background image

Diagnosing hardware problems | 

26

Use the Remote Management Module

To view the system event log from a remote location, use the Remote Management Module.

1.

In a web browser, go to https://

<IP of Remote Management Module>

.

2.

Specify your credentials and log on.

3.

Click the 

Server Health

 tab.

4.

Click 

Event Log

.

Use the integrated system event log viewer

If you have local access to the appliance, use the integrated system event log viewer to view the system event

log.

Note: 

 If the Sidewinder IPMI daemon (ipmid) is enabled, system event log events are converted

to firewall audit entries and removed from the system event log. If you want to use the system

event log to monitor hardware events instead of the firewall audit, disable ipmid by running the

command 

cf daemond disable agent=ipmid.

1.

Connect your appliance to a monitor and keyboard.

2.

Restart or turn on the appliance.

3.

When the appliance starts, press 

F6

 to access the one-time boot settings.

4.

From the list of boot options, select 

Internal EFI Shell

.

The EFI shell starts and a countdown timer appears. When the countdown is complete, the 

Intel Diagnostic

Tool

 menu appears.

CAUTION: 

 Wait for the countdown to finish. Do not press any key.

5.

At the 

fs0:\>

 prompt, run the 

sel

 command. The system event log viewer appears.

Tip: 

 For instructions on how to use the system event log viewer, select 

Help

.

Summary of Contents for 1402-C3

Page 1: ...Sidewinder Hardware Guide Models S4016 1402 C3 S5032 S6032 S7032 Revision F ...

Page 2: ...all or replace the network module 14 Install or remove fiber transceivers 15 Replace the hard drive 16 Replace the power supply 17 Replace the RAID battery 17 3 Configuring the management ports 19 Configure a dedicated management port 19 Configure the Remote Management Module 19 4 Re imaging an appliance 22 Re imaging without external media 22 Update the eUSB device 22 Re image the appliance 23 5 ...

Page 3: ...rt website you can find information about a released product including product documentation technical articles and more You can get additional information and support for your product on the Forcepoint support website at https support forcepoint com There you can access product documentation Knowledge Base articles downloads cases and contact information ...

Page 4: ...d drives Hardware based remote management capabilities Redundant power supplies The following table provides an overview of the models Table 1 Model features Model Rack height Network module bays Maximum network ports Hard drives Power supplies S4016 similar to 1100F 1U 2 16 2 2 1402 C3 1U 2 16 1 2 S5032 similar to 2150F 2U 4 32 4 2 S6032 similar to 4150F 2U 4 32 4 2 S7032 similar to 2150F VX 2U 4...

Page 5: ...USB ports 8 RS 232 serial port 9 Power button 10 USB port Model 1402 C3 This figure shows the attributes of model 1402 C3 Figure 2 Model 1402 C3 front panel Number Descriptions 1 Power button 2 Indicator lights 3 UID button 4 Console port RS 232 serial port 5 VGA port 6 Fixed Ethernet ports 7 USB ports 8 Network module bay 1 9 Network module bay 2 ...

Page 6: ...Ethernet port 6 VGA port 7 Power button 8 USB port 9 Network module bay 2 10 Network module bay 4 11 Dedicated management port 1 12 USB ports 13 RS 232 serial port 14 Dedicated management port 2 Supported software These software versions are supported Models S4016 S5032 and S6032 Sidewinder software Version 7 7 0 1 02 HW04 and later Version 8 8 1 1HW04 and later Model 1402 C3 Sidewinder software V...

Page 7: ...e available for these types of Ethernet 1 gigabit RJ45 copper 1 gigabit SFP fiber 10 gigabit SFP fiber The following table summarizes the features of each network module Note By default model S4016 S5032 and S6032 appliances include a single SC8 UTP network module and model S7032 appliances include a single S8 UTP network module For model 1402 C3 appliances network modules must be ordered separate...

Page 8: ... Model Ethernet type Wavelength Distance Ethernet speed Connector type MT9101A black handle 1000BASE SX 850 nm Up to 550 meters on 50 125 µm multi mode fiber Up to 300m on 62 5 125 µm multi mode fiber 1 gigabit LC MT9102A blue handle 1000BASE LX 1310 nm Up to 10 kilometers on 9 125 µm single mode fiber 1 gigabit LC SFP transceivers These enhanced small form factor pluggable SFP transceivers are co...

