Page 1 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Issue Date 2017-03-13 HUAWEI TECHNOLOGIES CO., LTD.
Page 2 Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided "AS IS"...
Page 3 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide About This Document About This Document Related Version The following table lists the product version related to this document. Product Name Version The USG9500 has the V500R001C50 following models:  USG9520 ...
Page 4 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide About This Document Symbol Description Indicates a potentially hazardous situation which, if not avoided, may result in minor or moderate injury. Indicates a potentially hazardous situation which, if not avoided, could result in equipment damage, data loss, performance deterioration, or unanticipated results.
Page 5 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide About This Document GUI Conventions The GUI conventions that may be found in this document are defined as follows. Convention Description Buttons, menus, parameters, tabs, window, and dialog titles Boldface are in boldface. For example, click OK.
Page 6 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Contents About This Document ........................ii 1 Hardware Overview ........................1 1.1 USG9580 ..................................1 1.1.1 Device Overview ............................... 1 1.1.2 Components of the USG9580 ............................ 3 1.1.3 Slots Layout and Supported Boards ........................... 6 1.1.4 Power Supply System ..............................
Page 7 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.3 USG9520 ..................................50 1.3.1 Device Overview ..............................50 1.3.2 Components of the USG9520 ..........................51 1.3.3 Slots Layout and Supported Boards ......................... 54 1.3.4 Power Supply System .............................. 57 1.3.4.1 Features of the Power Supply System........................57 1.3.4.2 DC Power Supply System .............................
Page 8 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.5 LPUF-240 and FPICs ............................128 1.4.5.1 LPUF-240 ................................128 1.4.5.2 20-Port 10/100/1000Base-RJ45 FPIC (FW-20X1G-RJ45) ................. 130 1.4.5.3 24-Port 100/1000 Base-X-SFP FPIC (E8KE-X-101-24XGE-SFP) ..............131 1.4.5.4 5-Port 10GBase LAN/WAN-SFP+ FPIC A (E8KE-X-101-5X10GE-SFP+) ............133 1.4.5.5 6*10GE SFP+ Daughter Card (FW-6X10GE-SFP+) ..................
Page 9 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.5.3 10 Gbit/s XFP Optical Module ..........................185 1.5.4 10 Gbit/s SFP+ Optical Module ..........................191 1.5.5 40 Gbit/s CFP Optical Modules ..........................196 1.5.6 40 Gbit/s QSFP+ Optical Module .......................... 199 1.5.7 100 Gbit/s CFP Optical Modules ...........................
Page 10 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 2.4 Installing USG9520 ..............................277 2.4.1 Preparing the Site ..............................277 2.4.2 Installing Cable Racks and Mounting Ears ......................279 2.4.3 Installing the Chassis into the Cabinet ........................280 2.4.4 Installing the PGND Cable ............................ 282 2.4.5 Installing Boards and Subcards ..........................
Page 11 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 3.4.2 Replacing the DC PEM of the USG9560....................... 360 3.4.3 Replacing a DC Power Module of USG9520 ......................363 3.4.4 Replacing an AC Power Module of USG9520 ...................... 367 3.5 Replacing a CF Card ..............................372 3.5.1 Replacing CF Card 1 .............................
Page 12 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents A.3 Environmental Requirements for Device Running ....................445 A.3.1 Requirements for Selecting a Site for an Equipment Room ................. 445 A.3.2 Equipment Room Layout ............................446 A.3.3 Construction Requirements for the Equipment Room ..................446 A.3.4 Requirements for Temperature, Humidity, and Altitude ..................
Page 13 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Hardware Overview 1.1 USG9580 The USG9580 is a 32 U device. It employs an integrated chassis and provides 16 LPU/SPU slots. Its MPUs, SFUs, power modules, and fans work in redundancy mode.
Page 14 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-1 Appearance of the chassis System Features The USG9580 provides the following system features:  Unblocked switching network that can be upgraded, with switching capacity at the Tbit/s level ...
Page 15 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents  Shielding at the modular level to meet Electro Magnetic Compatibility (EMC) requirements  Hot-swappable boards, power modules, and fans  U-shaped air channels to improve system heat dissipation  Distributed power supply to enhance power supply capability for a single chassis ...
Page 16 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Front Panel Figure 1-2 USG9580 Front Panel Name Description Air filter The USG9580 has three air filters that are deployed on the air intake vents of the upper and lower air channels and air intake vent at the left side of the SFU area to protect the device against dust.
Page 17 It is used to deploy optical fibers and cables. The front cable rack is cable rack divided into the upper and lower racks. The logo of the upper cable rack is "HUAWEI", the logo of the lower cable rack is "USG9500 Series". Rear Panel...
Page 18 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description module The fan modules are deployed on the air exhaust vents of the upper and lower air channels respectively and work in 2+2 backup mode. The USG9580 uses eight PEM power modules for DC power supply.
Page 19 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-4 Slot layout on the USG9580 Table 1-1 describes the slot layout on the USG9580. Table 1-1 Table 1 Board distribution in the board cage of the USG9580 Slot Slot...
Page 20 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Type Description Swap 0305G09U 1.4.4.7 Firewall Service Processing Unit (SPU-X8X16-20-O-E8KE, for USG9560/USG9580) 03057426 1.4.4.8 Firewall Service Processing Unit (SPUA-20-O-H, for USG9560/USG9580) 1.4.4.9 Firewall Service Processing Unit 03057520 (SPUB-20-O-H, for USG9560/USG9580) 1.4.4.10 Firewall Performance Expansion...
Page 21 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Type Description Swap FPIC (E8KE-X-101-24XGE-SFP) 03056632 1.4.6.4 5-Port 10GBase LAN/WAN-SFP+ FPIC A (E8KE-X-101-5X10GE-SFP+) 1.4.6.5 6*10GE SFP+ Daughter Card 03056684 (FW-6X10GE-SFP+) 03056686 1.4.6.6 12*10GE SFP+ Daughter Card (FW-12X10GE-SFP+) 03056848 1.4.6.7 3-Port 40GBase QSFP+ FPIC (FW-3X40G-QSFP+) 1.4.6.8 1-Port 40GBase LAN-CFP FPIC A...
Page 22 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Type Description Swap POS-XFP FPIC (1 x OC-192c/STM-64c POS-XFP) 1.4.9.5 1-port 10GBase LAN/WAN-XFP 03056625 FPIC (1 x 10GBase LAN/WAN) 1.4.9.6 4-Port 10GBase WAN/LAN-XFP 0305G07W FPIC (4x10GBase LAN/WAN) Integrated Line 03056637 1.4.10 1-Port 100GBase-CFP Integrated...
Page 23 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-5 Distributed Architecture of the power supply for the USG9580 1.1.4.2 DC Power Supply System This section describes the power supply architecture of the DC power system and the appearance and technical specifications of the DC power modules of the USG9580.
Page 24 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents DC power Powered Area Powered Part module PEM-B2  Rear panel: fan modules (upper right side) PEM-A3 Zone3  Front panel: slots 13-16 and 22. PEM-B3  Rear panel: fan modules (lower left side)
Page 25 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-6 Power supply architecture of the USG9580 DC power system Figure 1-7 shows the appearance of the PEM. Issue 01 (2017-03-13) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 26 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-7 Appearance of the PEM The LED indicators on the PEM are described in Table 1-4. Table 1-4 Description of the indicators of the PEM Indicator Color Description Green Indicates normal power output. If the indicator is steady on, it implies the normal output.
Page 27 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Technical Specification Input rated voltage -48 V DC/-60 V DC Maximum input current 70 A Output voltage -72 V DC to -38 V DC Output current 70 A Rated current of the 70 A (Each PEM is controlled by an air switch).
Page 28 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-8 Power supply architecture of the USG9580 AC power system An AC power chassis is 2 U high. Installing the AC power chassis in the same cabinet as the chassis is recommended. If the AC power chassis cannot be installed in the same cabinet as the chassis, it should be placed near the cabinet and careful attention needs to be paid to the cabling.
Page 29 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-9 Front view of the AC power chassis Figure 1-10 Rear view of the AC power chassis As USG9580 do not support AC power chassis management, the DB9 interface on the rear of an AC power chassis does not need to connect to the monitoring cable in the installation auxiliary material package.
Page 30 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-7 Indicator description Indicator Color Normal Abnormal Cause Power running Power failure Green indicator (no AC input, over-voltage AC input, or under-voltage AC input) and no output by the power module...
Page 31 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Technical Specification range Maximum input current 18.5 A/single module Number of power outputs 4 Maximum output current 50 A/single module Maximum output power 2900 W/single module 1.1.5 Heat Dissipation System This section describes the components of the heat dissipation system and the appearance, functions, and technical specifications of fan modules.
Page 32 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-11 Air flow in the USG9580 1.1.5.2 Fan Module This section describes the appearance, technical specifications, and speed adjustment of fans. Appearance and Technical Specifications of Fan Modules The four fan modules of the USG9580 are located at the air exhaust vents side by side and work in 2+2 backup mode.
Page 33 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-12 Appearance of a fan module Table 1-9 describes the indicators on the fan module. Table 1-9 Description of the indicators on the fan module Indicator Color Description If the indicator blinks once every two seconds (0.5 Hz), the fan...
Page 34 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-11 Fan Speed Adjustment Principles Ambient Rotationa Noise and Dissipation Standards Temperat l Speed -5° C - Low speed When fans rotate at a constantly low speed, the noises meet the +27°...
Page 35 For details on USG9580 SFUs, see 1.4.3.1 E8KE-X16-SFUC-200SP. The switching network responsible for switching data between LPUs/SPUs is a key component of the USG9580. The USG9580 uses switching chips developed by Huawei and Memory-Crossbar-Memory (M-C-M) to provide a three-level switching mode. Level-1 and level-3 switching use a shared-memory model and are performed on LPUs/SPUs;...
Page 36 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-15 Switching network of the USG9580 The level-1 switching chip on one LPU is fully connected to the level-2 switching chips on SFUs. The level-2 switching chips on the SFUs are also fully connected to the level-3 switching chip on another LPU.
Page 37 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents System Control and Management Unit As the system control and management unit, the MPU provides the following functions on the system control panel:  Route calculation: All routing protocol packets are sent by the forwarding engine to the MPU for processing.
Page 38 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description SDRAM capacity of the 4 GB NVRAM capacity of the 4 MB Flash capacity of the 32 MB CF card 2 x 2 GB Number of slots 2 (slots 17 and 18)
Page 39 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Maximum 8930 W Power (six 9500 W LPUF-240s and nine SPUs are configured.) Heat dissipation Fan module 4 hot-swappable fan modules, each of which has one fan Air flow Upper and lower air channels: draw air from the front and discharge air from the back.
Page 40 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description NOTE a. The width does not include the width of the mounting ear attached. b. The height is 1 U (1 U = 1.75 inches, or about 44.45 mm), which is a height unit defined in International Electrotechnical Commission (IEC) 60297 standards.
Page 41 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-16 Appearance of the chassis System Features The USG9560 provides the following system features:  Unblocked switching network that can be upgraded, with switching capacity at the Tbit/s level ...
Page 42 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents  Backup for key components such as power modules, fan modules, clocks, and management buses  Protection against incorrect insertion of boards  Queries about alarm prompts, alarm indications, running status, and alarm status of the voltage and ambient temperature 1.2.2 Components of the USG9560...
Page 43 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description The SFUs of the USG9560 are responsible for data switching of the entire system. The USG9560 has one separate SFU. It works with the SFUs integrated in two SRUs in 2+1 backup mode for load balancing.
Page 44 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description Rear cable It is used to deploy optical fibers and cables. There are two rear cable rack racks on the upper parts of the power modules. Power Power supply areas of the four PEM power modules on the USG9560.
Page 45 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Supported Boards Table 1-14 lists the specifications of boards supported by the USG9560. Table 1-14 Supported boards by the USG9560 Type Description Swap 0305G08N 1.4.2.2 E8KE-X8-SRUA-200 0305G08P 1.4.3.2 E8KE-X8-SFUC-200 SPUs and SPCs 03056638 1.4.4.3 X8&X16 SPU (SPU-X8X16-B)
Page 46 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Type Description Swap 03056848 1.4.5.7 3-Port 40GBase QSFP+ FPIC (FW-3X40G-QSFP+) 03056631 1.4.5.8 1-Port 40GBase LAN-CFP FPIC A (E8KE-X-101-1X40GE-CFP) 1.4.5.9 1*100GE CFP Daughter Card 03056685 (FW-1X100GE-CFP) LPUF-120 and 03056682 1.4.6.1 LPUF-120 FPIC 03056890 1.4.6.2 20-Port 10/100/1000Base-RJ45...
Page 47 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Type Description Swap 1.4.8.4 4-port 10GBase LAN/WAN-XFP 0305G07X FPIC (P40-4x10GBase LAN/WAN-XFP) LPUF-21 and 03056624 1.4.9.1 LPUF-21 FPIC 1.4.9.2 12-port 0305G054 10Base-T/100Base-TX/1000Base-T-RJ45 FPIC (12x10/100/1000Base-TX-RJ45) 1.4.9.3 12-port 03056626 100Base-FX/1000Base-X-SFP FPIC (12x100/1000Base-SFP) 1.4.9.4 1-port OC-192c/STM-64c...
Page 48 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-20 Distributed architecture of the power supply for the USG9560 1.2.4.2 DC Power Supply System This section describes the power supply architecture of the DC power system and the appearance and technical specifications of the DC power modules of the USG9560.
Page 49 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-21 Power supply architecture of the USG9560 DC power system Figure 1-22 shows the appearance of the PEM. Figure 1-22 Appearance of the PEM The LED indicators on the PEM are described in Table 1-16.
Page 50 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Indicator Color Description implies the normal output. Power failure indicator. If the indicator is steady on, it indicates the following:  The lightning protection link of the power module failed. ...
Page 51 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents AC Power DC Power Powered Powered Part Module Module Area PEM-A2 Zone2  Front panel: slots 1-4, 9, and 11. PEM-B2  Rear panel: fan modules (upper right side) NOTE PEMs A and B back up each other.
Page 52 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-24 Front view of the AC power chassis Figure 1-25 Rear view of the AC power chassis As USG9580 do not support AC power chassis management, the DB9 interface on the rear of an AC power chassis does not need to connect to the monitoring cable in the installation auxiliary material package.
Page 53 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-19 Indicator description Indicator Color Normal Abnormal Cause Power running Power failure Green indicator (no AC input, over-voltage AC input, or under-voltage AC input) and no output by the power module...
Page 54 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Technical Specification range Maximum input current 18.5 A/single module Number of power outputs 4 Maximum output current 50 A/single module Maximum output power 2900 W/single module 1.2.5 Heat Dissipation System This section describes the air channel features of the heat dissipation system and the appearance, functions, and technical specifications of fan modules.
Page 55 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-26 Air flow in the USG9560 1.2.5.2 Fan Module This section describes the appearance, technical specifications, and speed adjustment of fans. Appearance and Technical Specifications of Fan Modules The two fan modules of the USG9560 are located at the air exhaust vents side by side and work in 1+1 backup mode.
Page 56 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-27 Appearance of a fan module Table 1-21 describes the indicators on the fan module. Table 1-21 Description of the indicators on the fan module Indicator Color Description If the indicator blinks once every two seconds (0.5 Hz), the fan...
Page 57 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-23 Fan Speed Adjustment Principles Ambient Rotationa Noise and Dissipation Standards Temperat l Speed -5° C - Low speed When fans rotate at a constantly low speed, the noises meet the +27°...
Page 58 For details on USG9560 SFUs, see 1.4.3.2 E8KE-X8-SFUC-200. The switching network responsible for switching data between LPUs/SPUs is a key component of the USG9560. The USG9560 uses the switching chips developed by Huawei and Memory-Crossbar-Memory (M-C-M) to provide a three-level switching mode. Level-1 and level-3 switching adopts the shared-memory model and is performed on LPUs/SPUs;...
Page 59 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents of the data packets. The cells are then sent to the level-3 switching chips on another LPU. At this point, the switching of the cells by the level-2 switching chips is completed.
Page 60 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.2.8 Technical Specifications This section describes the dimensions, weight, power, and environment specifications of the USG9560. Table 1-24 lists the technical specifications of the USG9560. Table 1-24 USG9560 Technical Specifications Item...
Page 61 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Maximum -72 V to -38 V input 90 V AC to 264 V AC; 50/60 Hz (The output power reduces voltage to half of the maximum output when the input voltage is in range the range of 90 V AC to 175 V AC.)
Page 62 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents NOTE a. The width does not include the width of the mounting ear attached. b. The height is 1 U (1 U = 1.75 inches, or about 44.45 mm), which is a height unit defined in International Electrotechnical Commission (IEC) 60297 standards.
Page 63 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-31 Appearance of the AC chassis System Features The USG9520 provides the following system features:  Distributed hardware-based forwarding  Separation of control channels and service channels to ensure non-blocking control channels ...
Page 64 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents DC Chassis Figure 1-32 Front panel of the USG9520 DC chassis Name Description The Main Processing Unit (MPU) on the USG9520 is in charge of system control and route information learning. It is the central control unit of the device.
Page 65 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description The USG9520 has one fan module that has two fans. The fans are module deployed on the air intake vents of chassis air channels and work in 1+1 backup mode.
Page 66 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description the wrist strap to be effective, ensure that the device is already grounded. AC power The AC power supply system of the USG9520 consists of two DC module power modules that are connected to an external direct current distribution panel and work 1+1 backup mode.
Page 67 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-36 Slot layout on the USG9520 Table 1-25 describes the slot layout on the USG9520. Table 1-25 Table 1 Board distribution in the board cage of the USG9520 Slot Slot...
Page 68 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Type Description Swap 03056639 1.4.4.14 Application Security Service Processing Card (SPC-IPS-20) LPUF-120 and 03056682 1.4.6.1 LPUF-120 FPIC 03056890 1.4.6.2 20-Port 10/100/1000Base-RJ45 FPIC (FW-20X1G-RJ45) 1.4.6.3 24-Port 100/1000 Base-X-SFP 03056633 FPIC (E8KE-X-101-24XGE-SFP) 03056632 1.4.6.4 5-Port 10GBase LAN/WAN-SFP+...
Page 69 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Type Description Swap FPIC 1.4.9.2 12-port 0305G054 10Base-T/100Base-TX/1000Base-T-RJ45 FPIC (12x10/100/1000Base-TX-RJ45) 1.4.9.3 12-port 03056626 100Base-FX/1000Base-X-SFP FPIC (12x100/1000Base-SFP) 1.4.9.4 1-port OC-192c/STM-64c 0305G055 POS-XFP FPIC (1 x OC-192c/STM-64c POS-XFP) 1.4.9.5 1-port 10GBase LAN/WAN-XFP 03056625 FPIC (1 x 10GBase LAN/WAN) 1.4.9.6 4-Port 10GBase WAN/LAN-XFP...
Page 70 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.3.4.2 DC Power Supply System This section describes the appearance, functions, and technical specifications of the DC power module. The USG9520 DC power module is 1 U high, as shown in Figure 1-37.
Page 71 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Parameter Dimensions (Height × Width × 40 mm × 100 mm × 190 mm Depth) Weight 0.7 kg Number of inputs Input voltage range -72 V DC to -38 V DC...
Page 72 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-38 Appearance of the 2200 W AC PDB Name Description Power cable clip Binds and fix the power cable. Power receptacle Connects the C19 plug of the AC power cable.
Page 73 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description program is loaded, the indicator blinks once every 2 seconds.  ALARM indicator (yellow) Off: The power module does not have alarms.  Steady on: The power module has ever had a fault, such as overvoltage, undervoltage, or overcurrent.
Page 74 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1600 W AC Power System The USG9520 1600 W AC PDB is in the 1 U standard modular structure. It contains the EPW30B-48A AC power module. Both the 1600 W AC PDB and EPW30B-48A AC power module are hot swappable.
Page 75 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-30 Technical specifications of EPW30B-48A AC power module Item Description Model EPW30B-48A Dimensions (Height × Width × 40 mm x 116 mm x 208 mm Depth) Weight 1.8 kg Number of inputs Maximum input voltage range 90 V AC to 264 V AC;...
Page 76 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-40 Air flow in the USG9520 DC chassis Figure 1-41 Air flow in the USG9520 AC chassis The heat dissipation system consists of the following components:  Two fan modules ...
Page 77 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Appearance and Technical Specifications of Fan Modules The fan modules of the USG9520 is located at the back of the chassis. Each fan module has two fans that work in 1+1 backup mode. When a single fan fails, the heat dissipation system enables the system to work in a short period of time at ambient temperature of 40°...
Page 78 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Technical Specification Maximum wind pressure 700 Pa Maximum wind rate 850 m Maximum noise 78 dB Fan Speed Adjustment When the system is fully configured, temperatures reported by the temperature sensors on the LPUs, SPUs and MPUs serve as the basis for fan speed adjustment.
Page 79 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-43 Air filter on the USG9520 air intake frame The air filter of the USG9520 can be bent, which facilitates the maintenance within a limited space in the rear of the chassis.
Page 80 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents  Data storage: The MPU provides one USB card, which serve as mass storage devices to store data files. System Maintenance Unit As the system maintenance unit, the MPU collects monitored information to test system units locally or remotely, or implements in-service upgrading of system units.
Page 81 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description cable rack. Installation position N68E cabinet or a standard 19-inch cabinet Weight Empty chassis DC chassis: 15kg AC chassis: 25kg Full DC chassis: 30.7 kg configuration AC chassis: 40.7 kg...
Page 82 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Storage temperature -40° C to 70° C Ambient Long-term 5% RH to 85% RH, no coagulation relative Short-term 5% RH to 95% RH, no coagulation humidity Storage relative humidity...
Page 83 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents An FPIC SPU consists of two parts: mother board and FPIC. The USG9500 provides multiple types of SPUs with different performance. An SPU mother board can hold one or two Service Processing Cards (SPCs).
Page 84 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board (SPC-20-O-E8  1.4.4.13 Application Security Service Processing Card (SPC-APPSE C-FW)  1.4.4.14 Application Security Service Processing Card (SPC-IPS-20)  1.4.4.10 Firewall...
Page 85 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board H&M)  1.4.4.12 Firewall Performance Expansion Card (SPCB-20-O- H&M)  1.4.4.10 Firewall Performance Expansion Card (SPC-20-O-E8  1.4.4.13 Application Security Service...
Page 86 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board Firewall 1C01 Firewall Service Performance Processing Expansion Unit Card (SPU-X3-20- (SPC-20-O-E8 O-E8KE, for USG9520)  1.4.4.13 Application Security Service Processing Card...
Page 87 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board USG9560/US Application G9580) Security Service Processing Card (SPC-APPSE C-FW)  1.4.4.14 Application Security Service Processing Card (SPC-IPS-20)  1.4.4.11 Firewall Performance...
Page 88 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board Service Processing Card (SPC-IPS-20)  1.4.4.11 Firewall Performance Expansion Card (SPCA-20-O- H&M)  1.4.4.12 Firewall Performance Expansion Card (SPCB-20-O- H&M) ...
Page 89 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board H&M)  1.4.4.12 Firewall Performance Expansion Card (SPCB-20-O- H&M)  1.4.5.2 20-Port 10/100/1000B ase-RJ45 FPIC (FW-20X1G- RJ45)  1.4.5.3 24-Port 100/1000...
Page 90 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board  1.4.5.8 1-Port 40GBase LAN-CFP FPIC A (E8KE-X-101 -1X40GE-CF  1.4.5.9 1*100GE CFP Daughter Card (FW-1X100G E-CFP)  1.4.6.2 20-Port 10/100/1000B...
Page 91 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board 40GBase QSFP+ FPIC (FW-3X40G- QSFP+)  1.4.6.8 1-Port 40GBase LAN-CFP FPIC A (E8KE-X-101 -1X40GE-CF  1.4.6.9 1*100GE CFP Daughter Card (FW-1X100G E-CFP) ...
Page 92 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board LPUF-40-A 1C01 20-Port and FPIC 100/1000Base -X-SFP Flexible Card (P40-20xGE/F E-SFP)  1.4.8.3 2-Port 10GBase LAN/WAN-X FP Flexible Card (P40-2x10GB LAN/WAN-X ...
Page 93 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First Software Version Board Name Subcard Supporti ng the Board 10GBase LAN/WAN-X FP FPIC (1 x 10GBase LAN/WAN)  1.4.9.6 4-Port 10GBase WAN/LAN-X FP FPIC (4x10GBase LAN/WAN) 1.4.10 1-Port 100GBase-CF Integ...
Page 94 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.4. 1.4.4. Fire Fire wall wall Serv Serv Proc 1.4.4 1.4.4 & Proc essin essin Unit Unit (SPU (SPU -X8X -X3-2 16-20 3-B2 3-B) 0-O- -O-E 8KE, 9560/ 9520) 9580) 1.4.4.10...
Page 95 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents SPU Mother Board 1.4.4. 1.4.4. Fire Fire wall wall Serv Serv Proc 1.4.4 1.4.4 & Proc essin essin SPU Card Unit Unit (SPU (SPU -X8X -X3-2 16-20 3-B2 3-B) 0-O- -O-E...
Page 96 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents SPU Mother Board 1.4.4. 1.4.4. Fire Fire wall wall Serv Serv Proc 1.4.4 1.4.4 & Proc essin essin SPU Card Unit Unit (SPU (SPU -X8X -X3-2 16-20 3-B2 3-B) 0-O- -O-E...
Page 97 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First FPIC LPU Mother Board Softw 1.4.8 1.4.9 Versi FPIC LPU 1.4.5.1 1.4.6.1 1.4.7.1 LPUF LPUF Card Swap LPUF LPUF LPUF -40-A Supp -240 -120 -101 orting FPIC FPIC Board 00Base-T-RJ...
Page 98 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First FPIC LPU Mother Board Softw 1.4.8 1.4.9 Versi FPIC LPU 1.4.5.1 1.4.6.1 1.4.7.1 LPUF LPUF Card Swap LPUF LPUF LPUF -40-A Supp -240 -120 -101 orting FPIC FPIC Board 1.4.8.3 2-Port...
