H3C SecPath F5000-A Installation guide

H3C SecPath F5030/F5060/F5080/

F5030-D/F5060-D/F5080-D/F5000-M

F5030-6GW/F5000-A Firewalls

Installation Guide

New H3C Technologies Co., Ltd.

http://www.h3c.com

Document version: 6W102-20190624

No part of this manual may be reproduced or transmitted in any form or by any means without prior written

consent of New H3C Technologies Co., Ltd.

Trademarks

Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this

document are the property of their respective owners.

Notice

The information in this document is subject to change without notice. All contents in this document, including

statements, information, and recommendations, are believed to be accurate, but they are presented without

warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions

contained herein.

Environmental protection

This product has been designed to comply with the environmental protection requirements. The storage, use,

and disposal of this product must meet the applicable national laws and regulations.

Preface

The installation guide describes preparing for installation, installing the firewall, logging in to the

firewall, hardware replacement, hardware management and maintenance, and troubleshooting.

This preface includes the following topics about the documentation:

• Audience

• Conventions

• Documentation feedback

Audience

This documentation is intended for:

• Network planners

• Field technical support and servicing engineers

• Network administrators working with the firewall

Conventions

The following information describes the conventions used in the documentation.

Command conventions

Convention Description

Boldface Bold

text represents commands and keywords that you enter literally as shown.

Italic

Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from which

you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars,

from which you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by vertical

bars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by vertical

bars, from which you select one choice, multiple choices, or none.

&<1-n>

The argument or keyword and argument combination before the ampersand (&) sign

can be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention Description

Boldface

Window names, button names, field names, and menu items are in Boldface. For

example, the

New User

window appears; click

OK

.

>

Multi-level menus are separated by angle brackets. For example,

File

>

Create

>

Folder

.

Symbols

Convention Description

WARNING!

An alert that calls attention to important information that if not understood or followed

can result in personal injury.

CAUTION:

An alert that calls attention to important information that if not understood or followed

can result in data loss, data corruption, or damage to hardware or software.

IMPORTANT:

An alert that calls attention to essential information.

NOTE:

An alert that contains additional or supplementary information.

TIP:

An alert that provides helpful information.

Network topology icons

Convention Description

Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that

supports Layer 2 forwarding and other Layer 2 features.

Represents an access controller, a unified wired-WLAN module, or the access

controller engine on a unified wired-WLAN switch.

Represents an access point.

Represents a wireless terminator unit.

Represents a wireless terminator.

Represents a mesh access point.

Represents omnidirectional signals.

Represents directional signals.

Represents a security product, such as a firewall, UTM, multiservice security gateway,

or load balancing device.

Represents a security module, such as a firewall, load balancing, NetStream, SSL

VPN, IPS, or ACG module.

Examples provided in this document

Examples in this document might use devices that differ from your device in hardware model,

configuration, or software version. It is normal that the port numbers, sample output, screenshots,

and other information in the examples differ from what you have on your device.

T



Documentation feedback

You can e-mail your comments about product documentation to [email protected].

We appreciate your comments.

i

Contents

Preparing for installation ···································································· 1

Safety recommendations ············································································································· 1

Safety symbols ··················································································································· 1

General safety recommendations ··························································································· 1

Electrical safety ··················································································································· 2

Laser safety ······················································································································· 2

Handling safety ··················································································································· 2

Examining the installation site ······································································································· 3

Weight support ··················································································································· 3

Temperature and humidity ····································································································· 3

Cleanliness ························································································································ 3

Cooling system ··················································································································· 4

ESD prevention ··················································································································· 4

EMI ·································································································································· 5

Lightning protection ············································································································· 6

Power supply ······················································································································ 6

Installation tools ························································································································· 6

Installation accessories ··············································································································· 6

Pre-installation checklist ·············································································································· 7

Installing the firewall ········································································· 9

Installing the firewall in a standard 19-inch rack ·············································································· 10

Grounding the firewall ··············································································································· 12

Installing a power module ·········································································································· 13

Installing a fan tray ··················································································································· 14

Installing FRUs ························································································································ 15

(Optional) Installing an MPU or an interface module ·································································· 15

(Optional) Installing and removing a hard disk ········································································· 16

(Optional) Installing a lightning arrester for a network port ·························································· 17

(Optional) Installing a lightning arrester for an AC power module ················································· 17

Connecting Ethernet cables ······································································································· 18

Connecting a copper Ethernet port ························································································ 18

Connecting a fiber port ······································································································· 18

Connecting the power cord ········································································································ 20

