HP 200 UTM Installation Manual

HP A-U200-A/A-U200-S

Unified Threat Management Product
Installation Guide

Part number: 5998-1414

Document version: 6PW100-20110909

Legal and notice information

© Copyright 2011 Hewlett-Packard Development Company, L.P.

No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.

The information contained herein is subject to change without notice.

HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or use
of this material.

The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

Contents

Product overview·························································································································································· 1

A-U200-A architecture description ··································································································································1
A-U200-S architecture description ··································································································································2

Preparing for installation ············································································································································· 3

Safety recommendations ··················································································································································3

Safety symbols ··························································································································································3
General safety recommendations ···························································································································3
Safety with electricity ···············································································································································3
Safety with laser ·······················································································································································4

Examining the installation site ·········································································································································4

Temperature and humidity·······································································································································4
Altitude ······································································································································································5
Cleanness··································································································································································5
Cooling system ·························································································································································5
ESD prevention ·························································································································································6
EMI·············································································································································································7
Lightning protection··················································································································································7

Rack-mounting···························································································································································8
Installation tools·································································································································································8
Accessories supplied by the UTM device ·······················································································································8
Checklist before installation ·············································································································································9

Installing the UTM device ··········································································································································11

Installation flow ······························································································································································11
Installing the UTM device in a 19-inch rack················································································································ 11
Grounding the UTM device··········································································································································· 13
Installing interface modules··········································································································································· 13

Installing a 2GE interface module ······················································································································· 13

Installing an NSQ1GT2UA0 or NSQ1GP4U0 interface module···································································· 14
Installing a CF card························································································································································ 15
Connecting Ethernet cables··········································································································································· 15

Connecting a copper Ethernet cable··················································································································· 15

Connecting an optical fiber ································································································································· 16
Connecting a power cord ············································································································································· 17

Logging in to the UTM device and configuring basic settings················································································19

Logging in to the UTM device through the console port···························································································· 19

Connecting the UTM device to a configuration terminal through a console cable········································ 19

Setting terminal parameters·································································································································· 20
Powering on the UTM device········································································································································ 23

Checking before power-on··································································································································· 23

Checking after power-on ······································································································································ 23
Logging in to the UTM device through Telnet ············································································································· 24
Logging in to the UTM device through a web browser ····························································································· 24
Performing basic settings for the UTM device············································································································· 25

Launching the basic configuration wizard·········································································································· 25

Configuring the system name and user password····························································································· 26

Configuring service management························································································································ 27

Configuring the IP address for an interface········································································································ 29

i

Configuring NAT··················································································································································· 30

Completing the configuration wizard ·················································································································31

Hardware management and maintenance ··············································································································33

Displaying detailed information about the UTM device ····························································································33
Displaying software and hardware version information of the UTM device··························································· 34
Displaying the electrical label information of the UTM device ················································································· 34
Displaying the CPU usage of the UTM device ············································································································ 35
Displaying the memory usage of the UTM device······································································································ 35
Displaying the CF card information ····························································································································· 35
Displaying the operational status of the fans ·············································································································· 36
Displaying the operational status of a power module ······························································································· 36
Displaying the temperature information of the UTM device ······················································································ 36
Displaying operational statistics of the UTM device··································································································· 37
Saving the running configuration of the UTM device································································································· 37
Rebooting the UTM device············································································································································ 38

Replacement procedures ···········································································································································40

Safety recommendations ··············································································································································· 40
Replacing an interface module····································································································································· 40
Replacing a CF card······················································································································································ 41
Replacing a transceiver module ··································································································································· 42

Troubleshooting··························································································································································44

Power supply system failure·········································································································································· 44
Fan failure······································································································································································· 44
Configuration terminal problems·································································································································· 45

No terminal display ·············································································································································· 45

Garbled terminal display······································································································································ 45
Password loss ································································································································································· 45

User password loss ··············································································································································· 45

Super password loss ············································································································································· 46
Cooling system failure ··················································································································································· 47
Interface module failure················································································································································· 47

Appendix A Technical specifications ······················································································································48

Dimensions and weight ················································································································································· 48
Storages ·········································································································································································· 48
Power consumption range············································································································································· 48
Power consumption range············································································································································· 48
Fixed Ethernet ports specifications ······························································································································· 49