Page 9: ...twork module bay Module type Software NIC names 1 SC8 UTP 8 ports 1 0 to 1 7 2 S6 SFP 6 ports 2 0 to 2 5 3 S8 UTP 8 ports 3 0 to 3 7 4 S8 SFP 8 ports 4 0 to 4 7 Note The module bay naming system described above is used on all supported software versions for the 1402 C3 The NIC names for the fixed Ethernet ports on the 1402 C3 are mgr1 mgr4 These fixed Ethernet ports can be used for management or g...

Page 10: ...es of traffic Identifying management ports and NICs The following table shows the dedicated management ports and corresponding NIC names Table 7 Dedicated management ports Model Management ports NIC names S4016 1 mgr1 S5032 2 mgr1 mgr2 S6032 2 mgr1 mgr2 S7032 2 mgr1 mgr2 Remote Management Module port The Remote Management port is a 10 100 RJ45 copper port that provides system management features i...

Page 11: ...ble and should only be serviced by a qualified technician Non hot swap capable components Components that are not hot swap capable must be installed or uninstalled when the appliance is turned off and disconnected from the power source These are the non hot swap capable components Network modules RAID batteries Regulatory information In compliance with Federal Communications Commission FCC regulat...

Page 12: ...Introducing the appliances 12 Contact information Use the following information to contact us Forcepoint LLC 10900 A Stonelake Blvd Quarry Oaks 1 Ste 350 Austin TX 78759 USA 1 800 723 1166 ...

Page 13: ...ith the network module s Network modules and fiber transceivers The table shows network module compatibility with fiber transceivers and appliance models Table 9 Network module compatibility Network module Compatible fiber transceivers Compatible appliances SC8 UTP N A S4016 S5032 S6032 S8 UTP N A S4016 S5032 S6032 S7032 S8 SFP MT9101A 1000BASE SX MT9102A 1000BASE LX S4016 S5032 S6032 S7032 S6 SFP...

Page 14: ...ntenance interval to perform the installation procedure Gather the following items Number 2 Phillips screwdriver Anti static wrist strap Note A disposable anti static wrist strap is included with the new network module Verify hardware compatibility Make sure that the network module is compatible with your appliance model If you are installing a new fiber module make sure that you have compatible f...

Page 15: ...emove fiber transceivers This section describes how to install or remove fiber transceivers Verify that the fiber transceivers are compatible with the network module Related concepts Verifying compatibility on page 13 Before you install a hardware component make sure it is compatible with the appliance If you are installing fiber transceivers make sure they are compatible with the network module s...

Page 16: ...eplacement hard drive must be the same size or larger than the failed drive 1 Identify the failed hard drive Tip A failed hard drive typically has an amber indicator light 2 Remove the failed hard drive from the appliance 1 Press the aqua latch on the failed hard drive to release the spring loaded black handle 2 Remove the failed hard drive from the appliance by pulling on the black handle 3 Prepa...

Page 17: ...wer supply 2 Remove the failed power supply 1 Unlatch the failed power supply Model S4016 Press the aqua handle down Model 1402 C3 Press the black handle sideways Model S5032 S6032 and S7032 Press the aqua handle sideways toward the black handle 2 Continue pressing the handle and remove the power supply holding the handle if needed 3 Remove the replacement power supply from the protective packagin...

Page 18: ...ance Note The battery is connected to the appliance by a cable which is long enough to allow you to remove the tray from the appliance 4 Gently unplug the cable from the battery 4 Remove the old battery from the tray 1 Completely unscrew all three screws on the underside of the tray Do not discard 2 Disconnect the circuit board from the battery by pressing the small clip and sliding it out 3 Gentl...

Page 19: ...ts that provide additional network connection options for management traffic Configure the Remote Management Module The Remote Management Module is disabled by default Perform these tasks to configure and use the Remote Management Module port If the appliance is deployed in a production environment schedule a maintenance interval to enable the Remote Management Module Related concepts Remote Manag...

Page 20: ...r ID 4 Press F10 to exit the BIOS and save the changes Connect to the Remote Management Module web interface Perform these steps to connect to the Remote Management Module web interface from a remote computer 1 In a web browser go to https IP of Remote Management Module The first time you connect accept the SSL certificate 2 Specify a user name and password then click Login The homepage appears 3 ...

