background image

 

34 

Table 6 Output description 

Field Description 

Slot 1 CPU 0 CPU usage  CPU 0 usage information for the interface module in slot 1. 

3% in last 5 seconds 

Average CPU usage in the last 5 seconds. (After the firewall boots, the firewall 
calculates and records the average CPU usage at the interval of 5 seconds.) 

3% in last 1 minute 

Average CPU usage in the last minute. (After the firewall boots, the firewall 
calculates and records the average CPU usage at the interval of 1 minute.) 

3% in last 5 minutes 

Average CPU usage in the last 5 minutes. (After the firewall boots, the firewall 
calculates and records the average CPU usage at the interval of 5 minutes.) 

 

Displaying the memory usage of the firewall 

Use the 

display memory

 command to display the memory information of the firewall.  

<Sysname> display memory 

The statistics about memory is measured in KB: 

Slot 1: 

             Total      Used      Free    Shared   Buffers    Cached   FreeRatio 

Mem:       1718140    921604    796536         0      1108    187644       46.4% 

-/+ Buffers/Cache:    732852    985288 

Swap:           0         0         0 

 

Table 7 Output description 

Field Description 

Slot 

Slot number of the interface module 

Mem Memory 

usage information. 

Total 

Total size of the physical memory space that can be allocated. 
The memory space is virtually divided into two parts. Part 1 is used for 
kernel codes, kernel management, and ISSU functions. Part 2 can be 
allocated and used for such tasks as running service modules and 
storing files. The size of part 2 equals the total size minus the size of part 
1. 

Used 

Used physical memory. 

Free Free 

physical 

memory. 

Shared 

Physical memory shared by processes. 

Buffers Physical 

memory used for buffers. 

Cached 

Physical memory used for caches. 

FreeRatio 

Free memory ratio. 

-/+ Buffers/Cache 

-/+ Buffers/Cache:used = Mem:Used – Mem:Buffers – Mem:Cached, 
which indicates the physical memory used by applications. 
-/+ Buffers/Cache:free = Mem:Free + Mem:B Mem:Cached, 
which indicates the physical memory available for applications. 

Swap Swap 

memory. 

 

Summary of Contents for SecPath F10 0 Series

Page 1: ...H3C SecPath F10X0 Firewalls Installation Guide New H3C Technologies Co Ltd http www h3c com Document version 6W103 20200427...

Page 2: ...respective owners Notice The information in this document is subject to change without notice All contents in this document including statements information and recommendations are believed to be acc...

Page 3: ...nclose syntax choices keywords or arguments that are optional x y Braces enclose a set of required syntax choices separated by vertical bars from which you select one x y Square brackets enclose a set...

Page 4: ...s a Layer 2 or Layer 3 switch or a router that supports Layer 2 forwarding and other Layer 2 features Represents an access controller a unified wired WLAN module or the access controller engine on a u...

Page 5: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...

Page 6: ...lling an interface module 16 Optional Installing and removing a hard disk 17 Optional Installing a lightning arrester for a network port 18 Optional Installing a lightning arrester for an AC power mod...

Page 7: ...e 38 Configuration terminal display problem 38 Password loss 38 Cooling system failure 39 Software loading failure 39 Appendix A Chassis views and technical specifications 40 Chassis views 40 F1005 F1...

Page 8: ...ant information that if not understood or followed can result in data loss data corruption or damage to hardware or software General safety recommendations Do not place the firewall on an unstable cas...

Page 9: ...emit invisible laser light Do not stare into beams or view directly with optical instruments when the firewall is operating The firewall is a Class 1 laser device Before you disconnect the fiber conne...

Page 10: ...ipment room Lasting high relative humidity can cause poor insulation electricity leakage mechanical property change of materials and metal corrosion Lasting low relative humidity can cause washer cont...

Page 11: ...ipation For adequate cooling of the firewall follow these guidelines Install the firewall at the installation site with its airflow direction meeting the ventilation requirements Reserve a minimum cle...

Page 12: ...p 2 Lock 3 Alligator clip EMI All electromagnetic interference EMI sources from outside or inside of the firewall and application system adversely affect the firewall in the following ways A conductio...

