background image

 

1-5 

Item 

Specification 

AUX port 

1 (9600 bps to 115200 bps, 9600 bps by default) 

Management Ethernet port  1 (10Base-T/100Base-TX/1000Base-T) 

HA port  

1 (10Base-T/100Base-TX/1000Base-T) 

CF card 

z

 

256 MB by default for the built-in CF card 

z

 

256 MB, 512 MB, or 1 GB for an optional external CF card 

USB interfaces 

2 (USB 0: operating in the host mode; USB 1: operating in the device 
mode) 
Reserved for future use 

Reset button 

 

  

z

 

The flash is used for storing the boot file—the BootWare program.  

z

 

The memory is used for storing system data during operation and caching data in data forwarding.  

z

 

A CF card is used for storing the software system and configuration files of the device.  

 

LEDs 

Figure 1-4 

LEDs on the MPU 

(1)
(2)

(3)
(4)

(5)

(9)

(6)
(7)
(8)

 

(1) Link status LED of the management 
Ethernet port (LINK) 

(2) Data reception/transmission LED of the 
management Ethernet port (ACT) 

(3) Link status LED of the HA port (LINK) 

(4) Data reception/transmission LED of the HA port 
(ACT) 

(5) CF card LED (CF)  

(6) Run LED (RUN) 

(7) Data reception/transmission LED of the management Ethernet port/HA port (ACT) 
(8) Alarm LED (ALM) 

(9) USB interface 1 LED  

 

1)  Device status LEDs 

Содержание H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET...

Страница 1: ...H3C SecPath F5000 A5 Firewall Installation Manual Hangzhou H3C Technologies Co Ltd http www h3c com Manual Version 5PW101 20090424...

Страница 2: ...V2 G Vn G PSPT XGbus N Bus TiGem InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co Ltd All other trademarks that may be mentioned in this manual are the property of their respective...

Страница 3: ...nd initialization of system files and so on 6 Maintaining Software Introduces how to maintain the software of the F5000 A5 including upgrading the software and configuration files 7 Maintaining Hardwa...

Страница 4: ...lder Symbols Convention Description Means reader be extremely careful Improper operation may cause bodily injury Means reader be careful Improper operation may cause data loss or damage to equipment M...

Страница 5: ...l Documents Provides several categories of product documentation such as installation configuration and maintenance Technical Support Document Software Download Provides the documentation released wit...

Страница 6: ...NSQ1GT8C40 1 7 LPU NSQ1XP20 1 9 Dimensions and Weight 1 10 Voltage and Current 1 10 Fan Tray 1 11 Operating Environment 1 11 Components 1 11 MPU NSQ1MPUA0 1 11 LPU NSQ1GT8C40 1 17 LPU NSQ1XP20 1 22 P...

Страница 7: ...ed to expand the process capability at the data plane z In addition to traditional firewall functions the F5000 A5 supports virtual firewall attack defense and content filtering thus delivering more e...

Страница 8: ...5 Weight bearing warning label 50 kg 110 2 lb 6 Fan tray 7 AC power module PWR1 8 Blank panel for PoE PSU reserved PoE slot 9 Blank panel for DC power module PWR2 10 ESD socket and silkscreen 11 Blan...

Страница 9: ...ilter optional 5 Lower slide rail for the air filter optional 6 Chassis handle 7 Weight bearing warning label 50 kg 110 2 lb 8 Grounding screw and sign 9 Vents Do not hold the handle indicated by 2 in...

Страница 10: ...ESET 12 USB interface 1 LED USB1 13 USB interface 1 1 14 USB interface 0 0 15 AUX port AUX 16 Console port CONSOLE 17 HA port 10 100 1000BASE T HA 18 Management Ethernet port 10 100 1000BASE T MANAGEM...

Страница 11: ...t file the BootWare program z The memory is used for storing system data during operation and caching data in data forwarding z A CF card is used for storing the software system and configuration file...

Страница 12: ...ely ALM red Fast blinking 8 Hz A critical fault has occurred to the system In this state handle the fault immediately 2 Management Ethernet port HA port LEDs Table 1 3 Description of the management Et...

