Hillstone SG-6000 X Series Operating and maintenance manual

Hillstone SG-6000 X-Series Hardware
Reference Guide
TechDocs | docs.hillstonenet.com

About This Guide
Thanks for choosing the network security products from Hillstone Networks.
This document is an installation guide for Hillstone devices to help you install the Hill-
stone device properly.
For more information, refer to the documentation site: https://-
docs.hillstonenet.com.cn
To provide feedback on the documentation, please write to us at: TechDoc-
[e-mail]
Contact Information:
US Headquarters:
5201 Great America Pkwy, #420
Santa Clara, CA 95054
https://www.hillstonenet.com.cn/about/contact_Hillstone.html
Hillstone Networks
www.hillstonenet.com
TWNO: TW-HW-X-EN-V4.3-10/18/2022

Contents
Contents 1
Preface 1
About This Manual 1
Document Conventions 1
Chapter 1 Product Profile 2
Expansion Module Introduction 3
System Control Module (SCM) 3
HA Function with Two SCMs 3
Security Service Module (SSM) 4
QoS Service Module (QSM) 4
I/O Module (IOM) 5
Service and IO Module (SIOM) 5
Switch Module(SWM) 5
Configuring an Interface Module 6
Bypass Module 6
Bypassing the Device with a Bypass Module 6
Expansion Modules Compatible with SG-6000 X Series 7
SG-6000-X10800 9
Hardware Parameters 11
TOC - 1

Front Panel 11
Back Panel 13
Expansion Modules 14
SCM-300 15
CLR Button 16
SSM-300 16
QSM-300 17
IOM-P100-300 18
IOM-P40-300 19
SIOM-P40-300 20
SIOM-P100-300 21
SIOM-P100D-300 22
SWM-300 24
LED Indicators 24
Power Supply Module 27
Power Module Diagram 28
Cooling System 29
Port Attributes 31
SG-6000-X9180 31
Hardware Parameters 32
Front Panel 33
TOC - 2

Back Panel 34
Expansion Modules 35
SCM-280 35
CLR Button 37
SSM-300 37
QSM-300 38
IOM-P100-300 39
IOM-P40-300 40
SIOM-P40-300 42
SIOM-P100-300 43
SIOM-P100D-300 44
SWM-280 45
Instructions for Using SSM/IOM/QSM/SIOM 46
LED Indicators 46
Power Supply Module 49
Power Module Diagram 50
Cooling System 51
Port Attributes 53
SG-6000-X8180 53
Hardware Parameters 54
Front Panel 55
TOC - 3

Back Panel 56
Expansion Modules 56
SCM-260 57
CLR Button 58
SCM-D1T-260 58
SCM-D2T-260 60
SIOM-P100-260 61
SIOM-P100H-260 62
IOM-8MM-B-260 63
Instructions for Using IOM-8MM-B-260 64
Monitor the Status of Ports 65
Forced Bypass 65
LED Indicators 65
Power Supply Module 68
Power Module Diagram 70
Cooling System 71
Port Attributes 72
SG-6000-X7180 72
Hardware Parameters 73
Front Panel 74
CLR Button 75
TOC - 4

Back Panel 76
Expansion Modules 77
SCM-100 77
SSM-200 78
SSM-100 79
QSM-200 80
QSM-100 81
IOM-16SFP-100 82
IOM-4XFP-100 83
IOM-2Q8SFP+-200 84
IOM-2Q8SFP+ 85
IOM-8SFP+ 86
IOM-2SM-BE/IOM-2MM-BE 87
SWAP Pinhole 88
LED Indicators 88
Power Supply Module 92
Power Module Diagram 94
SD Card Slot 95
Cooling System 96
Port Attributes 97
Ports of the SG-6000 X Series 97
TOC - 5

Console Port 100
Auxiliary Port (AUX port) 101
USB Port 101
Copper Port 102
SFP Port 102
1GE(SFP) Transceiver Module 103
1GE(SFP) Copper SFP Module 104
SFP+ Port 105
10GE(SFP+) Transceiver Module 106
XFP Port 108
10GE(XFP) Transceiver Module 109
QSFP+ Port 110
40GE(QSFP+) Transceiver Module 111
QSFP28 Port 112
100GE(QSFP28) Transceiver Module 113
Optical Ports Features: Interoperability, Backward, Compatibility, and Copper SFP Com-
patibility 115
Interoperability 115
Backward Compatibility 116
Copper SFP Compatibility 116
Chapter 2 Installation Preparations 118
TOC - 6

Introduction 118
Installation Site Environment Requirements 118
Temperature/Humidity Requirements 118
Clearness Requirements 119
ESD Prevention 119
EMI Prevention 119
Grounding Requirements 120
Cabinet Requirements 120
Cabinet Size and Clearance Requirements 120
Cabinet Airflow Requirements 120
Rack Requirements 121
Rack Size and Strength 121
Rack Clearance Requirement 121
Rack Mounting Requirements 122
Unpacking 122
Unpacking the Package of SG-6000-X10800 122
Unpacking the Package of SG-6000-X9180/X8180/X7180/X6180/X6150 129
Other Safety Recommendations 132
Verifying the Parts Received 132
Verifying the Parts Received 132
Installation Devices/Tools/Cables 132
TOC - 7

Chapter 3 Installation 134
Overview 134
Safety Requirements 134
General Safety Warnings 135
Preventing ESD Damage 135
Fire Safety Requirements 139
Install Mounting Rail Assemblies 139
Installing the Device in a Rack 141
Tools Required 141
Before Installation 141
Installing SG-6000-X10800 142
Installing SG-6000-X9180 144
Installing SG-6000-X8180 146
Installing SG-6000-X7180 148
Installing the Device Using a Lift 148
Installing the Device without a Lift 150
Installing Expansion Modules 151
Installing Expansion Modules of SG-6000-X10800 151
Tools Required 151
Installing an SCM/SWM 152
Installing an SSM/IOM/SIOM/QSM/Bypass 153
TOC - 8

Installing Expansion Modules of SG-6000-X9180 155
Tools Required 155
Installing an SCM/SWM 155
Installing an SSM/IOM/SIOM/QSM/Bypass 156
Installing Expansion Modules of SG-6000-X8180 158
Tools Required 158
Installing an SCM 158
Installing an SIOM 159
Installing Expansion Modules of SG-6000-X7180 160
Tools Required 161
Installing an SSM 162
Installing a QSM 163
Installing an IOM 164
Installing a Bypass Module 166
Installing a Power Module 166
Tools Required 167
Installing an AC/DC Power Module of SG-6000-X10800/X9180 167
Installing an AC/DC Power Module of SG-6000-X8180 168
Installing a Power Module of SG-6000-X7180 169
Installing an AC Power Module 169
Installing a DC Power Module 170
TOC - 9

Connecting Cables 171
Grounding the Chassis 171
Grounding the Chassis of SG-6000-X10800/X9180/X7180 171
Grounding the Chassis of SG-6000-X8180 172
Connecting the Console Cable 174
Connecting the Ethernet/Optical Cable 174
Connecting the Ethernet Copper Cable 174
Connecting the Ethernet Fiber Cable 175
Connecting an AC Power Cable 176
Connecting a DC Power Cable 177
Connecting the DC Power Cable of SG-6000-X10800/X9180 177
Connecting the DC Power Cable of SG-6000-X8180 178
Connecting the DC Power Cable of SG-6000-X7180 179
Powering on/off the Device 180
Powering on/off SG-6000-X10800/X9180 180
Powering On/Off SG-6000-X8180 180
Powering On/Off SG-6000-X7180 181
Verification after Installation 181
Chapter 4 Boot and Configuration 182
Introduction 182
Establishing a Configuration Environment 182
TOC - 10

Console (CON) Connection 182
WebUI 184
Telnet or SSH 184
Basic Configuration 184
Chapter 5 Hardware Maintenance and Replacement 186
Overview 186
General Maintenance 186
Tools Required 186
Replacing a Power Module 187
Replacing an AC Power Module 187
Replacing a DC Power Module 188
Replacing an Expansion Module 188
Replacing an Expansion Module of SG-6000-X10800 188
Replacing an SCM/SWM 188
Replacing an SSM/IOM/SIOM/QSM/Bypass 189
Replacing an Expansion Module of SG-6000-X9180 191
Replacing an SCM/SWM 191
Replacing an SSM/IOM/SIOM/QSM/Bypass 192
Replacing an Expansion Module of SG-6000-X8180 193
Replacing an SCM 193
Replacing an SIOM 194
TOC - 11

Replacing an Expansion Module of SG-6000-X7180 195
Replacing an SCM 195
Replacing an SSM 195
Replacing a QSM 196
Replacing an IOM 197
Replacing a Bypass Module 198
Replacing the Cooling System Components 199
Replacing a Fan Tray 200
Replacing a Fan Tray of SG-6000-X10800 200
Replacing a Fan Tray of SG-6000-X9180 201
Replacing a Fan Tray on the Front Panel 201
Replacing a Fan Tray on the Back Panel 203
Replacing a Fan Tray of SG-6000-X8180 204
Replacing a Fan Tray of SG-6000-X7180 205
Replacing a Dustproof Net 206
Replacing a Dustproof Net of SG-6000-X10800 206
Replacing a Dustproof Net of SG-6000-X9180 209
Replacing a Dustproof Net of the Plastic Panel 209
Replacing a Dustproof Net of the Fan Tray 210
Replacing an Air Filter of SG-6000-X7180 211
Chapter 6 Troubleshooting 213
TOC - 12

Introduction 213
Losing the Administrator Password 213
Troubleshooting Expansion Modules 213
Troubleshooting the Cooling System 214
Troubleshooting the Power System 214
Troubleshooting the Configuration System 214
Appendix: Supported Versions of Devices 215
TOC - 13

Preface
About This Manual
Thanks for choosing the network security products from Hillstone Networks.
This document is an installation manual for the Hillstone SG-6000 X-Series device to help you
install the device properly.
This manual includes the following chapters:
lIntroduction
lInstallation Preparations
lInstallation
lBoot and Configuration
lHardware Maintenance and Replacement
lTroubleshooting
Document Conventions
This manual uses the following conventions for your convenience to read and understand:
lWarning: Indicates improper operation that may cause serious damage to equipment or injury
to operators. Thus, operators must strictly follow the operation rules.
lCaution: Indicates incorrect operation that may affect the normal use of the equipment. Oper-
ators should be careful.
lNote: Indicates information that may help readers understand the content.
Preface 1

Chapter 1 Product Profile
Hillstone SG-6000-X series is a high-performance carrier-grade device introduced by Hillstone
Networks. With a fully parallel security engine and modular design, the platform brings forth
scalability and adaptability that enables a rich set of device and application control solutions.
Designed for ISP, data centers, and large enterprises, the SG-6000-X series has a strong pro-
cessing ability of 1Tbps, integrates high performance, reliability and capacity, reduces network
complexity, centralizes management, and lowers TCO.
Hillstone SG-6000-X series product models include SG-6000-X10800, SG-6000-X9180, SG-
6000-X8180 and SG-6000-X7180, SG-6000-X6180, and SG-6000-X6150. Featuring a modular
design, the SG-6000-X series can meet the needs of different application environments with dif-
ferent types of expansion modules installed. Therefore, device performance is maximized.
Hillstone SG-6000-X series provides the following expansion modules:
lSystem Control Module (SCM): SCM manages and controls the system. A chassis can accom-
modate two SCMs for redundancy.
Hillstone provides the following 10 SCM models: SCM-300, SCM-280, SCM-260, SCM-
D1T-260, SCM-D2T-260, SCM-100, and SCM-20.
lSecurity Service Module (SSM): SSM is used to process data traffic.
Hillstone provides the following 5 SCM models: SSM-300, SSM-200, SSM-100, SSM-80, and
SSM-20.
lQoS Service Module (QSM): QSM is specially designed to provide high-quality QoS data pro-
cessing service. QSM uses a dedicated 64-bit multi-core processor.
Hillstone provides the following 5 QSM models: QSM-300, QSM-200, QSM-100, QSM-80,
and QSM-20.
lInput and Output Module (IOM): IOM provides SFP, XFP, QSFP+, and SFP+ ports for port
expansion.
Hillstone provides the following 11 IOM models: IOM-P100-300, IOM-P40-300, IOM-
2Preface

16SFP-100, IOM-16SFP-80, IOM-16SFP, IOM-4XFP-100, IOM-4XFP-80, IOM-4XFP,
IOM-2Q8SFP+-200, IOM-2Q8SFP+, and IOM-8SFP+.
lService and IO Module (SIOM): SIOM is used to process data traffic while providing QSFP+
and SFP+ ports for port expansion.
Hillstone provides the following 6 SIOM models: SIOM-P100-260, SIOM-P100H-260,
SIOM-P100D-300, SIOM-P100-300, and SIOM-P40-300.
lSwitch Module (SWM): SWM connects the expansion slots of the front panel to forward the
data. Only SG-6000-X10800, and SG-6000-X9180 support SWM modules.
Hillstone provides the following 3 SWM models: SWM-300, and SWM-280.
lBypass module: The bypass module can bypass the device.
Hillstone provides the following 5 Bypass modules: IOM-2SM-B, IOM-2SM-BE, IOM-2MM-
B, IOM-2MM-BE, and IOM-B-8MM-260.
For more information about supported versions of devices, see Appendix: Supported Versions of
Devices
Expansion Module Introduction
System Control Module (SCM)
System Control Module (SCM) is a hardware platform card that uses a dedicated 64-bit multi-core
processor and runs StoneOS, providing overall system management and control for the entire
product.
The device must have at least one SCM installed. You can install a second SCM for redundancy.
SCM can only be installed in the SCM slots of the back panel.
HA Function with Two SCMs
If the device has two SCMs installed, by default, the one installed in the SC0 slot is the master
SCM and works in the Master mode. The SCM installed in the SCM1 slot is the backup SCM and
works in the Backup mode. If the device has only one SCM installed, it works as the master SCM.
Preface 3

If a second SCM is installed, it works as a backup SCM. In this case, master SCM and backup
SCM are independent of their slots. If the master SCM fails, the backup SCM automatically takes
over the work of the master SCM to ensure business continuity.
Notes:
lDo not perform any configuration on the backup SCM.
lAfter the switchover, the new backup SCM still works in the Backup mode after reboots.
lAfter the switchover, the management interface should be reconnected.
lTo ensure that license information is synchronized, the system prompts you to restart the
device ( restart after disconnecting the network) after you install specific licenses. You are
required to perform operations following the prompt.
Security Service Module (SSM)
Security Service Module (SSM) is a hardware platform card that performs data processing other
than QoS.
The device should have at least one SSM installed. You can install more SSMs to escalate system
performance. SSMs should be installed in the general expansion slots.
QoS Service Module (QSM)
QoS Service Module (QSM) is a hardware platform card that solely performs Quality of Service
(QoS) processing.
lSG-6000-X10800/X9180 can process Qos with IOM/SIOM if no QSM is installed.
lSG-6000-X8180 can process Qos with SIOM if no QSM is installed.
lSG-6000-X7180 can process Qos with IOM if no QSM is installed.
lSG-6000-X6180/X6150 cannot process Qos if no QSM is installed.
You can install one or more QSMs and they should be installed in general expansion slots.
4Preface

I/O Module (IOM)
I/O Module (IOM) is a hardware platform card with ports that provides the following functions:
lReceive data
lFast forward data
lTransfer data to SSM, QSM, or SWM (only SG-6000-X10800, and SG-6000-X9180 support
the SWM module) modules.
The device should have at least one IOM installed and you can install more to increase the port
amount. IOM should be installed in general expansion slots.
Service and IO Module (SIOM)
Service and IO Module (SIOM) is a hardware platform card with ports that provides the following
functions:
lReceive data
lFast forward data
lTransfer data and process data traffic
You can install more than one SIOM modules to escalate system performance and increase the
port amount. SIOM should be installed in general expansion slots.
Switch Module(SWM)
Switch Module (SWM) is a hardware platform card that connects the general expansion slots of
the front panel to forward the data. Only SG-6000-X10800, and SG-6000-X9180 support the
SWM module.
The device must have at least one SWM installed. You can install a second SWM for redundancy.
SWM can only be installed in the SWM0 and SWM1 slots of the back panel. If the device has two
SWMs installed, they work in the redundancy mode in which the backup module takes over the
master module’s work when the master module fails.
Preface 5