To avoid any equipment damage or bodily injury, read the following safety recommendations before installation. Note that the recommendations do not cover every possible hazardous condition.

Safety symbols

When reading this document, note the following symbols:

WARNING means an alert that calls attention to important information that if not understood or followed can result in personal injury.

CAUTION means an alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software.

General safety recommendations

· Do not place the firewall on an unstable case or desk. The firewall might be severely damaged in case of a fall.

· Make sure the ground is dry and flat and anti-slip measures are in place.

· Keep the chassis and installation tools away from walk areas.

· Keep the chassis clean and dust-free.

· Do not place the firewall near water or in a damp environment. Prevent water or moisture from entering the firewall chassis.

· Ensure good ventilation of the equipment room and keep the air inlet and outlet vents of the firewall free of obstruction.

· Make sure the operating voltage is in the required range.

· Use a screwdriver, rather than your fingers, to fasten screws.

· Stack devices according to the sizes of and packing symbols on the packages.

Figure1-1 Packing symbols

Symbol	Description
	Stored with a maximum stack of n units.
	Transported and stored with the arrows up.
	Transported and stored with care.
	Transported and stored avoiding humidity, rains and wet floor.

Electrical safety

· Carefully examine your work area for possible hazards such as moist floors, ungrounded power extension cables, and missing safety grounds.

· Locate the emergency power-off switch in the room before installation. Shut the power off at once in case accident occurs.

· Do not work alone when the firewall has power.

· Always verify that the power has been disconnected.

Laser safety

WARNING!

Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the firewall is operating.

The firewall is a Class 1 laser device.

· Before you disconnect the fiber connector, execute the shutdown command in interface view to disable the optical source.

· Attach dust caps to disconnected optical fiber connectors and dust plugs to ports on disconnected transceiver modules to avoid damage caused by built-up dust.

· Insert a dust plug into empty fiber ports.

Handling safety

When you move the firewall, follow these guidelines:

· Move and unpack the firewall carefully to avoid firewall damage.

· Unpack the firewall at least half an hour and power on the firewall at least two hours after you move it from a place below 0°C (32°F) to the equipment room. This prevents condensation and even damage to the firewall.

· Use a safety hand truck when you move multiple firewalls.

· Before you move the firewall, remove all cables and mounting brackets.

· For long-distance transportation, remove all the removable components, such as power supplies and interface modules, and package them separately, and install the filler panels supplied with the firewall. For short-distance transportation, make sure all the removable components are securely seated in the slots and the screws are fastened.

· When you move or lift the firewall chassis, support the bottom of the chassis, rather than holding any removable component. Make sure the accessories of the firewall are not lost or damaged during firewall moving.

Examining the installation site

The firewall can only be used indoors. To make sure the firewall operates correctly and to prolong its service lifetime, the installation site must meet the following requirements.

Weight support

Make sure the floor can support the total weight of the rack, chassis, modules, and all other components. For weights of the chassis and components, see "Appendix A Chassis views and technical specifications."

Temperature and humidity

Maintain appropriate temperature and humidity in the equipment room.

· Lasting high relative humidity can cause poor insulation, electricity leakage, mechanical property change of materials, and metal corrosion.

· Lasting low relative humidity can cause washer contraction and ESD and bring problems including loose captive screws and circuit failure.

· High temperature can accelerate the aging of insulation materials and significantly lower the reliability and lifespan of the firewall.

For the temperature and humidity requirements of the firewall, see Table1-1.

Table1-1 Temperature/humidity requirements

Temperature	Relative humidity
· Operating: 0°C to 45°C (32°F to 113°F) · Storage: –40°C to +70°C (–40°F to +158°F)	· Operating: 5% to 95%, noncondensing · Storage: 5% to 95%, noncondensing

Temperature

Relative humidity

· Operating: 0°C to 45°C (32°F to 113°F)

· Storage: –40°C to +70°C (–40°F to +158°F)

· Operating: 5% to 95%, noncondensing

· Storage: 5% to 95%, noncondensing

Cleanliness

Dust buildup on the chassis might result in electrostatic adsorption, which causes poor contact of metal components and contact points, especially when indoor relative humidity is low. In the worst case, electrostatic adsorption can cause communication failure.

