H3C SecPath F100-C-A-W User manual

H3C SecPath F100-C-A-W Firewalls
Installation Guide
New H3C Technologies Co., Ltd.
http://www.h3c.com
Document version: 6W101-20200713

Copyright © 2020 New H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this
document are the property of their respective owners.
Notice
The information in this document is subject to change without notice. All contents in this document, including
statements, information, and recommendations, are believed to be accurate, but they are presented without
warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions
contained herein.
Environmental protection
This product has been designed to comply with the environmental protection requirements. The storage, use,
and disposal of this product must meet the applicable national laws and regulations.

Preface
The installation guide describes preparing for installation, installing the firewall, logging in to the
firewall, hardware management and maintenance, and troubleshooting.
This preface includes the following topics about the documentation:
•
Audience.
•
Conventions.
•
Documentation feedback.
Audience
This documentation is intended for:
•
Network planners.
•
Field technical support and servicing engineers.
•
Network administrators working with the firewall.
Conventions
The following information describes the conventions used in the documentation.
Command conventions
Convention
Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select a minimum of one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntaxchoices separated byvertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window opens; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.

Symbols
Convention
Description
WARNING! An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION:
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT:
An alert that calls attention to essential information.
NOTE:
An alert that contains additional or supplementary information.
TIP:
An alert that provides helpful information.
Network topology icons
Convention
Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Represents a wireless terminator unit.
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
T
T
T
T

Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.

i
Contents
Preparing for installation················································································1
Safety recommendations ···································································································································1
Safety symbols···········································································································································1
General safety recommendations··············································································································1
Electrical safety··········································································································································2
Handling safety ··········································································································································2
Examining the installation site····························································································································2
Weight support···········································································································································2
Temperature and humidity·························································································································3
Cleanliness·················································································································································3
Cooling system···········································································································································3
ESD prevention··········································································································································4
EMI·····························································································································································4
Lightning protection····································································································································5
Power supply··············································································································································5
Installation tools ·················································································································································5
Installation accessories······································································································································6
Pre-installation checklist·····································································································································6
Installing the firewall ······················································································8
Mounting the firewall on a workbench················································································································9
Installing the firewall in a standard 19-inch rack ································································································9
Mount the firewall on a wall······························································································································11
Grounding the firewall······································································································································12
Grounding the firewall with a grounding strip···························································································12
Grounding the firewall with the grounding terminal on the rack·······························································13
Installing optional components·························································································································14
(Optional) Installing a SIM card················································································································14
(Optional) Installing a lightning arrester for a network port ······································································14
(Optional) Installing a lightning arrester for an AC power module····························································15
Installing a Wi-Fi antenna·································································································································15
Installing a 4G antenna····································································································································15
Connecting Ethernet cables·····························································································································16
Connecting an AC power cord·························································································································17
Verifying the installation···································································································································17
Accessing the firewall··················································································18
Setting up the configuration environment and configuring terminal parameters··············································18
Starting the firewall···········································································································································18
Pre-start checking····································································································································18
Starting the firewall and observing the initial startup conditions·······························································18
Logging in to the firewall ··································································································································19
Logging in from the Web interface···········································································································20
Logging in from the console port··············································································································20
Logging in through Telnet ························································································································20
Hardware management and maintenance···················································21
Displaying detailed information about the firewall····························································································21
Displaying the software and hardware version information of the firewall ·······················································21
Displaying the electrical label information of the firewall··················································································22
Displaying the CPU usage of the firewall·········································································································22
Displaying the memory usage of the firewall····································································································23
Displaying the operational status of the power module ···················································································23
Displaying the operational statistics of the firewall···························································································24
Rebooting the firewall·······································································································································25

ii
Troubleshooting···························································································26
Power failure····················································································································································26
Configuration terminal display issue ················································································································26
Password loss··················································································································································26
Software loading failure····································································································································27
Appendix A Chassis views and technical specifications·······························28
Chassis views··················································································································································28
F100-C-A3-W/F100-C-A5-W····················································································································28
F100-C-A6-WL·········································································································································29
Technical specifications···································································································································30
Dimensions and weights··························································································································30
Storage media··········································································································································30
Power consumption··································································································································30
Power specifications ································································································································30
Port specifications····································································································································30
Appendix B LEDs·························································································33
Appendix C Cables······················································································35
Console cable ··················································································································································35
Ethernet twisted pair cable·······························································································································35
Introduction ··············································································································································35
Making an Ethernet twisted pair cable·····································································································38

