Huawei SVN5630 User manual

Copyright © Huawei Technologies Co., Ltd. 2015. All rights reserved.
All other trademarks and trade names mentioned in this document are the
property of their respective holders.
HUAWEI SVN5630/5660/5830/5850
V200R003
Quick Start
Issue: 02
Part Number: 31507272
Date: 2015-06-18
1
Thank you for using Huawei SVN5630/5660/5830/5850 products. This product can serve as a remote access gateway to
provide low-cost SSL VPN services. This document describes the appearance, cabling, and network and basic SSL VPN
configurations of the device. For detailed hardware description and installation guidelines, refer to the Hardware Guide . For
detailed configurations, refer to the Administrator Guide .
Safety Precautions
Be aware of the following safety precautions when installing the device.
•Deactivate power whenever possible before performing maintenance on power cables.
•Always wear a properly-grounded wrist strap before touching the device or expansion cards in it.
Device and Accessories
Your product package includes the following items:
SVN5800
4 HDD 5 PWR 6 PWR
INPUT OUTPUT
ON
OFF
~100-240V;50/60Hz;2.5A
XXXXXXXXXXXXXXXXXXXXXXXXXXX
SM-HDD-SAS300G-B
SVN5800
0 1 2 3 4 5 6 7 8 9 10 11
0
1
RST
SYS
ALM
PWR
HDD
MGMT
MODE
0/1 2
3
CONSOLE
MGMT
WSIC(Slot 3)
WSIC(Slot 2)
4 HDD 5 PWR 6 PWR
4x1GE SFP
Rubber feet
Management
port
Console port
ESD jack
Protection ground
terminal
Power socket
PGND cable
Power cable
retention clip
Quick start
M4
screw
Rack-mounting ears
AC power cable
M6
screw
Equipment
Serial Number
10/100/1000M autosensing
Ethernet electrical port
0/1 2
3
Front panel
Rear panel
The figure above uses the SVN5660/5830/5850 as an example. The fixed interface board on the front panel provides 8
10/100/1000M autosensing Ethernet electrical ports, 4 GE optical ports, and 2 USB ports. The power module on the rear pan-
el is removable. For the SVN5630, the fixed interface board on the front panel provides 6 service ports (4 GE electrical ports
and 2 combo ports) and 1 USB port, and the power module on the rear panel is non-removable.
AC power cables vary by country or area, and the AC power cable in the figure is used for reference only.
Cabling
•One-armed mode: Connect the device to a router or firewall out-of-path. This mode requires fewer
ports and does not change existing network topology.
1. Connect the ground terminal on the device to the ground bar using a PGND cable.
2. Connect port GE1/0/4, for example, to a router or firewall.
3. Connect the device's MGMT port to a PC where the NMS client is installed using a network cable.
4. Insert the cable retention clip into the hole close to the power socket. Then insert the power cable into the socket, and fix
it using the clip.

2
5. Turn on the power switch. When the SYS indicator on the front panel is blinking (once every two seconds), the device is
running and ready for configuration.
SVN5800
4 HDD 5 PWR 6 PWR
INPUT OUTPUT
ON
OFF ~100-240V;50/60Hz;2.5A
XXXXXXXXXXXXXXXXXXXXXXXXXXX
SM-HDD-SAS300G-B
SVN5800
0 1 2 3 4 5 6 7 8 9 10 11
0
1
RST
SYS
ALM
PWR
HDD
MGMT
MODE
0/1 2
3
CONSOLE
MGMT
Front panel Rear panel
Administrator
WSIC(Slot 3)
WSIC(Slot 2)
5
4 1
Router or Firewall
Intranet
GE1/0/4
2
GE0/0/0
3
•Two-Armed Mode: Connect one port to the router and another (uses the pre-NAT virtual gateway
address) to the firewall.
The SVN is connected to both the intranet (router or core switch) and Internet (the firewall).
SVN5800
4 HDD 5 PWR 6 PWR
INPUT OUTPUT
ON
OFF ~100-240V;50/60Hz;2.5A
XXXXXXXXXXXXXXXXXXXXXXXXXXX
SM-HDD-SAS300G-B
SVN5800
0 1 2 3 4 5 6 7 8 9 10 11
0
1
RST
SYS
ALM
PWR
HDD
MGMT
MODE
0/1 2
3
CONSOLE
MGMT
Front panel Rear panel
Administrator
GE0/0/0
WSIC(Slot 3)
WSIC(Slot 2)
5
4 1
Intranet
GE1/0/4
2
GE1/0/0
2
3
Default Configuration
Item Description
MGMT (management port) The MGMT port is numbered GE0/0/0 and assigned with IP address 192.168.0.1.
Administrator account/password You can use the default account/password (admin/Admin@123).
Use the Web configuration wizard to complete basic network configuration.
1. Set the IP address to 192.168.0.2 (or any other in the range of 192.168.0.2 to 192.168.0.254) and subnet mask to
255.255.255.0 of the corresponding network interface on the administration PC.
2. Open a web browser and navigate to https://192.168.0.1:8443.
3. Enter the user name (admin) and password (Admin@123) in the login dialog box, and then click Login. You need to
change the user password as instructed after the first login.
4. In the Basic Network Configuration Wizard page that is displayed, select a networking mode according to your cabling
and click Next.
If the Basic Network Configuration Wizard page is not displayed, click the System tab and choose Wizard >
Basic Network Configuration Wizard on the left navigation tree.
5. Select and activate the License file and click Next. To obtain the License file, refer to License Application Guide .
6. Configure the interfaces. In one-armed mode, configure the service interface (GE1/0/4 in the cabling figure); in two-armed
mode, configure the inside interface (GE1/0/0 in the cabling figure) and outside interface (GE1/0/4 in the cabling figure)
and click Next.

3
7. Verify the configurations and click Next if they are correct.
After basic network configurations, configure routes to ensure the connectivity between the SVN and the intranet
and Internet.
Use the virtual gateway to configure SSL VPN services (in one-armed mode in this example).
1. Choose Wizard > Virtual Gateway Configuraion Wizard. In Gateway Configuration, set the parameters and click Next.
2. Select necessary services. After a service is enabled, the configuration page of the service will appear in the wizard.
3. (Optional) In Web Proxy, create Web proxy resources and click Next.
4. (Optional) In Network Extension, set the client IP address allocation method to IP Address Pool Mode, create an
IP address pool, and click Next. In this example, the client IP address and the internal server address are on different
subnets. Therefore, you must configure routes on the SVN and router to reach the internal server and client.
5. (Optional) In File Sharing, enable file sharing, create file sharing resources, and click Next.
6. (Optional) In Port Forwarding, enable Port Forwarding, Automatic Enabling, and Preserve Connections, create port
forwarding resources, and click Next.
7. In User List, create a local user to access the virtual gateway resources and click Next.

HUAWEI TECHNOLOGIES CO., LTD.
Huawei Industrial Base Bantian Longgang
Shenzhen 518129
People's Republic of China
4
enterprise.huawei.com
8. In Role Authorization List, create a role to assign SSL VPN service access permissions to user and click Finish.
Now you have completed the basic SSL VPN service configurations. For more details, refer to the Administrator Guide .
Appendix
•Obtaining Product Documents
The latest documents of all products are published at the technical support website (http://support.huawei.com/enterprise)
of Huawei Technologies Co., Ltd..
•Obtaining Technical Support
Contact your local representative for further information.
The contact information is available at http://support.huawei.com/enterprise.