H3C SecPath L5000-AD920 Installation Manual

Application delivery security gateway

Hide thumbs

page of 53

/ 53
Bookmarks

Quick Links

Download this manual

H3C SecPath

L5000-AD920[L5000-AD920-G][M9000-AD6]

Application Delivery Security Gateway

Installation Guide

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New

H3C Technologies Co., Ltd.

Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are

the property of their respective owners.

The information in this document is subject to change without notice.

Need help?

Do you have a question about the SecPath L5000-AD920 and is the answer not in the manual?

Questions and answers

Summary of Contents for H3C SecPath L5000-AD920

Page 1 No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd. Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.
Page 2 Contents 1 Preparing for installation ·········································································· 1-1 Safety recommendations ································································································································ 1-1 Safety symbols ········································································································································ 1-1 General safety recommendations ··········································································································· 1-1 Electrical safety ······································································································································· 1-2 Laser safety ············································································································································· 1-2 Handling safety ······································································································································· 1-2 Examining the installation site ························································································································· 1-3 Weight support ········································································································································ 1-3 Temperature and humidity ······················································································································...
Page 3 Replacing a fan tray ········································································································································ 4-3 Replacing a module ········································································································································ 4-4 Replacing a SEM/interface module ········································································································· 4-4 Replacing a service module ···················································································································· 4-5 Replacing a drive ············································································································································ 4-5 Replacing a transceiver module ······················································································································ 4-6 5 Hardware management and maintenance ··············································· 5-1 Displaying detailed information about the device ····························································································...
Page 4 Preparing for installation Safety recommendations To avoid bodily injury or device damage, read all safety recommendations carefully before installation. Note that the recommendations do not cover every possible hazardous condition. Safety symbols When reading this document, note the following symbols: WARNING means an alert that calls attention to important information that if not understood or followed can result in personal injury.
Page 5 Symbol Description Transported and stored with care. Transported and stored avoiding humidity, rains and wet floor. Electrical safety • Carefully examine your work area for possible hazards such as moist floors, ungrounded power extension cables, and missing safety grounds. • Locate the emergency power-off switch in the room before installation.
Page 6 Temperature and humidity For correct operation and long service life of your device, maintain the temperature and humidity in the equipment room at acceptable ranges. • Lasting high relative humidity can cause poor insulation, electricity leakage, mechanical property change of materials, and metal corrosion.
Page 7 The device uses the front-to-rear airflow design. When you install the device, make sure the airflow direction of the device matches the ventilation requirements of the installation environment. Plan the installation site for the device based on its airflow direction for adequate ventilation. Make sure the following requirements are met: •...
Page 8 Figure1-2 Fan tray that blows air (1) Fan tray handle (2) Alarm LED Figure1-3 Airflow for a fan tray that draws air...
Page 9 Figure1-4 Fan tray that draws air (1) Fan tray handle (2) Alarm LED ESD prevention ESD prevention guidelines To prevent electrostatic discharge (ESD), follow these guidelines: • Make sure the device and the rack are reliably grounded. • Take dust-proof measures for the equipment room. For more information, see "Cleanliness." •...
Page 10 Figure1-5 Attaching an ESD wrist strap (1) ESD wrist strap (2) Lock (3) Alligator clip All electromagnetic interference (EMI) sources, from outside or inside of the device and application system, adversely affect the device in the following ways: • A conduction pattern of capacitance coupling. •...
Page 11 Verify that the power system at the installation site meets the requirements of the power supplies, including the input method and rated input voltage. For power supply specifications of a device, see the hardware information and specifications for that device on the H3C official website at https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/.
Page 12 Pre-installation checklist Table1-4 Pre-installation checklist Item Requirements Result • Ensure a minimum clearance of 100 mm (3.94 in) around the air inlet and outlet vents of the chassis. Ventilation • A good ventilation system is available at the installation site. •...
Page 13 Keep the tamper-proof seal on a mounting screw on the chassis cover intact, and if you want to open the chassis, contact H3C for permission. Otherwise, H3C shall not be liable for any consequence. The installation methods are similar for the device models. The following figures are for illustration only.
Page 14 To ground the device: Use grounding screws to attach the two-hole lug of the grounding cable to the grounding screw holes, and then fasten the screws. Connect the ring terminal at the other end to the grounding strip of the rack. Figure2-1 Connecting the grounding cable to the primary grounding point Mounting the device in a standard 19-inch rack Restrictions and guidelines...
Page 15 Rack-mounting the device The device provides multiple chassis rail installation positions on its side panels. Attach the chassis rails to the correct positions based on the rack depth. For device stability, make sure the front ends of the slide rails reach out of the chassis rails. Install the mounting brackets at the port side or power supply side of the switch based on the installation scenario.
Page 16 For information about the modules available for a device, see the hardware information and specifications that device official website https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. Installing a SEM/interface module The installation methods are similar for the SEMs and interface modules. The following uses an NSQM6SUP04C0-G SEM as an example. To install an NSQM6SUP04C0-G SEM:...
Page 17 Use a Phillips screwdriver to loosen the screw on the filler panel, and then remove the filler panel. Keep the filler panel for future use. Open the ejector lever on the SEM and slide the SEM slowly into the slot along the guide rails. Close the ejector lever until it engages the panel tightly and the SEM seats into the slot securely.
Page 18 • The device cannot recognize drives from other vendors. Purchase drives from H3C as required. • Before using a drive, execute the commands from the CLI to partition and fdisk format format the drive. For information about the drives available for a device, see the hardware information and...
Page 19 For information about the power supplies available for a device, see the hardware information and specifications that device official website https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. Installing a PSR1600B-12A-C/PSR2000-12D-C power supply The installation methods are similar for the PSR1600B-12A-C and PSR2000-12D-C power supplies. The following uses the PSR1600B-12A-C power supply as an example. To install a PSR1600B-12A-C power supply:...
Page 20 Figure2-9 Removing the power supply filler panel Orient the power supply with its power receptacle at the right. Holding the power supply handle with one hand and supporting the power supply bottom with the other, slide the power supply slowly into the slot along the guide rails. Figure2-10 Installing a power supply Installing a PSR650B-12A1/PSR650B-12D1/PSR650B-12AHD-F power...
Page 21 Figure2-11 Removing the power supply filler panel Orient the power supply with its power receptacle at the right. Holding the power supply handle with one hand and supporting the power supply bottom with the other, slide the power supply slowly into the slot along the guide rails. Figure2-12 Installing a power supply Connecting Ethernet cables Connecting an Ethernet copper port...
Page 22 Examine whether the LEDs of the Ethernet port are normal. For information about the LEDs on a device, see the hardware information and specifications for that device on the H3C official website at https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. NOTE: • After connecting the device to the network, you can use the...
Page 23 Figure2-14 QSFP+ transceiver module Figure2-15 QSFP28 transceiver module To connect an Ethernet fiber port: Remove the dust plug from the fiber port. Pull the bail latch on the transceiver module upwards. Skip this step if the bail latch is plastic. Take the transceiver module by its two sides and align it with the fiber port.
Page 24 Figure2-16 Installing a transceiver module and optical fiber (LC connector) Figure2-17 Installing a transceiver module and optical fiber (MPO connector) Connecting power cords CAUTION: Make sure the grounding cable of the device is correctly connected and the power source is powered off before connecting the power cord.
Page 25 Use the provided cable tie to secure the AC power cord to the power supply handle. Connect the other end of the power cord to an AC power source. Figure2-18 Connecting an AC power cord Connecting a DC power cord Connecting the DC power cord for the PSR2000-12D-C power supply Remove the protective cover of the wiring terminals from the power supply.
Page 26 Connect the power wire marked with – and power wire marked with + to the negative terminal (–) and positive terminal (+) on the power source, respectively. Figure2-20 Connecting the DC power cord for the PSR650B-12D1 power supply Connecting an HVDC power cord Connect one end of the provided power cord to the power receptacle on the power supply.
Page 27 Press Ctrl+T to start heavy memory test Booting Normal Extended BootWare The Extended BootWare is self-decompressing..Done. **************************************************************************** H3C SecPath XXXX BootWare, Version 1.03 **************************************************************************** Copyright (c) 2021 New H3C Technologies Co., Ltd. Compiled Date : Feb 25 2021 Memory Type : DDR4 SDRAM...
Page 28 Memory Size : 32768MB Memory Speed : 800MHz flash Size : 7296MB CPLD Version : 1.0 PCB Version : Ver.A BootWare Validating... Press Ctrl+B to access EXTENDED-BOOTWARE MENU... Loading the main image files... Loading file flash:/XXXX-CMW710-SYSTEM-XXXX.bin............Done. Loading file flash:/XXXX-CMW710-BOOT-XXXX.bin...Done. Image file flash:/XXXX-CMW710-BOOT-XXXX.bin is self-decompressing..Done.
Page 29 • Username—admin • Password—admin • IP address of management Ethernet port M-GigabitEthernet 0/0/0—192.168.0.1/24 To log in to the device from the Web interface by using the default account: Use an Ethernet cable to connect a PC to the management Ethernet port on the device. Configure an IP address in subnet 192.168.0.0/24 for the PC.
Page 30 Configure the baud rate as required. • For information about the default baud rate of ports on a device, see the hardware information and technical specifications for that device on the H3C official website at https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. Logging in through Telnet Log in to the device from the console port.
Page 31 Hardware replacement CAUTION: Wear an ESD wrist strap or ESD gloves for hardware maintenance. They are not provided with the device. Prepare them yourself. Replacing a power supply CAUTION: Before you replace a power supply, turn off the circuit breaker and remove the power cord. Replacing an AC power supply Loosen the releasable cable tie and remove the power cord.
Page 32 Figure4-2 Removing an AC power supply Put the removed power supply in an antistatic bag. Install a new power supply. For the installation procedure, see "Installing a power supply." Replacing a DC power supply Remove the protective cover of the wiring terminals from the power supply. Use a Phillips screwdriver to loosen the screws on the wiring terminals.
Page 33 Figure4-4 Removing a DC power supply Put the removed power supply in an antistatic bag. Install a new power supply. For the installation procedure, see "Installing a power supply." Replacing a fan tray WARNING! • Ensure electricity safety if you replace a fan tray on an operating device. •...
Page 34 Figure4-5 Removing a fan tray Replacing a module CAUTION: • Some service modules and interface modules cannot be hot swapped. To replace such a module, first power off the device. • When you replace a service module, pull it out of the slot along the guide rails. Replacing a SEM/interface module The removal methods are similar for the SEMs and interface modules.
Page 35 Figure4-6 Removing a SEM Replacing a service module Press the latch to release the ejector lever, and then open the ejector lever. Pull the service module gently out of the slot along the guide rails. Put the removed service module on an antistatic mat. Install a new service module.
Page 36 Figure4-8 Removing a drive Replacing a transceiver module WARNING! Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the device is operating. CAUTION: Make sure the new transceiver module is the same model as the peer transceiver module at the other end of the optical fiber.
Page 37 Figure4-10 Removing a transceiver module (LC connector) Figure4-11 Removing a transceiver module (MPO connector)
Page 38 Use the command to display software and hardware version information for the display version device. <Sysname> display version H3C Comware Software, Version 7.1.064, Feature XXXX Copyright (c) 2004-2024 New H3C Technologies Co., Ltd. All rights reserved.
Page 39 H3C SecPath XXXX uptime is 0 weeks, 5 days, 20 hours, 34 minutes Last reboot reason : USER reboot Boot image: flash:/XXXX-CMW710-BOOT-XXXX.bin Boot image version: 7.1.064, Feature XXXX Compiled Jan 22 2024 15:00:00 System image: flash:/XXXX-CMW710-SYSTEM-XXXX.bin System image version: 7.1.064, Feature XXXX...
Page 40 Fan 1: DEVICE_NAME : XXXX DEVICE_SERIAL_NUMBER : 210231ACJPP22500G05W MAC_ADDRESS : NULL MANUFACTURING_DATE : 2022-05-26 Table5-1 Output description Field Description DEVICE_NAME Device name. DEVICE_SERIAL_NUMBER Device serial number. MAC_ADDRESS MAC address of the device. MANUFACTURING_DATE Manufacturing date of the device. VENDOR_NAME Vendor name. Displaying the CPU usage of the device Use the command to display the CPU usage of the device.
Page 41 Displaying the memory usage of the device Use the command to display the memory information of the device. display memory <Sysname> display memory Memory statistics are measured in KB: Slot 0: Total Used Free Shared Buffers Cached FreeRatio Mem: 8062512 2810756 5251756 18840...
Page 42 Displaying the operational status of power supplies Use the command to display the operational status of power supplies. display power <Sysname> display power PowerID State Mode Current(A) Voltage(V) Power(W) FanDirection Normal AC 10.4 12.0 125.1 Normal AC 12.4 12.0 147.8 Table5-4 Output description Field Description...
Page 43 Table5-5 Output description Field Description Slot Slot number of the module. Temperature sensor: • inflow—Air inlet vent temperature sensor. Sensor • outflow—Air outlet vent temperature sensor. • hotspot—Hotspot temperature sensor. Temperature Current temperature. Lower Low temperature alarm threshold. Warning Warning-level high temperature alarm threshold. Alarm Alarm-level high temperature alarm threshold.
Page 44 Displaying transceiver module information Identifying transceiver modules To identify transceiver modules, you can use the following command to view the key parameters of the transceiver modules, including transceiver module type, connector type, central wavelength of the laser sent, transmission distance, and vendor name or name of the vendor who customizes the transceiver modules.
Page 45 To enable the scheduled reboot function: Task Command Remarks Enable the scheduled reboot scheduler reboot at function and specify the reboot Use either method. time and date. The scheduled reboot function is disabled by default. Enable the scheduled reboot scheduler reboot delay function and specify the reboot Available in user view.
Page 46 Troubleshooting Power supply failure Symptom The device cannot be powered on, and the power supply status LED (PWR) on the SEM is off. Solution To solve the issue: Power off the device. Verify that the power supply is as required by the device. Verify that the power cords of the device are firmly connected.
Page 47 Cooling system failure Symptom The temperature of the device is higher than the normal operating temperature (45°C or 113°F). Solution To solve the issue: Verify that the fans are operating correctly. Verify that the operating environment of the device has good ventilation. If the temperature of the device exceeds the warning-level high temperature alarm threshold, the device generates the following alarm information: "DRV", "TEMPERATURE_SHUTDOWN", "Slot %d: Temperature is too high, power off it.
Page 48 Cables Console cable A console cable is an 8-core shielded cable with a crimped RJ-45 connector at one end and a DB-9 female connector at the other end. The RJ-45 connector is for connecting to the console port or standard USB connector on the device, and the DB-9 female connector is for connecting to the serial port or USB port on the configuration terminal.
Page 49 Ethernet twisted pair cables can be classified into category 3, category 4, category 5, category 5e, category 6, and category 7 cables based on performance. In LANs, category 5, category 5e, and category 6 are commonly used. Table7-2 Description for commonly used Ethernet twisted pair cables Type Description Category 5...
Page 50 • Straight-through—The pinouts at both ends are T568B compliant, as shown in Figure7-3. • Crossover—The pinouts are T568B compliant at one end and T568A compliant at the other end, as shown in Figure7-4. Figure7-3 Straight-through cable white/orange orange white/green blue white/blue green white/brown...
Page 51 Table7-3 RJ-45 MDI port pinouts 10Base-T/100Base-TX 1000Base-T Signal Function Signal Function Bi-directional data Sends data BIDA+ cable A+ Bi-directional data Sends data BIDA- cable A- Bi-directional data Receives data BIDB+ cable B+ Bi-directional data Reserved BIDC+ cable C+ Bi-directional data Reserved BIDC- cable C-...
Page 52 • Crossover cables connect devices of the same type—For example, switch to switch, router to router, and PC to PC. If an RJ-45 Ethernet port is enabled with MDI/MDIX autosensing, it can automatically negotiate pin roles. NOTE: The RJ-45 Ethernet ports on the device support MDI/MDIX autosensing. Making an Ethernet twisted pair cable Cut the cable to a required length with the crimping tool.
Page 53 Figure7-5 LC connector Figure7-6 MPO connector Follow these guidelines when you connect an optical fiber: • Before connecting an optical fiber, make sure the connector and cable type match the interface module. • Before connecting an optical fiber, use dust free paper and absolute alcohol to clean the end face of the fiber connector.

This manual is also suitable for:

Secpath l5000-ad920-g Secpath m9000-ad6