Page 3
Preface This document describes the installation procedure for the NSFOCUS NFNX3 Firewall Series It covers preparing for installation, installing the firewall, accessing the firewall, hardware replacement, hardware management and maintenance, and troubleshooting. This preface includes the following topics about the documentation: •...
Page 4
Symbols Convention Description An alert that calls attention to important information that if not understood or followed WARNING! can result in personal injury. An alert that calls attention to important information that if not understood or followed CAUTION: can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information.
Contents 1 Preparing for installation ············································································· 1 Safety recommendations ··································································································································· 1 Safety symbols ··········································································································································· 1 General safety recommendations ·············································································································· 1 Electrical safety ·········································································································································· 2 Laser safety ················································································································································ 2 Handling safety ·········································································································································· 2 Examining the installation site ···························································································································· 3 Weight support ··········································································································································· 3 Temperature and humidity ·························································································································...
Page 6
Replacing a drive ·········································································································································· 4-31 Replacing a drive for an NFNX3-HDB1180 or NFNX3-HDB1480 firewall ············································· 4-31 Replacing a drive for the NFNX3-HDB1080, NFNX3-HDB1780, NFNX3-HDB3080, or NFNX3-HDB3280 firewall ··················································································································································· 4-32 Replacing a transceiver module ···················································································································· 4-32 5 Hardware management and maintenance ············································· 5-34 Displaying detailed information about the firewall ·························································································...
Preparing for installation This document is applicable to the following firewall models: • NFNX3-HDB680 • NFNX3-HDB1080 • NFNX3-HDB1180 • NFNX3-HDB1480 • NFNX3-HDB1780 • NFNX3-HDB3080 • NFNX3-HDB3280 Safety recommendations To avoid any equipment damage or bodily injury, read the following safety recommendations before installation.
Figure1-1 Packing symbols Symbol Description Stored with a maximum stack of n units. Transported and stored with the arrows up. Transported and stored with care. Transported and stored avoiding humidity, rains and wet floor. Electrical safety • Carefully examine your work area for possible hazards such as moist floors, ungrounded power extension cables, and missing safety grounds.
• Before you move the firewall, remove all cables and mounting brackets. • For long-distance transportation, remove all the removable components, such as power supplies and interface modules, and package them separately, and install the filler panels supplied with the firewall. For short-distance transportation, make sure all the removable components are securely seated in the slots and the screws are fastened.
Substance Concentration limit (particles/m NOTE: Dust particle diameter ≥ 5 µm The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion and premature aging of components, as shown in Table1-3. Table1-3 Harmful gas limits in an equipment room Max.
Figure1-3 Airflow through the NFNX3-HDB1780/NFNX3-HDB3080/NFNX3-HDB3280 firewall chassis ESD prevention To prevent electrostatic discharge (ESD), follow these guidelines: • Make sure the firewall, the workbench, and the rack are reliably grounded. • Take dust-proof measures for the equipment room. For more information, see "Cleanliness." •...
• Install a lightning arrester at the input end of the power supply to enhance the lightning protection capability of the power supply. Power supply Verify that the power system at the installation site meets the requirements of the power supplies, including the input method and rated input voltage.
Pre-installation checklist Table1-4 Checklist before installation Item Requirements Result • There is a minimum clearance of 80 mm (3.15 in) around the inlet and outlet air vents for heat dissipation of the firewall chassis. • A good ventilation system is available at the Ventilation installation site.
Page 15
Item Requirements Result • Locate the power switch in the equipment room. In case of emergency during operation, switch off the power switch. • Make sure the cabinet is equipped with a good ventilation system. • The rack is sturdy enough to support the weight of the Rack-mounting firewall and installation accessories.
WARNING! Keep the tamper-proof seal on a mounting screw on the chassis cover intact, and if you want to open the chassis, contact NSFOCUS for permission. Otherwise, NSFOCUS shall not be liable for any consequence. The installation procedure is similar for the NFNX3-HDB680, NFNX3-HDB1080, NFNX3-HDB1180, NFNX3-HDB1480, NFNX3-HDB1780, NFNX3-HDB3080, and NFNX3-HDB3280 firewalls.
