H3C SecPath M9000-AI-E8 User manual

H3C SecPath M9000-AI-E8[E16]
Multi Service Security Gateway Series
Installation Guide
New
H3C Technologies Co., Ltd.
http://www.h3c.com.hk
Document version: 6W105-20220319

Copyright © 2022, New H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this
document are the property of their respective owners.
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.
Environmental protection
This product has been designed to comply with the environmental protection requirements. The storage, use,
and disposal of this product must meet the applicable national laws and regulations.

Preface
This installation guide describes the installation procedure for the H3C SecPath M9000-AI
multiservice security gateway series. It includes the following topics:
•
Chassis views.
•
Preparing for installation.
•
Installing the gateway.
•
Accessing the gateway and configuring basic settings.
•
Troubleshooting.
•
Replacing removable components.
•
FRUs and compatibility matrixes.
•
Technical specifications.
•
LEDs.
•
Cables.
•
Slot arrangement and interface numbering.
•
Engineering labels.
•
Cabling recommendations.
•
Repackaging the gateway.
This preface includes:
•
Audience
•
Conventions
•
Documentation feedback
Audience
This documentation is intended for:
•
Network planners
•
Field technical support and servicing engineers
•
Network administrators working with the M9000-AI security gateway series
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention
Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,

Convention
Description
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntaxchoices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.
Symbols
Convention
Description
WARNING An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT
An alert that calls attention to essential information.
NOTE
An alert that contains additional or supplementary information.
TIP
An alert that provides helpful information.
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Wireless terminator unit.
T
T

Represents a generic network device, such as a router, switch, or firewall.
Wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a
security product, such as a firewall, UTM, multiservice security gateway,
or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.
T
T

i
Contents
Chassis views································································································1
M9000-AI-E8······················································································································································1
M9000-AI-E16····················································································································································2

1
Chassis views
H3C SecPath M9000-AI multiservice security gateways include the M9000-AI-E8 and
M9000-AI-E16 models.
The main components of the gateway include supervisor engine modules (SEMs), interface switch
modules, interface modules, AI security engine modules, service modules, switching fabric modules,
fan trays, and power supplies.
M9000-AI-E8
Figure 1 Front view
Figure 2 Rear view
Table 1 Descriptions for the gateway sections
Section Description
SEM section No SEMs are provided with the gateway. Purchase SEMs yourself.

2
Section Description
Interface switch
module/AI
security engine
module/service
module section
No interface switch modules, AI security engine modules, or service modules are
provided with the gateway. Purchase them yourself.
An interface switch module provides two slots for the installation of service modules or
interface modules.
Power supply
section No power supplies are provided with the gateway. Purchase power supplies yourself.
Determine the number of power supplies based on the system power consumption.
Fan tray section No fan trays are provided with the gateway. Purchase fan trays yourself.
Switching fabric
module section
No switching fabric modules are provided with the gateway. Purchase switching fabric
modules yourself.
Only slots 6 and 7 are available for installing switching fabric modules. Both of the slots
must be installed with switching fabric modules.
M9000-AI-E16
Figure 3 Front view

3
Figure 4 Rear view
Table 2 Descriptions for the gateway sections
Section Description
SEM section No SEMs are provided with the gateway. Purchase SEMs yourself.
Interface switch
module/AI
security engine
module/service
module section
No interface switch modules, AI security engine modules, or service modules are
provided with the gateway. Purchase them yourself.
An interface switch module provides two slots for installation of service modules or
interface modules.
Switching fabric
module section
No switching fabric modules are provided with the gateway. Purchase switching fabric
modules yourself.
Only slots 10 and 11 areavailable for installing switching fabric modules. You can install
one switching fabric module or two switching fabric modules for 1+1 redundancy.
Power supply
section No power supplies are provided with the gateway. Purchase power supplies yourself.
Determine the number of power supplies based on the system power consumption.
Fan tray section The gateway comes with six fan trays installed in the slot.
NOTE:

4
•
Directly install an AI security engine module on the slot of the gateway. Install a service module
on the slot of the interface switch module.
•Install an interface module on the slot of the interface switch module.

