HP A-F1000-E User manual

HP A-F1000-E VPN Firewall
Installation Guide
Part number: 5998-1412
Document version: 6PW101-20110909

Legal and notice information
© Copyright 2011 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or use
of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

i
Contents
Product overview·························································································································································· 1
Front panel view································································································································································1
Rear panel view ································································································································································2
Preparing for installation ············································································································································· 3
Safety recommendations ··················································································································································3
Safety symbols ··························································································································································3
General safety recommendations···························································································································3
Safety with electricity ···············································································································································3
Safety with laser ·······················································································································································4
Examining the installation site ·········································································································································4
Temperature and humidity·······································································································································4
Altitude ······································································································································································5
Cleanness··································································································································································5
Cooling system ·························································································································································5
ESD prevention ·························································································································································6
EMI·············································································································································································7
Lightning protection··················································································································································7
Rack-mounting···························································································································································7
Installation tools·································································································································································7
Accessories supplied by the firewall·······························································································································8
Checklist before installation ·············································································································································8
Installing the firewall ··················································································································································10
Installation flow ······························································································································································ 10
Installing the firewall in a 19-inch rack························································································································ 10
Installing cage nuts and rear mounting brackets to the rack············································································ 10
Installing front mounting brackets and load-bearing screws to the firewall···················································· 11
Installing the firewall to the rack·························································································································· 12
Grounding the firewall ·················································································································································· 13
Installing interface modules··········································································································································· 13
Installing a CF card························································································································································ 14
Connecting Ethernet cables··········································································································································· 15
Connecting a copper Ethernet cable··················································································································· 15
Connecting an optical fiber ································································································································· 15
Connecting an AC power cord ···································································································································· 17
Connecting an RPS DC power cord····························································································································· 18
Logging in to the firewall and configuring basic settings ·······················································································19
Logging in to the firewall through the console port···································································································· 19
Connecting the firewall to a configuration terminal through a console cable················································ 19
Setting terminal parameters·································································································································· 20
Powering on the firewall ··············································································································································· 23
Checking before power-on··································································································································· 23
Checking after power-on ······································································································································ 23
Logging in to the firewall through Telnet ····················································································································· 23
Logging to the firewall through a web browser·········································································································· 24
Performing basic settings for the firewall····················································································································· 24
Launching the basic configuration wizard·········································································································· 25
Configuring the system name and user password····························································································· 25

ii
Configuring service management························································································································ 26
Configuring the IP address for an interface········································································································ 28
Configuring NAT··················································································································································· 29
Completing the configuration wizard ················································································································· 30
Hardware management and maintenance ··············································································································32
Displaying detailed information about the firewall ···································································································· 32
Displaying software and hardware version information of the firewall··································································· 33
Displaying the electrical label information of the firewall ························································································· 33
Displaying the CPU usage of the firewall···················································································································· 34
Displaying the memory usage of the firewall·············································································································· 34
Displaying the CF card information ····························································································································· 34
Displaying the operational status of the fans ·············································································································· 35
Displaying the operational status of a power module ······························································································· 35
Displaying the temperature information of the firewall······························································································ 35
Displaying operational statistics of the firewall ·········································································································· 36
Saving the running configuration of the firewall ········································································································ 36
Rebooting the firewall···················································································································································· 37
Replacement procedures ···········································································································································39
Safety recommendations ··············································································································································· 39
Replacing an interface module····································································································································· 39
Replacing a CF card······················································································································································ 40
Replacing a transceiver module ··································································································································· 41
Troubleshooting··························································································································································43
Power supply system failure·········································································································································· 43
Fan failure······································································································································································· 43
Configuration terminal problems·································································································································· 44
No terminal display ·············································································································································· 44
Garbled terminal display······································································································································ 44
Using the AUX port as backup console port ··············································································································· 44
Password loss ································································································································································· 45
User password loss ··············································································································································· 45
Super password loss ············································································································································· 45
Cooling system failure ··················································································································································· 46
Interface module, cable, and connection failure ········································································································ 46
Appendix A Technical specifications ······················································································································48
Dimensions and weight ················································································································································· 48
Storages ·········································································································································································· 48
Power consumption range············································································································································· 48
AC power supply ··························································································································································· 48
RPS power supply (optional)········································································································································· 49
Fixed ports specifications ·············································································································································· 49
Console port··························································································································································· 49
AUX port································································································································································· 50
Combo interfaces ·················································································································································· 50
Appendix B LEDs·······················································································································································52
Front panel LEDs····························································································································································· 52
Rear panel LEDs ····························································································································································· 52
Appendix C Interface modules ································································································································54
4GBE/8GBE··································································································································································· 54
4GBP ······································································································································································ 56
1EXP········································································································································································ 57

