which provide Cisco software and hardware compatibility, including operating system and hosting environment
requirements, for each supported version.
Features, on page 1
Deployment Options, on page 4
Package Contents, on page 5
Front Panel, on page 8
Front Panel LEDs, on page 11
Rear Panel, on page 13
8-Port 1/10/25-Gb Network Module, on page 15
4-Port 40-Gb Network Module, on page 17
Power Supply Module, on page 24
Dual Fan Modules, on page 26
SSDs, on page 27
Supported SFP/SFP+/QSFP+ Transceivers , on page 29
Hardware Specifications, on page 32
Product ID Numbers, on page 33
Power Cord Specifications, on page 35
for a list of the product IDs (PIDs) associated with the 3100 series.
and the
Cisco Secure Firewall ASA Compatibility
Cisco
guide,
Overview
1
Advertisement
Table of Contents
Related Manuals for Cisco 3100
Summary of Contents for Cisco 3100
-
Page 1: Table Of Contents
• Power Cord Specifications, on page 35 Features The Cisco Secure Firewall 3100 is a standalone modular security services platform that includes the Secure Firewall 3105, 3110, 3120, 3130, and 3140. Product ID Numbers, on page 33 for a list of the product IDs (PIDs) associated with the 3100 series. - Page 2 Overview Features Note The Secure Firewall 3105 is first supported in Cisco Firepower Threat Defense 7.3 and Cisco ASA 9.19 and later. The following figure shows the Secure Firewall 3100. Figure 1: Secure Firewall 3100 The following table lists the features for the Secure Firewall 3100.
- Page 3 Overview Features Feature 3105 3110 3120 3130 3140 Network module Eight 1/10/25-Gb SFP ports ports Four 40-Gb QSFP ports Network module slots Note Hot-swapping of identical modules is supported, but if you replace a network module with another type, you must reboot the system so that the new network module is recognized.
-
Page 4: Deployment Options
Note to set the system back to the factory default. Deployment Options Here are some examples of how you can deploy the Secure Firewall 3100: • As a firewall: • At the enterprise internet edge in a redundant configuration • At branch offices in either a high availability pair or standalone •... -
Page 5: Package Contents
• For site-to-site VPN Package Contents The following figure shows the package contents for the Secure Firewall 3100. The contents are subject to change and your exact contents contain additional or fewer items depending on whether you order the optional parts. -
Page 6: Serial Number And Digital Documentation Portal Qr Code
Serial Number and Digital Documentation Portal QR Code The pullout asset card on the front panel of your Secure Firewall 3100 chassis contains the chassis serial number and the Digital Documentation Portal QR code, which points to the getting started guide, the regulatory and compliance guide, the easy deployment guide, and the hardware installation guide. - Page 7 Overview Serial Number and Digital Documentation Portal QR Code Figure 3: Pullout Asset Card Pullout asset tag Documentation Portal QR code Chassis serial number — The compliance label on the bottom of the chassis contains the chassis serial number, regulatory compliance marks, and the Digital Documentation Portal QR code that points to the guides listed above.
-
Page 8: Front Panel
Figure 4: Example Compliance Label Chassis model number Chassis serial number Documentation Portal QR code — Front Panel The following figure shows the front panel of the Secure Firewall 3100. See Front Panel LEDs, on page 11 for a description of the LEDs. Overview... - Page 9 The Secure Firewall 3100 chassis management port is a 1/10-Gb fiber SFP port. RJ-45 Console Port The Secure Firewall 3100 chassis has a standard RJ-45 console port. You can use the CLI to configure your 3100 through the RJ-45 serial console port by using a terminal server or a terminal emulation program on a computer.
- Page 10 The 4-port 40-Gb and 8-port 25-Gb network modules are supported only on the 3130 and 3140. Factory Reset Button The Secure Firewall 3100 chassis has a recessed reset button that resets the system to the factory default. All previous configuration is erased after pressing the button down for five seconds. The following...
