H3C SecPath F1070 User manual

i
Contents
1 Preparing for installation·············································································1
Safety recommendations ···································································································································1
Safety symbols···········································································································································1
General safety recommendations··············································································································1
Electrical safety··········································································································································2
Laser safety················································································································································2
Handling safety ··········································································································································2
Examining the installation site····························································································································3
Weight support···········································································································································3
Temperature and humidity·························································································································3
Cleanliness·················································································································································3
Cooling system···········································································································································4
ESD prevention··········································································································································4
EMI·····························································································································································5
Lightning protection····································································································································5
Power supply··············································································································································5
Installation tools ·················································································································································6
Accessories························································································································································6
Pre-installation checklist·····································································································································6
2 Installing the firewall ···················································································9
Installation flow···················································································································································9
Mounting the firewall on a workbench················································································································9
Installing the firewall in a standard 19-inch rack ······························································································10
Rack-mounting the firewall by using front and rear mounting brackets ···················································10
Rack-mounting the firewall by using front mounting brackets··································································13
Grounding the firewall······································································································································15
Grounding the firewall with a grounding strip···························································································15
Grounding the firewall with the grounding terminal on the rack·······························································16
Installing power modules··································································································································16
Installing a power module for an F1070 or F1080 firewall ·······································································16
Installing a power module for an F1090 firewall·······················································································17
Installing an interface module ··························································································································18
Installing a drive···············································································································································19
Connecting Ethernet cables·····························································································································19
Connecting a copper Ethernet port··········································································································19
Connecting a fiber port·····························································································································20
Connecting power cords ··································································································································21
Connecting an AC power cord·················································································································22
Connecting a DC power cord···················································································································24
Connecting a high-voltage DC power cord for an F1090 firewall·····························································24
Verifying the installation···································································································································24
3 Accessing the firewall ············································································3-26
Starting the firewall········································································································································3-26
Check before starting the firewall··········································································································3-26
Starting the firewall and observing the initial startup conditions····························································3-26
Logging in to the firewall ·······························································································································3-28
Logging in from the Web interface········································································································3-28
Logging in from the serial console port or micro USB console port······················································3-29
Logging in through Telnet ·····················································································································3-29
4 Hardware replacement···········································································4-30
Replacing a power module····························································································································4-30
Replacing a power module for an F1070 or F1080 firewall···································································4-30
Replacing a power module for an F1090 firewall··················································································4-30
Replacing an interface module ·····················································································································4-31

ii
Replacing a drive ··········································································································································4-32
Replacing a transceiver module····················································································································4-32
5 Hardware management and maintenance·············································5-34
Displaying detailed information about the firewall·························································································5-34
Displaying the software and hardware version information for the firewall···················································5-34
Displaying the electrical label information for the firewall··············································································5-35
Displaying the CPU usage of the firewall······································································································5-35
Displaying the memory usage of the firewall·································································································5-36
Displaying the operational status of power modules·····················································································5-37
Displaying the temperature information of the firewall··················································································5-37
Displaying the operational statistics of the firewall························································································5-38
Displaying transceiver module information ···································································································5-38
Rebooting the firewall····································································································································5-39
6 Troubleshooting·····················································································6-41
Power module failure ····································································································································6-41
Configuration terminal display problem·········································································································6-41
Password loss···············································································································································6-41
Cooling system failure···································································································································6-42
Software loading failure·································································································································6-42
7 Appendix A Chassis views and technical specifications························7-43
Chassis views···············································································································································7-43
F1005/F1010·········································································································································7-43
F1020····················································································································································7-43
F1030/F1050/F1060······························································································································7-44
F1070/F1080·········································································································································7-45
F1090····················································································································································7-46
Interface modules··········································································································································7-46
NSQM1GT4PFC···································································································································7-47
NSQM1GP4FBA···································································································································7-47
NS-NIM-TG6A·······································································································································7-48
Network data encryption modules·················································································································7-48
Drives····························································································································································7-49
Power modules ·············································································································································7-49
AC power modules································································································································7-50
DC power modules································································································································7-51
High-voltage DC power modules ··········································································································7-52
Dimensions and weights·······························································································································7-53
Chassis ·················································································································································7-53
Interface modules··································································································································7-53
Network data encryption modules·········································································································7-53
Drives····················································································································································7-53
Storage media···············································································································································7-54
Power consumption·······································································································································7-54
Chassis ·················································································································································7-54
Interface modules··································································································································7-54
Network data encryption modules·········································································································7-55
Drives····················································································································································7-55
Power module specifications·························································································································7-55
Port specifications·········································································································································7-56
Console port··········································································································································7-56
Micro USB console port ························································································································7-56
GE copper port······································································································································7-56
GE fiber port··········································································································································7-57
10 GE fiber port·····································································································································7-57
8 Appendix B LEDs··················································································8-58
9 Appendix C Cables···············································································9-60
Console cable ···············································································································································9-60

