H3C SecPath M9000-AI-E8 User manual

H3C SecPath M9000-AI-E8[E16]
Multi Service Security Gateway Series
Installation Guide
New
H3C Technologies Co., Ltd.
http://www.h3c.com.hk
Document version: 6W105-20220319

Copyright © 2022, New H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this
document are the property of their respective owners.
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.
Environmental protection
This product has been designed to comply with the environmental protection requirements. The storage, use,
and disposal of this product must meet the applicable national laws and regulations.

Preface
This installation guide describes the installation procedure for the H3C SecPath M9000-AI
multiservice security gateway series. It includes the following topics:
•
Chassis views.
•
Preparing for installation.
•
Installing the gateway.
•
Accessing the gateway and configuring basic settings.
•
Troubleshooting.
•
Replacing removable components.
•
FRUs and compatibility matrixes.
•
Technical specifications.
•
LEDs.
•
Cables.
•
Slot arrangement and interface numbering.
•
Engineering labels.
•
Cabling recommendations.
•
Repackaging the gateway.
This preface includes:
•
Audience
•
Conventions
•
Documentation feedback
Audience
This documentation is intended for:
•
Network planners
•
Field technical support and servicing engineers
•
Network administrators working with the M9000-AI security gateway series
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention
Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,

Convention
Description
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntaxchoices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.
Symbols
Convention
Description
WARNING An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT
An alert that calls attention to essential information.
NOTE
An alert that contains additional or supplementary information.
TIP
An alert that provides helpful information.
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Wireless terminator unit.
T
T

Represents a generic network device, such as a router, switch, or firewall.
Wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a
security product, such as a firewall, UTM, multiservice security gateway,
or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.
T
T

i
Contents
Chassis views································································································1
M9000-AI-E8······················································································································································1
M9000-AI-E16····················································································································································2

1
Chassis views
H3C SecPath M9000-AI multiservice security gateways include the M9000-AI-E8 and
M9000-AI-E16 models.
The main components of the gateway include supervisor engine modules (SEMs), interface switch
modules, interface modules, AI security engine modules, service modules, switching fabric modules,
fan trays, and power supplies.
M9000-AI-E8
Figure 1 Front view
Figure 2 Rear view
Table 1 Descriptions for the gateway sections
Section Description
SEM section No SEMs are provided with the gateway. Purchase SEMs yourself.

2
Section Description
Interface switch
module/AI
security engine
module/service
module section
No interface switch modules, AI security engine modules, or service modules are
provided with the gateway. Purchase them yourself.
An interface switch module provides two slots for the installation of service modules or
interface modules.
Power supply
section No power supplies are provided with the gateway. Purchase power supplies yourself.
Determine the number of power supplies based on the system power consumption.
Fan tray section No fan trays are provided with the gateway. Purchase fan trays yourself.
Switching fabric
module section
No switching fabric modules are provided with the gateway. Purchase switching fabric
modules yourself.
Only slots 6 and 7 are available for installing switching fabric modules. Both of the slots
must be installed with switching fabric modules.
M9000-AI-E16
Figure 3 Front view

3
Figure 4 Rear view
Table 2 Descriptions for the gateway sections
Section Description
SEM section No SEMs are provided with the gateway. Purchase SEMs yourself.
Interface switch
module/AI
security engine
module/service
module section
No interface switch modules, AI security engine modules, or service modules are
provided with the gateway. Purchase them yourself.
An interface switch module provides two slots for installation of service modules or
interface modules.
Switching fabric
module section
No switching fabric modules are provided with the gateway. Purchase switching fabric
modules yourself.
Only slots 10 and 11 areavailable for installing switching fabric modules. You can install
one switching fabric module or two switching fabric modules for 1+1 redundancy.
Power supply
section No power supplies are provided with the gateway. Purchase power supplies yourself.
Determine the number of power supplies based on the system power consumption.
Fan tray section The gateway comes with six fan trays installed in the slot.
NOTE:

4
•
Directly install an AI security engine module on the slot of the gateway. Install a service module
on the slot of the interface switch module.
•Install an interface module on the slot of the interface switch module.