Replace Cisco Content Security Appliance Components
Warning Blank faceplates and cover panels serve three important functions: they prevent exposure to hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place.
Statement 1029
Caution
When handling appliance components, wear an ESD strap to avoid damage.
Tip You can press the Unit Identification button on the front panel or rear panel to turn on a flashing Unit Identification LED on the front and rear panels of the appliance. This button allows you to locate the specific appliance that you are servicing when you go to the opposite side of the rack. See the “Prepare for Cisco Content Security Appliance Component Replacement” section for locations of these LEDs.
This section describes how to replace appliance components, and it includes the following topics:
Replace Hard Drives or Solid State Drives
Drive Population Guidelines
The 90-Series Cisco Content Security Appliances are available in the following models:
- Cisco C190, M190, S190, and C390 —Two small form-factor (SFF) drives
- Cisco S390 and C690 —Four SFF drives
- Cisco M390 —Six SFF drives
- Cisco M390X, C690X, C690-1G, and C690-10G —Eight SFF drives
- Cisco M690 —Ten SFF drives
- Cisco M690X, M690-1G, M690-10G, S690X, S690-1G, and S690-10G—Sixteen SFF drives
Note You cannot change the backplane type after-factory. To change a front panel/backplane configuration, a chassis replacement is required.
The drive-bay numbering for all versions is shown in Figure 11-1 and Figure 11-2.
Figure 11-1 Drive Numbering for 1RU Appliances
Figure 11-2 Drive Numbering for 2RU Appliances
Observe these drive population guidelines for optimal performance:
- When populating drives, add drives in the lowest numbered bays first.
- Keep an empty drive blanking tray in any unused bays to ensure optimal airflow and cooling.
Drive Replacement Procedure
Tip You do not have to shut down or power off the appliance to replace SAS hard drives because they are hot-swappable.
Step 1 Remove the drive that you are replacing or remove a blank drive tray from an empty bay:
a. Press the release button on the face of the drive tray. See Figure 11-3.
b. Grasp and open the ejector lever and then pull the drive tray out of the slot.
c. If you are replacing an existing drive, remove the four drive-tray screws that secure the drive to the tray and then lift the drive out of the tray.
Step 2 Install a new drive:
a. Place a new drive in the empty drive tray and replace the four drive-tray screws.
b. With the ejector lever on the drive tray open, insert the drive tray into the empty drive bay.
c. Push the tray into the slot until it touches the backplane, and then close the ejector lever to lock the drive in place.
Figure 11-3 Replace Drives on 1RU Appliances
|
Release button |
|
Drive tray securing screws (four) |
|
Ejector lever |
|
|
Replace Power Supplies
The appliance can have one or two power supplies. When two power supplies are installed, they are redundant and hot-swappable, with one active power supply and one standby (1+1).
This appliance also supports cold redundancy. Depending on the power being drawn by the appliance, one power supply might actively provide all power to the system while the remaining power supply is put into a standby state. For example, if you have two supplies connected to AC power, but the power consumption can be satisfied by power supply 1, then power supply 2 is put into a standby state.
Note If you have ordered an appliance with power supply redundancy (two power supplies), you do not have to power off the appliance to replace power supplies because they are redundant as 1+1 and hot-swappable.
Note Do not mix power supply types in the appliance. Both power supplies must be the same wattage and Cisco product ID (PID).
Step 1 Remove the power supply that you are replacing or a blank panel from an empty bay:
a. Perform one of the following actions:
– If your appliance has only one power supply, shut down and power off the appliance as described in Shut Down and Power Off the Appliance.
– If your appliance has two power supplies, you do not have to shut down the appliance.
b. Remove the power cord from the power supply that you are replacing.
For a DC power supply, release the electrical connector block from the power supply by pushing the orange plastic button on the top of the connector inward toward the power supply (see Figure 11-4). Pull the connector block from the power supply.
c. Grasp the power supply handle while pinching the green release lever towards the handle (see Figure 11-5).
d. Pull the power supply out of the bay.
Step 2 Install a new power supply:
a. Grasp the power supply handle and insert the new power supply into the empty bay.
b. Push the power supply into the bay until the release lever locks.
c. Connect the power cord to the new power supply.
For a DC power supply, push the electrical connector block into the power supply.
d. If you shut down the appliance, press the Power button to return the appliance to main power mode.
Figure 11-4 Replace Power Supplies on 1RU Appliances
|
Power supply handle |
|
Power supply release lever |
Figure 11-5 Replace Power Supplies on 2RU Appliances
|
Power supply handle |
|
Power supply release lever |
Install a DC Power Supply
The x690 models of Cisco Content Security Appliances are available with optional 930W DC power supplies. The part number for the Version 2 930W DC power supply is CCS-PWR-DCV2-930W.
