Huawei Usg9500 series Installation instructions

HUAWEI USG9500 Series

Terabit-level Next-Generation Firewall

Hardware Guide

Issue

Date

2017-03-13

HUAWEI TECHNOLOGIES CO., LTD.

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

No part of this document may be reproduced or transmitted in any form or by any means without prior

written consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this document are the property of their respective

holders.

Notice

The purchased products, services and features are stipulated by the contract made between Huawei and

the customer. All or part of the products, services and features described in this document may not be

within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,

information, and recommendations in this document are provided "AS IS" without warranties, guarantees or

representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address:

Huawei Industrial Base

Bantian, Longgang

Shenzhen 518129

People's Republic of China

Website:

http://e.huawei.com

HUAWEI USG9500 Series Terabit-level Next-Generation Firewall

Hardware Guide

About This Document

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

About This Document

Related Version

The following table lists the product version related to this document.

Product Name

Version

The USG9500 has the

following models:

USG9520

USG9560

USG9580

V500R001C50

Intended Audience

This document describes hardware structure, installation guide, and hardware maintenance.

The content of this document includes the appearance and specifications of the product, the

supported expansion cards, preparation before the installation, installation, cabling, and

hardware replacement.

This document is intended for installation personnel and administrators who install and

maintain USG. The installation personnel or administrators must have experience in the

installation and maintenance of networking devices.

Symbol Conventions

The symbols that may be found in this document are defined as follows.

Symbol

Description

Indicates an imminently hazardous situation which, if not

avoided, will result in death or serious injury.

Indicates a potentially hazardous situation which, if not

avoided, could result in death or serious injury.

HUAWEI USG9500 Series Terabit-level Next-Generation Firewall

Hardware Guide

About This Document

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

iii

Symbol

Description

Indicates a potentially hazardous situation which, if not

avoided, may result in minor or moderate injury.

Indicates a potentially hazardous situation which, if not

avoided, could result in equipment damage, data loss,

performance deterioration, or unanticipated results.

NOTICE is used to address practices not related to personal

injury.

Calls attention to important information, best practices and

tips.

NOTE is used to address information not related to

personal injury, equipment damage, and environment

deterioration.

Command Conventions

The command conventions that may be found in this document are defined as follows.

Convention

Description

Boldface

The keywords of a command line are in boldface.

Italic

Command arguments are in italics.

[ ]

Items (keywords or arguments) in brackets [ ] are optional.

{ x | y | ... }

Optional items are grouped in braces and separated by

vertical bars. One item is selected.

[ x | y | ... ]

Optional items are grouped in brackets and separated by

vertical bars. One item is selected or no item is selected.

{ x | y | ... } *

Optional items are grouped in braces and separated by

vertical bars. A minimum of one item or a maximum of all

items can be selected.

[ x | y | ... ] *

Optional items are grouped in brackets and separated by

vertical bars. Several items or no item can be selected.

&<1-n>

The parameter before the & sign can be repeated 1 to n

times.

A line starting with the # sign is comments.

HUAWEI USG9500 Series Terabit-level Next-Generation Firewall

Hardware Guide

About This Document

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

GUI Conventions

The GUI conventions that may be found in this document are defined as follows.

Convention

Description

Boldface

Buttons, menus, parameters, tabs, window, and dialog titles

are in boldface. For example, click OK.

Multi-level menus are in boldface and separated by the ">"

signs. For example, choose File > Create > Folder.

Update History

Updates between document issues are cumulative. Therefore, the latest document issue

contains all updates made in previous issues.

Updates in Issue 01 (2017-03-13)

Initial commercial release.