iii
RJ-45 to DB9 console cable··················································································································9-60
Micro USB console cable······················································································································9-60
Ethernet twisted pair cable····························································································································9-61
Introduction ···········································································································································9-61
Making an Ethernet twisted pair cable··································································································9-64
Optical fiber···················································································································································9-64

1
1 Preparing for installation
The H3C SecPath F10X0 firewall series include the following models:
•
F1005
•
F1010
•
F1020
•
F1030
•
F1050
•
F1060
•
F1070
•
F1080
•
F1090
Safety recommendations
To avoid any equipment damage or bodily injury, read the following safety recommendations before
installation. Note that the recommendations do not cover every possible hazardous condition.
Safety symbols
When reading this document, note the following symbols:
WARNING means an alert that calls attention to important information that if not understood or
followed can result in personal injury.
CAUTION means an alert that calls attention to important information that if not understood or
followed can result in data loss, data corruption, or damage to hardware or software.
General safety recommendations
•
Do not place the firewall on an unstable case or desk. The firewall might be severely damaged
in case of a fall.
•
Make sure the ground is dry and flat and anti-slip measures are in place.
•
Keep the chassis and installation tools away from walk areas.
•
Keep the chassis clean and dust-free.
•
Do not place the firewall near water or in a damp environment. Prevent water or moisture from
entering the firewall chassis.
•
Ensure good ventilation of the equipment room and keep the air inlet and outlet vents of the
firewall free of obstruction.
•
Make sure the operating voltage is in the required range.
•
Use a screwdriver, rather than your fingers, to fasten screws.
•
Stack devices according to the sizes of and packing symbols on the packages.

2
Figure1-1 Packing symbols
Symbol
Description
Stored with a maximum stack of n units.
Transported and stored with the arrows up.
Transported and stored with care.
Transported and stored avoiding humidity, rains and wet floor.
Electrical safety
•
Carefully examine your work area for possible hazards such as moist floors, ungrounded power
extension cables, and missing safety grounds.
•
Locate the emergency power-off switch in the room before installation. Shut the power off at
once in case accident occurs.
•
Do not work alone when the firewall has power.
•
Always verify that the power has been disconnected.
Laser safety
WARNING
!
Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into
beams or view directly with optical instruments when the firewall is operating.
The firewall is a Class 1 laser device.
•
Before you disconnect the fiber connector, execute the shutdown command in interface view
to disable the optical source.
•
Install dust caps to disconnected optical fiber connectors and ports on disconnected transceiver
modules to avoid damage caused by built-up dust.
•
Insert a dust plug into empty fiber ports.
Handling safety
When you move the firewall, follow these guidelines:
•
Move and unpack the firewall carefully to avoid firewall damage.
•
Unpack the firewall at least half an hour and power on the firewall at least two hours after you
move it from a place below 0°C (32°F) to the equipment room. This prevents condensation and
even damage to the firewall.
•
Use a safety hand truck when you move multiple firewalls.

3
•
Before you move the firewall, remove all cables and mounting brackets.
•
For long-distance transportation, remove all removable components, such as power modules
and interface modules, and package them separately, and install the filler panels supplied with
the firewall. For short-distance transportation, make sure all removable components are
securely seated in the slots and the screws are fastened.
•
When you move or lift the firewall chassis, support the bottom of the chassis, rather than
holding any removable component. Make sure the accessories of the firewall are not lost or
damaged during firewall moving.
Examining the installation site
The firewall can only be used indoors. To make sure the firewall operates correctly and to prolong its
service lifetime, the installation site must meet the following requirements.
Weight support
Make sure the floor can support the total weight of the rack, chassis, modules, and all other
components. For more information, see "Dimensions and weights."
Temperature and humidity
Maintain appropriate temperature and humidity in the equipment room.
•
Lasting high relative humidity can cause poor insulation, electricity leakage, mechanical
property change of materials, and metal corrosion.
•
Lasting low relative humidity can cause washer contraction and ESD and bring problems
including loose captive screws and circuit failure.
•
High temperature can accelerate the aging of insulation materials and significantly lower the
reliability and lifespan of the firewall.
For the temperature and humidity requirements of the firewall, see Table1-1.
Table1-1 Temperature/humidity requirements
Temperature
Relative humidity
•Operating:
Without drives: 0°C to 45°C (32°F
to 113°F)
With hard drives: 5°C to 40°C
(41°F to 104°F)
•Storage: –40°C to +70°C (–40°F to
+158°F)
•Operating:
Without drives: 5% to 95%, noncondensing
With drives: 10% to 90%, noncondensing
•Storage: 5% to 95%, noncondensing
Cleanliness
Dust buildup on the chassis might result in electrostatic adsorption, which causes poor contact of
metal components and contact points, especially when indoor relative humidity is low. In the worst
case, electrostatic adsorption can cause communication failure.
Table1-2 Dust concentration limit in the equipment room
Substance
Concentration limit (particles/m
3
)
Dust particles ≤ 3 × 104(No visible dust on desk in three days)

4
Substance
Concentration limit (particles/m
3
)
NOTE:
Dust particle diameter ≥ 5 µm
The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion
and premature aging of components, as shown in Table1-3.
Table1-3 Harmful gas limits in an equipment room
Gas
Max. (mg/m
3
)
SO20.2
H2S 0.006
NH30.05
Cl20.01
NO20.04
Cooling system
For adequate cooling of the firewall, follow these guidelines:
•
Install the firewall at the installation site with its airflow direction meeting the ventilation
requirements.
Workbench mounting—Ensure a minimum clearance of 100 mm (3.94 in) around the air
inlet and outlet vents of the chassis.
19-inch rack mounting—Ensure a minimum clearance of 80 mm (3.15 in) around the air
inlet and outlet vents of the chassis and a distance of 1U (44.45 mm, or 1.75 in) between the
chassis and other devices.
•
Make sure the installation site has a good cooling system.
The F1005 and F1010 firewalls use passive cooling for heat dissipation.
The F1020, F1030, F1050, F1060, F1070, F1080, and F1090 firewalls provide left side-intake and
right-side exhaust airflow for heat dissipation.
Figure1-2 Airflow through the F1080 firewall chassis
ESD prevention
To prevent electrostatic discharge (ESD), follow these guidelines:
•
Make sure the firewall, the workbench, and the rack are reliably grounded.
•
Take dust-proof measures for the equipment room. For more information, see "Cleanliness."

5
•
Maintain the humidity and temperature at an acceptable level. For more information, see
"Temperature and humidity."
•
Put the removed interface modules away on an ESD workbench, with the PCB upward, or put
them in ESD bags for future use.
•
Always wear ESD clothing, ESD gloves, and an ESD wrist strap.
EMI
All electromagnetic interference (EMI) sources, from outside or inside of the firewall and application
system, adversely affect the firewall in the following ways:
•
A conduction pattern of capacitance coupling.
•
Inductance coupling.
•
Electromagnetic wave radiation.
•
Common impedance (including the grounding system) coupling.
To prevent EMI, use the following guidelines:
•
If AC power is used, use a single-phase three-wire power receptacle with protection earth (PE)
to filter interference from the power grid.
•
Keep the firewall far away from radio transmitting stations, radar stations, and high-frequency
devices.
•
Use electromagnetic shielding, for example, shielded interface cables, when necessary.
•
To prevent signal ports from getting damaged by overvoltage or overcurrent caused by lightning
strikes, route interface cables only indoors. If part of the network cable of an Ethernet port must
be routed outdoors, connect a lightning arrester to the cable before you plug the cable into the
port.
Lightning protection
To protect the firewall from lightning better, follow these guidelines:
•
Make sure the grounding cable of the chassis is reliably grounded.
•
Make sure the grounding terminal of the AC power receptacle is reliably grounded.
•
If an AC power cord is routed from outdoors for connecting to the device, connect the power
cord first to a power lightning arrester before connecting it to the power receptacle on the
device.
•
If a network cable is routed from outdoors for connecting to an Ethernet port on the firewall,
connect the network cable first to a network port lightning arrester before connecting it to the
port.
IMPORTANT:
No
network port lightning arrester or AC power lightning arrester is provided with the device.
Prepare
them as required. For
the technical specifications and installation instructions for the lightning
protectors, see the documents shipped with them.
Power supply
Verify that the power system at the installation site meets the requirements of the power modules,
including the input method and rated input voltage. For more information, see "Appendix A Chassis
views and technical specifications."

6
Installation tools
All installation tools are user supplied.
Flat-head screwdriver Phillips screwdriver Needle-nose pliers Diagonal pliers
ESD wrist strap Marker
Accessories
Mounting bracket
for the F1005 and
F1010
Mounting brackets (including M4
shoulder screw) for other F10X0
models than F1005 and F1010 M4 screw
M6 rack screw and cage nut
(shipped with the F1005
and F1010 firewalls and
user supplied for other
models)
Rubber feet Power cord retainer clip Power cord Grounding cable
Console cable
Pre-installation checklist
Table1-4 Checklist before installation
Item
Requirements
Result
Installation
site Ventilation
•Workbench mounting—Ensure a minimum
clearance of 100 mm (3.94 in) around the air inlet and
outlet vents of the chassis.
•19-inch rack mounting—Ensure a minimum
clearance of 80 mm (3.15 in) around the air inlet and
outlet vents of the chassis and a distance of 1U
(44.45 mm, or 1.75 in) between the chassis and other
devices.
•A good ventilation system is available at the
installation site.

7
Item
Requirements
Result
Temperature
•Operating:
Without drives: 0°C to 45°C (32°F to 113°F)
With drives: 5°C to 40°C (41°F to 104°F)
•Storage: –40°C to +70°C (–40°F to +158°F)
Relative humidity
•Operating:
Without drives: 5% RH to 95% RH,
noncondensing
With drives: 10% RH to 90% RH, noncondensing
•Storage: 5% RH to 95% RH, noncondensing
Cleanness •Dust concentration ≤ 3 × 104particles/m3
•No dust on desk within three days
ESD prevention
•The equipment, workbench, and rack are reliably
grounded.
•The equipment room is dust-proof.
•The humidity and temperature are at an acceptable
level.
•Wear an ESD wrist strap and make sure it makes
good skin contact and is reliably grounded when
installing FRUs.
•Put the removed interface modules away on an ESD
workbench, with the PCB upward, or put them in ESD
bags for future use.
•Touch only the edges, instead of electronic
components when observing or moving a removed
interface module.
EMI prevention
•
Take effective measures to protect the power system
from the power grid system.
•Separate the protection ground of the firewall from
the grounding device or lightning protection
grounding device as far as possible.
•Keep the firewall far away from radio stations, radar
and high-frequency devices working in high current.
•Use electromagnetic shielding when necessary.
Lightning
protection
•The grounding cable of the chassis is reliably
grounded.
•The grounding terminal of theAC power receptacle is
reliably grounded.
•(Optional.) A power lightning arrester is installed.
Electricity safety
•Equip a UPS.
•Locate the power switch in the equipment room. In
case of emergency during operation, switch off the
power switch.
Rack-mounting
requirements
•Make sure the cabinet is equipped with a good
ventilation system.
•The rack is sturdy enough to support the weight of the
firewall and installation accessories.
•The size of the rack is appropriate for the firewall.
•The front and rearof the rack are a minimum of 0.8 m
(31.50 in) away from walls or other devices.
Safety
precautions
•The firewall is far away from any moist area and heat source.
•The emergency power switch in the equipment room is located.
Tools and
•Installation accessories supplied with the firewall

8
Item
Requirements
Result
accessories
•User-supplied tools
Reference •Documents shipped with the firewall
•Online documents