Mounting the firewall on a workbench IMPORTANT: • Ensure good ventilation and a minimum clearance of 80 mm (3.15 in) around the chassis for heat dissipation. • Avoid placing heavy objects on the firewall. • To stack firewalls, make sure a minimum distance of 15 mm (0.59 in) is available between two adjacent firewalls.
Rack-mounting the firewall by using front mounting brackets The NFNX3-HDB680, NFNX3-HDB1080, NFNX3-HDB1180, and NFNX3-HDB1480 firewalls support this installation method. To install the firewall in a standard 19-inch rack by using front mounting brackets: Wear an ESD wrist strap and make sure the wrist strap makes good skin contact and is reliably grounded.
Figure2-4 Mounting the firewall in the rack Rack-mounting the firewall by using front and rear mounting brackets The NFNX3-HDB1780, NFNX3-HDB3080, and NFNX3-HDB3280 firewalls support this installation method. To install the firewall in a standard 19-inch rack: Wear an ESD wrist strap and make sure the wrist strap makes good skin contact and is reliably grounded.
Page 20
Figure2-6 Attaching mounting brackets and shoulder screws to the firewall Attach the rear mounting brackets to the rear rack posts. The rear mounting brackets can be attached to the rear rack posts with the wide flange inside or outside the rack. Table2-2 Installation methods for rear mounting brackets Distance between the front and rear rack Rear mounting bracket installation...
Page 21
Figure2-7 Attaching the rear mounting brackets to the rear rack posts (with the wide flange inside the rack) Figure2-8 Attaching the rear mounting brackets to the rear rack posts (with the wide flange outside the rack) Mount the firewall in the rack. Use M6 screws to secure the mounting brackets to the front rack posts and make sure the shoulder screws rest firmly on the upper edge of the rear mounting brackets.
Figure2-9 Mounting the firewall in the rack (with the wide flange of the rear mounting brackets inside the rack) Figure2-10 Mounting the firewall in the rack (with the wide flange of the rear mounting brackets outside the rack) Grounding the firewall WARNING! •...
You can ground the firewall in one of the following ways, depending on the grounding conditions available at the installation site. Grounding the firewall with a grounding strip If a grounding strip is available at the installation site, connect the grounding cable through the grounding strip.
Figure2-12 Grounding the firewall with the grounding terminal on the rack Installing a Micro SD card CAUTION: To avoid damaging the Micro SD card slot, do not use excessive force when you install a Micro SD card. Only the NFNX3-HDB680 firewall supports Micro SD cards. No Micro SD card is provided with the firewall.
Page 25
To install a power supply: Face the rear panel of the firewall. Remove the filler panel (if any) from the target power supply slot. The firewall comes with the PWR1 slot empty and the PWR0 slot installed with a filler panel. Figure2-14 Removing the filler panel Orient the power supply with its handle at the left.
Installing an interface module CAUTION: • Do not hot swap interface modules. • For smooth interface module installation in the two interface module slots, use subslot 2 prior to subslot 1 as a best practice. If you are to install an interface module in subslot 2 after an interface module has been installed in subslot 1, you must press down the ejector levers of the interface module before inserting it into the Subslot 2.
IMPORTANT: • The device does not come with any drives. Purchase drives for the device as needed. For the drives to be identified by the system, purchase the drives from NSFOCUS. • Before using the drive, execute the commands from the CLI to partition and...
Figure2-20 Installing a drive Connecting Ethernet cables Connecting a copper Ethernet port You can use either a straight-through or a cross-over network cable. For more information about Ethernet twisted pair cables, see "Ethernet twisted pair cable." To connect a copper Ethernet port: Connect one end of the Ethernet cable to the copper Ethernet port of the firewall, and the other end to the Ethernet port of the peer device.
Page 29
Figure2-21 GE SFP transceiver module Figure2-22 10GE SFP+ transceiver module To connect the firewall to the network through an optical fiber: Remove the dust plug from the fiber port. Remove the dust cap from the transceiver module and insert it into the fiber port. Remove the dust cap of the optical fiber connector, and use dust free paper and absolute alcohol clean the end face of the fiber connector.