-
Page 11: Front Panel Leds
• See 4-Port 40-Gb Network Module, on page 17 for more information about the network module. Front Panel LEDs The following figure shows the Secure Firewall 3100 front panel LEDs. Figure 6: Secure Firewall 3100 Front Panel LEDs Overview... - Page 12 • Amber—Environmental error. • Green and amber, flashing—Cloud • Green—Status is ok. connection failure. • Green—Cloud is disconnected. See the Easy Deployment Guide for Note 1000, 2100, or 3100 Series Cisco Secure Firewalls for more information on LTP. Overview...
-
Page 13: Rear Panel
• Off—The unit is not configured or enabled in a high-availability pair. • Green—The unit is in active mode. • Amber—The unit is in standby mode. Rear Panel The following figure shows the rear panel of the Secure Firewall 3100. Overview... - Page 14 Overview Rear Panel Figure 7: Secure Firewall 3100 Rear Panel Power on/off switch Power LED below Note This power LED has the same behavior as the front panel LED. Front Panel LEDs, on page 11 for more information. Power supply module 1...
-
Page 15: 8-Port 1/10/25-Gb Network Module
LEDs. 8-Port 1/10/25-Gb Network Module The Secure Firewall 3100 chassis has one network module slot named NM-2. Network modules are optional, removable I/O modules that provide either additional ports or different interface types. The network module plugs into the chassis on the front panel. - Page 16 Overview 8-Port 1/10/25-Gb Network Module Figure 8: 8-Port 1/10-Gb (FPR-X-NM-8X10G) and 8-Port 1/10/25-Gb (FPR-X-NM-8X25G) Network Module Captive screw Ethernet 2/1 Ethernet 2/3 Ethernet 2/5 Ethernet 2/7 Power on LED Ejector handle Ethernet 2/2 Ethernet 2/4 Ethernet 2/6 Ethernet 2/8 Network activity LEDs The up arrows represent the top ports and the down arrows represent the bottom ports.
-
Page 17: 4-Port 40-Gb Network Module
4-Port 40-Gb Network Module The Secure Firewall 3100 chassis has one network module slot named NM-2. Network modules are optional, removable I/O modules that provide either additional ports or different interface types. The network module plugs into the chassis on the front panel. See... - Page 18 Overview 4-Port 40-Gb Network Module Figure 9: 4-Port 40-Gb Network Module (FPR-X-NM-4X40G) Captive screw Network activity LEDs The up arrows represent the top ports and the down arrows represent the bottom ports. • Off—No SFP. • Amber—No link or a network failure. •...
-
Page 19: 8-Port 10/100/1000Base-T Network Module With Hardware Bypass
Ports 1 and 2, 3 and 4, 5 and 6, and 7 and 8 are paired for hardware bypass mode. In hardware bypass mode, data is not processed by the Secure Firewall 3100 but is routed to the paired port. - Page 20 Cisco Secure Firewall Threat Defense Compatibility Guide Cisco Secure Firewall ASA Compatibility guide, which provide Cisco software and hardware compatibility, including operating system and hosting environment requirements, for each supported version. The following figure shows the front panel of the 8-port 10/100/1000Base-Tnetwork module.
-
Page 21: 6-Port 1-Gb Sx/10-Gb Sr/10-Gb Lr/25-Gb Sr/25-Gb Lr Network Module With Hardware Bypass
Pair ports 1 and 2, 3 and 4, and 5 and 6 to form hardware bypass paired sets. In hardware bypass mode, data is not processed by the Secure Firewall 3100 but is routed to the paired port. This network module has built-in SPF transceivers. - Page 22 Cisco Secure Firewall ASA Compatibility guide, which provide Cisco software and hardware compatibility, including operating system and hosting environment requirements, for each supported version The following figure shows the front panel of the 6-port 1/10/25-Gb network module. Overview...