9
2 Installing the firewall
WARNING!
Keep the tamper
-
proof seal on a mounting screw on the chassis cover intact, and if you want to open
the chassis, contact H3C for permission. Otherwise, H3C shall not be liable for any consequence.
The firewall view varies by model. The following figures are for illustration only. This document uses
an F1080 firewall as an example.
Installation flow
Table2-1 Installation flow for the F10X0 firewalls
Step
Description
1. Start Before installation, make sure all requirements on the checklist
are met and the firewall is powered off.
2. Mounting the firewall on a
workbench Verify that the workbench is sturdy and reliably grounded.
Ensure a minimum clearance of100 mm (3.94 in) around the air
inlet and outlet vents of the chassis.
3. Installing the firewall in a standard
19-inch rack To avoid bodily injury and device damage, use a minimum of
two people to rack-mount the device.
4. Grounding the firewall Before installation, make sure the firewall and rack are reliably
grounded and you wear an ESD wrist strap.
5. Installing power modules Before you install a power module, make sure the power
module is not connected to anypower source and the grounding
cable of the firewall is connected reliably.
6. Installing an interface module Install compatible interface modules on the firewall.
7. Installing a drive Install compatible drives on the firewall.
8. Connecting Ethernet cables The firewall provides various ports. Choose compatible
transceiver modules and cables as required. To avoid bodily
injury or device damage, read the restrictions and guidelines
carefully before connection.
9. Connecting power cords Connect compatible power cords to the power modules.
10. Verifying the installation Verify that the firewall is installed securely and reliably
grounded, and that the power modules are as required.
Mounting the firewall on a workbench
IMPORTANT:
•
Ensure good ventilation and a minimum clearance of 100 mm (3.94 in) around the chassis for
heat dissipation.
•
Avoid placing heavy objects on the firewall.
•
To stack firewalls, make sure a minimum vertical distance of 15 mm (0.59 in) is available
between
two adjacent firewalls.

10
If a standard 19-inch rack is not available, you can place the firewall on a workbench.
To mount the firewall on a workbench:
1. Verify that the workbench is sturdy and reliably grounded.
2. Place the firewall upside down on the workbench and clean the four round holes in the chassis
bottom with a dry cloth.
3. Attach the four rubber feet to the round holes in the chassis bottom.
4. Place the firewall with upside up on the workbench.
Figure2-1 Mounting the firewall on a workbench
Installing the firewall in a standard 19-inch rack
WARNING
!
To avoid bodily injury and device damage, use a minimum of two persons to rack-mount the firewall.
CAUTION:
•
For adequate heat dissipation, ensure a minimum clearance of 80 mm (3.15 in) around the air
inlet and outlet vents of the chassis and a distance of 1U (44.45 mm, or 1.75 in) between the
chassis and other devices in the rack.
•
As a best practice, use a rack shelf together with the mounting brackets
to support the weight of
the chassis.
Rack-mounting the firewall by using front and rear mounting
brackets
The F1020, F1030, F1050, F1060, F1070, F1080, and F1090 firewalls support this installation
method.
To install the firewall in a standard 19-inch rack by using front and rear mounting brackets:

11
1. Wear an ESD wrist strap and make sure the wrist strap makes good skin contact and is reliably
grounded.
2. Unpack the firewall and accessories.
3. Mark the cage nut installation positions on the rack posts by using the mounting brackets.
Use a front mounting bracket to mark the positions on the front rack posts and use a rear
mounting bracket to mark the positions on the rear rack posts.
4. Install cage nuts.
Figure2-2 Installing cage nuts
5. Attach the front mounting brackets and shoulder screws to both sides of the firewall with M4
screws provided with the firewall.
Figure2-3 Attaching mounting brackets and shoulder screws to the firewall
6. Attach the rear mounting brackets to the rear rack posts. The rear mounting brackets can be
attached to the rear rack posts with the wide flange inside or outside the rack.
Table2-2 Installation methods for rear mounting brackets
Distance between the front and rear rack
posts
Rear mounting bracket installation
method
405 to 569 mm (15.94 to 22.40 in) With the wide flange inside the rack.
247 to 411 mm (9.72 to 16.18 in)
With the wide flange outside the rack.
Caution:
To prevent the rear mounting brackets from
obstructing the closing of the rack door, ensure a
distance greater than 153 mm (6.02 in) between
the rear rack posts and the interior side of the rack
123

12
Distance between the front and rear rack
posts
Rear mounting bracket installation
method
door.
Figure2-4 Attaching the rear mounting brackets (with the wide flange inside the rack)
Figure2-5 Attaching the rear mounting brackets (with the wide flange outside the rack)
7. Mount the firewall in the rack. Use M6 screws to secure the mounting brackets to the front rack
posts and make sure the shoulder screws rest firmly on the upper edge of the rear mounting
brackets.

