3Com H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET... User Manual Download

Page: 1 / 158

H3C SecPath F5000-A5 Firewall

Installation Manual

Hangzhou H3C Technologies Co., Ltd.

http://www.h3c.com

Manual Version:

5PW101-20090424

Summary of Contents for H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET...

Page 1: ...H3C SecPath F5000 A5 Firewall Installation Manual Hangzhou H3C Technologies Co Ltd http www h3c com Manual Version 5PW101 20090424...

Page 2: ...V2 G Vn G PSPT XGbus N Bus TiGem InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co Ltd All other trademarks that may be mentioned in this manual are the property of their respective...

Page 3: ...nd initialization of system files and so on 6 Maintaining Software Introduces how to maintain the software of the F5000 A5 including upgrading the software and configuration files 7 Maintaining Hardwa...

Page 4: ...lder Symbols Convention Description Means reader be extremely careful Improper operation may cause bodily injury Means reader be careful Improper operation may cause data loss or damage to equipment M...

Page 5: ...l Documents Provides several categories of product documentation such as installation configuration and maintenance Technical Support Document Software Download Provides the documentation released wit...

Page 6: ...NSQ1GT8C40 1 7 LPU NSQ1XP20 1 9 Dimensions and Weight 1 10 Voltage and Current 1 10 Fan Tray 1 11 Operating Environment 1 11 Components 1 11 MPU NSQ1MPUA0 1 11 LPU NSQ1GT8C40 1 17 LPU NSQ1XP20 1 22 P...

Page 7: ...ed to expand the process capability at the data plane z In addition to traditional firewall functions the F5000 A5 supports virtual firewall attack defense and content filtering thus delivering more e...

Page 8: ...5 Weight bearing warning label 50 kg 110 2 lb 6 Fan tray 7 AC power module PWR1 8 Blank panel for PoE PSU reserved PoE slot 9 Blank panel for DC power module PWR2 10 ESD socket and silkscreen 11 Blan...

Page 9: ...ilter optional 5 Lower slide rail for the air filter optional 6 Chassis handle 7 Weight bearing warning label 50 kg 110 2 lb 8 Grounding screw and sign 9 Vents Do not hold the handle indicated by 2 in...

Page 10: ...ESET 12 USB interface 1 LED USB1 13 USB interface 1 1 14 USB interface 0 0 15 AUX port AUX 16 Console port CONSOLE 17 HA port 10 100 1000BASE T HA 18 Management Ethernet port 10 100 1000BASE T MANAGEM...

Page 11: ...t file the BootWare program z The memory is used for storing system data during operation and caching data in data forwarding z A CF card is used for storing the software system and configuration file...

Page 12: ...ely ALM red Fast blinking 8 Hz A critical fault has occurred to the system In this state handle the fault immediately 2 Management Ethernet port HA port LEDs Table 1 3 Description of the management Et...

Page 13: ...o interfaces delivering high speed service process capabilities Note that z An NSQ1GT8C40 LPU can be inserted in slot 1 2 3 or 4 of the F5000 A5 z An F5000 A5 needs to be equipped with an MPU and at l...

Page 14: ...ault operating interface is the electrical interface z For a Combo interface either the electrical interface or the optical interface can operate at one time You can use the combo enable copper fiber...

Page 15: ...duction An NSQ1XP20 provides two Ten gigabit small form factor pluggable XFP interfaces delivering high speed service process capabilities The front panel of the LPU provides one LED for each interfac...

Page 16: ...interface XFP0 green Blinking Data is being transmitted or received on the interface OFF No link is present on the interface ON A link is present on the interface XFP1 green Blinking Data is being tra...

Page 17: ...peed adjustment but not hot swapping of the fan tray Operating Environment Table 1 14 Operating environment specifications Item Description Operating temperature 0 C to 45 C 32 F to 113 F Operating hu...

Page 18: ...figuration files The F5000 A5 is equipped with a 256 MB built in CF card which is identified with cfa0 In addition the device provides an external CF card slot to extend the local storage space A CF c...