Figure2-23 Installing and connecting an optical fiber Connecting power cords CAUTION: Make sure the grounding cable of the firewall is correctly connected and the power source is powered off before connecting the power cord. Connecting an AC power cord Connecting an AC power cord for an NFNX3-HDB1080, NFNX3-HDB1180, or NFNX3-HDB1480 firewall Attach the hooks of the power cord retainer clip into the holes on the top of the AC-input power receptacle, and pull the power cord retainer clip upwards.
Figure2-24 Connecting an AC power cord for an NFNX3-HDB1080, NFNX3-HDB1180, or NFNX3-HDB1480 firewall Connecting an AC power cord for an NFNX3-HDB1780, NFNX3-HDB3080, or NFNX3-HDB3280 firewall Attach the hooks of the power cord retainer clip into the holes next to the AC-input power receptacle, and pull the power cord retainer clip leftwards.
Connect the other end of the power cord to a DC power source. Figure2-27 Connecting and securing a DC power cord Connecting the power adapter for an NFNX3-HDB680 firewall Make sure the firewall is reliably grounded. Connect the power adapter to an external power source. Connect the DC output plug of the power adapter to the power adapter receptacle on the firewall.
Press Ctrl+T to start heavy memory test Booting Normal Extended BootWare The Extended BootWare is self-decompressing..Done. **************************************************************************** BootWare, Version 1.03 **************************************************************************** Copyright (c) 2021 NSFOCUS. All rights reserved. Compiled Date : May 8 2021 Memory Type : DDR4 SDRAM Memory Size...
Table3-1 Default Web interface login information Item Default configurations Username admin Password admin • NFNX3-HDB680/NFNX3-HDB1080: GigabitEthernet 1/0/0, 192.168.0.1/24 • NFNX3-HDB1180/NFNX3-HDB1480: 0/MGMT Management Ethernet port • NFNX3-HDB1780/NFNX3-HDB3080/NFNX3-HDB3280: 0/MGMT 1/MGMT • 0/MGMT—192.168.0.1/24 IP address of the • management Ethernet port 1/MGMT—192.168.1.1/24 To log in to the firewall from the Web interface by using the default account: Use an Ethernet cable to connect a PC to the management Ethernet port on the firewall.
Page 36
Specify an IP address for the network port of the PC. The IP address must be in subnet 192.168.0.0/24 and cannot be 192.168.0.1. Run the Telnet client on the PC and enter the default login information. 3-29...
Hardware replacement CAUTION: Wear an ESD wrist strap or ESD gloves for hardware maintenance. They are not provided with the firewall. Prepare them yourself. Replacing a power supply CAUTION: Before you replace a power supply, turn off the circuit breaker and then remove the power cord. The replacement procedure is the same for an AC power supply and a DC power supply.
To replace an interface module: Power off the firewall. Use a Phillips screwdriver to loosen the captive screws of the interface module. Holding the ejector levers of the interface module with both hands, pull the ejector levers outward, and pull the interface module part way out of the slot along the slide rails. Supporting the bottom of the interface module with one hand, gently pull the interface module out of the slot with the other.
Figure4-3 Replacing a drive for an NFNX3-HDB1180 or NFNX3-HDB1480 firewall Replacing a drive for the NFNX3-HDB1080, NFNX3-HDB1780, NFNX3-HDB3080, or NFNX3-HDB3280 firewall Log in to the Web interface. Click the Unmount button on the Storage settings page. Wear an ESD wrist strap and make sure it makes good skin contact and is reliably grounded. Press the button on the drive panel to release the locking lever.
Page 40
Figure4-5 Transceiver module golden plating Golden plating To replace a transceiver module: Use the command in interface view at the CLI to shut down the optical source shutdown before you remove the fiber connector. Remove the LC connectors with the optical fiber from the transceiver module, and install dust caps to the LC connectors.
CPLD_B Version:129.0 Release Version:NFNX3-HDB3280-XXXX Displaying the electrical label information for the firewall Use the command to display the electrical label information for the display device manuinfo firewall. Slot 1 CPU 0: DEVICE_NAME : NFNX3-HDB3280 DEVICE_SERIAL_NUMBER : 210235A45Q9196Q0000B MAC_ADDRESS : 0868-8DBC-3B73 MANUFACTURING_DATE : NONE VENDOR_NAME...
