To avoid any equipment damage or bodily injury, read the following safety recommendations before installation. Note that the recommendations do not cover every possible hazardous condition.

Safety symbols

When reading this document, note the following symbols:

WARNING means an alert that calls attention to important information that if not understood or followed can result in personal injury.

CAUTION means an alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software.

General safety recommendations

· Make sure the installation location is flat, vibration-free, and away from electromagnetic interferences. ESD and anti-slip measures are in place.

· Do not place the device on an unstable case or desk. The device might be severely damaged in case of a fall.

· Keep the chassis and installation tools away from walk areas.

· Keep the chassis clean and dust-free.

· Do not place the device near water or in a damp environment. Prevent water or moisture from entering the device chassis.

· Pay attention to the safety symbols on the package and handle the device accordingly.

Table 1 Symbols on the package

Symbol	Description
	The device shall not be vertically stacked beyond the specified number.
	Place the device with the arrows up.
	The device is fragile. Handle it with care.
	Keep the device from humidity, rains, and wet floor.

· Ensure good ventilation of the equipment room and keep the air inlet and outlet vents of the device free of obstruction.

· Make sure the operating voltage for the power module is in the required range.

· Use a screwdriver to fasten screws.

· Take away the packaging materials and installation tools after installation.

Electrical safety

· Carefully examine your work area for possible hazards such as moist floors, ungrounded power extension cables, and missing safety grounds.

· Locate the emergency power-off switch in the room before installation. Shut the power off at once in case accident occurs.

· Do not work alone when the device has power.

· Always verify that the power has been disconnected when you perform operations that require the device to be powered off.

Laser safety

WARNING!

Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the device is operating.

The device is a Class 1 laser device.

· Before you remove the optical fiber connector from a fiber port, execute the shutdown command in interface view to shut down the port.

· Insert a dust cap into any open optical fiber connector and a dust plug into any open fiber port or transceiver module port to protect them from contamination and ESD damage.

Moving safety

When you move the device, follow these guidelines:

· To avoid damage, move and unpack the device with care.

· After you move the device from a location below 0°C (32°F) to the equipment room, follow these guidelines to prevent condensation:

¡ Wait a minimum of 30 minutes before unpacking the device.

¡ Wait a minimum of 2 hours before powering on the device.

· Use a pushcart when you move multiple devices.

· Before you move the device, remove all cables and mounting brackets.

· If the device is to be transported over a long distance, perform the following tasks before the transport:

¡ Remove all removable components, such as power modules and interface modules, and place them separately in antistatic bags.

¡ Replace the filler panels provided with the device to prevent obstacle intrusions and damages to the device.

· To transport the device over a short distance, make sure the removable components are securely installed on the device and the screws are tightly fastened.

· When you move or lift the chassis, support the bottom of the chassis, rather than hold any removable component.

· Make sure the accessories of the device are not lost or damaged during device moving.

Examining the installation site

The device can only be used indoors. To ensure correct operation and a long lifespan for your device, the installation site must meet the following requirements.

Make sure the floor can support the total weight of the rack, chassis, modules, and all other components. For weights of the chassis and components, see "Appendix A Chassis views and technical specifications."

Temperature and humidity

Maintain temperature and humidity in the equipment room at levels as described in Table 2.

· Lasting high relative humidity can cause poor insulation, electricity leakage, mechanical property change of materials, and metal corrosion.

· Lasting low relative humidity can cause washer contraction and ESD and bring problems including loose captive screws and circuit failure.

· High temperature can accelerate the aging of insulation materials and significantly lower the reliability and lifespan of the device.

Table 2 Temperature and humidity requirements

Item	Specification
Temperature	· Operating: 0°C to 45°C (32°F to 113°F) · Storage: –40°C to +70°C (–40°F to +158°F)
Relative humidity	5% RH to 95% RH, noncondensing

Item

Specification

Temperature

· Operating: 0°C to 45°C (32°F to 113°F)

· Storage: –40°C to +70°C (–40°F to +158°F)

Relative humidity

5% RH to 95% RH, noncondensing

Cleanliness

Dust buildup on the chassis might result in electrostatic adsorption, which causes poor contact of metal components and contact points, especially when indoor relative humidity is low. In the worst case, electrostatic adsorption can cause communication failure.

Table 3 Dust concentration limit in the equipment room

Substance	Concentration limit (particles/m³)
Dust particles	≤ 3 × 10⁴ (No visible dust on desk in three days)
NOTE: Dust particle diameter ≥ 5 µm

Substance

Concentration limit (particles/m³)

Dust particles

≤ 3 × 10⁴

(No visible dust on desk in three days)

NOTE:

Dust particle diameter ≥ 5 µm

The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion and premature aging of components, as shown in Table 4.

Table 4 Harmful gas limits in an equipment room

Gas	Max. (mg/m³)
SO₂	0.2
H₂S	0.006
NH₃	0.05
Cl₂	0.01
NO2	0.04

Cooling system

The device provides left-side intake and right-side exhaust airflow. For adequate cooling, make sure the following requirements are met:

· A minimum clearance of 100 mm (3.94 in) is reserved around the inlet and outlet air vents.

· The installation site has a good cooling system.

Figure 1 Airflow through the device chassis

ESD prevention

ESD prevention guidelines

To prevent electrostatic discharge (ESD), follow these guidelines:

· Make sure the device and the workbench or rack are reliably grounded.

· Take dust-proof measures for the equipment room. For more information, see "Cleanliness."

· Maintain the humidity and temperature at acceptable levels. For more information, see "Temperature and humidity."

· Before working with the device, wear an ESD wrist strap or gloves and ESD clothing, and remove conductive objects such as jewelry or watch. Make sure the wrist strap makes good skin contact and is reliably grounded.

· Place a removed component such as interface module on an ESD workbench or put it in an antistatic bag, with its component side facing up.

Attaching an ESD wrist strap

CAUTION:

Before you attach an ESD wrist strap, make sure the rack or workbench is reliably grounded.

No ESD wrist strap is provided with the device. Purchase one yourself.

To attach the ESD wrist strap:

1. Wear the wrist strap on your wrist.

2. Lock the wrist strap tight around your wrist to keep good contact with the skin.

3. Secure the wrist strap lock and the alligator clip lock together.

4. Attach the alligator clip to the rack.

Figure 2 Attaching an ESD wrist strap

(1) ESD wrist strap	(2) Lock
(3) Alligator clip

EMI

All electromagnetic interference (EMI) sources, from outside or inside of the device and application system, adversely affect the device in the following ways:

· A conduction pattern of capacitance coupling.

· Inductance coupling.

· Electromagnetic wave radiation.

· Common impedance (including the grounding system) coupling.

To prevent EMI, use the following guidelines:

· If AC power is used, use a single-phase three-wire power receptacle with protection earth (PE) to filter interference from the power grid.

· Keep the device far away from radio transmitting stations, radar stations, and high-frequency devices.

· Use electromagnetic shielding, for example, shielded interface cables, when necessary.

· To prevent signal ports from getting damaged by overvoltage or overcurrent caused by lightning strikes, route interface cables only indoors. If part of the network cable of an Ethernet port must be routed outdoors, install a network signal lightning arrester for the port.

Lightning protection

To better protect the device from lightning, follow these guidelines:

· Make sure the grounding cable of the chassis is reliably grounded.

· Make sure the grounding terminal of the AC power receptacle is reliably grounded.

· Install a power lightning arrester at the input end of the power module to enhance the lightning protection capability of the power module.

Power supply

Verify that the power system at the installation site meets the power requirements of the device, including the power input method and rated input voltage. For the power module specifications, see "Appendix A Chassis views and technical specifications."

