H3C SecPath F5000-AI-20 User manual

H3C SecPath F5000-AI-20[40] Firewalls
Installation Guide
New H3C Technologies Co., Ltd.
http://www.h3c.com
Document version: 6W100-20211224

Copyright © 2021, New H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this
document are the property of their respective owners.
Notice
The information in this document is subject to change without notice. All contents in this document, including
statements, information, and recommendations, are believed to be accurate, but they are presented without
warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions
contained herein.
Environmental protection
This product has been designed to comply with the environmental protection requirements. The storage, use,
and disposal of this product must meet the applicable national laws and regulations.

Preface
This installation guide describes the procedure for installing H3C SecPath F5000-AI firewall series. It
includes the following sections: preparing for installation, installing the firewall, logging in to the
firewall, hardware replacement, hardware management and maintenance, and troubleshooting.
This preface includes the following topics about the documentation:
•
Audience.
•
Conventions.
•
Documentation feedback.
Audience
This documentation is intended for:
•
Network planners.
•
Field technical support and servicing engineers.
•
Network administrators.
Conventions
The following information describes the conventions used in the documentation.
Command conventions
Convention
Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select a minimum of one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntaxchoices separated byvertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window opens; click OK.
>
Multi-level menus are separated by angle brackets. For example, File > Create >

Convention
Description
Folder.
Symbols
Convention
Description
WARNING!
An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION:
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT:
An alert that calls attention to essential information.
NOTE:
An alert that contains additional or supplementary information.
TIP:
An alert that provides helpful information.
Network topology icons
Convention
Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Represents a wireless terminator unit.
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
T
T
T
T

Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.

i
Contents
1 Preparing for installation··········································································1-1
Safety recommendations ································································································································1-1
Safety symbols········································································································································1-1
General safety recommendations···········································································································1-1
Electrical safety·······································································································································1-2
Laser safety·············································································································································1-2
Handling safety ·······································································································································1-2
Examining the installation site·························································································································1-3
Weight support········································································································································1-3
Temperature and humidity······················································································································1-3
Cleanliness··············································································································································1-3
Cooling system········································································································································1-4
ESD prevention·······································································································································1-5
EMI··························································································································································1-5
Lightning protection·································································································································1-6
Power supply···········································································································································1-6
Installation tools ··············································································································································1-6
Installation accessories···································································································································1-7
Pre-installation checklist··································································································································1-7
2 Installing the firewall ················································································2-1
Grounding the firewall·····································································································································2-3
Installing the firewall in a standard 19-inch rack ·····························································································2-3
Installing a power supply·································································································································2-5
Installing a fan tray··········································································································································2-7
Installing an interface module ·························································································································2-8
Installing a drive··············································································································································2-8
Connecting Ethernet cables····························································································································2-9
Connecting a copper Ethernet port·········································································································2-9
Connecting a fiber port····························································································································2-9
Connecting the power cord···························································································································2-11
Connecting an AC power cord··············································································································2-11
Connecting a DC power cord················································································································2-12
Verifying the installation································································································································2-13
3 Accessing the firewall for the first time·····················································3-1
Setting up the configuration environment ·······································································································3-1
Powering on the firewall··································································································································3-1
Checking before power-on······················································································································3-1
Powering on the firewall··························································································································3-1
Checking after power-on·························································································································3-1
Logging in to the firewall ·································································································································3-3
Logging in from the console port·············································································································3-3
Logging in from the Web interface··········································································································3-4
Logging in through Telnet ·······················································································································3-4
4 Hardware replacement·············································································4-1
Replacing a fan tray········································································································································4-1
Replacing a power supply·······························································································································4-1
Replacing an interface module ·······················································································································4-2
Replacing a drive ············································································································································4-3
Replacing a transceiver module······················································································································4-4
5 Hardware management and maintenance···············································5-1
Displaying detailed information about the firewall···························································································5-1
Displaying the software and hardware version information for the firewall·····················································5-1
Displaying the electrical label information for the firewall················································································5-2

ii
Displaying the CPU usage of the firewall········································································································5-3
Displaying the memory usage of the firewall···································································································5-3
Displaying the operational status of power supplies·······················································································5-4
Displaying the operational status of fan trays ·································································································5-4
Displaying the temperature information of the firewall····················································································5-5
Displaying the operational statistics of the firewall··························································································5-6
Displaying transceiver module information ·····································································································5-6
Rebooting the firewall······································································································································5-7
6 Troubleshooting·······················································································6-1
Power supply failure········································································································································6-1
Configuration terminal display problem···········································································································6-1
Password loss·················································································································································6-2
Cooling system failure·····································································································································6-2
Software loading failure···································································································································6-2
7 Appendix A Chassis views and technical specifications··························7-3
Chassis views·················································································································································7-3
Front panel··············································································································································7-3
Interface modules····································································································································7-4
Power supplies········································································································································7-6
Fan trays·················································································································································7-7
Technical specifications··································································································································7-8
Dimensions and weights·························································································································7-8
Memory and storage media ····················································································································7-9
Power consumption·································································································································7-9
Power supply specifications····················································································································7-9
Fan tray specifications ··························································································································7-10
Drive specifications·······························································································································7-10
Port specifications·································································································································7-11
8 Appendix B LEDs··················································································8-15
Front panel and rear panel LEDs··················································································································8-15
Interface module LEDs··································································································································8-16
9 Appendix C Cables···············································································9-17
Console cable ···············································································································································9-17
Ethernet twisted pair cable····························································································································9-18
Introduction ···········································································································································9-18
Making an Ethernet twisted pair cable··································································································9-21
Optical fiber···················································································································································9-21

1-1
1 Preparing for installation
H3C SecPath F5000-AI firewall series includes the F5000-AI-20 and F5000-AI-40 models.
Safety recommendations
To avoid any equipment damage or bodily injury, read the following safety recommendations before
installation. Note that the recommendations do not cover every possible hazardous condition.
Safety symbols
When reading this document, note the following symbols:
WARNING means an alert that calls attention to important information that if not understood or
followed can result in personal injury.
CAUTION means an alert that calls attention to important information that if not understood or
followed can result in data loss, data corruption, or damage to hardware or software.
General safety recommendations
•
Do not place the firewall on an unstable case or desk. The firewall might be severely damaged
in case of a fall.
•
Make sure the ground is dry and flat and anti-slip measures are in place.
•
Keep the chassis and installation tools away from walk areas.
•
Keep the chassis clean and dust-free.
•
Do not place the firewall near water or in a damp environment. Prevent water or moisture from
entering the firewall chassis.
•
Ensure good ventilation of the equipment room and keep the air inlet and outlet vents of the
firewall free of obstruction.
•
Make sure the operating voltage is in the required range.
•
Use a screwdriver, rather than your fingers, to fasten screws.
•
Stack devices according to the sizes of and packing symbols on the packages.
Table1-1 Packing symbols
Symbol
Description
Stored with a maximum stack of n units.
Transported and stored with the arrows up.
Transported and stored with care.

1-2
Symbol
Description
Transported and stored avoiding humidity, rains and wet floor.
Electrical safety
•
Carefully examine your work area for possible hazards such as moist floors, ungrounded power
extension cables, and missing safety grounds.
•
Locate the emergency power-off switch in the room before installation. Shut the power off at
once in case accident occurs.
•
Do not work alone when the firewall has power.
•
Always verify that the power has been disconnected.
Laser safety
WARNING
!
Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into
beams or view directly with optical instruments when the switch is operating.
The firewall is a Class 1 laser device.
•
Before you disconnect the fiber connector, execute the shutdown command in interface view
to disable the optical source.
•
Install dust caps to disconnected optical fiber connectors and ports on disconnected transceiver
modules to avoid damage caused by built-up dust.
•
Insert a dust plug into empty fiber ports.
Handling safety
When you move the firewall, follow these guidelines:
•
Move and unpack the firewall carefully to avoid firewall damage.
•
Unpack the firewall at least half an hour and power on the firewall at least two hours after you
move it from a place below 0°C (32°F) to the equipment room. This prevents condensation and
even damage to the firewall.
•
Use a safety hand truck when you move multiple firewalls.
•
Before you move the firewall, remove all cables and mounting brackets.
•
For long-distance transportation, remove all the field-replaceable units (FRUs), such as power
supplies and interface modules, and package them separately, and install the filler panels
supplied with the firewall. For short-distance transportation, make sure all the FRUs are
securely seated in the slots and the screws are fastened.
•
When you move or lift the firewall chassis, support the bottom of the chassis, rather than
holding any FRU.
•
Make sure the accessories of the firewall are not lost or damaged during firewall moving.

1-3
Examining the installation site
The firewall can only be used indoors. To make sure the firewall operates correctly and to prolong its
service lifetime, the installation site must meet the following requirements.
Weight support
Make sure the floor can support the total weight of the rack, chassis, modules, and all other
components. For more information, see "Dimensions and weights."
Temperature and humidity
Maintain appropriate temperature and humidity in the equipment room.
•
Lasting high relative humidity can cause poor insulation, electricity leakage, mechanical
property change of materials, and metal corrosion.
•
Lasting low relative humidity can cause washer contraction and ESD and bring problems
including loose captive screws and circuit failure.
•
High temperature can accelerate the aging of insulation materials and significantly lower the
reliability and lifespan of the firewall.
For the temperature and humidity requirements of the firewall, see Table1-2.
Table1-2 Temperature/humidity requirements
Temperature
Relative humidity
•Operating:
Without drives: 0°C to 45°C (32°F to 113°F)
With drives: 5°C to 40°C (41°F to 104°F)
•Storage: –40°C to +70°C (–40°F to +158°F)
•Operating:
Without drives: 5% RH to 95% RH,
noncondensing
With drives: 10% RH to 90% RH,
noncondensing
•Storage: 5% RH to 95% RH, noncondensing
Cleanliness
Dust buildup on the chassis might result in electrostatic adsorption, which causes poor contact of
metal components and contact points, especially when indoor relative humidity is low. In the worst
case, electrostatic adsorption can cause communication failure.
Table1-3 Dust concentration limit in the equipment room
Substance
Concentration limit (particles/m
3
)
Dust particles ≤ 3 × 104
(No visible dust on desk in three days)
NOTE:
Dust particle diameter ≥ 5 µm
The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion
and premature aging of components, as shown in Table1-4.