Page 2
The information in this document is subject to change without notice. All contents in this document, including statements, information, and recommendations, are believed to be accurate, but they are presented without warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions contained herein.
Page 3
Preface The installation guide describes preparing for installation, installing the firewall, logging in to the firewall, hardware replacement, hardware management and maintenance, and troubleshooting. This preface includes the following topics about the documentation: • Audience. • Conventions. • Documentation feedback. Audience This documentation is intended for: •...
Page 4
Symbols Convention Description An alert that calls attention to important information that if not understood or followed WARNING! can result in personal injury. An alert that calls attention to important information that if not understood or followed CAUTION: can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information.
Page 5
Documentation feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.
Contents 1 Preparing for installation ············································································· 1 Safety recommendations ··································································································································· 1 Safety symbols ··········································································································································· 1 General safety recommendations ·············································································································· 1 Electrical safety ·········································································································································· 2 Laser safety ················································································································································ 2 Handling safety ·········································································································································· 2 Examining the installation site ···························································································································· 3 Weight support ··········································································································································· 3 Temperature and humidity ·························································································································...
Page 7
Displaying electrical label information for the firewall ··················································································· 5-32 Displaying the CPU usage of the firewall ······································································································ 5-32 Displaying the memory usage of the firewall································································································· 5-33 Displaying the operational status of power supplies ····················································································· 5-34 Displaying the temperature information of the firewall ·················································································· 5-34 Displaying the operational statistics of the firewall ························································································...
Preparing for installation This document is applicable to the following firewalls: • F100-C-G3 • F100-S-G3 • F100-M-G3 • F100-A-G3 • F100-E-G3 • F1000-C-G3 • F1000-S-G3 • F1000-A-G3 • F1000-E-G3 Safety recommendations To avoid any equipment damage or bodily injury, read the following safety recommendations before installation.
Figure1-1 Packing symbols Symbol Description The devices shall not be vertically stacked beyond the specified number. Place the device with the arrows up. The device is fragile. Handle it with care. Keep the device from humidity, rains, and wet floor. Electrical safety •...
• Before you move the firewall, remove all cables and mounting brackets. • For long-distance transportation, remove all removable components, such as power supplies and interface modules, and package them separately, and install the filler panels supplied with the firewall. For short-distance transportation, make sure all removable components are securely seated in the slots and the screws are fastened.
Table1-2 Dust concentration limit in the equipment room Substance Concentration limit (particles/m ≤ 3 × 10 Dust particles (No visible dust on desk in three days) NOTE: Dust particle diameter ≥ 5 µm The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion and premature aging of components, as shown in Table1-3.
• Take dust-proof measures for the equipment room. For more information, see "Cleanliness." • Maintain the humidity and temperature at an acceptable level. For more information, see "Temperature and humidity." • Put the removed interface modules away on an ESD workbench, with the PCB upward, or put them in ESD bags for future use.
• Use electromagnetic shielding, for example, shielded interface cables, when necessary. • To prevent signal ports from getting damaged by overvoltage or overcurrent caused by lightning strikes, route interface cables only indoors. If part of the network cable of an Ethernet port must be routed outdoors, connect a lightning arrester to the cable before you plug the cable into the port.
Installation accessories Table1-5 Installation accessories M6 rack screw and Mounting brackets cage nut (shipped (including M4 shoulder with the Mounting bracket screw) for F100-A-G3, F100-C-G3, for the F100-C-G3, F100-E-G3, M4 mounting F100-S-G3, and Rubber feet bracket screw F100-S-G3, and F1000-C-G3, F100-M-G3 F100-M-G3 F1000-S-G3,...
Page 15
Item Requirements Result installing FRUs. • Put the removed interface modules away on an ESD workbench, with the PCB upward, or put them in ESD bags for future use. • Touch only the edges, instead of electronic components when observing or moving a removed interface module.
Keep the tamper-proof seal on a mounting screw on the chassis cover intact, and if you want to open the chassis, contact H3C for permission. Otherwise, H3C shall not be liable for any consequence. The firewall can be installed on a workbench or in a 19-inch rack.
The figures in this section are for illustration only. Your firewall might be slightly different from that in the figure. Mounting the firewall on a workbench IMPORTANT: • Ensure good ventilation and a minimum clearance of 100 mm (3.94 in) around the chassis for heat dissipation.
Installing the firewall in a standard 19-inch rack WARNING! To avoid bodily injury and device damage, use a minimum of two persons to rack-mount the firewall. CAUTION: • For adequate heat dissipation, ensure a minimum clearance of 80 mm (3.15 in) around the air inlet and outlet vents of the chassis and a distance of 1U (44.45 mm, or 1.75 in) between the chassis and other devices in the rack.