Connecting an AC power cord ······························································································ 20

Connecting a DC power cord ······························································································· 20

Verifying the installation ············································································································· 21

Accessing the firewall for the first time ················································ 22

Setting up the configuration environment ······················································································ 22

Powering on the firewall ············································································································ 22

Checking before power-on ·································································································· 22

Powering on the firewall ······································································································ 22

Checking after power-on ····································································································· 22

Logging in to the firewall ············································································································ 24

Logging in from the console port ··························································································· 24

Logging in from the Web interface ························································································· 25

Logging in through Telnet ···································································································· 25

Hardware replacement ···································································· 26

Replacing a fan tray·················································································································· 26

Replacing a power module ········································································································· 26

Replacing an MPU or an interface module ····················································································· 27

Replacing a transceiver module ·································································································· 28

Hardware management and maintenance ··········································· 30

Displaying detailed information about the firewall ············································································ 30

ii

Displaying the software and hardware version information for the firewall ············································· 30

Displaying the electrical label information for the firewall ··································································· 31

Displaying the CPU usage of the firewall ······················································································· 31

Displaying the memory usage of the firewall ·················································································· 32

Displaying the operational status of power modules········································································· 33

Displaying the temperature information of the firewall ······································································ 33

Displaying the operational statistics of the firewall ··········································································· 34

Displaying transceiver module information ····················································································· 35

Rebooting the firewall ··············································································································· 35

Troubleshooting ············································································· 36

Power module failure ················································································································ 36

Configuration terminal display problem ························································································· 36

Password loss ························································································································· 37

Cooling system failure ··············································································································· 37

Software loading failure ············································································································· 37

Appendix A Chassis and FRU views and technical specifications ············· 38

Chassis and FRU views ············································································································ 38

F5030/F5060/F5080/F5000-M/F5030-6GW/F5000-A front view ··················································· 38

F5030-D/F5060-D/F5080-D front view ··················································································· 38

Rear view ························································································································ 39

MPU views ······················································································································· 39

Interface module views ······································································································· 40

Power module views ·········································································································· 42

Technical specifications ············································································································· 43

Dimensions and weights ····································································································· 43

Memory and storage media ································································································· 43

Power consumption ··········································································································· 44

Power module specifications ································································································ 44

Port specifications ············································································································· 45

Appendix B LEDs ··········································································· 50

Front panel and rear panel LEDs ································································································· 50

MPU LEDs ····························································································································· 50

Interface module LEDs ·············································································································· 51

Appendix C Cables ········································································· 52

Console cable ························································································································· 52

Ethernet twisted pair cable ········································································································· 52

Introduction ······················································································································ 52

Making an Ethernet twisted pair cable ···················································································· 55

Optical fiber ···························································································································· 56

1

Preparing for installation

Safety recommendations

To avoid any equipment damage or bodily injury, read the following safety recommendations before

installation. Note that the recommendations do not cover every possible hazardous condition.

Safety symbols

When reading this document, note the following symbols:

WARNING means an alert that calls attention to important information that if not understood or

followed can result in personal injury.

CAUTION means an alert that calls attention to important information that if not understood or

followed can result in data loss, data corruption, or damage to hardware or software.

General safety recommendations

• Do not place the firewall on an unstable case or desk. The firewall might be severely damaged

in case of a fall.

• Make sure the ground is dry and flat and anti-slip measures are in place.

• Keep the chassis and installation tools away from walk areas.

• Keep the chassis clean and dust-free.

• Do not place the firewall near water or in a damp environment. Prevent water or moisture from

entering the firewall chassis.

• Ensure good ventilation of the equipment room and keep the air inlet and outlet vents of the

firewall free of obstruction.

• Make sure the operating voltage is in the required range.

• Use a screwdriver, rather than your fingers, to fasten screws.

• Stack devices according to the sizes of and packing symbols on the packages.

Table 1 Packing symbols

Symbol Description

Stored with a maximum stack of n units.

Transported and stored with the arrows up.

Transported and stored with care.

2

Symbol Description

Transported and stored avoiding humidity, rains and wet floor.

Electrical safety

• Carefully examine your work area for possible hazards such as moist floors, ungrounded power

extension cables, and missing safety grounds.

• Locate the emergency power-off switch in the room before installation. Shut the power off at

once in case accident occurs.

• Do not work alone when the firewall has power.

• Always verify that the power has been disconnected.

Laser safety

WARNING!

Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into

beams or view directly with optical instruments when the switch is operating.

The firewall is a Class 1 laser device.

• Before you disconnect the fiber connector, execute the

shutdown command in interface view

to disable the optical source.

