Table of Contents
Advertisement
Quick Links
H3C SecPath L1000[L5000][M9000-AD10]
Application Delivery Security Gateway Series
Installation Guide
Copyright © 2025 New H3C Technologies Co., Ltd. All rights reserved..
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New
H3C Technologies Co., Ltd.
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are
the property of their respective owners.
The information in this document is subject to change without notice.
i
Advertisement
Table of Contents
Subscribe to Our Youtube Channel
Related Manuals for H3C SecPath L1000 Series
Summary of Contents for H3C SecPath L1000 Series
- Page 1 No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd. Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.
-
Page 2: Table Of Contents
Contents 1 Preparing for installation ·········································································· 1-1 Safety recommendations ································································································································ 1-1 Safety symbols ········································································································································ 1-1 General safety recommendations ··········································································································· 1-1 Electrical safety ······································································································································· 1-2 Laser safety ············································································································································· 1-2 Handling safety ······································································································································· 1-3 Examining the installation site ························································································································· 1-3 Weight support ········································································································································ 1-3 Temperature and humidity ······················································································································... - Page 3 Checking before power-on ······················································································································ 3-1 Powering on the device ··························································································································· 3-1 Checking after power-on ························································································································· 3-1 Login methods················································································································································· 3-2 Logging in from the Web interface ·········································································································· 3-3 Logging in from the console port ············································································································· 3-1 Logging in from the micro USB console port ··························································································· 3-4 Logging in through Telnet ·······················································································································...
-
Page 4: Preparing For Installation
Preparing for installation This document describes how to install 1U and 2U devices and their accessories. Rack Unit (RU or U) is a measurement unit used to indicate the height of a device. • A 1U device indicates that the device is 1U high, as shown in Figure1-1. •... -
Page 5: Electrical Safety
• Vertically align devices according to the sizes and packing symbols on the packages, and avoid any obvious tilts. • Ensure good ventilation of the equipment room and keep the air inlet and outlet vents of the device free of obstruction. •... -
Page 6: Handling Safety
Temperature and humidity For correct operation and long service life of your device, maintain the temperature and humidity in the equipment room at acceptable ranges. • Lasting high relative humidity can cause poor insulation, electricity leakage, mechanical property change of materials, and metal corrosion. -
Page 7: Cooling System
Cooling system for 1U devices Plan the installation site for the device based on its airflow direction for adequate ventilation. Make sure the following requirements are met: • Reserve a minimum of 100 mm (3.94 in) around the air inlet and outlet vents of the chassis. - Page 8 Figure1-4 Left-to-right airflow. Cooling system for 2U devices The device features a front-to-rear airflow design and can provide front-to-rear or rear-to-front airflow by using different fan trays. Plan the installation site for the device based on its airflow direction for adequate ventilation.
- Page 9 Figure1-6 Fan tray that blows air (1) Fan tray handle (2) Alarm LED Figure1-7 Airflow for a fan tray that draws air Figure1-8 Fan tray that draws air (1) Fan tray handle (2) Alarm LED...
-
Page 10: Esd Prevention
ESD prevention To prevent electrostatic discharge (ESD), follow these guidelines: • Make sure the device, the workbench, and the rack are reliably grounded. • Take dust-proof measures for the equipment room. For more information, see "Cleanliness." • Maintain the humidity and temperature at an acceptable level. For more information, see "Temperature and humidity."... -
Page 11: Power Supply
Verify that the power system at the installation site meets the requirements of the power supplies, including the input method and rated input voltage. For power supply specifications of a device, see the hardware information and specifications for that device on the H3C official website at https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. -
Page 12: Pre-Installation Checklist
Grounding cable Power cord Power cord retainer clip Cable tie Pre-installation checklist Table1-5 Pre-installation checklist Item Requirements Result • Ensure a minimum clearance of 100 mm (3.94 in) around the air inlet and outlet vents of the chassis. • A good ventilation system is available at the installation site. - Page 13 Item Requirements Result • The grounding cable of the chassis is reliably grounded. Lightning • The grounding terminal of the AC power receptacle is protection reliably grounded. • (Optional.) A power lightning arrester is installed. • Equip a UPS. • Locate the power switch in the equipment room so that Electricity safety the power can be immediately shut off when an...