Installation tools

No installation tools are provided with the device. Prepare them yourself as required.

Figure 3 Installation tools


Crimping tool	Phillips screwdriver	Needle-nose pliers	Wire-stripping pliers

ESD wrist strap	Flathead screwdriver	Marker	Diagonal pliers

Installation accessories

Figure 4 Installation accessories


Grounding cable	M6 screw (user supplied)	Cage nut (user supplied)	M4 screw

Front mounting bracket with a cable management bracket	Rubber feet	Power cord retainer	Cable tie (user supplied)

Pre-installation checklist

Table 5 Pre-installation checklist

Item		Requirements	Result
Installation site	Ventilation	· There is a minimum clearance of 10 cm (3.94 in) around the inlet and outlet air vents for heat dissipation of the device chassis. · A ventilation system is available at the installation site.
	Temperature (indoor)	· Operating: 0°C to 45°C (32°F to 113°F) · Storage: –40°C to +70°C (–40°F to +158°F)
	Relative humidity (indoor)	5% RH to 95% RH, noncondensing
	Cleanliness	· Dust concentration ≤ 3 × 10⁴ particles/m³ · No dust on desk within three days
	ESD prevention	· The equipment and the workbench or rack are reliably grounded. · The equipment room is dust-proof. · The humidity and temperature are at acceptable levels. · An ESD wrist strap is available. · An antistatic workbench is available. · Antistatic bags are available.
	EMI prevention	· Effective measures are taken for filtering interference from the power grid. · The protection ground of the device is away from the grounding facility of power equipment or lightning protection grounding facility. · The device is far away from radio transmitting stations, radar stations, and high-frequency devices. · Electromagnetic shielding, for example, shielded interface cables, is used as required.
	Lightning protection	· The grounding cable of the chassis is reliably grounded. · The grounding terminal of the AC power receptacle is reliably grounded. · (Optional.) A power lightning arrester is available.
	Electricity safety	· A UPS is available. · The power-off switch in the equipment room is identified and accessible so that the power can be immediately shut off when an accident occurs.
	Rack-mounting requirements	· The rack has a good ventilation system. · The rack is sturdy enough to support the weight of the device and installation accessories. · The rack has a size that can accommodate the device. · The front and rear of the rack are a minimum of 0.8 m (2.62 ft) away from walls or other devices.
Safety precautions	· The device is far away from any moist area and heat source. · The emergency power switch in the equipment room is located.
Tools and accessories	· Accessories provided with the device are available. · Installation tools are available.
Reference	· Documents shipped with the device are available. · Online documents are available.

Installing the device

WARNING!

Keep the tamper-proof seal on a mounting screw on the chassis cover intact, and if you want to open the chassis, contact the local agent of H3C for permission. Otherwise, H3C shall not be liable for any consequence caused thereby.

The installation procedure is similar for the H3C SecPath F5010, F5020, and F5040 firewalls. This section installs an F5020 firewall.

Figure 5 Installation flow

Mounting the device on a workbench

IMPORTANT:

Follow these guidelines to mount the device on a workbench:

· Make sure the workbench is stable and is reliably grounded.

· Reserve a minimum clearance of 10 cm (3.9 in) around the chassis for heat dissipation.

· Do not place heavy objects on the device.

If a standard 19-inch rack is not available, you can place the device on a clean, flat workbench.

To mount the device on a workbench:

1. Unpack the device and its accessories.

2. Place the device with bottom up. Clean the recessed areas on the chassis bottom with a dry cloth.

3. Attach the four rubber feet to the recessed areas on the chassis bottom.

4. Place the device with upside up on the workbench.

Figure 6 Mounting the device on a workbench

Installing the device in a standard 19-inch rack

WARNING!

To avoid bodily injury and device damage, use a minimum of two persons to install the device.

CAUTION:

· Ensure a clearance of 1 RU (44.45 mm/1.75 in) between devices in the rack for heat dissipation.

· The device is heavy. Use mounting brackets together with a rack shelf to rack-mount the device.

To install the device in a standard 19-inch rack:

1. Wear an ESD wrist strap and make sure the wrist strap makes good skin contact and is reliably grounded.

2. Unpack the device and accessories.

3. Use a mounting bracket to mark cage nut installation positions on the front rack posts and install cage nuts.

Figure 7 Installing cage nuts

4. Use the supplied M4 screws to attach the mounting brackets to the device.

Figure 8 Attaching the mounting brackets to the device

5. Mount the device in the rack.

Figure 9 Mounting the device in the rack

6. Use M6 screws to secure the mounting brackets to the front rack posts.

Figure 10 Securing the device to the rack

Grounding the device

CAUTION:

· Correctly connecting the device grounding cable is crucial to lightning protection and EMI protection.

· Do not connect the grounding cable to a fire main or lightning rod.

Grounding the device by using a grounding strip

1. Connect the grounding cable to the device.

a. Remove the grounding screw from the grounding hole in the rear panel of the chassis.

b. Use the grounding screw to attach the ring terminal of the grounding cable to the grounding hole and fasten the screw.

2. Connect the other end of the grounding cable to the grounding strip.

a. Remove the nut from a grounding post on the grounding strip.

b. Use needle-nose pliers to make a hook at the other end of the grounding cable. Attach the hook to the grounding post and then fasten the nut.

Figure 11 Grounding the device by using a grounding strip

Grounding the device by using the grounding terminal on the rack

CAUTION:

To ground the device by using the grounding terminal on the rack, make sure the rack is reliably grounded.

To ground the device by using the grounding terminal on the rack:

1. Connect the grounding cable to the device. For the connection procedure, see "Grounding the device by using a grounding strip."

2. Connect the other end of the grounding cable to the grounding terminal on the rack.

a. Remove the nut from a grounding post on the grounding terminal.

b. Use needle-nose pliers to make a hook at the other end of the grounding cable. Attach the hook to the grounding post and then fasten the nut.

Figure 12 Grounding the device by using the grounding terminal on the rack

Grounding the device by using a grounding conductor buried in the earth

If earth is available at the installation site, hammer a 0.5 m (1.64 ft) or longer angle iron or steel tube into the earth to serve as a grounding conductor. Weld the yellow-green grounding cable to the angel iron or steel tube and treat the joint for corrosion protection.

Figure 13 Grounding the device by burying a grounding conductor into the earth

(1) Joint	(2) Grounding conductor

Installing a power module

CAUTION:

· Before installing a power module, make sure the power is disconnected and the grounding cable is connected reliably.

· Do not install power modules of different models on the same device.

To install the power module:

1. Face the rear panel of the device.

2. Select the slot to install the power module.

3. (Optional.) Use a Phillips screwdriver to loosen the captive screws on the filler panel and remove the filler panel.

Skip this step for the PWR1 slot.

4. Orient the power module with its handle at the right. Holding the handle of the module with one hand and supporting the module bottom with the other, slide the power module slowly into the slot along the guide rails.

5. Use a Phillips screwdriver to fasten the captive screws on the power module to secure the power module in place.

Figure 14 Installing a power module

Installing optional components

(Optional) Installing an interface module

CAUTION:

The NSQ1G24XS60 interface module is available for the device. It is not hot swappable.

To install an interface module:

1. Face the front panel of the device.

2. Use a Phillips screwdriver to loosen the screws on the filler panel and remove the filler panel.

Keep the removed filler panel secure for future use.

3. Open the ejector levers on the module and slide the module slowly into the slot along the guide rails.

4. Close the ejector levers and make sure the interface module is seated securely in the slot.

5. Use a Phillips screwdriver to fasten the captive screws on the module.

Figure 15 Installing an NSQ1G24XS60 interface module

(Optional) Installing network signal lightning arresters

IMPORTANT:

Before installing a network signal lightning arrester, read the instructions in the document that comes with the arrester.

No network signal lightning arresters are provided with the device. Purchase them yourself as required.

If part of the network cable for a network port is routed from outdoors, use a network signal lightning arrester for the port to protect against damages caused by lightning strikes. First connect the network cable routed from outdoors to the arrester and then connect the network cable from the network port to the arrester.

If multiple network ports have network cables routed outdoors, install a network signal lightning protector for each network port.

(Optional) Installing a power lightning arrester

IMPORTANT:

Before installing a power lightning arrester, read the instructions in the document that comes with the arrester.

No power lightning arrester is provided with the device. Purchase one if required.

If the AC power cord for an AC power module is routed from outdoors, use a power lightning arrester for the device to protect against damages caused by lightning strikes. First connect the AC power line routed from outdoors to the arrester and then connect the power cord from the device to the arrester.

You can use a screw and releasable cable tie to attach the power lightning arrester to the rack, workbench, or wall in the equipment room.

Connecting Ethernet cables

Connecting a copper Ethernet port

The copper Ethernet ports on the device and its interface module are MID/MDIX autosensing. You can use either a straight-through or a cross-over network cable to connect a copper Ethernet port. For more information about Ethernet twisted pair cables, see "Ethernet twisted pair cable."

To connect a copper Ethernet port:

1. Connect one end of the Ethernet cable to the copper Ethernet port of the device, and the other end to the Ethernet port of the peer device.

2. Examine whether the LEDs of the Ethernet port are normal. For more information about LEDs, see "LEDs."

NOTE:

After connecting the device to the network, you can use the ping or tracert command to verify network connectivity. For more information about the commands, see the command reference for the device.

Connecting a fiber port

WARNING!

Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the device is operating.

CAUTION:

· Never bend or curve a fiber excessively. The bend radius of a fiber must be not less than 100 mm (3.94 in).

· Keep the fiber end clean.

· Make sure the fiber connector matches the transceiver module.

· Before connecting a fiber, make sure the optical receive power does not exceed the transceiver module's upper threshold. If the threshold is exceeded, the transceiver module might be damaged.

· Before installing a transceiver module in a fiber port, remove the optical fibers, if any, from the transceiver module.

· To connect a fiber port by using an optical fiber, first install a transceiver module in the port and then connect the optical fiber to the transceiver module.

· Insert a dust cap into any open optical fiber connector and a dust plug into any open fiber port or transceiver module port to protect them from contamination and ESD damage.

· Make sure the Tx and Rx ports on a transceiver module are connected to the Rx and Tx ports on the peer end, respectively.

The device supports GE SFP transceiver modules and 10GE SFP+ transceiver modules. For the transceiver module specifications, see ports in "Appendix A Chassis and FRU views and technical specifications."

No transceiver modules are provided with the device. As a best practice, use H3C transceiver modules for the device.

Figure 16 GE SFP transceiver module

图-1副本

Figure 17 10GE SFP+ transceiver module

To connect a fiber port:

1. Remove the dust plug from the fiber port.

2. Remove the dust cap from the transceiver module and insert it into the fiber port.

3. Remove the dust cap from the optical fiber connector, and use dust free paper and absolute alcohol clean the end face of the fiber connector.

4. Identify the Rx and Tx ports on the transceiver module. Use the optical fiber to connect the Rx port and Tx port on the transceiver module to the Tx port and Rx port on the peer end, respectively.

Figure 18 Connecting an optical fiber

Connecting the power cord

CAUTION:

Before powering on the device, make sure the grounding cable is reliably connected and the power source is powered off.

Connecting the AC power cord

1. Attach the power cord retainer to the power module and pivot the retainer upwards.

2. Connect the AC power cord connector to the AC-input power receptacle on the device.

3. Pivot the power cord retainer down to secure the connector to the power receptacle.

4. Connect the other end of the power cord to an AC power source.

Figure 19 Connecting the AC power cord

Connecting the DC power cord

1. Correctly orient the DC power cord connector and insert the connector into the receptacle.

2. Use a cable tie to secure the DC power cord to the power module handle.

3. Connect the other end of the power cord to a DC power source.

Figure 20 Connecting the DC power cord

Verifying the installation

Verify the following items to ensure correct installation:

· There is enough space around the device for heat dissipation.

· The device and its components are installed securely. The screws are fastened tightly.

· The power source specifications are as required by the device.

· The grounding cable, console cable, power cords, and interface cables are connected correctly.

Accessing the device for the first time

Setting up the configuration environment

To access the device for the first time, you can log in to the device from the console port or Web interface. To set up the configuration environment, see "Logging in from the console port" and "Logging in from the Web interface," respectively.

Powering on the device

Checking before power-on

WARNING!

Locate the emergency power-off switch in the room before powering on the device so you can quickly shut power off when an electrical accident occurs.

Before powering on the device, verify the following information:

· The power cord and grounding cable are correctly connected.

· The power source specifications meet the device requirements.

· The console cable is correctly connected, the terminal or PC used for configuration has started, and the configuration parameters have been correctly set.

· The interface module (if any) is installed correctly.

Powering on the device

Switch on the power source of the device.

Checking after power-on

After powering on the device, verify that:

· The LEDs on the front panel indicate that the device is operating correctly. For more information about LEDs, see "Appendix D LEDs."

· The fan blades are rotating and air is exhausted from the air outlet vents.

· The configuration terminal displays the following:

System is starting...

Press Ctrl+D to access BASIC-BOOTWARE MENU...

Press Ctrl+T to start heavy memory test

Booting Normal Extended BootWare

The Extended BootWare is self-decompressing......Done.

****************************************************************************

* *

* H3C SecPath BootWare, Version 2.01 *

* *

****************************************************************************

Compiled Date : Sep 2 2013

CPU Type : XLP432

CPU Clock Speed : 1400MHz

Memory Type : DDR3 SDRAM

Memory Size : 16384MB

Memory Speed : 1333MHz

BootWare Size : 768KB

Flash Size : 8MB

cfa0 Size : 4090MB

CPLD_A Version : 1.0

CPLD_B Version : 2.0

PCB Version : Ver.A

BootWare Validating...

Backup Extended BootWare is newer than Normal Extended BootWare,updating?

[Y/N]

Press Ctrl+B to access EXTENDED-BOOTWARE MENU...

Loading the main image files...

Loading file cfa0:/blade3fw-cmw710-system-A8203.bin.............................

...............................................................................

.............Done.

Loading file cfa0:/blade3fw-cmw710-boot-A8203.bin...........................

...............Done.

Image file cfa0:/blade3fw-cmw710-boot-A8203.bin is self-decompressing.......

......................................................Done.

Line con0 is available.

Press ENTER to get started..

…

Press ENTER to access user view of the device.

NOTE:

To access the EXTENDED-BOOTWARE menu, press Ctrl + B immediately when the "Press Ctrl+B to access EXTENDED-BOOTWARE MENU" message displays. If you do not press Ctrl+B at the prompt, the system starts to read and decompress program files. To enter the EXTENDED-BOOT menu afterwards, you need to reboot the device.

Logging in to the device

For more information about accessing the device, see the configuration guides and command references for the device.