i
Contents
Preparing for installation················································································1
Safety recommendations ···································································································································1
General safety recommendations··············································································································1
Electricity safety·········································································································································1
Handling safety ··········································································································································1
ESD prevention··········································································································································1
Laser safety················································································································································2
Examining the installation site····························································································································2
Weight support···········································································································································2
Space·························································································································································2
Cooling·······················································································································································3
Power·························································································································································4
Lightning protection····································································································································5
Temperature···············································································································································5
Humidity·····················································································································································5
Cleanliness·················································································································································6
EMI·····························································································································································6
Installation tools and accessories ······················································································································7
Pre-installation checklist·····································································································································7

1
Preparing for installation
H3C SecPath M9000-AI multiservice security gateways include the M9000-AI-E8 gateway and
M9000-AI-E16 gateway.
Safety recommendations
To avoid bodily injury and equipment damage, read all safety recommendations carefully before
installation. Note that the recommendations do not cover every possible hazardous condition.
General safety recommendations
•
Keep the gateway clean and dust-free.
•
Do not place the gateway on a moist area, and avoid liquid flowing into the gateway.
•
Make sure the ground is dry and flat and anti-slip measures are in place.
•
Keep the gateway and installation tools away from walk areas.
•
Do not wear loose clothing, jewelry (for example, necklace) or any other things that could get
caught in the chassis when you install and maintain the gateway.
Electricity safety
•
Clear the work area of possible electricity hazards, such as ungrounded power extension
cables, missing safety grounds, and wet floors.
•
Locate the emergency power-off switch in the room before installation so you can quickly shut
power off when an electrical accident occurs.
•
Unplug all external cables, including power cords, before moving the chassis.
•
Do not work alone when the gateway has power.
•
Always verify that power has been disconnected from a circuit.
Handling safety
When you move the gateway, follow these guidelines:
•
Remove all external cables, including the power cords, before moving the chassis.
•
As a best practice, use a mechanical lift to move the chassis. To move the chassis manually,
use multiple people.
•
Lift and put down the chassis slowly and never move suddenly.
•
Hold the handles of the chassis.
ESD prevention
To prevent the electric component from being damaged by electrostatic discharge (ESD), follow
these guidelines:
•
Ground the gateway correctly.
•
Always wear an ESD wrist strap and make sure it is correctly grounded when installing FRUs.
•
Hold a PCB by its edges. Do not touch any electronic components or printed circuit.

2
•
Put modules away in antistatic bags for future use.
NOTE:
The gateway has an ESD socket at both the front and rear.
Laser safety
WARNING
!
•
Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare
into beams or view directly with optical instruments when the gateway is operating.
•
Before you remove the optical fiber connector from a fiber port, execute the shutdown
command in interface view to shut down the port.
CAUTION:
•
Insert optical fiber
caps into open optical fiber connectors to protect them from contamination and
ESD damage.
•
Insert dust plugs into open fiber ports and transceiver module ports to protect them from
contamination and ESD damage.
Examining the installation site
The gateway must be used indoors. To ensure the correct operation and long service life of your
gateway, the installation site must meet the requirements in this section.
Weight support
Make sure the floor can support the total weight of the rack, chassis, and accessories. Additionally,
the floor loading plan must also consider system expansion, such as adding more modules. For
more information, see "Appendix B Technical Specifications."
Space
For easy installation and maintenance, make sure the following requirements are met:
•
Make sure the rack has enough space (in height and depth) to accommodate the gateway.
•
The rack allows front and rear access to the gateway.
•
Aminimum clearance of 1.2 m (3.94 ft) is reserved between the rack and walls or other devices.
For more information about the chassis dimensions, see "Appendix B Technical Specifications."
Table 1 Gateway dimensions and rack requirements
Model Chassis dimensions Rack requirements
M9000-AI-E8
•Height—264 mm (10.39 in)
•Width—440 mm (17.32 in)
•Depth—977 mm (38.46 in)
857 mm (33.74 in) for the
chassis
90 mm (3.54 in) for the cable
management brackets at the
•A minimum of 1.1 m (3.61 ft) in depth
(recommended).
•A minimum of 140 mm (5.51 in) between
the front rack posts and the front door.
•A minimum of 950 mm (37.40 in) between
the front rack posts and the rear door.

3
Model Chassis dimensions Rack requirements
chassis front
30 mm (1.18 in) for the ejector
levers of the fan tray at the
chassis rear
M9000-AI-E16
•Height—841.7 mm (33.14 in)
•Width—440 mm (17.32 in)
•Depth—735 mm (28.94 in)
640 mm (25.20 in) for the
chassis
95 mm (3.74 in) for the cable
management brackets at the
chassis front
12 mm (0.47 in) for the
captive screw of the fan tray
at the chassis rear
Figure 1 Rack dimensions
Cooling
The gateway uses front-to-rear airflow for heat dissipation. Plan the installation site for the gateway
based on its airflow direction for adequate ventilation. Make sure the following requirements are met:
•
The installation site has a good cooling system.
•
The rack for the gateway has a good cooling system.
•
Leave a minimum clearance of 300 mm (11.81 in) around the inlet and outlet air vents.
Rack
Rear door
Chassis
Front door
Front rack post
≥140 mm
(5.51 in)
≥950 mm
(37.40 in)

4
Figure 2 Airflow through the chassis (M9000-AI-E16 gateway)
Power
Agood power supply system is essential for correct operation of the gateway. The gateway supports
AC and DC power inputs. Make sure the equipment room meets the following requirements for the
power supply systems.
•
The AC power supply system is stable and reliable and capable of providing power required by
the gateway. Prepare a diesel generator as a backup power source except for the power lines.
•
The DC power supply system is stable and reliable and its output voltage is stable and within
the acceptable range allowed by the gateway.
•
Enough batteries are available to ensure uninterrupted device operation in the event of a power
failure.
For the power supply system to provide power as required by the router:
1. Calculate the system power consumption.
The system power consumption varies by module type and density. For more information about
system power consumption calculation, see "Appendix B Technical Specifications."
2. Select power supplies and identify the number of power supplies.
The total maximum output power of all power supplies must be higher than the system power
consumption. For more information about available power supplies, see "Appendix A FRUs and
Compatibility Matrixes."

5
Lightning protection
To protect the gateway from the lightning, make sure the following requirements are met:
•
The grounding cable for the chassis is correctly grounded.
•
The grounding terminal of the AC power receptacle is correctly grounded.
•
If an AC power cord is routed from outdoors for connecting to the device, connect the power
cord first to a power lightning arrester before connecting it to the power receptacle on the
device.
•
If a network cable is routed from outdoors for connecting to the device, connect the network
cable first to a network port lightning arrester before connecting it to the port.
IMPORTANT:
•
No network port lightning arrester or AC power lightning arrester is provided with the device.
Purchase them as required.
•
For the technical specifications and installation instructions for the lightning arresters, see the
documents shipped with them.
Temperature
CAUTION:
If condensation appears on the chassis when you move it to a high
-temperature environment, dry
the chassis before powering it on to avoid short circuits.
If the temperature in the equipment room is too high, too low, or changes dramatically, the device
reliability is reduced and its service lifetime is shortened.
High temperature can accelerate the aging of insulation materials and significantly lower the
reliability and lifespan of the gateway.
To ensure the correct operation of the gateway, make sure the room temperature meets the
requirements in Table 2.
Table 2 Temperature requirements
Temperature Range
Operating temperature 0°C to 45°C (32°F to 113°F)
Storage temperature –40°C to +70°C (–40°F to +158°F)
Humidity
Maintain appropriate humidity in your equipment room, as described in Table 3.
•
Lasting high relative humidity tends to cause poor insulation, electricity leakage, mechanical
property change of materials, and corrosion of metal parts.
•
Lasting low relative humidity is likely to result in loose screws due to washer contraction, and
even electrostatic discharge (ESD), which causes the circuits to fail.
Table 3 Humidity requirements
Humidity Range
Operating humidity 5% RH to 95% RH, noncondensing