Table1-2 Dust concentration limit in the equipment room

Substance	Concentration limit (particles/m3)
Dust particles	≤ 3 × 104 (No visible dust on desk in three days)
NOTE: Dust particle diameter ≥ 5 µm

Substance

Concentration limit (particles/m3)

Dust particles

≤ 3 × 104 (No visible dust on desk in three days)

NOTE:

Dust particle diameter ≥ 5 µm

The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion and premature aging of components, as shown in Table1-3.

Table1-3 Harmful gas limits in an equipment room

Gas	Max. (mg/m3)
SO2	0.2
H2S	0.006
NH3	0.05
Cl2	0.01
NO2	0.04

Cooling system

The firewall provides front side-intake and rear side-exhaust airflow for heat dissipation. For adequate cooling of the firewall, follow these guidelines:

· Install the firewall at the installation site with its airflow direction meeting the ventilation requirements.

¡ Ensure a minimum clearance of 100 mm (3.94 in) around the air inlet and outlet vents of the chassis.

¡ If you install the firewall in a standard 19-inch rack, ensure a distance of 1U (44.45 mm, or 1.75 in) between the chassis and other devices.

· Make sure the installation site has a good cooling system.

Figure1-2 Airflow through the chassis

ESD prevention

To prevent electrostatic discharge (ESD), follow these guidelines:

· Make sure the firewall, the workbench, and the rack are reliably grounded.

· Take dust-proof measures for the equipment room. For more information, see "Cleanliness."

· Maintain the humidity and temperature at an acceptable level. For more information, see "Temperature and humidity."

· Put the removed power supplies away on an ESD workbench, with the PCB upward, or put them in ESD bags for future use.

· Always wear ESD clothing, ESD gloves, and an ESD wrist strap.

EMI

All electromagnetic interference (EMI) sources, from outside or inside of the firewall and application system, adversely affect the firewall in the following ways:

· A conduction pattern of capacitance coupling.

· Inductance coupling.

· Electromagnetic wave radiation.

· Common impedance (including the grounding system) coupling.

To prevent EMI, use the following guidelines:

· If AC power is used, use a single-phase three-wire power receptacle with protection earth (PE) to filter interference from the power grid.

· Keep the firewall far away from radio transmitting stations, radar stations, and high-frequency devices.

· Use electromagnetic shielding, for example, shielded interface cables, when necessary.

· To prevent signal ports from getting damaged by overvoltage or overcurrent caused by lightning strikes, route interface cables only indoors. If part of the network cable of an Ethernet port must be routed outdoors, connect a lightning arrester to the cable before you plug the cable into the port.

Lightning protection

To protect the firewall from lightning better, follow these guidelines:

· Make sure the grounding cable of the chassis is reliably grounded.

· Make sure the grounding terminal of the AC power receptacle is reliably grounded.

· Install a lightning arrester at the input end of the power supply to enhance the lightning protection capability of the power supply.

IMPORTANT:

No network port lightning arrester or AC power lightning arrester is provided with the firewall. Prepare them as required. For the technical specifications and installation instructions for the lightning protectors, see the documents shipped with them.

Power supply

Verify that the power system at the installation site meets the requirements of the power supplies, including the input method and rated input voltage. For more information, see "Appendix A Chassis views and technical specifications."

Installation tools

All installation tools are user supplied.

Table1-4 Installation tools


Flat-head screwdriver	Phillips screwdriver	Needle-nose pliers	Marker

Diagonal pliers	ESD wrist strap

Installation accessories

Table1-5 Installation accessories


M6 screw	Cage nut	Front mounting bracket and M4 mounting screw	Rear mounting bracket and M4 shoulder screw

Rubber feet	Console cable	Grounding cable

Pre-installation checklist

Table1-6 Checklist before installation

Item		Requirements	Result
Installation site	Ventilation	· Ensure a minimum clearance of 100 mm (3.94 in) around the air inlet and outlet vents of the chassis. · If you install the firewall in a standard 19-inch rack, ensure a distance of 1U (44.45 mm, or 1.75 in) between the chassis and other devices. · A good ventilation system is available at the installation site.
	Temperature	· Operating: 0°C to 45°C (32°F to 113°F) · Storage: –40°C to +70°C (–40°F to +158°F)
	Relative humidity	· Operating: 5% RH to 95% RH, noncondensing · Storage: 5% RH to 95% RH, noncondensing
	Cleanness	· Dust concentration ≤ 3 × 104 particles/m3 · No dust on desk within three days
	ESD prevention	· The equipment, workbench, and rack are reliably grounded. · The equipment room is dust-proof. · The humidity and temperature are at an acceptable level. · Wear an ESD wrist strap and make sure it makes good skin contact and is reliably grounded when installing removable components. · Put the removed interface modules away on an ESD workbench, with the PCB upward, or put them in ESD bags for future use. · Touch only the edges, instead of electronic components when observing or moving a removed interface module.
	EMI prevention	· Take effective measures to protect the power system from the power grid system. · Separate the protection ground of the firewall from the grounding device or lightning protection grounding device as far as possible. · Keep the firewall far away from radio stations, radar and high-frequency devices working in high current. · Use electromagnetic shielding when necessary.
	Lightning protection	· The grounding cable of the chassis is reliably grounded. · The grounding terminal of the AC power receptacle is reliably grounded. · (Optional.) A power lightning arrester is installed.
	Electricity safety	· Equip a UPS. · Locate the power switch in the equipment room. In case of emergency during operation, switch off the power switch.
	Rack-mounting requirements	· Make sure the rack is equipped with a good ventilation system. · The rack is sturdy enough to support the weight of the firewall and installation accessories. · The size of the rack is appropriate for the firewall. · The front and rear of the rack are a minimum of 0.8 m (31.50 in) away from walls or other devices.
Safety precautions	· The firewall is far away from any moist area and heat source. · The emergency power switch in the equipment room is located.
Tools and accessories	· Installation accessories supplied with the firewall · User-supplied tools
Reference	· Documents shipped with the firewall · Online documents

2 Installing the firewall

WARNING!

Keep the tamper-proof seal on a mounting screw on the chassis cover intact, and if you want to open the chassis, contact H3C for permission. Otherwise, H3C shall not be liable for any consequence.

The installation procedure is the same for the F5000-AI160 and F5000-E firewalls. This document installs an F5000-AI160 firewall.

Installation flow

Table2-1 Installation flow for the F5000-AI160/F5000-E firewall

Step	Description
1. Start	Before installation, make sure all requirements on the checklist are met and the firewall is powered off.
2. Mounting the firewall on a workbench	Verify that the workbench is sturdy and reliably grounded. Ensure a minimum clearance of 100 mm (3.94 in) around the air inlet and outlet vents of the chassis.
3. Installing the firewall in a standard 19-inch rack	The firewall is heavy. Both mounting brackets and slide rails are required to support the weight of the chassis.
4. Grounding the firewall	Before installation, make sure the firewall and rack are grounded correctly and you wear an ESD wrist strap.
5. Installing a fan tray	Install compatible fan trays on the firewall.
6. Installing a power supply	Before you install a power supply, make sure the power supply is not connected to any power source and the grounding cable of the firewall is connected reliably.
7. Installing a drive	Install compatible drives on the firewall.
8. Installing a USB drive	Install compatible USB drives on the firewall.
9. Connecting Ethernet cables	The firewall provides various ports. Choose compatible transceiver modules and cables as required. To avoid bodily injury or device damage, read the restrictions and guidelines carefully before connection.
10. Connecting power cords	Connect compatible power cords to the power supplies.
11. Verifying the installation	Verify that the firewall is installed securely and reliably grounded, and that the power supplies are as required.

Mounting the firewall on a workbench

IMPORTANT:

Avoid placing heavy objects on the firewall.

If a standard 19-inch rack is not available, you can place the firewall on a workbench.

To mount the firewall on a workbench:

1. Verify that the workbench is sturdy and reliably grounded.

2. Place the firewall upside down on the workbench and clean the four round holes in the chassis bottom with a dry cloth.

3. Attach the four rubber feet to the round holes in the chassis bottom.

4. Place the firewall with upside up on the workbench.

Figure2-1 Mounting the firewall on a workbench

Installing the firewall in a standard 19-inch rack

WARNING!

To avoid bodily injury and device damage, use a minimum of two persons to rack-mount the firewall.

