Detailed instructions for use are in the User's Guide.
[. . . ] H3C SecPath F1000-S Firewall Installation Manual
Hangzhou H3C Technologies Co. , Ltd. http://www. h3c. com
Manual Version: T2-08044J-20070622-C-1. 03
Copyright © 2006-2007, Hangzhou H3C Technologies Co. , Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co. , Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co. , Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners.
Notice
The information in this document is subject to change without notice. [. . . ] The console terminal can be either a standard ASCII terminal with an RS-232 serial interface, or more commonly, a PC. Step 2: Power down the firewall and the console terminal; connect the RS-232 serial interface on the console terminal to the console port on the firewall through the console cable. The console terminal shows the startup information of the firewall if the connection is correct. For details, see Chapter 4 "Booting and Configuration".
3. 6 Connecting the Ethernet Interface
I. Introduction to the Ethernet interface
The H3C SecPath F1000-S firewall provides four fixed 10/100/1000 Mbps auto-sensing interfaces (with two electrical interfaces and two applicable to both optical and electrical modes). Ethernet cable
Electric and optical Ethernet interfaces use different Ethernet cables for connection. 1) Cables for electric Ethernet interfaces
For an electric Ethernet interface, you can use a category-5 twisted-pair cable (straight-through or crossover), as shown in Figure 3-5.
3-5
Installation Manual H3C SecPath F1000-S Firewall
Chapter 3 Hardware Installation
Figure 3-5 Ethernet cable assembly
Note: In making network cables, shielded cables are preferred for the sake of electromagnetic compatibility.
2)
Cables for optical Ethernet interfaces
For an optical Ethernet interface, you can choose the appropriate fiber cable, single mode or multimode, depending on the 1000Base-FX SFP optical transceiver you are using (see Table 1-6 for fiber options). Because all the available optical transceivers use LC optical connectors, you must use the fiber cable with LC fiber connectors. All the optical transceivers are hot-swappable.
Note: A fiber connector, as defined by the International Telecommunications Union (ITU), is a passive component that connects two or more fiber cable segments stably but not permanently. Fiber connectors are indispensable to an optical communication system, making it possible to connect and disconnect optical channels. Following are several fiber connector types: FC: A round optical connector with screw threads ST: A round plug-in optical connector SC: A square optical connector MT-RJ: A square optical transceiver LC: A compact optical connector developed by Lucent
Note: The fiber cable selection depends on SFP module. You must specify the desired SFP modules when you purchase a firewall. Otherwise, the fiber cable is not provided.
3-6
Installation Manual H3C SecPath F1000-S Firewall
Chapter 3 Hardware Installation
III. Connecting an Ethernet cable
Take the fixed 10/100/1000 Mbps Ethernet 0/1 port on the front panel of the H3C SecPath F1000-S firewall for example. Follow these steps to connect its Ethernet cable:
Caution: For each fixed Ethernet interface (for example, 10/100/1000 Mbps Ethernet 0/1 on the H3C SecPath F1000-S firewall), if both of its electric and optical ports are connected, the electric port is regarded as the operating port by default.
1)
Connect the Ethernet electric port
Caution: Read the mark above the port carefully, making sure it is the correct port.
Step 1: Connect one end of the Ethernet cable to the electric port of the 10/100/1000 Mbps Ethernet 0/1 and the other end to the peer device. Step 2: Check the state of the LINK LED for the Ethernet 0/1 interface. OFF means no Rx link is present and then you need to check the line for the cause. 2) Connect the optical Ethernet port
Caution: In connecting the fiber cable, observe the following: Do not over-bend the fiber cable. Ensure that the fiber ends are clean.
3-7
Installation Manual H3C SecPath F1000-S Firewall
Chapter 3 Hardware Installation
Caution: Laser danger: never look into the optical ports that are connected to the laser. It can harm your eyes.
Step 1: Correctly connect one end of a fiber-optic cable to the Rx port of the 10/100/1000 Mbps interface on the firewall and the other end to the Tx port on the peer device. Connect another fiber-optic cable between the Tx port on the firewall and the Rx port on the peer device. Step 2: Power up the firewall and check the state of the LINK LED of the Ethernet 0/1 interface. [. . . ] Step 3: Check the state of the LINK LED on the 1GBE/2GBE module panel. OFF means no link is present; check the line for the cause.
8. 6 1GEF/2GEF Module
8. 6. 1 Introduction
1-/2-port 1000Base-LX/1000Base-SX Ethernet optical interface module (1GEF/2GEF) can provide the communications between the firewall and a LAN. The 1GEF/2GEF module can be multimode short-haul (850 nm), single mode medium-haul (1310 nm), single mode long-haul (1310 nm), single mode long-haul (1550 nm), and single mode ultra-long haul (1550 nm). The 1GEF/2GEF module supports: The operating rate of 1000 Mbps Full duplex mode
8. 6. 2 Appearance
Figure 8-17 and Figure 8-18 show respectively the 1GEF and 2GEF modules.
Figure 8-17 1GEF module
Figure 8-18 2GEF module
8-12
Installation Manual H3C SecPath F1000-S Firewall
Chapter 8 Multifunctional Interface Modules
8. 6. 3 Interface Attributes
Table 8-7 shows the interface attributes of the 1GEF and 2GEF modules. [. . . ]