- Page 23 Overview 6-Port 1-Gb SX/10-Gb SR/10-Gb LR/25-Gb SR/25-Gb LR Network Module with Hardware Bypass Figure 11: 6-Port 1/10/25-Gb Network Module (FPR-X-NM-6X1SXF, FPR-X-NM-6X10SRF, FPR-X-NM-6X10LRF, FPR-X-NM-6X25SRF, and FPR-X-NM-6X25LRF) Ethernet 2/1 (top port) Ethernet 2/3 (top port) Ethernet 2/2 (bottom port) Ethernet 2/4 (bottom port) Ports 1 and 2 are paired together to form a Ports 3 and 4 are paired together to form a hardware bypass pair.
-
Page 24: Power Supply Module
Power Supply Module Product ID Numbers, on page 33 for a list of the PIDs associated with the Secure Firewall 3100 power supply modules. Note You cannot mix AC and DC power supply modules in the chassis. - Page 25 Overview Power Supply Module Note The system does not consume more than the capacity of one power supply module, so it always operate in full redundancy mode when two power supply modules are installed. Table 2: AC Power Supply Module Hardware Specifications Input voltage 100 to 240 VAC Maximum input...
-
Page 26: Dual Fan Modules
Dual Fan Modules The Secure Firewall 3100 has two fan modules that provide 3 + 1 redundancy. Each fan module has two fans and each fan has two independent fan rotors. The fan rotors are monitored individually, and this gives 8 fan rotors per system. -
Page 27: Ssds
SSDs The Secure Firewall 3100 has two SSD slots that each hold one NVMe 900-GB SSD. By default the Secure Firewall 3100 ships with one 900-GB SSD installed in slot 1. The second SSD slot is reserved for software RAID1. - Page 28 You cannot swap SSDs between different platforms. For example, you cannot use a 2100 series SSD in a 3100 series model. If you are swapping SSDs between two Secure Firewall 3100s, use the remove-secure local disk command, otherwise sometimes the SED (self-encrypting drive) gets locked. If you get an error message that the SED is locked, you can enter the PSID and the system clears the SED and creates a new set of keys.
-
Page 29: Supported Sfp/Sfp+/Qsfp+ Transceivers
Overview Supported SFP/SFP+/QSFP+ Transceivers Supported SFP/SFP+/QSFP+ Transceivers The SFP/SFP+/QSFP+ transceiver is a bidirectional device with a transmitter and receiver in the same physical package. It is a hot-swappable optical or electrical (copper) interface that plugs into the SFP/SFP+/QSFP+ ports on the fixed ports and the network module ports, and provides Ethernet connectivity. Figure 15: SFP Transceiver Dust plug Bail clasp... - Page 30 Cisco. Cisco TAC may refuse support for any interoperability problems that result from using an untested third-party SFP transceiver. The following table lists the supported transceivers for the fixed ports on all 3100 models, and the FPR3K-XNM-8X10G and FPR3K-XNM-8X25G network modules.
- Page 31 300 m with OM3 40G-SR-BD QSFP-40G-SR-BD LC connector 40G-LR4-S QSFP-40G-LR4-S Ethernet only 40G-LR4 QSFP-40G-LR4 Ethernet and OTU3 40G-LR4L WSP-Q40GLR4L LR4 Lite, up to 2 km 40G-CU Cisco QSFP-H40G-CUxM QSFP to QSFP copper direct-attach cables (passive); length 1, 3, 5 m Overview...