-
Page 14: Installing The Device
Keep the tamper-proof seal on a mounting screw on the chassis cover intact, and if you want to open the chassis, contact H3C for permission. Otherwise, H3C shall not be liable for any consequence. The installation methods are similar for the device models. The following figures are for illustration only. -
Page 15: Mounting The Device On A Workbench
• For information about the support of a device for workbench mounting, see the hardware information and specifications for that device on the H3C official website at https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. Mounting the device on a workbench Unpack the device and accessories. Place the device upside down on the workbench and clean the four round holes in the chassis bottom with dry cloth. - Page 16 For information about the distance between the front and rear rack posts when you attach rear mounting brackets to the rack, see the hardware information and specifications for the device on the H3C official website at https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. You can attach the rear mounting brackets to the rack with the wide flange inside or outside the rack.
- Page 17 Table2-1 Distance between the front and rear rack posts Installation method Distance between the front and rear rack posts With the wide flange inside 405 to 569 mm (15.94 421 to 566 mm (16.57 531 to 696 mm (20.91 the rack to 22.40 in) to 22.28 in) to 27.40 in)
- Page 18 Figure2-5 Attaching the rear mounting brackets to the rear rack posts (with the wide flange outside the rack) Mount the device in the rack. Use a Phillips screw to fasten M6 rack screws to secure the mounting brackets to the front rack posts and make sure the shoulder screws rest firmly on the upper edge of the rear mounting brackets.
-
Page 19: Mounting A 2U Device In A Standard 19-Inch Rack
Figure2-7 Mounting the device in the rack (with the wide flange of the rear mounting brackets outside the rack) Mounting a 2U device in a standard 19-inch rack Restrictions and guidelines • To mount the device in a standard 19-inch rack, make sure the rack meets the requirements described in Table2-2. -
Page 20: Rack-Mounting The Device
Rack-mounting the device The device provides multiple chassis rail installation positions on its side panels. Attach the chassis rails to the correct positions based on the rack depth. For device stability, make sure the front ends of the slide rails reach out of the chassis rails. To rack-mount the device: Unpack the device and accessories. -
Page 21: Grounding A 1U Device
Figure2-9 Attaching front mounting brackets to the device Supporting the bottom of the device, align the chassis rails with the slide rails and slide the slide rails into the chassis rails until the mounting brackets engage the front rack posts. Use a Phillips screwdriver to fasten the M6 rack screws to secure the mounting brackets to the front rack posts. -
Page 22: Grounding The Device By Using A Grounding Strip
• Connect the grounding cable to the grounding strip in the equipment room. Do not connect it to a fire main or lightning rod. Grounding the device by using a grounding strip If a grounding strip is available at the installation site, you can connect the grounding cable of the device to the grounding strip. -
Page 23: Grounding A 2U Device
Figure2-12 Grounding the device by using the grounding terminal on the rack Grounding a 2U device WARNING! • Correctly connecting the grounding cable is crucial to lightning protection and EMI protection. To install and use the device, first connect the grounding cable for the device reliably. •... -
Page 24: Installing A Power Supply
Installing a PSR150-A1/PSR150-D1 power supply The installation methods are similar for the PSR150-A1 and PSR150-D1 power supplies. To install a PSR150-A1 or PSR150-D1 power supply: Remove the filler panel from the target power supply slot. - Page 25 Figure2-14 Removing the power supply filler panel Orient the power supply with its handle at the left. Holding the power supply handle with one hand and supporting the power supply bottom with the other, slide the power supply slowly into the slot along the guide rails.
-
Page 26: Installing A Psr250-12A1/Psr450-12Ahd/Psr450-12D Power Supply
Installing a PSR250-12A1/PSR450-12AHD/PSR450-12D power supply The installation methods are similar for the PSR250-12A1, PSR450-12AHD, and PSR450-12D power supplies. The following uses the PSR250-12A1 power supply as an example. To install a PSR250-12A1 power supply: Remove the filler panel (if any) from the target power supply slot. The device came with power supply slot PWR1 empty and power supply slot PWR0 installed with a filler panel. -
Page 27: Installing A Fan Tray
Figure2-19 Removing the power supply filler panel Orient the power supply with its power receptacle at the right. Holding the power supply handle with one hand and supporting the power supply bottom with the other, slide the power supply slowly into the slot along the guide rails. Figure2-20 Installing a power supply Installing a fan tray CAUTION:... -
Page 28: Installing An Interface Module
The installation methods are similar for the fan trays. This section uses the LSWM1BFANSCB fan tray as an example. To install a fan tray: Unpack the fan tray and verify that the fan tray model is correct. -
Page 29: Installing A High-Density Interface Module
The installation methods are similar for the high-density interface modules. This section uses the NS-FPIM-CQG4TG16GT16AL high-density interface module as an example. To install an NS-FPIM-CQG4TG16GT16AL interface module: Face the front panel of the device. -
Page 30: Installing A Drive
Figure2-24 Removing a filler panel Loosen the slide rail mounting screws and remove the three slide rails from the chassis. Slide the high-density interface module slowly into the slot along the guide rails until the interface module is fully seated in the slot. Use a Phillips screwdriver to fasten the captive screws on the high-density interface module. -
Page 31: Installing An M.2 Drive
• To prevent dust or ESD damage, install a filler panel in any empty drive slot. IMPORTANT: • The device does not come with any drives and cannot recognize drives from other vendors. Purchase drives from H3C as required. • Before using a drive, execute the fdisk... -
Page 32: Installing A Usb Drive
For the support of a device for USB drives, see the hardware information and specifications for that device official website https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. The installation methods are similar for USB 2.0 and USB 3.0 drives. To install a USB drive: Face the front panel of the device. -
Page 33: Connecting An Ethernet Fiber Port
For information about the transceiver modules available for a device, see the hardware information specifications that device official website https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. No transceiver modules are provided with the device. As a best practice, use H3C transceiver modules for the device. Figure2-29 GE SFP copper transceiver module 2-20... - Page 34 Figure2-30 GE SFP optical transceiver module Figure2-31 10GE SFP+ transceiver module Figure2-32 SFP28 transceiver module Figure2-33 QSFP28 transceiver module (MPO connector) Figure2-34 QSFP28 transceiver module (LC connector) To connect an Ethernet fiber port: Remove the dust plug from the fiber port. 2-21...
- Page 35 Pull the bail latch on the transceiver module upwards. Skip this step if the bail latch is plastic. Take the transceiver module by its two sides and align it with the fiber port. Push the transceiver module gently into the port until it is firmly seated in the fiber port. Remove the dust plug and dust cap from the transceiver module and fiber connector, respectively.
-
Page 36: Connecting Power Cords
Figure2-36 Installing a transceiver module and optical fiber (MPO connector) Connecting power cords CAUTION: Make sure the grounding cable of the device is correctly connected and the power source is powered off before connecting the power cord. Connecting an AC power cord Attach the hooks of the power cord retainer clip into the holes next to the AC power receptacle, and pull the power cord retainer clip leftwards. -
Page 37: Connecting A Dc Power Cord
Figure2-38 Securing the power cord by using a cable tie Connecting a DC power cord Correctly orient the DC power cord plug with the power receptacle on the power supply, and then insert the plug into the receptacle. Use a cable tie to secure the DC power cord to the power supply handle. Connect the other end of the power cord to a DC power source. -
Page 38: Logging In To The Device
The command output varies by software version used by the device. System is starting... Press Ctrl+D to access BASIC-BOOTWARE MENU... Press Ctrl+T to start heavy memory test Booting Normal Extended BootWare The Extended BootWare is self-decompressing..Done. **************************************************************************** H3C BootWare, Version 1.01 **************************************************************************** Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. -
Page 39: Login Methods
Compiled Date : Aug 2 2021 Memory Type : DDR4 SDRAM Memory Size : 8152MB Memory Speed : 1037MHz flash Size : 3728MB CPLD 1 Version : 0.0 CPLD 2 Version : 1.0 PCB 1 Version : Ver.A PCB 2 Version : Ver.A Press Ctrl+B to access EXTENDED-BOOTWARE MENU... -
Page 40: Logging In From The Web Interface
You can log in to the Web interface by using the default login information. This section uses management Ethernet port IP address 192.168.0.1/24 as an example. To log in to the device from the Web interface by using the default account: Use an Ethernet cable to connect a PC to the management Ethernet port on the device. -
Page 41: Logging In From The Console Port
The signal pinout for the RJ-45 connector of a console cable varies by vendor. To avoid abnormal configuration terminal display, use a console cable provided by H3C. For more information, see Table3-2. To prepare a serial console cable yourself, make sure the signal pinout for the RJ-45 connector is the same as that shown in Table7-1. - Page 42 USB-to-RJ45 console driver on the configuration terminal, and then connect the USB-to-RJ45 console cable to the configuration terminal. To download the USB-to-RJ45 console driver, access the H3C official website or scan the QR code on the cable package.