Page 19: ...RS232 Baud rate 9600 bps to 115200 bps 9600 bps by default Maximum transmission distance 15 m 49 21 ft Services z Connection to an ASCII terminal z Connection to the serial interface of a local PC to...

Page 20: ...port is faulty the AUX port can be connected to a terminal as a backup port of the console port For details refer to Chapter 8 Troubleshooting 2 Technical specifications Table 1 17 Technical specifica...

Page 21: ...t port is a 10Base T 100Base TX 1000Base T RJ 45 auto sensing interface It allows you to upgrade software and manage the device through a network management server without using any service interface...

Page 22: ...is used to reset the current MPU The RUN LED goes off when the MPU is reset flashes fast at 8 Hz when BootWare is running and flashes slowly at 1 Hz after the system is booted and operates normally z...

Page 23: ...nterface speed and duplex mode of electrical interfaces Interface speed Duplex mode 10 Mbps auto sensing Half full duplex 100 Mbps auto sensing Half full duplex 1000 Mbps auto sensing Full duplex The...

Page 24: ...erface the electrical Ethernet interface operates in the auto negotiation mode z No matter whether an electrical Ethernet interface operates in the forced or auto negotiation mode it supports automati...

Page 25: ...J 45 connector Figure 1 10 RJ 45 connector LC connector Optical fiber connectors are indispensable passive components in optical fiber communication system Their application enables the removable conn...

Page 26: ...Standard cable Also known as straight through cable At both ends of a standard cable wires are crimped in the RJ 45 connectors in the same sequence A straight through cable is used for connecting a t...

Page 27: ...ed cables preferentially for electromagnetic compatibility Fiber connecting optical Ethernet interfaces You can use a single mode or multimode fiber to connect a 1000 Mbps optical Ethernet interface a...

Page 28: ...aul multimode Medium haul single mode Long haul single mode Min 7 3 dBm 8 2 dBm 1 dBm Optical transmit power Max 1 08 dBm 0 5 dBm 2 dBm Receiving sensitivity 7 5 dBm 10 3 dBm 11 3 dBm Central waveleng...

Page 29: ...A5 supports both AC and DC power input You can select an AC power module or a DC power module However never install the two types of power PSUs in the same device The F5000 A5 needs only one PSU for n...

Page 30: ...ent Solid green The power module is working normally Solid red The power module is faulty Figure 1 14 AC power module 1 2 3 4 5 6 1 Captive screw 2 Bail latch 3 Power socket 4 Power switch 5 Power LED...

Page 31: ...kes The following port lightning arrester can be installed on the F5000 A5 The specifications for the port lightning arrester are as follows Port protective unit single port maximum discharge current...

Page 32: ...m discharge current 2 5KA protection voltage 25V SMB 75J SMB 75J 1W 10Mbps z Voltage limiting protection parts signal lightning arrester maximum discharge current 2 5KA protection voltage 25V BNC 75K...

Page 33: ...Table of Contents 2 Arranging Slots ands Numbering Interfaces 2 1 Slot Arrangement 2 1 Numbering Interfaces 2 1 Examples 2 2 Numbers of interfaces on NSQ1GT8C40 2 2 Numbers of interfaces on NSQ1XP20 2...

Page 34: ...Except for user interfaces such as the Console port and AUX port interfaces on the F5000 A5 are numbered in the form of interface type X Y where z interface type Type of the interface such as Gigabit...

Page 35: ...ed in Slot 3 GigabitEthernet interfaces on the LPU are numbered as follows z GigabitEthernet 3 0 z GigabitEthernet 3 1 z GigabitEthernet 3 2 z GigabitEthernet 3 3 z GigabitEthernet 3 4 z GigabitEthern...

Page 36: ...1 Ventilation Requirements 3 2 Electrostatic Discharge Prevention 3 2 Electromagnetic Interference Prevention 3 4 Lightning Protection 3 4 Cabinet Mounting Requirements 3 5 Safety Precautions 3 5 Saf...

