H3C SecPath F5030, Manual

Page 1: ...a fiber port 17 Connecting the power cord 19 Connecting an AC power cord 19 Connecting a DC power cord 20 Verifying the installation 21 3 Accessing the firewall for the first time 3 22 Setting up the...

Page 2: ...Chassis and FRU views and technical specifications 7 38 Chassis views 7 38 F5030 F5060 F5080 F5000 M F5030 6GW F5000 A 7 38 F5030 D F5060 D F5080 D 7 39 Slots 7 40 FRU views 7 40 MPUs 7 40 Interface m...

Page 3: ...ecommendations Do not place the firewall on an unstable case or desk The firewall might be severely damaged in case of a fall Make sure the ground is dry and flat and anti slip measures are in place K...

Page 4: ...ed transceiver modules to avoid damage caused by built up dust Insert a dust plug into empty fiber ports Handling safety When you move the firewall follow these guidelines Move and unpack the firewall...

Page 5: ...fespan of the firewall For the temperature and humidity requirements of the firewall see Table1 2 Table1 2 Temperature humidity requirements Temperature Relative humidity Operating Without hard disks...

Page 6: ...rent fan trays Rear to front airflow The FAN 20F 2 A fan tray blows air from the power module side to the port side as shown in Figure1 1 The fan tray has a blue fan tray handle Front to rear airflow...

Page 7: ...strap tight around your wrist to keep good contact with the skin 3 Secure the wrist strap lock and the alligator clip lock together 4 Attach the alligator clip to the rack Figure1 3 Attaching an ESD w...

Page 8: ...he device If a network cable is routed from outdoors for connecting to an Ethernet port on the firewall connect the network cable first to a network port lightning arrester before connecting it to the...

Page 9: ...ting Without hard disks 5 RH to 95 RH noncondensing With hard disks 10 RH to 80 RH noncondensing Storage 5 RH to 95 RH noncondensing Cleanness Dust concentration 3 104 particles m3 No dust on desk wit...

Page 10: ...the AC power receptacle is reliably grounded Optional A power lightning arrester is installed Power supply Verify that the power system at the installation site meets the requirements of the power mo...

Page 11: ...if you want to open the chassis contact the local agent of H3C for permission Otherwise H3C shall not be liable for any consequence caused thereby The installation method is similar for the F5030 F50...

Page 12: ...lling or using the firewall connect the grounding cable to it correctly Do not connect the firewall grounding cable to a fire main or lightning rod Ground the firewall Install fan trays Install MPUs o...

Page 13: ...Connect the other end of the grounding cable to the grounding strip on the rack Figure2 2 Grounding the firewall by using the primary grounding point Installing the firewall in a standard 19 inch rack...

Page 14: ...ositions on the front and rear rack posts respectively Four cage nuts are required on each front rack post and two are required on each rear rack post 4 Install cages nuts at the marked positions 5 Us...

Page 15: ...ack posts 8 Fasten the M6 rack screws with a Phillips screwdriver to secure the mounting brackets to the front rack posts Figure2 5 Mounting the firewall to the rack Installing a power module CAUTION...

Page 16: ...wer module along the guide rails into the slot until it has firm contact with the slot Figure2 7 Installing an AC power module Installing a fan tray CAUTION Before installation make sure the airflow d...

Page 17: ...slots 0 0 and 1 0 on the F5030 D F5060 D F5080 D support installation of MPUs If the F5030 D F5060 D F5080 D is installed with two MPUs you can hot swap an MPU If the F5030 D F5060 D F5080 D is insta...

Page 18: ...tall a filler panel over empty hard disk slots to avoid damage caused by build up dust Before using a hard disk execute the fdisk and format commands from the CLI to partition and format the hard disk...

Page 19: ...ted optical fibers or transceiver modules might emit invisible laser light Do not stare into beams or view directly with optical instruments when the switch is operating CAUTION Never bend or curve a...

Page 20: ...ll a transceiver module Pull the bail latch on the transceiver module upwards to catch the knob on the top of the transceiver module Take the transceiver module by its two sides and push the end witho...

Page 21: ...d the power source is powered off before connecting the power cord Connecting an AC power cord 1 Connect one end of the AC power cord to the AC input power receptacle on the power module 2 Use a remov...

Page 22: ...ctly orient the DC power cord plug with the power receptacle on the power module and insert the plug into the receptacle 2 Use a removable cable tie to secure the DC power cord to the power module han...