- Page 43 • Typically, the default baud rate is 9600 bps. However, the default baud rate is 115200 bps in some cases. Configure the baud rate as required. • For information about the default baud rate of ports on a device, see the hardware information and technical specifications for that device on the H3C official website at https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/.
-
Page 44: Logging In From The Micro Usb Console Port
NOTE: • For information about the support of a device for login from the micro USB console port, see the hardware information and specifications for that device on the H3C official website at https://www.h3c.com/en/Support/Resource_Center/Technical_Documents/Security/. • To use a micro USB console cable to connect the device to a configuration terminal, first download and install the USB console driver on the configuration terminal and then connect the micro USB console cable to the configuration terminal (PC). -
Page 45: Logging In Through Telnet
For more information about Boot ROM menu options, see the software-matching release notes for the device. Logging in through Telnet Log in to the device from the console port. Execute the command telnet server enable in system view to enable Telnet. Enter VTY user line view, and configure the authentication mode, user role, and common properties. -
Page 46: Hardware Replacement
Hardware replacement CAUTION: Wear an ESD wrist strap or ESD gloves for hardware maintenance. They are not provided with the device. Prepare them yourself. Replacing a power supply CAUTION: Before you replace a power supply, turn off the circuit breaker and remove the power cord. Replacing a PSR150-A1/PSR150-D1 power supply The removal methods are the same for the AC and DC power supplies. -
Page 47: Replacing A Psr650B-12A1/Psr650B-12D1/Psr650B-12Ahd-F Power Supply
Holding the power supply handle with one hand, press the latch towards the handle and pull the power supply part way out of the slot. Supporting the power supply bottom with the other hand, slowly pull the power supply out of the slot. Figure4-2 Removing a power supply Put the removed power supply on a workbench or in an antistatic bag. -
Page 48: Replacing An Interface Module
Replacing an interface module CAUTION: • Do not hot swap interface modules. Power off the device before replacing an interface module. • A high-density interface module occupies subslots 1 to 4. To replace a high-density interface module with an interface module, remove the high-density interface module, install the removed three slide rails, and then install the interface module. -
Page 49: Replacing A Fan Tray
Holding the two ejector levers of the high-density interface module, open the ejector levers, and then pull the high-density interface module part way out of the slot along the guide rails. Supporting the bottom of the high-density interface module with one hand, use the other hand to gently pull the high-density interface module out of the slot. -
Page 50: Replacing An M.2 Drive
• Do not hot swap drives. • To avoid ESD damage, wear an ESD wrist strap when replacing a drive. • To avoid damage caused by build-up dust, install a filler panel in a drive slot if you are not to install a drive in it. - Page 51 Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the device is operating. Do not touch the golden plating on a transceiver module during the replacement process. Figure4-8 Golden plating To replace a transceiver module: Use the...
- Page 52 Figure4-10 Removing a transceiver module (MPO connector)
-
Page 53: Hardware Management And Maintenance
<Sysname> display version H3C Comware Software, Version 7.1.064, XXXX Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. All rights reserved. H3C SecPath XXXX uptime is 0 weeks, 0 days, 5 hours, 21 minutes Last reboot reason: User reboot Boot image: flash:/main-CMW710-BOOT-XXXX.bin Boot image version: 7.1.064, Alpha XXXX... -
Page 54: Displaying Electrical Label Information For The Device
Fan 3: The operation is not supported on the specified fan. Power 0: DEVICE_NAME : PSR150-A1 DEVICE_SERIAL_NUMBER : 210231A1U0H16B005100 MAC_ADDRESS : NONE MANUFACTURING_DATE : NONE VENDOR_NAME : H3C Table5-1 Output description Field Description DEVICE_NAME Device name. DEVICE_SERIAL_NUMBER Device serial number. -
Page 55: Displaying The Cpu Usage Of The Device
Field Description MAC_ADDRESS MAC address of the device. MANUFACTURING_DATE Manufacturing date of the device. VENDOR_NAME Vendor name. Displaying the CPU usage of the device Use the command to display the CPU usage of the device. display cpu-usage <Sysname> display cpu-usage Slot 1 CPU 0 CPU usage: 3% in last 5 seconds 3% in last 1 minute... -
Page 56: Displaying The Memory Usage Of The Device
Displaying the memory usage of the device Use the command to display the memory information of the device. display memory <Sysname> display memory Memory statistics are measured in KB: Slot 1: Total Used Free Shared Buffers Cached FreeRatio Mem: 8212672 4655360 3557312 17152... -
Page 57: Displaying The Operational Statistics Of The Device
hotspot 2 Table5-5 Output description Field Description Temperature sensor: • inflow—Air inlet vent temperature sensor. Sensor • outflow—Air outlet vent temperature sensor. • hotspot—Hotspot temperature sensor. Temperature Current temperature. LowerLimit Low temperature alarm threshold. Warning-UpperLimit Warning-level high temperature alarm threshold. Alarm-UpperLimit Alarm-level high temperature alarm threshold. -
Page 58: Displaying Transceiver Module Information
H3C Comware Software, Version 7.1.064, Alpha 8860P02 Copyright (c) 2004-2021 New H3C Technologies Co., Ltd. All rights reserved. H3C SecPath XXXX uptime is 1 week, 2 days, 2 hours, 9 minutes Displaying transceiver module information Identifying transceiver modules To identify transceiver modules, you can use the following command to view the key parameters of... - Page 59 Task Command Remarks Required. reboot Reboot the device immediately. Available in user view. To enable the scheduled reboot function: Task Command Remarks Enable the scheduled reboot scheduler reboot at Use either method. function and specify the reboot time and date. The scheduled reboot function is disabled by default.
-
Page 60: Troubleshooting
Troubleshooting Power supply failure Symptom The device cannot be powered on, and the power supply status LED on the front panel is off. Solution To solve the issue: Power off the device. Verify that the power supply is as required by the device. Verify that the power cords of the device are firmly connected. -
Page 61: Cooling System Failure
If the temperature of the device exceeds the warning-level high temperature alarm threshold, the device generates the following alarm information: %Aug 28 20:02:59:085 2021 H3C DEV/4/TEMPERATURE_WARNING: -Context=1; Temperature is greater than the high-temperature warning threshold on slot 1 sensor outflow 1. Current temperature is 58 degrees centigrade. -
Page 62: Cables
Cables Console cable A console cable is an 8-core shielded cable with a crimped RJ-45 connector at one end and a DB-9 female connector at the other end. The RJ-45 connector is for connecting to the console port or standard USB connector on the device, and the DB-9 female connector is for connecting to the serial port or USB port on the configuration terminal. - Page 63 Ethernet twisted pair cables can be classified into category 3, category 4, category 5, category 5e, category 6, and category 7 cables based on performance. In LANs, category 5, category 5e, and category 6 are commonly used. Table7-2 Description for commonly used Ethernet twisted pair cables Type Description Category 5...
- Page 64 • Straight-through—The pinouts at both ends are T568B compliant, as shown in Figure7-3. • Crossover—The pinouts are T568B compliant at one end and T568A compliant at the other end, as shown in Figure7-4. Figure7-3 Straight-through cable white/orange orange white/green blue white/blue green white/brown...
- Page 65 Table7-3 RJ-45 MDI port pinouts 10Base-T/100Base-TX 1000Base-T Signal Function Signal Function Bi-directional data Sends data BIDA+ cable A+ Bi-directional data Sends data BIDA- cable A- Bi-directional data Receives data BIDB+ cable B+ Bi-directional data Reserved BIDC+ cable C+ Bi-directional data Reserved BIDC- cable C-...
-
Page 66: Making An Ethernet Twisted Pair Cable
• Crossover cables connect devices of the same type—For example, switch to switch, router to router, and PC to PC. If an RJ-45 Ethernet port is enabled with MDI/MDIX autosensing, it can automatically negotiate pin roles. NOTE: The RJ-45 Ethernet ports on the device support MDI/MDIX autosensing. Making an Ethernet twisted pair cable Cut the cable to a required length with the crimping tool. - Page 67 Figure7-5 LC connector Follow these guidelines when you connect an optical fiber: • Before connecting an optical fiber, make sure the connector and cable type match the interface module. • The Ethernet fiber ports on the device support only LC connectors. •...
Need help?
Do you have a question about the SecPath L1000 Series and is the answer not in the manual?
Questions and answers