Hillstone SG-6000-G2110, Installation Manual

Page 1: ...Hillstone SG 6000 Series Firewall Appliance Installation Manual Hillstone Networks Inc SG 6000 IM0511 4 0R4E 03 ...

Page 2: ...imit defined in the Requirements for Concentration Limits for Certain Hazardous Substances in Electronic Information Products SJ T11363 2006 issued by the Ministry of Information Industry of PRC Indicates that the substance in one or more components exceeds the limits specified in the Requirements for Concentration Limits for Certain Hazardous Substances in Electronic Information Products SJ T1136...

Page 3: ...Pre installation Preparations Chapter 3 Installation Chapter 4 Boot and Configuration Chapter 5 Hardware Maintenance and Replacement Chapter 6 Troubleshooting Document Conventions This manual uses the following conventions for your convenience to read and understand Warning Indicates improper operation that may cause serious damage to equipment or injury to operators Thus operators must strictly f...

Page 4: ...lectrostatic Discharge Prevention 26 Electromagnetic Interference Prevention 26 Grounding Requirements 27 Workbench Requirements 27 Other Safety Recommendations 27 Unpacking 28 Installation Devices Tools and Cables 28 Chapter 3 Installation 29 Before Installation 29 Installing the Appliance on a Workbench 29 Installing the Appliance on a Rack 30 Connecting Cables 31 Connecting the Ground Wire 31 C...

Page 5: ...g the Power Supply Module 38 Installing and Removing the X5100 G6100 Power Supply Module 38 Installing and Removing the G5150 G3150 Power Supply Module 39 Installing and Removing the Expansion Module 39 Installing and Removing the Fan Tray 40 Chapter 6 Troubleshooting 42 Introduction 42 Losing the Administrator Password 42 Troubleshooting Power System 42 Troubleshooting the Configuration System 42...

Page 6: ... 17 SG 6000 G2120 SG 6000 G2110 dual power supply Back Panel 10 Figure 1 18 SG 6000 M6115 single power supply SG 6000 M6110 single power supply Back Panel 10 Figure 1 19 SG 6000 M3108 single power supply SG 6000 M3105 single power supply Back Panel 10 Figure 1 20 SG 6000 M3100 Back Panel 10 Figure 1 21 SG 6000 M2105 Back Panel 11 Figure 1 22 SG 6000 M2100 Back Panel 11 Figure 1 23 AC Power Module ...

Page 7: ... M3105 single power supply Front Panel Description 7 Table 1 11 SG 6000 M3100 Front Panel 8 Table 1 12 SG 6000 M2105 Front Panel Description 8 Table 1 13 SG 6000 M2100 Front Panel Description 8 Table 1 14 Hillstone Firewall Appliance Front Panel LED Descriptions 13 Table 1 15 Hillstone Firewall Appliance System Parameters 17 Table 1 16 Console Port Attributes 18 Table 1 17 Auxiliary Port Attribute...

Page 8: ...00 G3150 SG 6000 G3100 SG 6000 G2120 SG 6000 G2110 SG 6000 M6115 SG 6000 M6110 SG 6000 M3108 SG 6000 M3105 SG 6000 M3100 SG 6000 M2105 and SG 6000 M2100 SG 6000 G5150 SG 6000 G3150 SG 6000 G2120 SG 6000 G2110 SG 6000 M6115 and SG 6000 M6110 adopt modular design of pluggable circuit boards For more information about extensible modules please refer to Hillstone SG 6000 Series Firewall Appliance Expa...

Page 9: ... processing module increases the security processing capability of the appliance removing the bottleneck of application security The storage module is used to store logs and statistics collected by the device Hardware Overview Hillstone firewall appliances are designed to fit in standard 19 inch cabinets racks A firewall appliance can be installed in a cabinet rack or placed on a workbench Front P...