Page 23: ...nstallation After installation verify that There is enough space for heat dissipation around the firewall and the firewall is steady All screws are fastened The grounding cable and power cord are secu...

Page 24: ...ed The correct power source is used The console cable is correctly connected the terminal or PC used for configuration has started and the configuration parameters have been correctly set The interfac...

Page 25: ...ssed Known answer test for SHA256 passed Known answer test for SHA384 passed Known answer test for SHA512 passed Known answer test for HMAC SHA1 passed Known answer test for HMAC SHA224 passed Known a...

Page 26: ...l B at the prompt the system starts to read and decompress program files To enter the EXTENDED BOOT menu afterwards you need to reboot the device Logging in to the firewall For more information about...

Page 27: ...to the Ethernet management interface on the firewall 2 Configure an IP address in subnet 192 168 0 0 24 for the PC Make sure the PC and the firewall are reachable to each other The PC must use a diff...

Page 28: ...otating axis even if they are not rotating To replace a fan tray 1 Holding the fan tray handle with one hand and supporting the fan tray bottom with the other pull the fan tray out of the slot along t...

Page 29: ...nstall a new power module For the installation procedure see Installing a fan tray Figure4 3 Removing the DC power module Replacing an MPU or an interface module CAUTION You can hot swap an MPU only w...

Page 30: ...execute the umount command from the CLI to unmount all the file systems before removing a hard disk Hard disks are not hot swappable To replace a hard disk 1 Wear an ESD wrist strap and make sure it...

Page 31: ...n plating To replace a transceiver module 1 Use the shutdown command in interface view at the CLI to shut down the optical source before you remove the fiber connector 2 Remove the LC connectors with...

Page 32: ...CPU Ver 1 0 CPLD_A 1 0 CPLD_B 1 0 CFCard Num 0 Displaying the software and hardware version information for the firewall Use the display version command to display software and hardware version inform...

Page 33: ...me display device manuinfo Slot 1 CPU 0 DEVICE_NAME SecPath F5060 DEVICE_SERIAL_NUMBER 210235A1XYH175000008 MAC_ADDRESS 1CAB 3497 D7DE MANUFACTURING_DATE 2017 06 13 VENDOR_NAME H3C Fan 0 The operation...

Page 34: ...average CPU usage at intervals of 5 minutes Displaying the memory usage of the firewall Use the display memory command to display the memory information of the firewall Sysname display memory Memory s...

Page 35: ...rmal Slot 1 Power 1 Status Absent Table5 4 Output description Field Description Power Number of the power module Status Power module state Normal The power module is operating correctly Absent The pow...

Page 36: ...s Typically you need to run display commands one by one To collect more information one time you can execute the display diagnostic information command in any view to display or save the operational s...

Page 37: ...nterface number Available for all transceiver modules Rebooting the firewall CAUTION If the main system software image file does not exist do not use the reboot command to reboot the firewall Specify...

Page 38: ...ower cords of the firewall are firmly connected 4 Verify that the power cords are not damaged 5 If the issue persists contact your local sales agent Configuration terminal display problem Symptom The...

Page 39: ...irewall keeps rising If the temperature has reached the alarming level high temperature alarm threshold back up data immediately power off the firewall and contact your local sales agent Information a...

Page 40: ...ont panel 1 Interface module slots slots 1 through 8 2 Hard disk slot HD0 3 Hard disk slot HD1 4 LEDs Rear panel On the rear panel the F5030 F5060 F5080 F5000 M F5030 6GW F5000 A firewall provides fou...

Page 41: ...1 0 3 Hard disk slot HD0 4 Hard disk slot HD1 5 LEDs Rear panel On the rear panel the F5030 D F5060 D F5080 D firewall provides the following ports and slots Four combo interfaces including four 10 10...

Page 42: ...one 100 1000BASE TX management Ethernet port Only slots 0 0 and 1 0 on the F5030 D F5060 D F5080 D firewall support the NSQM1MPULA MPU Figure7 5 Front view 1 USB port host mode Type A connector 2 Cons...

Page 43: ...QM1TG8A The NSQM1TG8A interface module provides eight 10GBASE R fiber Ethernet ports Figure7 6 NSQM1TG8A front view 1 LED 2 10GBASE R fiber Ethernet ports 3 Captive screw 4 Ejector lever NSQM1QG2A The...

Page 44: ...8A front view 1 LED 2 10 100 1000BASE T copper Ethernet ports 3 Captive screw 4 Ejector lever NSQM1GP8A The NSQM1GP8A interface module provides eight 1000BASE X fiber Ethernet ports Figure7 10 NSQM1GP...

Page 45: ...and power module slot PWR1 empty You can install two power modules to achieve 1 1 power redundancy or install only one power module If two power modules are installed you can hot swap a power module...

Page 46: ...2 A fan trays are available for the firewall The FAN 20F 2 A fan tray provides power module side intake and port side exhaust airflow The FAN 20B 2 A fan tray provides port side intake and power modu...

Page 47: ...is 88 1 440 660 mm 3 47 17 32 25 98 in excluding rubber feet and mounting brackets 20 1 kg 44 31 lb MPU NSQM1MPULA 19 8 189 212 4 mm 0 78 7 44 8 36 in 0 6 kg 1 32 lb Interface module NSQM1TG8A 19 8 18...

Page 48: ...r consumption of the MPUs and interface modules as shown in Table7 5 Table7 5 Power consumption Item Specification Firewall chassis F5030 F5060 F5080 F5000 M F5030 6GW 191 W F5000 A 199 W F5030 D F506...

Page 49: ...to the port side FAN 20B 2 A From the port side to the power module side Hot swapping Supported Max airflow volume 120 CFM Max power consumption 57 W Operating voltage 12 VDC Hard disk specifications...

Page 50: ...ompliance 802 3 802 3u and 802 3ab Interface type MDI MDI X autosensing Cable type Category 5 or higher twisted pair cable Transmission distance 100 m 328 08 ft Interface speed and duplex mode 10 Mbps...

Page 51: ...FP GE LH40 SM1550 1550 SMF 9 125 N A SFP GE LH80 SM1550 1550 SMF 9 125 N A SFP GE LH100 SM1550 1550 SMF 9 125 N A Table7 14 1000BASE X SFP transceiver module specifications 2 Transceiver module Transm...

Page 52: ...Table7 15 10 GE fiber port specifications Item Specification Connector type LC Transceiver module type SFP Standard compliance 10GBASE R Interface speed LAN PHY 10 Gbps Table7 16 SFP transceiver modul...

Page 53: ...3 to 1 9 9 to 0 5 82 m 269 03 ft 66 m 216 54 ft 33 m 108 27 ft 26 m 85 30 ft 8 m 26 25 ft SFP XG LX220 MM131 0 220 m 721 78 ft 10 31 Gbps 6 5 to 0 5 6 5 to 1 5 220 m 721 78 ft 100 m 328 08 ft 220 m 7...

Page 54: ...n speed Transmitted optical power dBm Received optical power dBm QSFP 40G SR4 MM850 100 m 328 08 ft 40 Gbps 7 6 to 0 9 5 to 2 4 150 m 492 13 ft QSFP 40G LR4 WDM1300 10 km 6 21 miles 40 Gbps 7 to 2 3 1...

Page 55: ...y green A link is present Off No link is present Ethernet fiber port LED combo interface 1000BASE X Flashing green The port is receiving or sending data at 1000 Mbps Steady green A 1000 Mbps link is p...

Page 56: ...ing or sending data at 1000 Mbps Steady green A 1000 Mbps link is present Off No link is present 10GBASE R Flashing green The port is receiving or sending data at 10 Gbps Steady green A 10 Gbps link i...

Page 57: ...two twisted pair cable segments with a repeater At most four repeaters can be added which means five segments can be joined together to provide a transmission distance of 500 m 1640 42 ft Ethernet twi...

Page 58: ...ion EIA TIA cabling specifications define two standards 568A and 568B for cable pinouts Standard 568A pin 1 white green stripe pin 2 green solid pin 3 white orange stripe pin 4 blue solid pin 5 white...

Page 59: ...Pin 10Base T 100Base TX 1000Base T Signal Function Signal Function 1 Tx Sends data BIDA Bi directional data cable A Straight through cable white orange orange white green blue white blue green white b...

Page 60: ...data cable C To ensure normal communication the pins for sending data on one port must correspond to the pins for receiving data on the peer port When both ports on the two devices are MDI or MDIX use...

Page 61: ...t source and transmission distance Uses lasers as the light source often within campus backbones for distance of several thousand meters Uses LEDs as the light source often within LANs or distances of...

Page 62: ...ohol to clean the end face of the two fiber connectors You can brush the end faces only in one direction Never bend or curve a fiber If the fiber has to pass through a metallic board hole or bend alon...