1
Preparing for installation
The H3C SecPath F100-C-A-W firewall series include the following models:
•
F100-C-A3-W
•
F100-C-A5-W
•
F100-C-A6-WL
Safety recommendations
To avoid any equipment damage or bodily injury, read the following safety recommendations before
installation. Note that the recommendations do not cover every possible hazardous condition.
Safety symbols
When reading this document, note the following symbols:
WARNING means an alert that calls attention to important information that if not understood or
followed can result in personal injury.
CAUTION means an alert that calls attention to important information that if not understood or
followed can result in data loss, data corruption, or damage to hardware or software.
General safety recommendations
•
Make sure the installation position is flat, vibration-free, and away from electromagnetic
interferences. ESD and anti-slip measures are in place.
•
Do not place the firewall on an unstable case or desk. The firewall might be severely damaged
in case of a fall.
•
Keep the chassis and installation tools away from walk areas.
•
Keep the chassis clean and dust-free.
•
Do not place the firewall near water or in a damp environment. Prevent water or moisture from
entering the firewall chassis.
•
Pay attention to the safety symbols on the package and handle the device accordingly.
Figure1-1 Packing symbols
Symbol
Description
The devices shall not be vertically stacked beyond the specified
number.
Place the device with the arrows up.
The device is fragile. Handle it with care.

2
Symbol
Description
Keep the device from humidity, rains, and wet floor.
•
When stacking devices, place the heavier and larger ones at the bottom. Make sure the devices
are stacked evenly.
•
Ensure good ventilation of the equipment room and keep the air inlet and outlet vents of the
firewall free of obstruction.
•
Make sure the operating voltage is in the required range.
•
Use a screwdriver, rather than your fingers, to fasten screws.
•
Take away the packaging materials and installation tools after installation.
Electrical safety
•
Carefully examine your work area for possible hazards such as moist floors, ungrounded power
extension cables, and missing safety grounds.
•
Locate the emergency power-off switch in the room before installation. Shut power off at once in
case accident occurs.
•
Do not work alone when the firewall has power.
•
Always verify that the power has been disconnected when you perform operations that require
the device to be powered off.
Handling safety
When you move the firewall, follow these guidelines:
•
Move and unpack the firewall carefully to avoid firewall damage.
•
Unpack the firewall at least half an hour and power on the firewall at least two hours after you
move it from a place below 0°C (32°F) to the equipment room. This prevents condensation and
even damage to the firewall.
•
Before you move the firewall, remove all cables and mounting brackets.
•
For long-distance transportation, remove all removable components, such as 4G modules and
4G antennas, and package them separately, and install the filler panels supplied with the
firewall. For short-distance transportation, make sure all removable components are securely
seated in the slots and the screws are fastened.
•
When you move or lift the firewall chassis, support the bottom of the chassis, rather than
holding any removable component.
•
Make sure the accessories of the firewall are not lost or damaged during firewall moving.
Examining the installation site
The firewall can only be used indoors. To make sure the firewall operates correctly and to prolong its
service lifetime, the installation site must meet the following requirements.
Weight support
Make sure the floor can support the total weight of the chassis and accessories. For the chassis
weight, see "Dimensions and weights."

3
Temperature and humidity
Maintain appropriate temperature and humidity in the equipment room.
•
Lasting high relative humidity can cause poor insulation, electricity leakage, mechanical
property change of materials, and metal corrosion.
•
Lasting low relative humidity can cause washer contraction and ESD and bring problems
including loose captive screws and circuit failure.
•
High temperature can accelerate the aging of insulation materials and significantly lower the
reliability and lifespan of the firewall.
For the temperature and humidity requirements of the firewall, see Table1-1.
Table1-1 Temperature/humidity requirements
Item
Specification
Ambient temperature •Operating: 0°C to 45°C (32°F to 113°F)
•Storage: –40°C to +70°C (–40°F to +158°F)
Ambient humidity 5% RH to 95% RH, noncondensing
Cleanliness
Dust buildup on the chassis might result in electrostatic adsorption, which causes poor contact of
metal components and contact points, especially when indoor relative humidity is low. In the worst
case, electrostatic adsorption can cause communication failure.
Table1-2 Dust concentration limit in the equipment room
Substance
Concentration limit (particles/m
3
)
Dust particles ≤ 3 × 104(No visible dust on desk in three days)
NOTE:
Dust particle diameter ≥ 5 µm
The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion
and premature aging of components, as shown in Table1-3.
Table1-3 Harmful gas limits in an equipment room
Gas
Max. (mg/m
3
)
SO20.2
H2S 0.006
NH30.05
Cl20.01
NO20.04
Cooling system
The firewall uses natural cooling. For adequate cooling of the firewall, follow these guidelines:
•
Reserve a minimum clearance of 100 mm (3.94 in) around the outlet air vents.
•
Make sure the installation site has a good cooling system.