Page 13: ...ule Power supply Verify that the power system at the installation site meets the requirements of the power modules including the input method and rated input voltage For more information see Appendix...

Page 14: ...vel Wear an ESD wrist strap and make sure it makes good skin contact and is reliably grounded when installing FRUs Put the removed interface modules away on an ESD workbench with the PCB upward or put...

Page 15: ...ack is appropriate for the firewall The front and rear of the rack are a minimum of 0 8 m 31 50 in away from walls or other devices Safety precautions The firewall is far away from any moist area and...

Page 16: ...ver intact and if you want to open the chassis contact H3C for permission Otherwise H3C shall not be liable for any consequence The installation procedure is the same for the H3C SecPath F1000 series...

Page 17: ...ce the firewall on a workbench To mount the firewall on a workbench 1 Verify that the workbench is sturdy and reliably grounded 2 Place the firewall upside down on the workbench and clean the four rou...

Page 18: ...9 to 17 32 in attach the rear mounting brackets to the rear rack posts with the wide flange outside the rack To prevent the rear mounting brackets from obstructing the closing of the rack door ensure...

Page 19: ...r screws to the firewall 6 Attach the rear mounting brackets to the rear rack posts Figure 7 Attaching the rear mounting brackets with the wide flange inside the rack Figure 8 Attaching the rear mount...

Page 20: ...ing brackets inside the rack Figure 10 Mounting the firewall in the rack with the wide flange of the rear mounting brackets outside the rack Grounding the firewall WARNING Correctly connecting the fir...

Page 21: ...he grounding cable Attach the hook to the grounding point and secure the hook with a screw Figure 11 Grounding the firewall with a grounding strip Grounding the firewall with the grounding terminal on...

Page 22: ...filler panel from the F1070 F1080 The firewall comes with the PWR1 slot empty and the PWR0 slot installed with a filler panel 3 Orient the power module with its handle at the left Holding the handle o...

Page 23: ...erface modules are not hot swappable To install two or more interface modules use the upper interface module slots as a best practice If you have installed an interface module in a lower slot you must...

Page 24: ...ways hold a hard disk by its sides Do not touch any components and do not squeeze vibrate or strike a hard disk Install a filler panel in empty hard disk slots to prevent dust and ESD damage IMPORTANT...

Page 25: ...pull the hard disk out of the slot 4 If you are not to install a new power module in the slot install a filler panel in the slot to prevent dust and ensure good ventilation Figure 20 Removing a hard d...

Page 26: ...n use the ping or tracert command to examine network connectivity For more information see the related command reference Connecting a fiber port WARNING Disconnected optical fibers or transceiver modu...

Page 27: ...transceiver module and insert it into the fiber port 3 Remove the dust cap of the optical fiber connector and use dust free paper and absolute alcohol clean the end face of the fiber connector 4 Iden...

Page 28: ...5 or F1010 firewall 1 Attach the hooks of the power cord retainer clip into the holes on the top of the AC input power receptacle and pull the power cord retainer clip upwards 2 Connect one end of the...

Page 29: ...power cord using a power cord retainer clip to secure the power cord Figure 26 Connecting an AC power cord using a cable tie to secure the power cord Connecting an AC power cord for an F1070 or F1080...

Page 30: ...ewall Connecting a DC power cord Connecting a DC power cord for an F1070 F1080 or F1090 firewall 1 Correctly orient the DC power cord connector with the power receptacle on the power module and insert...

Page 31: ...dge of the power cord connector and then close the cable clamp 4 Connect the other end of the power cord to an AC or high voltage DC power source Figure 31 Connecting a high voltage DC power cord for...

Page 32: ...he serial console port or micro USB console port you must run a terminal emulator program TeraTermPro or PuTTY on your configuration terminal and configure the following settings for the terminal For...

Page 33: ...ormal Extended BootWare The Extended BootWare is self decompressing Done H3C F1080 BootWare Version 1 04 Compiled Date Sep 10 2014 CPU Type xxx CPU Clock Speed 1000MHz Memory Type DDR3 SDRAM Memory Si...