Page 19
Attach the rear mounting brackets to the rear rack posts. The rear mounting brackets can be attached to the rear rack posts with the wide flange inside or outside the rack. For a rack with a depth (distance between the front and rear rack posts) in the range of 429 ...
Figure2-7 Mounting the firewall in the rack (with the wide flange of the rear mounting brackets inside the rack) Figure2-8 Mounting the firewall in the rack (with the wide flange of the rear mounting brackets outside the rack) Grounding the firewall WARNING! •...
Grounding the firewall with a grounding strip If a grounding strip is available at the installation site, connect the grounding cable through the grounding strip. To connect the grounding cable: Remove the grounding screw from the firewall chassis. Attach the grounding screw to the ring terminal of the grounding cable. Use a Phillips screwdriver to fasten the grounding screw into the grounding hole on the firewall.
Figure2-10 Grounding the firewall with the grounding terminal on the rack Installing power supplies CAUTION: • Make sure power is disconnected and the grounding cable is correctly connected before installation. • Do not install both AC and DC power supplies on the same firewall. Only the F1000-C-G3, F1000-S-G3, F1000-A-G3, and F1000-E-G3 firewalls support removable power supplies.
Orient the power supply with its handle at the left. Holding the handle of the module with one hand and supporting the module bottom with the other, slide the power supply slowly into the slot along the guide rails. Use a Phillips screwdriver to fasten the captive screws on the power supply to secure the power supply in place.
The device does not come with any drives and cannot recognize drives from other vendors. Purchase drives from H3C as needed. To install a drive: Wear an ESD wrist strap and make sure it makes good skin contact and is reliably grounded.
The firewall supports GE SFP transceiver modules and 10GE SFP+ transceiver modules. For the transceiver module specifications, see "GE fiber Ethernet port" and "10 GE fiber Ethernet port." No transceiver module is provided with the firewall. As a best practice, use H3C transceiver modules.
Figure2-17 10GE SFP+ transceiver module To connect the firewall to the network through an optical fiber: Remove the dust plug from the fiber port. Remove the dust cap from the transceiver module and insert it into the fiber port. Remove the dust cap of the optical fiber connector, and use dust free paper and absolute alcohol clean the end face of the fiber connector.
Connecting an AC power cord Connecting an AC power cord for an F100-C-G3, F100-S-G3, F100-M-G3, F100-A-G3, or F100-E-G3 firewall Connect the connector of the AC power cord to the target AC power receptacle on the rear panel of the chassis. Then use a power cord retainer clip (see Figure2-19) or a cable tie (see Figure2-20) to secure the power cord.
Figure2-21 Connecting an AC power cord (using a power cord retainer clip to secure the power cord) Figure2-22 Connecting an AC power cord (using a cable tie to secure the power cord) Connecting a DC power cord Connecting a DC power cord for an F1000-C-G3, F1000-S-G3, F1000-A-G3, or F1000-E-G3 firewall Correctly orient the DC power cord connector and insert it into the DC power receptacle on the power supply.
Connecting a high-voltage DC power cord Only F1000-C-G3, F1000-S-G3, F1000-A-G3, and F1000-E-G3 firewalls support high-voltage DC power cords. The connection procedure is similar for high-voltage DC power cords and AC power cords. For information about connecting a high-voltage DC power cord, see "Connecting an AC power cord for an F1000-C-G3, F1000-S-G3, F1000-A-G3, or F1000-E-G3 firewall."...
Accessing the firewall By default, the firewall uses the scheme access authentication mode. The username and password are both admin. Setting up the configuration environment and configuring terminal parameters CAUTION: • When you connect the console cable, identify the port marks and make sure you are connecting the correct ports.
System is starting... Press Ctrl+D to access BASIC-BOOTWARE MENU... Press Ctrl+T to start heavy memory test Booting Normal Extended BootWare The Extended BootWare is self-decompressing..Done. **************************************************************************** H3C BootWare, Version 2.00 **************************************************************************** Compiled Date : Sep 10 2019 CPU Type : xxx...
Known-answer test for SHA224 passed. Known-answer test for SHA256 passed. Known-answer test for SHA384 passed. Known-answer test for SHA512 passed. Known-answer test for HMAC-SHA1 passed. Known-answer test for HMAC-SHA224 passed. Known-answer test for HMAC-SHA256 passed. Known-answer test for HMAC-SHA384 passed. Known-answer test for HMAC-SHA512 passed.
• Logging in from the serial console port or micro USB console port • Logging in through Telnet Logging in from the Web interface IMPORTANT: After accessing the Web interface with the default account, modify the password of the default account or create a new administrator account and delete the default account as a best practice.
Page 34
Specify an IP address for the network port of the PC. Make sure the device and PC are reachable to each other. Run the Telnet client on the PC and enter the default login information. 3-27...