Page 10: ...1 CLR button some status LEDs and a fan tray Figure 1 2 illustrates the front panel of SG 6000 G6100 Figure 1 2 SG 6000 G6100 Front Panel No Label Description No Label Description No Label Description 1 PWR Power LED 6 PS1 Power PS1 LED 11 USB0 USB1 USB Ports 2 STA Status LED 7 FAN Fan tray LED 12 e0 0 Ethernet port 3 ALM Alarm LED 8 CLR CLR button 13 e0 1 e0 12 SFP ports 4 HA HA status LED 9 CON ...

Page 11: ... 6000 G3100 consists of 6 Gigabit Ethernet ports 6 Gigabit Combo ports SFP port Ethernet port 2 USB ports 1 Console port 1 Auxiliary port 1 CLR button and some status LEDs Figure 1 4 illustrates the front panel of SG 6000 G3100 Figure 1 4 SG 6000 G3100 Front Panel No Label Description No Label Description No Label Description 1 PWR Power LED 5 PS0 Power PS0 LED 9 AUX Auxiliary port 2 STA Status LE...

Page 12: ...single power supply and the dual power supply product is also available Figure 1 6 illustrates the front panel of SG 6000 G2110 single power supply Figure 1 6 SG 6000 G2110 single power supply Front Panel No Label Description No Label Description No Label Description 1 PWR Power LED 5 CLR CLR button 9 Slot 1 General expansion slot 2 STA Status LED 6 CON Console port 10 Slot 2 Storage expansion slo...

Page 13: ...ly and the dual power supply product is also available Figure 1 8 illustrates the front panel of SG 6000 M6110 single power supply Figure 1 8 SG 6000 M6110 single power supply Front Panel No Label Description No Label Description No Label Description 1 PWR Power LED 5 CLR CLR button 9 e0 0 e0 3 Ethernet ports 2 STA Status LED 6 CON Console port 10 e0 4 e0 7 SFP ports 3 ALM Alarm LED 7 AUX Auxiliar...

Page 14: ... The standard power supply for SG 6000 M3105 is single power supply and the dual power supply product is also available Figure 1 10 illustrates the front panel of SG 6000 M3105 single power supply Figure 1 10 SG 6000 M3105 single power supply Front Panel No Label Description No Label Description No Label Description 1 PWR Power LED 5 CLR CLR button 9 SD SD card LED 2 STA Status LED 6 CON Console p...

Page 15: ...R button 8 e0 0 e0 4 Ethernet ports 3 ALM Alarm LED 6 CON Console port Table 1 12 SG 6000 M2105 Front Panel Description The front panel of SG 6000 M2100 consists of 5 Gigabit Ethernet ports 1 USB port 1 Console port 1 CLR button and some status LEDs Figure 1 13 illustrates the front panel of SG 6000 M2100 Figure 1 13 SG 6000 M2100 Front Panel No Label Description No Label Description No Label Desc...

Page 16: ...SG 6000 G3150 Back Panel SG 6000 G3100 adopts dual power supply The back panel consists of 2 power supply sockets 2 power supply switches 1 grounding screw and several vents Figure 1 16 illustrates the back panel layout of SG 6000 G3100 Figure 1 16 SG 6000 G3100 Back Panel SG 6000 G2120 and SG 6000 G2110 have the same back panel layout which consists of 2 power supply sockets 2 power supply switch...

Page 17: ...ve the same back panel layout The standard products are single power supply and they are also available in dual power supply The back panel of single power supply product has 1 power supply socket 1 power supply switch and 1 grounding screw Figure 1 19 illustrates the back panel layout of single power supply product of SG 6000 M3108 and SG 6000 M3105 Figure 1 19 SG 6000 M3108 single power supply S...

Page 18: ...to connect to power supply The back panel of SG 6000 M2100 has 1 power supply socket 1 grounding screw and 1 security lock Figure 1 22 illustrates the back panel of SG 6000 M2100 Figure 1 22 SG 6000 M2100 Back Panel LED Indicators Table 1 14 describes the meanings of LED indicators on the front panels of Hillstone firewall appliances 11 ...

