background image

 

H3C SecPath F5000-AI-15 Firewall  

Installation Guide 

 

 

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
New H3C Technologies Co., Ltd.  
http://www.h3c.com 
 
Document version: 6W100-20211224

 

 

Summary of Contents for SecPath F5000-AI-15

Page 1: ...H3C SecPath F5000 AI 15 Firewall Installation Guide New H3C Technologies Co Ltd http www h3c com Document version 6W100 20211224...

Page 2: ...espective owners Notice The information in this document is subject to change without notice All contents in this document including statements information and recommendations are believed to be accur...

Page 3: ...eplace with actual values Square brackets enclose syntax choices keywords or arguments that are optional x y Braces enclose a set of required syntax choices separated by vertical bars from which you s...

Page 4: ...generic network device such as a router switch or firewall Represents a routing capable device such as a router or Layer 3 switch Represents a generic switch such as a Layer 2 or Layer 3 switch or a...

Page 5: ...ardware model configuration or software version It is normal that the port numbers sample output screenshots and other information in the examples differ from what you have on your device Documentatio...

Page 6: ...g a fan tray 17 Installing a power supply 17 Installing an interface module 18 Installing a drive 19 Connecting Ethernet cables 20 Connecting a copper Ethernet port 20 Connecting a fiber port 20 Conne...

Page 7: ...ing system failure 6 39 Software loading failure 6 39 Appendix A Chassis views and technical specifications 6 39 Chassis views 6 39 Interface modules 6 40 NSQM1GT4PFC 6 41 NSQM1GP4FBA 6 41 NS NIM TG6A...

Page 8: ...hardware or software General safety recommendations Do not place the firewall on an unstable case or desk The firewall might be severely damaged in case of a fall Make sure the ground is dry and flat...

Page 9: ...nnected transceiver modules to avoid damage caused by built up dust Insert a dust plug into empty fiber ports Handling safety When you move the firewall follow these guidelines Move and unpack the fir...

Page 10: ...and lifespan of the firewall For the temperature and humidity requirements of the firewall see Table1 1 Table1 1 Temperature humidity requirements Temperature Relative humidity Operating Without driv...

Page 11: ...rflow through the chassis ESD prevention ESD prevention guidelines To prevent electrostatic discharge ESD follow these guidelines Make sure the firewall the workbench and the rack are reliably grounde...

Page 12: ...e grounding system coupling To prevent EMI use the following guidelines If AC power is used use a single phase three wire power receptacle with protection earth PE to filter interference from the powe...

Page 13: ...ower lightning arrester is provided with the firewall Prepare them as required For the technical specifications and installation instructions for the lightning protectors see the documents shipped wit...

Page 14: ...d temperature are at an acceptable level Wear an ESD wrist strap and make sure it makes good skin contact and is reliably grounded when installing removable components Put the removed interface module...

Page 15: ...the rack is appropriate for the firewall The front and rear of the rack are a minimum of 0 8 m 31 50 in away from walls or other devices Safety precautions The firewall is far away from any moist area...

Page 16: ...t H3C for permission Otherwise H3C shall not be liable for any consequence Installation flow The firewall supports the following installation methods Workbench mounting For the installation procedure...

Page 17: ...Install fan trays Install interface modules Connect Ethernet cables Start Install power supplies Install drives Mount the firewall on a workbench Install the firewall in a 19 inch rack Connect power c...

Page 18: ...lace the firewall on a workbench To mount the firewall on a workbench 1 Verify that the workbench is sturdy and reliably grounded 2 Place the firewall upside down on the workbench and clean the four r...

Page 19: ...all cage nuts Figure2 3 Installing cage nuts 3 Attach the front mounting brackets and shoulder screws to both sides of the firewall with M4 screws provided with the firewall Figure2 4 Attaching mounti...

Page 20: ...ts and the interior side of the rack door Figure2 5 Attaching the rear mounting brackets to the rear rack posts with the wide flange inside the rack Figure2 6 Attaching the rear mounting brackets to t...

Page 21: ...cure the mounting brackets to the front rack posts and make sure the shoulder screws rest firmly on the upper edge of the rear mounting brackets Figure2 7 Mounting the firewall in the rack with the wi...

