H3C SecPath V1000-A Security Gateway
Installation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: T2-08044E-20070622-C-1.03
Copyright © 2006-2007, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H
3
Care,
, TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V
2
G, V
n
G, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
To obtain the latest information, please access:
http://www. h3c.com
Technical Support
customer_service@h3c.com
http://www. h3c.com
About This Manual
Related Documentation
In addition to this manual, each H3C SecPath Series Security Products documentation
set includes the following:
Manual Description
H3C SecPath Series Security Products
Operation Manual
It introduces the functional features,
principles and guide to configuration and
operation for H3C SecPath Series
Security Gateways/Firewalls.
H3C SecPath Series Security Products
Command Manual
It discusses all commands available in
the configuration and operation on H3C
SecPath Series Security
Gateways/Firewalls. The details include
command name, complete command
form, parameter, operation view, usage
description and configuration example.
H3C SecPath Series Security Products
Web-Based Configuration Manual
It directs users to configure the H3C
SecPath Series Firewalls in Web mode.
Organization
H3C SecPath V1000-A Security Gateway Installation Manual is organized as follows:
Chapter Contents
1 Product Overview
Profiles the system characteristics and applications.
Product appearance and system description are also
available in this chapter.
2 Preparation for Installation
System installation, precautions before and during
installation. Installation tools are also listed in this
chapter.
3 Hardware Installation
Elaborates on mechanical installation, physical
connection of power cords, console cables and
Ethernet cables.
4 Booting and Configuration
Presents fundamentals on system booting and
configuration.
Chapter Contents
5 Software Maintenance
Discusses system software maintenance, including
software upgrade and configuration file loading.
6 Hardware Maintenance
Introduces system hardware maintenance, including
replacing DDR SDRAM.
7 Troubleshooting
Lists common system failures and specific locating
methods.
8 Multifunctional Interface
Modules
Details appearance, panel and LEDs of the
functional modules available on the SecPath 1000,
as well as module installation and connection of
interface cables.
Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface
The keywords of a command line are in Boldface.
italic
Command arguments are in italic.
[ ]
Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n>
The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.
II. GUI conventions
Convention Description
< >
Button names are inside angle brackets. For example, click
<OK>.
[ ]
Window names, menu items, data table and field names
are inside square brackets. For example, pop up the [New
User] window.
/
Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].
III. Symbols
Convention Description
Warning
Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution
Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.
Environmental Protection
This product has been designed to comply with the requirements on environmental
protection. For the proper storage, use and disposal of this product, national laws and
regulations must be observed.
Installation Manual
H3C SecPath V1000-A Security Gateway Table of Contents
i
Table of Contents
Chapter 1 Product Overview........................................................................................................1-1
1.1 Brief Introduction................................................................................................................ 1-1
1.2 Hardware Features ............................................................................................................ 1-3
1.2.1 Appearance............................................................................................................. 1-3
1.2.2 System Description ................................................................................................. 1-3
1.2.3 LEDs........................................................................................................................ 1-4
1.2.4 Attributes of the Fixed Interfaces ............................................................................ 1-4
1.2.5 MIM ......................................................................................................................... 1-6
Chapter 2 Preparation for Installation.........................................................................................2-1
2.1 Site Requirements ............................................................................................................. 2-1
2.1.1 Temperature/Humidity............................................................................................. 2-1
2.1.2 Cleanness ............................................................................................................... 2-1
2.1.3 ESD Prevention....................................................................................................... 2-2
2.1.4 Electromagnetic Environment ................................................................................. 2-3
2.1.5 Lightning Protection ................................................................................................ 2-3
2.1.6 Mounting Rack ........................................................................................................ 2-3
2.2 Safety Precautions............................................................................................................. 2-3
2.3 Unpacking Check............................................................................................................... 2-4
2.4 Tools, Meters, and Devices ............................................................................................... 2-4
Chapter 3 Hardware Installation .................................................................................................. 3-1
3.1 Installation Procedures ...................................................................................................... 3-1
3.2 Mounting the Device .......................................................................................................... 3-2
3.2.1 Tabletop/Workbench-Mounting the Device............................................................. 3-2
3.2.2 Rack-Mounting the Device...................................................................................... 3-2
3.3 Installing an MIM................................................................................................................ 3-3
3.4 Connecting the Grounding Wire ........................................................................................ 3-3
3.5 Connecting to the Console Terminal ................................................................................. 3-4