Страница 13: ...o interfaces delivering high speed service process capabilities Note that z An NSQ1GT8C40 LPU can be inserted in slot 1 2 3 or 4 of the F5000 A5 z An F5000 A5 needs to be equipped with an MPU and at l...

Страница 14: ...ault operating interface is the electrical interface z For a Combo interface either the electrical interface or the optical interface can operate at one time You can use the combo enable copper fiber...

Страница 15: ...duction An NSQ1XP20 provides two Ten gigabit small form factor pluggable XFP interfaces delivering high speed service process capabilities The front panel of the LPU provides one LED for each interfac...

Страница 16: ...interface XFP0 green Blinking Data is being transmitted or received on the interface OFF No link is present on the interface ON A link is present on the interface XFP1 green Blinking Data is being tra...

Страница 17: ...peed adjustment but not hot swapping of the fan tray Operating Environment Table 1 14 Operating environment specifications Item Description Operating temperature 0 C to 45 C 32 F to 113 F Operating hu...

Страница 18: ...figuration files The F5000 A5 is equipped with a 256 MB built in CF card which is identified with cfa0 In addition the device provides an external CF card slot to extend the local storage space A CF c...

Страница 19: ...RS232 Baud rate 9600 bps to 115200 bps 9600 bps by default Maximum transmission distance 15 m 49 21 ft Services z Connection to an ASCII terminal z Connection to the serial interface of a local PC to...

Страница 20: ...port is faulty the AUX port can be connected to a terminal as a backup port of the console port For details refer to Chapter 8 Troubleshooting 2 Technical specifications Table 1 17 Technical specifica...

Страница 21: ...t port is a 10Base T 100Base TX 1000Base T RJ 45 auto sensing interface It allows you to upgrade software and manage the device through a network management server without using any service interface...

Страница 22: ...is used to reset the current MPU The RUN LED goes off when the MPU is reset flashes fast at 8 Hz when BootWare is running and flashes slowly at 1 Hz after the system is booted and operates normally z...

Страница 23: ...nterface speed and duplex mode of electrical interfaces Interface speed Duplex mode 10 Mbps auto sensing Half full duplex 100 Mbps auto sensing Half full duplex 1000 Mbps auto sensing Full duplex The...

Страница 24: ...erface the electrical Ethernet interface operates in the auto negotiation mode z No matter whether an electrical Ethernet interface operates in the forced or auto negotiation mode it supports automati...

Страница 25: ...J 45 connector Figure 1 10 RJ 45 connector LC connector Optical fiber connectors are indispensable passive components in optical fiber communication system Their application enables the removable conn...

Страница 26: ...Standard cable Also known as straight through cable At both ends of a standard cable wires are crimped in the RJ 45 connectors in the same sequence A straight through cable is used for connecting a t...

Страница 27: ...ed cables preferentially for electromagnetic compatibility Fiber connecting optical Ethernet interfaces You can use a single mode or multimode fiber to connect a 1000 Mbps optical Ethernet interface a...

Страница 28: ...aul multimode Medium haul single mode Long haul single mode Min 7 3 dBm 8 2 dBm 1 dBm Optical transmit power Max 1 08 dBm 0 5 dBm 2 dBm Receiving sensitivity 7 5 dBm 10 3 dBm 11 3 dBm Central waveleng...

Страница 29: ...A5 supports both AC and DC power input You can select an AC power module or a DC power module However never install the two types of power PSUs in the same device The F5000 A5 needs only one PSU for n...

Страница 30: ...ent Solid green The power module is working normally Solid red The power module is faulty Figure 1 14 AC power module 1 2 3 4 5 6 1 Captive screw 2 Bail latch 3 Power socket 4 Power switch 5 Power LED...

Страница 31: ...kes The following port lightning arrester can be installed on the F5000 A5 The specifications for the port lightning arrester are as follows Port protective unit single port maximum discharge current...

Страница 32: ...m discharge current 2 5KA protection voltage 25V SMB 75J SMB 75J 1W 10Mbps z Voltage limiting protection parts signal lightning arrester maximum discharge current 2 5KA protection voltage 25V BNC 75K...

Страница 33: ...Table of Contents 2 Arranging Slots ands Numbering Interfaces 2 1 Slot Arrangement 2 1 Numbering Interfaces 2 1 Examples 2 2 Numbers of interfaces on NSQ1GT8C40 2 2 Numbers of interfaces on NSQ1XP20 2...