HUAWEI USG9500 Series Terabit-level Next-Generation Firewall

Hardware Guide

Contents

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

Contents

About This Document.................................................................................................................... ii

1 Hardware Overview .....................................................................................................................1

1.1 USG9580 ......................................................................................................................................................................1

1.1.1 Device Overview .......................................................................................................................................................1

1.1.2 Components of the USG9580....................................................................................................................................3

1.1.3 Slots Layout and Supported Boards...........................................................................................................................6

1.1.4 Power Supply System..............................................................................................................................................10

1.1.4.1 Features and Distributed Architecture of the Power Supply System ....................................................................10

1.1.4.2 DC Power Supply System..................................................................................................................................... 11

1.1.4.3 AC Power Supply System.....................................................................................................................................15

1.1.5 Heat Dissipation System..........................................................................................................................................19

1.1.5.1 System Air Channel ..............................................................................................................................................19

1.1.5.2 Fan Module...........................................................................................................................................................20

1.1.5.3 Air Filter ...............................................................................................................................................................22

1.1.6 Switch Fabric...........................................................................................................................................................23

1.1.7 Control Plane...........................................................................................................................................................24

1.1.8 Technical Specifications ..........................................................................................................................................25

1.2 USG9560 ....................................................................................................................................................................28

1.2.1 Device Overview .....................................................................................................................................................28

1.2.2 Components of the USG9560..................................................................................................................................30

1.2.3 Slots Layout and Supported Boards.........................................................................................................................32

1.2.4 Power Supply System..............................................................................................................................................35

1.2.4.1 Features and Distributed Architecture of the Power Supply System ....................................................................35

1.2.4.2 DC Power Supply System.....................................................................................................................................36

1.2.4.3 AC Power Supply System.....................................................................................................................................38

1.2.5 Heat Dissipation System..........................................................................................................................................42

1.2.5.1 System Air Channel ..............................................................................................................................................42

1.2.5.2 Fan Module...........................................................................................................................................................43

1.2.5.3 Air Filter ...............................................................................................................................................................45

1.2.6 Switch Frabric..........................................................................................................................................................45

1.2.7 Control Plane...........................................................................................................................................................47

1.2.8 Technical Specifications ..........................................................................................................................................48

HUAWEI USG9500 Series Terabit-level Next-Generation Firewall

Hardware Guide

Contents

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

1.3 USG9520 ....................................................................................................................................................................50

1.3.1 Device Overview .....................................................................................................................................................50

1.3.2 Components of the USG9520..................................................................................................................................51

1.3.3 Slots Layout and Supported Boards.........................................................................................................................54

1.3.4 Power Supply System..............................................................................................................................................57

1.3.4.1 Features of the Power Supply System...................................................................................................................57

1.3.4.2 DC Power Supply System.....................................................................................................................................58

1.3.4.3 AC Power Supply System.....................................................................................................................................59

1.3.5 Heat Dissipation System..........................................................................................................................................63

1.3.5.1 System Air Channel ..............................................................................................................................................63

1.3.5.2 Fan Module...........................................................................................................................................................64

1.3.5.3 Air Filter ...............................................................................................................................................................66

1.3.6 Control Plane...........................................................................................................................................................67

1.3.7 Technical Specifications ..........................................................................................................................................68

1.4 Boards.........................................................................................................................................................................70

1.4.1 Board Overview.......................................................................................................................................................70

1.4.1.1 Types and Mappings of Boards.............................................................................................................................70

1.4.1.2 Board Structure.....................................................................................................................................................88

1.4.1.3 Rules for Numbering Slots and Interfaces ............................................................................................................89

1.4.2 MPUs and SRUs......................................................................................................................................................92

1.4.2.1 EKEX16-FWCD00MPUB00................................................................................................................................92

1.4.2.2 E8KE-X8-SRUA-200...........................................................................................................................................95

1.4.2.3 E8KE-X3-MPU ....................................................................................................................................................99

1.4.2.4 MPUD.................................................................................................................................................................102

1.4.3 SFUs ......................................................................................................................................................................105

1.4.3.1 E8KE-X16-SFUC-200SP ...................................................................................................................................105

1.4.3.2 E8KE-X8-SFUC-200..........................................................................................................................................107

1.4.4 SPUs and SPCs......................................................................................................................................................108

1.4.4.1 X3 SPU (SPU-X3-B)..........................................................................................................................................108

1.4.4.2 X3 SPU (SPU-X3-B2)........................................................................................................................................109

1.4.4.3 X8&X16 SPU (SPU-X8X16-B)......................................................................................................................... 111

1.4.4.4 Firewall Service Processing Unit (SPU-X3-20-O-E8KE, for USG9520)........................................................... 112

1.4.4.5 Firewall Service Processing Unit (SPUA-20-O-M, for USG9520)....................................................................114