• Install dust caps to disconnected optical fiber connectors and ports on disconnected transceiver

modules to avoid damage caused by built-up dust.

• Insert a dust plug into empty fiber ports.

Handling safety

When you move the firewall, follow these guidelines:

• Move and unpack the firewall carefully to avoid firewall damage.

• Unpack the firewall at least half an hour and power on the firewall at least two hours after you

move it from a place below 0°C (32°F) to the equipment room. This prevents condensation and

even damage to the firewall.

• Use a safety hand truck when you move multiple firewalls.

• Before you move the firewall, remove all cables and mounting brackets.

• For long-distance transportation, remove all the field-replaceable units (FRUs), such as power

modules and interface modules, and package them separately, and install the filler panels

supplied with the firewall. For short-distance transportation, make sure all the FRUs are

securely seated in the slots and the screws are fastened.

• When you move or lift the firewall chassis, support the bottom of the chassis, rather than

holding any FRU.

• Make sure the accessories of the firewall are not lost or damaged during firewall moving.

3

Examining the installation site

The firewall can only be used indoors. To make sure the firewall operates correctly and to prolong its

service lifetime, the installation site must meet the following requirements.

Weight support

Make sure the floor can support the total weight of the rack, chassis, modules, and all other

components. For more information, see "Dimensions and weights."

Temperature and humidity

Maintain appropriate temperature and humidity in the equipment room.

• Lasting high relative humidity can cause poor insulation, electricity leakage, mechanical

property change of materials, and metal corrosion.

• Lasting low relative humidity can cause washer contraction and ESD and bring problems

including loose captive screws and circuit failure.

• High temperature can accelerate the aging of insulation materials and significantly lower the

reliability and lifespan of the firewall.

For the temperature and humidity requirements of the firewall, see Table 2.

Table 2

Temperature/humidity requirements

Temperature Relative humidity

• Operating:

{ Without hard disks: 0°C to 45°C

(32°F to 113°F)

{ With hard disks: 5°C to 40°C

(41°F to 104°F)

• Storage: –40°C to +70°C (–40°F to

+158°F)

• Operating:

{ Without hard disks: 5% RH to 95% RH, noncondensing

{ With hard disks: 10% RH to 80% RH, noncondensing

• Storage:

{ Without hard disks: 5% RH to 95% RH, noncondensing

{ With hard disks: 5% RH to 90% RH, noncondensing

Cleanliness

Dust buildup on the chassis might result in electrostatic adsorption, which causes poor contact of

metal components and contact points, especially when indoor relative humidity is low. In the worst

case, electrostatic adsorption can cause communication failure.

Table 3 Dust concentration limit in the equipment room

Substance Concentration limit (particles/m

3

)

Dust particles

≤ 3 × 10

4

(No visible dust on desk in three days)

NOTE:

Dust particle diameter ≥ 5 µm

The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion

and premature aging of components, as shown in Tabl e 4 .

4

Table 4 Harmful gas limits in an equipment room

Gas Max. (mg/m

3

)

SO

2

0.2

H

2

S 0.006

NH

3

0.05

Cl

2

0.01

NO

2

0.04

Cooling system

For heat dissipation, make sure the following requirements are met:

• A minimum clearance of 100 mm (3.94 in) is reserved around the inlet and outlet air vents.

• The installation site has a good cooling system.

The firewall adopts either of the following airflow for heat dissipation by installing different fan trays:

• Rear-to-front airflow—The FAN-20F-2-A fan tray blows air from the power module side to the

port side as shown in Figure 1. The fan tray has a bl

ue fan tray handle.

• Front-to-rear airflow—The FAN-20B-2-A fan tray draws air from the port side to the power

module side as shown in Figure 2.

The fan tray has a red fan tray handle.

Figure 1 Rear to front airflow provided by the FAN-20F-2-A fan tray

Figure 2 Front-to-rear airflow provided by the FAN-20B-2-A fan tray

ESD prevention

To prevent electrostatic discharge (ESD), note the following guidelines:

• Make sure the firewall and the rack are reliably grounded.

5

• Take dust-proof measures for the equipment room. For more information, see "Cleanliness."

• Maintain the humidity and temperature at an acceptable level. For more information, see

"Temperature and humidity."

• Put the remo

ved interface modules away on an ESD workbench, with the PCB upward, or put

them in ESD bags for future use.

• Always wear ESD clothing, ESD gloves, and an ESD wrist strap when you install or remove a

transceiver module.

No ESD wrist strap is provided with the firewall. Purchase one yourself.