Page 22: ...installation site Grounding the firewall with a grounding strip If a grounding strip is available at the installation site connect the grounding cable through the grounding strip To connect the groun...

Page 23: ...rounding screw to the ring terminal of the grounding cable 3 Use a screwdriver to fasten the grounding screw into the grounding hole on the firewall 4 Remove the grounding screw from the grounding poi...

Page 24: ...Grasp the handle of the fan tray with one hand and support the fan tray bottom with the other Slide the fan tray along the guide rails into the slot until the fan tray is fully seated in the slot Figu...

Page 25: ...ing an interface module CAUTION Interface modules are not hot swappable To install two interface modules use the upper interface module slots as a best practice If you have installed an interface modu...

Page 26: ...ents and do not squeeze vibrate or strike a drive Install a filler panel in empty drive slots to prevent dust and ESD damage IMPORTANT The firewall does not come with any drives and cannot recognize d...

Page 27: ...Disconnected optical fibers or transceiver modules might emit invisible laser light Do not stare into beams or view directly with optical instruments when the firewall is operating CAUTION Never bend...

Page 28: ...work through an optical fiber 1 Remove the dust plug from the fiber port 2 Remove the dust cap from the transceiver module and insert it into the fiber port 3 Remove the dust cap of the optical fiber...

Page 29: ...g an AC power cord 1 Connect the female connector of the AC power cord to the AC input power receptacle on the power supply 2 Use a cable tie to secure the AC power cord to the power supply handle 3 C...

Page 30: ...the other end of the power cord to a DC power source Figure2 21 Connecting a DC power cord Connecting a high voltage DC power cord The connection procedure is similar for high voltage DC power cords a...

Page 31: ...the serial console port or micro USB console port you must run a terminal emulator program TeraTermPro or PuTTY on your configuration terminal and configure the following settings for the terminal Fo...

Page 32: ...software version System is starting Press Ctrl D to access BASIC BOOTWARE MENU Press Ctrl T to start heavy memory test Booting Normal Extended BootWare The Extended BootWare is self decompressing Don...

Page 33: ...nterface IMPORTANT After accessing the Web interface with the default account modify the password of the default account or create a new administrator account and delete the default account as a best...

Page 34: ...e the Telnet function in system view by using the telnet server enable command 2 Enter VTY user line view and configure the authentication mode user role and common properties in VTY user line view By...

Page 35: ...y part way out of the slot Supporting the power supply bottom with one hand slowly pull the power supply out of the slot along the guide rails with the other 3 Put the removed power supply in an antis...

Page 36: ...nterface module For the installation procedure see Installing an interface module If you are not to install a new interface module install a filler panel in the slot to ensure good ventilation in the...

Page 37: ...the shutdown command in interface view at the CLI to shut down the optical source before you remove the fiber connector 2 Remove the LC connectors with the optical fiber from the transceiver module a...

Page 38: ...0 CFCard Num 0 Displaying the software and hardware version information for the firewall Use the display version command to display software and hardware version information for the firewall Sysname...

Page 39: ...al label information for the firewall Use the display device manuinfo command to display the electrical label information for the firewall Sysname display device manuinfo Slot 1 CPU 0 DEVICE_NAME SecP...

Page 40: ...U usage CPU 0 usage information for the interface module in slot 1 3 in last 5 seconds Average CPU usage in the last 5 seconds After the firewall boots the firewall calculates and records the average...

Page 41: ...atio Free memory ratio Buffers Cache Buffers Cache used Mem Used Mem Buffers Mem Cached which indicates the physical memory used by applications Buffers Cache free Mem Free Mem Buffers Mem Cached whic...

Page 42: ...37 0 60 65 NA 1 outflow 1 42 0 71 83 NA 1 hotspot 1 71 0 82 92 97 Table5 5 Output description Field Description Sensor Temperature sensor inflow Air inlet vent temperature sensor outflow Air outlet ve...

Page 43: ...mation Save or display diagnostic information Y save N display Y N n display cpu Slot 1 CPU 0 CPU usage 13 in last 5 seconds 13 in last 1 minute 13 in last 5 minutes Displaying transceiver module info...

Page 44: ...owing methods Use the reboot command to reboot the firewall immediately Enable the scheduled reboot function at the CLI You can set a time at which the firewall can automatically reboot or set a delay...