6
Humidity Range
Storage humidity 5% RH to 95% RH, noncondensing
Cleanliness
Dust buildup on the chassis might result in electrostatic adsorption, which causes poor contact of
metal components and contact points. In the worst case, electrostatic adsorption can cause
communication failure.
Table 4 Dust concentration limit in the equipment room
Substance Concentration limit (particles/m3)
Dust particles ≤ 3 x 104
(No visible dust on desk in three days)
NOTE:
Dust particle diameter ≥ 5 µm
The equipment room must also meet limits on salts, acids, and sulfides to eliminate corrosion and
premature aging of components, as shown in Table 5.
Table 5 Harmful gas limits in an equipment room
Gas Max. (mg/m3)
SO21.0
H2S 0.5
NH33.0
Cl20.3
NO21.0
EMI
Electromagnetic interference (EMI) might be coupled from the source to the gateway through the
following coupling mechanisms:
•
Capacitive coupling
•
Inductive coupling
•
Radiative coupling
•
Common impedance coupling
•
Conductive coupling
To prevent EMI, take the following actions:
•
Filter interference from the power grid.
•
Keep the gateway grounding facilities away from grounding and lightning protection facilities of
other devices.
•
Keep the gateway far away from radio transmitting stations, radar stations, and high-frequency
devices to make sure the EMI levels do not exceed the compliant range.
•
Use electromagnetic shielding, for example, shielded interface cables, when necessary.

7
Installation tools and accessories
No installation tools are provided with the gateway. Prepare them yourself as required.
Figure 3 Installation tools
Figure 4 Installation accessories
Pre-installation checklist
Table 6 Pre-installation checklist
Item Requirements Result
Installation site Load bearing
•The floor or ground at the installation site can
support the sum of the weight of the gateway
and the rack.
•The slide rails can support the weight of the
gateway.
Space •There is a minimum clear height of 3 m (9.84
ft) (from the beam or the air duct to the floor) in

8
Item Requirements Result
the equipment room.
•There is a minimum clearance of 1200 mm
(47.24 in) between the rack and walls or other
devices.
Ventilation
•There is a minimum clearance of 300 mm
(11.81 in) around the inlet and outlet air vents.
•A good ventilation system is available at the
installation site.
Power supply
•The power supply system can output enough
power to maintain the device operation.
•An uninterrupted power supply (UPS) is
available.
•The power-off switch in the equipment room is
located so that the power can be immediately
shut off when an accident occurs.
Grounding
•The grounding specifications for the
equipment room comply with national and
industry standards.
•All communication devices in the equipment
room are reliably grounded.
•The working earthing and protective earthing
systems of the communication power supplies
use the same earthing conductor set with the
protective earthing system of the
communication devices.
Temperature 0°C to 45°C (32°F to 113°F).
Humidity 5% RH to 95% RH (noncondensing).
Cleanliness •Dust concentration ≤ 3 × 104 particles/m
3
.
•No visible dust on desk within three days.
EMI prevention
•Take effective measures to protect the power
system from the power grid system.
•Separate the operation ground of the gateway
from the grounding device or lightning
protection grounding device as far as
possible.
•Keep the gateway far away from radio
stations, radar and high-frequency devices
working in high current.
•Use electromagnetic shielding when
necessary.
Safety precautions
•The gateway is faraway from any heat source
and moist area.
•The emergency power switch in the
equipment room is located.
Accessories Installation accessories provided with the gateway.
Reference •Documents shipped with the gateway.
•Online documents.

i
Contents
Installing the gateway····················································································1
Confirming installation preparations···················································································································1
Installation flowchart···········································································································································2
Rack-mounting the gateway·······························································································································2
Attaching slide rails to the rack ··················································································································3
Removing the air filter and top hood··········································································································3
Removing a fan tray···································································································································4
Mounting the gateway in a rack ·················································································································5
Installing an air filter and a top hood··········································································································7
Grounding the gateway······································································································································9
Installing cable management brackets·············································································································10
Installing cable management brackets for an M9000-AI-E8 gateway······················································10
Installing cable management brackets for an M9000-AI-E16 gateway····················································10
Installing modules ············································································································································12
Installing supervisor engine modules·······································································································12
Installing switching fabric modules···········································································································15
Installing interface modules or service modules ······················································································17
Installing interface switch modules or AI security engine modules··························································18
Installing fan trays············································································································································19
Installing power supplies··································································································································20
Installing DC power supplies····················································································································20
Installing AC power supplies····················································································································22
Installing HVDC power supplies···············································································································25
Installing transceiver modules and fiber cables ·······························································································26
(Optional) Installing air filter doors ···················································································································27
Verifying the installation···································································································································28
Power-on check ···············································································································································28
Power-on check flowchart························································································································29