Console port··························································································································································· 49

Appendix B LEDs·······················································································································································50

LEDs ················································································································································································· 50

Appendix C Interface modules ································································································································52

2GE interface module···················································································································································· 52
NSQ1GT2UA0 interface module································································································································· 53
NSQ1GP4U0 interface module ··································································································································· 54

Appendix D AC power cables used in different countries or regions··································································56

10A AC power cables used in different countries or regions··················································································· 56
16A AC power cables used in different countries or regions··················································································· 59

Support and other resources ·····································································································································62

Contacting HP ································································································································································ 62

Subscription service ·············································································································································· 62

ii

Related information························································································································································ 62

Documents······························································································································································ 62

Websites································································································································································· 62
Conventions ···································································································································································· 63

Index ···········································································································································································65

iii

Product overview

This chapter includes these sections:

• A-U200-A architecture description

• A-U200-S architecture description

A-U200-A architecture description

Front panel

Figure 1 A-U200-A front panel

(1) Copper Ethernet ports (GE0 through GE5) (2) Console port
(3) USB interface (4) CF card eject button
(5) CF card slot

Rear panel

Figure 2 A-U200-A rear panel

(1) Grounding terminal and mark (2) “OPEN BOOK” mark
(3) AC power switch (ON/OFF) (4) AC power receptacle
(5) Slot1 (with an NSQ1GT2UA0 interface module

installed in this diagram)

(6) Slot2 (with an NSQ1GT2UA0 interface module
installed in this diagram)

1

A-U200-S architecture description

Front panel

Figure 3 A-U200-S front panel

(1) Copper Ethernet ports (GE0 through GE4) (2) Console port
(3) USB interface (4) CF card eject button
(5) CF card reader

Rear panel

Figure 4 A-U200-S rear panel

(1) AC power receptacle (2) Slot (with a 2GE interface module installed in this diagram)
(3) Grounding terminal and mark (4) “OPEN BOOK” mark

The OPEN BOOK mark indicates that the operator must read the following chapters before working with
the UTM device:

Table 1 References for the operations

Operation Reference

Ground the UTM device See “Grounding the UTM device.”

Connect the power supply See “Connecting a power cord.”

2

Preparing for installation

This chapter includes these sections:

• Safety recommendations

• Examining the installation site

• Installation tools

• Accessories supplied by the UTM device

• Checklist before installation

Safety recommendations

To avoid possible bodily injury and equipment damage, read the safety recommendations in this chapter
carefully before installing a UTM device. The recommendations do not cover every possible hazardous
condition.

This section includes these topics:

• Safety symbols

• General safety recommendations

• Safety with electricity

• Safety with laser

Safety symbols

When reading this document, note the following symbols:

WARNING means an alert that calls attention to important information that if not understood or

followed can result in personal injury.

CAUTION means an alert that calls attention to important information that if not understood or

followed can result in data loss, data corruption, or damage to hardware or software.

General safety recommendations

• Keep the chassis and installation tools away from walk areas.

• Make sure that the ground is dry and flat and anti-slip measures are in place.

• Unplug all the external cables (including power cables) before moving the chassis.

Safety with electricity

• Locate the emergency power-off switch in the room before installation. Shut the power off at once in

case accident occurs.

• Make sure that the UTM device has been correctly grounded.

• Connect the interface cables for the UTM device correctly.

• Use an uninterruptible power supply (UPS).

3

• Do not work alone when the UTM device has power.

• Always check that the power has been disconnected.

Safety with laser

• Do not stare into the optical port or fiber connector because the laser light emitted from the optical

fiber may hurt your eyes.

• Install a dust plug on the transceiver module to avoid damage to the transceiver module.

Examining the installation site

The UTM device can only be used indoors. To ensure that the UTM device works properly and to prolong
its service lifetime, the installation site must meet the following requirements:

• Temperature and humidity

• Altitude

• Cleanness

• Cooling system

• ESD prevention

• EMI

• Lightning protection

• Rack-mounting

Temperature and humidity

You must maintain a proper temperature and humidity in the equipment room. Long-term high humidity
may lead to bad insulation, electricity leakage, mechanical property changes, and metal corrosion.
However, if the humidity is too low, captive screws may become loose as the result of contraction of
insulation washers and static electricity may be produced in a dry environment to jeopardize the circuits
on the device. A high temperature is the most undesirable condition, because it accelerates the aging of
insulation materials and significantly lowers reliability and service life of the UTM device.