Page 37: ...3 1 Temperature and humidity requirements in the equipment room Temperature Relative humidity 0 C to 45 C 32 F to 113 F 10 to 95 noncondensing Cleanness Requirements Concentration limit of dust Dust i...

Page 38: ...pation of the device chassis A ventilation system is available at the installation site Electrostatic Discharge Prevention Generation and damage of static electricity In the communication network to w...

Page 39: ...c bag Touch only the edges instead of electronic components when observing or moving a removed MPU LPU memory module or CF card Wearing an ESD preventive wrist strap Follow these steps to wear an ESD...

Page 40: ...ate the protection ground of the device from the grounding device or lightning protection grounding device of the common power supply equipments as far as possible Keep the device far from heavy duty...

Page 41: ...urdy enough to support the weight of the firewall and installation accessories Make sure that the size of the cabinet is appropriate for the firewall and that there is enough clearance around the left...

Page 42: ...accessories supplied with the firewall Power cable Console cable PGND cable Mounting brackets Cable management brackets Blank panels ESD preventive wrist strap User supplied tools Philips screwdriver...

Page 43: ...protection grounding device as far as possible Keep the router far away from heavy duty radio transmitters radar transmitters and high frequency devices Adopt electromagnetic shielding measures when n...

Page 44: ...3 8 Item Requirements Installation tools Installation accessories supplied with the firewall User supplied tools Reference Documents shipped with the firewall Electronic documents...

Page 45: ...rt Lightning Arrester Optional 4 6 Tools 4 7 Installation Procedures 4 7 Precautions 4 8 Installing an AC Power Lightning Arrester Lightning Protection Busbar Optional 4 8 Selecting and Installing a S...

Page 46: ...000 A5 Start Install the firewall to the specified position Connect the PGND cable Connect the power cables Connect the firewall to a configuration terminal Verify the installation Turn on the power s...

Page 47: ...rewall is to be installed in a rack other than N68 rack Installing Mounting Brackets onto the Firewall Before installing the firewall in a rack you need to install the cable management bracket to the...

Page 48: ...tall the mounting brackets Figure 4 4 Install mounting brackets to the firewall Install the Firewall in a Rack Follow these steps to install the firewall in a rack Step1 Check the grounding and stabil...

Page 49: ...onto the rack posts with pan head screws The size of pan head screws should satisfy the installation requirements maximally M6 and the surface of the screws should be anti rust treated Figure 4 5 Ins...

Page 50: ...nduced current and leakage current to the ground and reduce the electromagnetic susceptibility EMS of the firewall The PGND cable can also protect the firewall against high lightning voltage resulting...

Page 51: ...Connect the PGND cable to the grounding bar 1 A hex nut 2 PGND cable 3 Naked part of the PGND cable 4 Grounding post 5 Grounding bar z The resistance between the firewall chassis and the ground must...

Page 52: ...e of the port lightning arrester according to its distance to the grounding screw Fix the grounding cable to the grounding screw of the firewall Step3 Use a multimeter to check the connection between...

Page 53: ...htning protection busbar at the AC power input end to protect the device against lightning strokes You can use cable ties and screws to fasten the lightning protection busbar on the cabinet the workbe...

Page 54: ...ting from lightning strokes and other interferences Because the signal lightning arrester is serially connected to a signal cable the signal lightning arrester must satisfy the requirements of network...

Page 55: ...the grounding terminal refer to PGND Cable Connection on page 4 5 Connecting the AC Power Cord AC power supply Rated voltage range 100 VAC to 240 VAC 50 Hz 60 Hz AC power socket Figure 4 10 illustrate...

Page 56: ...rd in position Step6 Move the power switch to the ON position Step7 Check the status of the power LED PWR on the front panel of the firewall For the status of the power LED see Table 4 3 Table 4 3 Des...

Page 57: ...label 6 Heat shrink tube 7 Power cable 600 V UL10455 5 3 mm 2 10AWG blue 45 A 8 Label 2 9 Common terminal conductor cross section 6mm 2 20mm 30 A insertion depth 12 mm black Formula for calculating th...