Страница 34: ...Except for user interfaces such as the Console port and AUX port interfaces on the F5000 A5 are numbered in the form of interface type X Y where z interface type Type of the interface such as Gigabit...

Страница 35: ...ed in Slot 3 GigabitEthernet interfaces on the LPU are numbered as follows z GigabitEthernet 3 0 z GigabitEthernet 3 1 z GigabitEthernet 3 2 z GigabitEthernet 3 3 z GigabitEthernet 3 4 z GigabitEthern...

Страница 36: ...1 Ventilation Requirements 3 2 Electrostatic Discharge Prevention 3 2 Electromagnetic Interference Prevention 3 4 Lightning Protection 3 4 Cabinet Mounting Requirements 3 5 Safety Precautions 3 5 Saf...

Страница 37: ...3 1 Temperature and humidity requirements in the equipment room Temperature Relative humidity 0 C to 45 C 32 F to 113 F 10 to 95 noncondensing Cleanness Requirements Concentration limit of dust Dust i...

Страница 38: ...pation of the device chassis A ventilation system is available at the installation site Electrostatic Discharge Prevention Generation and damage of static electricity In the communication network to w...

Страница 39: ...c bag Touch only the edges instead of electronic components when observing or moving a removed MPU LPU memory module or CF card Wearing an ESD preventive wrist strap Follow these steps to wear an ESD...

Страница 40: ...ate the protection ground of the device from the grounding device or lightning protection grounding device of the common power supply equipments as far as possible Keep the device far from heavy duty...

Страница 41: ...urdy enough to support the weight of the firewall and installation accessories Make sure that the size of the cabinet is appropriate for the firewall and that there is enough clearance around the left...

Страница 42: ...accessories supplied with the firewall Power cable Console cable PGND cable Mounting brackets Cable management brackets Blank panels ESD preventive wrist strap User supplied tools Philips screwdriver...

Страница 43: ...protection grounding device as far as possible Keep the router far away from heavy duty radio transmitters radar transmitters and high frequency devices Adopt electromagnetic shielding measures when n...

Страница 44: ...3 8 Item Requirements Installation tools Installation accessories supplied with the firewall User supplied tools Reference Documents shipped with the firewall Electronic documents...

Страница 45: ...rt Lightning Arrester Optional 4 6 Tools 4 7 Installation Procedures 4 7 Precautions 4 8 Installing an AC Power Lightning Arrester Lightning Protection Busbar Optional 4 8 Selecting and Installing a S...

Страница 46: ...000 A5 Start Install the firewall to the specified position Connect the PGND cable Connect the power cables Connect the firewall to a configuration terminal Verify the installation Turn on the power s...

Страница 47: ...rewall is to be installed in a rack other than N68 rack Installing Mounting Brackets onto the Firewall Before installing the firewall in a rack you need to install the cable management bracket to the...

Страница 48: ...tall the mounting brackets Figure 4 4 Install mounting brackets to the firewall Install the Firewall in a Rack Follow these steps to install the firewall in a rack Step1 Check the grounding and stabil...

Страница 49: ...onto the rack posts with pan head screws The size of pan head screws should satisfy the installation requirements maximally M6 and the surface of the screws should be anti rust treated Figure 4 5 Ins...

Страница 50: ...nduced current and leakage current to the ground and reduce the electromagnetic susceptibility EMS of the firewall The PGND cable can also protect the firewall against high lightning voltage resulting...

Страница 51: ...Connect the PGND cable to the grounding bar 1 A hex nut 2 PGND cable 3 Naked part of the PGND cable 4 Grounding post 5 Grounding bar z The resistance between the firewall chassis and the ground must...

Страница 52: ...e of the port lightning arrester according to its distance to the grounding screw Fix the grounding cable to the grounding screw of the firewall Step3 Use a multimeter to check the connection between...

Страница 53: ...htning protection busbar at the AC power input end to protect the device against lightning strokes You can use cable ties and screws to fasten the lightning protection busbar on the cabinet the workbe...

Страница 54: ...ting from lightning strokes and other interferences Because the signal lightning arrester is serially connected to a signal cable the signal lightning arrester must satisfy the requirements of network...