Table 2 Temperature requirements

Item Temperature

Operating temperature 0°C to 45°C (32°F to 113°F)

Storage temperature –40°C to 70°C(–40°F to 158°F)

Table 3 Humidity requirements

Item Humidity

Operating humidity 10% to 95%

Storage humidity 5% to 95%

4

Altitude

Table 4 Altitude requirements

Item Altitude

Operating altitude –60 m (–196.85 ft) to 3 km (1.86 miles)

Storage altitude –60 m (–196.85 ft) to 4.5km(2.8 miles)

Cleanness

Dust buildup on the chassis may result in electrostatic adsorption, which causes poor contact of metal
components and contact points, especially when indoor humidity is low. In the worst case, electrostatic
adsorption can cause communication failure.

Table 5 Dust concentration limit in the equipment room

Substance Concentration limit (particles/cu m)

Dust particles

NOTE:

Dust particle diameter  5 m

The equipment room must also meet strict limits on salts, acids, and sulfides to eliminate corrosion and
premature aging of components, as shown in Table 6.

Table 6 Harmful gas li

Gas Max. (mg/m

SO2 0.2

H2S 0.006

NH

3

Cl

2

Cooling system

The UTM device adopts left to right airflow for heat dissipation. The following diagram takes an
A-U200-S for example.

 3 x 104

(No visible dust on desk in three days)

mits in an equipment room

0.05

0.01

3

)

5

Figure 5 UTM device airflow

• Make sure there is enough space (greater than 10 cm (3.94 in)) around the air intake and outlet

vents on the UTM device for good ventilation.

• Make sure the installation site has a good cooling system.

ESD prevention

To prevent electrostatic discharge (ESD), note the following guidelines:

• Make sure that the UTM device and the floor are well grounded.

• Take dust-proof measures for the equipment room.

• Maintain the humidity and temperature at a proper level.

• Always wear an ESD-preventive wrist strap when touching a circuit board or transceiver module.

• Place the removed CF card or interface module on an antistatic workbench, with the face upward,

or put it into an antistatic bag.

• Touch only the edges, instead of electronic components when observing or moving a removed CF

card or interface module.

To use the ESD-preventive wrist strap, perform the following steps:

Step1 Wear the wrist strap on your wrist.
Step2 Lock the wrist strap tight around your wrist to keep good contact with the skin.
Step3 Attach the ESD-preventive wrist strap to the rack with the alligator clips.
Step4 Make sure that the rack is well grounded.

6

g

Figure 6 Use an ESD-preventive wrist strap

1

2

3

EMI

NOTE:

(1) ESD-preventive wrist strap (2) Lock
(3) Alligator clip

CAUTION:

• Check the resistance of the ESD-preventive wrist strap for safety. The resistance readin

should be in the

range of 1 to 10 megohm (Mohm) between human body and the ground.

• No ESD-preventive wrist strap is provided with the HP UTM device. Prepare it yourself.

To prevent electromagnetic interference (EMI) when using the UTM device, note the following guidelines:

• Take measures against interference from the power grid.

• Do not use the UTM device together with the grounding equipment or light-prevention equipment of

power equipment, and keep the UTM device far away from them.

• Keep the UTM device far away from high-power radio launchers, radars, and equipment with high

frequency or high current.

Use electromagnetic shielding when necessary.

Lightning protection

To protect the UTM device from lightning better, do as follows:

• Make sure the grounding cable of the chassis is well grounded.

• Make sure the grounding terminal of the AC power receptacle is well grounded.

7

• Install a lightning arrester at the input end of the power supply to enhance the lightning protection

capability of the power supply.

Rack-mounting

Before mounting the UTM device in a standard 19-inch rack, adhere to the following requirements:

• The rack is sturdy enough to support the UTM device and installation accessories.

• Make sure that the size of the rack is appropriate for the UTM device, and that there is enough

clearance around the left and right sides of the UTM device for heat dissipation.

• For heat dissipation and device maintenance, make sure the front and rear of the rack should be at

least 0.8 m (2.62 ft) away from walls or other devices, and that the headroom in the equipment
room should be no less than 3 m (9.84 ft).

Installation tools

Flat-blade
screwdriver

RJ45 crimping
pliers

Phillips screwdriver

Multimeter

Needle-nose pliers

Network cable
tester

Wire-stripping
pliers

Mark pen

NOTE:

No installation tool or ESD-preventive wrist strap is provided with the UTM device. Prepare them yourself.

Accessories supplied by the UTM device

Console cable Grounding cable

Mounting bracket
for A-200-A

Mounting bracket for
A-200-S

Diagonal pliers

ESD-preventive
wrist strap

Feet

8

Checklist before installation

Table 7 Checklist before installation

Item Requirements Result

• There is a minimum clearance of 10 cm (3.9 in) around

Ventilation

the inlet and exhaust vents for heat dissipation of the
UTM device chassis.

• A ventilation system is available at the installation site.

Installation site

Operating
temperature

Operating
humidity

Cleanness Dust concentration  3 × 104 particles/m3

0°C to 45°C (32°F to 113°F)

10% to 95%

• The equipment and floor are well grounded.

• The equipment room is dust-proof.

• The humidity and temperature are at a proper level,

respectively.

• Wear an ESD-preventive wrist strap and uniform when

ESD prevention

touching a circuit board.

• Place the removed CF card or interface module on an

antistatic workbench, with the face upward, or put it
into an antistatic bag.

• Touch only the edges, instead of electronic components

when observing or moving a removed CF card or
interface module.

• Take effective measures to protect the power system

from the power grid system.

• Separate the protection ground of the UTM device from

the grounding device or lightning protection grounding

EMI prevention

device as far as possible.

• Keep the UTM device far away from radio stations,

radar and high-frequency devices working in high
current.

• Use electromagnetic shielding when necessary.

Lightning
protection

• The grounding cable of the chassis is well grounded.

• The grounding terminal of the AC power receptacle is

well grounded.

• Equip an uninterruptible power supply (UPS).

Electricity safety

• In case of emergency during operation, switch off the

external power switch.

Rack-mounting
requirements

• The rack is sturdy enough to support the weight of the

UTM device and installation accessories.

• The size of the cabinet is appropriate for the UTM

device.

• The front and rear of the cabinet are at least 0.8 m

(31.50 in) away from walls or other devices.

9

Item Requirements Result

Safety
precautions

Tools

Reference

• The UTM device is far away from any moist area and heat source.

• The emergency power switch in the equipment room is located.

• Installation accessories supplied with the UTM device

• User supplied tools

• Documents shipped with the UTM device

• Online documents

10

Installing the UTM device

This chapter includes these sections:

• Installation flow

• Installing the UTM device in a 19-inch rack

• Grounding the UTM device

• Installing interface modules

• Installing a CF card

• Connecting Ethernet cables

• Connecting a power cord

Installation flow

Figure 7 HP A-U200-A/A-U200-S UTM device installation flow

Start

Install the UTM to a 19' rack

Ground the UTM

Install an interface module

Install a CF card

Connect Ethernet cables

Connect the power cord

End

Installing the UTM device in a 19-inch rack

The installation procedure of an A-U200-A is similar to an A-U200-S. This section takes an A-U200-S as
an example.

Step1 As shown in Figure 8, install the cage nuts to proper positions on the rack posts.

11

Figure 8 Install cage nuts

Step2 Install the mounting brackets to both sides of the front panel.

Figure 9 Install the mounting brackets to both sides of the front panel

Step3 Supporting the UTM device bottom with one hand, push the UTM device into the rack horizontally.
Step4 Fix the UTM device horizontally by fastening the front mounting brackets at both sides to the rack with

appropriate pan head screws. The specifications of pan head screws must satisfy the installation
requirements, and rustproof treatment has been made to their surfaces.

Figure 10 Fix the UTM device to the rack

12

Grounding the UTM device

WARNING!

Correctly connecting the UTM device grounding cable is crucial to lightning protection and EMI
protection.

Follow these steps to connect the grounding cable:

Step1 Remove the grounding screw from the rear panel of the UTM device chassis.
Step2 Attach the grounding screw to the OT terminal of the grounding cable.
Step3 Use a screwdriver to fasten the grounding screw into the grounding screw hole.
Step4 Ground the other end of the grounding cable, as shown in Figure 11, by connecting the other end of the

grounding cable to the grounding terminal of the rack.

Figure 11 Connect the grounding cable

(1) OT terminal

Installing interface modules

NOTE:

Keep the removed filler panel and screws for future use.

Installing a 2GE interface module

The A-U200-S supports only 2GE interface modules. Follow these steps to install a 2GE interface
module:

Step1 Use a Phillips screwdriver to loosen the fastening screws on the filler panel, and then remove the filler

panel.

Step2 Push the 2GE interface module slowly along the guide rails into the slot until it touches the slot bottom,

as shown in Figure 12.

13

Step3 Use a screwdriver to fasten the captive screws on the 2GE interface module.

Figure 12 Install a 2GE interface module

Installing an NSQ1GT2UA0 or NSQ1GP4U0 interface module

The A-U200-A supports NSQ1GT2UA0 and NSQ1GP4U0 interface modules. The installation
procedure of the two interface modules are the same. This section takes an NSQ1GP4U0 interface
module for example. Follow these steps to install an NSQ1GP4U0 interface module:

Step1 Select the slot where you want to install the NSQ1GP4U0 interface module. Use a Philips screwdriver to

loosen the fastening screws on the filler panel, and remove the filler panel. The interface module can be
installed only in the lower slot.

Step2 Push the interface module slowly along the guide rails into the slot until it touches the slot bottom, as

shown in Figure 13.

Step3 Use a screwdriver to fasten the captive screws on the NSQ1GP4U0 interface module.

Figure 13 Install an NSQ1GP4U0 interface module

14

t

Installing a CF card

CAUTION:

The UTM device supports only HP-provided CF cards, and does not guarantee compatibility with any
other CF cards.

Follow these steps to install a CF card:

Step1 Push the CF card eject button all the way into the slot, and make sure that the button does not project from

the panel.

Step2 Insert the CF card into the slot following the direction shown in Figure 14, and make sure it does not

project from the slot.

Figure 14 Install the CF card

NOTE:

If the boot file of the UTM device is stored in the CF card, before booting the UTM device, make sure tha
the CF card has been correctly installed. Otherwise, the UTM device cannot be booted.

Connecting Ethernet cables

Connecting a copper Ethernet cable

The copper Ethernet ports of the HP A-U200-A/A-U200-S UTM device support MDI/MDI-X auto-sensing.
You can use either standard network cables or crossover Ethernet cables.

Follow these steps to connect a copper Ethernet cable:

Step1 Connect one end of an Ethernet twisted pair cable to the copper Ethernet port on the UTM device.
Step2 Connect the other end of the cable to the peer device.
Step3 Check the LINK LED of the port when you power on the UTM device. If the LINK LED is steady on, you

can be sure that the link is connected. For more information about the LED status, see the chapters
“Appendix B LEDs.

” and “Appendix C Interface modules.”

15

g

Connecting an optical fiber

Before connecting an optical fiber to the SFP port of an NSQ1GP4U0 interface module, you must install
a transceiver module to the SFP port, and then insert a LC fiber connector to the transceiver module.

WARNING!

When connecting an optical fiber, note the following guidelines:

• Never bend or curve a fiber when connectin

not less than 10 cm (3.94 in).

• Keep the fiber end clean.

• Make sure that the fiber connector matches the transceiver module.

• Before connecting a fiber, make sure that the optical power at the receiving end does not exceed the

upper threshold of the optical receive power of the transceiver module. Otherwise, the transceiver
module may be damaged. For the optical power of a transceiver module, see the chapter “Appendix C

face modules.”

Inter

Follow these steps to connect optical fibers:

Step1 Remove the dust plug of the SFP port.

Figure 15 Remove the dust plug

it. After a fiber is installed well, the bend radius must be

Step2 Plug the transceiver module into the SFP port of the UTM device, as shown in Figure 16.

16