H3C SecPath F5030, Installation Manual

Page 1: ...H3C SecPath F5030 F5060 F5080 F5030 D F5060 D F5080 D F5000 M F5030 6GW F5000 A Firewalls Installation Guide New H3C Technologies Co Ltd http www h3c com Document version 6W102 20190624...

Page 2: ...respective owners Notice The information in this document is subject to change without notice All contents in this document including statements information and recommendations are believed to be acc...

Page 3: ...enclose syntax choices keywords or arguments that are optional x y Braces enclose a set of required syntax choices separated by vertical bars from which you select one x y Square brackets enclose a se...

Page 4: ...s a Layer 2 or Layer 3 switch or a router that supports Layer 2 forwarding and other Layer 2 features Represents an access controller a unified wired WLAN module or the access controller engine on a u...

Page 5: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...

Page 6: ...alling a lightning arrester for a network port 17 Optional Installing a lightning arrester for an AC power module 17 Connecting Ethernet cables 18 Connecting a copper Ethernet port 18 Connecting a fib...

Page 7: ...display problem 36 Password loss 37 Cooling system failure 37 Software loading failure 37 Appendix A Chassis and FRU views and technical specifications 38 Chassis and FRU views 38 F5030 F5060 F5080 F5...

Page 8: ...the firewall on an unstable case or desk The firewall might be severely damaged in case of a fall Make sure the ground is dry and flat and anti slip measures are in place Keep the chassis and installa...

Page 9: ...ed transceiver modules to avoid damage caused by built up dust Insert a dust plug into empty fiber ports Handling safety When you move the firewall follow these guidelines Move and unpack the firewall...

Page 10: ...e temperature and humidity requirements of the firewall see Table 2 Table 2 Temperature humidity requirements Temperature Relative humidity Operating Without hard disks 0 C to 45 C 32 F to 113 F With...

Page 11: ...erent fan trays Rear to front airflow The FAN 20F 2 A fan tray blows air from the power module side to the port side as shown in Figure 1 The fan tray has a blue fan tray handle Front to rear airflow...

Page 12: ...st strap tight around your wrist to keep good contact with the skin 3 Secure the wrist strap lock and the alligator clip lock together 4 Attach the alligator clip to the rack Figure 3 Attaching an ESD...

Page 13: ...ounded Install a lightning arrester at the input end of the power module to enhance the lightning protection capability of the power module Power supply Verify that the power system at the installatio...

Page 14: ...d the rack are reliably grounded The equipment room is dust proof The humidity and temperature are at an acceptable level Always wear ESD clothing ESD gloves and an ESD wrist strap and when you instal...

Page 15: ...8 Item Requirements Tools and accessories Installation accessories supplied with the firewall User supplied tools Reference Documents shipped with the firewall Online documents...

Page 16: ...cover intact and if you want to open the chassis contact the local agent of H3C for permission Otherwise H3C shall not be liable for any consequence caused thereby The installation method is similar...

Page 17: ...able management bracket at the chassis front 25 5 mm 1 00 in for the power module handle at the chassis rear A minimum of 1 m 3 28 ft in depth recommended A minimum of 100 mm 3 94 in between the front...

Page 18: ...ont ends of the slide rails can reach out of the chassis rails after the firewall is installed in the rack Figure 6 Attaching the mounting brackets and chassis rails to the firewall 7 One person suppo...

Page 19: ...se the auxiliary grounding point attach the grounding cable to the grounding point before you install the device in a rack The procedure is the same for connecting a grounding cable to the primary gro...

Page 20: ...ll both AC and DC power modules on the same device To install a power module 1 To install the power module to slot PWR1 remove the filler panel from the slot To install the power module to slot PWR2 s...

Page 21: ...ore replacing it To prevent damage to the fan tray and the connectors on the backplane insert the fan tray gently If you encounter any resistance while inserting the fan tray pull out the fan tray re...

Page 22: ...PU and interface module slots to prevent dust and ensure good ventilation in the chassis The installation procedure is the same for MPUs and interface modules This section uses interface module NSQM1G...

Page 23: ...hard disks from other vendors Purchase hard disks from H3C as needed Installing a hard disk 1 Wear an ESD wrist strap and make sure it makes good skin contact and is reliably grounded 2 Remove the fi...

Page 24: ...as needed If part of the network cable of an Ethernet port must be routed outdoors connect a lightning arrester to the cable before you plug the cable into the port If more than one Ethernet ports on...