Page 19: ...y immediately PS0 Off Power Supply PS0 is not powered on or it is lf i i Green On steadily Power Supply PS1 is running normally Orange On steadily Power Supply PS1 is running normally but the power supply fan is malfunctioning Change the power supply immediately PS1 Off Power Supply PS0 is not powered on or it is malfunctioning Green On steadily Only one appliance is available running as the Maste...

Page 20: ...g or receiving data ACT Off No data is transmitted on this port Table 1 14 Hillstone Firewall Appliance Front Panel LED Descriptions Notes The STA and ALM LEDs will both turn red when there is a boot failure caused by OS software damage Contact your sales representative if this occurs As LED indicators vary due to different product model please refer to the real product System Parameters Table 1 1...

Page 21: ...y port SG 6000 G2120 4 Gigabit Ethernet ports 4 SFP ports 1 USB 2 0 Host port 1 Console port 1 Auxiliary port SG 6000 G2110 16 Gigabit Ethernet ports 1 USB 2 0 Host port 1 Console port SG 6000 M6115 4 Gigabit Ethernet ports 8 SFP ports 1 USB 2 0 Host port 1 Console port 1 Auxiliary port SG 6000 M6110 8 Gigabit Ethernet ports 4 SFP ports 1 USB 2 0 Host port 1 Console port 1 Auxiliary port SG 6000 M...

Page 22: ...G 6000 G5150 SG 6000 G3150 SG 6000 G3100 4GB SG 6000 G2120 2GB SG 6000 G2110 2GB SG 6000 M6115 SG 6000 M6110 2GB SG 6000 M3108 SG 6000 M3105 SG 6000 M3100 1GB DDR2 SDRAM SG 6000 M2105 SG 6000 M2100 512MB Flash Memory SG 6000 X5100 SG 6000 G6100 SG 6000 G5150 SG 6000 G3150 SG 6000 G2120 SG 6000 G2110 SG 6000 M6115 SG 6000 M6110 SG 6000 M3108 SG 6000 M3105 SG 6000 G3100 SG 6000 M3100 SG 6000 M2105 S...

Page 23: ...ght 15 6kg accessories and packages included SG 6000 G3100 Net weight 5 5kg Gross weight 7 7kg accessories and packages included SG 6000 G2120 Net weight 5 6kg Gross weight 9 1kg accessories and packages included SG 6000 G2110 Net weight 5 2kg Gross weight 8 4kg accessories and packages included SG 6000 M6115 Net weight 5 7kg Gross weight 9 3kg accessories and packages included SG 6000 M6110 Net w...

Page 24: ...ule 36 72V DC SG 6000 G5150 SG 6000 G3150 AC supply module 100 240V AC 50 60Hz DC supply module 40 60V DC Input Voltage SG 6000 M2100 5V DC Temperature 0 40 Relative Humidity 10 95 noncondensing Table 1 15 Hillstone Firewall Appliance System Parameters Note DDR2 SDRAM is the random access memory to store the communication data for the CPU Flash Memory is used for storing the operating system firmw...

Page 25: ...le 1 17 Attribute Description Connector RJ 45 Port Standard RS 232C Baud Rate 9600 19200 38400 57600 115200 bit s Services Supported Debugging aid Table 1 17 Auxiliary Port Attributes USB Port Hillstone firewall appliance provides two USB Host ports at most Attributes for the USB port are shown in Table 1 18 Attribute Description Connector USB Type A interface Port Standard USB 2 0 Host interface ...

Page 26: ...t_II Ethernet_SNAP SFP optical module 1000Mbps Negotiation Mode SFP electric module 10 100 1000Mbps autosensing some only supports 1000Mbps Full half duplex Table 1 20 SFP Port Attributes Caution To avoid dust falling into the SFP socket you should place a rubber dust cap originally in the accessory box over the SFP port The SFP port has two types of interface transceiver module for you to choose ...

Page 27: ...tandard Ethernet cable Table 1 22 describes the attributes of SFP electric module Attribute Description Connector RJ 45 Port Standard Auto MDI MDIX crossover cable and straight through cable autosensing Maximum Transmission Distance 100m Negotiation Mode 10 100 1000Mbps autosensing some only supports 1000Mbps Full half duplex Table 1 22 SFP Electric Module Attributes Cautions The SFP electric modu...