CAUTION:

As a best practice, use slide rails together with the mounting brackets to support the weight of the chassis.

To install the firewall in a standard 19-inch rack:

1. Unpack the firewall and accessories.

2. Mark the cage nut installation positions on the rack posts by using the mounting brackets.

Use a front mounting bracket to mark the installation positions on the front rack posts and use a rear mounting bracket to mark the installation positions on the rear rack posts. Install cage nuts.

Figure2-2 Installing cage nuts

3. Attach the front mounting brackets and shoulder screws to both sides of the firewall with M4 screws provided with the firewall.

Figure2-3 Attaching mounting brackets and shoulder screws to the firewall

4. Attach the rear mounting brackets to the rear rack posts. The rear mounting brackets can be attached to the rear rack posts with the wide flange inside or outside the rack.

Table2-2 Installation methods of rear mounting brackets

Distance between the front and rear rack posts	Rear mounting bracket installation method
421 to 556 mm (16.57 to 21.89 in)	With the wide flange inside the rack.
264 to 399 mm (10.39 to 15.71 in)	With the wide flange outside the rack. Caution: To prevent the rear mounting brackets from obstructing the closing of the rack door, ensure a distance greater than 153 mm (6.02 in) between the rear rack posts and the interior side of the rack door.

Distance between the front and rear rack posts

Rear mounting bracket installation method

421 to 556 mm (16.57 to 21.89 in)

With the wide flange inside the rack.

264 to 399 mm (10.39 to 15.71 in)

With the wide flange outside the rack.

Caution:

To prevent the rear mounting brackets from obstructing the closing of the rack door, ensure a distance greater than 153 mm (6.02 in) between the rear rack posts and the interior side of the rack door.

Figure2-4 Attaching the rear mounting brackets to the rear rack posts (with the wide flange inside the rack)

Figure2-5 Attaching the rear mounting brackets to the rear rack posts (with the wide flange outside the rack)

5. Mount the firewall in the rack. Use M6 screws to secure the mounting brackets to the front rack posts and make sure the shoulder screws rest firmly on the upper edge of the rear mounting brackets.

Figure2-6 Mounting the firewall in the rack (with the wide flange of the rear mounting brackets inside the rack)

Figure2-7 Mounting the firewall in the rack (with the wide flange of the rear mounting brackets outside the rack)

Grounding the firewall

WARNING!

· Correctly connecting the firewall grounding cable is crucial to lightning protection and EMI protection.

· Do not connect the firewall grounding cable to a fire main or lightning rod.

· The firewall has three grounding points. Use the grounding point at the power supply side to ground the firewall. The other two grounding points at the side panels are reserved.

You can ground the firewall in one of the following ways, depending on the grounding conditions available at the installation site.

Grounding the firewall with a grounding strip

If a grounding strip is available at the installation site, connect the grounding cable through the grounding strip.

To connect the grounding cable:

1. Remove the grounding screw from the firewall chassis.

2. Attach the grounding screw to the ring terminal of the grounding cable.

3. Use a screwdriver to fasten the grounding screw into the grounding hole on the firewall.

4. Remove the hex nut from the grounding strip.

5. Use a pair of needle-nose pliers to bend a hook at the other end of the grounding cable. Attach the hook to the grounding point, and secure the hook with a screw.

Figure2-8 Grounding the firewall with a grounding strip

Grounding the firewall with the grounding terminal on the rack

1. Remove the grounding screw from the firewall chassis.

2. Attach the grounding screw to the ring terminal of the grounding cable.

3. Use a screwdriver to fasten the grounding screw into the grounding hole on the firewall.

4. Remove the grounding screw from the grounding point on the rack.

5. Attach the ring terminal at the other end of the grounding cable to the grounding point on the rack.

Figure2-9 Grounding the firewall with the grounding terminal on the rack

Installing a fan tray

CAUTION:

· The firewall comes with the six fan tray slots empty. To ensure good ventilation, make sure the firewall is fully configured with fan trays.

· If a fan tray fails during operation, replace the fan tray as soon as possible and keep the failed fan tray in place before you replace it. Do not remove multiple failed fan trays at the same time. Replace the fan trays one after another.

· Before installation, make sure the fan tray airflow direction meets the requirements for installation ventilation.

· Before installation, orient the fan tray with the "TOP" mark on the top.

No fan trays are provided with the firewall. Purchase them as needed.

To install a fan tray:

1. Face the rear panel of the firewall.

2. Orient the fan tray with the "TOP" mark on the top. Grasp the handle of the fan tray with one hand and support the fan tray bottom with the other. Slide the fan tray along the guide rails into the slot until the fan tray is fully seated in the slot.

Figure2-10 Installing a fan tray

Installing a power supply

CAUTION:

· Do not install AC and DC power supplies on the same firewall.

· Before installing a power supply, make sure the power supply is powered off and the grounding cable is correctly connected.

No power supplies are provided with the firewall. Purchase them as needed. The installation procedure is similar for power supplies of different models.

To install a power supply:

1. Remove the filler panel from the target slot.

Figure2-11 Removing the filler panel from a firewall

2. Orient the power supply with its power receptacle to the right of the handle. Holding the handle of the module with one hand and supporting the module bottom with the other, slide the power supply slowly into the slot along the guide rails.

Figure2-12 Installing an AC power supply

Figure2-13 Installing a DC power supply

Installing a drive

CAUTION:

· To avoid damage to drives, always hold a drive by its sides. Do not touch any components and do not squeeze, vibrate, or strike a drive.

· Drives are hot swappable.

· Install a filler panel in empty drive slots to prevent dust and ESD damage.

IMPORTANT:

· The firewall does not come with any drives and cannot recognize drives from other vendors. Purchase drives from H3C as needed.

· Before using the drive, execute the fdisk and format commands from the CLI to partition and format the drive.

To install a drive, push the drive into the slot slowly along the guide rails until the drive seats in the slot.

Figure2-14 Installing a drive

Installing a USB drive

IMPORTANT:

· The firewall does not come with any USB drives. Purchase USB drives yourself as needed.

· The firewall supports only USB drives with USB2.0 connectors.

· USB drives are plug and play. To use a USB drive, connect it to a USB port on the firewall.

To install a USB drive:

1. Face the front panel of the firewall.

2. Correctly orient the USB drive, and then push the USB drive slowly into the slot until the USB drive seats in the slot.

To avoid slot damage, do not use excessive force when you install the USB drive.

Figure2-15 Installing a USB drive

Connecting Ethernet cables

Connecting a fiber port

WARNING!

Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the firewall is operating.

CAUTION:

· Never bend or curve a fiber excessively. The bend radius of a fiber must be not less than 100 mm (3.94 in).

· Keep the fiber end clean.

· Make sure the fiber connector matches the transceiver module.

· Before connecting a fiber, make sure the optical power at the receiving end does not exceed the transceiver module's upper threshold of the optical receive power. If the optical power at the receiving end exceeds the threshold, the transceiver module might be damaged.

The firewall supports the following transceiver modules:

· GE SFP copper transceiver modules.

· GE SFP transceiver modules.

· 10GE SFP+ transceiver modules.

· 40G QSFP+ transceiver modules.

· 100G QSFP+ transceiver modules.

For the transceiver module specifications, see port specifications in "Appendix A Chassis views and technical specifications."

No transceiver module is provided with the firewall. As a best practice, use H3C transceiver modules.

Figure2-16 GE SFP copper transceiver module

Figure2-17 GE SFP transceiver module

Figure2-18 10GE SFP+ transceiver module

Figure2-19 QSFP+ transceiver module with an MPO port

Figure2-20 QSFP+ transceiver module with an LC port

To connect the firewall to the network through an optical fiber:

1. Remove the dust plug from the fiber port.

2. Pull the bail latch on the transceiver module upwards. Skip this step if the bail latch is plastic. Then correctly orient the transceiver module.

3. Taking the transceiver module by its two sides, push the transceiver module gently into the port until you feel it snap into place.

4. Remove the dust plug and dust cap from the transceiver module and fiber connector, respectively. Then clean the end face of the fiber connector.

5. Connect the optical fiber to the transceiver module.

¡ LC connector—Align the connector with the transceiver module and push the connector into the transceiver module slightly until it clicks into place.

¡ MPO connector—Orient the connector with the white dot on it facing right. Insert the connector horizontally into the transceiver module. Push the connector into the transceiver module slightly until it clicks into place.

6. Use cable ties to bind the optical fiber every 150 mm (5.91 in).

7. Affix cable labels to the optical fiber as required.

Figure2-21 Installing a transceiver module and optical fiber (LC connector)

Figure2-22 Installing a transceiver module and optical fiber (MPO connector)

Connecting power cords

CAUTION:

Make sure the grounding cable of the firewall is correctly connected and the power source is powered off before connecting the power cord.

Connecting an AC power cord

1. Connect the female connector of the AC power cord to the AC-input power receptacle on the power supply.

2. Use a cable tie to secure the AC power cord to the power supply handle.

3. Connect the other end of the power cord to an AC power source.

Figure2-23 Connecting an AC power cord

Connecting a DC power cord

1. Use a screwdriver to loosen the screws on the protection cover over the power receptacle and then remove the cover.

2. Correctly orient the DC power cord connector with the power receptacle on the power supply, and insert the connector into the receptacle.

The receptacle is foolproof. If you cannot insert the connector into the receptacle, re-orient the connector rather than use excessive force to push it in.

3. Fasten the captive screws on the power cord connector with a screwdriver to secure the power cord connector.

4. Use a cable tie to secure the power cord to the handle.

5. Connect the other end of the power cord to a DC power source.

Figure2-24 Connecting a DC power cord

Verifying the installation

Verify the following items to ensure correct installation:

· There is enough space for heat dissipation around the firewall.

· The firewall and its components are installed securely. The screws are fastened tightly.

· The power source specifications are as required by the firewall.

· The grounding cable and power cords are connected correctly.

3 Accessing the firewall

Starting the firewall

Pre-start checking

WARNING!

Locate the emergency power-off switch in the room before powering on the firewall so you can quickly shut power off when an electrical accident occurs.

Before powering on the firewall, verify that the following conditions are met:

· The power cord and grounding cable are connected correctly.

· The power source specifications meet the firewall requirements.

· The firewall is connected correctly to a configuration terminal (a PC for example). The configuration terminal has been started and the parameters have been set correctly. For more information, see "Logging in from the serial console port or micro USB console port."

· The interface modules (if any) are installed correctly.

Starting the firewall and observing the initial startup conditions

1. Turn on the circuit breakers to power on the firewall.

2. Observe the initial startup conditions to verify that the firewall starts up correctly.

¡ The LEDs on the front panel indicate that the firewall is operating correctly. For more information about LEDs, see "Appendix B LEDs."

¡ The fan blades are rotating and air is exhausted from the air outlet vents.

¡ The configuration terminal displays the following information:

The output on the configuration terminal varies by firewall software version.

System is starting...

Press Ctrl+D to access BASIC-BOOTWARE MENU...

Press Ctrl+T to access BOOTWARE DIAG-TEST MENU

Booting Normal Extended Bootwaredone

In: serial

Out: serial

Err: serial

****************************************************************************

* *

* H3C F5000-AI160 BootWare, Version 1.03 *

* *

****************************************************************************

Compiled Date : Dec 1 2021 15:53:04

Memory Type : DDR4 SDRAM

Memory Size : 32768MB

SPI Flash Size :32MB

EMMC Flash Size :7296MB

usba0 Size :253MB

CPLD Version :2.0

PCB Version :Ver.A

BootWare Validating...

Press Ctrl+B to access EXTENDED-BOOTWARE MENU...

Loading the main image files...

Loading file flash:/F5000AIFW-CMW710-SYSTEM-E8371P07.bin...................................................Done.

flash:/F5000AIFW-CMW710-SYSTEM-E8371P07.bin..... Done.

Image file flash:/F5000AIFW-CMW710-BOOT-E8371P07.bin is self-decompressing....Done...

System image is starting...

System is starting

Cryptographic algorithms tests passed.

Line con0 is available.

Press ENTER to get started.

…

Press Enter to access user view of the firewall.

NOTE:

To access the EXTENDED-BOOTWARE menu, press Ctrl + B within four seconds at the prompt "Press Ctrl+B to access EXTENDED-BOOTWARE MENU." If you do not press Ctrl+B at the prompt, the system starts to read and decompress program files. To enter the EXTENDED-BOOT menu afterwards, you need to reboot the firewall.

Logging in to the firewall

You can use the following methods to access and manage the firewall. For more information about logging in to the firewall, see the configuration guides and command references for the firewall.

· Logging in from the Web interface

· Logging in from the serial console port or micro USB console port

· Logging in through Telnet

Logging in from the Web interface

The default Web interface login information is as follows:

· Username—admin

· Password—admin

· IP address of the management Ethernet port (MGMT)—192.168.0.1/24

To log in to the firewall from the Web interface by using the default account:

1. Use an Ethernet cable to connect a PC to the management Ethernet port on the firewall.

2. Configure an IP address in subnet 192.168.0.0/24 for the PC. Make sure the PC and the firewall are reachable to each other.

The PC must use a different IP address than the management Ethernet port.

3. Start a browser, enter 192.168.0.1 in the address bar, and press Enter.

4. Enter the default username admin and password admin and then click Login.

5. Modify the login information.

At the first login from the Web interface, change the password as required in the pop-up window, and then click OK.

Keep the new password secure.

Logging in from the serial console port or micro USB console port

By default, the firewall uses the scheme access authentication mode. The username and password are both admin.

To access and manage the firewall locally, connect the serial console port or the micro USB console port on the firewall to a configuration terminal (a PC for example). Only the micro USB console port is available if you connect both the serial console port and micro USB console port.

To configure and manage the firewall from the serial console port or micro USB console port, you must run a terminal emulator program, TeraTermPro or PuTTY, on your configuration terminal and configure the following settings for the terminal. For more information about the terminal emulator programs, see the user guides for these programs.

· Bits per second—115200.

· Data bits—8.

· Stop bits—1.

· Parity—None.

· Flow control—None.

Logging in through Telnet

1. Connect your PC to the serial console port or micro USB console port on the firewall, and enable the Telnet function in system view by using the telnet server enable command.

2. Enter VTY user line view, and configure the authentication mode, user role, and common properties in VTY user line view.

By default, the authentication mode is scheme, and the username and password are admin.

3. Specify an IP address for the network port of the PC and make sure the PC and the firewall are reachable to each other.

The IP address of management Ethernet port MGMT is 192.168.0.1/24.

4. Run the Telnet client on the PC and enter the default login information.

4 Hardware replacement

CAUTION:

Wear an ESD wrist strap or ESD gloves for hardware maintenance. They are not provided with the firewall. Prepare them yourself.

Replacing a power supply

CAUTION:

Before you replace a power supply, power off the firewall and remove the power cord.

The replacement procedure is the same for an AC power supply and a DC power supply. This section takes an AC power supply as an example.

To replace a power supply:

1. Remove the releasable cable tie from the power cord and then remove the power cord connector from the power supply.

2. Hold the power supply handle with one hand, press the latch towards the handle, and then pull the power supply part way out of the slot. Supporting the power supply bottom with one hand, slowly pull the power supply out of the slot along the guide rails with the other.

3. Put the removed power supply in an antistatic bag or on the workbench.

4. Install a new power supply. For the installation procedure, see "Installing a power supply."

If you are not to install a new power supply, install a filler panel in the slot to ensure good ventilation in the firewall.

Figure4-1 Removing a power supply

Replacing a drive

CAUTION:

· To avoid storage medium damage, execute the umount command from the CLI to unmount all the file systems before removing a drive.

· Drives are hot swappable.

· To avoid damage to drives, always hold a drive by its sides. Do not touch any components and do not squeeze, vibrate, or strike a drive.

· If you are not to install a new drive in the slot, install a filler panel in the slot to avoid ESD damage caused by dust or foreign objects.

To replace a drive:

1. Log in to the Web interface. Click the Unmount button on the Storage settings page.

2. Execute the umount command from the CLI to unmount all the file systems.

3. Pull the drive slowly out of the slot along the guide rails.

4. Wait for 30 seconds and insert the new drive slowly into the slot along the guide rails.

Figure4-2 Replacing a drive

Replacing a USB drive

1. Log in to the Web interface. Click the Unmount button on the Storage settings page.

2. Execute the umount command from the CLI to unmount all the file systems.

3. Holding the front of the USB drive, pull the USB drive slowly out of the slot.

Figure4-3 Replacing a USB drive

4. Install a new USB drive. For the installation procedure, see "Installing a USB drive."

Replacing a transceiver module

WARNING!

Disconnected optical fibers or transceiver modules might emit invisible laser light. Do not stare into beams or view directly with optical instruments when the firewall is operating.

When you replace a transceiver module, make sure the two transceiver modules connected by the same optical fiber are the same type. Do not touch the golden plating of the transceiver module.

Figure4-4 Transceiver module golden plating

To replace a transceiver module:

1. Use the shutdown command in interface view at the CLI to shut down the optical source before you remove the fiber connector.

2. Remove the optical fibers from the transceiver module.

¡ To remove an optical fiber with an LC connector, press the clip on the connector to pull the LC connector out of the port, as shown in Figure4-5.

¡ To remove an optical fiber with an MPO connector, hold the front end of the MPO connector and then pull it out of the port, as shown in Figure4-6.

3. Pull down the bail latch on the transceiver module to the horizontal position. Skip this step if the bail latch is plastic.

4. Hold the bail latch to pull the transceiver module slowly out of the port.

As a best practice, use tweezers to remove a transceiver module in case of limited space.

5. Attach dust plugs to the removed transceiver module, and put it into the package.

6. Install a new transceiver module. If you do not install a new transceiver module in the slot, install a dust plug. For information about installing a transceiver module, see "Connecting a fiber port."

Figure4-5 Removing a transceiver module (LC connector)

Figure4-6 Removing a transceiver module (MPO connector)

5 Hardware management and maintenance

NOTE:

The output depends on your firewall model. For more information about the commands used in this chapter, see the configuration guides and command references for the firewall.

Displaying detailed information about the firewall

Use the display device verbose command to display detailed information, including the running status and hardware version, about the firewall and its interface modules.

<Sysname> display device verbose

Slot 1 SubSlot 0 info:

Status : Normal

Type : F5000-AI160

PCB 1 Ver : VER.A

Software Ver : 8371P07

CPU Ver : 1.0

CPLD_A : 2.0

CPLD_B : 2.0

CFCard Num : 0

Displaying software and hardware version information for the firewall

Use the display version command to display software and hardware version information for the firewall.

<Sysname> display version

H3C Comware Software, Version 7.1.064, Ess 8371P07

H3C SecPath F5000-AI160 uptime is 0 weeks, 0 days, 15 hours, 42 minutes

Last reboot reason: User reboot

Boot image: flash:/F5000AIFW-CMW710-BOOT-E8371P07.bin

Boot image version: 7.1.064, Ess 8371P07

Compiled Dec 01 2021 15:00:00

System image: flash:/F5000AIFW-CMW710-SYSTEM-E8371P07.bin

System image version: 7.1.064, Ess 8371P07

Compiled Dec 01 2021 15:00:00

SLOT 1 CPU 0

CPU type : Multi-core CPU

DDR4 SDRAM Memory : 32768M bytes

FLASH : 7122M bytes

Board PCB Version : Ver.A

FPGA PCB Version : Ver.A

Hdd PCB Version : Ver.A

Led PCB Version : Ver.A

CPLD_0 Version : 2.0

CPLD_1 Version : 2.0

CPLD_2 Version : 3.0

Release Version : SecPath F5000-AI160-8371P07

Adm Version : 1.0

FPGA Version : B6001

FPGA Date : 2021.11.15

Basic BootWare Version: 1.03

Extend BootWare Version: 1.03

[SUBCARD 0] Fixed Subcard(Hardware)Ver.A, (Driver)1.0, (Cpld)2.0

Displaying electrical label information for the firewall

Use the display device manuinfo command to display the electrical label information for the firewall.

<Sysname> display device manuinfo

Slot 1 CPU 0:

DEVICE_NAME : F5000-AI160

DEVICE_SERIAL_NUMBER : 210235A2QA000010077

MAC_ADDRESS : 00ff-fbb9-9200

MANUFACTURING_DATE : 2021-03-17

VENDOR_NAME : H3C

Fan 0:

DEVICE_NAME : LSPM1FANSB

DEVICE_SERIAL_NUMBER : 210231ACJLP2080002DF

MAC_ADDRESS : NONE