-
Page 32: Hardware Specifications
30 m 40G-AOC-breakout QSFP-4X10G-AOCxM QSFP to 4xSFP active optical cables; length 1, 2, 3, 5, 7, 10, 15, 30 m Hardware Specifications The following table contains hardware specifications for the Secure Firewall 3100. Specification 3105 3110 3120 3130 3140 Chassis 1.75 x 17 x 20 inches (4.4 x 43.3 x 50.8 cm) -
Page 33: Product Id Numbers
80 (maximum) Product ID Numbers The following table lists the product IDs (PIDs) associated with the Secure Firewall 3100. All of the PIDs in the table are field-replaceable. If you need to get a return material authorization (RMA) for any component, Cisco Returns Portal for more information. - Page 34 Overview Product ID Numbers Description FPR3140-NGFW-K9 Cisco Secure Firewall 3140 next generation firewall chassis 1 RU Accessories Accessory kit that ships with the chassis FPR3K-ACY-KIT FPR3K-ACY-KIT= Accessory kit (spare) FPR3K-PWR-AC-400 400-W AC power supply FPR3K-PWR-AC-400= 400-W AC power supply (spare)
-
Page 35: Power Cord Specifications
Overview Power Cord Specifications Description FPR3K-XNM-6X10SRF 6-port 10-Gb SFP hardware bypass network module, SR multimode FPR3K-XNM-6X10SRF= 6-port 10-Gb SFP hardware bypass network module, SR multimode (spare) FPR3K-XNM-6X10LRF 6-port 10-Gb SFP hardware bypass network module, LR single mode FPR3K-XNM-6X10LRF= 6-port 10-Gb SFP hardware bypass network module, LR single mode (spare)) FPR3K-XNM-6X25SRF 6-port 25-Gb SFP hardware bypass network module,... - Page 36 Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with the system. Note Only the approved power cords or jumper power cords provided with the Secure 3100 are supported. The following power cords are supported. Figure 16: Argentina (CAB-ACR)
- Page 37 Overview Power Cord Specifications Plug: NBR 14136 Cord set rating: 10 A, 250 V Connector: IEC 60320/C13 Cord length: 2.1 m Figure 19: China (CAB-ACC) Plug: GB2099.1-2008 Cord set rating: 10 A, 250 V Connector: IEC 60320/C13 Cord length: 2.5 m Figure 20: Europe (CAB-ACE) Plug: CEE 7 VII Cord set rating: 10 A, 250 V...
- Page 38 Overview Power Cord Specifications Figure 22: India Jumper (CAB-C13-C14-IN) IEC 60320/C14G Cord set rating: 10 A, 250 V Connector: IEC 60320/C13 Cord length: 1.4 m Figure 23: India (PWR-CORD-IND-D) Plug: IS 6538-1971 Cord set rating: 10 A, 250 V Connector: IEC 60320/C13 Cord length: 1.8 m Figure 24: Israel (CAB-250V-10A-IS) Plug: SI-32...
- Page 39 Overview Power Cord Specifications Figure 25: Italy (CAB-ACI) Plug: CEI 23-16 Cord set rating: 10 A, 250 V Connector: IEC 60320/C13 Cord length: 2.5 m Figure 26: Japan (CAB-JPN) Plug: JIS C8303 Cord set rating: 12 A, 125 V Connector: IEC 60320/C13 Cord length: 2.5 m Figure 27: Japan (CAB-JPN-3PIN) Plug: JIS C8303/JIS C8306...
- Page 40 Overview Power Cord Specifications Figure 29: Jumper (CAB-C13-C14-2M) IEC 60320/C14G Cord set rating: 10 A, 250 V Connector: IEC 60320/C13 Cord length: 2.5 m Figure 30: Cabinet Jumper (CAB-C13-CBN) IEC 60320-2-2/E Cord set rating: 10 A, 250 V Connector: IEC 60320/C13 Cord length: 0.7 m Figure 31: Korea (CAB-AC-C13-KOR) Plug: KSC 8305...
- Page 41 Overview Power Cord Specifications Plug: NEMA 5-15P Cord set rating: 10 A, 125 V Connector: IEC 60320/C13 Cord length: 2.1 m Figure 33: South Africa (CAB-ACSA) Plug: SABS 164/1 Cord set rating: 16 A, 250 V Connector: IEC 60320/C13 Cord length: 1.8 m Figure 34: Switzerland (CAB-ACS) Plug: SEV 1011 Cord set rating: 10 A, 250 V...
- Page 42 Overview Power Cord Specifications Figure 36: United Kingdom (CAB-ACU) Plug: BS1363A/SS145 Cord set rating: 10 A, 250 V Connector: IEC 60320/C13 Cord length: 2.5 m Overview...