H3c-technologies H3C SecPath M9000 Series Manual de usuario

H3C SecPath M9000 Multi ServiceSecurity Gateway SeriesInstallation Guide Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com

2 • Moving the chassis requires at least two people, and you can use a mechanical lift as needed. • Lift and put down the chassis slowly and never m

3 Table 1 Temperature requirements Temperature Range Operating temperature 0°C to 45°C (32°F to 113°F) Storage temperature –40°C to +70°C (–40°F to

4 EMI Electromagnetic interference (EMI) might be coupled from the source to the gateway through the following coupling mechanisms: • Capacitive coup

5 • Leave at least 10 cm (3.94 in) of clearance at the inlet and outlet air vents. Figure 1 shows the airflow through the M9010 chassis. Figure 2 sho

6 Space For easy maintenance, follow these guidelines: • The equipment room is at least 3 m (9.84 ft) high. • Reserve at least 1 m (3.28 ft) of clea

7 Installing the gateway IMPORTANT: Keep the packages of the gateway and the components secure for repackaging. Confirming installation preparatio

8 1. Read the signs on the slide rails (see Table 6) to identify the left and right slide rails. Figure 3 Right slide rail (1) Guide rail (2) Sign

9 Figure 4 Locating the cage nut installation positions on the rack post (1) Middle of the narrower metal area between holes 3. Install six cage n

10 6. Repeat steps 4 and 5 to install the other slide rail. Make sure the two slide rails are at the same height so that the gateway can be placed o

11 • The M9010 gateway has two cable management brackets—the signal cable management brackets are installed at the upper part of the gateway, and th

Copyright © 2013-2014, Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved No part of this manual may be reproduced or transmi

12 Figure 9 Attaching cable management brackets to an M9006 gateway (1) Place the cable management bracket against the installation position on the

13 Attaching air filters to an M9006/M9014 gateway Air filters of an M9006/M9014 gateway are installed at the left of the chassis. The air filter ins

14 Figure 12 Attaching an air filter to an M9010 gateway TIP: • Install power cable management brackets before you install an air filter to the g

15 Figure 13 Placing the chassis on the rack (M9006) 4. Use the screws to attach the mounting brackets to the rack. Figure 14 Securing the chassis

16 1. Remove the grounding screws from the grounding holes at the rear of the chassis. 2. Use the grounding screws to attach the two-hole grounding

17 Figure 16 Attaching an ESD wrist strap (M9006) Installing MPUs/LPUs/service modules/switching fabric modules IMPORTANT: • The gateway comes w

18 Figure 17 Installing a card Installing a power module CAUTION: • Do not install AC power modules and DC power modules on the same gateway. •

19 Figure 18 Installing a power module in a vertical slot (M9010/M9014) Figure 19 Installing a power module in a horizontal slot (M9006) Installi

20 { For an SFP+ module, press the module down against the upward force of the bottom spring tab so you can push the module straight into the port.

21 Figure 21 Installing a CFP module (1) Gently push the CFP module into the slot (2) Fasten the captive screws on the CFP module 4. Connect the o

Preface The H3C SecPath M9000 Multi Service Security Gateway Series Installation Guide guides you through the installation of your gateway, including

22 2. Plug one end of the optical fiber into the transceiver module on the gateway, and plug the other end into the transceiver module in the peer d

23 Connecting power cables WARNING! Before you connect the power cable to a power module, make sure the circuit breaker is switched off. Connectin

24 4. Connect the other end of the power cable to the power source. { Connect the blue DC power cable marked with –48V to the negative terminal (–4

25 Logging in to the gateway and configuring basic settings The first time you access a gateway you must log in through the console port. After login

26 Figure 25 Connecting a console port to a terminal (M9006) (1) Console port (2) Console cable (3) Console terminal Setting terminal parameters

27 Figure 26 Connection description 3. Select the serial port to be used from the Connect using list, and click OK. Figure 27 Setting the serial p

28 Figure 28 Setting the serial port parameters 5. Select File > Properties in the HyperTerminal window. Figure 29 HyperTerminal window 6. O

29 Figure 30 Setting terminal emulation in Gateway Properties dialog box Powering on the gateway Before power-on Before powering on the gateway, co

30 • After the POST, the system prompts you to press Enter. When the command line prompt appears, the gateway is ready to configure. Logging in usin

31 Step Command Remarks Associate an ACL with the NAT address group on the interface: • No-PAT nat outbound [ acl-number ] address-group group-numbe

Convention Description # A line that starts with a pound (#) sign is comments. GUI conventions Convention Description Boldface Window names, button

32 NOTE: For more information about these commands, see the command references that come with your gateway.

33 Troubleshooting This chapter describes how to troubleshoot your gateway. TIP: Clean your gateway periodically because the noncompliant operating

34 Garbled terminal display If terminal display is garbled, verify that the following settings are configured for the terminal, for example, HyperTer

35 7. Plug a new power module of the same model into the same slot, and connect it to the same power input end. If the new power module can operate

36 If a card is operating correctly, the RUN LED flashes and the ALM LED is off. When the RUN LED is off, the card fails. To troubleshoot the card: 1

37 8. If the problem persists, contact H3C Support. NOTE: • A combo interface is a logical interface that comprises one fiber port and one coppe

38 Replacing FRUs CAUTION: • When replacing FRUs while the gateway is running, be aware of electrical safety hazards. • Strictly follow the repla

39 { DC power cable—Remove the cable ties from the power cable, loosen the fastening screw on the power cable, and remove the power cable plug from

40 To replace a card: 1. Prepare an antistatic mat to place the removed card. 2. If the card is an MPU, LPU, or service module, remove all its cabl

41 Replacing a fan tray CAUTION: To avoid bodily injury, do not touch the rotating fans when replacing the fan tray. When the fan tray fails, repl

About the H3C SecPath M9000 documentation set The H3C SecPath M9000 documentation set includes: Category Documents Purposes Hardware specifications a

42 Figure 36 Removing a fan tray (1) Loosen the captive screws on the fan tray (2) Take the fan tray out of the chassis Installing a fan tray 1. U

43 The air filter removal and installation procedures for all M9000 gateways are the same. This section takes removing and installing an air filter o

44 For a QSFP+ module that uses a plastic pull latch, skip this step. QSFP+ modules use either a metal or plastic pull latch. 3. Grasp the clasp on

45 Appendix A Chassis views and technical specifications Chassis views Every M9000 gateway has an MPU section, LPU section, service module section, s

46 Table 7 Chassis structure Section Description Remarks (1) LPU and service module slots N/A The chassis comes with no LPUs and service modules inst

47 NOTE: • Rack height is measured in RUs. One RU is 44.45 mm (1.75 in). • The dimensions listed in Table 8 are for gateway chassis, excluding m

48 Module power consumption and system power consumption Card power consumption The power consumption of the cards depends on the card model and stat

49 Table 13 Fan tray power consumption Model Minimum fan tray power consumption Maximum fan tray power consumption M9006 12 W 240 W M9010 13 W 32

50 Noise The gateway uses fans with the automatic speed adjustment function, so the sound pressure levels are different when the fan speeds are diffe

51 Appendix B FRUs and compatibility matrixes MPUs MPU is the core of the control management plane for the M9000 gateway series. The MPU model availa

i Contents Preparing for installation ················································································································

52 Table 18 LPU specifications LPU model Description Connector Number of interfaces Interface transmission rate Available transceiver modules NSQ1T

53 For more information about the LPUs, see the card manuals that come with the LPUs. For more information about transceiver modules available for th

54 Item LSUM1AC2500 specifications LSUM1DC2400 specifications Temperature requirements Operating temperature: –10°C to +50°C (14°F to 122°F) Operatin

55 The M9000 security gateway air filters include the M9006 air filter, the M9010 air filter, the M9014 air filter. Order air filters compatible with

56 10-Gigabit XFP module Central wavelength Connector Cable specifications Modal bandwidth Maximum transmission distance XFP-LX-SM1542.94 1542.94 nm

57 Table 24 SFP+ cable specifications 10-Gigabit SFP+ cable Cable length Description LSWM2STK 1.2 m (3.94 ft) Used for connecting SFP+ ports LSWM3S

58 Gigabit SFP module Central wavelength Connector Cable specifications Modal bandwidth Maximum transmission distance SFP-GE-LX-SM1310-BIDI TX: 1310

59 100-Mbps SFP module Central wavelength Connector Cable specifications Maximum transmission distance SFP-FE-LX-SM1310-A 1310 nm LC 9/125 μm single

60 Table 30 100-Gigabit CFP module specifications 100-Gigabit CFP module Central wavelength Connector Cable specifications Maximum transmission dista

61 Table 32 16A AC power cables used in different countries or regions 1 Connector type Code (Length) Countries or regions where the type of power ca

ii Logging in using Telnet ···························································································································

62 4 Connector type Code (Length) Countries or regions where the type of power cables conforms to local safety regulations and can be used legally

63 Connector outline Power cable outline Connector outline 7 Connector type Code (Length) Countries or regions where the type of power cables con

64 Appendix C LEDs The M9000 gateway series provides a lot of LEDs. You can determine the gateway operating status by examining the LEDs. MPU LEDs Fi

65 Card LEDs Each MPU has the LEDs numbered the same as card slots to indicate the status of the active MPU, standby MPU, LPUs, service modules, and

66 LED Color Description RUN Off Power is not being supplied to the card or the card is faulty. Steady green The card is operating incorrectly. Sl

67 LED status Description Flashing green The SFP+ port is receiving or sending data at 10 Gbps. Steady yellow A 100/1000 Mbps link is present. St

68 Table 44 Switching fabric module LED description RUN LED ALM LED Description Flashing Off The switching fabric module is operating correctly.

69 LED Color Description DC Green The power module is outputting power normally. Red The power module is experiencing an output problem, including o

70 Appendix D Cables This chapter describes cables used for connecting network ports. Table 48 Cable description Cable Port type Application Console

71 RJ-45 connector An Ethernet twisted pair cable connects network devices through the RJ-45 connectors at the two ends. Figure 41 shows the pinouts

iii Power module LEDs ································································································································

72 Based on pinouts Ethernet twisted pair cables can be classified into straight through and crossover cables based on their pinouts. • Straight-thr

73 Pin assignments Select an Ethernet twisted pair cable according to the RJ-45 Ethernet interface type on your device. An RJ-45 Ethernet interface c

74 2. Strip off an appropriate length of the cable sheath. The length is typically that of the RJ-45 connector. 3. Untwist the pairs so that they c

75 Patch cord A fiber that has connectors at both ends is called a patch cord. A patch cord connects one optical device to another for signal routing

76 Precautions • Make sure the fiber connector and fiber type match the transceiver module type. • The fiber ports on some cards have shielded cove

77 QSFP+ cable You can use QSFP+ cables to connect the QSFP+ ports. Figure 47 QSFP+ cable (1) Connector (2) Pull latch QSFP+ to SFP+ cable A QSFP+

78 Appendix E Cabling recommendations When an M9000 gateway is mounted in a 19-inch standard rack, the interface cables are routed through the cable

79 Figure 49 Correct and incorrect cable binding • The cable bend radius at connectors must be at least 5 times the cable diameter, and must be at

80 Figure 51 Binding cables where they must be bent • Route, bind, and attach excess cables for easy, safe maintenance activities and correct oper

81 Table 53 Tie-binding parameters Cable bundle diameter (mm) Space between bundles (mm) 10 80 to 150 10 to 30 150 to 200 30 200 to 300 • Do not

1 Preparing for installation The H3C SecPath M9000 Multi Service Security Gateway Series includes these models: • M9006 • M9010 • M9014 Safety To a

82 Appendix F Repackaging the gateway This chapter describes how to repackage the gateway chassis, power module, card, mounting bracket, cable manage

83 Figure 53 Removing the grounding cable Removing the twisted pair and optical fiber You must remove twisted pairs and optical fibers from all the

84 Repackaging the card 1. Prepare the anti-static bag and box of the card. Make sure the bag is clean, dry, and not damaged. 2. Remove the transc

85 Figure 54 Removing the chassis (M9006) from the rack 5. Put the chassis onto the pallet base of the wooden carton. Removing the air filter 1.

86 Figure 55 Removing the mounting brackets from the chassis (M9006) 3. Put the mounting brackets into the box. Removing the cable management bra

87 Figure 56 Removing the cable management brackets (M9010) (1) Loosen the screws that attach the cable management brackets to the chassis (2) Remov

88 Figure 57 Installing the screws (M9010) 3. Cover the chassis with the packing bag, and then tape the bag to the base pallet. 4. Install the s

89 Index A C D E F G H I L M N O P Q R S T W A AC power cable,60 Air filters,54 Attaching cable management brackets and mounting brackets to the rac

90 S Safety,1 Service module LEDs,65 Service modules,51 SFP+ cable,76 Switching fabric module LEDs,67 Switching fabric modules,53 T Tools and equipm