iii
Appendix D AC power cables used in different countries or regions ··································································60
10A AC power cables used in different countries or regions··················································································· 60
16A AC power cables used in different countries or regions··················································································· 63
Support and other resources ·····································································································································66
Contacting HP ································································································································································ 66
Subscription service ·············································································································································· 66
Related information························································································································································ 66
Documents······························································································································································ 66
Websites································································································································································· 66
Conventions ···································································································································································· 67
Index ···········································································································································································69

1
Product overview
This chapter describes the HP A-F1000-E VPN firewall and includes these sections:
•Front panel view
•Rear panel view
Front panel view
Figure 1 Front panel view
1 2 3 4 5 6
7
8
9
101112131415
(1) AC-input power receptacle (100 VAC to 240 VAC, 50 or 60 Hz at 2.5 A)
(2) AC power switch (ON/OFF) (3) RPS DC-input power receptacle (RPS)
(4) CF card slot (CF CARD) (5) CF card LED (CF)
(6) SYS LED (SYS) (7) Interface module slot 2 LED (SLOT2)
(8) Interface module slot 1 LED (SLOT1) (9) RPS status LED (RPS)
(10) AC power supply status LED (PWR) (11) USB port 1 LED (USB)
(12) USB port 1 (1) (13) USB port 0 (0)
(14) Console port (CONSOLE) (15) Auxiliary port (AUX)

2
Rear panel view
Figure 2 Rear panel view
(1) Grounding screw and grounding sign (2) 1000 Mbps fiber port LED
(3) 10/100/1000 Mbps copper port LED (4) Combo copper port
(5) Combo SFP fiber port (6) Interface module slot 1
(7) Interface module slot 2

3
Preparing for installation
This chapter includes these sections:
•Safety recommendations
•Examining the installation site
•Installation tools
•Accessories supplied by the firewall
•Checklist before installation
Safety recommendations
To avoid possible bodily injury and equipment damage, read the safety recommendations in this chapter
carefully before installing an A-F1000-E firewall. The recommendations do not cover every possible
hazardous condition.
This section includes these topics:
•Safety symbols
•General safety recommendations
•Safety with electricity
•Safety with laser
Safety symbols
When reading this document, note the following symbols:
WARNING means an alert that calls attention to important information that if not understood or
followed can result in personal injury.
CAUTION means an alert that calls attention to important information that if not understood or
followed can result in data loss, data corruption, or damage to hardware or software.
General safety recommendations
•Keep the chassis and installation tools away from walk areas.
•Make sure that the ground is dry and flat and anti-slip measures are in place.
•Unplug all the external cables (including power cables) before moving the chassis.
Safety with electricity
•Locate the emergency power-off switch in the room before installation. Shut the power off at once in
case accident occurs.
•Make sure that the firewall has been correctly grounded.
•Connect the interface cables for the firewall correctly.
•Use an uninterrupted power supply (UPS).

4
•If there are two power inputs, disconnect the two power inputs to power off the firewall.
•Do not work alone when the firewall has power.
•Always check that the power has been disconnected.
Safety with laser
•Do not stare into the optical port or fiber connector because the laser light emitted from the optical
fiber may hurt your eyes.
•Install a dust plug on the transceiver module to avoid damage to the transceiver module.
Examining the installation site
The HP A-F1000-E firewall can only be used indoors. To ensure that the firewall works properly and to
prolong its service lifetime, the installation site must meet the following requirements:
•Temperature and humidity
•Altitude
•Cleanness
•Cooling system
•ESD prevention
•EMI
•Lightning protection
•Rack-mounting
Temperature and humidity
You must maintain a proper temperature and humidity in the equipment room. Long-term high humidity
may lead to bad insulation, electricity leakage, mechanical property changes, and metal corrosion.
However, if the humidity is too low, captive screws may become loose as the result of contraction of
insulation washers and static electricity may be produced in a dry environment to jeopardize the circuits
on the device. A high temperature is the most undesirable condition, because it accelerates the aging of
insulation materials and significantly lowers reliability and service life of the firewall.
Table 1 Temperature requirements
Item Temperature
Operating temperature 0°C to 45°C (32°F to 113°F)
Storage temperature –40°C to 70°C(–40°F to 158°F)
Table 2 Humidity requirements
Item Humidity
Operating humidity 10% to 95%
Storage humidity 5% to 95%

5
Altitude
Table 3 Altitude requirements
Item Altitude
Operating altitude –60 m (–196.85 ft) to 3 km (1.86 miles)
Storage altitude –60 m (–196.85 ft) to 4.5km(2.8 miles)
Cleanness
Dust buildup on the chassis may result in electrostatic adsorption, which causes poor contact of metal
components and contact points, especially when indoor humidity is low. In the worst case, electrostatic
adsorption can cause communication failure.
Table 4 Dust concentration limit in the equipment room
Substance Concentration limit (particles/cu m)
Dust particles 3 x 104
(No visible dust on desk in three days)
NOTE:
Dust particle diameter 5 m
The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion and
premature aging of components, as shown in Table 5.
Table 5 Harmful gas limits in an equipment room
Gas Max. (mg/m3)
SO20.2
H2S 0.006
NH30.05
Cl20.01
Cooling system
The HP A-F1000-E firewall adopts left to right airflow for heat dissipation.
Figure 3 A-F1000-E airflow

6
•Make sure there is enough space (greater than 10 cm (3.94 in)) around the air intake and outlet
vents on the firewall for good ventilation.
•Make sure the installation site has a good cooling system.
ESD prevention
To prevent electrostatic discharge (ESD), note the following guidelines:
•Make sure that the firewall and the floor are well grounded.
•Take dust-proof measures for the equipment room.
•Maintain the humidity and temperature at a proper level.
•Always wear an ESD-preventive wrist strap when touching a circuit board or transceiver module.
•Place the removed CF card or interface module on an antistatic workbench, with the face upward,
or put it into an antistatic bag.
•Touch only the edges, instead of electronic components when observing or moving a removed CF
card or interface module.
To use the ESD-preventive wrist strap, perform the following steps:
Step1 Wear the wrist strap on your wrist.
Step2 Lock the wrist strap tight around your wrist to keep good contact with the skin.
Step3 Attach the ESD-preventive wrist strap to the rack with the alligator clips.
Step4 Make sure that the rack is well grounded.
Figure 4 Use an ESD-preventive wrist strap
(1) ESD-preventive wrist strap (2) Lock
(3) Alligator clip
CAUTION:
•Check the resistance of the ESD-preventive wrist strap for safety. The resistance readin
g
should be in the
range of 1 to 10 megohm (Mohm) between human body and the ground.
•No ESD-preventive wrist strap is provided with the HP A-F1000-E firewall. Prepare it yourself.

7
EMI
All electromagnetic interference (EMI) sources, from outside or inside of the firewall and application
system, adversely affect the firewall in a conduction pattern of capacitance coupling, inductance
coupling, electromagnetic wave radiation, or common impedance (including grounding system)
coupling. To prevent EMI, note the following guidelines:
•Take measures against interference from the power grid.
•Do not use the firewall together with the grounding equipment or light-prevention equipment of
power equipment, and keep the firewall far away from them.
•Keep the firewall far away from high-power radio launchers, radars, and equipment with high
frequency or high current.
NOTE:
Use electromagnetic shielding when necessary.
Lightning protection
To protect the firewall from lightning better, do as follows:
•Make sure the grounding cable of the chassis is well grounded.
•Make sure the grounding terminal of the AC power receptacle is well grounded.
•Install a lightning arrester at the input end of the power supply to enhance the lightning protection
capability of the power supply.
Rack-mounting
Before mounting the firewall in a standard 19-inch rack, adhere to the following requirements:
•The rack is sturdy enough to support the firewall and installation accessories.
•Make sure that the size of the rack is appropriate for the firewall, and that there is enough clearance
around the left and right sides of the firewall for heat dissipation.
•For heat dissipation and device maintenance, make sure the front and rear of the rack should be at
least 0.8 m (2.62 ft) away from walls or other devices, and that the headroom in the equipment
room should be no less than 3 m (9.84 ft).
Installation tools
Flat-blade
screwdriver Phillips screwdriver
Needle-nose pliers Wire-stripping
pliers Diagonal pliers
RJ45 crimping
pliers Multimeter Network cable tester Mark pen ESD-preventive wrist strap

8
NOTE:
No installation tool or ESD-preventive wrist strap is provided with the firewall. Prepare them yourself.
Accessories supplied by the firewall
Console cable Grounding cable
Rear mounting
bracket and
load-bearing screw
Front mounting
bracket and M4
screws
Rubber pads
Checklist before installation
Table 6 Checklist before installation
Item Requirements Result
Ventilation
•There is a minimum clearance of 10 cm (3.9 in) around
the inlet and exhaust vents for heat dissipation of the
firewall chassis.
•A ventilation system is available at the installation site.
Operating
temperature 0°C to 45°C (32°F to 113°F)
Operating
humidity 10% to 95%
Cleanness Dust concentration 3 × 104 particles/m3
ESD prevention
•The equipment and floor are well grounded.
•The equipment room is dust-proof.
•The humidity and temperature are at a proper level,
respectively.
•Wear an ESD-preventive wrist strap and uniform when
touching a circuit board.
•Place the removed CF card or interface module on an
antistatic workbench, with the face upward, or put it
into an antistatic bag.
•Touch only the edges, instead of electronic components
when observing or moving a removed CF card or
interface module.
Installation site
EMI prevention
•Take effective measures to protect the power system
from the power grid system.
•Separate the protection ground of the firewall from the
grounding device or lightning protection grounding
device as far as possible.
•Keep the firewall far away from radio stations, radar
and high-frequency devices working in high current.
•Use electromagnetic shielding when necessary.

9
Item Requirements Result
Lightning
protection
•The grounding cable of the chassis is well grounded.
•The grounding terminal of the AC power receptacle is
well grounded.
Electricity safety
•Equip an uninterrupted power supply (UPS).
•In case of emergency during operation, switch off the
external power switch.
Workbench
•The workbench is stable enough
•Well grounding
Rack-mounting
requirements
•The rack is sturdy enough to support the weight of the
firewall and installation accessories.
•The size of the cabinet is appropriate for the firewall.
•The front and rear of the cabinet are at least 0.8 m
(31.50 in) away from walls or other devices.
Safety
precautions
•The firewall is far away from any moist area and heat source.
•The emergency power switch in the equipment room is located.
Tools
•Installation accessories supplied with the firewall
•User supplied tools
Reference
•Documents shipped with the firewall
•Online documents

10
Installing the firewall
This chapter includes these sections:
•Installation flow
•Installing the firewall in a 19-inch rack
•Grounding the firewall
•Installing interface modules
•Installing a CF card
•Connecting Ethernet cables
•Connecting an AC power cord
•Connecting an RPS DC power cord
Installation flow
Figure 5 HP A-F1000-E firewall installation flow
Installing the firewall in a 19-inch rack
Installing cage nuts and rear mounting brackets to the rack
Step1 As shown in Figure 6, install the cage nuts to proper positions on the rack posts. The cage nuts are used
to fix the mounting brackets.

11
Figure 6 Install cage nuts
Step2 As shown in Figure 7, install the rear mounting brackets to the rear rack posts.
Figure 7 Install rear mounting brackets to the rack
Installing front mounting brackets and load-bearing screws to
the firewall
Before installing the firewall to a rack, install the front mounting brackets and load-bearing screws to the
firewall.

12
Step1 Align the screw holes on the mounting brackets with the screw holes on the firewall chassis, and then use
a Phillips screwdriver to fasten the screws, as shown in callout 1 in Figure 8.
Step2 Attach the load-bearing screws to the appropriate screw holes on the firewall chassis, and use a Philips
screwdriver to fasten the screws, as shown in callout 2 in Figure 8.
Figure 8 Install the front mounting brackets and load-bearing screws to the firewall
Installing the firewall to the rack
Follow these steps to install the firewall to the rack:
Step1 Supporting the firewall bottom with one hand, push the firewall into the rack horizontally, and make sure
that the upper edges of the rear mounting brackets make close contact with the load-bearing screws on
the firewall.
Step2 Fix the firewall horizontally by fastening the front mounting brackets at both sides to the rack with
appropriate pan head screws. The specifications of pan head screws must satisfy the installation
requirements, and rustproof treatment has been made to their surfaces.
Figure 9 Fix the firewall to the rack
(1) load-bearing screws

13
Grounding the firewall
WARNING!
Correctly connecting the firewall grounding cable is crucial to lightning protection and EMI protection.
Follow these steps to connect the grounding cable:
Step1 Remove the grounding screw from the rear panel of the firewall chassis.
Step2 Attach the grounding screw to the OT terminal of the grounding cable.
Step3 Use a screwdriver to fasten the grounding screw into the grounding screw hole.
Step4 Ground the other end of the grounding cable, as shown in Figure 10, by connecting the other end of the
grounding cable to the grounding terminal of the rack.
Figure 10 Connect the grounding cable
1
(1) OT terminal
Installing interface modules
Follow these steps to install an interface module:
Step1 Select the slot to install the interface module, and remove the two filler panels on the slot: use a Phillips
screwdriver to remove the fastening screws on the filler panel and use a flat-blade screwdriver to prize the
filler panel to remove it from the firewall.
Step2 Push the interface module slowly along the slide rails into the slot, and then pull the levers inward.

14
Figure 11 Install an interface module
Step3 Use a screwdriver to fasten the captive screws on the interface module.
Step4 After the firewall is powered on, check the status LED on the front panel. On means the interface module
is installed correctly and running properly. Off means the interface module has failed the power-on
self-test (POST).
NOTE:
Keep the removed filler panel and screws for future use.
Installing a CF card
Follow these steps to install a CF card:
Step1 Push the CF card eject button all the way into the slot, and make sure that the button does not project from
the panel.
Step2 Insert the CF card into the slot following the direction shown in Figure 12, and make sure it does not
project from the slot.
Figure 12 Insert the CF card into the slot

15
NOTE:
If the boot file of the firewall is stored in the CF card, before booting the firewall, make sure that the CF
card has been correctly installed. Otherwise, the firewall cannot be booted.
Connecting Ethernet cables
Connecting a copper Ethernet cable
The copper Ethernet ports of the HP A-F1000-E firewall support MDI/MDI-X auto-sensing. They are
connected to the network through category-5 or above twisted pairs that are equipped with RJ-45
connectors.
Follow these steps to connect a copper Ethernet cable:
Step1 Plug one end of an Ethernet twisted pair cable into the copper Ethernet port (RJ-45 port) to be connected
on the firewall.
Step2 Plug the other end of the cable into the RJ-45 port of the peer device.
Step3 After the firewall is powered on, check the status LED of the RJ-45 connector. If the LINK LED is solid green,
you can be sure that the link is connected. For more information about the LED status, see the chapter
“Appendix B LEDs.”
Connecting an optical fiber
Before connecting the firewall to the network, you must install a transceiver module to the firewall, and
then insert the fiber connector to the transceiver module. The A-F1000-E Firewall supports LC connectors
only.
WARNING!
When connecting an optical fiber, note the following guidelines:
•Never bend or curve a fiber when connectin
g
it. After a fiber is installed well, the bend radius must be
not less than 10 cm (3.94 in).
•Keep the fiber end clean.
•Make sure that the fiber connector matches the transceiver module.
•Before connecting a fiber, make sure that the optical power at the receiving end does not exceed the
upper threshold of the optical receive power of the transceiver module. Otherwise, the transceiver
module may be damaged. For the optical power of a transceiver module, see the chapter “Appendix
A
Technical specifications.”
Follow these steps to connect optical fibers:
Step1 Remove the dust plug of the SFP interface.