Displaying the memory usage of the firewall Use the command to display the memory information of the firewall. display memory <Sysname> display memory Memory statistics are measured in KB: Slot 1: Total Used Free Shared Buffers Cached FreeRatio Mem: 8212672 4655360 3557312 17152...
outflow 1 hotspot 1 hotspot 2 Table5-4 Output description Field Description Temperature sensor: • inflow—Air inlet vent temperature sensor. Sensor • outflow—Air outlet vent temperature sensor. • hotspot—Hotspot temperature sensor. Temperature Current temperature. LowerLimit Low temperature alarm threshold. Warning-UpperLimit Warning-level high temperature alarm threshold. Alarm-UpperLimit Alarm-level high temperature alarm threshold.
===============display version=============== NSFOCUS NF Software, Version 6.0, Ess 8860P16 Copyright (c) 2021 NSFOCUS. All rights reserved. NSFOCUS NF uptime is 0 weeks, 0 days, 0 hours, 9 minutes Last reboot reason: User reboot Displaying transceiver module information Identifying transceiver modules...
Page 46
• Enable the scheduled reboot function at the CLI. You can set a time at which the firewall can automatically reboot, or set a delay so that the firewall can automatically reboot within the delay. • Power on the firewall after powering it off, which is also called hard reboot or cold start. As a best practice, do not use this method because it might cause data loss and hardware damages.
Troubleshooting Power supply failure Symptom The firewall cannot be powered on, and the power LED (PWR0/PWR1) on the front panel is off. Solution To solve the issue: Power off the firewall. Verify that the power supply is as required by the firewall. Verify that the power cords of the firewall are firmly connected.
If the following alarm information is generated, the temperature of the firewall has reached the warning-level high temperature alarm threshold. %Nov 28 20:02:59:085 2022 NSFOCUS DEV/4/TEMPERATURE_WARNING: -Context=1; Temperature is greater than the high-temperature warning threshold on slot 1 sensor outflow 1.
Appendix A Chassis views and technical specifications Chassis views NFNX3-HDB680 The NFNX3-HDB680 firewall provides the following ports on the front panel: • Two 1000BASE-X Ethernet fiber ports. • Five 10/100/1000BASE-T autosensing Ethernet copper ports (including one management Ethernet port). • One USB port.
NFNX3-HDB1080 The NFNX3-HDB1080 firewall provides the following ports on the front panel: • Eight 10/100/1000BASE-T autosensing Ethernet copper ports. • Two combo interfaces. • Two bypass ports. • One USB port. • One console port. • One drive slot. Figure7-3 Front panel (1) Drive slot (2) Console port (4) 10/100/1000BASE-T copper port (combo...
Table7-2 Drive compatibility with the firewalls NFNX3-HDB1180/N NFNX3-HDB1080/NFNX3-HDB1780/NFNX3- Drive model FNX3-HDB1480 HDB3080/NFNX3-HDB3280 SSD-M.2-480G Supported Not supported SSD-2.5inch-SATA-480G Not supported Supported Power supplies The firewall provides two power supply slots PWR0 and PWR1 and supports both AC and DC removable power supplies. No power supplies are provided with the firewall. Prepare power supplies for the firewall yourself as required.
Figure7-14 PW-150W-DC DC power supply (1) Handle (2) DC-input power receptacle Dimensions and weights The weight of the firewall includes the chassis and its removable components. Chassis Table7-3 Chassis dimensions and weights Dimensions (H × W × D), excluding Net weight Firewall model rubber feet and mounting brackets (chassis only)
Storage media Table7-6 Storage media specifications Firewall model Memory NFNX3-HDB680/NFNX3-HDB1080/NFNX3-HDB1180/N 2GB DDR4 FNX3-HDB1480 NFNX3-HDB1780/NFNX3-HDB3080 4GB DDR4 NFNX3-HDB3280 8GB DDR4 Table7-7 Memory specifications of drives Drive model Memory SSD-M.2-480G 480 GB SSD-2.5inch-SATA-480G 480 GB Power consumption The system power consumption includes the power consumptions of the chassis and the removable components.