Hardware replacement CAUTION: Wear an ESD wrist strap or ESD gloves for hardware maintenance. They are not provided with the firewall. Prepare them yourself. Replacing a power supply CAUTION: Before you replace a power supply, turn off the circuit breaker and remove the power cord. This section applies only to the F1000-C-G3, F1000-S-G3, F1000-A-G3, and F1000-E-G3 firewalls that support removable power supplies.
Replacing an interface module CAUTION: • Interface modules are not hot swappable. Power off the firewall before you replace an interface module. • To install two or more interface modules, use the upper interface module slots as a best practice. If you have installed an interface module in a lower slot, you must press down the ejector levers of the interface module while inserting it into an upper slot.
Install a new drive. For the installation procedure, see "Installing a ." Figure4-3 Removing a drive Replacing a transceiver module WARNING! Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the firewall is operating. When you replace a transceiver module, make sure the two transceiver modules connected by the same optical fiber are the same type.
DEVICE_SERIAL_NUMBER : 210235A1NDH12A000022 MAC_ADDRESS : 20ef-f236-9f00 MANUFACTURING_DATE : 2019-06-06 VENDOR_NAME : H3C Fan 0: The operation is not supported on the specified fan. Fan 1: The operation is not supported on the specified fan. Fan 2: The operation is not supported on the specified fan.
Table5-2 Output description Field Description Slot 1 CPU 0 CPU usage CPU 0 usage information for the interface module in slot 1. Average CPU usage in the last 5 seconds. (After the firewall boots, the firewall 3% in last 5 seconds calculates and records the average CPU usage at the interval of 5 seconds.) Average CPU usage in the last minute.
Displaying the operational status of power supplies Use the command to display the operational status of power supplies. display power <Sysname> display power Power 0 Status: Normal Power 1 Status: Absent Table5-4 Output description Field Description Power Number of the power supply. Power supply state: •...
Field Description powers off when the temperature exceeds this threshold. Displaying the operational statistics of the firewall When you perform routine maintenance or the system fails, you might need to view the operational information of each functional module for locating failures. Typically you need to run display commands one by one.
• Power on the firewall after powering it off, which is also called hard reboot or cold start. H3C does not recommend that you use this method because it might cause data loss and hardware damages.
Troubleshooting Power supply failure Symptom The firewall cannot be powered on, and the power LED (PWR0/PWR1) on the front panel is off. Solution To solve the issue: Power off the firewall. Verify that the power supply is as required by the firewall. Verify that the power cords of the firewall are firmly connected.
If the following alarm information is generated, the temperature of the firewall has reached the warning-level high temperature alarm threshold, %Nov 28 20:02:59:085 2019 H3C DEV/4/TEMPERATURE_WARNING: -Context=1; Temperature is greater than the high-temperature warning threshold on slot 1 sensor outflow 1. Current temperature is 58 degrees centigrade.
Appendix A Chassis views and technical specifications Chassis views F100-C-G3/F100-M-G3/F100-S-G3 The F100-C-G3, F100-M-G3, or F100-S-G3 firewall provides the following ports and slots on the front panel: • Eight 10/100/1000BASE-T autosensing copper ports. • Two combo interfaces (including one management Ethernet port). •...
(5) Console port (6) USB ports (7) Management Ethernet port (0/MGMT) Figure1-6 Rear panel (1) Power receptacle (2) Interface module slot 1 (3) Interface module slot 2 (4) Grounding screw F1000-C-G3 The F1000-C-G3 firewall provides the following ports and slots on the front panel: •...
Figure1-13 Front panel of the NSQM1GT4PFC interface module (1) 10/100/1000BASE-T copper ports (2) Captive screw (3) Ejector lever NSQM1GP4FBA The NSQM1GP4FBA interface module provides four 1000BASE-X fiber ports. Figure1-14 Front panel of the NSQM1GP4FBA interface module (1) 1000BASE-X fiber ports (2) Captive screw (3) Ejector lever NS-NIM-TG4A3...
The network data encryption modules are not hot swappable. The appearance of network data encryption modules varies by models. For more information, see H3C SecPath Firewall Network Data Encryption Module Guide. Table1-2 describes the hardware and software compatibility with the network data encryption modules.
The F1000-C-G3, F1000-S-G3, F1000-A-G3, and F1000-E-G3 firewalls support hot swapping of power supplies and 1+1 power supply redundancy. To install two power supplies for the firewall, make sure they are the same model. For the power supply specifications, see "Power supply specifications."...
Figure1-18 PSR450-12D power supply (1) Latch (2) Status LED (3) Handle (4) Power receptacle High-voltage DC power supply CAUTION: You can install high-voltage DC power supplies only on F1000-C-G3, F1000-S-G3, F1000-A-G3, and F1000-E-G3 firewalls. PSR450-12AHD The PSR450-12AHD power supply provides a maximum output power of 450 W. Figure1-19 PSR450-12AHD power supply (1) Latch (2) Status LED...
Dimensions and weights The weight of the firewall includes the chassis and its removable components. Chassis Table1-4 Chassis dimensions and weights Dimensions (H × W × D), excluding Firewall model Weight rubber feet and mounting brackets F100-C-G3, F100-S-G3, 44 × 440 × 230 mm (1.73 × 17.32 × 9.06 in) 3 kg (6.61 lb) F100-M-G3 F100-A-G3...
Storage media Table1-7 Storage media specifications Firewall model Memory F100-C-G3, F100-S-G3, F100-M-G3 2GB DDR3 F100-A-G3, F100-E-G3 4GB DDR3 F1000-C-G3, F1000-S-G3 8GB DDR4 F1000-A-G3, F1000-E-G3 16GB DDR4 Power consumption The system power consumption includes the power consumptions of the chassis and the removable components.
NSQM1F1KGMC 5.7 W Power supply specifications Table1-11 AC power supply specifications Maximum input Maximum Model Rated input voltage range current power PSR250-12A1 100 VAC to 240 VAC @ 50 Hz or 60 Hz 250 W Table1-12 DC power supply specifications Maximum input Maximum Model...
Micro USB console port Table1-15 Micro USB console port specifications Item Specification Connector Micro USB Standard compliant Micro USB Baud rate 9600 bps (default) to 115200 bps Cable type USB console cable ≤ 10 m (32.81 ft) Transmission distance • Connection to an ASCII terminal •...
Page 63
Contents 1 Appendix B LEDs ························································································ 1...
Page 64
Appendix B LEDs The F100-C-G3, F100-S-G3, F100-M-G3, F100-A-G3, F100-E-G3, F1000-C-G3, F1000-S-G3, F1000-A-G3, and F1000-E-G3 firewalls use similar LEDs. This section uses the LEDs on the F1000-E-G3 firewall as an example. Figure1-1 LEDs Table1-2 LED descriptions Mark Status Description No link is present on the port. Ethernet 10/100/1000 copper port...
Page 65
Contents 1 Appendix C Cables ·················································································· 1-1 Console cable ················································································································································· 1-1 RJ-45 to DB9 console cable ···················································································································· 1-1 Micro USB console cable ························································································································ 1-1 Ethernet twisted pair cable ······························································································································ 1-2 Introduction ············································································································································· 1-2 Making an Ethernet twisted pair cable ···································································································· 1-5 Optical fiber ·····················································································································································...
Appendix C Cables Console cable RJ-45 to DB9 console cable An RJ-45 to DB9 console cable is used to connect the console port on the firewall to the serial port on a configuration terminal (a PC for example): • Connect the DB9 female connector of the cable to the 8-core serial port on the configuration terminal.
Figure1-2 Micro USB console cable Type A connector Type B connector Table1-2 Micro USB console cable pinouts USB Type A USB Type mini-A/B Signal Signal connector connector VBUS VBUS ID(NC) Ethernet twisted pair cable Introduction An Ethernet twisted pair cable consists of four pairs of insulated copper wires twisted together. Every wire uses a different color, and has a diameter of about 1 mm (0.04 in).
Page 68
Figure1-3 RJ-45 connector pinout PIN #8 PIN #1 NOTE: The RJ-45 Ethernet ports of the firewall use category 5 or higher Ethernet twisted pair cables for connection. EIA/TIA cabling specifications define two standards, 568A and 568B, for cable pinouts. • Standard 568A—pin 1: white/green stripe, pin 2: green solid, pin 3: white/orange stripe, pin 4: blue solid, pin 5: white/blue stripe, pin 6: orange solid, pin 7: white/brown stripe, pin 8: brown solid.
Page 69
Figure1-5 Crossover cable white/orange orange white/green blue white/blue green white/brown brown Crossover cable white/green green white/orange blue white/blue orange white/brown brown Select an Ethernet twisted pair cable according to the RJ-45 Ethernet port type on your device. An RJ-45 Ethernet port can be MDI (for routers and PCs) or MDIX (for switches). Table1-4 Table1-5 show their pinouts.
10BASE-T/100BASE-TX 1000BASE-T Signal Function Signal Function Reserved BIDD- Bi-directional data cable D- Sends data BIDA- Bi-directional data cable A- Reserved BIDC+ Bi-directional data cable C+ Reserved BIDC- Bi-directional data cable C- To ensure normal communication, the pins for sending data on one port must correspond to the pins for receiving data on the peer port.
Page 71
Item Single mode fiber Multi-mode fiber signal loss exists. Uses lasers as the light source often Uses LEDs as the light source often within Light source and within campus backbones for distance LANs or distances of a couple hundred transmission distance of several thousand meters meters within a campus network Table1-7 Allowed maximum tensile force and crush load...
Need help?
Do you have a question about the SecPath F100-X-G3 and is the answer not in the manual?
Questions and answers