Page 25: ...iber excessively The bend radius of a fiber must be not less than 100 mm 3 94 in Keep the fiber end clean Make sure the fiber connector matches the transceiver module Before connecting a fiber make su...

Page 26: ...tch gently into the port until it snaps into place 3 Remove the dust cap from the optical fiber connector and use dust free paper and absolute alcohol to clean the end face of the fiber connector 4 Id...

Page 27: ...le 2 Use a removable cable tie to secure the AC power cord to the power module handle 3 Connect the other end of the power cord to the AC power source Figure 19 Connecting an AC power cord Connecting...

Page 28: ...he installation After installation verify that There is enough space for heat dissipation around the firewall and the firewall is steady All screws are fastened The grounding cable and power cord are...

Page 29: ...The correct power source is used The console cable is correctly connected the terminal or PC used for configuration has started and the configuration parameters have been correctly set The interface...

Page 30: ...t for SHA256 passed Known answer test for SHA384 passed Known answer test for SHA512 passed Known answer test for HMAC SHA1 passed Known answer test for HMAC SHA224 passed Known answer test for HMAC S...

Page 31: ...tarts to read and decompress program files To enter the EXTENDED BOOT menu afterwards you need to reboot the device Logging in to the firewall For more information about logging in to the device see t...

Page 32: ...ernet management interface on the firewall 2 Configure an IP address in subnet 192 168 0 0 24 for the PC Make sure the PC and the firewall are reachable to reach other The PC must use a different IP a...

Page 33: ...lace a fan tray 1 Holding the fan tray handle with one hand and supporting the fan tray bottom with the other pull the fan tray out of the slot along the guide rails 2 Put the removed fan tray into an...

Page 34: ...hot swap an MPU only when the F5030 D F5060 D F5080 D has two MPUs Interface modules are not hot swappable The replacement procedure is the same for MPUs and interface modules This section uses the in...

Page 35: ...operating When you replace a transceiver module make sure the two transceiver modules connected by the same optical fiber are the same type Do not touch the golden finger of the transceiver module Fig...

Page 36: ...26 Removing the transceiver module 4 Install dust caps to the removed transceiver module and put it into the package 5 Install a new transceiver module For the installation procedure see Connecting a...

Page 37: ...Displaying the software and hardware version information for the firewall Use the display version command to display software and hardware version information for the firewall Sysname display version...

Page 38: ...97 D7DE MANUFACTURING_DATE 2017 06 13 VENDOR_NAME H3C Fan 0 The operation is not supported on the specified fan Fan 1 The operation is not supported on the specified fan Fan 2 The operation is not sup...

Page 39: ...easured in KB Slot 1 Total Used Free Shared Buffers Cached FreeRatio Mem 32870736 4244812 28625924 0 2048 200756 87 1 Buffers Cache 4042008 28828728 Swap 0 0 0 Table 12 Output description Field Descri...

Page 40: ...orrectly Absent The power module is not in position Abnormal The power module has failed Displaying the temperature information of the firewall Use the display environment command to display the tempe...

Page 41: ...ommands one by one To collect more information one time you can execute the display diagnostic information command in any view to display or save the operational statistics of multiple functional modu...

Page 42: ...terface number Available for all transceiver modules Rebooting the firewall CAUTION If the main system software image file does not exist do not use the reboot command to reboot the firewall Specify t...

Page 43: ...er cords of the firewall are firmly connected 4 Verify that the power cords are not damaged 5 If the issue persists contact your local sales agent Configuration terminal display problem Symptom The co...

Page 44: ...examine whether the temperature of the firewall keeps rising If the temperature exceeds 90 C 194 F power off the firewall immediately and contact your local sales agent 5 If the issue persists contac...

Page 45: ...nt view of the F5030 F5060 F5080 F5000 M F5030 6GW F5000 A 1 Interface module slots slots 1 through 8 2 Hard disk slot HD0 3 Hard disk slot HD1 4 LEDs F5030 D F5060 D F5080 D front view On the front p...

Page 46: ...5000 D On the MPU F5030 F5060 F5080 F5030 6GW F5000 M F5000 A GE1 0 0 F5030 D F5060 D F5080 D MGE1 0 0 0 Figure 29 Rear view F5080 1 10 100 1000Base T copper Ethernet port combo interface 2 1000Base X...