4
ESD prevention
ESD prevention guidelines
To prevent electrostatic discharge (ESD), follow these guidelines:
•
Make sure the firewall, the workbench, and the rack are reliably grounded.
•
Take dust-proof measures for the equipment room. For more information, see "Cleanliness."
•
Maintain the humidity and temperature at an acceptable level. For more information, see
"Temperature and humidity."
•
Wear ESD clothing and an ESD wrist strap or ESD gloves and remove any conductive objects
before your operation with the firewall.
Wearing an ESD wrist strap
No ESD wrist strap is provided with the firewall. Purchase one yourself.
Before you attach an ESD wrist strap, make sure the rack or the workbench is reliably grounded.
To attach the ESD wrist strap:
1. Wear the wrist strap on your wrist.
2. Lock the wrist strap tight around your wrist to keep good contact with the skin.
3. Secure the wrist strap lock and the alligator clip lock together.
4. Attach the alligator clip to the rack or the workbench.
Figure1-2 Attaching an ESD wrist strap
(1) ESD wrist strap
(2) Lock
(3) Alligator clip
EMI
All electromagnetic interference (EMI) sources, from outside or inside of the firewall and application
system, adversely affect the firewall in the following ways:
•
A conduction pattern of capacitance coupling.
•
Inductance coupling.
•
Electromagnetic wave radiation.
•
Common impedance (including the grounding system) coupling.
12
3

5
To prevent EMI, use the following guidelines:
•
If AC power is used, use a single-phase three-wire power receptacle with protection earth (PE)
to filter interference from the power grid.
•
Keep the firewall far away from radio transmitting stations, radar stations, and high-frequency
devices.
•
Use electromagnetic shielding, for example, shielded interface cables, when necessary.
Lightning protection
To protect the firewall from lightning better, follow these guidelines:
•
Make sure the grounding cable of the chassis is reliably grounded.
•
Make sure the grounding terminal of the AC power receptacle is reliably grounded.
•
Install a lightning arrester at the input end of the power module to enhance the lightning
protection capability of the power module.
•
To prevent signal ports from getting damaged by overvoltage or overcurrent caused by lightning
strikes, route interface cables only indoors. If part of the network cable of an Ethernet port must
be routed outdoors, connect a lightning arrester to the cable before you plug the cable into the
port.
Power supply
Verify that the power system at the installation site meets the firewall power requirements, including
the power input method and rated input voltage. For more information, see "Appendix A Chassis
views and technical specifications."
Installation tools
No installation tools are provided with the firewall. Prepare them yourself as required.
Table1-4 Installation tools
Flat-head
screwdriver Phillips screwdriver Needle-nose pliers Marker Rubber hammer
Diagonal pliers ESD wrist strap Wire stripper Crimping tool Hammer drill

6
Installation accessories
Table1-5 Installation accessories
Mounting bracket M4 mounting bracket
screw M6 rack screw (user supplied) Rubber feet
Cage nut (user supplied) Grounding cable Power cord retainer clip Screw anchor and
screw
Console cable Power cord F100-C-A6-WL 4G
antenna Wi-Fi antenna
Pre-installation checklist
Table1-6 Pre-installation checklist
Item
Requirements
Result
Installation
site
Ventilation
•There is a minimum clearance of 100 mm (3.94 in)
around the inlet and outlet air vents for heat
dissipation of the firewall chassis.
•A good ventilation system is available at the
installation site.
Ambient
temperature
•Operating: 0°C to 45°C (32°F to 113°F)
•Storage: –40°C to +70°C (–40°F to +158°F)
Ambient humidity 5% RH to 95% RH, noncondensing
Cleanness •Dust concentration ≤ 3 × 10
4
particles/m
3
•No dust on desk within three days
ESD prevention
•The equipment, workbench, and rack are reliably
grounded.
•The equipment room is dust-proof.
•The humidity and temperature are at an acceptable
level.
•Wear an ESD wrist strap and make sure it makes
good skin contact and is reliably grounded when
installing removable components.
EMI prevention
•
Take effective measures to protect the power system
from the power grid system.
•Separate the protection ground of the firewall from
the grounding device or lightning protection
grounding device as far as possible.

7
Item
Requirements
Result
•Keep the firewall far away from radio stations, radar
and high-frequency devices working in high current.
•Use electromagnetic shielding when necessary.
Lightning
protection
•The grounding cable of the chassis is reliably
grounded.
•The grounding terminal of theAC power receptacle is
reliably grounded.
•(Optional.) A power lightning arrester is installed.
Power supply Verify that the power system at the installation site meets the firewall power requirements, including the power input
method and rated input voltage.
Rack-mounting
requirements
•Make sure the cabinet is equipped with a good
ventilation system.
•The rack is sturdy enough to support the weight of the
firewall and installation accessories.
•The size of the rack is appropriate for the firewall.
•The front and rearof the rack are a minimum of 0.8 m
(31.50 in) away from walls or other devices.
Safety
precautions
•The firewall is far away from any moist area and heat source.
•The emergency power switch in the equipment room is located.
Tools and
accessories
•Installation accessories supplied with the firewall
•User-supplied tools
Reference •Documents shipped with the firewall
•Online documents