Page 34: ...wn Answer tests in the engine Known answer test for SHA1 passed Known answer test for HMAC SHA1 passed Known answer test for AES passed Known answer test for RSA signature verification passed Known an...

Page 35: ...t use a different IP address than the Ethernet management interface 3 Start a browser enter 192 168 0 1 in the address bar and press Enter 4 Enter the default username admin and password admin and the...

Page 36: ...for an F1070 or F1080 firewall 1 Face the rear panel of the firewall 2 Use a Phillips screwdriver to loosen the captive screw of the power module 3 Hold the power module with one hand and pull the pow...

Page 37: ...e To install two or more interface modules use the upper interface module slots as a best practice If you have installed an interface module in a lower slot you must press down the ejector levers of t...

Page 38: ...a transceiver module 1 Use the shutdown command in interface view at the CLI to shut down the optical source before you remove the fiber connector 2 Remove the LC connectors with the optical fiber fro...

Page 39: ...and hardware version information for the firewall Use the display version command to display software and hardware version information for the firewall Sysname display version H3C Comware Software Ve...

Page 40: ...is not supported on the specified fan Fan 1 The operation is not supported on the specified fan Fan 2 The operation is not supported on the specified fan Fan 3 The operation is not supported on the s...

Page 41: ...Used Free Shared Buffers Cached FreeRatio Mem 1718140 921604 796536 0 1108 187644 46 4 Buffers Cache 732852 985288 Swap 0 0 0 Table 7 Output description Field Description Slot Slot number of the inte...

Page 42: ...rmation of the firewall Sysname display environment System Temperature information degree centigrade Sensor Temperature LowerLimit Warning UpperLimit Alarm UpperLimit Shutdown U pperLimit inflow 1 26...

Page 43: ...rational statistics for each functional module of the firewall Sysname display diagnostic information Sysname display diagnostic information Save or display diagnostic information Y save N display Y N...

Page 44: ...wing methods Use the reboot command to reboot the firewall immediately Enable the scheduled reboot function at the CLI You can set a time at which the firewall can automatically reboot or set a delay...

Page 45: ...ue 1 Verify that the power supply system is operating correctly 2 Verify that the serial console cable or micro USB console cable is correctly connected 3 Verify that the serial console cable or micro...

Page 46: ...the firewall immediately and contact your local sales agent 5 If the issue persists contact your local sales agent Software loading failure Symptom Software loading fails and the system runs the softw...

Page 47: ...console port One hard disk slot Figure 37 Front panel 1 Hard disk slot 2 Console port 3 USB ports 4 Combo interfaces 5 Bypass ports 6 10 100 1000BASE T copper ports 7 LEDs 8 Management Ethernet port...

Page 48: ...nterface module slot 2 not supported 4 Grounding screw F1030 F1050 F1060 The F1030 F1050 F1060 firewall provides the following ports on the front panel Sixteen 10 100 1000BASE T autosensing Ethernet c...

Page 49: ...thernet copper ports Eight 1000BASE X fiber ports Two 10GBASE R fiber ports Two USB ports One console port Two hard disk slots Figure 43 Front panel 1 Hard disk slots 2 LEDs 3 10 100 1000BASE T copper...

Page 50: ...ont panel 1 Hard disk slots 2 Management Ethernet port MGMT 3 10 100 1000BASE T copper ports 4 10GBASE R fiber ports 5 1000BASE X fiber ports 6 LEDs 7 Reset button 8 Micro USB console port 9 USB port...

Page 51: ...erate as common data ports When the firewall is powered off the four ports are divided into two bypass port pairs with ports 0 and 1 in one pair and ports 2 and 3 in another pair The two ports in a pa...

Page 52: ...varies by models For more information see H3C SecPath Firewall Network Data Encryption Module Guide Table 11 describes the hardware and software compatibility with the network data encryption modules...

Page 53: ...TA SFF No Yes No No Power modules The F1070 F1080 F1090 firewall comes with power module slot PWR0 installed with a filler panel and power module slot PWR1 empty It supports both AC and DC power modul...