Page 47: ...4 through 8 Slots 4 through 8 Slots 2 4 through 2 6 NSQM1TG8A The NSQM1TG8A interface module provides eight 10GBASE R fiber Ethernet ports Figure 31 NSQM1TG8A front view 1 LED 2 10GBASE R fiber Ether...

Page 48: ...re 34 NSQM1GT8A front view 1 LED 2 10 100 1000BASE T copper Ethernet ports 3 Captive screw 4 Ejector lever NSQM1GP8A The NSQM1GP8A interface module provides eight 1000BASE X fiber Ethernet ports Figur...

Page 49: ...ler panel and power module slot PWR1 empty You can install two power modules to achieve 1 1 power redundancy or install only one power module If two power modules are installed you can hot swap a powe...

Page 50: ...78 7 44 8 36 in 0 6 kg 1 32 lb Interface module NSQM1TG8A 19 8 189 212 4 mm 0 78 7 44 8 36 in 0 55 kg 1 21 lb NSQM1QG2A 19 8 189 212 4 mm 0 78 7 44 8 36 in 0 55 kg 1 21 lb NSQM1G4XS4 19 8 189 212 4 mm...

Page 51: ...e module NSQM1TG8A 12 96 W NSQM1QG2A 6 40 W NSQM1G4XS4 6 46 W NSQM1GT8A 3 03 W NSQM1GP8A 8 15 W NSQM1GT4PFCA 5 78 W Power module specifications Table 19 AC power module specifications Item Specificati...

Page 52: ...030 6GW F5000 A 8 F5030 D F5060 D F5080 D 6 Hard disk slots 2 Console port Table 22 Console port specifications Item Specification Connector RJ 45 Standard compliant RS 232 Baud rate 9600 bps default...

Page 53: ...rnet port of network adapters The media dependent interface crossover MDI X standard is typically used on hubs or LAN switches GE fiber port Table 25 GE fiber port specifications Item Specification Co...

Page 54: ...A 550 m 1804 46 ft 9 5 to 0 17 to 3 500 m 1640 42 ft 275 m 902 23 ft 220 m 721 78 ft 220 m 721 78 ft SFP GE LX SM1310 A 10 km 6 21 miles 9 5 to 3 20 to 3 550 m 1804 46 ft 550 m 1804 46 ft SFP GE LH40...

Page 55: ...P transceiver module specifications 2 Transceiver module Transmission distance Transmission speed Transmitted optical power dBm Received optical power dBm SFP XG SX MM850 A 300 m 984 25 ft 10 31 Gbps...

Page 56: ...SR4 MM850 850 MMF 50 125 2000 4700 QSFP 40G LR4 WDM1300 Four lanes 1271 1291 1311 1331 SMF 9 125 N A QSFP 40G CSR4 MM850 850 MMF 50 125 2000 4700 Table 33 QSFP transceiver module specifications 2 Tran...

Page 57: ...and HD1 Flashing green Data is being written in or read from the hard disk Steady green The hard disk has finished the initialization and is operating correctly Off The hard disk is not in position o...

Page 58: ...Ready LED READY Flashing green 1 Hz The system is operating correctly Flashing green 8 Hz The system is starting Off The system has failed Copper Ethernet port LED 10 100 1000BASE T Flashing green Th...

Page 59: ...about 1 mm 0 04 in A pair of twisted copper cables can cancel the electromagnetic radiation of each other and reduce interference of external sources An Ethernet twisted pair cable mainly transmits a...

Page 60: ...Ethernet twisted pair cable connects network devices through the RJ 45 connectors at the two ends Figure 40 shows the pinouts of an RJ 45 connector Figure 40 RJ 45 connector pinout NOTE The RJ 45 Eth...

Page 61: ...to the RJ 45 Ethernet port type on your device An RJ 45 Ethernet port can be MDI for routers and PCs or MDIX for switches Table 39 and Table 40 show their pinouts Table 39 RJ 45 MDI port pinouts Pin 1...

Page 62: ...ata cable C To ensure normal communication the pins for sending data on one port must correspond to the pins for receiving data on the peer port When both ports on the two devices are MDI or MDIX use...

Page 63: ...source and transmission distance Uses lasers as the light source often within campus backbones for distance of several thousand meters Uses LEDs as the light source often within LANs or distances of...

Page 64: ...hol to clean the end face of the two fiber connectors You can brush the end faces only in one direction Never bend or curve a fiber If the fiber has to pass through a metallic board hole or bend along...