User manual 3COM H3C SECPATH F1000-S,SECPATH F1000-S HOST INSTALLATION GUIDE

[. . . ] H3C SecPath F1000-S Firewall Installation Manual Hangzhou H3C Technologies Co. , Ltd. http://www. h3c. com Manual Version: T2-08044J-20070622-C-1. 03 Copyright © 2006-2007, Hangzhou H3C Technologies Co. , Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co. , Ltd. Trademarks H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co. , Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners. Notice The information in this document is subject to change without notice. [. . . ] The console terminal can be either a standard ASCII terminal with an RS-232 serial interface, or more commonly, a PC. Step 2: Power down the firewall and the console terminal; connect the RS-232 serial interface on the console terminal to the console port on the firewall through the console cable. The console terminal shows the startup information of the firewall if the connection is correct. For details, see Chapter 4 "Booting and Configuration". 3. 6 Connecting the Ethernet Interface I. Introduction to the Ethernet interface The H3C SecPath F1000-S firewall provides four fixed 10/100/1000 Mbps auto-sensing interfaces (with two electrical interfaces and two applicable to both optical and electrical modes). Ethernet cable Electric and optical Ethernet interfaces use different Ethernet cables for connection. 1) Cables for electric Ethernet interfaces For an electric Ethernet interface, you can use a category-5 twisted-pair cable (straight-through or crossover), as shown in Figure 3-5. 3-5 Installation Manual H3C SecPath F1000-S Firewall Chapter 3 Hardware Installation Figure 3-5 Ethernet cable assembly Note: In making network cables, shielded cables are preferred for the sake of electromagnetic compatibility. 2) Cables for optical Ethernet interfaces For an optical Ethernet interface, you can choose the appropriate fiber cable, single mode or multimode, depending on the 1000Base-FX SFP optical transceiver you are using (see Table 1-6 for fiber options). Because all the available optical transceivers use LC optical connectors, you must use the fiber cable with LC fiber connectors. All the optical transceivers are hot-swappable. Note: A fiber connector, as defined by the International Telecommunications Union (ITU), is a passive component that connects two or more fiber cable segments stably but not permanently. Fiber connectors are indispensable to an optical communication system, making it possible to connect and disconnect optical channels. Following are several fiber connector types: FC: A round optical connector with screw threads ST: A round plug-in optical connector SC: A square optical connector MT-RJ: A square optical transceiver LC: A compact optical connector developed by Lucent Note: The fiber cable selection depends on SFP module. You must specify the desired SFP modules when you purchase a firewall. Otherwise, the fiber cable is not provided. 3-6 Installation Manual H3C SecPath F1000-S Firewall Chapter 3 Hardware Installation III. Connecting an Ethernet cable Take the fixed 10/100/1000 Mbps Ethernet 0/1 port on the front panel of the H3C SecPath F1000-S firewall for example. Follow these steps to connect its Ethernet cable: Caution: For each fixed Ethernet interface (for example, 10/100/1000 Mbps Ethernet 0/1 on the H3C SecPath F1000-S firewall), if both of its electric and optical ports are connected, the electric port is regarded as the operating port by default. 1) Connect the Ethernet electric port Caution: Read the mark above the port carefully, making sure it is the correct port. Step 1: Connect one end of the Ethernet cable to the electric port of the 10/100/1000 Mbps Ethernet 0/1 and the other end to the peer device. Step 2: Check the state of the LINK LED for the Ethernet 0/1 interface. OFF means no Rx link is present and then you need to check the line for the cause. 2) Connect the optical Ethernet port Caution: In connecting the fiber cable, observe the following: Do not over-bend the fiber cable. Ensure that the fiber ends are clean. 3-7 Installation Manual H3C SecPath F1000-S Firewall Chapter 3 Hardware Installation Caution: Laser danger: never look into the optical ports that are connected to the laser. It can harm your eyes. Step 1: Correctly connect one end of a fiber-optic cable to the Rx port of the 10/100/1000 Mbps interface on the firewall and the other end to the Tx port on the peer device. Connect another fiber-optic cable between the Tx port on the firewall and the Rx port on the peer device. Step 2: Power up the firewall and check the state of the LINK LED of the Ethernet 0/1 interface. [. . . ] Step 3: Check the state of the LINK LED on the 1GBE/2GBE module panel. OFF means no link is present; check the line for the cause. 8. 6 1GEF/2GEF Module 8. 6. 1 Introduction 1-/2-port 1000Base-LX/1000Base-SX Ethernet optical interface module (1GEF/2GEF) can provide the communications between the firewall and a LAN. The 1GEF/2GEF module can be multimode short-haul (850 nm), single mode medium-haul (1310 nm), single mode long-haul (1310 nm), single mode long-haul (1550 nm), and single mode ultra-long haul (1550 nm). The 1GEF/2GEF module supports: The operating rate of 1000 Mbps Full duplex mode 8. 6. 2 Appearance Figure 8-17 and Figure 8-18 show respectively the 1GEF and 2GEF modules. Figure 8-17 1GEF module Figure 8-18 2GEF module 8-12 Installation Manual H3C SecPath F1000-S Firewall Chapter 8 Multifunctional Interface Modules 8. 6. 3 Interface Attributes Table 8-7 shows the interface attributes of the 1GEF and 2GEF modules. [. . . ]