8
Installing the firewall
WARNING!
Keep the tamper
-
proof seal on a mounting screw on the chassis cover intact, and if you want to open
the chassis, contact H3C for permission. Otherwise, H3C shall not be liable for any consequence.
The installation procedure is the same for the H3C SecPath F100-C-A-W series firewalls. This
document uses the F100-C-A6-WL firewall as an example.
Figure1-3 Firewall installation flow
Determine the
installation position
Mount the firewall on
a workbench Mount the firewall in
a 19-inch rack
Ground the firewall
Install Wi-Fi antennas
Connect Ethernet cables
Connect the power cord
Verify the installation
Install optional components
End
Mount the firewall on a
wall
Start
Install 4G antennas

9
Mounting the firewall on a workbench
IMPORTANT:
•
Ensure good ventilation and a minimum clearance of 100 mm (3.94 in) around the chassis for
heat dissipation.
•Avoid placing heavy objects on the firewall.
If a standard 19-inch rack is not available, you can place the firewall on a workbench.
To mount the firewall on a workbench:
1. Verify that the workbench is sturdy and reliably grounded.
2. Place the firewall upside down on the workbench and clean the four round holes in the chassis
bottom with a dry cloth.
3. Attach the four rubber feet to the round holes in the chassis bottom.
4. Place the firewall with upside up on the workbench.
Figure1-4 Mounting the firewall on a workbench
Installing the firewall in a standard 19-inch rack
WARNING
!
To avoid bodily injury and device damage, use a minimum of two persons to rack-mount the firewall.
CAUTION:
For adequate heat dissipation, ensure
a distance of 1U (44.45 mm, or 1.75 in) between the
chassis
and other devices in the rack.
To install the firewall in a standard 19-inch rack:
1. Unpack the firewall and accessories.
2. Mark the cage nut installation positions on the front rack posts by using the mounting brackets.

10
3. Install cage nuts.
Figure1-5 Installing cage nuts
4. Use the provided M4 mounting bracket screws to secure the mounting brackets to both sides of
the firewall.
Figure1-6 Securing mounting brackets to the firewall
5. Mount the firewall in the rack. Use M6 rack screws to secure the mounting brackets to the front
rack posts.
1
2
3

11
Figure1-7 Mounting the firewall in the rack
Mount the firewall on a wall
1. Unpack the firewall and accessories.
2. Mark two installation holes spaced 102 mm (4.02 in) apart on the wall.
3. Drill holes with a diameter of 6 mm (0.24 in) and a depth of 22 mm (0.87 in) at the marked
locations.
4. Hammer a screw anchor into each hole and drive a screw into each screw anchor, leaving 1.5
mm (0.06 in) of the screw exposed to hang the firewall on.
Make sure the screw anchors and screws are secured in place.
5. Hold the firewall with its front panel facing downwards, align the installation holes on the firewall
with the screws on the wall, and set the holes over the screws.
6. Verify that the firewall is securely mounted on the wall. Do not let go of your hands from the
firewall until you are sure of the secure mounting of the firewall.
7. Connect the firewall to the grounding facility of the building.

12
Figure1-8 Mounting the firewall on a wall
Grounding the firewall
WARNING
!
•
Correctly connecting the firewall grounding cable is crucial to lightning protection and EMI
protection.
•Do not connect the firewall grounding cable to a fire main or lightning rod.
If you mount the firewall on a wall, connect the firewall to the grounding facility of the building. For
other installation methods, you can ground the firewall in one of the following ways, depending on the
grounding conditions available at the installation site.
Grounding the firewall with a grounding strip
If a grounding strip is available at the installation site, connect the grounding cable through the
grounding strip.
To connect the grounding cable:
1. Remove the grounding screw from the firewall chassis.
2. Attach the grounding screw to the ring terminal of the grounding cable.
3. Use a Phillips screwdriver to fasten the grounding screw into the grounding hole on the firewall.
4. Remove the hex nut from the grounding strip.
5. Use needle-nose pliers to bend a hook at the other end of the grounding cable. Attach the hook
to the grounding point, and secure the hook with a screw.

13
Figure1-9 Grounding the firewall with a grounding strip
Grounding the firewall with the grounding terminal on the rack
1. Remove the grounding screw from the firewall chassis.
2. Attach the grounding screw to the ring terminal of the grounding cable.
3. Use a Phillips screwdriver to fasten the grounding screw into the grounding hole on the firewall.
4. Remove the grounding screw from the grounding point on the rack.
5. Use needle-nose pliers to bend a hook at the other end of the grounding cable. Attach the hook
to the grounding point, and secure the hook with the screw.
Figure1-10 Grounding the firewall with the grounding terminal on the rack