Page 58: ...onnecting DC power cables pay attention to the labels on the power cable to avoid incorrect connection Connecting Interface Cables Connecting Console Cable Follow these steps to connect the Console ca...

Page 59: ...AUX port is usually used for remote configuration or dial backup You need to connect the local modem to the remote modem through PSTN and then to the remote device Follow these steps to connect the AU...

Page 60: ...ies such as data forwarding With support for automatic MDI MDIX the management Ethernet port and HA port use either a straight through cable or a crossover cable for connection to a configuration term...

Page 61: ...e on NSQ1GT8C40 and the other end to the Ethernet interface on the peer device Because a 10Base T 100Base TX 1000Base T electrical Ethernet interface supports automatic MDI MDIX it can use either a st...

Page 62: ...rt an optical transceiver Step3 Identify the Rx and Tx ports on the SFP transceiver module Plug the two LC connectors at one end of the fiber cable into the Rx and Tx ports of the local SFP transceive...

Page 63: ...9 in z Ensure that the Tx and Rx of the SFP XFP transceiver module are connected correctly z Keep the end faces of optical fiber cables clean z Do not look directly into an open optical Ethernet inter...

Page 64: ...nnected to other devices such as the configuration terminal It is very important to verify the installation because instability and poor grounding of the firewall and an unmatched power supply will af...

Page 65: ...n Terminal 5 1 Setting the Parameters for the Configuration Terminal 5 1 Firewall Power on 5 4 Checklist for Firewall Power on 5 4 Powering on the Firewall 5 5 Checklist Operations after Power on 5 5...

Page 66: ...er 4 Installing the Firewall Setting the Parameters for the Configuration Terminal Step1 Create a HyperTerminal connection Select Start Programs Accessories Communications HyperTerminal and enter a co...

Page 67: ...Select a port for local configuration connection Step3 Set serial port parameters Figure 5 3 Set serial port parameters Set the properties of the serial port in the COM1 Properties dialog box as show...

Page 68: ...ng or only illegible characters To use the default settings click Restore Defaults Step4 Click OK after setting the serial port parameters to enter the HyperTerminal window as shown in Figure 5 4 Figu...

Page 69: ...r source conforms to voltage requirements of the firewall z The console cable is correctly connected The configuration terminal or PC is powered on and the emulation program is properly configured z I...

Page 70: ...rocess on page 5 5 4 After completing the power on self test POST the system prompts you to press Enter When the command line prompt appears you can proceed to configure the firewall Startup Process A...

Page 71: ...Enter and the system displays H3C This prompt indicates that the firewall has entered user view and is ready for configuration Configuration Fundamentals In general the configuration steps are as fol...

Page 72: ...ic tools such as Tracert and Ping for quick diagnosis of network connectivity z Provides all kinds of detailed debugging information to help diagnose network faults z Supports the auto complete functi...

Page 73: ...ootWare and Applications Using TFTP 6 16 Upgrading an Application Using TFTP on the BootWare Menu 6 17 Upgrading and Backing Up an Application Using TFTP at the CLI 6 20 Upgrading BootWare and Applica...

Page 74: ...n file with the attribute of M z Backup application file with the attribute of B z Secure application file with the attribute of S These three types of application files are stored in a CF card By def...

Page 75: ...les are mainly used as follows z When the main configuration file is damaged or lost the backup configuration file is used to load the configuration information This double protection mechanism enhanc...

Page 76: ...ers z At BootWare boot the names of the configuration files will be displayed but the types will still be displayed as N A z For details about the startup saved configuration cfgfile command refer to...

Page 77: ...ogram z When a service card is started up it automatically checks the current BootWare version If the BootWare version bound to the Comware application program is different from the current BootWare v...

Page 78: ...ologies Co Ltd Compiled Date May 06 2008 CPU Type XLR732 CPU L1 Cache 32KB CPU Clock Speed 1000MHz Memory Type DDR2 SDRAM Memory Size 2048MB Memory Speed 533MHz BootWare Size 1536KB Flash Size 4MB cfa...

Page 79: ...of the operating device z A Storage Device Operation option for you to select the storage device from which you are going to loading the application file Note that z The initial BootWare password is n...

Page 80: ...description of this submenu refer to BootWare Operation Submenu on page 6 9 8 Clear Super Password Clear the super password The super password is used in user level switching No super password is set...

Page 81: ...ion file 5 Modify Serial Interface Parameter Modify serial port parameters 0 Exit To Main Menu Return to the main menu Ethernet Submenu Select 3 on the main menu to enter the Ethernet submenu where yo...

Page 82: ...et Application File type 3 Delete File 0 Exit To Main Menu Enter your choice 0 3 Items on this submenu are described in Table 6 4 Table 6 4 File control submenu Menu item Description 1 Display All Fil...

Page 83: ...fault Boot Device Configure the default boot device 0 Exit To Main Menu Return to the main menu Upgrading BootWare and Applications Through a Serial Port Introduction to Xmodem Xmodem is used for upgr...

Page 84: ...Accordingly Baudrate Available 1 9600 Default 2 19200 3 38400 4 57600 5 115200 0 Exit Enter your Choice 0 5 Step2 Select a proper baud rate For example select 5 for a baud rate of 115200 bps and the s...

Page 85: ...Enter on the console terminal The system displays the current baud rate and returns to the previous menu The system displays The current baudrate is 115200 bps After downloading files with a changed b...

Page 86: ...tails refer to Modifying Serial Port Parameters on page 6 11 Step2 Select 2 on the serial submenu The system displays Please Start To Transfer File Press Ctrl C To Exit Waiting CCCCCCCCCCCCCCCCCCCC St...

Page 87: ...tion The system uses the new application file at next system reboot z Enter N and the system displays Cancel to overwrite the file Failed As a result the existing application file is not overwritten a...

Page 88: ...rial port For the modification of the terminal baud rate refer to Modifying Serial Port Parameters on page 6 11 Step5 After setting the baud rate return to the BootWare operation submenu and select 1...

Page 89: ...upgraded z The BootWare program is upgraded together with the Comware application You do not need to upgrade the BootWare separately After the Comware is upgraded to the latest version the system aut...

Page 90: ...BootWare Menu 1 Set up a TFTP upgrading environment Figure 6 9 Set up a TFTP upgrading environment z The firewall serves as the TFTP client and the PC serves as the TFTP server z Connect the manageme...

Page 91: ...s FTP User Name FTP User Password Table 6 7 Command output description for setting Ethernet port parameters Item Description Clear field Shortcut key is to clear the current input Go to previous field...

Page 92: ...after the colon press Enter directly z If the Ethernet port parameter CRC appears faulty the system modifies the parameters to the default settings and displays Check net params crc error use the defa...

Page 93: ...pace To prepare for upgrading application files use the dir command on the terminal to view the files stored in the current file system and the available space of the storage device H3C dir Directory...

Page 94: ...You can modify a configuration file and then download the modified configuration file to the firewall to finish upgrading the configuration file The modification takes effect after the firewall reboot...

Page 95: ...of the file is successfully completed Upgrading BootWare and Applications Using FTP If the application file is large you can use FTP to download it for upgrade to reduce maintenance time As an applic...

Page 96: ...f the management Ethernet port as 192 168 80 10 while that of the PC as 192 168 80 200 z Enable FTP server on the PC and set the path where the application file is stored Set the FTP username and pass...

Page 97: ...ord 230 User logged in ftp After you log into the server you can update and backup an application file using the CLI Table 6 10 Command output description for logging into the FTP server Field Descrip...

Page 98: ...ing existing data connection 226 Closing data connection File transfer successful FTP 14092032 byte s sent in 14 400 second s 1722 00Kbyte s sec ftp quit 221 Service closing control connection z When...

Page 99: ...FTP Client z Connect the management Ethernet interface on the firewall to the PC using a crossover Ethernet cable z Configure the IP addresses of the server and the PC to be on the same network segme...

Page 100: ...rver are configured The FTP server supports multi client access A remote FTP client sends a request to the FTP server The FTP server executes an action accordingly and returns the execution result to...

Page 101: ...put main bin main bin 200 Port command okay 150 Opening BINARY mode data connection for main bin 226 Transfer complete z When you upgrade an application file if the file name already exists on the ser...

Page 102: ...om the firewall to the PC Maintaining Application and Configuration Files You can modify the file type and display files on the file control submenu Select 4 on the main menu to enter the file control...

Page 103: ...ies Security Products User Manual Setting Application Files Attributes Setting application file attributes on the BootWare menu You can modify the attributes of the application files on the BootWare m...

Page 104: ...This command will set the boot file of the specified board Continue Y N The specified file will be used as the main boot file at the next reboot Now the attribute of the file main bin has changed from...

Page 105: ...in this example The following information appears The file you selected is cfa0 startup cfg Delete it Y N Step3 Enter Y If the file is deleted successfully the system displays Deleting Done Deleting...

Page 106: ...system displays please input old password Step2 Enter the old password please input old password z If the old password is incorrect the system will display Wrong password Please input password again z...

Page 107: ...t a new password in system view after system reboot H3C system view H3C user interface console 0 H3C ui console0 authentication mode password H3C ui console0 set authentication password simple 123456...

Page 108: ...System Configuration 7 BootWare Operation Menu 8 Clear Super Password 9 Storage Device Operation 0 Reboot Enter your choice 0 9 8 The system displays the following information indicating that you have...

Page 109: ...extended segment is finished Both the basic and extended segments of the BootWare are backed up to the Flash Restoring the Entire BootWare Step1 Select 2 on the BootWare operation submenu to overwrit...

Page 110: ...a Power Module 7 12 Power Module Structure 7 12 Installing a Power Module 7 13 Removing a Power Module 7 13 Installing and Removing a Fan Tray 7 15 Fan Tray Structure 7 15 Installing a Fan Tray 7 15 R...

Page 111: ...firewall z Always wear an ESD preventive wrist strap or ESD preventive gloves when maintaining the firewall hardware For more information refer to the section talking about electrostatic discharge pre...

Page 112: ...eight bearing warning label 50 kg 110 2 lb 6 Fan tray 7 AC power module PWR1 8 Blank panel for PoE power module reserved PoE slot 9 Blank panel for DC power module PWR2 10 ESD socket and silkscreen 11...

Page 113: ...CONSOLE 21 HA port link state LED LINK 22 Data reception transmission LED of the HA port ACT 23 HA port HA 10 100 1000BASE T 24 Ethernet link state of the management Ethernet port LINK 25 Data recepti...

Page 114: ...wered on the RUN LED green flashes fast 8 Hz It flashes slowly 1 Hz after the MPU application is loaded This means that the MPU runs normally z The MPU of the firewall is not hot swappable z For more...

Page 115: ...PU z To protect the removed MPU place it in an antistatic bag z If you do not install a new MPU in the slot install the blank panel to prevent dust from entering the chassis For how to install a blank...

Page 116: ...terface 8 SFP8 18 SFP interface 9 19 SFP interface 8 20 GE interface 9 21 GE interface 8 22 GE interface 7 23 GE interface 6 24 GE interface 5 25 GE interface 4 26 GE interface 3 27 GE interface 2 28...

Page 117: ...push the LPU into the slot along the slide rails until the positioning pin is seated in the positioning hole on the backplane and then push the ejector levers inward to lock the board in position Fig...

Page 118: ...the sequence of slot 1 slot 2 slot 3 and slot 4 with RUN LEDs lighting up in turn z For more information of the LPU LEDs refer to Chapter 1 Firewall Overview Removing an LPU Follow these steps to rem...

Page 119: ...e chassis For how to install a blank panel refer to Installing and Removing a Blank Panel on page 7 9 Installing and Removing a Blank Panel Blank Panel Structure Installed in empty slots on the device...

Page 120: ...MI gasket The MPU and LPU slots use the same type of blank panels Figure 7 14 Blank panel for a power module slot 1 Front view 2 Side view 3 Oblique rear view 4 EMI gasket Removing a Blank Panel The b...

Page 121: ...lank panels in all the empty slots to ensure the normal ventilation in the firewall Installing a Blank Panel After an LPU is removed from the firewall it is recommended to install a blank panel if you...

Page 122: ...odule The device supports both AC and DC power modules This section describes how to install and remove an AC power module Power Module Structure Figure 7 17 AC power module 1 Captive screw 2 Bail lat...

Page 123: ...clockwise with a Philips screwdriver Figure 7 20 Fasten the captive screws Step4 Turn on the power switch of the firewall if the firewall is powered off The power LED green lights up indicating the p...

Page 124: ...7 21 Loosen the captive screws Step3 Gently pull the power module out along the slide rails Figure 7 22 Pull out the power module z To protect the removed power module place it in an antistatic bag z...

Page 125: ...screw Installing a Fan Tray Follow these steps to install a fan tray Step1 Face the front panel of the firewall Step2 Make sure that the texts on the fan tray panel are not upside down otherwise the f...

Page 126: ...ans run normally z The device supports automatic fan speed adjustment z For the description of the fan tray LEDs refer to Chapter 1 Firewall Overview Removing a Fan Tray Keep your hands away from the...

Page 127: ...fan tray out along the slide rails Figure 7 27 Take out the fan tray z Do not keep the firewall working without a fan tray for a long time because poor ventilation may result in damage to the firewall...

Page 128: ...ep3 Insert the CF card into the slot and push it all the way in until it is firmly seated Figure 7 29 Insert a CF card into the slot If the application program for booting the firewall is stored in an...

Page 129: ...to avoid hardware damage z To protect the removed CF card place it in an antistatic bag Installing and Removing a Memory Module z The MPU and LPUs of the firewall are equipped with memory modules z B...

Page 130: ...ngzhou H3C Technologies Co Ltd only Otherwise anomalies might occur to the device z For specific specifications of memory modules supported by the device refer to the section talking about memory modu...

Page 131: ...t 3 Right release latch Removing a Memory Module Follow these steps to remove a memory module Step1 Locate the card MPU or LPU to which you will install a memory module and put the card on a flat work...

Page 132: ...Installing a Memory Module Follow these steps to install a memory module Step1 Locate the card MPU or LPU to which you will install a memory module and put the card on a flat worktable Step2 Align th...

Page 133: ...s to install an air filter Step1 Face the left side of the chassis where the air filter is to be installed Step2 Position the upper slide rail horizontally near the top of the left side of the chassis...

Page 134: ...air filter slide rails Step6 Gently push the air filter along the slide rails until it is seated in position Figure 7 38 Insert the air filter Step7 Fasten the captive screws by turning them clockwis...

Page 135: ...installation procedure Step1 Face the left side of the chassis where the air filter is to be removed Step2 Loosen the captive screws one by one by turning them counterclockwise with a Philips screwdr...

Page 136: ...41 Pull out the air filter z Keep the removed air filter and fastening screws in a safe place for future use z You can clean the air filter with water but wait until it is completely dry before instal...

Page 137: ...8 4 Troubleshooting the Configuration System 8 4 No Display on the Terminal Screen 8 4 Illegible Characters on the Terminal Screen 8 4 Serial Port Response Failure 8 5 Using the AUX Port as Backup Con...

Page 138: ...0 z The power supply of the firewall is operating properly The power LED is green when the power supply works normally If the cause cannot be located in the steps above and the problem persists contac...

Page 139: ...rewall is powered off or the LPU is faulty Solution Check that z The firewall is powered on z The LPU is properly inserted into an LPU slot slot 1 through slot 4 If the LPU is faulty the following pro...

Page 140: ...he power LED on the front panel is red Solution Check that z The power module is firmly in place z The power source meets the requirement of the firewall If the cause cannot be located in the steps ab...

Page 141: ...If the configuration system is faulty the terminal screen may display nothing or illegible characters No Display on the Terminal Screen Symptom After the firewall is powered on the configuration term...

Page 142: ...arameters in Chapter 6 Maintaining Software Using the AUX Port as Backup Console Port When the console port is faulty you can use the AUX port as the backup console port to complete firewall configura...

Page 143: ...down below 75 C 167 F the following information appears on the configuration terminal screen May 14 22 25 17 804 2000 H3C DRVMSG 3 TempHOK Environment temperature recovered from OT in Slot 0 index is...

Page 144: ...ion talking about modifying serial interface parameters in Chapter 6 Maintaining Software Troubleshooting TFTP Upgrading Symptom During application file upgrading through TFTP the following problems a...

Page 145: ...8 1 10 10 204 150 xxx file ready to send xxx bytes in ASCII mode FTP Error Writing Local File Screen z Symptom 2 The file to be downloaded is not found The following information appears 227 Entering P...

Page 146: ...not exist cfa0 main bin Starting to get the backup application file cfa0 backup bin The backup application file does not exist cfa0 backup bin Starting to get the secure application file cfa0 secure...

Page 147: ...3 FDA A 4 California Code of Regulations A 4 Canada regulatory compliance A 4 ICES 003 A 4 Japan regulatory compliance A 4 VCCI A 4 CISPR 22 compliance A 4 Appendix B Safety Information Sicherheits in...

Page 148: ...22 CLASS A EN 55022 CLASS A AS NZS CISPR22 CLASS A CISPR 24 EN 55024 EN 61000 3 2 EN 61000 3 3 EN 61000 6 1 ETSI EN 300 386 EN 301 489 1 Safety UL 60950 1 CAN CSA C22 2 No 60950 1 IEC 60950 1 EN 6095...

Page 149: ...5 CE Greek H3C Corporation Router 1999 5 Fran ais French Par la pr sente H3C Corporation d clare que l appareil Router est conforme aux exigences essentielles et aux autres dispositions pertinentes d...

Page 150: ...sem ger ar eru tilskipun 1999 5 EC Norsk Norwegian H3C Corporation erkl rer herved at utstyret Router er i samsvar med de grunnleggende krav og vrige relevante krav i direktiv 1999 5 EF A copy of the...

Page 151: ...21 CFR Subchapter J California Code of Regulations California Code of Regulations Title 22 Chapter 33 Best Management Practices for Perchlorate Materials Canada regulatory compliance ICES 003 This Cla...

Page 152: ...r all safety precautions that should be followed They are only the supplements to the safety precautions for operations as a whole Therefore the personnel in charge of the installation and maintenance...

Page 153: ...den nationalen Sicherheitsvorschriften W hrend der Arbeit mit den Produkten sind deshalb grunds tzlich alle Sicherheitsvorschriften und spezifischen Sicherheitshinweise genau zu beachten Das f r die...

Page 154: ...Lesen Sie alle Anweisungen sorgf ltig durch bevor Sie mit dem Arbeiten beginnen z z Das System muss in einem Raum installiert werden der unbefugten Personen keinen Zutritt gestattet z z Beachten Sie...

Page 155: ...nd Wechselstromversorgung kann zu t dlichen Unf llen f hren AC z During the installation of AC power supply facility the local safety regulations must be followed The personnel who install the AC faci...

Page 156: ...ltage operations should be qualified for high voltage and AC operations Die Nichtbeachtung der Sicherheitsvorschriften bei der Arbeit mit Hochspannung kann zu Feuer und elektrischem Schlag f hren Desh...

Page 157: ...fore the power cable is connected it must be confirmed that the power cable and label comply with the requirements of the actual installation z berpr fen Sie vor dem Anbringen der Zuleitung immer ob d...

Page 158: ...ted In order to prevent the equipment from being damaged by lightning proper grounding is required Arbeiten mit Hochspannung und Wechselstrom oder Arbeiten auf Stahlt rmen und masten w hrend eines Gew...

Search results

Summary of Contents for H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET...

Reviews:

Related manuals for H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET...

Brands by name

Popular brands

3Com H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET..., Installation Manual

Search results

Summary of Contents for H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET...

Reviews:

Related manuals for H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET...

Brands by name

Popular brands