Page 45: ...sue 1 Verify that the power supply system is operating correctly 2 Verify that the serial console cable or micro USB console cable is correctly connected 3 Verify that the serial console cable or micr...

Page 46: ...Software loading failure Symptom Software loading fails and the system runs the software of the previous version Solution To solve the issue 1 Verify that the physical ports are correctly connected 2...

Page 47: ...4 10GBASE R fiber ports 5 1000BASE X fiber ports 6 LEDs 7 Reset button 8 Micro USB port 9 USB ports 10 Console port CONSOLE 11 Management Ethernet port 0 MGMT Figure6 2 Rear panel 1 Power supply slot...

Page 48: ...h ports 0 and 1 in one pair and ports 2 and 3 in another pair The two ports in a pair can act as the uplink and downlink interfaces for a Layer 2 link and form a bypass link This enables traffic to be...

Page 49: ...talled with a filler panel and power supply slot PWR1 empty It supports both AC and DC power supplies No power supplies are provided with the firewall Prepare power supplies for the firewall yourself...

Page 50: ...ch 2 Status LED 3 Handle 4 Power receptacle High voltage DC power supplies The PSR450 12AHD power supply provides a maximum output power of 450 W Figure6 8 PSR450 12AHD power supply 1 Latch 2 Status L...

Page 51: ...91 6 81 in 0 40 kg 0 88 lb Drives Table6 4 Drive dimensions and weights Drive model Dimensions H W D Weight NS SSD 480G SATA SFF 19 75 7 118 4 mm 0 75 2 98 4 66 in 0 07 kg 0 15 lb NS HDD 500G SATA SF...

Page 52: ...SATA SFF 5 W Power supply specifications Table6 10 AC power supply specifications Model Rated input voltage range Maximum input current Maximum power PSR250 12A1 100 VAC to 240 VAC 50 Hz or 60 Hz 5 A...

Page 53: ...e 12 V Port specifications Console port Table6 14 Console port specifications Item Specification Connector RJ 45 Standard compliant RS 232 Baud rate 9600 bps default to 115200 bps Cable type Common as...

Page 54: ...Mbps half full duplex 100 Mbps half full duplex 1000 Mbps full duplex NOTE The media dependent interface MDI standard is typically used on the Ethernet port of network adapters The media dependent int...

Page 55: ...1310 LC 9 125 SMF 40 km 24 86 miles SFP GE LH40 SM1550 1550 LC 9 125 SMF 40 km 24 86 miles SFP GE LH80 SM1550 1550 LC 9 125 SMF 80 km 49 71 miles SFP GE LH100 SM1550 1550 LC 9 125 SMF 100 km 62 14 mi...

Page 56: ...Off No link is present Steady green A 1000 Mbps link is present Flashing green The port is receiving and sending data at 1000 Mbps 10GBASE R Off No link is present Steady green A 10 Gbps link is pres...

Page 57: ...he console port on the firewall Figure6 10 RJ 45 to DB9 console cable Table6 24 RJ 45 to DB9 console cable pinouts RJ 45 Signal Direction DB 9 1 RTS 7 2 DTR 4 3 TXD 3 4 CD 1 5 GND 5 6 RXD 2 7 DSR 6 8...

Page 58: ...twisted pair cables can be classified into category 3 category 4 category 5 category 5e category 6 and category 7 cables based on performance In LANs category 5 category 5e and category 6 are commonl...

Page 59: ...solid pin 3 white green stripe pin 4 blue solid pin 5 white blue stripe pin 6 green solid pin 7 white brown stripe pin 8 brown solid Ethernet twisted pair cables can be classified into straight throug...

Page 60: ...C 5 Reserved N A BIDC Bi directional data cable C 6 Rx Receives data BIDB Bi directional data cable B 7 Reserved N A BIDD Bi directional data cable D 8 Reserved N A BIDD Bi directional data cable D T...

Page 61: ...an appropriate length of the cable sheath The length is typically that of the RJ 45 connector 3 Untwist the pairs so that they can lay flat and arrange the colored wires based on the wiring specificat...

Page 62: ...ollow these guidelines when you connect an optical fiber Before connecting an optical fiber make sure the connector and cable type match the interface module The fiber Ethernet port of the firewall su...

Reviews: