Hillstone StoneOS User Manual Hillstone Multi-core Security Appliance Installation Manual StoneOS 5.0R4P3.1 www.hillstonenet.
Hillstone Multi-core Security Appliance Installation Manual Name and Concentration of Toxic or Hazardous Substances and Elements in Products Component Toxic or hazardous substances and elements Lead Mercury Cadmium Cr6+ PBB PDBE Metal parts (including fasteners) Χ O O O O O Printed circuit board assemblies and components Χ O O O O O Cables and cable assemblies Χ O O O O O Plastics and Polymers Χ O O O Χ Χ Electric components other than circuit boards Χ O O O O O O:
Hillstone Multi-core Security Appliance Installation Manual Preface About This Manual Thanks for choosing the network security products from Hillstone Networks, Inc. This document is an installation manual for Hillstone multi-core security appliances to help you install the Hillstone multi-core security appliance properly. This manual includes the following chapters: Chapter 1. Introduction Chapter 2. Installation Preparations Chapter 3. Installation Chapter 4. Boot and Configuration Chapter 5.
Hillstone Multi-core Security Appliance Installation Manual Table of Contents NAME AND CONCENTRATION OF TOXIC OR HAZARDOUS SUBSTANCES AND ELEMENTS IN PRODUCTS ..................... 2 PREFACE ..................................................................................................................................................................... 3 ABOUT THIS MANUAL ......................................................................................................................................
Hillstone Multi-core Security Appliance Installation Manual Connecting the Ground Wire .................................................................................................................................... 33 Connecting the Console Cable ................................................................................................................................... 33 Connecting the Ethernet Cable ..............................................................................................
Hillstone Multi-core Security Appliance Installation Manual List of Figures Figure 1-1: SG-6000-G5150 Front Panel ..................................................................................................................... 3 Figure 1-2: SG-6000-G2120 Front Panel ..................................................................................................................... 4 Figure 1-3:SG-6000-M8860 Front Panel ..................................................................................
Hillstone Multi-core Security Appliance Installation Manual List of Tables Table 1-1: SG-6000-G5150 Front Panel Description ................................................................................................... 3 Table 1-2: SG-6000-G2120 Front Panel....................................................................................................................... 4 Table 1-3: SG-6000-M8860 Front Panel Description ..............................................................................
Hillstone Multi-core Security Appliance Installation Manual Chapter 1 Introduction Overview The SG-6000 series multi-core security appliances are a new generation of multicore security appliance developed by Hillstone Networks. With Multi-core Plus® G2 architecture and role-based deep application inspection technology, the SG-6000 series can provide better network security than the IP/port based security defense of traditional firewalls.
Hillstone Multi-core Security Appliance Installation Manual faced by traditional appliances when multiple functionalities are running simultaneously. Modular Design Some models of Hillstone SG-6000 series support expansion modules. There are two kinds of pluggable hardware expansion modules: I/O module and storage module. The modular design greatly protects customer’s investment. The I/O module enhances the connectivity of the device, so that the device will not be obsolete when the network develops.
Hillstone Multi-core Security Appliance Installation Manual Figure 1-1: SG-6000-G5150 Front Panel No. Label No. Label No.
Hillstone Multi-core Security Appliance Installation Manual Figure 1-2: SG-6000-G2120 Front Panel No. Label No. Label No.
Hillstone Multi-core Security Appliance Installation Manual No. Label No. Label No.
Hillstone Multi-core Security Appliance Installation Manual supply PS0 LED 6 7 PS1: Power supply PS1 LED slot (not for storage expansion module) MGT (e0/0): management port 13 20 Slot 4: General expansion slot (not for storage expansion module) FAN: Fan HA (e0/1): HA 14 LED port Table 1-4: SG-6000-M7260 Front Panel Description The front panel of SG-6000-M3108 consists of 8 Gigabit Ethernet ports, 2 Combo ports (Ethernet port + SFP port), 1 USB port, 1 SD card slot, 1 Console port, 1 CLR button and s
Hillstone Multi-core Security Appliance Installation Manual No. Label No. Label No. Label 1 PWR: Power LED 4 HA:HA status LED 7 USB: USB port 2 STA: Status LED 5 CLR: CLR button 8 e0/0 - e0/7: Gigabit Ethernet ports 3 ALM: Alarm LED CON: Console port Table 1-6: SG-6000-M3100 Front Panel 6 The front panel of SG-6000-M1600 consists of 5 Gigabit Ethernet ports, 1 USB port, 1 Console port, 1 CLR button and some LED indicators. Figure 1-7 illustrates the front panel of SG-6000-M1600.
Hillstone Multi-core Security Appliance Installation Manual No. Label No. Label No.
Hillstone Multi-core Security Appliance Installation Manual No. Label No. 1 PWR: Power LED 2 ALM: Alarm LED 3 Label No. STA: Status LED Label - - e0/0 - e0/8: Gigabit Ethernet port status LED Table 1-10: SG-6000-E1600 Front Panel Description 4 - The front panel of SG-6000-E1100 (WLAN version) consists of some LED indicators. Figure 1-11 illustrates the front panel of SG-6000-E1100 (WLAN version). Figure 1-11: Front Panel of SG-6000-E1100 (WLAN version) No. 1 Label PWR: Power LED No.
Hillstone Multi-core Security Appliance Installation Manual No. No. PWR: Power LED 1 2 Label 3 Label No. STA: Status LED 5 Label 3G: 3G LED e0/0 - e0/8: Gigabit Ethernet port status LED Table 1-12: Front Panel Description of SG-6000-E1100 (3G version) ALM: Alarm LED 4 The front panel of SG-6000-E1100 (WLAN+3G version) consists of some LED indicators. Figure 1-13 illustrates the front panel of SG-6000-E1100 (WLAN+3G version). Figure 1-13: Front Panel of SG-6000-E1100 (WLAN+3G version) No.
Hillstone Multi-core Security Appliance Installation Manual Figure 1-15: SG-6000-G2120 Back Panel The back panel layout of SG-6000-M8860 consists of 2 power supply sockets, 1 grounding screw. The standard product of SG-6000-G8860 adopts dual power supplies and it is also available in single power supply. Figure 1-16 is the back panel of SG-6000-M8860 (single power supply): Figure 1-16: SG-6000-M8860 Back Panel The back panel layout of SG-6000-M7260 consists of 2 power supply sockets and 1 grounding screw.
Hillstone Multi-core Security Appliance Installation Manual Figure 1-19: SG-6000-M3100 Back Panel The back panel of SG-6000-M1600 has 1 power supply socket, 1 power supply switch and 1 grounding screw. Figure 1-20 illustrates the back panel of SG-6000M1600. Figure 1-20: SG-6000-M1600 Back Panel SG-6000-E2800, SG-6000-E2300, and SG-6000-E1700 have the same back panel layout.
Hillstone Multi-core Security Appliance Installation Manual keyhole, and 2 SMA connectors for WLAN antennas. Figure 1-23 illustrates the back panel of this model. Figure 1-23: SG-6000-E1100 (WLAN version) Back Panel No. Label No. Label No.
Hillstone Multi-core Security Appliance Installation Manual No. Label No. Label No. Label 1 SMA connector for 3G antenna 4 CON: Console port 7 e0/0 - e0/8: Gigabit Ethernet port 2 DC POWER: DC power interface 5 SIM: SIM card slot 8 Security keyhole 3 CLR: CLR SMA connector for 6 USB: USB port 9 3G antenna button Table 1-16: Back Panel Description of SG-6000-E1100 (3G version) SG-6000-E1100 (WLAN+3G version) uses the power adapter.
Hillstone Multi-core Security Appliance Installation Manual STA ALM PS0 PS1 Off The device is powered off. Green/Always on The system is booting. Green/Blinking The system is running normally. Red/Always on The system has failed to boot or has an error. Red/Always on The system is sending alarm(s). Green/Blinking The system is waiting. Orange/Blinking The system is using a trial license. Orange/Always on The trial license has expired and there legitimate license installed in the system.
Hillstone Multi-core Security Appliance Installation Manual ACT e0/0e0/8 3G WLAN on normal status. Off The link between this port and its peer device has failed. Orange/Blinking The port is sending or receiving data. Off No data is transmitted on this port. Green/Always on The link between this port and its peer device is in normal status. Green/Blinking The port is sending or receiving data.
Hillstone Multi-core Security Appliance Installation Manual SG-6000-M3108 8 2 1 1 1 SG-6000-M3100 8 Gigabit Ethernet ports 1 USB 2.0 Host port 1 Console port SG-6000-M1600 5 Gigabit Ethernet ports 1 USB 2.0 Host port 1 Console port SG-6000-E2800 SG-6000-E2300 5 Gigabit Ethernet ports 4 Gigabit Combo ports (Ethernet port + SFP port) 1 USB 2.
Hillstone Multi-core Security Appliance Installation Manual SG-6000-E1600 SG-6000-E1100 (WLAN version) SG-6000-E1100 (3G version) SG-6000-E1100 (WLAN+3G version) SG-6000-G5150 SG-6000-M8860 SG-6000-M7260 Dimensions (W×D×H) SG-6000-G2120 436.0 mm x 365.5 mm x 44.0 mm SG-6000-M3108 SG-6000-M3100 SG-6000-E2800 SG-6000-E2300 SG-6000-E1700 442.0 mm x 240.7 mm x 44.0 mm SG-6000-M1600 300.0 mm x 165.0 mm x 44.
Hillstone Multi-core Security Appliance Installation Manual Power Rating Input Voltage SG-6000-E1100 (WLAN version) SG-6000-E1100 (3G version) SG-6000-E1100 (WLAN+3G version) SG-6000-G5150 SG-6000-M8860 SG-6000-M7260 Gross weight: 2.
Hillstone Multi-core Security Appliance Installation Manual Attribute Description Connector RJ-45 Port Standard RS-232C Baud Rate 9600/19200/38400/57600/115200 bit/s Services Connect the CON port to the serial port of a PC and run a terminal emulation program on the PC to configure the appliance. Transmission Medium console cable Table 1-20: Console Port Attributes Auxiliary Port Hillstone multi-core security appliance provides an RS-232C asynchronous serial auxiliary (AUX) port.
Hillstone Multi-core Security Appliance Installation Manual Attribute Description Connector RJ-45 Port Standard Auto-MDIX Frame Format Ethernet_II Ethernet_SNAP 10/100/1000Mbps autosensing Full/half-duplex Table 1-23: Gigabit Copper Port Attributes Negotiation Mode SFP Port Hillstone multi-core security appliance supports SFP ports. The Table 1-14 describes the attributes of SFP port.
Hillstone Multi-core Security Appliance Installation Manual Description Attribute Short-haul Multimode Optical Module (850nm) Mediumhaul Singlemode Optical Module (1310nm) Long-haul Singlemode Optical Module (1310nm) Long-haul Singlemode Optical Module (1550nm) Ultra-long Haul Singlemode Optical Module (1550nm) Connector LC Fiber Type 62.
Hillstone Multi-core Security Appliance Installation Manual Attribute Description Connector XFP Frame Format Ethernet_II Ethernet_SNAP Negotiation Mode XFP optical module 10Gbps Table 1-27: XFP Port Attributes Hillstone multi-core security appliance supports five types of 10GBase-FX XFP optical module. All optical modules are hot-swappable.
Hillstone Multi-core Security Appliance Installation Manual Expansion Slot The chassis height of SG-6000-G5150, SG-6000-M8860, and SG-6000-M7260 is 2U with four half-U expansion slots (Slot 1-4); SG-6000-G2120 is 1U height with two half-U expansion slots (Slot 1-2). Follow the rules below when inserting the expansion modules into expansion slots. Half-U expansion slot fits in any slot. 1U height expansion modules can only be installed in Slot2 and Slot4.
Hillstone Multi-core Security Appliance Installation Manual maximum capacity that can be supported is 32GB. Power Supply Single/Dual power supply: Some product modules adopt single power supply, while others adopt dual power supplies, i.e. there are two power inputs installed in one device. Dual power supplies ensure uninterrupted power by instantly enabling the standby power supply when the active power supply fails to work.
Hillstone Multi-core Security Appliance Installation Manual Figure 1-26: AC Power Module for SG-6000-G5150/M8860/M7260 Figure 1-27: DC Power Module for SG-6000-G5150/M8860 /M7260 The power LED description for SG-6000-G5150, SG-6000-M8860, and SG-6000M7260 is listed in Table 1-20. LED OK AC DC Color/Status Description Green/Always on Power module is functioning normally. Off No power input. Yellow/Always on Power module has error. Off Power module is functioning normally.
Hillstone Multi-core Security Appliance Installation Manual Storage module: Enlarges the hardware space for storing logs. For detailed information about expansion modules, see Hillstone Multi-core Security Appliance Expansion Modules Manuel.
Hillstone Multi-core Security Appliance Installation Manual Chapter 2 Installation Preparations Introduction To prevent personnel injury and equipment damage, please carefully read all the safety warnings and cautions in this chapter before the installation. Hillstone products are designed for indoor use.
Hillstone Multi-core Security Appliance Installation Manual Keep the security appliance away from radio stations, radar, and other highfrequency and high-current devices. Use electromagnetic shielding when necessary. Grounding Requirements To use the security appliance more safely: Ensure that the grounding screw of the chassis is well grounded via the grounding wire. Ensure that the grounding pin of the power plug is well grounded.
Hillstone Multi-core Security Appliance Installation Manual Tools: Philips screwdrivers and ESD wrist strap. Cables: Power cable, console cable and Ethernet cable.
Hillstone Multi-core Security Appliance Installation Manual Chapter 3 Installation Before Installation A yellow seal with dark ink characters is stuck on a mounting screw of the chassis. Keep the seal intact. The sales representative will check this seal before maintenance operation. Please get the permission of your sales representative before opening the chassis yourself. Warranty will be void if you disassemble the chassis without authorization.
Hillstone Multi-core Security Appliance Installation Manual Make sure the intake and the exhaust vents are unblocked, and keep the appliance well ventilated. Do not place any heavy object on the top of the chassis. Installing the Appliance on a Rack Before mounting the appliance on a rack, ensure that the power is off, and the rack is stable enough and well grounded. Hillstone multi-core security appliances are designed for a 19-inch standard rack.
Hillstone Multi-core Security Appliance Installation Manual If the rack accommodates only one device, put the device on the bottom. The floating nuts in the accessory box can only fit in the 9mm x 9 mm squared holes of standard racks and they can be used when no original rack nuts are available. Connecting Cables This section describes how to connect cables to the appliance, including connecting the ground wire, the console cable, the Ethernet cable and the power cable.
Hillstone Multi-core Security Appliance Installation Manual Follow the guidelines below when connecting cables to the ports: Be careful not to connect the Ethernet port to the wrong ports. Read the label above the port carefully. For electrical Ethernet connection, use crossover cable or straight-through cable.
Hillstone Multi-core Security Appliance Installation Manual Warning: Before performing the procedure, ensure that the cable is not connected with any power source and make sure the cables will not be powered on during the process. To connect the DC power cable to the appliance, take the following steps: 1. Ensure that the power source voltage is in accordance with required voltage specified in System Parameters. 2. Switch off the power source. 3.
Hillstone Multi-core Security Appliance Installation Manual Figure 3-4: 3G Antenna and WLAN Antenna To install antennas for SG-6000-E1100 (WLAN version), SG-6000-E1100 (3G version), or SG-6000-E1100 (WLAN+3G version), take the following steps: 1. According to the function you use, select the corresponding antenna. 2. Install the antenna to the SMA connector at the back panel of the device by rotating the antenna clockwise.
Hillstone Multi-core Security Appliance Installation Manual 2. Insert the SIM card into the SIM card slot at the back panel of the device. Notes: The security appliance of SG-6000-E1100 (WLAN version) only supports the external 3G data card. Before using the 3G function, insert the 3G data card with a SIM card into the USB port at the back panel of the device. SIM card cannot be hot-swappable. Before installing or replacing the SIM card, power off the device.
Hillstone Multi-core Security Appliance Installation Manual Chapter 4 Boot and Configuration Introduction This chapter describes the initial system boot and basic configuration of Hillstone SG-6000 series, using a PC as the console terminal. Establishing a Configuration Environment Hillstone security appliances support both local and remote configuration. Administrators can use the following configuration methods.
Hillstone Multi-core Security Appliance Installation Manual Figure 4-2: Setting Parameters for the Terminal Session 3. Switch on the power supply, and the appliance performs self-test and initializes the configuration automatically. If the booting succeeds, the system will display the command line prompt “login”. Enter the default administrator name and password “hillstone” at the “login” and “password” prompts, press “Enter”. And now you are successfully logged in and accessing the CLI. 4.
Hillstone Multi-core Security Appliance Installation Manual Tenet and SSH You can also establish Telnet and SSH configuration environments. For more information, please see Hillstone Multi-core Security Appliance User Guide. Basic Configuration Before you begin to use the security appliance, you should be familiar with its features and your network deployment. Different device position in the network requires different topology design, working mode and policy configuration.
Hillstone Multi-core Security Appliance Installation Manual Chapter 5 Hardware Maintenance and Replacement Introduction This chapter explains how to install and remove the power supply module, the expansion module and the fan tray. Installing and Removing the Power Supply Module This section describes how to install and remove the power supply module of SG6000-G5150, SG-6000-M8860, and SG-6000-M7260.
Hillstone Multi-core Security Appliance Installation Manual Installing and Removing the Expansion Module SG-6000-G5150, SG-6000-G2120, SG-6000-M8860, and SG-6000-M7260 can accommodate expansion modules. This section describes how to install and remove the expansion module. To install an expansion module: 1. Make sure the power is switched off and you should wear the ESD strap properly. 2. Face the front panel of the appliance. 3. Remove the blank plate on the expansion slot if necessary. 4.
Hillstone Multi-core Security Appliance Installation Manual Chapter 6 Troubleshooting Introduction This chapter provides solutions to some common problems of Hillstone multi-core security appliances. Losing the Administrator Password If you lose the administrator password, please contact your local sales representative. Troubleshooting Power System Check the PWR LED on the front panel of the appliance. If the power supply is functioning normally, the PWR LED lights steadily in green color.
Hillstone Multi-core Security Appliance Installation Manual Copyright Information Copyright © 2014, Hillstone Networks, lnc. All rights reserved. Hillstone, Hillstone Networks logo, StoneOS, StoneManager, Hillstone PnPVPN, UTM Plus are trademarks of Hillstone Networks. All other trademarks or registered marks are the property of their respective owners. Hillstone Networks assumes no responsibility for any inaccuracies in this document.