Hillstone SG-6000-X5100 Installation Manual

Sg-6000 series firewall appliance
Table of Contents

Advertisement

Hillstone SG-6000 Series Firewall Appliance
Installation Manual
Hillstone Networks Inc.
SG-6000-IM0511-4.0R4E-03

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SG-6000-X5100 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Hillstone SG-6000-X5100

  • Page 1 Hillstone SG-6000 Series Firewall Appliance Installation Manual Hillstone Networks Inc. SG-6000-IM0511-4.0R4E-03...
  • Page 2 Hillstone SG-6000 Series Firewall Appliance Installation Manual Name and Concentration of Toxic or Hazardous Substances and Elements in Products Toxic or hazardous substances and elements Component Lead Mercury Cadmium Cr6+ PDBE Metal parts (including fasteners) Printed circuit board assemblies and components...
  • Page 3 About This Manual Thanks for choosing the network security products from Hillstone Networks, Inc. This document is an installation manual for Hillstone SG-6000 Series firewall appliance to help you install the Hillstone SG-6000 Series firewall appliance properly. This manual includes the following chapters: •...
  • Page 4: Table Of Contents

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Table of Contents Chapter 1 Introduction .................. 1 Overview ......................1 Features ......................1 ® Innovative Multi-core Plus G2 Security Architecture ..........1 Modularized Design ..................2 Hardware Overview .................... 2 Front Panel....................2 Back Panel ....................
  • Page 5 Hillstone SG-6000 Series Firewall Appliance Installation Manual WebUI ......................36 Tenet and SSH ..................... 37 Basic Configuration ..................37 Chapter 5 Hardware Maintenance and Replacement ........38 Introduction ....................38 Installing and Removing the Power Supply Module ..........38 Installing and Removing the X5100/G6100 Power Supply Module ......38 Installing and Removing the G5150/G3150 Power Supply Module ......
  • Page 6 Figure 1-21: SG-6000-M2105 Back Panel ..............11 Figure 1-22: SG-6000-M2100 Back Panel ..............11 Figure 1-23: AC Power Module for SG-6000-X5100 and SG-6000-G6100 ..... 24 Figure 1-24: DC Power Module for SG-6000-X5100 and SG-6000-G6100 ..... 24 Figure 1-25: AC Power Module for SG-6000-G5150 and SG-6000-G3150 ..... 24 Figure 1-26: DC Power Module for SG-6000-G5150 and SG-6000-G3150 .....
  • Page 7 Table 1-12: SG-6000-M2105 Front Panel Description ..........8 Table 1-13: SG-6000-M2100 Front Panel Description ..........8 Table 1-14: Hillstone Firewall Appliance Front Panel LED Descriptions......13 Table 1-15: Hillstone Firewall Appliance System Parameters ........17 Table 1-16: Console Port Attributes ................ 18 Table 1-17: Auxiliary Port Attributes ...............
  • Page 8: Chapter 1 Introduction

    SG-6000-M2105 and SG-6000-M2100. SG-6000-G5150, SG-6000-G3150, SG-6000-G2120, SG-6000-G2110, SG-6000-M6115 and SG-6000-M6110 adopt modular design of pluggable circuit boards. For more information about extensible modules, please refer to Hillstone SG-6000 Series Firewall Appliance Expansion Module Manual. Features This section describes the main features of the SG-6000 Series firewall appliances.
  • Page 9: Modularized Design

    Front Panel The front panel of SG-6000-X5100 consists of 1 Gigabit Ethernet port, 12 SFP ports, 2 XFP ports, 2 USB ports, 1 Console port, 1 Auxiliary port, 1 CLR button, some status LEDs and a fan tray.
  • Page 10: Figure 1-2: Sg-6000-G6100 Front Panel

    Hillstone SG-6000 Series Firewall Appliance Installation Manual No. Label & Description No. Label & Description No. Label & Description 1 PWR: Power LED 6 PS1: Power PS1 LED 11 USB0-USB1: USB Ports 2 STA: Status LED 7 FAN: Fan tray LED...
  • Page 11: Figure 1-3: Sg-6000-G5150/Sg-6000-G3150 Front Panel

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Figure 1-3: SG-6000-G5150/SG-6000-G3150 Front Panel No. Label & Description No. Label & Description No. Label & Description 1 PWR: Power LED 7 FAN: Fan tray LED 13 e0/0-e0/3: Ethernet ports 2 STA: Status LED...
  • Page 12: Figure 1-5: Sg-6000-G2120 Front Panel

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Figure 1-5: SG-6000-G2120 Front Panel No. Label & Description No. Label & Description No. Label & Description 1 PWR: Power LED 6 PS1: Power PS1 LED 11 e0/0-e0/3: Ethernet ports 2 STA: Status LED...
  • Page 13: Figure 1-7: Sg-6000-M6115 (Single Power Supply) Front Panel

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Figure 1-7: SG-6000-M6115 (single power supply) Front Panel No. Label & Description No. Label & Description No. Label & Description 1 PWR: Power LED 5 CLR: CLR button 9 e0/0-e0/3: Ethernet ports 2 STA: Status LED...
  • Page 14: Figure 1-9: Sg-6000-M3108 (Single Power Supply) Front Panel

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Figure 1-9: SG-6000-M3108 (single power supply) Front Panel No. Label & Description No. Label & Description No. Label & Description 1 PWR: Power LED 5 CLR: CLR button 9 SD: SD card LED...
  • Page 15: Back Panel

    Table 1-13: SG-6000-M2100 Front Panel Description Back Panel SG-6000-X5100 and SG-6000-G6100 adopt dual power supply and they have the same back panel layout, which consists of 2 sets of power supply socket and switch, 1 grounding screw and several vents. Figure 1-14 illustrates the back panel layout of SG-6000-X5100 and...
  • Page 16: Figure 1-14: Sg-6000-X5100/Sg-6000-G6100 Back Panel

    Hillstone SG-6000 Series Firewall Appliance Installation Manual SG-6000-G6100. Figure 1-14: SG-6000-X5100/SG-6000-G6100 Back Panel SG-6000-G5150 and SG-6000-G3150 have the same back panel layout, which consists of 2 power supply slots and 1 grounding screw. The standard product of SG-6000-G5150 is dual power supply and that of SG-6000-G3150 is single power supply.
  • Page 17: Figure 1-17: Sg-6000-G2120/Sg-6000-G2110 (Dual Power Supply) Back Panel

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Figure 1-17: SG-6000-G2120/SG-6000-G2110 (dual power supply) Back Panel SG-6000-M6115 and SG-6000-M6110 have the same back panel layout. The standard products are single power supply and they are also available in dual power supply. The back panel of single power supply product has 1 power supply socket, 1 power supply switch and 1 grounding screw.
  • Page 18: Led Indicators

    SG-6000-M2100 has 1 power supply socket, 1 grounding screw and 1 security lock. Figure 1-22 illustrates the back panel of SG-6000-M2100. Figure 1-22: SG-6000-M2100 Back Panel LED Indicators Table 1-14 describes the meanings of LED indicators on the front panels of Hillstone firewall appliances. - 11 -...
  • Page 19 Hillstone SG-6000 Series Firewall Appliance Installation Manual Color/Status Description Green/On steadily The system power is running normally. Orange/On steadily The system power is running abnormally. The system power is not running normally, and Red/On steadily the system is in the off mode.
  • Page 20: System Parameters

    Contact your sales representative if this occurs. • As LED indicators vary due to different product model, please refer to the real product. System Parameters Table 1-15 lists the system parameters of Hillstone firewall appliances of all models. Item Description...
  • Page 21 Hillstone SG-6000 Series Firewall Appliance Installation Manual 1 Gigabit Ethernet port 12 SFP ports SG-6000-G6100 2 USB 2.0 Host ports 1 Console port 1 Auxiliary port 4 Gigabit Ethernet ports 8 SFP ports SG-6000-G5150 1 USB 2.0 Host port SG-6000-G3150...
  • Page 22 Hillstone SG-6000 Series Firewall Appliance Installation Manual 8 Gigabit Ethernet ports SG-6000-M3100 1 USB 2.0 Host port 1 Console port 5 Gigabit Ethernet ports SG-6000-M2105 1 USB 2.0 Host port 1 Console port 5 Gigabit Ethernet ports SG-6000-M2100 1 USB 2.0 Host port...
  • Page 23 Hillstone SG-6000 Series Firewall Appliance Installation Manual SG-6000-G2120 SG-6000-G2110 436.0mm x 365.5mm x 44.0mm SG-6000-M6115 SG-6000-M6110 SG-6000-M3108 SG-6000-M3105 442.0mm x 240.7mm x 44.0mm SG-6000-M3100 SG-6000-M2105 300.0mm x 165.0mm x 44.0mm SG-6000-M2100 221.0mm x 142.4mm x 32.6mm Net weight: 11.1kg SG-6000-X5100 Weight Gross weight: 14.5kg (accessories and...
  • Page 24: Ports

    CPU. Flash Memory is used for storing the operating system firmware, configuration and application files. Ports The ports available for Hillstone firewall appliances are Console port, Auxiliary port, USB port, Gigabit Ethernet port, SFP port and XFP ports. This section explains the attributes of each port.
  • Page 25: Table 1-16: Console Port Attributes

    Baud Rate 9600/19200/38400/57600/115200 bit/s Services Supported Debugging aid Table 1-17: Auxiliary Port Attributes USB Port Hillstone firewall appliance provides two USB Host ports at most. Attributes for the USB port are shown in Table 1-18. Attribute Description Connector USB Type-A interface Port Standard USB 2.0 Host interface...
  • Page 26: Table 1-19: Gigabit Electrical Ethernet Port Attributes

    Frame Format Ethernet_SNAP 10/100/1000Mbps autosensing Negotiation Mode Full / half-duplex Table 1-19: Gigabit Electrical Ethernet Port Attributes SFP Port Hillstone firewall appliance supports SFP ports. The Table 1-20 describes the attributes of SFP port. Attribute Description Connector Ethernet_II Frame Format...
  • Page 27: Table 1-21: Sfp Optical Module Attributes

    Full / half-duplex Table 1-22: SFP Electric Module Attributes Cautions: • The SFP electric modules of SG-6000-X5100 and SG-6000-G6100 support 10/100/1000Mbps autosensing, and the SFP electric modules of other platform just support 1000Mbps. • Before performing switchover between the optical and electrical connection on Combo ports, you need to first clear the rate and duplex mode configurations in the current operating mode (electrical or optical), and re-configure the port after the switchover.
  • Page 28: Clr Button

    Description Connector Ethernet_II Frame Format Ethernet_SNAP Negotiation Mode XFP optical module 10Gbps Table 1-23: XFP Port Attributes Hillstone firewall appliance supports five types of 10GBase-FX XFP optical module. All optical modules are hot-swappable. Description Ultra-long Short-haul Short-haul Medium-haul Long-haul Haul...
  • Page 29: Expansion Slot

    SG-6000-M3108 and SG-6000-M3105 have a SD card slot for SD storage card on the front panel. SD card stores the data of the Network Behavior Control logs. Hillstone firewall appliances can support SD card of 32 GB at most so far.
  • Page 30: Power Supply

    DC power module as the power input. You should choose the power type based on your own needs. The AC power module of SG-6000-X5100 and SG-6000-G6100 is shown in Figure 1-23; the DC power module for the two products is shown in Figure 1-24.
  • Page 31: Figure 1-23: Ac Power Module For Sg-6000-X5100 And Sg-6000-G6100

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Figure 1-23: AC Power Module for SG-6000-X5100 and SG-6000-G6100 Figure 1-24: DC Power Module for SG-6000-X5100 and SG-6000-G6100 The AC power module of SG-6000-G5150 and SG-6000-G3150 is shown in Figure 1-25; the DC power module for the two products is shown in Figure 1-26.
  • Page 32: Expansion Module

    • Interface module: expands the number of port. • Storage module: enlarges the hardware space used to store logs. • Application processing module: improves AV performance. For detailed information about expansion modules, refer to Hillstone SG-6000 Firewall Appliance Expansion Module Manuel. - 25 -...
  • Page 33: Chapter 2 Pre-Installation Preparations

    To prevent personnel injury and equipment damage, please carefully read all the safety warnings and cautions in this chapter before the installation. Hillstone products are designed for indoor use. To ensure the normal operation and to prolong the service lifetime, the installation site must meet the following requirements: Cleanness Requirements Table 2-1 lists the dust concentration requirements in the equipment room.
  • Page 34: Grounding Requirements

    Hillstone SG-6000 Series Firewall Appliance Installation Manual • Separate the protection ground of the firewall appliance from the grounding device or lighting protection grounding device of the power supply equipment as far as possible. • Keep the firewall appliance far away from radio stations, radar, and other high-frequency and high-current devices.
  • Page 35: Unpacking

    Installation Devices, Tools, and Cables A Hillstone firewall appliance is shipped with a power cable and a console cable, and you should have the following items before the installation: • Terminal: Configuration terminal (an ordinary PC is sufficient).
  • Page 36: Chapter 3 Installation

    • On a standard 19-inch rack Installing the Appliance on a Workbench You can simply place the Hillstone product on a stable and clean workbench. For skid prevention, perform the following steps to fit anti-skid feet on the appliance before installing: Step 1: Tear off the sticker from the feet plaster.
  • Page 37: Installing The Appliance On A Rack

    Installing the Appliance on a Rack Before mounting the appliance on a rack, ensure that the power is off, and the rack is stable enough and well grounded. Hillstone firewall appliances are designed for a 19-inch standard rack. To rack-mount the chassis: Note: SG-6000-M2100 requires a plate under it to fit in a rack.
  • Page 38: Connecting Cables

    Connecting the Console Cable Hillstone firewall appliance provides a RS-232C asynchronous serial console (CON) port, through which you can configure the appliance. The console cable is an 8-core shielded cable, which has a RJ-45 connector that can be connected to the Console port of the appliance and a DB-9 (female) connector that can be connected to the serial port of a console terminal.
  • Page 39: Connecting The Ethernet Cable

    SFP electric module connected by a single-mode or multi-mode cable. The XFP port uses single-mode or multi-mode cables to access Ethernet. All SFP and XFP optical modules of Hillstone products use LC-type optical connector; therefore, you should connect the optical modules using optical fiber ended with LC-type connector.
  • Page 40: Connecting Ac Power Cable

    To power the appliance with DC power source, use DC power cables to connect the appliance and the external DC power source. Hillstone does not provide DC power cables. Warning: Before performing the procedure, ensure that the cable is not connected with any power source and make sure the cables will not be powered on during the process.
  • Page 41: Verifying Installation

    Hillstone SG-6000 Series Firewall Appliance Installation Manual 5. Use DC cables to connect the “+” terminal of the appliance to the “+” terminal of the power source, and “-” terminal to the “-” terminal of the source. 6. Verify the connection is correct and fasten the cables using a screwdriver.
  • Page 42: Chapter 4 Boot And Configuration

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Chapter 4 Boot and Configuration Introduction This chapter describes the initial system boot and basic configuration of Hillstone SG-6000 Series, using a PC as the console terminal. Establishing a Configuration Environment Hillstone firewall appliances support both local configuration and remote configuration.
  • Page 43: Webui

    If the booting succeeds, the system will display the command line prompt “login”. Enter the default administrator name and password “hillstone” at the “login” and “password” prompts, press “Enter”. And now you are successfully logged in and accessing the CLI.
  • Page 44: Tenet And Ssh

    2. Launch a Web browser of the management PC, enter the URL “http://192.168.1.1” in the address bar, and then press Enter. 3. Enter the default administrator name and password “hillstone” in both the <Login> and <Password> text boxes. 4. Click the “Login” button to enter WebUI main page. Then you can set other configurations to the appliance.
  • Page 45: Chapter 5 Hardware Maintenance And Replacement

    SG-6000-X5100, SG-6000-G6100, SG-6000-G5150 and SG-6000-G3150. Installing and Removing the X5100/G6100 Power Supply Module To install a power supply module to SG-6000-X5100 or SG-6000-G6100: 1. Ensure that the power supply module to be used is not connected to any power source.
  • Page 46: Installing And Removing The G5150/G3150 Power Supply Module

    Hillstone SG-6000 Series Firewall Appliance Installation Manual 2. Face the back panel of the appliance. 3. Loosen the screws on the flatplate. 4. Pull the power supply straight out of the chassis by holding the provided handle. Installing and Removing the G5150/G3150 Power Supply Module To install a power supply module to SG-6000-G5150 or SG-6000-G3150: 1.
  • Page 47: Installing And Removing The Fan Tray

    Hillstone SG-6000 Series Firewall Appliance Installation Manual SG-6000-M6110 can accommodate expansion modules. This section describes how to install and remove the expansion module. To install an expansion module: 1. Make sure the power is switched off and you should wear the ESD strap properly.
  • Page 48 Hillstone SG-6000 Series Firewall Appliance Installation Manual 2. Pull the fan tray out of the chassis by holding the provided handle. Note: To avoid over heating, insert a replacement fan tray immediately after removing the existing one. - 41 -...
  • Page 49: Chapter 6 Troubleshooting

    Hillstone SG-6000 Series Firewall Appliance Installation Manual Chapter 6 Troubleshooting Introduction This chapter provides solutions to some common problems of Hillstone firewall appliances. Losing the Administrator Password If you lose the administrator password, please contact your local sales representative. Troubleshooting Power System Check the PWR LED on the front panel of the appliance.
  • Page 50 FCC STATEMENT 1. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference. (2) This device must accept any interference received, including interference that may cause undesired operation.

Table of Contents