Logging in from the console port

You can use the console port to access the device for the first time. The default console port login information is as follows:

· Authentication method—scheme

· Username—admin

· Password—admin

To access the device from the console port:

1. Use a console cable to connect the console port on the device to a configuration terminal, for example, a PC.

2. Run a terminal emulator program, TeraTermPro or PuTTY, on your configuration terminal.

For more information about the terminal emulator programs, see the user guides for these programs.

3. Configure the terminal settings as follows:

¡ Bits per second—9,600.

¡ Data bits—8.

¡ Stop bits—1.

¡ Parity—None.

¡ Flow control—None.

Logging in from the Web interface

IMPORTANT:

After accessing the Web interface with the default account, modify the password of the default account or create a new administrator account and delete the default account as a best practice.

At the first login from the Web interface, you can use the default account or use an account created from the CLI.

The default Web interface login information is as follows:

· Username—admin

· Password—admin

· IP address of GigabitEthernet 1/0/0—192.168.0.1/24

To log in to the device from the Web interface by using the default account:

1. Use an Ethernet cable to connect a PC to Ethernet management port GigabitEthernet 1/0/0 on the device.

2. Configure an IP address in subnet 192.168.0.0/24 for the PC. Make sure the PC and the device are reachable to reach other.

The PC must use a different IP address than GigabitEthernet 1/0/0.

3. Start a browser, enter 192.168.0.1 in the address bar, and press Enter.

4. Enter the default username admin and password admin and then click Login.

Logging in through Telnet

1. Log in to the device through the console port, and enable the Telnet function in system view by using the telnet server enable command.

2. Enter VTY user line view, and configure the authentication mode, user role, and common properties.

By default, the authentication mode is scheme, the username is admin, and the password is admin.

3. Specify an IP address for the PC. Make sure the PC and the device are reachable to each other.

By default, the IP address of GigabitEthernet 1/0/0 on the device is 192.168.0.1/24.

4. Run the Telnet client on the PC and enter the login information.

Hardware replacement

CAUTION:

Wear an ESD wrist strap or ESD gloves for hardware maintenance. The device is not provided with an ESD wrist strap or ESD gloves. Prepare them yourself.

Replacing a power module

WARNING!

Before you remove a power module, turn off the switch on the power module and remove the power cord from the power module.

The replacement procedure is the same for AC and DC power modules. The following procedure replaces an AC power module

To replace a power module:

1. Face the rear panel of the device.

2. Use a Phillips screwdriver to loosen the captive screw on the power module.

3. Holding the power module handle with one hand and supporting the module bottom with the other, gently pull the power module out of the slot along the slide rails.

Figure 21 Removing a power module

4. Put the removed power module on a workbench or into an antistatic bag.

5. Install a new power module. For the power module installation procedure, see "Installing a power module."

Replacing the interface module

CAUTION:

The NSQ1G24XS60 interface module is not hot swappable. Power off the device before replacing the interface module.

To replace the interface module:

1. Power off the device.

2. Use a Phillips screwdriver to loosen the captive screws on the interface module.

3. Open the ejector levers of the interface module. Pull the module part way out of the slot along the guide rails.

4. Supporting the bottom of the module with one hand, use the other hand to gently pull the module out of the slot.

5. Put the removed interface module on an antistatic workbench or into an antistatic bag, with its component side facing up.

6. If you do not install a new interface module, install a filler panel in the interface module slot.

Figure 22 Removing an NSQ1G24XS60 interface module

(1) Loosen the captive screws	(2) Open the ejector levers
(3) Pull the module out of the slot

Replacing a transceiver module

WARNING!

Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the device is operating.

CAUTION:

· Do not touch the golden plating on a transceiver module during the replacement process.

· Make sure the new transceiver module and the transceiver module at the other end of the optical fiber have the same specifications.

Figure 23 Golden plating

To replace a transceiver module:

1. Use the shutdown command in interface view at the CLI to shut down the port.

2. Remove the LC connectors of the optical fiber from the transceiver module.

Install dust caps for the LC connectors to prevent contamination and ESD damage.

3. Pivot the clasp of the transceiver module down to the horizontal position, and then gently pull the transceiver module out.

Figure 24 Removing a transceiver module

4. Install dust caps for the removed transceiver module, and then put it into the package.

5. Install a new transceiver module. For the installation procedure, see "Connecting a fiber port."

Replacing the fan tray

WARNING!

The fan tray blades will keep rotating at a high speed for a while after being removed from the operating device. To avoid bodily injury, do not touch the rotating fan tray blades.

CAUTION:

· To avoid device failure caused by insufficient cooling, do not leave the device operating without a fan tray for more than 2 minutes.

· Place the removed fan tray in an ESD bag to protect it from ESD damage.

The device supports automatic fan speed adjustment and hot swapping of the fan tray.

To replace the fan tray:

1. Face the rear of the device.

2. Use a Phillips screwdriver to loosen the captive screws on the fan tray.

3. Grasping the fan tray handle with one hand and supporting the fan tray bottom with the other, pull the fan tray slowly out of the slot along the guide rails.

Figure 25 Removing the fan tray

4. Install a new fan tray. Grasping the fan tray handle with one hand and supporting the fan tray bottom with the other, push the fan tray slowly into the slot along the guide rails. Make sure the fan tray is seated securely in the slot.

5. Use a Phillips screwdriver to fasten the captive screws on the fan tray.

Hardware management and maintenance

The command output varies by software version. For more information about the commands, see the configuration guides and command references of the version running on the device.

Displaying detailed information about the device

Use the display device verbose command to display detailed information, including the running status and hardware version, about the device and its interface module.

<Sysname> display device verbose

Slot 1 info:

Status : Normal

Type : RPU

PCB 1 Ver : VER.A

Software Ver : 1.0

CPLD_A : 1.0

CPLD_B : 2.0

CPLD_C : 2.0

CFCard Num : 1

Displaying the software and hardware version information for the device

Use the display version command to display software and hardware version information for the device.

<Sysname> display version

H3C Comware Software, Version 7.1.052, Alpha 8203

H3C SecPath F5020 uptime is 0 weeks, 0 days, 0 hours, 5 minutes

Last reboot reason: User reboot

Boot image: cfa0:/blade3fw-cmw710-boot-A8203.bin

Boot image version: 7.1.052, Alpha 8203

Compiled Feb 26 2014 19:27:26

System image: cfa0:/blade3fw-cmw710-system-A8203.bin

System image version: 7.1.052, Alpha 8203

Compiled Feb 26 2014 19:27:26

SLOT 1

CPU type: Multi-core CPU

DDR3 SDRAM Memory 16382M bytes

CF0 Card 4090M bytes

Board PCB Version:Ver.A

CF SubCard PCB Version:Ver.A

CPLD_A Version: 1.0

CPLD_B Version: 2.0

Basic BootWare Version: 2.01

Extend BootWare Version: 2.01

Displaying the electrical label information for the device

Use the display device manuinfo command to display the electrical label information for the device.

<Sysname> display device manuinfo

Slot 1 CPU 0:

DEVICE_NAME : SecPath F5020

DEVICE_SERIAL_NUMBER : 210235A1CD0000022222

MAC_ADDRESS : 2222-5555-4444

MANUFACTURING_DATE : 2014-03-21

VENDOR_NAME : H3C

Table 6 Output description

Field	Description
DEVICE_NAME	Device name.
DEVICE_SERIAL_NUMBER	Device serial number.
MAC_ADDRESS	MAC address of the device.
MANUFACTURING_DATE	Manufacturing date of the device.
VENDOR_NAME	Vendor name.

Displaying the CPU usage of the device

Use the display cpu-usage command to display the CPU usage of the device.

<Sysname> display cpu-usage

Slot 1 CPU 0 CPU usage:

3% in last 5 seconds

3% in last 1 minute

3% in last 5 minutes

Table 7 Output description

Field	Description
Slot 1 CPU 0 CPU usage	CPU 0 usage information for the interface module in slot 1.
3% in last 5 seconds	Average CPU usage in the last 5 seconds. (After the device boots, the device calculates and records the average CPU usage at the interval of 5 seconds.)
3% in last 1 minute	Average CPU usage in the last minute. (After the device boots, the device calculates and records the average CPU usage at the interval of 1 minute.)
3% in last 5 minutes	Average CPU usage in the last 5 minutes. (After the device boots, the device calculates and records the average CPU usage at the interval of 5 minutes.)

Displaying the memory usage of the device

Use the display memory command to display the memory information of the device.

<Sysname> display memory

The statistics about memory is measured in KB:

Slot 1:

Total Used Free Shared Buffers Cached FreeRatio

Mem: 15091520 2862976 12228544 0 960 216576 81.0%

-/+ Buffers/Cache: 2645440 12446080

Swap: 0 0 0

Table 8 Output description

Field	Description
Slot	Slot number of the interface module
Mem	Memory usage information.
Total	Total size of the physical memory space that can be allocated. The memory space is virtually divided into two parts. Part 1 is used for kernel codes, kernel management, and ISSU functions. Part 2 can be allocated and used for such tasks as running service modules and storing files. The size of part 2 equals the total size minus the size of part 1.
Used	Used physical memory.
Free	Free physical memory.
Shared	Physical memory shared by processes.
Buffers	Physical memory used for buffers.
Cached	Physical memory used for caches.
FreeRatio	Free memory ratio.
-/+ Buffers/Cache	-/+ Buffers/Cache:used = Mem:Used – Mem:Buffers – Mem:Cached, which indicates the physical memory used by applications. -/+ Buffers/Cache:free = Mem:Free + Mem:Buffers + Mem:Cached, which indicates the physical memory available for applications.
Swap	Swap memory.

Displaying the CF card information

Use the display device cf-card command to display the CF card information.

<Sysname> display device cf-card

1 0 0 Normal 4090

Table 9 Output description

Field	Description
1	Slot number of the CF card.
0	CF card number.
0	Subslot number. Its value is 0.
Normal	Operational status of the CF card: · Absent—No CF card is present in the slot. · Fault—The CF card has failed. · Normal—The CF card is operating correctly.
4090	Storage capacity of the CF card, in MB.

Displaying the operational status of fans

Use the display fan command to display the operational status of fans.

<Sysname> display fan

Fan 0 Status: Normal Speed:2377

Fan 1 Status: Normal Speed:2232

Fan 2 Status: Normal Speed:3051

Fan 3 Status: Normal Speed:3103

Table 10 Output description

Field	Description
Fan	Number of the fan.
Status	Fan state: · Normal—The fan is operating correctly. · Absent—The fan is not in position. · Abnormal—The fan has failed.

Field

Description

Fan

Number of the fan.

Status

Fan state:

· Normal—The fan is operating correctly.

· Absent—The fan is not in position.

· Abnormal—The fan has failed.

Displaying the operational status of power modules

Use the display power command to display the operational status of power modules.

<Sysname> display power

Power 0 Status: Normal

Power 1 Status: Absent

Table 11 Output description

Field	Description
Power	Number of the power module.
Status	Power module state: · Normal—The power module is operating correctly. · Absent—The power module is not in position. · Abnormal—The power module has failed.

Field

Description

Power

Number of the power module.

Status

Power module state:

· Normal—The power module is operating correctly.

· Absent—The power module is not in position.

· Abnormal—The power module has failed.

Displaying the temperature information of the device

Use the display environment command to display the temperature information of the device.

<Sysname> display environment

System Temperature information (degree centigrade):

--------------------------------------------------------------------------------

---------

Sensor Temperature LowerLimit Warning-UpperLimit Alarm-UpperLimit Shutdown-U

pperLimit

inflow 1 27 0 60 70 NA

outflow 2 46 0 80 92 NA

Table 12 Output description

Field	Description
Sensor	Temperature sensor: · inflow—Air inlet vent temperature sensor. · outflow—Air outlet vent temperature sensor.
Temperature	Current temperature.
LowerLimit	Low temperature alarm threshold.
Warning-UpperLimit	Warning-level high temperature alarm threshold.
Alarm-UpperLimit	Alarm-level high temperature alarm threshold.
Shutdown-U	Shutdown-level high temperature alarm threshold. The device automatically powers off when the temperature exceeds this threshold.

Displaying the operational statistics of the device

When you perform routine maintenance or the system fails, you might need to view the operational information of each functional module for locating failures. Typically you need to run display commands one by one. To collect more information one time, you can execute the display diagnostic-information command in any view to display or save the operational statistics of multiple functional modules of the device.

· Save the operational statistics of each functional module of the device:

<Sysname> display diagnostic-information

Save or display diagnostic information (Y=save, N=display)? [Y/N]:y

Please input the file name(*.gz)[cfa0:/diag.gz]:

Diagnostic information is outputting to cfa0:/diag.gz.

Please wait...

Save successfully.

To view the diag.gz file:

a. Execute the gunzip diag.gz command in use view to decompress the file.

b. Execute the more default.diag command.

c. Press the Page Up and Page Down keys.

· Display the operational statistics for each functional module of the device:

<Sysname> display diagnostic-information

<Sysname>display diagnostic-information

Save or display diagnostic information (Y=save, N=display)? [Y/N]:n

===============================================

===============display clock===============

10:07:20 UTC Thu 04/24/2014

=================================================

===============display version===============

H3C Comware Software, Version 7.1.052, Alpha 8203

H3C SecPath F5020 uptime is 0 weeks, 0 days, 1 hour, 31 minutes

Last reboot reason: User reboot

Boot image: cfa0:/blade3fw-cmw710-boot-A8203.bin

Boot image version: 7.1.052, Alpha 8203

Compiled Feb 26 2014 19:27:26

System image: cfa0:/blade3fw-cmw710-system-A8203.bin

System image version: 7.1.052, Alpha 8203

Compiled Feb 26 2014 19:27:26

…

Displaying transceiver module information

Identifying transceiver modules

To identify transceiver modules, you can use the following command to view the key parameters of the transceiver modules, including transceiver module type, connector type, central wavelength of the laser sent, transmission distance, and vendor name or name of the vendor who customizes the transceiver modules.

To display transceiver module information, execute the display transceiver interface [ interface-type interface-number ] command.

Troubleshooting transceiver modules

The system outputs alarm information for you to locate and troubleshoot faults of transceiver modules.

To display the alarm information about transceiver modules, execute the display transceiver alarm interface [ interface-type interface-number ] command.

Rebooting the device

CAUTION:

· If the main system software image file does not exist, do not use the reboot command to reboot the device. Specify the main system software image file first, and then reboot the device.

· The precision of the rebooting timer is 1 minute. 1 minute before the rebooting time, the device prompts "REBOOT IN ONE MINUTE" and reboots in one minute.

· If you are performing file operations when the device is to be rebooted, the system does not execute the reboot command for security.

To reboot a device, use one of the following methods:

· Use the reboot command to reboot the device immediately.

· Schedule a reboot to occur at a specific time or date or after a delay by using the schedule reboot command.

· Power cycle the device. This method cuts off the power of the device forcibly, which might cause data loss or hardware damage. It is the least-preferred method.

To reboot the device immediately:

Task	Command	Remarks
Reboot the device immediately.	reboot	Available in user view.

To schedule a reboot:

Task	Command	Remarks
Schedule a reboot to occur at a specific time or date.	scheduler reboot at	Use either command. By default, no reboot date or time or reboot delay time is specified. Available in user view.
Schedule a reboot to occur after a delay.	scheduler reboot delay

Task

Command

Remarks

Schedule a reboot to occur at a specific time or date.

scheduler reboot at

Use either command.

By default, no reboot date or time or reboot delay time is specified.

Available in user view.

Schedule a reboot to occur after a delay.

scheduler reboot delay

Troubleshooting

Power module failure

Symptom

The power module LED PWR1/PWR2 on the front panel is off.

Solution

To resolve the issue:

1. Power off the device.

2. Verify that the power source meets the power module requirements.

3. Verify that the power cord is connected securely.

4. Verify that the power cord is in good condition.

5. If the issue persists, contact H3C Support.

Fan tray failure

Symptom

After the device is booted, the following information is displayed on the configuration terminal:

%Jun 22 16:11:37:485 2014 H3C DEV/4/FAN FAILED:

Fan 1 failed.

The output indicates a fan tray failure.

Solution

To resolve the issue:

1. Verify that a fan tray is installed in the fan tray slot.

2. Verify that the fan tray is in firm contact with the backplane.

3. If the issue persists, contact H3C Support.

Configuration terminal display issue

Symptom

The configuration terminal displays nothing or garbled text when the device is powered on.

Solution

To resolve the issue:

1. Verify that the power supply system is operating correctly.

2. Verify that the console cable is connected correctly to the serial port configured on the configuration terminal.

3. Verify that the configuration terminal parameters are configured correctly.

¡ Baud rate—9600.

¡ Data bits—8.

¡ Parity—None.

¡ Stop bits—1.

¡ Flow control—None.

¡ Terminal emulation—VT100.

4. Verify that the console cable is in good condition.

5. If the issue persists, contact H3C Support.

Password loss

For more information about dealing with the console port password loss, see the release notes for the device.

High operating temperature

Symptom

The temperature of the device is higher than the normal operating temperature (45°C or 113°F).

Solution

To resolve the issue:

1. Verify that the fan tray is operating correctly.

2. Verify that the operating environment is well ventilated.

3. If the temperature of the device exceeds 60°C (140°F), the following alarm information is displayed on the configuration terminal:

%Jun 27 11:34:39:949 2013 H3C DRVMSG/3/Temp2High:Temperature Point 0/0 Too High.

%Jun 27 11:34:42:557 2013 H3C DEV/4/BOARD TEMP TOOHIGH:

Board temperature is too high on Chassis 0 Slot 0, type is RPU.

Use the display environment command to examine whether the temperature of the device keeps rising. If the temperature exceeds 90°C (194°F), power off the device immediately and contact H3C Support.

4. If the issue persists, contact H3C Support.

Software loading failure

Symptom

Software loading fails and the system continues running the previous software version.

Solution

To resolve the issue:

1. Verify that the physical port is connected securely. If the port is not connected securely, reconnect the port and make sure the connection is correct.

2. Verify that the parameters are configured correctly. You can examine the software loading process displayed on the HyperTerminal for configuration errors. For example:

¡ Xmodem—The console port baud rate is set to a value other than 9600 bps, but the baud rate of the HyperTerminal is not set to 9600 bps simultaneously.

¡ TFTP— An incorrect IP address, software name, or TFTP serve path is configured.

¡ FTP— An incorrect IP address, software name, username, or password is configured.

3. If the issue persists, contact H3C Support.

Appendix A Chassis views and technical specifications

Chassis views

Front view

On the front panel, the device provides the following ports:

· Twelve 10/100/1000BASE-T autosensing copper Ethernet ports

· Twelve 1000BASE-X fiber Ethernet ports

· Four 10GBASE-R fiber Ethernet ports

· One USB port

· One console port

Figure 26 Front view

(1) 10/100/1000BASE-T copper Ethernet ports	(2) 1000BASE-X fiber Ethernet ports
(3) 10GBASE-R fiber Ethernet ports	(4) Console port (CONSOLE)
(5) USB port	(6) LEDs
(7) Interface module slot

Rear view

Figure 27 Rear view

(1) Fan tray	(2) Power module slot 1
(3) Power module slot 2	(4) Grounding screw

Technical specifications

Dimensions and weights

Table 13 Dimensions and weights

Item	Specification
Dimensions (H × W × D), excluding rubber feet and mounting brackets	88.1 × 440 × 443.1 mm (3.47 × 17.32 × 17.44 in)
Weight (full configuration)	15.7 kg (34.61 lb)

Storage media

Table 14 Storage media specifications

Item	Specification
Flash	8 MB Nor Flash
Memory type and capacity	DDR3 SDRAM: · F5040—32 GB (4DIMM) · F5010/F5020—16 GB (2DIMM)
CF card	Standard configuration: 4G Not replaceable

Power consumption

Table 15 Power consumption

Item	Specification
System power consumption	260 W
Fan tray power consumption	45 W
NSQ1G24XS60 interface module power consumption	65 W

Appendix B FRUs

Interface module

The NSQ1G24XS60 interface module is available for the device. It provides the following ports:

· Twelve 10/100/1000BASE-T copper Ethernet ports

· Twelve 1000BASE-X fiber Ethernet ports

· Six 10GBASE-R fiber Ethernet ports

Figure 28 Front panel

(1) 10/100/1000BASE-T copper Ethernet ports 0 to 11
(2) 1000BASE-X fiber Ethernet ports 12 to 23
(3) 10BASE-R fiber Ethernet ports 24 to 29
(4) Ejector lever	(5) Captive screw

Power module

The device provides two power module slots (PWR1 and PWR2) and comes with a filler panel installed in the PWR2 slot.

The device supports AC and DC power modules. It supports hot swapping of power modules and 1+1 power module redundancy. To install two power modules for the device, make sure they are the same model.

No power modules are shipped with the device. Purchase AC or DC power modules yourself as required.

AC power module

The PSR300-12A2 AC power module is available for the device. It provides a maximum output of 300 W.

Figure 29 PSR300-12A2 AC power module

(1) Power switch	(2) Handle
(3) Power receptacle

Table 16 PSR300-12A2 AC power module specifications

Item	Specification
Rated input voltage range	100 VAC to 240 VAC @ 50 Hz or 60 Hz
Maximum input current	4 A
Maximum power	300 W

DC power module

The PSR300-12D2 DC power module is available for the device. It provides a maximum output of 300 W.

Figure 30 PSR300-12D2 DC power module

(1) Power switch	(2) Handle
(3) Power receptacle

Table 17 PSR300-12D2 DC power module specifications

Item	Specification
Rated input voltage range	–48 VDC to –60 VDC
Maximum input current	10 A
Maximum power	300 W

Fan tray

CAUTION:

To avoid device failure caused by insufficient cooling, do not leave the device operating without a fan tray for more than 2 minutes.

The RT-FANF fan tray is available for the device.

Table 18 RT-FANF fan tray specifications

Item	Specification
Automatic fan speed adjustment	Supported
Misplug prevention	Supported
Hot swapping	Supported
Noise level	49.7 dBA
Heat dissipation	300 CFM

Appendix C Ports

Table 19 lists the fixed ports and slots on the device.

Table 19 Ports and slots

Item	Description
Console port	1, 9600 bps (default) to 115200 bps
USB port	1 (Host mode, Type A)
Ethernet port	· Twelve GE copper Ethernet ports · Twelve GE fiber Ethernet ports · Four 10GE fiber Ethernet ports
CF card slot	1
Interface module slot	1, support for the NSQ1G24XS60 interface module

Console port

Table 20 Console port specifications

Item	Specification
Connector	RJ-45
Standard compliant	RS-232
Baud rate	9600 bps (default) to 115200 bps
Cable type	Common asynchronous serial port cable
Transmission distance	≤ 15 m (49.21 ft)
Services	· Connection to an ASCII terminal · Connection to the serial port of a local PC to run the terminal emulation program · CLI

GE copper Ethernet port

The device provides twelve 10/100/1000BASE-T copper Ethernet ports.

Table 21 GE copper Ethernet port specifications

Item	Specification
Connector	RJ-45
Standard compliance	802.3, 802.3u, and 802.3ab
Interface type	MDI/MDI-X autosensing
Cable type	Category 5 or higher twisted pair cable
Transmission distance	100 m (328.08 ft)
Interface speed and duplex mode	10 Mbps, half/full-duplex 100 Mbps, half/full-duplex 1000 Mbps, full-duplex

NOTE:

The Ethernet ports on network adapters are typically media dependent interface (MDI) ports. The ports on hubs or LAN switches are typically MDIX ports.

GE fiber Ethernet port

The device provides twelve 1000BASE-X fiber Ethernet ports.

Table 22 Fiber Ethernet port specifications

Item	Specification
Connector type	LC
Transceiver module type	SFP transceiver module. See Table 23 for the available SFP transceiver modules.
Standard compliance	1000BASE-X
Interface speed	1000 Mbps
Duplex mode	Full duplex

Table 23 1000BASE-X SFP transceiver modules available for the 1000BASE-X fiber ports

Transceiver module	Central wavelength	Connector	Fiber	Max transmission distance
SFP-GE-SX-MM850-A	850 nm	LC	62.5/125 µm, MMF	0.55 km (1804.46 ft)
SFP-GE-LX-SM1310-A	1310 nm	LC	9/125 µm, SMF	10 km (6.21 miles)
SFP-GE-LH40-SM1310	1310 nm	LC	9/125 µm, SMF	40 km (24.86 miles)
SFP-GE-LH40-SM1550	1550 nm	LC	9/125 µm, SMF	40 km (24.86 miles)
SFP-GE-LH80-SM1550	1550 nm	LC	9/125 µm, SMF	80 km (49.71 miles)
SFP-GE-LH100-SM1550	1550 nm	LC	9/125 µm, SMF	100 km (62.14 miles)

10GE fiber Ethernet port

The device provides four 10GBASE-R SFP+ fiber Ethernet ports. These SFP+ ports cannot operate in 1000 Mbps.

Table 24 10GE fiber port specifications

Item	Specification
Connector type	LC
Transceiver module type	SFP+ transceiver module. See Table 25 for the available SFP+ transceiver modules.
Standard compliance	10GBASE-R
Interface speed	LAN PHY: 10.3125 Gbps

Table 25 SFP+ transceiver modules available for the 10GBASE-R SFP+ fiber Ethernet ports

Transceiver module	Central wavelength	Connector	Fiber	Max transmission distance
SFP-XG-SX-MM850-A	850 nm	LC	50/125 µm, MMF	300 m (984.3 ft)
			62.5/125 µm, MMF	82 m (269.03 ft)
			62.5/125 µm, MMF	66 m (216.54 ft)
SFP-XG-LX220-MM1310	1310 nm	LC	62.5/125 µm, MMF	220 m (721.78 ft)
			50/125 µm, MMF	220 m (721.78 ft)
			50/125 µm, MMF	100 m (328.08 ft)
SFP-XG-LX-SM1310	1310 nm	LC	9/125 µm, SMF	10 km (6.21 miles)
SFP-XG-LH40-SM1550	1550 nm	LC	9/125 µm, SMF	40 km (24.86 miles)

Appendix D LEDs

Device LEDs

Table 26 Device LED description

LED	Mark	Status	Description
System status LED	SYS	Off	The device is not powered up or is faulty.
		Slow flashing green	The device is operating correctly.
		Fast flashing green	The device is loading software.
Fan tray status LED	FAN	Off	No power input or the fan tray is not present.
Fan tray status LED	FAN	Steady green	The fan tray is operating correctly.
Interface module LED	SLOT	Off	The interface module is not present or is faulty.
Interface module LED	SLOT	Steady green	The interface module is operating correctly.
Power module LED	PWR2 PWR1	Off	The power module is not present or is faulty.
Power module LED	PWR2 PWR1	Steady green	The power module is operating correctly.
Copper Ethernet port LED	10/100/1000BASE-T	Off	No link is present.
		Steady green	A link is present.
		Flashing green	The port is receiving and sending data.
Fiber Ethernet port LED	1000BASE-X	Off	No link is present.
		Steady green	A 1000 Mbps link is present.
		Flashing green	The port is receiving and sending data at 1000 Mbps.
	10GBASE-R	Off	No link is present.
		Steady green	A 10 Gbps link is present.
		Flashing green	The port is receiving and sending data at 10 Gbps.

Interface module LEDs

Table 27 Interface module LED description

LED	Mark	Status	Description
Copper Ethernet port LED	10/100/1000BASE-T	Off	No link is present.
		Steady green	A link is present.
		Flashing green	The port is receiving and sending data.
Fiber Ethernet port LED	1000BASE-X	Off	No link is present.
		Steady green	A 1000 Mbps link is present.
		Flashing green	The port is receiving and sending data at 1000 Mbps.
	10GBASE-R	Off	No link is present.
		Steady green	A 10 Gbps link is present.
		Flashing green	The port is receiving and sending data at 10 Gbps.

Appendix E Cables

Console cable

A console cable is an 8-core shielded cable, with a crimped RJ-45 connector at one end for connecting to the console port of the switch, and a DB-9 female connector at the other end for connecting to the serial port on the console terminal.

Figure 31 Console cable

Table 28 Console cable connection

RJ-45	Signal	Direction	DB-9
1	RTS	←	7
2	DTR	←	4
3	TXD	←	3
4	CD	→	1
5	GND	-	5
6	RXD	→	2
7	DSR	→	6
8	CTS	→	8

Ethernet twisted pair cable

Introduction

An Ethernet twisted pair cable consists of four pairs of insulated copper wires twisted together. Every wire uses a different color, and has a diameter of about 1 mm (0.04 in). A pair of twisted copper cables can cancel the electromagnetic radiation of each other, and reduce interference of external sources. An Ethernet twisted pair cable mainly transmits analog signals and is advantageous in transmitting data over shorter distances. It is the commonly used transmission media of the Ethernet. The maximum transmission distance of the Ethernet twisted pair cable is 100 m (328.08 ft). To extend the transmission distance, you can connect two twisted pair cable segments with a repeater. At most four repeaters can be added, which means five segments can be joined together to provide a transmission distance of 500 m (1640.42 ft).

Ethernet twisted pair cables can be classified into category 3, category 4, category 5, category 5e, category 6, and category 7 cables based on performance. In LANs, category 5, category 5e, and category 6 are commonly used.

Table 29 Description for commonly used Ethernet twisted pair cables

Type	Description
Category 5	Suitable for data transmission at a maximum speed of 100 Mbps
Category 5e	Suitable for data transmission at a maximum speed of 1000 Mbps
Category 6	Suitable for data transmission at a speed higher than 1 Gbps

Based on whether a metal shielding is used, Ethernet twisted pair cables can be classified into shielded twisted pair (STP) and unshielded twisted pair (UTP). An STP cable provides a metallic braid between the twisted pairs and the outer jacket. This metallic braid helps reduce radiation, prevent information from being listened, and eliminate external electromagnetic interference (EMI) of external sources. STPs have strict application requirements and are expensive although they provide better EMI prevention performance than UTPs, so in most LANs, UTPs are commonly used.

An Ethernet twisted pair cable connects network devices through the RJ-45 connectors at the two ends. Figure 32 shows the pinouts of an RJ-45 connector.

Figure 32 RJ-45 connector pinout

NOTE:

The RJ-45 Ethernet ports of the firewall use category 5 or higher Ethernet twisted pair cables for connection.

EIA/TIA cabling specifications define two standards, 568A and 568B, for cable pinouts.

· Standard 568A—pin 1: white/green stripe, pin 2: green solid, pin 3: white/orange stripe, pin 4: blue solid, pin 5: white/blue stripe, pin 6: orange solid, pin 7: white/brown stripe, pin 8: brown solid.

· Standard 568B—pin 1: white/orange stripe, pin 2: orange solid, pin 3: white/green stripe, pin 4: blue solid, pin 5: white/blue stripe, pin 6: green solid, pin 7: white/brown stripe, pin 8: brown solid.

Ethernet twisted pair cables can be classified into straight-through and crossover cables based on their pinouts.

· Straight-through—The pinouts at both ends are T568B compliant, as shown in Figure 33.

· Crossover—The pinouts are T568B compliant at one end and T568A compliant at the other end, as shown in Figure 34.

Figure 33 Straight-through cable

Figure 34 Crossover cable

Select an Ethernet twisted pair cable according to the RJ-45 Ethernet port type on your device. An RJ-45 Ethernet port can be MDI (for routers and PCs) or MDIX (for switches). Table 30 and Table 31 show their pinouts.

Table 30 RJ-45 MDI port pinouts

- Pin	10BASE-T/100BASE-TX		1000BASE-T
- Pin	Signal	Function	Signal	Function
1	Tx+	Sends data	BIDA+	Bi-directional data cable A+
2	Tx-	Sends data	BIDA-	Bi-directional data cable A-
3	Rx+	Receives data	BIDB+	Bi-directional data cable B+
4	Reserved	N/A	BIDC+	Bi-directional data cable C+
5	Reserved	N/A	BIDC-	Bi-directional data cable C-
6	Rx-	Receives data	BIDB-	Bi-directional data cable B-
7	Reserved	N/A	BIDD+	Bi-directional data cable D+
8	Reserved	N/A	BIDD-	Bi-directional data cable D-

Table 31 RJ-45 MDIX port pinouts

Pin	10BASE-T/100BASE-TX		1000BASE-T
Pin	Signal	Function	Signal	Function
1	Rx+	Receives data	BIDB+	Bi-directional data cable B+
2	Rx-	Receives data	BIDB-	Bi-directional data cable B-
3	Tx+	Sends data	BIDA+	Bi-directional data cable A+
4	Reserved	N/A	BIDD+	Bi-directional data cable D+
5	Reserved	N/A	BIDD-	Bi-directional data cable D-
6	Tx-	Sends data	BIDA-	Bi-directional data cable A-
7	Reserved	N/A	BIDC+	Bi-directional data cable C+
8	Reserved	N/A	BIDC-	Bi-directional data cable C-

To ensure normal communication, the pins for sending data on one port must correspond to the pins for receiving data on the peer port. When both of the ports on the two devices are MDI or MDIX, use a crossover Ethernet cable; when one port is MDI and the other is MDIX, use a straight-through Ethernet cable. To summarize, straight-through and crossover cables connect the following devices:

· Straight-through cables connect devices of different types—for example, router to PC and router to switch.

· Crossover cables connect devices of the same type—for example, switch to switch, router to router, and PC to PC.

If an RJ-45 Ethernet port is enabled with MDI/MDIX autosensing, it can automatically negotiate pin roles.

NOTE:

The RJ-45 Ethernet ports on the firewall support MDI/MDIX autosensing.

Making an Ethernet twisted pair cable

1. Cut the cable to a required length with the crimping pliers.

2. Strip off an appropriate length of the cable sheath. The length is typically that of the RJ-45 connector.

3. Untwist the pairs so that they can lay flat, and arrange the colored wires based on the wiring specifications.

4. Cut the top of the wires even with one another. Insert the wires into the RJ-45 end and make sure the wires extend to the front of the RJ-45 end and make good contact with the metal contacts in the RJ-45 end and in the correct order.

5. Crimp the RJ-45 connector with the crimping pliers until you hear a click.

6. Use a cable tester to verify the connectivity of the cable.

Optical fiber

Optical fibers feature low loss and long transmission distance.

Optical fibers can be classified into single mode fibers and multi-mode fibers. A single mode fiber (with yellow jacket) carries only a single ray of light; a multi-mode fiber (with orange jacket) carries multiple modes of lights.

Table 32 Characteristics of single mode and multi-mode optical fibers

Item	Single mode fiber	Multi-mode fiber
Core	Small core (10 micrometers or less)	Larger core than single mode fiber (50 micrometers, 62.5 micrometers or greater)
Dispersion	Less dispersion	Allows greater dispersion and therefore, signal loss exists.
Light source and transmission distance	Uses lasers as the light source often within campus backbones for distance of several thousand meters	Uses LEDs as the light source often within LANs or distances of a couple hundred meters within a campus network

Table 33 Allowed maximum tensile force and crush load

Period of force	Tensile load (N)	Crush load (N/mm)
Short period	150	500
Long term	80	100

Fiber connectors are indispensable passive components in an optical fiber communication system. They allow the removable connection between optical channels, which makes the optical system debugging and maintenance more convenient. There are multiple types of fiber connectors. Figure 35 shows an LC connector.

Figure 35 Appearance of an LC connector

LC连接器外观

Follow these guidelines when you connect an optical fiber:

· Before connecting an optical fiber, make sure the connector and cable type match the hot swappable interface module.

· The fiber Ethernet port of the firewall supports only the LC connector.

· Fiber connectors are fitted with dust caps. Keep the dust caps secure when the fiber connectors are in use. Install dust caps when the fiber connectors are not in use to avoid damage to their end face. Replace the dust cap if it is loose or polluted.

· Before connecting an optical fiber, use dust free paper and absolute alcohol to clean the end face of the two fiber connectors. You can brush the end faces only in one direction.

· Never bend or curve a fiber when connecting it.

· If the fiber has to pass through a metallic board hole, when passing through a metallic board hole or bending along the acute side of mechanical parts, the fiber must wear jackets or cushions.

TOP

H3C reserves the right to modify its collaterals without any prior notice. For the latest information of the collaterals, please consult H3C sales or call 400 hotline.

H3C SecPath F5010[F5020][F5040] Firewalls Installation Manual-6W101

Table of Content

01-Text

Safety recommendations

ESD prevention guidelines

Attaching an ESD wrist strap

Lightning protection

Installing the device

Grounding the device

Installing a power module

(Optional) Installing network signal lightning arresters

(Optional) Installing a power lightning arrester

Connecting a fiber port

Connecting the power cord

Connecting the DC power cord

Powering on the device

Replacing the interface module

Displaying the CPU usage of the device

Displaying the memory usage of the device

Displaying the operational status of fans

Displaying the operational status of power modules

Displaying the temperature information of the device

Displaying the operational statistics of the device

Displaying transceiver module information

Identifying transceiver modules

Troubleshooting transceiver modules

Rebooting the device

Troubleshooting

Symptom

Solution

Symptom

Solution

Configuration terminal display issue

Symptom

Solution

Password loss

Symptom

Solution

Symptom

Solution

Dimensions and weights

Interface module