Ruijie Networks RG-WALL1600-S3600 Installation and operating manual

RG-WALL1600-S3600 Next-Generation Firewall
Hardware Installation and Reference Guide V1.3

·
Copyright Statement
Ruijie Networks© 2016
Ruijie Networks reserves all copyrights of this document. Any reproduction, excerption, backup, modification, transmission,
translation or commercial use of this document or any portion of this document, in any form or by any means, without the
prior written consent of Ruijie Networks is prohibited.
, , , , ,
, , , ,
, , are registered trademarks of Ruijie Networks.
Counterfeit is strictly prohibited.
Exemption Statement
This document is provided “as is”. The contents of this document are subject to change without any notice. Please obtain
the latest information through the Ruijie Networks website. Ruijie Networks endeavors to ensure content accuracy and will
not shoulder any responsibility for losses and damages caused due to content omissions, inaccuracies or errors.

·
Preface
Thank you for using our products. This manual will guide you through the installation of the device.
This manual describes the functional and physical features and provides the device installation steps, hardware
troubleshooting, module technical specifications, and specifications and usage guidelines for cables and connectors.
Audience
It is intended for the users who have some experience in installing and maintaining network hardware.At the same time, it
is assumed that the users are already familiar with the related terms and concepts.
Obtaining Technical Assistance
Ruijie Networks Website: http://www.ruijienetworks.com/
Service Email: [email protected]
Technical Support: http://www.ruijienetworks.com/service.aspx
Technical Support Hotline: [phone]
Related Documents
Documents
Description
Cook Book
Describes the various network protocols and their implementation principles
for the device with the detailed configuration examples.
Symbol Conventions
Means reader take note. Notes contain helpful suggestions or references.
Means reader be careful. In this situation, you might do something that could result in equipment damage or
loss of data.

·
Chapter 1 Product Introduction
RG-WALL 1600-S3600 is a compact network security device independently developed by Ruijie Networks, and is an
integrated security product that specially provides enterprise-grade comprehensive security protection for remote offices,
branch offices, retail stores, and CPEs. RG-WALL 1600-S3600 integrates various security functions, including firewall,
Internet Protocol Security (IPSec), virtual private network over Secure Sockets Layer (SSL VPN), intrusion prevention,
virus prevention, anti-spam, and Web filtering.
RG-WALL 1600-S3600 does not support redundant backup for power supplies.
RG-WALL1600-S3600
Specifications
Model
RG-WALL1600-S3600
Management Port
Redundancy
Supported
Power Redundancy
Unsupported
Operating
temperature
0°C to 40°C
Storage
Temperature
-25°C to 70°C
Operating Humidity
20% to 90% RH (non-condensing)
Weight
Net weight: about 1.6kg
Dimensions
(L x W x H)
223mm x 216mm x 44mm, desktop
AC Power
100 VAC to 240 VAC, 50-60 Hz
Maximum Current
110 V / 1.5 A, 220 V / 0.75 A
Power Consumption
(Average/Max)
18/22 W
Heat Dissipation
74 BTU/h
The RG-WALL1600-S3600 is an A-class product and may cause radio disturbance to surroundings. In this
case, users are advised to take proper measures against the disturbance.
Product Appearance
The RG-WALL1600-S3600’s hardware system is composed of the chassis, the power system, system module and the
cooling system.
The power system provides one built-in power supply and does not support power redundancy.
The system module is fixed inside the chassis without data ports but with a Console port on the front panel, including
one USB port, one Console port, one redundant USB port, two GE RJ45 WAN ports, and 14 GE RJ45 ports.
The cooling system is composed of the fan tray and air filter. The fan tray is inside the chassis, and the air filter is on
the top of the chassis.
Figure 1-1 Appearance of the RG-WALL1600-S3600
Front and Back Panels
The RG-WALL1600-S3600's front and back panels are shown in Figure 1-2. See the description for the detailed parts
specified by the numbers in the figure.

·
Figure 1-2 Front Panel of the RG-WALL1600-S3600
LED
Status/Port Type
Description
1
Console
Console
Console port
2
Power
Green
Indicates that the device is on.
Off
Indicates that the device is off.
3
STATUS
Green
Indicates that the device is operating properly.
Blinking
Indicates that the device is initiating.
Off
Indicates that the device is off.
4
ALARM
Red
Indicates that a critical error(s) happens.
Yellow
Indicates that a minor error(s) happens.
Off
Indicates that the device is operating properly.
5
HA
Green
Indicates normal HA mode.
Red
Indicates faulty HA mode.
Off
Indicates that HA mode is disabled.
6
Ethernet Port
Rate
Green
Indicates that the port is up at 1Gbp.
Yellow
Indicates that the port is up at 100Mbp.
Off
Indicates that the port is up at 10Mbp or it is not connected.
6
Ethernet Port
Status
Green
Indicates that the port is up.
Blinking
Indicates that the port is transiting/receiving data.
Off
Indicates that the port is not connected.
Figure 1-2 Back Panel of the RG-WALL1600-S3600
Interface
Type
Description
1
POWER
Power: 100-240V AC, 50/60Hz, 4-2A
2
USB MGMT
USB
USB port.
3
USB
USB-A
Redundant USB port
4
RESET
-
Indicates the reset key, which is used to restore the factory
settings.
5
Ethernet Port
1-14
RJ-45
Gigabit Ethernet port.
6
WAN Port 1-2
RJ-45
Indicates Gigabit WAN port, which is used to access Internet.

·
Chapter 2 Preparation Before Installation
Safety Suggestions
To avoid body injury and equipment damage, please carefully read the safety suggestions before you install
RG-WALL1600-S3600.
The following safety suggestions do not cover all possible dangers.
Safety Precautions for Installing the System
Keep the chassis clean, free from any dust.
Do not place the equipment in a walking area.
Do not wear loose clothes or any other things that may be caught by the chassis during installation and
maintenance.
Safety Precautions for Removal
When you handle them, please pay attention to the following requirements:
Avoid moving the equipment frequently.
Turn off all power supplies and unplug all power cables before you remove the equipment.
At least two people are needed to move the equipment. Do not attempt to move the equipment by one people only.
Keep balance when moving the equipment, and avoid injuring your leg and feet or spraining your waist.
The device must be installed and used in the restricted access location.
Electrical Safety
Please observe local regulations and specifications when performing electrical operations. Relevant operators must
be qualified.
Please carefully check for any potential danger in the working area, for example, ungrounded power supply,
unreliable grounding of the power supply and damp/wet ground or floor.
Find out the location of the emergency power supply switch in the room before installation. First cut off the power
supply in case of an accident.
Be sure to make a careful check before you shut down the power supply.
Do not place the equipment in a damp/wet location. Do not let any liquid enter the chassis
Any nonstandard and inaccurate electrical operation can cause an accident such as fire or electrical attack,
thus causing severe even fatal damages to human bodies and equipment.
Direct or indirect touch through a wet object on high-voltage and mains supply can bring a fatal danger.
Static Discharge Damage Prevention

·
Although much has been done in RG-WALL1600-S3600 to prevent static electricity, great damage may be caused to the
circuitry and equipment when the static electricity exceeds a certain limit. In the communication network of the
RG-WALL1600-S3600, electrostatic induction may come from the following sources: External electric field produced by
the high-voltage supply cable, lightning, etc; Internal systems such as the indoor floor and the entire structure.
To prevent damage from static electricity, you must pay attention to the following:
Properly ground the equipment.
Take dust prevention measures in the room.
Maintain an appropriate humidity.
Always wear an anti-static wrist strap when you touch any circuit board.
Try to hold a circuit board by its edges. Do not touch any components or the PCB.
Use an anti-static shielding bag to properly store the board.
Do not let any clothes touch a circuit board. An antistatic wrist strap can only prevent human static electricity from
damaging the circuit board, but cannot prevent any static electricity on clothes.
For safety, use a multimeter to measure the resistance between yourself and the ground, which should be
within the range from 1 Ωto 10 Ω.
Make sure that the device is properly grounded when the anti-static wrist strap is connected to the ground
through the chassis jack.
Installation Site Requirements
RG-WALL1600-S3600 must be used in the room. This series of products are desktop devices, so they can be placed in
non-machine-room or mounted into a rack with the support of a tray. To ensure normal operation and a prolonged use life
of the equipment, the installation site must meet the following requirements.
Non-machine-room Installation Requirements
Please ensure that the rack meets the following requirements before installing the RG-WALL1600-S3600 in
non-machine-room.
Install the device in open space if possible. If it is installed in closed space, please make sure that there is a good
ventilation system.
Ensure that the supporting body is firm enough to support the device and its accessories.
For ventilation, ensure that there is enough space left between the supporting body and the front panel as well as the
supporting body and the back panel.
Place the device far from an office desk. Because ventilators are on the top of the chassis, avoid damages to the
device caused by dust retention or water sprays.
Rack Mounting Requirements
To mount the RG-WALL1600-S3600 in a cabinet, verify that the cabinet meets the following conditions:
Install the device in an open cabinet as much as possible. If you install the device inside a closed cabinet, be sure
that the cabinet has a good ventilation and heat dissipation system.
Be sure that the cabinet is firm enough to bear the weight of the RG-WALL1600-S3600 and its installation
accessories.
Be sure that the dimensions of the cabinet is appropriate for installation of the RG-WALL1600-S3600 that can
reserve a certain space for the front, back, left and right panels for heat dissipation.
The cabinet should be properly grounded.
Ventilation Requirements

·
Figure 2-1 shows the ventilation requirements of the RG-WALL1600-S3600. Keep the device Allow at least 3.8 cm of
clearance around the ventilation openings. After connecting various cables, you should bundle the cables or place them in
the cabling rack to avoid blocking air inlets.
Temperature and Humidity Requirements
To ensure the normal operation and a prolonged use life of the RG-WALL1600-S3600, you must maintain an appropriate
temperature and humidity in the equipment room. Too high or low temperature and humidity for a long period of time may
damage the equipment.
In an environment with high relative humidity, the insulating material may have bad insulation or even leak electricity,
and sometimes the materials may suffer from mechanical performance change and metallic parts may get rusted.
On the other hand, in an environment with low relative humidity, the insulating strip may dry and shrink, and static
electricity may occur easily and endanger the circuit on the equipment.
In an environment with high temperature, the equipment is subjected to even greater harm, as its performance may
degrade significantly and its useful life may be shortened in the case of long-term exposure that expedites the aging
process.
Temperature and humidity requirements of the RG-WALL1600-S3600
Temperature
Relative Humidity
0ºC–40ºC
20%–90%
The ambient temperature and humidity are measured at the point that is 1.5m above the floor and 0.4m
before the equipment when there is no protective plate in front or back of the equipment rack.
Cleanness Requirements
Dust poses the top threat to the running of the equipment. The indoor dust falling on the equipment may be adhered by
the static electricity, causing bad contact of the metallic joint. Such electrostatic adherence may occur more easily when
the relative humidity is low, not only affecting the use life of the equipment, but also causing communication faults. The
following table shows the requirements for the dust content and granularity in the equipment room.
Diameter (μm)
0.5
1
3
5
Concentration
(particles/m3)
1.4 x 10
7 x 10
2.4 x 10
1.3 x 10
The air filter of the RG-WALL1600-S3600 must be cleaned at interval to ensure good ventilation and dust
prevention.
Apart from dust, the salt, acid and sulfide in the air in the equipment room must also meet strict requirements; as such
poisonous substances may accelerate the corrosion of the metal and the aging of some parts. The equipment room
should be protected from the intrusion of harmful gases (for example, SO2, H2S, NO2, NH₃and Cl2), whose requirements
are listed in the following table.
Gas
Average (mg/m3)
Maximum (mg/m3)
SO2
0.2
1.5
H2S
0.006
0.03
NO2
0.04
0.15
NH₃
0.05
0.15
Cl2
0.01
0.3

·
Power Requirements
When the RG-WALL1600-S3600 uses the AC power supply:
AC input voltage: 100-240 VAC, 50/60 Hz
System Grounding Requirements
A good grounding system is the basis for the stable and reliable operation of the RG-WALL1600-S3600. It is the key to
prevent lightning stroke and resist interference. Please carefully check the grounding conditions on the installation site
according to the grounding requirements, and perform grounding properly as needed.
Safety Grounding
The equipment using AC power supply must be grounded by using the yellow/green safety grounding cable. Otherwise,
when the insulating resistance decreases the power supply and the enclosure in the equipment, electric shock may occur.
The building installation shall provide a means for connection to protective earth, and the equipment is to be
connected to that means.
Lightning Grounding
The lightning protection system of the facility is a separate system that consists of the lightning rod, down lead conductor
and the connector to the grounding system, which usually shares the power reference ground and yellow/green safety
cable ground. The lightning discharge ground is for the facility only, irrelevant to the equipment.
EMI Consideration
Various interference sources, from either outside or inside the equipment or application system, affect the system in the
conductive ways such as capacitive coupling, inductive coupling, and electromagnetic radiation. There are two types of
electromagnetic interferences: radiated interference and conducted interference, depending on the type of the
propagation path. When the energy, often RF energy, from a component arrives at a sensitive component via the space,
the energy is known as radiated interference. The interference source can be both a part of the interfered system and a
completely electrically isolated unit. Conducted interference results from the electromagnetic wire or signal cable
connection between the source and the sensitive component, along the cable the interference conducts from one unit to
another. Conducted interference often affects the power supply of the equipment, but can be controlled by a filter.
Radiated interference may affect any signal path in the equipment, and is difficult to shield.
Effective measures should be taken for the power system to prevent the interference from the electric grid.
The working ground of the device should be properly separated and kept as far as possible from the grounding
device of the power equipment or the anti-lightning grounding device.
Keep the equipment away from high-power radio transmitter, radar transmitting station, and high-frequency
large-current device.
Measures must be taken to isolate static electricity.
Installation Tool
Common tools
Cross screwdriver, straight screwdriver, related electric and optical cables
Bolts, diagonal pliers, straps
Special-purpose tools
Anti-static tool, anti-static glove, stripping pliers, crimping pliers, crimping pliers for the
crystal head, wire cutter
Fiber optic cleaning tools
Air-laid paper, fiber end microscope
Meter
Multimeter, Errormeter, Optic-power meter
RG-WALL1600-S3600 is not shipped with a tool kit. The tool kit is customer-supplied.
Unpacking Requirements

·
Goods Checklist
Installation Kit
USB cables, Ethernet cables, power cables, screws, power adapters and optical disk containing
tools and documents.
A normal delivery should contain the above mentioned items, which may differ from the actual delivery,
depending on purchase contracts. Please check your goods carefully against the packing list or purchase
contract. If you have any questions or there are any errors, please contact your distributor.

·
Chapter 3 Product Installation
RG-WALL1600-S3600 must be used and fixed in the room.
Make sure you have carefully read part 2 and this part, and be sure that the requirements set forth in part 2
have been met.
Installation Procedure
Installation Verification
The RG-WALL1600-S3600 is complicated equipment, so you must carefully plan and arrange the installation location,
networking mode, power supply, and wiring before installation. Verify the following before installation:
The installation location is of a good air flow.
The installation location meets the temperature and humidity requirements of the equipment.
The qualified power supply is available at the installation location.
The related network cables have already been deployed at the installation location.
The selected power supply meets the system power.
Preparation
Install the Cabinet (Optional)
Mount chassis into cabinet (Optional)
Ground the system
Insert various modules
Connect cables or fibers to ports
Bind cables or fibers
Verification
End
Connect power supply

·
Cabinet Installation (Optional)
Precautions
When you install the cabinet, pay attention to the following:
All expansion bolts for fastening the cabinet base to the ground should be installed and tightened in sequence from
bottom up (large plain washer, spring washer, and nut), and the installation holes on the base and the expansion
bolts should be well aligned.
After the cabinet is installed, it should be stable and still.
After the cabinet is installed, it should be vertical to the ground.
When multiple cabinets are put side by side in the room, they should be aligned in a straight line, with an error less
than 5 mm.
The front/back doors of the cabinet should be properly installed. You can open and close them smoothly. The locks
should work normally, and all keys should be complete.
There should be no unnecessary formal labels inside the cabinet and on various boards.
Blank panels should be installed completely.
Fastening screws of various devices in the cabinet of the same model should be ready and tightened.
Various boards of the equipment should be installed securely, and the fastening screws on the panel should be
tightened.
All wiring inlets at the top and bottom of the cabinet should be installed with rodent-resistant nets where the seams
should be no more than 1.5 cm in diameter, to prevent rodents and other small animals from entering the cabinet.
Antistatic wrist straps should be provided in the cabinet.
Installation Steps
1) Plan the available space before installing the cabinet. You must reserve sufficient space for front and back doors for
maintenance.
2) Mount and fasten the cabinet at the designed location as planned.
3) Install the appropriate cable management bracket and cables.
4) Install the tray and wiring layer on the rack according to the configuration of one rack with one cabinet installed or
one rack with multiple cabinets installed.
Guide Rails Installation
Before installing a guide rail, you need to have some knowledge of standard 19-inch cabinets of IEC60297. The height of
standard cabinets is measured in Rack Unit (RU, 1 RU = 44.45 mm (1.75 inch)). 1 RU is equal to the height of three holes
(see Figure 3-1). The hole in the middle is an auxiliary installation hole, and the other holes are standard installation holes.
Note that the space between neighboring standard installation holes is a little smaller than that between an auxiliary
installation hole and its neighboring standard installation hole. When installing a guide rail for the RG-WALL1600-S3600
series, ensure that the plane to carry the chassis should be installed on the plane of delimiters (entire-U delimiter) of the
two neighboring RUs, as shown in Figure 3-1.
Figure 3-1 Guide Rail

·
Note:
and representing 1 RU delimiters
Before installing a guide rail, confirm that the weight capacity of the guide rail meets requirements.
Considering a variety of guide rails, guide rail appearance and installation methods depend on the actual
situation.
The RG-WALL1600-S3600 is heavy. To ensure cabinet stability: install the guide rail to as low a position as
possible in the cabinet if one RG-WALL1600-S3600 is installed; install heavier devices in the lower part of
the cabinet if multiple devices are installed.
Mounting into the Cabinet (Optional)
Precautions
Before mounting RG-WALL1600-S3600 into the cabinet, first verify that the front and back brackets of the cabinet are at
the right locations. If the bracket is too far forward, the front panel of the equipment may be too close to the front door, so
that the front door cannot be closed when network cables and pigtail fibers are connected. Allow at least 10 mm of
distance between the front panel of the equipment and that of the cabinet after installation. Before mounting into a cabinet,
you need to address the following conditions:
Fasten the cabinet.
Insert various modules in the frame properly.
Remove any obstacle in the frame and the surrounding environment.
Prepare the equipment and move it to the place near the cabinet where you can handle it easily.
Simple Installation Steps
1) Levelly lift the RG-WALL1600-S3600 by two people on both sides, and slowly move it to the front of the cabinet.
2) Levelly lift the RG-WALL1600-S3600 to a position slightly higher than the tray or the slide rail of the cabinet, put the
equipment onto the tray or the slide rail, and push it into the cabinet.
3) Fasten the RG-WALL1600-S3600 onto the cabinet with screws. There are fastening notches on both the sides of the
front panel on the equipment frame. Use screws to fasten them to the fastening bracket of the cabinet. After fastened,
the equipment should be stable and still in the cabinet.
Connecting the AC Power Supply to the Power Module
Connect AC power cables according to the ID and position instruction on the AC power module.

·
Precautions
Before connecting the power supply, you must verify that the external power supply matches the power module
installed with this equipment.
Before connecting the power cable, be sure that the switch of the power module is at the OFF position.
The 16A power cable with a standard 3-pin connector should be used for connection.
After connecting the power cable, correctly lock the strip-protection button onto the power cable.
Be sure that the power cables connected are in good contact.
Simple Connection Steps
1) Insert the plug of the power cable into the power module.
2) Connect the other end of the power cable to the corresponding socket or connector.
When installing the unit, use 3-pin power supply cord. The cross-sectional area of each pin is 1.5mm2or
14AWG minimum.
Connecting the External Port Cables
Precautions
Correctly distinguish single-mode and multi-mode fibers and ports.
Avoid bends of small radius at the connector.
Simple Connection Steps
1) Connect one end of the RJ45 connector for configuring Ethernet cables to the Ethernet port of the device board and
the other end to the NMS or a control terminal; or connect one end of the standard RJ45 serial port cable to the serial
port of the device board and the other end to the NMS or a control terminal.
2) Insert the twisted pair with the RJ45 port into the appropriate port according to the identification on the panel of the
linecard. Distinguish the crossover cable and straight-through cable.
3) Connect the cables of each port in sequence.
Binding the Cables
Precautions
The power cables and other cables should be bound in a visually pleasing way.
When you bind fibers, be sure that the fibers at the connectors have natural bends or bends of large radius.
Do not bind fibers and twisted pairs too tightly, as this may press hard the fibers and affect their useful life and
transmission performance.
Simple Binding Steps
1) Bind the drooping part of the fibers and twisted pairs of each board, and lead them to both sides of the chassis for
convenience.
2) On the both sides of the chassis, fasten the fibers and twisted pairs to the cable management bracket.
3) For the power cables, you should bind them closely along the bottom of the chassis, in a straight line wherever
possible.
Installation Verification
Verifying the Cabinet
Verify if the external power supply matches the distribution panel of the cabinet.
After installing the equipment, verify if the front/back cabinet doors can be closed.
Verify that the cabinet has been fastened completely, and does not move or tilt.
Verify that the equipment has been installed in the cabinet, and all the cables have been fastened to the cabinet.

·
Verifying the Cables
Verify that the twisted pairs match the ports.
Verify that the cables have been bound properly.
Verifying the Power Supply
Verify that the power cables are in good contact and comply with the safety requirements.
Verify that the power module has been fastened onto the equipment with the two captive screws on the panel.
Turn on the power switch and verify that the power module can work normally.

·
Chapter 4 System Debugging
Establishing the Configuration Environment
Because this series of products are desktop devices, easy configuration is provided without application of console cables.
The user name and password are admin and firewall respectively.
Initial Connection
1) Connect one end of a power cable to the power port on the device, and then connect the other end of the cable to a
power outlet.
2) Connect one end of an Ethernet cable to the WAN1 port and the other with Internet.
Web-based Configuration
1) Connect one end of an Ethernet cable to the LAN port on the device and the other to the Ethernet port on a PC.
2) Enter the IP address: https://192.168.1.200 on the address bar of the browser. The user name is admin and the
password is firewall.
Configuring the Console Port and Establishing the Configuration Environment
Connect the PC to the console port of the device through the Console cable.
Connecting the Console Cable
1) Connect one end of the DB-9 serial connector of the console cable to the serial port of the PC.
2) Connect one end of the Console cable to the Console port of the device.
Setting Terminal Parameters
Start the PC and run the terminal simulation program on the PC, such as Terminal on Windows 3.1 or HyperTerminal
on Windows 95/98/NT/2000/XP.
Set terminal parameters. The parameters are as follows: baud rate 9600, data bit 8, parity check none, stop bit 1,
and flow control as none. Details are as follows:

·
1) Choose Start > Programs > Accessories > Communications > Hyperterminal. The hyperterminal window
appears.
2) Click Cancel. A window appears as shown in Figure 4-1.
Figure 4-1
3) In the Connectivity Note window, type the name of the new connection and click OK. A window appears as shown
in Figure 4-2. In the Connect Using field, select the serial port you want to use.
Figure 4-2
4) After selecting the serial port, click OK. The Serial Port Parameter Setting window is displayed, as shown in Figure
4-3. Set the baud rate to 9600, data bit to 8, parity check to none, stop bit to 1, and no flow control.
Figure 4-3

·
5) After setting the serial port parameters, click OK.
Now many PCs do not have Console ports and systems do not support hyperterminals. Therefore, Console-to-USB
cables and terminal emulators (e.g., SecureCRT) are needed.
Parameter Settings
Step 1. Connect both ends of the Console-to-USB cable to the Console port of the device and the USB port of the PC
properly.
Step 2. Right click My Computer and click Management. Choose Device Manager >Port (COM and LPT),and the
COM port number will be displayed.
Step 3. Set terminal parameters. The parameters are as follows: baud rate 9600, data bit 8, parity check none, stop bit 1,
and no flow control.
1) Choose File > Connect,click New Session in the displayed list, and select Serial in the Protocol dropdown list.
Click Next, and the following interface will be displayed.
Figure 4-5

·
2) Click Next, and the following interface will be displayed.
Figure 4-6
3) After configuring the parameters, click Next, and you can configure the session name. Click OK, and the following
interface will be displayed.
Figure 4-7

·
4) Click Finish, and the following interface will be displayed.
Figure 4-8
Power-on Startup
Checking Before Power-on
The device is properly grounded.
The power cable is correctly connected.
The power supply voltage complies with the requirement of the device.
The console cable is correctly connected; the terminal (can be a PC) used for configuration is already started; the
parameters are already configured.
Checking After Power-on (Recommended)