HP F5000 User manual
HP F5000 Firewall
Installation Guide
Part number: 5998-1413
Document version: 6PW101-20121130
5998-1413
Legal and notice information
© Copyright 2012 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or use
of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
i
Contents
Product overview·························································································································································· 1
F5000 physical architecture ············································································································································1
Main processing unit (NSQ1MPUA0) ····························································································································2
Interface modules ······························································································································································2
NSQ1GT8C40·························································································································································2
NSQ1GT8P40··························································································································································3
NSQ1XP20·······························································································································································3
Power supplies···································································································································································3
AC-input power supply ············································································································································4
DC-input power supply ············································································································································4
Fan trays·············································································································································································5
Preparing for installation ············································································································································· 6
Safety recommendations ··················································································································································6
Safety symbols ··························································································································································6
General safety recommendations···························································································································6
Safety with electricity ···············································································································································6
Safety with laser ·······················································································································································6
Safety with firewall moving·····································································································································7
Examining the installation site ·········································································································································7
Temperature and humidity·······································································································································7
Altitude ······································································································································································8
Cleanness··································································································································································8
Cooling system ·························································································································································8
ESD prevention ·························································································································································9
EMI·········································································································································································· 10
Lightning protection··············································································································································· 10
Rack-mounting························································································································································ 11
Installation tools······························································································································································ 11
Accessories supplied by the firewall···························································································································· 11
Checklist before installation ·········································································································································· 12
Installing the firewall··················································································································································14
Installation flow ······························································································································································ 15
Check before installation··············································································································································· 15
Installing the firewall in a 19-inch rack ······················································································································· 15
Installing cage nuts to the rack ···························································································································· 15
Installing the cable management brackets·········································································································· 16
Installing the mounting brackets to the firewall ·································································································· 17
Installing the firewall to the rack·························································································································· 18
Grounding the firewall ·················································································································································· 18
Installing an MPU ··························································································································································· 19
Installing an interface module······································································································································· 20
Installing a fan tray ························································································································································ 21
Installing a CF card························································································································································ 22
Installing an air filter (optional)····································································································································· 23
Installing a power supply ·············································································································································· 24
Connecting a power cord ············································································································································· 25
Connecting an AC power cord ··························································································································· 25
Connecting a DC power cord······························································································································ 26
ii
Connecting Ethernet cables··········································································································································· 26
Connecting a copper Ethernet cable··················································································································· 26
Connecting an optical fiber ································································································································· 27
Logging in to the firewall and configuring basic settings ·······················································································30
Logging in to the firewall through the console port···································································································· 30
Connecting the firewall to a configuration terminal ·························································································· 30
Setting terminal parameters·································································································································· 31
Powering on the firewall ··············································································································································· 34
Checking before power-on··································································································································· 34
Powering on the firewall······································································································································· 34
Checking after power-on ······································································································································ 34
Logging in to the firewall through Telnet ····················································································································· 34
Logging to the firewall through a web browser·········································································································· 35
Performing basic settings for the firewall····················································································································· 36
Launching the basic configuration wizard·········································································································· 36
Configuring the system name and user password····························································································· 36
Configuring service management························································································································ 37
Configuring the IP address for an interface········································································································ 39
Configuring NAT··················································································································································· 40
Completing the configuration wizard ················································································································· 41
Hardware management and maintenance ··············································································································43
Displaying hardware information of the firewall········································································································ 43
Displaying the software and hardware version information of the firewall···················································· 43
Displaying the operational statistics of the firewall ··························································································· 44
Displaying the detailed information about a module ························································································ 44
Displaying the electrical label information of a module ··················································································· 45
Displaying the CPU usage of a module ·············································································································· 46
Displaying the memory usage of the MPU ········································································································· 46
Displaying the CF card information ···················································································································· 46
Displaying the operational status of the fan······································································································· 47
Displaying the operational status of power supplies························································································· 47
Solving system faults ······················································································································································ 47
