Huawei NIP6320 User manual

Safety Precautions
Be aware of the following safety precautions when installing the device.
Your product package includes the following items:
Device and Accessories
Thank you for using Huawei NIP6320/6330/6610/6620/6650/6680 products. The NIP6000 series is an intrusion detection
product developed by Huawei. It provides application and traffic security for enterprise networks, IDCs, and campus networks.
This Quick Start shows the product appearance and provides the essential information required for installing the device and
setting up Internet access. For detailed hardware description and installation guidelines, refer to the Hardware Guide. For
detailed configurations, refer to the Administrator Guide.
• Deactivate power whenever possible before performing maintenance on power cables.
• Always wear a properly-grounded wrist strap before touching the device or expansion cards in it.
1
NIP6680 Front panel
NIP6680 Rear panel
M4 screw
AC power cable
Cable bearer
(3U)
Rack-mounting
ears (3U)
Power cable
retention clip
Quick start OT bare crimp
terminals (3U)
Cord end
terminals
(3U)
PGND cable
M6 screw
DC power cable
(3U)
Rubber feet
(1U)
Rack-mounting
ears (1U)
DC power cable
(1U)
Copyright © Huawei Technologies Co., Ltd. 2017. All rights reserved.
All other trademarks and trade names mentioned in this document are the
property of their respective holders.
NIP6000
4HDD 5PWR 6PWR
INPUT OUTPUT
ON
OFF ~100-240V;50/60Hz;2.5A
XXXXXXXXXXXXXXXXXXXXXXXXXXX
SM-HDD-SAS300G-B
4 HDD 5 PWR 6 PWR
Protection ground
terminal
Power socket
Serial Number
NIP6330 Rear panel
NIP6000
0 1 2 3 4 5 6 7 8 9 10 11
0
1
RST
SYS
ALM
PWR
HDD
MGMT
MODE
0/1 2
3
CONSOLE
MGMT
WSIC(Slot 3)
WSIC(Slot 2)
4x1GE SFP
Management
port
Console port
ESD jack
10/100/1000M autosensing
Ethernet electrical port
0/1 2
3
NIP6330 Front panel
FAN STATUS
FAN
9 PWR 10 PWR
11 F
A
N
12 SPU
SPU
13
RUN ALM
SPUB
~100-240V;50/60Hz,10A
PAC-700WA-L
STATUS
~100-240V;50/60Hz,10A
PAC-700WA-L
STATUS
MGMT CONSOLE
0
HDD0 HDD1
RST
ENEN
SYS ALM MODE
SPUA
Management port
SPUASPUB Console port
Power socket 0 Power socket 1 9 PWR 10 PWR
11 F
A
N
12 SPU
SPU
13
8GEF
64 5 7
6
7
4
5
20 1 3
2
3
0
1
0 1 2 3 4 5 6 7
2XG8GE
0 1
0
1
10G
0 1 2 3 4 5 6 7
2XG8GE
0 1
0
1
10G
NIP6000
1
3
5
7
2
4
6
8
XXXXXXXXXXXXXXXXXXXXXXXXXXX
XSIC(Slot 7)
WSIC(Slot 4)
XSIC(Slot 6)
XSIC(Slot 8)
XSIC(Slot 5)
ESD jack 8x1GE RJ45
2x10GE SFP+ 8x1GE SFPProtection ground
terminal
XXXXXXXXXXXXXXXXXXXXXXXXXXX
Serial Number
1
3
5
7
2
4
6
8
HUAWEI NIP6320/6330/6610/6620/6650/6680
Network Intelligent Protection System
Quick Start
Issue: 03 Date: 2017-03-07 Part Number: 31507274
V500R001

Cabling
Fixed Interface Pair
1.
2.
3.
4.
5.
6.
Use the NIP6330 as an example. Connect the PGND cable to the ground terminal on the device on one end and to the
ground bar on the other.
Connect the MGMT (management) interface to the management PC or NMS using a switch or hub.
In in-line deployment, connect default interfaces to the upstream and downstream devices (in the figure, the electrical
bypass interface card is used to ensure service reliability).
If off-line deployment, connect a separate interface to the observing interface of the switch on the primary link (in the
figure, the 8GE WSIC interface card is used as an example, and you can use the fixed port preferentially).
Insert the cable retention clip into the hole close to the power socket. Then insert the power cable into the socket, and fix
it using the clip.
Turn on the power switch. When the SYS indicator on the front panel is blinking (once every two seconds), the device is
running and ready for configuration.
The following figure uses the NIP6330 as an example. The data interfaces on the fixed and expansion interface cards are
numbered in pair. The interface pair is used to connect upstream and downstream devices in the in-line deployment whereas
any interface of the interface pair can be used in the off-line deployment.
01 2 3
012345 6 7
MGMT 31 5 7
20 4 6
9 11
8 10
NIP6000
4HDD 5 PWR 6PWR
INPUT OUTPUT
ON
OFF ~100-240V;50/60Hz;2.5A
XXXXXXXXXXXXXXXXXXXXXXXXXXX
SM-HDD-SAS300G-B
6
5 1
NIP6000
0 1 2 3 4 5 6 7 8 9 10 11
0
1
RST
SYS
ALM
PWR
HDD
MGMT
MODE
0/1 2
3
CONSOLE
MGMT
0 1 2 3
2 3
0 1
4GE-BYPASS
0 1 2 3
Power-Off
8GE
0 1 2 3 4 5 6 7
2
Web management PC
NMS,
Log Server
Console PC
In-line deployment, protecting the server farm
Off-line deployment, detecting network attacks
Observing
interface
Update of the
Signature Databases
Electrical bypass
interface card
3
4
2
·
Connecting cables
·
The NIP6320/6330/6610/6620/6650 is 1 U model. The figure above uses the NIP6330 as an example. The fixed interface
board on the front panel provides 8 10/100/1000M autosensing Ethernet electrical ports, 4 GE optical ports, and 2 USB ports.
The power module on the rear panel is removable. For the NIP6320/6610, the fixed interface board on the front panel
provides 6 service ports (4 GE electrical ports and 2 combo ports) and 1 USB port, and the power module on the rear panel
is non-removable. For the Eudemon1000E-N3/N5, the standard configuration has 2 power modules installed.
The NIP6620/6650 and NIP6330 have the same appearance but different performance. The NIP6650 of the standard config-
uration has dual power supplies.
The NIP6680 is a 3 U model. The lower part of the XSIC slot can hold the WSIC expansion card.
Compatible power cables are delivered. AC power cables vary by country or area, and the AC power cable in the figure is
used for reference only.
·
·
·
·

3
1.
2.
3.
4.
5.
6.
Set the IP address to 192.168.0.2 (or any other in the range of 192.168.0.2 to 192.168.0.254) and subnet mask to
255.255.255.0 of the corresponding network interface on the administration PC.
Open a web browser and navigate to https://192.168.0.1:8443.
Enter the user name (admin) and password (Admin@123) in the login dialog box, and then click Login. You need to change
the user password as instructed after the first login.
Activate licenses.
The intrusion prevention and antivirus signature database upgrade services are controlled by licenses.
1）Find the license authorization certificate in the delivery accessories and obtain the activation password.
2）On the web UI, select Dashboard. On the System Information page, obtain the ESN in SN.
3）Access http://app.huawei.com/isdp to apply for a license file.
4）On the web UI, choose System > License Management. Then load and activate the license file.
(Optional) When the NIP needs to be deployed in off-line mode, split an interface pair and configure a single interface to work
in off-line mode.
1）Choose Network > Interface Pair. On the page that is displayed, select the interface pair to be split and click Delete.
2）Choose Network > Interface. On the page that is displayed, click one of the interfaces in the interface pair to be split and
configure the interface to work in off-line mode.
Choose Policy > Security Policy. You can find that the default security policy is applied to the device and meet the require-
ments of most intrusion prevention scenarios.
Multiple types of intrusion prevention policy templates are preconfigured on the NIP so that you can create a security policy
based on the required template. Upgrade the intrusion prevention and antivirus signature databases to the latest versions by
choosing System > Upgrade Center.
Initial Configuration
The following table lists the default configuration.
Default Configuration
Item
MGMT (management port)
The MGMT port is numbered GE0/0/0 and assigned with IP address 192.168.0.1.
You can use the default account/password (admin/Admin@123) to log in through web
or console.
The default intrusion prevention policy is applied to each interface.
Administrator account/password
Intrusion prevention policy
Description

4
HUAWEI TECHNOLOGIES CO., LTD.
Huawei Industrial Base Bantian Longgang
Shenzhen 518129
People's Republic of China
e.huawei.com
Appendix
• Open Source Software Notice
You can access the device web UI and click Open Source Software Notice at the bottom of the UI to view details of the
open source software notice.
• Obtaining Product Documents and Technical Support
• Log in to http://support.huawei.com/enterprise, and select a specific product model and version to find its documenta-
tion.
• Log in to http://support.huawei.com/ecommunity and post your questions in the community.
Huawei Enterprise
Technical Support
• Contact your local representative for further information.
The contact information is available at http://e.huawei.com/en/service-hotline.