Page 1
Hillstone SG-6000 Series Firewall Appliance Installation Manual Hillstone Networks Inc. SG-6000-IM0511-4.0R4E-03...
Page 2
Hillstone SG-6000 Series Firewall Appliance Installation Manual Name and Concentration of Toxic or Hazardous Substances and Elements in Products Toxic or hazardous substances and elements Component Lead Mercury Cadmium Cr6+ PDBE Metal parts (including fasteners) Printed circuit board assemblies and components...
Page 3
About This Manual Thanks for choosing the network security products from Hillstone Networks, Inc. This document is an installation manual for Hillstone SG-6000 Series firewall appliance to help you install the Hillstone SG-6000 Series firewall appliance properly. This manual includes the following chapters: •...
Hillstone SG-6000 Series Firewall Appliance Installation Manual Table of Contents Chapter 1 Introduction .................. 1 Overview ......................1 Features ......................1 ® Innovative Multi-core Plus G2 Security Architecture ..........1 Modularized Design ..................2 Hardware Overview .................... 2 Front Panel....................2 Back Panel ....................
Page 5
Hillstone SG-6000 Series Firewall Appliance Installation Manual WebUI ......................36 Tenet and SSH ..................... 37 Basic Configuration ..................37 Chapter 5 Hardware Maintenance and Replacement ........38 Introduction ....................38 Installing and Removing the Power Supply Module ..........38 Installing and Removing the X5100/G6100 Power Supply Module ......38 Installing and Removing the G5150/G3150 Power Supply Module ......
Page 6
Figure 1-21: SG-6000-M2105 Back Panel ..............11 Figure 1-22: SG-6000-M2100 Back Panel ..............11 Figure 1-23: AC Power Module for SG-6000-X5100 and SG-6000-G6100 ..... 24 Figure 1-24: DC Power Module for SG-6000-X5100 and SG-6000-G6100 ..... 24 Figure 1-25: AC Power Module for SG-6000-G5150 and SG-6000-G3150 ..... 24 Figure 1-26: DC Power Module for SG-6000-G5150 and SG-6000-G3150 .....
Page 7
Table 1-12: SG-6000-M2105 Front Panel Description ..........8 Table 1-13: SG-6000-M2100 Front Panel Description ..........8 Table 1-14: Hillstone Firewall Appliance Front Panel LED Descriptions......13 Table 1-15: Hillstone Firewall Appliance System Parameters ........17 Table 1-16: Console Port Attributes ................ 18 Table 1-17: Auxiliary Port Attributes ...............
SG-6000-M2105 and SG-6000-M2100. SG-6000-G5150, SG-6000-G3150, SG-6000-G2120, SG-6000-G2110, SG-6000-M6115 and SG-6000-M6110 adopt modular design of pluggable circuit boards. For more information about extensible modules, please refer to Hillstone SG-6000 Series Firewall Appliance Expansion Module Manual. Features This section describes the main features of the SG-6000 Series firewall appliances.
Front Panel The front panel of SG-6000-X5100 consists of 1 Gigabit Ethernet port, 12 SFP ports, 2 XFP ports, 2 USB ports, 1 Console port, 1 Auxiliary port, 1 CLR button, some status LEDs and a fan tray.
Hillstone SG-6000 Series Firewall Appliance Installation Manual No. Label & Description No. Label & Description No. Label & Description 1 PWR: Power LED 6 PS1: Power PS1 LED 11 USB0-USB1: USB Ports 2 STA: Status LED 7 FAN: Fan tray LED...
Table 1-13: SG-6000-M2100 Front Panel Description Back Panel SG-6000-X5100 and SG-6000-G6100 adopt dual power supply and they have the same back panel layout, which consists of 2 sets of power supply socket and switch, 1 grounding screw and several vents. Figure 1-14 illustrates the back panel layout of SG-6000-X5100 and...
Hillstone SG-6000 Series Firewall Appliance Installation Manual SG-6000-G6100. Figure 1-14: SG-6000-X5100/SG-6000-G6100 Back Panel SG-6000-G5150 and SG-6000-G3150 have the same back panel layout, which consists of 2 power supply slots and 1 grounding screw. The standard product of SG-6000-G5150 is dual power supply and that of SG-6000-G3150 is single power supply.
Hillstone SG-6000 Series Firewall Appliance Installation Manual Figure 1-17: SG-6000-G2120/SG-6000-G2110 (dual power supply) Back Panel SG-6000-M6115 and SG-6000-M6110 have the same back panel layout. The standard products are single power supply and they are also available in dual power supply. The back panel of single power supply product has 1 power supply socket, 1 power supply switch and 1 grounding screw.
SG-6000-M2100 has 1 power supply socket, 1 grounding screw and 1 security lock. Figure 1-22 illustrates the back panel of SG-6000-M2100. Figure 1-22: SG-6000-M2100 Back Panel LED Indicators Table 1-14 describes the meanings of LED indicators on the front panels of Hillstone firewall appliances. - 11 -...
Page 19
Hillstone SG-6000 Series Firewall Appliance Installation Manual Color/Status Description Green/On steadily The system power is running normally. Orange/On steadily The system power is running abnormally. The system power is not running normally, and Red/On steadily the system is in the off mode.
Contact your sales representative if this occurs. • As LED indicators vary due to different product model, please refer to the real product. System Parameters Table 1-15 lists the system parameters of Hillstone firewall appliances of all models. Item Description...
Page 21
Hillstone SG-6000 Series Firewall Appliance Installation Manual 1 Gigabit Ethernet port 12 SFP ports SG-6000-G6100 2 USB 2.0 Host ports 1 Console port 1 Auxiliary port 4 Gigabit Ethernet ports 8 SFP ports SG-6000-G5150 1 USB 2.0 Host port SG-6000-G3150...
Page 22
Hillstone SG-6000 Series Firewall Appliance Installation Manual 8 Gigabit Ethernet ports SG-6000-M3100 1 USB 2.0 Host port 1 Console port 5 Gigabit Ethernet ports SG-6000-M2105 1 USB 2.0 Host port 1 Console port 5 Gigabit Ethernet ports SG-6000-M2100 1 USB 2.0 Host port...
Page 23
Hillstone SG-6000 Series Firewall Appliance Installation Manual SG-6000-G2120 SG-6000-G2110 436.0mm x 365.5mm x 44.0mm SG-6000-M6115 SG-6000-M6110 SG-6000-M3108 SG-6000-M3105 442.0mm x 240.7mm x 44.0mm SG-6000-M3100 SG-6000-M2105 300.0mm x 165.0mm x 44.0mm SG-6000-M2100 221.0mm x 142.4mm x 32.6mm Net weight: 11.1kg SG-6000-X5100 Weight Gross weight: 14.5kg (accessories and...
CPU. Flash Memory is used for storing the operating system firmware, configuration and application files. Ports The ports available for Hillstone firewall appliances are Console port, Auxiliary port, USB port, Gigabit Ethernet port, SFP port and XFP ports. This section explains the attributes of each port.
Baud Rate 9600/19200/38400/57600/115200 bit/s Services Supported Debugging aid Table 1-17: Auxiliary Port Attributes USB Port Hillstone firewall appliance provides two USB Host ports at most. Attributes for the USB port are shown in Table 1-18. Attribute Description Connector USB Type-A interface Port Standard USB 2.0 Host interface...
Full / half-duplex Table 1-22: SFP Electric Module Attributes Cautions: • The SFP electric modules of SG-6000-X5100 and SG-6000-G6100 support 10/100/1000Mbps autosensing, and the SFP electric modules of other platform just support 1000Mbps. • Before performing switchover between the optical and electrical connection on Combo ports, you need to first clear the rate and duplex mode configurations in the current operating mode (electrical or optical), and re-configure the port after the switchover.
SG-6000-M3108 and SG-6000-M3105 have a SD card slot for SD storage card on the front panel. SD card stores the data of the Network Behavior Control logs. Hillstone firewall appliances can support SD card of 32 GB at most so far.
DC power module as the power input. You should choose the power type based on your own needs. The AC power module of SG-6000-X5100 and SG-6000-G6100 is shown in Figure 1-23; the DC power module for the two products is shown in Figure 1-24.
Hillstone SG-6000 Series Firewall Appliance Installation Manual Figure 1-23: AC Power Module for SG-6000-X5100 and SG-6000-G6100 Figure 1-24: DC Power Module for SG-6000-X5100 and SG-6000-G6100 The AC power module of SG-6000-G5150 and SG-6000-G3150 is shown in Figure 1-25; the DC power module for the two products is shown in Figure 1-26.
• Interface module: expands the number of port. • Storage module: enlarges the hardware space used to store logs. • Application processing module: improves AV performance. For detailed information about expansion modules, refer to Hillstone SG-6000 Firewall Appliance Expansion Module Manuel. - 25 -...
To prevent personnel injury and equipment damage, please carefully read all the safety warnings and cautions in this chapter before the installation. Hillstone products are designed for indoor use. To ensure the normal operation and to prolong the service lifetime, the installation site must meet the following requirements: Cleanness Requirements Table 2-1 lists the dust concentration requirements in the equipment room.
Hillstone SG-6000 Series Firewall Appliance Installation Manual • Separate the protection ground of the firewall appliance from the grounding device or lighting protection grounding device of the power supply equipment as far as possible. • Keep the firewall appliance far away from radio stations, radar, and other high-frequency and high-current devices.
Installation Devices, Tools, and Cables A Hillstone firewall appliance is shipped with a power cable and a console cable, and you should have the following items before the installation: • Terminal: Configuration terminal (an ordinary PC is sufficient).
• On a standard 19-inch rack Installing the Appliance on a Workbench You can simply place the Hillstone product on a stable and clean workbench. For skid prevention, perform the following steps to fit anti-skid feet on the appliance before installing: Step 1: Tear off the sticker from the feet plaster.
Installing the Appliance on a Rack Before mounting the appliance on a rack, ensure that the power is off, and the rack is stable enough and well grounded. Hillstone firewall appliances are designed for a 19-inch standard rack. To rack-mount the chassis: Note: SG-6000-M2100 requires a plate under it to fit in a rack.
Connecting the Console Cable Hillstone firewall appliance provides a RS-232C asynchronous serial console (CON) port, through which you can configure the appliance. The console cable is an 8-core shielded cable, which has a RJ-45 connector that can be connected to the Console port of the appliance and a DB-9 (female) connector that can be connected to the serial port of a console terminal.
SFP electric module connected by a single-mode or multi-mode cable. The XFP port uses single-mode or multi-mode cables to access Ethernet. All SFP and XFP optical modules of Hillstone products use LC-type optical connector; therefore, you should connect the optical modules using optical fiber ended with LC-type connector.
To power the appliance with DC power source, use DC power cables to connect the appliance and the external DC power source. Hillstone does not provide DC power cables. Warning: Before performing the procedure, ensure that the cable is not connected with any power source and make sure the cables will not be powered on during the process.
Hillstone SG-6000 Series Firewall Appliance Installation Manual 5. Use DC cables to connect the “+” terminal of the appliance to the “+” terminal of the power source, and “-” terminal to the “-” terminal of the source. 6. Verify the connection is correct and fasten the cables using a screwdriver.
Hillstone SG-6000 Series Firewall Appliance Installation Manual Chapter 4 Boot and Configuration Introduction This chapter describes the initial system boot and basic configuration of Hillstone SG-6000 Series, using a PC as the console terminal. Establishing a Configuration Environment Hillstone firewall appliances support both local configuration and remote configuration.
If the booting succeeds, the system will display the command line prompt “login”. Enter the default administrator name and password “hillstone” at the “login” and “password” prompts, press “Enter”. And now you are successfully logged in and accessing the CLI.
2. Launch a Web browser of the management PC, enter the URL “http://192.168.1.1” in the address bar, and then press Enter. 3. Enter the default administrator name and password “hillstone” in both the <Login> and <Password> text boxes. 4. Click the “Login” button to enter WebUI main page. Then you can set other configurations to the appliance.
SG-6000-X5100, SG-6000-G6100, SG-6000-G5150 and SG-6000-G3150. Installing and Removing the X5100/G6100 Power Supply Module To install a power supply module to SG-6000-X5100 or SG-6000-G6100: 1. Ensure that the power supply module to be used is not connected to any power source.
Hillstone SG-6000 Series Firewall Appliance Installation Manual 2. Face the back panel of the appliance. 3. Loosen the screws on the flatplate. 4. Pull the power supply straight out of the chassis by holding the provided handle. Installing and Removing the G5150/G3150 Power Supply Module To install a power supply module to SG-6000-G5150 or SG-6000-G3150: 1.
Hillstone SG-6000 Series Firewall Appliance Installation Manual SG-6000-M6110 can accommodate expansion modules. This section describes how to install and remove the expansion module. To install an expansion module: 1. Make sure the power is switched off and you should wear the ESD strap properly.
Page 48
Hillstone SG-6000 Series Firewall Appliance Installation Manual 2. Pull the fan tray out of the chassis by holding the provided handle. Note: To avoid over heating, insert a replacement fan tray immediately after removing the existing one. - 41 -...
Hillstone SG-6000 Series Firewall Appliance Installation Manual Chapter 6 Troubleshooting Introduction This chapter provides solutions to some common problems of Hillstone firewall appliances. Losing the Administrator Password If you lose the administrator password, please contact your local sales representative. Troubleshooting Power System Check the PWR LED on the front panel of the appliance.
Page 50
FCC STATEMENT 1. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference. (2) This device must accept any interference received, including interference that may cause undesired operation.
Need help?
Do you have a question about the SG-6000-X5100 and is the answer not in the manual?
Questions and answers