Solving system faults ············································································································································· 47
Viewing the system fault solving method ············································································································ 48
Saving the current configuration of the firewall·········································································································· 48
Rebooting a module or the firewall······························································································································ 49
Replacement procedures ···········································································································································50
Safety recommendations ··············································································································································· 50
Replacing a power supply ············································································································································ 50
Replacing an MPU ························································································································································· 51
Replacing an interface module····································································································································· 52
Replacing a transceiver module ··································································································································· 52
Replacing a CF card······················································································································································ 53
Replacing a fan tray ······················································································································································ 54
Replacing an air filter ···················································································································································· 55
Troubleshooting··························································································································································57
MPU failures ··································································································································································· 57
RUN LED is off ······················································································································································· 57
RUN LED fast flashes············································································································································· 57
ALM LED is steady on or flashes·························································································································· 58
Interface module failures ··············································································································································· 58
RUN LED is off ······················································································································································· 58
iii
RUN LED fast flashes············································································································································· 58
Power supply failures····················································································································································· 58
Power LED is off····················································································································································· 58
Red power LED is on············································································································································· 59
Fan failures ····································································································································································· 59
Fan tray is absent ·················································································································································· 59
ALM LED is red ······················································································································································ 59
Configuration system problems ···································································································································· 60
No terminal display ·············································································································································· 60
Garbled terminal display······································································································································ 60
Using the AUX port as the backup console port········································································································· 60
Password loss ································································································································································· 61
User password loss ··············································································································································· 61
Super password loss ············································································································································· 62
Cooling system failure ··················································································································································· 62
Host software file missing errors··································································································································· 63
Appendix A Technical specifications························································································································65
Dimensions and weight ················································································································································· 65
Power consumption range············································································································································· 65
AC power supply ··························································································································································· 65
DC power supply ··························································································································································· 65
Fan tray ··········································································································································································· 66
MPU (NSQ1MPUA0)····················································································································································· 66
Technical specifications ········································································································································ 66
Components ··························································································································································· 67
Interface modules ··························································································································································· 69
NSQ1GT8C40······················································································································································ 69
NSQ1XP20···························································································································································· 70
NSQ1GT8P40······················································································································································· 70
Appendix B LEDs························································································································································72
MPU LEDs········································································································································································ 72
Interface module LEDs···················································································································································· 73
NSQ1GT8C40······················································································································································ 73
NSQ1XP20···························································································································································· 74
NSQ1GT8P40······················································································································································· 74
Power supply LEDs ························································································································································· 75
Fan tray LEDs ·································································································································································· 76
Appendix C Cables ···················································································································································77
Ethernet twisted pair cable············································································································································ 77
Introduction ···························································································································································· 77
Making an Ethernet twisted pair cable ··············································································································· 80
Optical fiber ··································································································································································· 81
Appendix D AC power cables used in different countries or regions ··································································83
10A AC power cables used in different countries or regions··················································································· 83
16A AC power cables used in different countries or regions··················································································· 86
Support and other resources ·····································································································································89
Contacting HP ································································································································································ 89
Subscription service ·············································································································································· 89
Related information························································································································································ 89
Documents······························································································································································ 89
Websites································································································································································· 89
Conventions ···································································································································································· 90
1
Product overview
This chapter includes these sections:
•F5000 physical architecture
•Main processing unit (NSQ1MPUA0)
•Interface modules
•Power supplies
•Fan trays
F5000 physical architecture
Figure 1 Front view
(1) MPU slot (slot 0)
(2) Fan tray
(3) Power supply slot (PWR1) (AC power supply in this figure)
(4) PoE module slot (reserved)
(5) Power supply slot (PWR2) (6) ESD-preventive wrist strap slot and mark
(7) Interface module slots (slots 1 throu
g
h 4)
NOTE:
No PoE modules are available for the firewall.
23456
7
1
2
Figure 2 Rear view
(1) Rear cover handle (do not use this handle to lift the chassis)
(2)
A
ir
filter (optional)
(3) Chassis handle (4) Grounding terminal and sign
(5)
A
ir vents
Main processing unit (NSQ1MPUA0)
Figure 3 NSQ1MPUA0 front panel
(1) CF card button
(2) CF card slot
(3) Captive screw
(4)
Reset button (RESET)
(5) Ejector lever (6) Device-mode USB port 1 (1)
(7) Host-mode USB port 0 (0) (8)
A
UX port (AUX)
(9) Console port (CONSOLE) (10) HA port (HA)
(11) Management Ethernet port (MANAGEMENT)
Interface modules
NSQ1GT8C40
The NSQ1GT8C40 provides eight copper ports and four combo interfaces.
3
Figure 4 NSQ1GT8C40 front panel
(1) Copper ports (GE0 through GE7) (2) Combo interfaces (GE8 through GE11)
(3) Captive screw
(4) Ejector lever
NSQ1GT8P40
The NSQ1GT8P40 provides eight fiber ports and four combo interfaces.
Figure 5 NSQ1GT8P40 front panel
(1) Fiber ports (GE0 throu
g
h GE7) (2) Combo interfaces (GE8 throu
g
h GE11)
(3) Captive screw
(4) Ejector lever
NOTE:
A
combo interface comprises a copper port and an SFP port. By default, the copper port of a combo
interface is enabled. The two ports cannot work simultaneously. When you enable either port, the other
port is automatically disabled. To activate the copper combo port or fiber combo port, use the combo
enable { copper | fiber } command in interface view.
NSQ1XP20
The NSQ1XP20 provides two XFP ports and supports the LAN PHY mode only.
Figure 6 NSQ1XP20 front panel
Power supplies
The HP F5000 can be DC-powered or AC-powered. You can install two power supplies in your firewall,
and they must be the same model.
4
The F5000 firewall uses hot swappable power supplies. You can install one power supply, or for
redundancy, two power supplies for your firewall.
AC-input power supply
Figure 7 AC-input power supply front view
(1)
A
C-input power receptacle (2) Power switch
(3) Handle
DC-input power supply
Figure 8 DC-input power supply front view
(1) DC-input terminal block (2) Power switch
(3) Handle
5
Fan trays
Figure 9 Fan tray
(1) Handle (2)
Fans
6
Preparing for installation
This chapter includes these sections:
•Safety recommendations
•Examining the installation site
•Installation tools
•Accessories supplied by the firewall
•Checklist before installation
Safety recommendations
Safety symbols
When reading this document, note the following symbols:
WARNING means an alert that calls attention to important information that if not understood or
followed can result in personal injury.
CAUTION means an alert that calls attention to important information that if not understood or
followed can result in data loss, data corruption, or damage to hardware or software.
General safety recommendations
•Keep the chassis and installation tools away from walk areas.
•Make sure that the ground is dry and flat and anti-slip measures are in place.
•Unplug all the external cables (including power cords) before moving the chassis.
Safety with electricity
•Locate the emergency power-off switch in the room before installation. Shut the power off at once in
case accident occurs.
•Make sure that the firewall has been correctly grounded.
•Do not open or close the chassis cover when the firewall is powered on.
•Use an uninterrupted power supply (UPS).
•If there are two power inputs, disconnect the two power inputs to power off the firewall.
•Do not work alone when the firewall has power.
•Always check that the power has been disconnected.
Safety with laser
•Do not stare into the optical port or fiber connector because the laser light emitted from the optical
fiber may hurt your eyes.
•Install a dust plug on the transceiver module to avoid damage to the transceiver module.
7
Safety with firewall moving
When moving an F5000 firewall, note the following guidelines:
•When moving the firewall, hold the handles at both sides of the chassis.
•Use at least two persons to move the firewall.
•Move the firewall carefully.
CAUTION:
Do not hold the handle of the fan tray or power supply, the handle of the rear cover of the chassis, or the
air vents of chassis. Any attempt to carry the firewall with these parts may cause equipment damage or
even bodily injury.
Examining the installation site
The F5000 firewall can only be used indoors. To ensure that the firewall works properly and to prolong
its service lifetime, the installation site must meet the following requirements:
•Temperature and humidity
•Altitude
•Cleanness
•Cooling system
•ESD prevention
•EMI
•Lightning protection
•Rack-mounting
Temperature and humidity
You must maintain a proper temperature and humidity in the equipment room. Long-term high humidity
may lead to bad insulation, electricity leakage, mechanical property changes, and metal corrosion.
However, if the humidity is too low, captive screws may become loose as the result of contraction of
insulation washers and static electricity may be produced in a dry environment to jeopardize the circuits
on the device. A high temperature is the most undesirable condition, because it accelerates the aging of
insulation materials and significantly lowers reliability and service life of the firewall.
Table 1 Temperature requirements
Item Temperature
Operating temperature 0°C to 45°C (32°F to 113°F)
Storage temperature –40°C to 70°C(–40°F to 158°F)
Table 2 Humidity requirements
Item Humidity
Operating humidity 10% to 95%
Storage humidity 5% to 95%
8
Altitude
Table 3 Altitude requirements
Item Altitude
Operating altitude –60 m (–196.85 ft) to 4 km (2.49 miles)
Storage altitude –60 m (–196.85 ft) to 4.5km(2.8 miles)
Cleanness
Dust buildup on the chassis may result in electrostatic adsorption, which causes poor contact of metal
components and contact points, especially when indoor humidity is low. In the worst case, electrostatic
adsorption can cause communication failure.
Table 4 Dust concentration limit in the equipment room
Substance Concentration limit (particles/cu m)
Dust particles 3 x 104
(No visible dust on desk in three days)
NOTE:
Dust particle diameter 5 m
The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion and
premature aging of components, as shown in Table 5.
Table 5 Harmful gas limits in an equipment room
Gas Max. (mg/m3)
SO20.2
H2S 0.006
NH30.05
Cl20.01
Cooling system
The F5000 firewall adopts left to right airflow for heat dissipation.
9
Figure 10 F5000 airflow
•Make sure there is enough space (greater than 10 cm (3.94 in)) around the air intake and outlet
vents on the firewall for good ventilation.
•Make sure the installation site has a good cooling system.
ESD prevention
To prevent electrostatic discharge (ESD), note the following guidelines:
•Make sure that the firewall and the floor are well grounded.
•Take dust-proof measures for the equipment room.
•Maintain the humidity and temperature at a proper level.
•Always wear an ESD-preventive wrist strap when touching a circuit board or transceiver module.
•Place the removed CF card or interface module on an antistatic workbench, with the face upward,
or put it into an antistatic bag.
•Touch only the edges, instead of electronic components when observing or moving a removed CF
card or interface module.
To use the ESD-preventive wrist strap, perform the following steps:
1. Wear the wrist strap on your wrist.
2. Lock the wrist strap tight around your wrist to keep good contact with the skin.
3. Insert the ESD-preventive wrist strap into the specially designed hole on the firewall chassis.
4. Make sure that the firewall chassis is well grounded.
10
Figure 11 Use an ESD-preventive wrist strap
(1) ESD-preventive wrist strap (2) Lock
(3) leash
CAUTION:
Check the resistance of the ESD-preventive wrist strap for safety. The resistance readin
g
should be in the
range of 1 to 10 megohm (Mohm) between human body and the ground.
EMI
All electromagnetic interference (EMI) sources, from outside or inside of the firewall and application
system, adversely affect the firewall in a conduction pattern of capacitance coupling, inductance
coupling, electromagnetic wave radiation, or common impedance (including grounding system)
coupling. To prevent EMI, note the following guidelines:
•Take measures against interference from the power grid.
•Do not use the firewall together with the grounding equipment or light-prevention equipment of
power equipment, and keep the firewall far away from them.
•Keep the firewall far away from high-power radio launchers, radars, and equipment with high
frequency or high current.
NOTE:
Use electromagnetic shielding when necessary.
Lightning protection
To protect the firewall from lightning better, do as follows:
•Make sure the grounding cable of the chassis is well grounded.
11
•Make sure the grounding terminal of the AC power receptacle is well grounded.
•Install a lightning arrester at the input end of the power supply to enhance the lightning protection
capability of the power supply.
Rack-mounting
Before mounting the firewall in a rack, adhere to the following requirements:
•Install the firewall to a rack that has rack shelves.
•The rack is sturdy enough to support the firewall and its accessories.
•Make sure that the size of the rack is appropriate for the firewall, and that there is enough clearance
around the left and right sides of the firewall for heat dissipation.
•For heat dissipation and device maintenance, make sure the front and rear of the rack is at least 0.8
m (2.62 ft) away from walls or other devices, and that the headroom in the equipment room is no
less than 3 m (9.84 ft).
Installation tools
Flat-blade
screwdriver Phillips screwdriver
Needle-nose pliers Wire-stripping
pliers Diagonal pliers
RJ45 crimping
pliers Multimeter Network cable
tester Mark pen
NOTE:
No installation tool is provided with the firewall. Prepare them yourself.
Accessories supplied by the firewall
Console cable Grounding cable ESD-preventive
wrist strap Cable tie Mounting
brackets
M6 screw Cage nut
12
Checklist before installation
Table 6 Checklist before installation
Item Requirements Result
Installation site
Ventilation
•There is a minimum clearance of 10 cm (3.94 in)
around the inlet and exhaust vents for heat
dissipation of the firewall chassis.
•A ventilation system is available at the installation
site.
Operating
temperature 0°C to 45°C (32°F to 113°F)
Operating
humidity 10% to 95%
Cleanness
•Dust concentration 3 × 104particles/m³
•No dust on desk within three days
ESD prevention
•The equipment and floor are well grounded.
•The equipment room is dust-proof.
•The humidity and temperature are at a proper level,
respectively.
•Wear an ESD-preventive wrist strap and uniform
when touching a circuit board.
•Place the removed CF card or interface module on an
antistatic workbench, with the face upward, or put it
into an antistatic bag.
•Touch only the edges, instead of electronic
components when observing or moving a removed
CF card or interface module.
EMI prevention
•Take effective measures to protect the power system
from the power grid system.
•Separate the protection ground of the firewall from
the grounding device or lightning protection
grounding device as far as possible.
•Keep the firewall far away from radio stations, radar
and high-frequency devices working in high current.
•Use electromagnetic shielding when necessary.
Lightning
protection
•The grounding cable of the chassis is well grounded.
•The grounding terminal of the AC power receptacle
is well grounded.
Electricity safety
•Equip an uninterrupted power supply (UPS).
•In case of emergency during operation, switch off the
external power switch.
13
Item Requirements Result
Rack-mounting
requirements
•The rack is sturdy enough to support the weight of the
firewall and installation accessories.
•The size of the rack is appropriate for the firewall.
•The front and rear of the rack are at least 0.8 m
(31.50 in) away from walls or other devices.
Safety
precautions
•The firewall is far away from any moist area and heat source.
•The emergency power switch in the equipment room is located.
Tools
•Installation accessories supplied with the firewall
•User supplied tools
Reference
•Documents shipped with the firewall
•Online documents
14
Installing the firewall
This chapter includes these sections:
•Installation flow
•Check before installation
•Installing the firewall in a 19-inch rack
•Grounding the firewall
•Installing an MPU
•Installing an interface module
•Installing a fan tray
•Installing a CF card
•Installing an air filter (optional)
•Installing a power supply
•Connecting a power cord
•Connecting Ethernet cables
IMPORTANT:
Keep the packages of your firewall and its accessories safely for future use.
Table of contents
Other HP Firewall manuals
Popular Firewall manuals by other brands
SonicWALL
SonicWALL TZ600 quick start guide
SonicWALL
SonicWALL 1RK53-116 Safety and regulatory information
Huawei
Huawei Eudemon8000E Series manual
Cisco
Cisco Small Business RV215W Administration guide
McAfee
McAfee IIP-M80K-ISAA - Network Security Platform... quick start guide
Meraki
Meraki MX67W installation guide
Fortinet
Fortinet FortiGate-400A quick start guide
3Com
3Com H3C SECPATH F5000-A5 ADVANCED VPN FIREWALL 12-PORT GIGABIT ETHERNET... installation manual
Fortinet
Fortinet FortiGate-100 installation guide
NETGEAR
NETGEAR ProSafe UTM9S quick start guide
IBM
IBM QRadar XGS 5200 Replacement instructions
PaloAlto Networks
PaloAlto Networks PA-5400 Series Hardware reference
IBM
IBM GX7000 Series Getting started instructions
Blue Coat
Blue Coat MC-S400 Series quick start guide
Cisco
Cisco Firepower 4100 Series Command reference
D-Link
D-Link DFL-210 - NetDefend - Security Appliance Cli reference guide
Fortinet
Fortinet FortiGate FortiGate-1000 installation guide
Advantech
Advantech FWA-3240 Startup manual