1.4.4.6 Firewall Service Processing Unit (SPUB-20-O-M, for USG9520) .................................................................... 115

1.4.4.7 Firewall Service Processing Unit (SPU-X8X16-20-O-E8KE, for USG9560/USG9580)................................... 117

1.4.4.8 Firewall Service Processing Unit (SPUA-20-O-H, for USG9560/USG9580).................................................... 118

1.4.4.9 Firewall Service Processing Unit (SPUB-20-O-H, for USG9560/USG9580)....................................................120

1.4.4.10 Firewall Performance Expansion Card (SPC-20-O-E8KE)..............................................................................122

1.4.4.11 Firewall Performance Expansion Card (SPCA-20-O-H&M) ...........................................................................123

1.4.4.12 Firewall Performance Expansion Card (SPCB-20-O-H&M)............................................................................124

1.4.4.13 Application Security Service Processing Card (SPC-APPSEC-FW)................................................................125

1.4.4.14 Application Security Service Processing Card (SPC-IPS-20)...........................................................................127

HUAWEI USG9500 Series Terabit-level Next-Generation Firewall

Hardware Guide

Contents

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

vii

1.4.5 LPUF-240 and FPICs ............................................................................................................................................128

1.4.5.1 LPUF-240...........................................................................................................................................................128

1.4.5.2 20-Port 10/100/1000Base-RJ45 FPIC (FW-20X1G-RJ45).................................................................................130

1.4.5.3 24-Port 100/1000 Base-X-SFP FPIC (E8KE-X-101-24XGE-SFP)....................................................................131

1.4.5.4 5-Port 10GBase LAN/WAN-SFP+ FPIC A (E8KE-X-101-5X10GE-SFP+)......................................................133

1.4.5.5 6*10GE SFP+ Daughter Card (FW-6X10GE-SFP+)..........................................................................................134

1.4.5.6 12*10GE SFP+ Daughter Card (FW-12X10GE-SFP+)......................................................................................135

1.4.5.7 3-Port 40GBase QSFP+ FPIC (FW-3X40G-QSFP+).........................................................................................137

1.4.5.8 1-Port 40GBase LAN-CFP FPIC A (E8KE-X-101-1X40GE-CFP)....................................................................138

1.4.5.9 1*100GE CFP Daughter Card (FW-1X100GE-CFP) .........................................................................................140

1.4.6 LPUF-120 and FPICs ............................................................................................................................................141

1.4.6.1 LPUF-120...........................................................................................................................................................141

1.4.6.2 20-Port 10/100/1000Base-RJ45 FPIC (FW-20X1G-RJ45).................................................................................143

1.4.6.3 24-Port 100/1000 Base-X-SFP FPIC (E8KE-X-101-24XGE-SFP)....................................................................144

1.4.6.4 5-Port 10GBase LAN/WAN-SFP+ FPIC A (E8KE-X-101-5X10GE-SFP+)......................................................146

1.4.6.5 6*10GE SFP+ Daughter Card (FW-6X10GE-SFP+)..........................................................................................147

1.4.6.6 12*10GE SFP+ Daughter Card (FW-12X10GE-SFP+)......................................................................................148

1.4.6.7 3-Port 40GBase QSFP+ FPIC (FW-3X40G-QSFP+).........................................................................................150

1.4.6.8 1-Port 40GBase LAN-CFP FPIC A (E8KE-X-101-1X40GE-CFP)....................................................................151

1.4.6.9 1*100GE CFP Daughter Card (FW-1X100GE-CFP) .........................................................................................153

1.4.7 LPUF-101 and FPICs ............................................................................................................................................154

1.4.7.1 LPUF-101...........................................................................................................................................................154

1.4.7.2 24-Port 100/1000 Base-X-SFP FPIC (E8KE-X-101-24XGE-SFP)....................................................................156

1.4.7.3 4-Port 10G Base LAN -SFP+ FPIC (E8KE-X-101-4X10GE-SFP+)..................................................................157

1.4.7.4 5-Port 10GBase LAN/WAN-SFP+ FPIC A (E8KE-X-101-5X10GE-SFP+)......................................................159