Страница 55: ...the grounding terminal refer to PGND Cable Connection on page 4 5 Connecting the AC Power Cord AC power supply Rated voltage range 100 VAC to 240 VAC 50 Hz 60 Hz AC power socket Figure 4 10 illustrate...

Страница 56: ...rd in position Step6 Move the power switch to the ON position Step7 Check the status of the power LED PWR on the front panel of the firewall For the status of the power LED see Table 4 3 Table 4 3 Des...

Страница 57: ...label 6 Heat shrink tube 7 Power cable 600 V UL10455 5 3 mm 2 10AWG blue 45 A 8 Label 2 9 Common terminal conductor cross section 6mm 2 20mm 30 A insertion depth 12 mm black Formula for calculating th...

Страница 58: ...onnecting DC power cables pay attention to the labels on the power cable to avoid incorrect connection Connecting Interface Cables Connecting Console Cable Follow these steps to connect the Console ca...

Страница 59: ...AUX port is usually used for remote configuration or dial backup You need to connect the local modem to the remote modem through PSTN and then to the remote device Follow these steps to connect the AU...

Страница 60: ...ies such as data forwarding With support for automatic MDI MDIX the management Ethernet port and HA port use either a straight through cable or a crossover cable for connection to a configuration term...

Страница 61: ...e on NSQ1GT8C40 and the other end to the Ethernet interface on the peer device Because a 10Base T 100Base TX 1000Base T electrical Ethernet interface supports automatic MDI MDIX it can use either a st...

Страница 62: ...rt an optical transceiver Step3 Identify the Rx and Tx ports on the SFP transceiver module Plug the two LC connectors at one end of the fiber cable into the Rx and Tx ports of the local SFP transceive...

Страница 63: ...9 in z Ensure that the Tx and Rx of the SFP XFP transceiver module are connected correctly z Keep the end faces of optical fiber cables clean z Do not look directly into an open optical Ethernet inter...

Страница 64: ...nnected to other devices such as the configuration terminal It is very important to verify the installation because instability and poor grounding of the firewall and an unmatched power supply will af...

Страница 65: ...n Terminal 5 1 Setting the Parameters for the Configuration Terminal 5 1 Firewall Power on 5 4 Checklist for Firewall Power on 5 4 Powering on the Firewall 5 5 Checklist Operations after Power on 5 5...

Страница 66: ...er 4 Installing the Firewall Setting the Parameters for the Configuration Terminal Step1 Create a HyperTerminal connection Select Start Programs Accessories Communications HyperTerminal and enter a co...

Страница 67: ...Select a port for local configuration connection Step3 Set serial port parameters Figure 5 3 Set serial port parameters Set the properties of the serial port in the COM1 Properties dialog box as show...

Страница 68: ...ng or only illegible characters To use the default settings click Restore Defaults Step4 Click OK after setting the serial port parameters to enter the HyperTerminal window as shown in Figure 5 4 Figu...

Страница 69: ...r source conforms to voltage requirements of the firewall z The console cable is correctly connected The configuration terminal or PC is powered on and the emulation program is properly configured z I...

Страница 70: ...rocess on page 5 5 4 After completing the power on self test POST the system prompts you to press Enter When the command line prompt appears you can proceed to configure the firewall Startup Process A...

Страница 71: ...Enter and the system displays H3C This prompt indicates that the firewall has entered user view and is ready for configuration Configuration Fundamentals In general the configuration steps are as fol...

Страница 72: ...ic tools such as Tracert and Ping for quick diagnosis of network connectivity z Provides all kinds of detailed debugging information to help diagnose network faults z Supports the auto complete functi...

Страница 73: ...ootWare and Applications Using TFTP 6 16 Upgrading an Application Using TFTP on the BootWare Menu 6 17 Upgrading and Backing Up an Application Using TFTP at the CLI 6 20 Upgrading BootWare and Applica...

Страница 74: ...n file with the attribute of M z Backup application file with the attribute of B z Secure application file with the attribute of S These three types of application files are stored in a CF card By def...

Страница 75: ...les are mainly used as follows z When the main configuration file is damaged or lost the backup configuration file is used to load the configuration information This double protection mechanism enhanc...

Страница 76: ...ers z At BootWare boot the names of the configuration files will be displayed but the types will still be displayed as N A z For details about the startup saved configuration cfgfile command refer to...

Страница 77: ...ogram z When a service card is started up it automatically checks the current BootWare version If the BootWare version bound to the Comware application program is different from the current BootWare v...

Страница 78: ...ologies Co Ltd Compiled Date May 06 2008 CPU Type XLR732 CPU L1 Cache 32KB CPU Clock Speed 1000MHz Memory Type DDR2 SDRAM Memory Size 2048MB Memory Speed 533MHz BootWare Size 1536KB Flash Size 4MB cfa...

Страница 79: ...of the operating device z A Storage Device Operation option for you to select the storage device from which you are going to loading the application file Note that z The initial BootWare password is n...

Страница 80: ...description of this submenu refer to BootWare Operation Submenu on page 6 9 8 Clear Super Password Clear the super password The super password is used in user level switching No super password is set...

Страница 81: ...ion file 5 Modify Serial Interface Parameter Modify serial port parameters 0 Exit To Main Menu Return to the main menu Ethernet Submenu Select 3 on the main menu to enter the Ethernet submenu where yo...

Страница 82: ...et Application File type 3 Delete File 0 Exit To Main Menu Enter your choice 0 3 Items on this submenu are described in Table 6 4 Table 6 4 File control submenu Menu item Description 1 Display All Fil...

Страница 83: ...fault Boot Device Configure the default boot device 0 Exit To Main Menu Return to the main menu Upgrading BootWare and Applications Through a Serial Port Introduction to Xmodem Xmodem is used for upgr...

Страница 84: ...Accordingly Baudrate Available 1 9600 Default 2 19200 3 38400 4 57600 5 115200 0 Exit Enter your Choice 0 5 Step2 Select a proper baud rate For example select 5 for a baud rate of 115200 bps and the s...

Страница 85: ...Enter on the console terminal The system displays the current baud rate and returns to the previous menu The system displays The current baudrate is 115200 bps After downloading files with a changed b...

Страница 86: ...tails refer to Modifying Serial Port Parameters on page 6 11 Step2 Select 2 on the serial submenu The system displays Please Start To Transfer File Press Ctrl C To Exit Waiting CCCCCCCCCCCCCCCCCCCC St...

Страница 87: ...tion The system uses the new application file at next system reboot z Enter N and the system displays Cancel to overwrite the file Failed As a result the existing application file is not overwritten a...

Страница 88: ...rial port For the modification of the terminal baud rate refer to Modifying Serial Port Parameters on page 6 11 Step5 After setting the baud rate return to the BootWare operation submenu and select 1...

Страница 89: ...upgraded z The BootWare program is upgraded together with the Comware application You do not need to upgrade the BootWare separately After the Comware is upgraded to the latest version the system aut...

Страница 90: ...BootWare Menu 1 Set up a TFTP upgrading environment Figure 6 9 Set up a TFTP upgrading environment z The firewall serves as the TFTP client and the PC serves as the TFTP server z Connect the manageme...

Страница 91: ...s FTP User Name FTP User Password Table 6 7 Command output description for setting Ethernet port parameters Item Description Clear field Shortcut key is to clear the current input Go to previous field...

Страница 92: ...after the colon press Enter directly z If the Ethernet port parameter CRC appears faulty the system modifies the parameters to the default settings and displays Check net params crc error use the defa...

Страница 93: ...pace To prepare for upgrading application files use the dir command on the terminal to view the files stored in the current file system and the available space of the storage device H3C dir Directory...

Страница 94: ...You can modify a configuration file and then download the modified configuration file to the firewall to finish upgrading the configuration file The modification takes effect after the firewall reboot...

Страница 95: ...of the file is successfully completed Upgrading BootWare and Applications Using FTP If the application file is large you can use FTP to download it for upgrade to reduce maintenance time As an applic...

Страница 96: ...f the management Ethernet port as 192 168 80 10 while that of the PC as 192 168 80 200 z Enable FTP server on the PC and set the path where the application file is stored Set the FTP username and pass...

Страница 97: ...ord 230 User logged in ftp After you log into the server you can update and backup an application file using the CLI Table 6 10 Command output description for logging into the FTP server Field Descrip...

Страница 98: ...ing existing data connection 226 Closing data connection File transfer successful FTP 14092032 byte s sent in 14 400 second s 1722 00Kbyte s sec ftp quit 221 Service closing control connection z When...

Страница 99: ...FTP Client z Connect the management Ethernet interface on the firewall to the PC using a crossover Ethernet cable z Configure the IP addresses of the server and the PC to be on the same network segme...

Страница 100: ...rver are configured The FTP server supports multi client access A remote FTP client sends a request to the FTP server The FTP server executes an action accordingly and returns the execution result to...

Страница 101: ...put main bin main bin 200 Port command okay 150 Opening BINARY mode data connection for main bin 226 Transfer complete z When you upgrade an application file if the file name already exists on the ser...

Страница 102: ...om the firewall to the PC Maintaining Application and Configuration Files You can modify the file type and display files on the file control submenu Select 4 on the main menu to enter the file control...

Страница 103: ...ies Security Products User Manual Setting Application Files Attributes Setting application file attributes on the BootWare menu You can modify the attributes of the application files on the BootWare m...

Страница 104: ...This command will set the boot file of the specified board Continue Y N The specified file will be used as the main boot file at the next reboot Now the attribute of the file main bin has changed from...

Страница 105: ...in this example The following information appears The file you selected is cfa0 startup cfg Delete it Y N Step3 Enter Y If the file is deleted successfully the system displays Deleting Done Deleting...

Страница 106: ...system displays please input old password Step2 Enter the old password please input old password z If the old password is incorrect the system will display Wrong password Please input password again z...

Страница 107: ...t a new password in system view after system reboot H3C system view H3C user interface console 0 H3C ui console0 authentication mode password H3C ui console0 set authentication password simple 123456...

Страница 108: ...System Configuration 7 BootWare Operation Menu 8 Clear Super Password 9 Storage Device Operation 0 Reboot Enter your choice 0 9 8 The system displays the following information indicating that you have...

Страница 109: ...extended segment is finished Both the basic and extended segments of the BootWare are backed up to the Flash Restoring the Entire BootWare Step1 Select 2 on the BootWare operation submenu to overwrit...

Страница 110: ...a Power Module 7 12 Power Module Structure 7 12 Installing a Power Module 7 13 Removing a Power Module 7 13 Installing and Removing a Fan Tray 7 15 Fan Tray Structure 7 15 Installing a Fan Tray 7 15 R...

Страница 111: ...firewall z Always wear an ESD preventive wrist strap or ESD preventive gloves when maintaining the firewall hardware For more information refer to the section talking about electrostatic discharge pre...

Страница 112: ...eight bearing warning label 50 kg 110 2 lb 6 Fan tray 7 AC power module PWR1 8 Blank panel for PoE power module reserved PoE slot 9 Blank panel for DC power module PWR2 10 ESD socket and silkscreen 11...

Страница 113: ...CONSOLE 21 HA port link state LED LINK 22 Data reception transmission LED of the HA port ACT 23 HA port HA 10 100 1000BASE T 24 Ethernet link state of the management Ethernet port LINK 25 Data recepti...

Страница 114: ...wered on the RUN LED green flashes fast 8 Hz It flashes slowly 1 Hz after the MPU application is loaded This means that the MPU runs normally z The MPU of the firewall is not hot swappable z For more...

Страница 115: ...PU z To protect the removed MPU place it in an antistatic bag z If you do not install a new MPU in the slot install the blank panel to prevent dust from entering the chassis For how to install a blank...

Страница 116: ...terface 8 SFP8 18 SFP interface 9 19 SFP interface 8 20 GE interface 9 21 GE interface 8 22 GE interface 7 23 GE interface 6 24 GE interface 5 25 GE interface 4 26 GE interface 3 27 GE interface 2 28...

Страница 117: ...push the LPU into the slot along the slide rails until the positioning pin is seated in the positioning hole on the backplane and then push the ejector levers inward to lock the board in position Fig...

Страница 118: ...the sequence of slot 1 slot 2 slot 3 and slot 4 with RUN LEDs lighting up in turn z For more information of the LPU LEDs refer to Chapter 1 Firewall Overview Removing an LPU Follow these steps to rem...

Страница 119: ...e chassis For how to install a blank panel refer to Installing and Removing a Blank Panel on page 7 9 Installing and Removing a Blank Panel Blank Panel Structure Installed in empty slots on the device...

Страница 120: ...MI gasket The MPU and LPU slots use the same type of blank panels Figure 7 14 Blank panel for a power module slot 1 Front view 2 Side view 3 Oblique rear view 4 EMI gasket Removing a Blank Panel The b...

Страница 121: ...lank panels in all the empty slots to ensure the normal ventilation in the firewall Installing a Blank Panel After an LPU is removed from the firewall it is recommended to install a blank panel if you...

Страница 122: ...odule The device supports both AC and DC power modules This section describes how to install and remove an AC power module Power Module Structure Figure 7 17 AC power module 1 Captive screw 2 Bail lat...

Страница 123: ...clockwise with a Philips screwdriver Figure 7 20 Fasten the captive screws Step4 Turn on the power switch of the firewall if the firewall is powered off The power LED green lights up indicating the p...

Страница 124: ...7 21 Loosen the captive screws Step3 Gently pull the power module out along the slide rails Figure 7 22 Pull out the power module z To protect the removed power module place it in an antistatic bag z...

Страница 125: ...screw Installing a Fan Tray Follow these steps to install a fan tray Step1 Face the front panel of the firewall Step2 Make sure that the texts on the fan tray panel are not upside down otherwise the f...

Страница 126: ...ans run normally z The device supports automatic fan speed adjustment z For the description of the fan tray LEDs refer to Chapter 1 Firewall Overview Removing a Fan Tray Keep your hands away from the...

Страница 127: ...fan tray out along the slide rails Figure 7 27 Take out the fan tray z Do not keep the firewall working without a fan tray for a long time because poor ventilation may result in damage to the firewall...

Страница 128: ...ep3 Insert the CF card into the slot and push it all the way in until it is firmly seated Figure 7 29 Insert a CF card into the slot If the application program for booting the firewall is stored in an...

Страница 129: ...to avoid hardware damage z To protect the removed CF card place it in an antistatic bag Installing and Removing a Memory Module z The MPU and LPUs of the firewall are equipped with memory modules z B...

Страница 130: ...ngzhou H3C Technologies Co Ltd only Otherwise anomalies might occur to the device z For specific specifications of memory modules supported by the device refer to the section talking about memory modu...

Страница 131: ...t 3 Right release latch Removing a Memory Module Follow these steps to remove a memory module Step1 Locate the card MPU or LPU to which you will install a memory module and put the card on a flat work...

Страница 132: ...Installing a Memory Module Follow these steps to install a memory module Step1 Locate the card MPU or LPU to which you will install a memory module and put the card on a flat worktable Step2 Align th...

Страница 133: ...s to install an air filter Step1 Face the left side of the chassis where the air filter is to be installed Step2 Position the upper slide rail horizontally near the top of the left side of the chassis...

Страница 134: ...air filter slide rails Step6 Gently push the air filter along the slide rails until it is seated in position Figure 7 38 Insert the air filter Step7 Fasten the captive screws by turning them clockwis...

Страница 135: ...installation procedure Step1 Face the left side of the chassis where the air filter is to be removed Step2 Loosen the captive screws one by one by turning them counterclockwise with a Philips screwdr...

Страница 136: ...41 Pull out the air filter z Keep the removed air filter and fastening screws in a safe place for future use z You can clean the air filter with water but wait until it is completely dry before instal...

Страница 137: ...8 4 Troubleshooting the Configuration System 8 4 No Display on the Terminal Screen 8 4 Illegible Characters on the Terminal Screen 8 4 Serial Port Response Failure 8 5 Using the AUX Port as Backup Con...

Страница 138: ...0 z The power supply of the firewall is operating properly The power LED is green when the power supply works normally If the cause cannot be located in the steps above and the problem persists contac...

Страница 139: ...rewall is powered off or the LPU is faulty Solution Check that z The firewall is powered on z The LPU is properly inserted into an LPU slot slot 1 through slot 4 If the LPU is faulty the following pro...