Before you attach an ESD wrist strap, make sure the rack is reliably grounded.

To attach the ESD wrist strap:

1. Wear the wrist strap on your wrist.

2. Lock the wrist strap tight around your wrist to keep good contact with the skin.

3. Secure the wrist strap lock and the alligator clip lock together.

4. Attach the alligator clip to the rack.

Figure 3 Attaching an ESD wrist strap

(1) ESD wrist strap (2) Lock

(3) Alligator clip

EMI

All electromagnetic interference (EMI) sources, from outside or inside of the firewall and application

system, adversely affect the firewall in the following ways:

• A conduction pattern of capacitance coupling.

• Inductance coupling.

• Electromagnetic wave radiation.

• Common impedance (including the grounding system) coupling.

To prevent EMI, use the following guidelines:

• If AC power is used, use a single-phase three-wire power receptacle with protection earth (PE)

to filter interference from the power grid.

• Keep the firewall far away from radio transmitting stations, radar stations, and high-frequency

devices.

6

• Use electromagnetic shielding, for example, shielded interface cables, when necessary.

• To prevent signal ports from getting damaged by overvoltage or overcurrent caused by lightning

strikes, route interface cables only indoors. If part of the network cable of an Ethernet port must

be routed outdoors, connect a lightning arrester to the cable before you plug the cable into the

port.

Lightning protection

To protect the firewall from lightning better, do as follows:

• Make sure the grounding cable of the chassis is reliably grounded.

• Make sure the grounding terminal of the AC power receptacle is reliably grounded.

• Install a lightning arrester at the input end of the power module to enhance the lightning

protection capability of the power module.

Power supply

Verify that the power system at the installation site meets the requirements of the power modules,

including the input method and rated input voltage. For more information, see "Appendix A Chassis

views and technical specifications."

Installation tools

No installation tools are provided with the firewall. Prepare installation tools yourself as required.

Table 5 Installation tools

Flathead screwdriver Phillips screwdriver Needle-nose pliers Marker

Diagonal pliers ESD wrist strap Wire-stripping pliers Crimping tool

Installation accessories

Table 6 Installation accessories

M6 rack screw

(user supplied)

M4 mounting bracket screw Cage nut Grounding cable

7

Cable tie

(user supplied)

Slide rails and chassis rails

Mounting brackets with

cable management

brackets

Pre-installation checklist

Table 7 Checklist before installation

Item Requirements

Installation

site

Ventilation

• There is a minimum clearance of 100 mm (3.94 in) around the inlet

and outlet air vents for heat dissipation of the firewall chassis.

• A ventilation system is available at the installation site.

Temperature

• Operating:

{ Without hard disks: 0°C to 45°C (32°F to 113°F)

{ With hard disks: 5°C to 40°C (41°F to 104°F)

• Storage: –40°C to +70°C (–40°F to +158°F)

Relative humidity

• Operating:

{ Without hard disks: 5% RH to 95% RH, noncondensing

{ With hard disks: 10% RH to 80% RH, noncondensing

• Storage:

{ Without hard disks: 5% RH to 95% RH, noncondensing

{ With hard disks: 5% RH to 90% RH, noncondensing

Cleanness

• Dust concentration ≤ 3 × 104 particles/m3

• No dust on desk within three days

ESD prevention

• The firewall and the rack are reliably grounded.

• The equipment room is dust-proof.

• The humidity and temperature are at an acceptable level.

• Always wear ESD clothing, ESD gloves, and an ESD wrist strap

and when you install and remove a transceiver module.

• Put the removed interface modules on an ESD workbench, with the

PCB upward, or put them in ESD bags for future use.

EMI prevention

• Take effective measures to protect the power system from the

power grid system.

• Separate the protection ground of the firewall from the grounding

device or lightning protection grounding device as far as possible.

• Keep the firewall far away from radio stations, radar and

high-frequency devices working in high current.

• Use electromagnetic shielding when necessary.

Lightning

protection

• The grounding cable of the chassis is reliably grounded.

• The grounding terminal of the AC power receptacle is reliably

grounded.

• (Optional) A power lightning arrester is installed.

Power supply

Verify that the power system at the installation site meets the

requirements of the power modules, including the input method and

rated input voltage.

8

Item Requirements

Tools and

accessories

• Installation accessories supplied with the firewall

• User supplied tools

Reference

• Documents shipped with the firewall

• Online documents

9

Installing the firewall

WARNING!