1.4.7.5 1-Port 40GBase LAN-CFP FPIC A (E8KE-X-101-1X40GE-CFP)....................................................................160

1.4.8 LPUF-40-A and FPIC............................................................................................................................................162

1.4.8.1 LPUF-40-A.........................................................................................................................................................162

1.4.8.2 20-Port 100/1000Base-X-SFP Flexible Card (P40-20xGE/FE-SFP)..................................................................163

1.4.8.3 2-Port 10GBase LAN/WAN-XFP Flexible Card (P40-2x10GBase LAN/WAN-XFP).......................................165

1.4.8.4 4-port 10GBase LAN/WAN-XFP FPIC (P40-4x10GBase LAN/WAN-XFP) ....................................................166

1.4.9 LPUF-21 and FPIC................................................................................................................................................168

1.4.9.1 LPUF-21.............................................................................................................................................................168

1.4.9.2 12-port 10Base-T/100Base-TX/1000Base-T-RJ45 FPIC (12x10/100/1000Base-TX-RJ45) ..............................169

1.4.9.3 12-port 100Base-FX/1000Base-X-SFP FPIC (12x100/1000Base-SFP).............................................................171

1.4.9.4 1-port OC-192c/STM-64c POS-XFP FPIC (1 x OC-192c/STM-64c POS-XFP)...............................................172

1.4.9.5 1-port 10GBase LAN/WAN-XFP FPIC (1 x 10GBase LAN/WAN) ..................................................................174

1.4.9.6 4-Port 10GBase WAN/LAN-XFP FPIC (4x10GBase LAN/WAN) ....................................................................175

1.4.10 1-Port 100GBase-CFP Integrated Line Processing Unit (LPUI-101)..................................................................177

1.5 Optical/Electrical Module.........................................................................................................................................178

1.5.1 1 Gbit/s Electrical Transceiver...............................................................................................................................178

1.5.2 1.25 Gbit/s SFP/eSFP Optical Module...................................................................................................................180

HUAWEI USG9500 Series Terabit-level Next-Generation Firewall

Hardware Guide

Contents

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

viii

1.5.3 10 Gbit/s XFP Optical Module ..............................................................................................................................185

1.5.4 10 Gbit/s SFP+ Optical Module.............................................................................................................................191

1.5.5 40 Gbit/s CFP Optical Modules.............................................................................................................................196

1.5.6 40 Gbit/s QSFP+ Optical Module..........................................................................................................................199

1.5.7 100 Gbit/s CFP Optical Modules...........................................................................................................................203

2 Hardware Installation ..............................................................................................................207

2.1 Installation Preparation.............................................................................................................................................207

2.1.1 Preparing Technical Documents ............................................................................................................................207

2.1.2 Preparing Tools and Meters ...................................................................................................................................208

2.1.3 Checking the Installation Environment .................................................................................................................209

2.1.4 Unpacking and Checking the Products..................................................................................................................210

2.1.4.1 Checking the Package Container ........................................................................................................................210

2.1.4.2 Unpacking the Wooden Case .............................................................................................................................. 211

2.1.4.3 Unpacking the Carton.........................................................................................................................................215

2.1.4.4 Checking the Boards...........................................................................................................................................216

2.2 Installing USG9580 ..................................................................................................................................................217

2.2.1 Preparing the Site...................................................................................................................................................217

2.2.2 Installing the Chassis into the Cabinet...................................................................................................................218

2.2.3 Installing the PGND Cable ....................................................................................................................................222

2.2.4 Installing Boards and Subcards..............................................................................................................................223

2.2.5 Installing Chassis Components..............................................................................................................................226

2.2.6 Installing Power Cables-DC Power Distribution...................................................................................................228

2.2.7 Installing Power Cables-AC Power Distribution...................................................................................................231

2.2.8 Connecting Network Cables..................................................................................................................................234

2.2.9 Connecting Optical Fibers .....................................................................................................................................237

2.2.10 Checking After Installation..................................................................................................................................240

2.2.11 Powering On the USG9580-DC Power Distribution ...........................................................................................241

2.2.12 Powering On the USG9580-AC Power Distribution ...........................................................................................244

2.3 Installing USG9560 ..................................................................................................................................................248

2.3.1 Preparing the Site...................................................................................................................................................248

2.3.2 Installing the Chassis into the Cabinet...................................................................................................................250

2.3.3 Installing the PGND Cable ....................................................................................................................................254

2.3.4 Installing Boards and Subcards..............................................................................................................................255

2.3.5 Installing Chassis Components..............................................................................................................................257

2.3.6 Installing Power Cables-DC Power Distribution...................................................................................................259

2.3.7 Installing Power Cables-AC Power Distribution...................................................................................................262

2.3.8 Connecting Network Cables..................................................................................................................................265

2.3.9 Connecting Optical Fibers .....................................................................................................................................267

2.3.10 Checking After Installation..................................................................................................................................270

2.3.11 Powering On the USG9560-DC Power Distribution ...........................................................................................271

2.3.12 Powering On the USG9560-AC Power Distribution ...........................................................................................274

HUAWEI USG9500 Series Terabit-level Next-Generation Firewall

Hardware Guide

Contents

Issue 01 (2017-03-13)

Huawei Proprietary and Confidential

2.4 Installing USG9520 ..................................................................................................................................................277

2.4.1 Preparing the Site...................................................................................................................................................277

2.4.2 Installing Cable Racks and Mounting Ears............................................................................................................279

2.4.3 Installing the Chassis into the Cabinet...................................................................................................................280

2.4.4 Installing the PGND Cable ....................................................................................................................................282

2.4.5 Installing Boards and Subcards..............................................................................................................................283

2.4.6 Installing Power Cables-DC Power Distribution...................................................................................................285

2.4.7 Installing Power Cables-AC Power Distribution...................................................................................................288

2.4.8 Connecting Network Cables..................................................................................................................................291

2.4.9 Connecting Optical Fibers .....................................................................................................................................293

2.4.10 Checking After Installation..................................................................................................................................295

2.4.11 Powering On the USG9520-DC Power Distribution ...........................................................................................297

2.4.12 Powering On the USG9520-AC Power Distribution ...........................................................................................299

2.5 Guide to Power Distribution Design.........................................................................................................................302

2.5.1 Guide to Power Distribution Design of the USG9580...........................................................................................302

2.5.1.1 Guide to the DC Power Distribution...................................................................................................................302

2.5.1.2 Guide to the AC Power Distribution...................................................................................................................304

2.5.2 Guide to Power Distribution Design of the USG9560...........................................................................................306

2.5.2.1 Guide to the DC Power Distribution...................................................................................................................306

2.5.2.2 Guide to the AC Power Distribution...................................................................................................................309

2.5.3 Guide to Power Distribution Design of the USG9520...........................................................................................310

2.5.3.1 Guide to the DC Power Distribution...................................................................................................................310

2.5.3.2 Guide to the AC Power Distribution...................................................................................................................312

3 Hardware Maintenance............................................................................................................314

3.1 Replacing Boards......................................................................................................................................................314

3.1.1 Replacing an MPU/SRU........................................................................................................................................314

3.1.2 Replacing an SFU..................................................................................................................................................318

3.1.3 Replacing an LPU..................................................................................................................................................322

3.1.4 Replacing an FPIC of the LPU ..............................................................................................................................326

3.1.5 Replacing an SPU..................................................................................................................................................329

3.1.6 Replacing the SPC of the SPU...............................................................................................................................333

3.2 Expanding SPU Capacities .......................................................................................................................................336

3.2.1 Expanding SPU Capacities for the Active and Standby FWs in Hot Standby Scenarios (for V500R001C50 and

Later Versions)................................................................................................................................................................336

3.2.2 Expanding SPC Capacities for the Active and Standby FWs in Hot Standby Scenarios (for V500R001C50 and

Later Versions)................................................................................................................................................................342

3.3 Replacing a Fan Frame .............................................................................................................................................348

3.3.1 Replacing the Fan Module of the USG9580..........................................................................................................348

3.3.2 Replacing the Fan Module of the USG9560..........................................................................................................350

3.3.3 Replacing the Fan Frame of the USG9520............................................................................................................353

3.4 Replacing a Power Module.......................................................................................................................................356

3.4.1 Replacing the DC PEM of the USG9580...............................................................................................................356