Warning A readily accessible two-poled disconnect device must be incorporated in the fixed wiring. Statement 1022
Warning This product requires short-circuit (overcurrent) protection, to be provided as part of the building installation. Install only in accordance with national and local wiring regulations. Statement 1045
Warning When installing or replacing the unit, the ground connection must always be made first and disconnected last. Statement 1046
Warning Installation of the equipment must comply with local and national electrical codes. Statement 1074
Warning Hazardous voltage or energy may be present on DC power terminals. Always replace cover when terminals are not in service. Be sure uninsulated conductors are not accessible when cover is in place. Statement 1075
If you are using the Version 2 930W DC power supply, you connect power using a supplied 3-wire cable with a keyed connector that plugs into a fixed power input socket on the power supply.
Warning Before beginning this wiring procedure, turn off the DC power source from your facility’s circuit breaker to avoid electric shock hazard.
Step 1 Turn off the DC power source from your facility’s circuit breaker to avoid electric shock hazard.
Step 2 Wire the supplied 3-wire connector cable to your facility’s DC power source. Attach the red wire to the negative lead of your facility’s DC power source.
Note The supplied connector cable contains 8 AWG gauge wires. The recommended facility wire gauge is 8 AWG. The minimum facility wire gauge is 10 AWG.
Step 3 Plug the supplied connector cable into the power input socket on the power supply. Figure 11-6 shows that the connector is keyed to the socket so that the polarity is aligned correctly.
Figure 11-6 Version 2 930 W, –48 VDC Power Supply Connector Block
|
Power supply status LED |
|
Fixed power input socket |
|
Power supply fault LED |
|
Supplied connector cable |
Step 4 Return power from your facility’s DC power source at the circuit breaker.
Step 5 Verify that power supply status LED is green.
Enable Remote Power Cycling
If you want to be able to remotely reset appliance power, you must enable and configure this functionality in advance, using the procedure described in this section.
Note The RPC port speed is configured statically to 100 mbps and full-duplex mode without autonegotiation. Without autonegotiation, the RPC port fails to connect properly and cannot be used.
Before You Begin
- Cable the dedicated RPC port directly to a secure network.
- Ensure that the appliance is accessible remotely; for example, open any necessary ports through the firewall.
- This feature requires a unique IPv4 address for the dedicated RPC interface. This interface is configurable only via the procedure described in this section; it cannot be configured using the ipconfig command.
- To cycle appliance power, you will need a third-party tool that can manage devices that support the Intelligent Platform Management Interface (IPMI) version 2.0. Ensure that you are prepared to use such a tool.
- For more information about accessing the CLI, see the CLI reference guide.
Procedure
Step 1 Use SSH or the serial console port to access the command-line interface.
Step 2 Sign in using an account with Administrator access.
Step 3 Enter the following commands:
remotepower
setup
Step 4 Follow the prompts to specify the following:
- The dedicated IP address for this feature, plus netmask and gateway.
- The username and password required to execute the power-cycle command.
These credentials are independent of other credentials used to access your appliance.
Step 5 Enter commit
to save your changes.
Step 6 Test your configuration to be sure that you can remotely manage appliance power.
Step 7 Ensure that the credentials that you entered will be available to you in the indefinite future. For example, store this information in a safe place and ensure that administrators who may need to perform this task have access to the required credentials.
Remotely Reset Appliance Power
If the appliance requires a hard reset, you can reboot the appliance chassis remotely using a third-party Intelligent Platform Management Interface (IPMI) tool.
Restrictions
- If you want be able to use this feature, you must enable it in advance, before you need to use it.
For details, see Enable Remote Power Cycling.
- Only the following IPMI commands are supported:
status, on, off, cycle, reset, diag, soft
Issuing unsupported commands will produce an “insufficient privileges” error.
Before You Begin
- Obtain and set up a utility that can manage devices using IPMI version 2.0.
- Understand how to use the supported IPMI commands. See the documentation for your IPMI tool.
Procedure
Step 1 Use IPMI to issue a supported power-cycling command to the IP address assigned to the Remote Power Cycle port, which you configured earlier, along with the required credentials.
For example, from a UNIX-type machine with IPMI support, you might issue the command:
ipmitool -I lan -H 192.0.2.1 -U remoteresetuser -P password chassis power reset
where 192.0.2.1
is the IP address assigned to the Remote Power Cycle port and remoteresetuser
and password
are the credentials that you entered while enabling this feature.
Step 2 Wait at least eleven minutes for the appliance to reboot.