Page 21: ...nagement ports 21 CAUTION When modifying network settings for the Remote Management Module on the Configuration tab select Intel R RMM3 from the LAN Channel drop down list Do not configure the Baseboard Mgmt LAN channel ...

Page 22: ...t have a DVD drive an external USB DVD drive is needed Note We recommend using USB media The versions that shipped with your appliance might not be the most current or you might have different eUSB versions throughout your network With the eUSB Flashing utility you can update the versions available for your appliances Important Do not use the eUSB flashing utility with 1402 C3 or S7032 models 1 Do...

Page 23: ...l console 2 Restart or turn on the appliance 3 During startup press F6 to access the one time boot settings 4 From the list of boot options select McAfee Firewall The appliance boots from the integrated installation media and displays standard boot up information 5 On the welcome menu select the appropriate option If you are using a mouse and keyboard type 1 then press Enter If you are using a ser...

Page 24: ...e USB drive 1 Download the USB img image 2 Write the image to the USB drive DVD 1 Download the iso image 2 From your local hard drive right click the iso image file and select Burn disk image 3 When prompted insert a blank DVD disc 2 Restart the appliance from the media you created 1 Insert the media into the appliance 2 Restart the appliance 3 When Press F2 to enter SETUP F6 Boot Menu F12 for Net...

Page 25: ... to connect any network port to another port in the same system Use these high level steps to run diagnostics on your appliance Note For complete instructions see the Intel Diagnostics Tool for McAfee Appliances Instructions 1 Determine the IDT media source eUSB CD or USB drive CAUTION If you use the eUSB IDT the test logs cannot be saved 2 Complete any necessary tasks to prepare your appliance If...

Page 26: ... entries and removed from the system event log If you want to use the system event log to monitor hardware events instead of the firewall audit disable ipmid by running the command cf daemond disable agent ipmid 1 Connect your appliance to a monitor and keyboard 2 Restart or turn on the appliance 3 When the appliance starts press F6 to access the one time boot settings 4 From the list of boot opti...

Page 27: ...igure 4 S4016 control panel indicator lights 1 NIC 1 2 System power 3 System status 4 Hard drive activity 5 Power button 6 USB port The following table summarizes the indicator light states and the corresponding hardware component status Table 12 S4016 indicator light states Indicator light Color State Status Solid NIC link no access NIC 1 Green Blink LAN access Green Solid Power on System power O...

Page 28: ...oring Note This indicates the appliance no longer has spare DIMMs indicating a redundancy lost condition The corresponding DIMM indicator light should light up Blink Non fatal alarm System is likely to fail CATERR asserted Critical temperature threshold asserted Critical voltage threshold asserted VRD hot asserted SMI Timeout asserted Amber Solid Fatal alarm System has failed or shut down CPU miss...

Page 29: ...D The following table summarizes the indicator light states and the corresponding hardware component status Table 14 1402 C3 indicator light states Indicator light Color State Status Green Solid The appliance is in a running state Power Red Solid The appliance is in a standby state Solid The appliance is overheating Warning Red Blinking There is a fan failure or system failure Disk Activity Yellow...

Page 30: ...he indicator light states and the corresponding hardware component status Table 15 S5032 S6032 and S7032 indicator light states Indicator light Color State Status Solid NIC link no access NIC 1 NIC 2 Green Blink LAN access Green Solid Power on System power Off Off Power off Green Random blink Hard disk activity in progress Disk activity Off Off No hard disk activity The following table describes t...

Page 31: ...CATERR asserted Critical temperature threshold asserted Critical voltage threshold asserted Critical fan threshold asserted VRD hot asserted SMI Timeout asserted Amber Solid Fatal alarm System has failed or shut down Thermal Trip asserted Non recoverable temperature threshold asserted Non recoverable voltage threshold asserted Power fault Power Control Failure Fan redundancy lost insufficient syst...

Page 32: ... failed Amber Blink Power supply warning events where the power supply continues to operate high temp high power high current slow fan Off Off No AC power to all power supplies Table 18 Power supply indicator light states for the 1402 C3 model Color State Status Green Solid Output ON and OK Solid Power supply critical event causing a shutdown Red Blink No AC power to this PSU only Off Off No AC po...

Reviews: