H3C H3C SecPath F1800-A User manual

Installation Manual
H3C SecPath F1800-A Firewall Table of Contents
i
Table of Contents
Chapter 3 Installation....................................................................................................................3-1
3.1 Installation Flow.................................................................................................................3-1
3.2 Mounting a SecPath to a Specified Place .........................................................................3-2
3.2.1 Mounting a SecPath into the Rack..........................................................................3-2
3.2.2 Mounting a SecPath onto the Workbench ..............................................................3-3
3.3 Connecting the PGND.......................................................................................................3-4
3.4 Connecting Power Cable...................................................................................................3-5
3.4.1 Connecting AC Power Cable ..................................................................................3-5
3.4.2 Connecting DC Input Power Cable.........................................................................3-6
3.5 Connecting the Console Terminal .....................................................................................3-7
3.6 Connecting the SecPath to a LAN..................................................................................... 3-9
3.7 Connecting the SecPath to a WAN..................................................................................3-10
3.8 Installation Verification.....................................................................................................3-12

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-1
Chapter 3 Installation
3.1 Installation Flow
Start
Mountthe cabinet(optional)
Mountthe equipmentto the
specified location
Connectthe PGND wire
Connectthe power cord
Connectthe equipmentto
the console terminal
Install interface module
Connectthe equipmentto
the Ethernet
Connectthe equipmentthe
the WAN
Verifyinstallation
Poweron the equipment
Normal?
Yes
Fnd
No Turn off the power switch
Trouble shooting
Figure 3-1 Installation flow

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-2
Caution:
Before installing a SecPath, make sure that:
zYou have read Chapter 2 carefully.
zWhat described in Chapter 2 has been met.
3.2 Mounting a SecPath to a Specified Place
3.2.1 Mounting a SecPath into the Rack
 Note:
The SecPath can be mounted in N68 cabinet provided by Huawei-3Com.
For N68 cabinet installation in detail, refer to “N68 Cabinet Installation”.
The SecPath is designed to fit the 19-inch standard rack.
Its dimensions are 436.2 mm (Width) ×420 mm (Depth) ×130.5 mm (Height).
Its weight is 20 kg with full configuration.
Follow the steps below to mount a SecPath.
Step 1: Make confirmation before mounting.
Ensure the rack has been well fixed. The installation position for the SecPath has
been well arranged and there is no obstacle inside the rack or around.
Ensure the equipment is ready for installation and has been placed near the rack,
where the equipment can be moved easily.
Step 2: Install chassis brackets.
Fix the brackets to both sides of the chassis with M3 screw by a cross screwdriver and
remove cable holder on brackets, as shown in Figure 3-2.

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-3
Figure 3-2 Installing the brackets
Step 3: Mount the equipment to the rack.
1) Lift the SecPath a little higher than the shelf or guides in the rack;
2) Put the SecPath on the shelf or guides;
3) Push it into the rack.
Step 4: Fix the equipment to the rack.
Fix the equipment to the rack with M3 screw through brackets, as shown in Figure 3-3.
1
2
3
4
5
1. rack 2. Mounting brackets (without cabling racks) 3. Mounting screws
4. SecPath1000 5. Guides
Figure 3-3 Installing the SecPath into a rack
3.2.2 Mounting a SecPath onto the Workbench
In most cases, the SecPath is often placed on a clean bench. This mounting method
is simple.

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-4
You should ensure:
zKeep the workbench stable and the PGND cable is well grounded.
zLeave the at least 10 cm space around the chassis for heat dissipation.
zDo not put heavy objects on the chassis.
3.3 Connecting the PGND
Warning:
The proper connection of the PGND wire is the essential safeguard against:
zLightning shocks
zInterference
Therefore, you must first correctly connect the PGND wire when installing and using
the SecPath; otherwise, the SecPath and the peer equipment may be damaged.
The SecPath provides a separate PGND screw. You must properly connect the PGND
to the ground. In this way, you can ensure the faradism and leakage power to be
channeled into the earth ground. As a result, the anti-EMI capability of the entire
SecPath can be improved.
The PGND also provides protection against the high voltage of lightning shocks
caused by external network lines like E1/T1 line and ISDN/PSTN line.
The PGND screw is located at top right rear of the chassis and identified by a
grounding mark “ ”, as shown in Figure 3-4.
1. Grounding screw
Figure 3-4 PGND grounding screw

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-5
Connect the ground screw to the grounding bar using a PGND cable. It is required
that a grounding resistance should be less than 5 ohm. If you install the SecPath in a
19-inch standard rack, you must also ground the rack.
3.4 Connecting Power Cable
The SecPath supports:
zAC input power supply module
zDC input power supply module
You can choose one from them as needed. Both of them are the same in terms of
features and functions, except for the PWR type.
3.4.1 Connecting AC Power Cable
I. AC Input Power Supply
AC power input range: 90 to 264VAC, 50/60Hz.
Figure 3-5 showsAC input power socket.
1. Cable-retention clip 2. AC input
3. Power switch
Figure 3-5 Partial appearance of AC power socket
II. Recommended AC Power Socket
You should use a 3-line single-phase power socket with a grounding terminal, which
should be reliably connected to the ground in the building.
Normally, the grounding terminal of the power supply system in a building was buried
in the ground during theconstruction and cabling. You must make sure that the power

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-6
supply for the building has been well grounded before connecting the AC power
cable.
III. Connecting AC Power Cable
Step 1: Check that the PGND wire has been properly connected to the ground.
Step 2: Make sure that the power switch is in the OFF position. Insert one end of the
power cable into the power socket on the rear panel, and fix the cable onto the
cable-retention clip with a cable strap. Connect the other end of the cable to the AC
power socket.
Step 3: Place the power switch to the ON position.
Step 4: Check that the power LED on the front panel is ON, which means the power
cable is correctly connected.
3.4.2 Connecting DC Input Power Cable
I. DC Input Power Supply
DC power input range: -36 to -72V DC.
Figure 3-6 shows the DC input power socket.
12
1. Power switch 2. DC input
Figure 3-6 Partial appearance of DC power socket
II. Connecting DC Power Cable
Figure 3-7 DC power cable

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-7
Table 3-1 DC power cable pinouts
-48 power supply side SecPath side
X2 (blue -48V lead) X1.A1
X3 (black BGND lead) X1.A3
Step 1: Check that the PGND wire has been properly connected to the ground.
Step 2: Make sure that the power switch is in the OFF position. Connect one end of
the DC power cable to the power socket on the rear panel of the equipment chassis
and the other end to the –48V DC power supply.
Warning:
Read the label on the cable carefully before connecting the DC power cable. Thus,
you will not make mistakes.
Step 3: Place the power switch to the ON position.
Step 4: Check that the POWER LEDon the front panel is ON, which means the power
cable is correctly connected.
3.5 Connecting the Console Terminal
The SecPath provides an EIA/TIA-232 asynchronous serial console interface,
through which you can configure the SecPath.
For the console interface attributes, refer to Section 1.4.
I. Console Cable
The console cable is an 8-core shielded cable.
At one end of the cable is a crimped RJ-45 connector that is to be plugged into the
console interface of the SecPath; at the other end of the cable are a DB-9 (female)
connector and a DB-25 (female) connector.
You can plug either of them into the serial port on the console terminal as needed.
Figure 3-8 shows the console cable.

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-8
Figure 3-8 Console cable
For the pinouts of the console cable, refer to “AppendixA.1”.
II. Connecting Console Cable
Before you configure the SecPath at the console terminal, connect the console cable
in the following steps:
Step 1: Select a console terminal.
The console terminal can be:
zStandard ASCII terminal fit with an RS-232 serial port
zRegular PC
The latter is often used.
Step 2: Connect the cable.
1) Power off the SecPath and the console terminal;
2) Connect the RS-232 serial port to the console interface on the RPU through a
console cable.
Power on the SecPath after checking the installation; if the SecPath is working
normally, the system will display the equipment boot information on the console
terminal.
For details, refer to Section 1.4.3.

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-9
3.6 Connecting the SecPath to a LAN
I. Introduction to the Ethernet Interface
The SecPath provides the fixed 10/100Base-TX FE interface.
For its attributes in detail, refer to the section “1.4.1 RPU".
II. Ethernet Cable
The 10/100Base-TX Ethernet interface usually adopts the category 5 twisted-pair for
connection, as shown in Figure 3-9.
Figure 3-9 Ethernet cable
Ethernet cables fall into two categories:
zStraight-through cable
The wire sequences of the twisted pairs crimped in the RJ-45 connectors at both ends
are the same. It is used to connect a terminal device, such as PC and the SecPath to
a hub or LAN switch. The cables delivered with the equipment are straight-through
cables.
zCrossover cable
The wire sequences of the twisted pairs crimped in the RJ-45 connectors at both ends
are different. It is used to connect two terminal devices, such as PC and the SecPath.
Users can make it as needed.
For the pinouts of the cables and the making procedures, refer to “AppendixA”.
Note:
zThe standard equipping package of the SecPath has included the interface cables
for the fixed Ethernet interfaces.
zWhen preparing network cables, use shielded twisted-pair (STP) cables. In this
way, they are available for the sake of electromagnetic compatibility.

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-10
III. Connecting Ethernet Cable
Caution:
zYou must connect a cable to the interface with the correct mark. Do not insert it
into other interfaces by mistake.
zWhen connecting a LAN switch, insert the cable to the 10/100BASE-TX port
identified by MDIX.
Follow these steps to connect an Ethernet cable. For example, connect the fixed LAN
interface.
Step 1: Choose the Ethernet cable.
zUse a crossover cable to connect the SecPath to a PC or a SecPath.
zUse a straight-through cable to connect the SecPath to a hub or LAN switch.
Step 2: Connect one end of the Ethernet cable to the fixed LAN interface of the
SecPath.
Step 3: If the network cable is a straight-through cable, connect the other end of it to
the Ethernet interface of a hub or a LAN switch.
3.7 Connecting the SecPath to a WAN
The SecPath provides various WAN interfaces and the fixed one is the AUX interface.
Following describes the connection of the AUX interface.
For the connection of the WAN interface on an interface module, refer to “Chapter 7
Interface Modules”.
I. Introduction to the AUX Interface
The AUX interface is an EIA/TIA-232-compliant asynchronous serial interface that
can provide backup for a WAN interface. Usually, it is used to provide dial connection.
If the console interface fails, theAUX interface can serve as a console interface.
For the AUX interface attributes, refer to the section 1.4.
II. AUX Cable
The AUX cable is an 8-core shielded cable.

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-11
At one end of the cable is an RJ-45 connector that can be plugged into the AUX
interface of the SecPath; at the other endare DB-9 (male) connector and DB-25 (male)
connector.
You can plug either of them into the serial port of Modem as needed.
Figure 3-10 shows the AUX cable.
Figure 3-10 AUX cable
For the pinouts of AUX cable, refer to “AppendixA”.
III. Connecting the AUX Cable
Follow steps below to connect theAUX cable.
Step 1: Insert the RJ-45 connector of the AUX cable into the AUX interface of the
SecPath.
Step 2: Insert the DB-25 or DB-9connector of the AUX cable into the serial port of the
analog Modem.
The AUX interface is usually used for remote configuration through dial-up. In this
case, you need to connect the local Modem to the remote Modem through PSTN and
then to the remote equipment.
For the typical networking diagram and configuration procedure, refer to H3C
SecPath F1800-A Firewall Operation Manual.

Installation Manual
H3C SecPath F1800-A Firewall Chapter 3 Installation
3-12
3.8 Installation Verification
During installing the equipment, you must check the installation each time you power
on the SecPath, making sure that:
zThere is enough space around the cabinet for heat dissipation;
zThe cabinet is stable enough;
zThe correct power supply is used;
zThe PGND wire of the SecPath is connected properly;
zThe connections with other devices, such as the console terminal, are correct.
Note:
This step is critical, since the factors, such as whether the chassis, grounding, power
supply are properly located, all affect the normal working status of the SecPath.