Keep the tamper-proof seal on a mounting screw on the chassis cover intact, and if you want to open

the chassis, contact the local agent of H3C for permission. Otherwise, H3C shall not be liable for any

consequence caused thereby.

The installation method is similar for the firewalls. This section uses the F5080 as an example.

Figure 4 Firewall installation flow

10

Installing the firewall in a standard 19-inch rack

WARNING!

To avoid bodily injury and device damage, at least two persons are required to install the firewall.

CAUTION:

• Ensure a clearance of 1 RU (44.45 mm, or 1.75 in) between the firewall and walls or other

devices for heat dissipation.

• The mounting brackets and chassis rails are required to support the weight of the chassis.

To mount the firewall in a rack, make sure the rack meets the requirements described in Table 8.

Table 8 Firewall dimensions and rack requirements

Firewall dimensions Rack requirements

• Height—88.1 mm (3.47 in)

• Width—440 mm (17.32 in)

• Total depth—775.5 mm (30.53 in)

{ 660 mm (25.98 in) for the chassis

{ 90 mm (3.54 in) for the cable

management bracket at the chassis front

{ 25.5 mm (1.00 in) for the power module

handle at the chassis rear

• A minimum of 1 m (3.28 ft) in depth

(recommended).

• A minimum of 100 mm (3.94 in) between the front

rack posts and the front door.

• A minimum of 760 mm (29.92 in) between the

front rack posts to the rear door.

• 518 mm (20.39 in) to 858 mm (33.78 in) from the

front rack posts to the rear rack posts.

To install the firewall in a 19-inch rack:

1. Make sure the rack is sturdy and reliably grounded.

2. Wear an ESD wrist strap and unpack the firewall and accessories.

3. Use a mounting bracket and a slide rail to mark the cage nut installation positions on the front

and rear rack posts, respectively. Four cage nuts are required on each front rack post and two

are required on each rear rack post.

4. Install cages nuts at the marked positions.

5. Use M6 screws to attach two slide rails to the rear rack posts.

11

Figure 5 Installing cage nuts and slide rails

6. Use the provided M4 screws to attach the mounting brackets and chassis rails to both sides of

the firewall.

The firewall provides multiple installation positions for chassis rails. Install chassis rails to the

appropriate positions and make sure the front ends of the slide rails can reach out of the chassis

rails after the firewall is installed in the rack.

Figure 6 Attaching the mounting brackets and chassis rails to the firewall

7. One person supports the bottom of the firewall, align the chassis rails with the slide rails, and

slide the slide rails into the chassis rails until the mounting brackets are flush with the front rack

posts.

8. Fasten the M6 rack screws with a Phillips screwdriver to secure the mounting brackets to the

front rack posts.

12

Figure 7 Mounting the firewall to the rack

Grounding the firewall

WARNING!

• Correctly connecting the firewall grounding cable is crucial to lightning protection and EMI

protection.

• Do not connect the firewall grounding cable to a fire main or lightning rod.

The firewall provides a primary grounding point at the rear panel and an auxiliary grounding point at

the left side. The primary grounding point has a grounding sign and a grounding screw. To use the

auxiliary grounding point, attach the grounding cable to the grounding point before you install the

device in a rack.

The procedure is the same for connecting a grounding cable to the primary grounding point and the

auxiliary grounding point. This section uses the primary grounding point as an example.

To connect the grounding cable:

1. Remove the grounding screw from the primary grounding point at the device rear.

2. Attach the grounding screw to the ring terminal of the grounding cable.

3. Use a screwdriver to fasten the grounding screw into the grounding hole.

4. Connect the other end of the grounding cable to the grounding strip on the rack.

13

Figure 8 Grounding the firewall at the primary grounding point

Installing a power module

CAUTION:

• Make sure the power module is powered off and the device is correctly grounded before

installation.

• Install a filler panel over an empty power module slot to prevent dust and ensure good ventilation

in the chassis.

• Do not install both AC and DC power modules on the same device.

To install a power module:

1. To install the power module to slot PWR1, remove the filler panel from the slot. To install the

power module to slot PWR2, skip this step.

Figure 9 Removing the filler panel

2. Install the power module in a correct direction (with the power receptacle at right):

a. Grasp the handle of the module with one hand and support the module bottom with the

other.

b. Push the power module along the guide rails into the slot until it has firm contact with the

slot.

Page is loading ...

H3C SecPath F5000-A, SecPath F5000-M, SecPath F5030, SecPath F5030-6GW, SecPath F5030-D, SecPath F5060, SecPath F5060-D, SecPath F5080, SecPath F5080-D Installation guide

Related papers

Other documents