Page 54: ...50 A1 power module 1 Handle 2 Power receptacle PSR250 12A1 The PSR250 12A1 power module provides a maximum output power of 250 W Figure 52 PSR250 12A1 power module 1 Latch 2 Status LED 3 Handle 4 Powe...

Page 55: ...a maximum output power of 450 W Figure 54 PSR450 12D power module 1 Latch 2 Status LED 3 Handle 4 Power receptacle High voltage DC power modules CAUTION You can install high voltage DC power modules...

Page 56: ...44 2 440 435 mm 1 74 17 32 17 13 in 6 75 kg 14 88 lb F1030 F1050 F1060 44 2 440 435 mm 1 74 17 32 17 13 in 7 3 kg 16 09 lb F1070 F1080 44 2 440 435 mm 1 74 17 32 17 13 in 8 5 kg 18 74 lb F1090 44 440...

Page 57: ...n 0 069 kg 0 15 lb 480 GB 0 C to 45 C 32 F to 113 F 3 W NS HDD 500G SATA SFF 19 75 7 118 4 mm 0 75 2 98 4 66 in 0 12 kg 0 26 lb 500 GB 5 C to 40 C 41 F to 104 F 4 9 W NS HDD 1T SA TA SFF 19 75 7 118 4...

Page 58: ...5 F1010 8 GE copper ports 2 combo interfaces 2 bypass ports F1020 F1030 F1050 F1060 16 GE copper ports 8 GE fiber ports F1070 F1080 16 GE copper ports 8 GE fiber ports 2 10GE fiber ports F1090 14 GE c...

Page 59: ...o the serial port of a local PC running the terminal emulation program CLI GE copper port Table 24 GE copper port specifications Item Specification Connector RJ 45 Standard compliance 802 3 802 3u and...

Page 60: ...C 9 125 m single mode optical fiber 40 km 24 85 miles SFP GE LH80 SM1550 1550 nm LC 9 125 m single mode optical fiber 80 km 49 71 miles SFP GE LH100 SM1550 1550 nm LC 9 125 m single mode optical fiber...

Page 61: ...ft 66 m 216 54 ft SFP XG LX220 MM131 0 1310 nm LC 62 5 125 m multi mode optical fiber 220 m 721 78 ft 50 125 m multi mode optical fiber 220 m 721 78 ft 100 m 328 08 ft SFP XG LX SM1310 1310 nm LC 9 1...

Page 62: ...hing green Data is being read from or written to the hard disk Steady green The hard disk is present and operating correctly Interface module LED Off The interface module is not present or has failed...

Page 63: ...he console port on the firewall Figure 57 RJ 45 to DB9 console cable Table 30 RJ 45 to DB9 console cable pinouts RJ 45 Signal Direction DB 9 1 RTS 7 2 DTR 4 3 TXD 3 4 CD 1 5 GND 5 6 RXD 2 7 DSR 6 8 CT...

Page 64: ...0 42 ft Ethernet twisted pair cables can be classified into category 3 category 4 category 5 category 5e category 6 and category 7 cables based on performance In LANs category 5 category 5e and catego...

Page 65: ...n 7 white brown stripe pin 8 brown solid Standard 568B pin 1 white orange stripe pin 2 orange solid pin 3 white green stripe pin 4 blue solid pin 5 white blue stripe pin 6 green solid pin 7 white brow...

Page 66: ...Receives data BIDB Bi directional data cable B 4 Reserved N A BIDC Bi directional data cable C 5 Reserved N A BIDC Bi directional data cable C 6 Rx Receives data BIDB Bi directional data cable B 7 Re...

Page 67: ...uired length with the crimping tool 2 Strip off an appropriate length of the cable sheath The length is typically that of the RJ 45 connector 3 Untwist the pairs so that they can lay flat and arrange...

Page 68: ...ector Figure 62 Appearance of an LC connector Follow these guidelines when you connect an optical fiber Before connecting an optical fiber make sure the connector and cable type match the interface mo...

Reviews: