H3C SecPath F5000-A5 Manual de usuario

H3C SecPath F5000-A5 Firewall

Installation Guide

Hangzhou H3C Technologies Co., Ltd.

http://www.h3c.com

Document version: 6PW109-20141225

No part of this manual may be reproduced or transmitted in any form or by any means without prior

written consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H3Care, , IRF, NetPilot, Netflow,

SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of

Hangzhou H3C Technologies Co., Ltd.

All other trademarks that may be mentioned in this manual are the property of their respective owners

Notice

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.

Environmental protection

This product has been designed to comply with the environmental protection requirements. The storage,

use, and disposal of this product must meet the applicable national laws and regulations.

Preface

The H3C SecPath F5000-A5 Firewall Installation Guide includes eight chapters, which describe the

product overview, preparing for installation, installing the firewall, installing FRUs, accessing the firewall

for the first time, replacement procedures, hardware management and maintenance, and

troubleshooting.

This preface includes:

•Audience

•Conventions

•About the H3C SecPath F5000-A5 documentation set

•Obtaining documentation

•Technical support

•Documentation feedback

Audience

This documentation is intended for:

•Network planners

•Field technical support and servicing engineers

•Network administrators working with the H3C SecPath F5000-A5 Firewall

Conventions

This section describes the conventions used in this documentation set.

Command conventions

Convention Descri

tion

Boldface Bold text represents commands and keywords that you enter literally as shown.

Italic Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from which

you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars, from

which you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by vertical

bars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by vertical

bars, from which you select one choice, multiple choices, or none.

Convention Descri

tion

&<1-n> The argument or keyword and argument combination before the ampersand (&) sign can

be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention Descri

tion

Boldface Window names, button names, field names, and menu items are in Boldface. For

example, the New User window appears; click OK.

> Multi-level menus are separated by angle brackets. For example, File > Create > Folder.

Symbols

Convention Descri

tion

WARNING An alert that calls attention to important information that if not understood or followed can

result in personal injury.

CAUTION An alert that calls attention to important information that if not understood or followed can

result in data loss, data corruption, or damage to hardware or software.

IMPORTANT An alert that calls attention to essential information.

NOTE An alert that contains additional or supplementary information.

TIP An alert that provides helpful information.

Network topology icons

Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports

Layer 2 forwarding and other Layer 2 features.

Represents a security product, such as a firewall, UTM, multiservice security gateway, or

load-balancing device.

Represents a security card, such as a firewall, load-balancing, NetStream, SSL VPN, IPS,

or ACG card.

Port numbering in examples

The port numbers in this document are for illustration only and might be unavailable on your device.



About the H3C SecPath F5000-A5 documentation

set

The H3C SecPath F5000-A5 documentation set includes:

Cate

Documents

Pur

oses

Product description and

specifications Marketing brochures Describe product specifications and benefits.

Hardware specifications

and installation

Compliance and safety

manual

Provides regulatory information and the safety

instructions that must be followed during installation.

Installation guide Provides a complete guide to hardware installation

and hardware specifications.

Card manuals Provide the hardware specifications of cards.

Software configuration

Configuration guides Describe software features and configuration

procedures.

Command references Provide a quick reference to all available

commands.

Configuration examples Describe typical network scenarios and provide

configuration examples and instructions.

Operations and

maintenance

Release notes

Provide information about the product release,

including the version history, hardware and software

compatibility matrix, version upgrade information,

technical support information, and software

upgrading.

FAQ Provides frequently asked questions about the

firewall.

Obtaining documentation

Access the most up-to-date H3C product documentation on the World Wide Web at

http://www.h3c.com.

Click the links on the top navigation bar to obtain different categories of product documentation:

[Technical Support & Documents > Technical Documents]—Provides hardware installation, software

upgrading, and software feature configuration and maintenance documentation.

[Products & Solutions]—Provides information about products and technologies, as well as solutions.

[Technical Support & Documents > Software Download]—Provides the documentation released with the

software version.

Technical support

servic[email protected]

http://www.h3c.com

Documentation feedback

You can e-mail your comments about product documentation to info@h3c.com.

We appreciate your comments.

Contents

Preparing for installation ············································································································································· 1

Safety recommendations ··················································································································································1

Safety symbols ··························································································································································1

General safety recommendations···························································································································1

Electricity safety ························································································································································1

Laser safety································································································································································2

Handling safety ························································································································································2

Examining the installation site ·········································································································································2

Weight support·························································································································································2

Temperature and humidity·······································································································································3

Cleanness··································································································································································3

Cooling······································································································································································4

ESD prevention ·························································································································································4

EMI·············································································································································································6

Lightning protection··················································································································································6

Rack installation························································································································································6

Power supply·····························································································································································7

Installation tools (user-supplied) ·······································································································································7

Accessories ········································································································································································7

Checklist before installation ·············································································································································8

Installing the firewall··················································································································································10

Confirming installation preparations···························································································································· 10

Installing the firewall in a 19-inch rack ······················································································································· 11

Installing cage nuts to the rack ···························································································································· 11

Attaching the mounting brackets to the chassis ································································································· 12

Mounting the firewall to the rack························································································································· 14

Grounding the firewall ·················································································································································· 15

Connecting the grounding cable ························································································································· 16

Installing an MPU ··························································································································································· 17

Installing a CF card························································································································································ 19

Installing an interface module······································································································································· 19

Installing a fan tray ························································································································································ 21

Installing a power module············································································································································· 23

Connecting interface cables ········································································································································· 24

Connecting the management Ethernet port ········································································································ 24

Connecting the HA port········································································································································ 24

Connecting Ethernet cables·································································································································· 25

Connecting a power cord ············································································································································· 26

Connecting an AC power cord ··························································································································· 26

Connecting a DC power cord······························································································································ 27

Verifying the installation················································································································································ 29

Installing FRUs ····························································································································································30

Installing an air filter ······················································································································································ 30

Installing a lightning protector for a network port ······································································································ 31

Connecting the AC power supply to a power strip with lightning protection ························································· 34

Logging in and performing basic configurations·····································································································35

Logging in to the CLI through the console port ··········································································································· 35

Connecting the terminal to the firewall ··············································································································· 35

Configuring communication parameters on the terminal·················································································· 36

Powering on the firewall······································································································································· 40

Verifying the firewall boot information ··············································································································· 40

Logging in to the CLI by using Telnet ··························································································································· 41

Logging in to the Web interface··································································································································· 42

Logging in to the CLI through the AUX port ················································································································ 42

Performing basic configurations ··································································································································· 43

Performing basic configurations at the CLI ········································································································· 43

Performing basic configurations in the Web interface······················································································ 44

Replacement procedures ···········································································································································51

Precautions······································································································································································ 51

Installing and removing a filler panel ·························································································································· 51

Removing a filler panel········································································································································· 52

Installing a filler panel··········································································································································· 53

Replacing an MPU ························································································································································· 54

Replacing an interface module····································································································································· 56

Replacing a CF card······················································································································································ 57

Replacing a transceiver module ··································································································································· 58

Replacing a power module··········································································································································· 59

Replacing a fan tray ······················································································································································ 60

Hardware management and maintenance ··············································································································62

Displaying software and hardware version information ··························································································· 62

Displaying running status data ····································································································································· 63

Displaying detailed information about cards·············································································································· 63

Displaying the electrical label data······························································································································ 64

Displaying CPU usage statistics···································································································································· 64

Displaying memory usage statistics······························································································································ 65

Displaying information about the CF card ·················································································································· 65

Displaying the operating states of fans ······················································································································· 66

Displaying power module information ························································································································ 66

Managing interfaces and transceiver modules··········································································································· 67

Managing combo interfaces ································································································································ 67

iii

Verifying and diagnosing transceiver modules·································································································· 68

Troubleshooting system exceptions ······························································································································ 68

Configuring the exception handling methods ···································································································· 68

Displaying the exception handling method ········································································································ 69

Rebooting your firewall ················································································································································· 69

Troubleshooting··························································································································································71

MPU failures ··································································································································································· 71

Symptom 1 ····························································································································································· 71

Symptom 2 ····························································································································································· 71

Symptom 3 ····························································································································································· 72

Service module failures ················································································································································· 72

Power supply system failures ········································································································································ 73

Fan failures ····································································································································································· 74

Configuration system failures········································································································································ 74

No display on the configuration terminal··········································································································· 75

Garbled characters on the configuration terminal····························································································· 75

Console port failure··············································································································································· 75

Password loss ································································································································································· 76

Cooling system failures·················································································································································· 76

Software upgrade failures············································································································································· 77

No response from the serial port of the MPU····································································································· 77

Failure to upgrade through TFTP·························································································································· 77

Failure to upgrade through FTP···························································································································· 78

Application file missing errors ······································································································································ 79

Appendix A Chassis views and technical specifications ························································································80

Chassis views ································································································································································· 80

Main processing unit ····················································································································································· 81

Interface modules ··························································································································································· 82

NSQ1GT8C40······················································································································································ 82

NSQ1XP20···························································································································································· 82

NSQ1GT8P40······················································································································································· 83

Power modules ······························································································································································· 83

AC power module················································································································································· 83

DC power module ················································································································································· 84

Fan tray ··········································································································································································· 84

Technical specifications················································································································································· 85

Dimensions and weight ········································································································································ 85

Power module ························································································································································ 85

MPU ········································································································································································ 86

Lightning protector for a network port (optional)········································································································ 90

Power strip with lightning protection (optional) ·········································································································· 90

Appendix B LEDs························································································································································91

MPU LEDs········································································································································································ 91

Interface module LEDs···················································································································································· 93

Power module LEDs························································································································································ 95

Fan tray LEDs ·································································································································································· 96

Appendix C Arranging slots and numbering interfaces··························································································97

Arranging slots ······························································································································································· 97

Numbering interfaces ···················································································································································· 97

Examples········································································································································································· 98

Appendix D Cables ···················································································································································99

Ethernet twisted pair cable············································································································································ 99

Introduction ···························································································································································· 99

Making an Ethernet twisted pair cable·············································································································102

Optical fiber ·································································································································································103

Appendix E Cabling recommendations ················································································································ 105

General cabling requirements ····································································································································105

Cable management requirements ······························································································································105

Cabling examples ························································································································································108

Index ········································································································································································ 110