3.6 Connecting an Ethernet Interface...................................................................................... 3-5
3.7 Connecting a PSU ............................................................................................................. 3-8
3.8 Verifying Installation........................................................................................................... 3-9
Chapter 4 Booting and Configuration......................................................................................... 4-1
4.1 Booting............................................................................................................................... 4-1
4.1.1 Setting up a Configuration Environment ................................................................. 4-1
4.1.2 Powering up the Security Gateway......................................................................... 4-4
4.1.3 Startup Process....................................................................................................... 4-4
4.2 Configuration Fundamentals.............................................................................................. 4-6
4.2.1 Basic Configuration Procedures.............................................................................. 4-6
Installation Manual
H3C SecPath V1000-A Security Gateway Table of Contents
ii
4.2.2 Command Line Interface......................................................................................... 4-6
Chapter 5 Software Maintenance................................................................................................. 5-1
5.1 Software Maintenance ....................................................................................................... 5-1
5.1.1 Boot Menu ............................................................................................................... 5-1
5.1.2 Upgrading the Application and Boot ROM Programs Using XModem.................... 5-3
5.1.3 Backing up and Restoring the Extended Segment of the Boot ROM ..................... 5-6
5.1.4 Upgrading an Application Program Using TFTP..................................................... 5-6
5.1.5 Uploading/Downloading a Program/File Using FTP ............................................... 5-8
5.1.6 Recovering/Replacing the Lost Password ............................................................ 5-12
Chapter 6 Hardware Maintenance................................................................................................ 6-1
6.1 Preparing Tools.................................................................................................................. 6-1
6.2 Opening the Chassis Cover............................................................................................... 6-1
6.3 Replacing a DDR SDRAM ................................................................................................. 6-2
6.3.1 Locating the DDR SDRAMs on the Mainboard....................................................... 6-4
6.3.2 Removing a DDR SDRAM ...................................................................................... 6-5
6.3.3 Installing a DDR SDRAM ........................................................................................ 6-6
6.4 Closing the Chassis Cover ................................................................................................ 6-6
6.5 Replacing an MIM.............................................................................................................. 6-7
Chapter 7 Troubleshooting ..........................................................................................................7-1
7.1 Troubleshooting the Power System................................................................................... 7-1
7.2 Troubleshooting the Configuration System ....................................................................... 7-1
7.3 Troubleshooting the Software Upgrade............................................................................. 7-2
Chapter 8 Multifunctional Interface Modules .............................................................................8-1
8.1 Multifunctional Interface Module Options .......................................................................... 8-1
8.2 Installing and Removing an MIM ....................................................................................... 8-1
8.3 Troubleshooting an MIM .................................................................................................... 8-3
8.4 1FE/2FE Module................................................................................................................ 8-3
8.4.1 Introduction.............................................................................................................. 8-3
8.4.2 Appearance............................................................................................................. 8-3
8.4.3 Interface Attributes .................................................................................................. 8-4
8.4.4 Panel and Interface LEDs ....................................................................................... 8-5
8.4.5 Interface Connection Cable..................................................................................... 8-5
8.4.6 Connecting the Interface Cable............................................................................... 8-8
8.5 1GBE/2GBE Module.......................................................................................................... 8-8
8.5.1 Introduction.............................................................................................................. 8-8
8.5.2 Appearance............................................................................................................. 8-8
8.5.3 Interface Attributes .................................................................................................. 8-9
8.5.4 Panel and Interface LEDs ....................................................................................... 8-9
8.5.5 Interface Connection Cable................................................................................... 8-10
8.5.6 Connecting the Interface Cable............................................................................. 8-11
Installation Manual
H3C SecPath V1000-A Security Gateway List of Figures
iii
List of Figures
Figure 1-1 Front panel of the SecPath V1000-A.................................................................... 1-3
Figure 3-1 Installation procedure ........................................................................................... 3-1
Figure 3-2 Installing the SecPath V1000-A in a rack ............................................................. 3-3
Figure 3-3 Grounding screw on the SecPath V1000-A.......................................................... 3-4
Figure 3-4 Console cable assembly....................................................................................... 3-5
Figure 3-5 Ethernet cable assembly ...................................................................................... 3-6
Figure 3-6 Power socket on the AC-powered security gateway ............................................ 3-8
Figure 4-1 Local configuration through the console port ....................................................... 4-1
Figure 4-2 Setting up a new connection ................................................................................ 4-2
Figure 4-3 Setting the connection port................................................................................... 4-2
Figure 4-4 Setting communications parameters .................................................................... 4-3
Figure 4-5 Settings tab........................................................................................................... 4-3
Figure 5-1 Send File dialog box ............................................................................................. 5-4
Figure 5-2 Sending File interface........................................................................................... 5-4
Figure 5-3 Setting up an environment for local uploading/downloading using FTP .............. 5-9
Figure 5-4 Setting up an environment for remote uploading/downloading using FTP ........ 5-10
Figure 6-1 Opening the chassis.............................................................................................6-2
Figure 6-2 DDR SDRAM maintenance flow........................................................................... 6-3
Figure 6-3 The position of the DDR SDRAMs, Flash, and Boot ROM on the mainboard ..... 6-5
Figure 6-4 Removing a DDR SDRAM.................................................................................... 6-5
Figure 6-5 Closing the chassis cover..................................................................................... 6-7
Figure 8-1 Installing the MIM – step 1.................................................................................... 8-2
Figure 8-2 Installing a MIM – step 2....................................................................................... 8-2
Figure 8-3 1FE module .......................................................................................................... 8-4
Figure 8-4 2FE module .......................................................................................................... 8-4
Figure 8-5 1FE module panel ................................................................................................ 8-5
Figure 8-6 2FE module panel ................................................................................................ 8-5
Figure 8-7 Ethernet cable ...................................................................................................... 8-6
Figure 8-8 Category-5 twisted-pair cable............................................................................... 8-6
Figure 8-9 1GBE module ....................................................................................................... 8-8
Installation Manual
H3C SecPath V1000-A Security Gateway List of Figures
iv
Figure 8-10 2GBE module ..................................................................................................... 8-9
Figure 8-11 1GBE module panel............................................................................................ 8-9
Figure 8-12 2GBE module panel ........................................................................................... 8-9
Figure 8-13 Ethernet cable .................................................................................................. 8-10
Figure 8-14 Category-5 twisted-pair cable........................................................................... 8-11
Installation Manual
H3C SecPath V1000-A Security Gateway List of Tables
v
List of Tables
Table 1-1 System description of the SecPath V1000-A ......................................................... 1-3
Table 1-2 LEDs on the front panel of the SecPath V1000-A.................................................. 1-4
Table 1-3 Attributes of the console port.................................................................................. 1-4
Table 1-4 Attributes of the AUX port ....................................................................................... 1-5
Table 1-5 Attributes of the GE electrical interfaces ................................................................ 1-5
Table 1-6 Attributes of the GE optical interfaces .................................................................... 1-6
Table 2-1 Temperature/Humidity requirements in the equipment room ................................. 2-1
Table 2-2 Limit to the content of dust in an equipment room ................................................. 2-2
Table 2-3 Limits on the contents of harmful gases in the equipment room............................ 2-2
Table 3-1 Dimensions of the SecPath V1000-A..................................................................... 3-2
Table 6-1 Memory specifications............................................................................................ 6-4
Table 8-1 Attributes of the 1FE and 2FE modules ................................................................. 8-4
Table 8-2 LED behavior.......................................................................................................... 8-5
Table 8-3 Straight-through cable pinout ................................................................................. 8-6
Table 8-4 Crossover cable pinout........................................................................................... 8-7
Table 8-5 Interface attributes of the 1GBE/2GBE module ..................................................... 8-9
Table 8-6 LEDs on the 1GBE/2GBE module........................................................................ 8-10
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 1 Product Overview
1-1
Chapter 1 Product Overview
1.1 Brief Introduction
H3C SecPath V1000-A Security Gateway (referred to as the security gateway
throughout the manual) is new-generation network security device intended for the use
on enterprise networks. It can act as the core security gateway for small-and
medium-sized enterprises or the convergence and network access gateway for large
enterprises.
H3C SecPath V1000-A Security Gateway (the SecPath V1000-A) provides:
z Two fixed 10/100/1000 Mbps auto-sensing Ethernet interfaces that can be optical
or electrical
z One multifunctional interface module (MIM) extended slot, which can hold
1FE/2FE/1GBE/2GBE
z Dual-power redundancy (AC+AC)
z Temperature sensing inside the chassis
z Network management
With the support to hot-swappable modules, power redundancy and temperature
monitor, the SecPath V1000-A can deliver carrier-level reliability.
The security gateway supports multiple Virtual Private Network (VPN) services, such
as Layer 2 Tunneling Protocol (L2TP) VPN, IP Security (IPsec) VPN, Generic Routing
Encapsulation (GRE) VPN, and Dynamic VPN. It can connect to remote users through
dial-up, leased line, VLAN or tunnel, thus building VPNs in the form of internet, intranet,
or access network. The security gateway brings together the technologies of firewall,
AAA, Network Address Translation (NAT), and Quality of Service (QoS) to provide a
safe and reliable private network over the insecure Internet.
The SecPath V1000-A has the following features:
I. IP VPN solution
Networks benefit enterprises in many ways; one of them is that a company
headquarters can release important information to its branch offices quickly and
conveniently. To interconnect the networks of a company over the Internet, however,
you need VPN technologies. The SecPath V1000-A provides abundant IP VPN
services; among them, L2TP and GRE provide layer 2 and layer 3 tunnels, and IPsec
provides tunnels encapsulated with a security protocol to have a securer network.
The SecPath V1000-A has powerful tunneling capabilities, supporting up to 10000
connections in parallel and with an encryption speed of 250 Mbps.
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 1 Product Overview
1-2
II. Data security and reliability
The security gateway supports:
z NAT. Besides the basic functions, the NAT of the SecPath V1000-A can limit the
number of concurrent connections to a single user. This eliminates the malicious
resource seizures while common network applications are being provided. In
addition, its enhanced NAT ALG function provides NAT traversal for H.323, FTP,
ICMP, and so on.
z AAA and RADIUS user authentication protocols.
z Packet filter and Application Specific Packet Filter (ASPF) to prevent the attacks
from external networks.
z VPN (including GRE and L2TP) with the IPsec and IKE technologies to guarantee
the security of private networks over the Internet.
z Virtual Router Redundancy Protocol (VRRP) to provide backup in case of
communication line or equipment failures. This effectively enhances network
robustness and reliability.
z Deeper application recognition (DAR) to recognize and classify packets more
deeply, thus enhancing the control over data flows.
z Object oriented management, simplifying configuration management and
improving the usability.
III. Online software upgrade
You can upgrade the application and Boot ROM programs on line to add features and
extend functions.
IV. Network management
The security gateway supports the SNMPV3 network management and provides
powerful device management.
V. Regulatory compliance
Designed taking into considerations the national and international standards dominant
in China, North America, Europe, Australia, and Japan, the security gateway complies
with the requirements of these countries and regions in EMC, safety, and network
access.
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 1 Product Overview
1-3
1.2 Hardware Features
1.2.1 Appearance
Figure 1-1 Front panel of the SecPath V1000-A
1.2.2 System Description
Table 1-1 System description of the SecPath V1000-A
Item Description
Slot 1 MIM slot
Fixed interface
2 x 10/100/1000 Mbps Ethernet interfaces (applicable to
both optical and electrical modes)
1 auxiliary port (AUX)
1 console port (CON)
Boot ROM 512 KB
DDR SDRAM
Default: 512 MB
Max: 1 GB
Flash
Default: 16 MB
Max: 32 MB
Dimensions (W X D X
H)
436 x 430 x 44 mm (17.2 x 16.9 x 1.7 in.), excluding the
rubber feet
Input
power
AC+AC
Rated voltage range: 100 VAC to 240 VAC, 50/60 Hz
Max voltage range: 90 VAC to 264 VAC, 50/60 Hz
Rated current: 1.0 A
Max power 57 W
Operating temperature
0 to 40°C (32°F to 104°F)
Operating humidity
(non-condensing)
10% to 90%
Note:
Double Data Rate Synchronous Dynamic Random Access Memory (DDR DSRAM)
stores the communication data of the running system with the CPU.
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 1 Product Overview
1-4
Flash is the major file storing medium where application files, traps, configuration files
are stored.
Boot Read Only Memory (Boot ROM) stores the bootstrap program files.
1.2.3 LEDs
The following table describes the LEDs on the front panel of the SecPath V1000-A and
describes how to read their status.
Table 1-2 LEDs on the front panel of the SecPath V1000-A
LED Description
PWR0
Power Supply Unit (PSU) LED:
OFF means the PWR0 is not supplying power to the device; ON
means the PWR0 is supplying power to the device.
PWR1
PSU LED:
OFF means the PWR1 is not supplying power to the device; ON
means the PWR1 is supplying power to the device.
SYS
System operating status LED:
On means the system is operating normally; OFF means the
system is operating abnormally.
ACT
MIM in-position status LED:
Blinking means the MIM is operating normally; OFF means the
MIM is operating abnormally.
LINK
GE interface LED:
ON means a link is present; OFF means no link is present.
ACTIVE
GE interface LED:
ON means data are being transmitted/received on the interface;
OFF means no packets are being transmitted/received on the
interface.
1.2.4 Attributes of the Fixed Interfaces
I. Console port (CON)
Table 1-3 Attributes of the console port
Attribute Description
Connector RJ45
Standard RS232
Baud rate 9600 (default) – 115200 bps
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 1 Product Overview
1-5
Attribute Description
Services
Connection to an ASCII terminal
Connection to a serial port on a local PC to run terminal emulation
program on the PC
Command Line Interface (CLI)
II. Auxiliary port (AUX)
Table 1-4 Attributes of the AUX port
Attribute Description
Connector RJ45
Standard RS232
Baud rate 1200 – 115200 bps
Services
Modem dial-up
Backup
III. Gigabit Ethernet (GE) Interface
On the main control board, the SecPath V1000-A provides two 10/100/1000 Mbps
Ethernet interfaces: Ethernet 0 (right) and Ethernet 1 (left), each providing an optical
interface and an electrical interface (one in use at a time). The electrical interface uses
the RJ45 connector and the optical interface uses the Small Form-Factor Pluggable
(SFP) module.
Five 1000Base-FX SFP optical transceiver options are available for the SecPath
V1000-A: multi-mode short-haul (850 nm), single mode medium-haul (1310 nm), single
mode long-haul (1310 nm), single mode long-haul (1550 nm), and single mode
ultra-long haul (1550 nm). They all provide LC interfaces and are hot swappable.
The following table shows the Ethernet interface attributes of the SecPath V1000-A:
Table 1-5 Attributes of the GE electrical interfaces
Attribute Description
Connector RJ45
Interface type MDI/MDIX auto-sensing
Frame format
Ethernet_II
Ethernet_SNAP
Operating mode
10/100/1000 Mbps auto-sensing
Full duplex/Half-duplex
(1000 Mbps and half-duplex cannot be used at the same time)
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 1 Product Overview
1-6
Table 1-6 Attributes of the GE optical interfaces
Description
Attribute
Multi-mo
de
short-ha
ul (850
nm)
Single
mode
medium-ha
ul (1310
nm)
Single
mode
short-haul
(1310 nm)
Single
mode
long-haul
(1550 nm)
Single
mode
ultra-long
haul (1550
nm)
Connector SFP/LC
Optical fiber
62.5/125
μm
multi-mod
e fiber
9/125μm
single-mod
e fiber
9/125μm
single-mod
e fiber
9/125μm
single-mod
e fiber
9/125μm
single-mod
e fiber
Max
transmission
segment
0.55 km
(0.34 mi)
10 km (6.21
mi)
40 km
(24.86 mi)
40 km
(24.86 mi)
70 km
(43.5 mi)
Central
wavelength
850 nm 1310 nm 1310 nm 1550 nm 1550 nm
Min. -9.5 dBm -9 dBm -2 dBm -4 dBm -4 dBm Transmi
tter
optical
power
Max 0 dBm -3 dBm 5 dBm 1 dBm 2 dBm
Receiver
sensitivity
-17 dBm -20 dBm -23 dBm -21 dBm -22 dBm
Operating
mode
1000 Mbps
Full duplex
Frame format
Ethernet_II
Ethernet_SNAP
Note:
z When using optical transceivers, select those that have been approved by our
company.
z Before performing switchover between electrical/optical interfaces, you need to first
disable the rate and duplex mode configuration in the current mode (electrical or
optical), and then configure the interface after the switchover.
1.2.5 MIM
The SecPath V1000-A provides one extended MIM slot where one of the following
MIMs can be installed:
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 1 Product Overview
1-7
z 1-port 10Base-T/100Base-TX Fast Ethernet interface module (1FE)
z 2-port 10Base-T/100Base-TX Fast Ethernet interface module (2FE)
z 1-port 10Base-T/100Base-T/1000Base-TX Ethernet interface module (1GBE)
z 2-port 10Base-T/100Base-T/1000Base-TX Ethernet interface module (2GBE)
For more information on the MIMs, see “
Chapter 8 Multifunctional Interface Module”.
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 2 Preparation for Installation
2-1
Chapter 2 Preparation for Installation
2.1 Site Requirements
The security gateway must be used indoors. To guarantee the normal operation and
long service life of your security gateway, install it in an environment that can meet the
requirements in the following subsections.
2.1.1 Temperature/Humidity
The equipment room must maintain adequate temperature and humidity. Long-lasting
high humidity is prone to cause bad insulation and even electricity creepage.
Sometimes the mechanical performance changes of materials, the rustiness and
corrosion of some metal parts are also likely to occur. If the relative humidity is too low,
the captive screws can become loose due to insulation washer contraction. Meanwhile,
the static is likely produced in the dry environments, jeopardizing the CMOS circuit of
the product. The higher the temperature is, the greater the damage to your device.
Long-lasting high temperature can speed up the aging of the insulation materials,
greatly lower the device reliability, and hence significantly shorten its service life.
The following table lists the temperature and humidity requirements.
Table 2-1 Temperature/Humidity requirements in the equipment room
Temperature Relative humidity
0 – 40
o
C (32 – 104
o
F) 10 – 90% (non-condensing)
2.1.2 Cleanness
Dust is a hazard to the operating safety of your device. The dust accumulated on the
chassis can cause electrostatic adsorption, one of the sources that cause the poor
contact of connectors or metal contact points. This not only shortens the service life of
your device but also causes communications failures. When the indoor relative
humidity is low, electrostatic adsorption is more likely to happen.
The equipment room must be free of explosion hazards and the electrical and magnetic
conductible dust as well. The contents of the dust must be limited as shown in the
following table:
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 2 Preparation for Installation
2-2
Table 2-2 Limit to the content of dust in an equipment room
Substance Unit Content
Dust Particles/m³
≤ 3 X 104
(No visible dust on the
table top for three days)
Note: diameter of a dust particle ≥ 5μm
Besides the dust, there are rigorous limits on the harmful gases that can accelerate the
erosion and aging of metals, such as salts, acids, and sulfides, as shown in the
following table.
Table 2-3 Limits on the contents of harmful gases in the equipment room
Gas Maximum (mg/m
3
)
SO2 0.2
H2S 0.006
NH3 0.05
Cl2 0.01
2.1.3 ESD Prevention
Although the security gateway is designed to be electrostatic discharge (ESD)
preventive, the card circuits and even the device can be badly damaged when
excessive static electricity is present.
On the communication network connected to your device, the static electricity mainly
comes from the outside electrical fields, such as outdoor high-voltage power cables
and lightning, and from the indoor environments, floor materials and the internal system
such as the equipment frame. To prevent damage, observe the following:
z Connect your device and the floor to the earth ground properly.
z Keep the equipment room as clean as possible.
z Maintain adequate temperature and humidity.
z Wear an ESD-preventive wrist strap and clothes when handling the circuit board.
z Place the removed circuit board upward on the ESD-preventive workbench, or into
a static shielding bag.
z Hold the circuit board by its edge when observing or moving it, avoiding direct
contact with the elements on it.
Installation Manual
H3C SecPath V1000-A Security Gateway Chapter 2 Preparation for Installation
2-3
2.1.4 Electromagnetic Environment
All interference sources, wherever they are from, impact the security gateway
negatively in the conducted emission patterns of capacitance coupling, inductance
coupling, electromagnetic wave radiation, and common impedance (including the
grounding system) coupling. To resist the interference, make sure to:
z Take effective measures against the interference caused by the power supply
grid.
z Use an earthing system or lightning protection grounding different from that for the
power supply equipment and keep them as far as possible.
z Keep the device far from strong the power radio launchers, radar launchers, and
high frequency and high-current equipment.
z Use electromagnetic shielding when necessary.
2.1.5 Lightning Protection
Although the security gateway is designed to be lightning resistant, your device can get
damaged when excessive lightning is present. To protect your device against lightning,
z Ensure the chassis is connected to the earth ground.
z Ensure the earth point of the power socket is well connected to the earth ground.
z Add a lightning arrester onto the front end of the power input to better protect the
power supply from lightning strikes.
2.1.6 Mounting Rack
When installing the device in a rack, make sure that:
z There is adequate clearance between the air inlet/exhaust vents and the rack for
ventilation.
z The rack has a good ventilation system.
z The rack is firm enough to support the device and its accessories.
z The rack is well earthed.
2.2 Safety Precautions
Be sure that you observe all safety precautions when you install your security gateway
and pay adequate attention to the following icons:
Warning appears in operation procedures that, if performed incorrectly, might
cause bodily injury to the operators or damage the device.
Caution means care should be taken in these operations during installation and
use. Improper operations may result in abnormal running of the device.
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
/