Drives Table7-10 Drive power consumption Drive model Power consumption SSD-M.2-480G 4.5 W SSD-2.5inch-SATA-480G Power supply specifications Table7-11 AC power supply specifications Item Specifications Model PW-150W-AC Rated input voltage range 100 VAC to 240 VAC @ 50 Hz or 60 Hz Maximum input current Maximum power 150 W...
GE copper port Table7-14 GE copper port specifications Item Specification Connector RJ-45 Standard compliance 802.3, 802.3u, and 802.3ab Interface type MDI/MDI-X autosensing Cable type Category 5 or higher twisted pair cable Transmission distance 100 m (328.08 ft) 10 Mbps, half/full-duplex Interface speed and duplex mode 100 Mbps, half/full-duplex 1000 Mbps, full-duplex...
Appendix B LEDs NFNX3-HDB680 Table8-1 LED description for the NFNX3-HDB680 firewall Mark Status Description No link is present. 10/100/1000BASE- 10/100/1000B Steady green A link is present. T copper port LED ASE-T Flashing green The port is receiving and sending data. No link is present.
Mark Status Description copper port LED (combo Steady green A 1000 Mbps link is present. interfaces) The port is receiving and sending Flashing green data at 1000 Mbps. Steady yellow A 10/100 Mbps link is present. The port is receiving and sending Flashing yellow data at 10 Mbps or 100 Mbps.
Mark Status Description data at 1000 Mbps. No link is present. Steady green A 10 Gbps link is present. 10GE fiber port LED 10GBASE-R The port is receiving and sending Flashing green data at 10 Gbps. The firewall is not powered on or has failed.
Mark Status Description No link is present. Steady green A 10 Gbps link is present. 10GE fiber port LED 10GBASE-R The port is receiving and sending Flashing green data at 10 Gbps. No link is present. 1000BASE-X fiber port Steady green A 1000 Mbps link is present.
Page 64
RJ-45 Signal Direction DB-9 → → → → Ethernet twisted pair cable Introduction An Ethernet twisted pair cable consists of four pairs of insulated copper wires twisted together. Every wire uses a different color, and has a diameter of about 1 mm (0.04 in). A pair of twisted copper cables can cancel the electromagnetic radiation of each other, and reduce interference of external sources.
Page 65
Figure9-2 RJ-45 connector pinout PIN #8 PIN #1 NOTE: The RJ-45 Ethernet ports of the firewall use category 5 or higher Ethernet twisted pair cables for connection. EIA/TIA cabling specifications define two standards, 568A and 568B, for cable pinouts. • Standard 568A—pin 1: white/green stripe, pin 2: green solid, pin 3: white/orange stripe, pin 4: blue solid, pin 5: white/blue stripe, pin 6: orange solid, pin 7: white/brown stripe, pin 8: brown solid.
Page 66
Figure9-4 Crossover cable white/orange orange white/green blue white/blue green white/brown brown Crossover cable white/green green white/orange blue white/blue orange white/brown brown Select an Ethernet twisted pair cable according to the RJ-45 Ethernet port type on your device. An RJ-45 Ethernet port can be MDI (for routers and PCs) or MDIX (for switches). Table9-3 Table9-4 show their pinouts.
Page 67
10BASE-T/100BASE-TX 1000BASE-T Signal Function Signal Function Sends data BIDA- Bi-directional data cable A- Reserved BIDC+ Bi-directional data cable C+ Reserved BIDC- Bi-directional data cable C- To ensure normal communication, the pins for sending data on one port must correspond to the pins for receiving data on the peer port.
Page 68
Item Single mode fiber Multi-mode fiber transmission distance within campus backbones for distance LANs or distances of a couple hundred of several thousand meters meters within a campus network Table9-6 Allowed maximum tensile force and crush load Period of force Tensile load (N) Crush load (N/mm) Short period...
Need help?
Do you have a question about the NFNX3 Series and is the answer not in the manual?
Questions and answers