Page 28: ... fiber 62 5 125μm multimode fiber 9 125μm single mode fiber 9 125μm single mode fiber 9 125μm single mode fiber Maximum Transmission Distance 0 3km 984 3ft 0 033km 108 3ft 10km 40km 80km Central Wavelength 850nm 850nm 1310nm 1550nm 1550nm Table 1 24 XFP Optical Module Attributes Caution To avoid dust falling into the XFP socket you should place a rubber dust cap in the accessory box over the XFP p...

Page 29: ...xpansion slot fits in any slot 1U height expansion modules can only be installed in Slot2 and Slot4 For SG 6000 G2120 expansion module FEC HD 160 can only be inserted in Slot1 SG 6000 G2110 SG 6000 M6115 and SG 6000 M6110 can only accommodate storage expansion modules in Slot1 Some appliances support more than one expansion modules of the same type Cautions Cover the expansion slot with blank pane...

Page 30: ...100 SG 6000 G6100 SG 6000 G5150 SG 6000 G3150 SG 6000 G3100 and SG 6000 G2120 support dual power supply i e utilizing two power sources as power inputs in case one fails the other power can instantaneously provides power input and protect the appliance from unexpected power disconnection The two powers back up for each other SG 6000 G2110 SG 6000 M6115 SG 6000 M6110 SG 6000 M3108 and SG 6000 M3105...

Page 31: ...000 X5100 and SG 6000 G6100 Figure 1 24 DC Power Module for SG 6000 X5100 and SG 6000 G6100 The AC power module of SG 6000 G5150 and SG 6000 G3150 is shown in Figure 1 25 the DC power module for the two products is shown in Figure 1 26 Figure 1 25 AC Power Module for SG 6000 G5150 and SG 6000 G3150 24 ...

Page 32: ...lt Table 1 25 LED Indicators of SG 6000 G5150 and SG 6000 G3150 For information on power module installation and replacement refer to Installing and Removing the Power Supply Module Expansion Module SG 6000 G5150 SG 6000 G3150 SG 6000 G2120 and SG 6000 G2110 support three types of expansion modules which are interface module storage module and application processing module SG 6000 M6115 and SG 600...

Page 33: ...ticle 5μm Table 2 1 Dust Concentration Requirements in the Equipment Room Electrostatic Discharge Prevention To prevent Electrostatic Discharge ESD damage ensure that The appliance is well grounded The grounding screw is properly grounded Take dustproof measures for the equipment room Maintain the humidity and temperature at a proper level Do not disassemble the equipment without permission from t...

Page 34: ... Requirements Before the installation ensure your workbench is properly prepared as follows Make sure that you provide adequate space near the intake and exhaust vents of the appliance for heat dissipation Make sure the rack is equipped with a good ventilation system Make sure the rack is strong enough to support the weight of a fully equipped appliance Make sure the rack is well grounded Other Sa...

Page 35: ... have any problem please contact your sales representative Installation Devices Tools and Cables A Hillstone firewall appliance is shipped with a power cable and a console cable and you should have the following items before the installation Terminal Configuration terminal an ordinary PC is sufficient Tools Philips screwdrivers and ESD preventive wrist strap Cables Power cable console cable and Et...

Page 36: ...make sure that You have read Chapter 2 Pre installation Preparations carefully The requirements referred in Chapter 2 Pre installation Preparations are satisfied Hillstone products can be installed On a workbench On a standard 19 inch rack Installing the Appliance on a Workbench You can simply place the Hillstone product on a stable and clean workbench For skid prevention perform the following ste...

Page 37: ...table enough and well grounded Hillstone firewall appliances are designed for a 19 inch standard rack To rack mount the chassis Note SG 6000 M2100 requires a plate under it to fit in a rack Step 1 Attach rack mounting ears to the left and right side panels of the chassis respectively and then fasten the rack mounting ears with suitable screws as shown in Figure 3 2 Figure 3 2 Installing the Rack m...

Page 38: ... the ground wire the console cable the Ethernet cable and the power cable Connecting the Ground Wire To meet safety requirements you must correctly connect the grounding screw on the chassis to the earth ground by a grounding wire The grounding resistance should be less than 5Ω Warning The correct connection of the ground wire on the chassis is an essential safeguard against lightning shocks and i...

Page 39: ...ulti mode cables to access Ethernet All SFP and XFP optical modules of Hillstone products use LC type optical connector therefore you should connect the optical modules using optical fiber ended with LC type connector Follow the guidelines below when connecting cables to the ports Be careful not to connect the Ethernet port to the wrong ports Read the label above the port carefully For electrical ...

Page 40: ... this step 4 Power on the switch of the appliance 5 Check PWR LED on the front panel A shining LED indicates correct connection Note If a product does not have a power switch you can skip Step2 and Step4 Connecting DC Power Cable To power the appliance with DC power source use DC power cables to connect the appliance and the external DC power source Hillstone does not provide DC power cables Warni...

Page 41: ...ning LED indicates correct connection Verifying Installation After you complete the installation with all the above steps you still need to verify the following items All the cables are properly connected The grounding wire of the appliance is correctly connected The air vents on both side panel of the appliance are unblocked and there is enough space around for heat dissipation The expansion modu...

Page 42: ...t and SSH Console CON Connection For initial system configuration you have to establish a Console connection environment connect the device to a configuration terminal through its Console port Perform the following steps to establish a Console connection 1 Set up a local configuration environment Connect the Console port to the serial port of a PC through a console cable as shown in Figure 4 1 Fig...

Page 43: ...word prompts press Enter And now you are successfully logged in and accessing the CLI 4 Enter commands to configure or view running status Enter a question mark to get help on commands whenever you want WebUI The ethernet0 0 e0 0 port has a default IP address of 192 168 1 1 24 and all the management functions of this port are enabled by default Administrators can access the WebUI through e0 0 Perf...

Page 44: ...n in the network network management requirements and network security design requirements you can design a reasonable topology choose proper operation mode of the ports set security zones and perform the network and security policy configuration The basic configuration steps may include 1 Create security zones including the link layer L2 and network layer L3 Bind different interfaces to correct se...

Page 45: ... To install a power supply module to SG 6000 X5100 or SG 6000 G6100 1 Ensure that the power supply module to be used is not connected to any power source 2 Face the back panel of the appliance 3 If the power supply slot is covered by blank plate remove the plate first unscrew the screws on the blank plate and take it down Skip this step if the slot is not covered 4 Slide the power supply module al...

Page 46: ...f the power supply slot is covered by blank plate remove the plate first unscrew the screws on the blank plate and take it down Skip this step if the slot is not covered 4 Slide the power supply module all the way into the slot cage until you feel resistant Figure 5 2 Installing Power Supply Module of SG 6000 G5150 G3150 To remove the power supply module 1 Make sure the power supply module to be u...

Page 47: ...off and you should wear the ESD strap properly 2 Face the front panel of the appliance 3 Loosen the screws on the expansion module 4 Pull the expansion module straight out of the chassis by holding the screws Note Apply a blank plate to cover the slot where no expansion module is installed Installing and Removing the Fan Tray SG 6000 X5100 SG 6000 G6100 SG 6000 G5150 and SG 6000 G3150 have hot ins...

Page 48: ...Series Firewall Appliance Installation Manual 2 Pull the fan tray out of the chassis by holding the provided handle Note To avoid over heating insert a replacement fan tray immediately after removing the existing one 41 ...

Page 49: ...re the power supply cable is connected correctly Ensure that the voltage of the power source conforms with the required voltage For the PWR LED information refer to LED Indicators Troubleshooting the Configuration System The Console configuration terminal shows system booting message when the appliance is powered on If the configuration system has failed it displays error information or nothing at...

Page 50: ... interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television r...