13
Figure2-6 Mounting the firewall in the rack (with the wide flange of the rear mounting
brackets inside the rack)
Figure2-7 Mounting the firewall in the rack (with the wide flange of the rear mounting
brackets outside the rack)
Rack-mounting the firewall by using front mounting brackets
The F1005 and F1010 firewalls support this installation method.
To install the firewall in a standard 19-inch rack by using front mounting brackets:
1. Wear an ESD wrist strap and make sure the wrist strap makes good skin contact and is reliably
grounded.
2. Unpack the firewall and accessories.
3. Mark the cage nut installation positions on the rack posts by using the mounting brackets.
4. Install cage nuts.

14
Figure2-8 Installing cage nuts
5. Attach the front mounting brackets to both sides of the firewall with M4 screws provided with the
firewall.
Figure2-9 Attaching the front mounting brackets to the firewall
6. Mount the firewall in the rack. Use M6 screws to secure the mounting brackets to the front rack
posts.
123

15
Figure2-10 Mounting the firewall in the rack
Grounding the firewall
WARNING
!
•
Correctly connecting the firewall grounding cable is crucial to lightning protection and EMI
protection.
•Do not connect the firewall grounding cable to a fire main or lightning rod.
You can ground the firewall in one of the following ways, depending on the grounding conditions
available at the installation site.
Grounding the firewall with a grounding strip
If a grounding strip is available at the installation site, connect the grounding cable through the
grounding strip.
To connect the grounding cable:
1. Remove the grounding screw from the firewall chassis.
2. Attach the grounding screw to the ring terminal of the grounding cable.
3. Use a Phillips screwdriver to fasten the grounding screw into the grounding hole on the firewall.
4. Remove the hex nut from the grounding strip.
5. Use a pair of needle-nose pliers to bend a hook at the other end of the grounding cable. Attach
the hook to the grounding point, and secure the hook with a screw.

16
Figure2-11 Grounding the firewall with a grounding strip
Grounding the firewall with the grounding terminal on the rack
1. Remove the grounding screw from the firewall chassis.
2. Attach the grounding screw to the ring terminal of the grounding cable.
3. Use a Phillips screwdriver to fasten the grounding screw into the grounding hole on the firewall.
4. Remove the grounding screw from the grounding point on the rack.
5. Use a pair of needle-nose pliers to bend a hook at the other end of the grounding cable. Attach
the hook to the grounding point, and secure the hook with the screw.
Figure2-12 Grounding the firewall with the grounding terminal on the rack
Installing power modules
CAUTION:
•
Make sure the power module is powered off and the grounding cable is correctly connected
before installation.
•
Do not install both AC and DC power modules on the same firewall.
•Only the F1070, F1080, and F1090 firewalls support removable power modules.
Installing a power module for an F1070 or F1080 firewall
The installation procedures for AC and DC power modules are similar. The following procedure
installs an AC power module.
To install a power module for an F1070 or F1080 firewall:

17
1. Remove the filler panel (if any) from the target power module slot.
Figure2-13 Removing the filler panel from an F1070 or F1080 firewall
The firewall comes with the PWR1 slot empty and the PWR0 slot installed with a filler panel.
2. Orient the power module with its handle at the left. Holding the handle of the module with one
hand and supporting the module bottom with the other, slide the power module slowly into the
slot along the guide rails.
3. Use a Phillips screwdriver to fasten the captive screws on the power module to secure the
power module in place.
Figure2-14 Installing a power module for an F1070 or F1080 firewall
Installing a power module for an F1090 firewall
The installation procedures for AC and DC power modules are similar. The following procedure
installs an AC power module.
To install a power module for an F1090 firewall:
1. Remove the filler panel (if any) from the target power module slot.
Figure2-15 Removing the filler panel from an F1090 firewall
1
2
1
3
4
4
1 2