Страница 140: ...he power LED on the front panel is red Solution Check that z The power module is firmly in place z The power source meets the requirement of the firewall If the cause cannot be located in the steps ab...

Страница 141: ...If the configuration system is faulty the terminal screen may display nothing or illegible characters No Display on the Terminal Screen Symptom After the firewall is powered on the configuration term...

Страница 142: ...arameters in Chapter 6 Maintaining Software Using the AUX Port as Backup Console Port When the console port is faulty you can use the AUX port as the backup console port to complete firewall configura...

Страница 143: ...down below 75 C 167 F the following information appears on the configuration terminal screen May 14 22 25 17 804 2000 H3C DRVMSG 3 TempHOK Environment temperature recovered from OT in Slot 0 index is...

Страница 144: ...ion talking about modifying serial interface parameters in Chapter 6 Maintaining Software Troubleshooting TFTP Upgrading Symptom During application file upgrading through TFTP the following problems a...

Страница 145: ...8 1 10 10 204 150 xxx file ready to send xxx bytes in ASCII mode FTP Error Writing Local File Screen z Symptom 2 The file to be downloaded is not found The following information appears 227 Entering P...

Страница 146: ...not exist cfa0 main bin Starting to get the backup application file cfa0 backup bin The backup application file does not exist cfa0 backup bin Starting to get the secure application file cfa0 secure...

Страница 147: ...3 FDA A 4 California Code of Regulations A 4 Canada regulatory compliance A 4 ICES 003 A 4 Japan regulatory compliance A 4 VCCI A 4 CISPR 22 compliance A 4 Appendix B Safety Information Sicherheits in...

Страница 148: ...22 CLASS A EN 55022 CLASS A AS NZS CISPR22 CLASS A CISPR 24 EN 55024 EN 61000 3 2 EN 61000 3 3 EN 61000 6 1 ETSI EN 300 386 EN 301 489 1 Safety UL 60950 1 CAN CSA C22 2 No 60950 1 IEC 60950 1 EN 6095...

Страница 149: ...5 CE Greek H3C Corporation Router 1999 5 Fran ais French Par la pr sente H3C Corporation d clare que l appareil Router est conforme aux exigences essentielles et aux autres dispositions pertinentes d...

Страница 150: ...sem ger ar eru tilskipun 1999 5 EC Norsk Norwegian H3C Corporation erkl rer herved at utstyret Router er i samsvar med de grunnleggende krav og vrige relevante krav i direktiv 1999 5 EF A copy of the...

Страница 151: ...21 CFR Subchapter J California Code of Regulations California Code of Regulations Title 22 Chapter 33 Best Management Practices for Perchlorate Materials Canada regulatory compliance ICES 003 This Cla...

Страница 152: ...r all safety precautions that should be followed They are only the supplements to the safety precautions for operations as a whole Therefore the personnel in charge of the installation and maintenance...

Страница 153: ...den nationalen Sicherheitsvorschriften W hrend der Arbeit mit den Produkten sind deshalb grunds tzlich alle Sicherheitsvorschriften und spezifischen Sicherheitshinweise genau zu beachten Das f r die...

Страница 154: ...Lesen Sie alle Anweisungen sorgf ltig durch bevor Sie mit dem Arbeiten beginnen z z Das System muss in einem Raum installiert werden der unbefugten Personen keinen Zutritt gestattet z z Beachten Sie...

Страница 155: ...nd Wechselstromversorgung kann zu t dlichen Unf llen f hren AC z During the installation of AC power supply facility the local safety regulations must be followed The personnel who install the AC faci...

Страница 156: ...ltage operations should be qualified for high voltage and AC operations Die Nichtbeachtung der Sicherheitsvorschriften bei der Arbeit mit Hochspannung kann zu Feuer und elektrischem Schlag f hren Desh...

Страница 157: ...fore the power cable is connected it must be confirmed that the power cable and label comply with the requirements of the actual installation z berpr fen Sie vor dem Anbringen der Zuleitung immer ob d...

Страница 158: ...ted In order to prevent the equipment from being damaged by lightning proper grounding is required Arbeiten mit Hochspannung und Wechselstrom oder Arbeiten auf Stahlt rmen und masten w hrend eines Gew...

Отзывы: