H3c-technologies H3C SecPath F5000-S Firewall Manual de usuario

H3C SecPath F5000-S/F5000-C FirewallsInstallation Guide Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Document version

1 Preparing for installation Safety recommendations To avoid any equipment damage or bodily injury caused by improper use, read the following safety r

2 Symbol Description Transported and stored with care. Transported and stored avoiding humidity, rains and wet floor. Electrical safety • Carefull

3 • When you move or lift the firewall chassis, support the bottom of the chassis, rather than holding any FRU. Make sure the accessories of the fire

4 The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion and premature aging of components, as shown in

5 No ESD-preventive wrist strap is provided with the firewall. Purchase one yourself. Before you attach an ESD-preventive wrist strap, make sure the r

6 • Make sure the grounding cable of the chassis is well grounded. • Make sure the grounding terminal of the AC power receptacle is well grounded. •

7 Front mounting bracket (required) Rubber feet (required) Bail latch (required) Cable tie (user supplied) Checklist before installation Table 5

8 Item Requirements Result Lightning protection • The grounding cable of the chassis is well grounded. • The grounding terminal of the AC power rece

9 Installing the firewall WARNING! Keep the tamper-proof seal on a mounting screw on the chassis cover intact, and if you want to open thechassis, c

10 1. Verify that the workbench is sturdy and well grounded. 2. Clean the recessed areas on the chassis bottom with a dry cloth. 3. Attach the fou

Copyright © 2013-2014, Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved No part of this manual may be reproduced or transmi

11 The firewall can be installed with front mounting brackets or rear mounting brackets. The installation procedures are similar. This section takes f

12 Figure 6 Attaching mounting brackets to the firewall 5. Mount the firewall to the rack. Figure 7 Mounting the firewall to the rack 6. Insert

13 Figure 8 Securing the firewall to the rack Grounding the firewall WARNING! • Correctly connecting the firewall grounding cable is crucial to l

14 5. Use a needle-nose pliers to bend a hook at the other end of the grounding cable, attach it to the grounding point, and secure it with a screw.

15 Figure 10 Connecting the grounding cable to a grounding strip Grounding the firewall with a grounding conductor buried in the earth ground If ear

16 Installing a power module CAUTION: • Make sure the power module is off and the grounding cable is correctly connected before installation.• Do

17 2. Loosen the captive screws on the filler panel with a Phillips screwdriver to remove the filler panel. Keep the filler panel for future use. 3.

18 Installation procedures To install a port lightning protector: 1. Use a double-faced adhesive tape to stick the lightning protector onto the firew

19 Connecting the AC power module to a power strip with lightning protection (optional) CAUTION: Make sure the PE terminal of the power socket has b

20 Connecting Ethernet cables Connecting a copper Ethernet port You can use either a straight-through or a cross-over network cable. For more informat

Preface The H3C SecPath F5000-S/F5000-C Firewalls Installation Guide describes preparing for installation, installing the firewall, logging in to the

21 Follow these guidelines when you connect a fiber cable: • Never bend or curve a fiber when connecting it. After a fiber is installed well, the ben

22 2. Connect one end of the AC power cord to the AC-input power receptacle on the firewall. 3. Pull the bail latch down to secure the plug to the p

23 Figure 20 Connecting the power cord Verifying the installation After installation, verify that: • There is enough space around the firewall, an

24 Logging in to the firewall Login methods • Logging in through the console port • Logging in through Telnet • Logging in through the Web interfac

25 Figure 21 Connecting the console cable Setting terminal parameters For Windows 7 or higher version operating system, use a third-party terminal e

26 Figure 22 Connection description 3. Select the serial port to be used from the Connect using list, and click OK. Figure 23 Setting the serial po

27 Figure 24 Setting the serial port parameters NOTE: To restore the default settings, click Restore Defaults. 5. Select File > Properties in

28 Figure 26 Setting terminal emulation in test Properties dialog box Powering on the firewall Checking before power-on WARNING! Locate the emerge

29 Checking after power-on After powering on the firewall, verify that: • The LEDs on the front panel are normal. For more information about LEDs, se

30 NOTE: • To access the Boot menu, you must press Ctrl + B within four seconds at the prompt "Press Ctrl+B to enterextended boot menu."

Convention Description # A line that starts with a pound (#) sign is comments. GUI conventions Convention Description Boldface Window names, button

31 Figure 27 Login page of the Web interface NOTE: A user uses the default accont admin to log in to the Web network management page for the first

32 Step Command Remarks Configure dynamic NAT. Configure an address pool: nat address-group group-number start-address end-address [ level level ] Ava

33 Figure 28 Basic configuration wizard—1/6 3. Click Next. The page for basic configuration appears.

34 Figure 29 Basic configuration wizard—2/6 (basic information) 4. Configure the parameters as described in Table 6. Table 6 Configuration items It

35 Figure 30 Basic configuration wizard—3/6 (service management) 6. Configure the parameters as described in Table 7. Table 7 Configuration items I

36 Item Description HTTPS Specify whether to enable HTTPS on the device, and set the HTTPS port number. Disabled by default. IMPORTANT: • If the cur

37 Table 8 Configuration items Item Description IP Configuration Set the approach for obtaining the IP address, including: • None—The IP address of t

38 Table 9 Configuration items Item Description Interface Select an interface on which the NAT configuration will be applied. Dynamic NAT Specify whe

39 Figure 33 Basic configuration wizard—6/6 On this page, you can set whether to save the current configuration to the startup configuration file (w

40 Hardware replacement CAUTION: Wear an ESD-preventive wrist strap or ESD-preventive gloves for hardware maintenance. They are not provided with th

Category Documents Purposes specifications (F5000-S/F5000-C) Card datasheets Describe card specifications, features, and standards. Hardware specifica

41 2. Holding the ejector levers of the interface card with both hands, pull the ejector levers outward, and pull the interface card part way out of

42 Figure 37 Removing the transceiver module 4. Install dust caps to the removed transceiver module, and put it into the package. If you do not in

43 3. To install a new fan tray, grasp the handle of the fan tray with one hand and support the fan tray bottom with the other, and slide the fan tra

44 Hardware management and maintenance NOTE: The output depends on your firewall model. For more information about the commands used in this chapte

45 Copyright (c) 2004-2013 Hangzhou H3C Tech. Co., Ltd. All rights reserved. H3C SecPath F5000-S uptime is 0 week, 0 day, 0 hour, 2 minutes

46 Displaying the electrical label information for the firewall Use the display device manuinfo command to display the electrical label information fo

47 Field Description 2% in last 1 minute Average CPU usage in the last minute. (After the firewall boots, the firewall calculates and records the aver

48 <Sysname> display fan Fan 1 State: Normal Fan 2 State: Normal

49 Table 16 Output description Field Description Sensor Temperature sensor: • hotspot—Hot spot temperature sensor. • inflow—Air inlet vent temperatu

50 Displaying transceiver module information Identifying transceiver modules To identify transceiver modules, you can use the following command to vie

Documentation feedback You can e-mail your comments about product documentation to [email protected]. We appreciate your comments.

51 Purpose Command Remarks Reboot the firewall immediately. reboot Available in user view. To enable the scheduled reboot function: Purpose Comman

52 Troubleshooting Power module failure Symptom The firewall cannot be powered on, and the power LED (PWR1/PWR2) on the front panel is off. Solution

53 { The console cable is connected to an incorrect serial port. (The serial port in use is not the one set on the terminal.) { The properties of th

54 • When you use XMODEM to load software, you select a baud rate other than 9600 bps, but you have not re-set the baud rate for the HyperTerminal.

55 Appendix A Chassis views and technical specifications Appearance of the firewall The MPU of the firewall has twelve 10/100/1000Base-T auto-sensing

56 Figure 40 Rear view of the firewall (1) Fan tray (2) Power module slot 1 (3) Power module slot 2 (4) Grounding screw Appearance of the interfa

57 AC power module The firewall supports AC power module PSR300-12A1 that provides a maximum output power of 300 W. Figure 42 Appearance of the AC p

58 Storage media Table 18 Storage media specifications Item Specification Flash 8 MB Nor Flash Memory type and capacity • DDR3 SDRAM • 4 GB (2 × D

59 Fan tray specifications Table 22 Fan tray specifications Item Specification Model RT-FANF Automatic speed adjustment Supported Fool-proof design

60 Item Specification Services • Connected to an ASCII terminal • Provides connection to the serial port of a local PC to run the terminal emulatio

i Contents Preparing for installation ················································································································

61 Table 27 1000Base-X SFP transceiver module specifications Transceiver module Central wavelength Connector Fiber Max transmission distance SFP-GE-S

62 Transceiver module Central wavelength Connector Fiber Max transmission distance SFP-XG-LH40-SM1550 1550 nm LC 9/125 μm single-mode optical fiber

63 Appendix B LEDs MPU LEDs Table 30 MPU LED description LED Mark Status Description System status LED Off The firewall is not powered on or has fai

64 Interface card LEDs Table 31 Interface card LED description LED Mark Status Description Copper Ethernet port LED 10/100/1000BASE-T Off No link i

65 Figure 45 DC power module LED Table 33 DC power module LED description LED Status Description (green) Off No power is input or the power modul

66 Appendix C Cables Console cable A console cable is an 8-core shielded cable, with a crimped RJ-45 connector at one end for connecting to the conso

67 Ethernet twisted pair cables can be classified into category 3, category 4, category 5, category 5e, category 6, and category 7 cables based on pe

68 Figure 48 Straight-through cable Figure 49 Crossover cable Select an Ethernet twisted pair cable according to the RJ-45 Ethernet port type on

69 Pin 10Base-T/100Base-TX 1000Base-T Signal Function Signal Function 2 Tx- Sends data BIDA- Bi-directional data cable A- 3 Rx+ Receives data

70 2. Strip off an appropriate length of the cable sheath. The length is typically that of the RJ-45 connector. 3. Untwist the pairs so that they c

ii Displaying boot information ·······················································································································

71 • Before connecting an optical fiber, make sure the connector and cable type match the hot swappable interface module. • The fiber Ethernet por

72 Appendix D Cable management When an F5000-S/F5000-C firewall is mounted in a 19-inch standard rack, the interface cables are routed through the ca

73 Cable management guidelines When you route and bundle up cables, follow these guidelines: • Bind and route the cables neatly inside the rack, and

74 Figure 52 Cutting the cable ties • When you bend cables, bind cables as shown in Figure 53. To avoid cable core break due to excessive stress,

75 Figure 54 Securely fasten cables (1) Flat washer (2) Spring washer (3) Nut • Fasten heavy or rigid power cables at the connectors to relief st

76 Index A C D E F G I L M O P R S V A Accessories,6 Appearance of the firewall,55 Appearance of the interface card,56 Appearance of the power modul

77 Replacing an interface card,40 S Safety recommendations,1 Software loading failure,53 Storage media,58 V Verifying the installation,23

iii Appendix C Cables ································································································································