Page 99 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents First FPIC LPU Mother Board Softw 1.4.8 1.4.9 Versi FPIC LPU 1.4.5.1 1.4.6.1 1.4.7.1 LPUF LPUF Card Swap LPUF LPUF LPUF -40-A Supp -240 -120 -101 orting FPIC FPIC Board Daughter...
Page 100 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.1.2 Board Structure This section describes the appearance and structures of boards and cards. Structure of the Integrated Board The integrated board on the USG9500 is a plug-in board and consists of a circuit board, connectors, upward and downward ejector levers, setscrews, and a bolt, as shown in Figure 1-44.
Page 101 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-45 Structure of the flexible board 1. Ejector lever 2. Subcard slot 0 3. Subcard slot 1 4. Captive screw 5. Connector The flexible subcard is a plug-in board and consists of the circuit board, connector, heat sinks, ejector lever, and captive screws, as shown in Figure 1-46.
Page 102 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Board Slot Numbering Slots are numbered in left-right and top-down order. The slot number is marked on the slots. Use the USG9560 as an example. Slot numbers start from 1 and range from 1 to 8, as shown in Figure 1-47.
Page 103 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-50 Subcard slot numbering for the cards providing half-width and one-quarter-width subcards Interface Numbering Interfaces are named in the format of LPU slot/FPIC slot/interface number. Interfaces are numbered from 0 in right-left and top-down order.
Page 104 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents If the LPU is a fixed interface board, the FPIC slot number is considered 0. 1.4.2 MPUs and SRUs The MPU/SRU controls the system in a centralized manner and learns routing information. It is the controlling center of the system.
Page 105 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description RESET button The button is used for resetting the MPU. If you press the RESET button, you can reset the MPU. CF card slot, button, and indicator CF SLOT2 MPUs of the USG9580 have two CF cards numbered CF card 1 and CF card 2.
Page 106 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes Table 1-38 lists the 1000MBase-X-SFP interface attributes. Table 1-38 1000MBase-X-SFP interface attributes Attribute Description Connector type Operation mode 1000M fiber Standard compliance IEEE 802.3-2002 Cable specification Single-mode or multi-mode fibers Table 1-39 lists the attributes of the 10Base-T/100Base-TX/1000Base-T-RJ45 interfaces.
Page 107 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-41 lists the AUX interface attributes. Table 1-41 AUX interface attributes Attribute Description Connector Type RJ45 Operation mode Duplex UART Electrical attribute RS-232 Baud rate 9600 bit/s (default value), which can be changed as required...
Page 108 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-53 Appearance of the E8KE-X8-SRUA-200 Name Description Buttons and indicators on the panel OFL button To remove a board, you must press and hold the button for six seconds until the OFL indicator turns on.
Page 109 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description CF OFL button If you press the CF OFL button, all operations on the CF card will be ended and the CF card will be powered off. Interfaces and indicators CTL-ETH-SFP interface It is reserved for the use after capacity expansion.
Page 110 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attribute Description Cable specification Single-mode or multi-mode fibers Table 1-44 lists the attributes of the 10Base-T/100Base-TX/1000Base-T-RJ45 interfaces. Table 1-44 10Base-T/100Base-TX/1000Base-T-RJ45 interface attributes Attribute Description Connector type RJ45 Operation mode 10M/100M/1000M auto-sensing interfaces, supporting...
Page 111 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attribute Description Baud rate 9600 bit/s (default value), which can be changed as required Data equipment type Data Terminal Equipment (DTE) Cable specification 8-core shielded cable Technical Specifications Table 1-47 shows the technical specifications of the E8KE-X8-SRUA-200.
Page 112 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description Buttons and indicators on the panel OFL button To remove a board, you must press and hold the button for six seconds until the OFL indicator turns on. NOTE This button takes effect only on the slave MPU.
Page 113 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-48 10Base-T/100Base-TX/1000Base-T-RJ45 interface attributes Attribute Description Connector type RJ45 Operation mode 10M/100M/1000M auto-sensing interfaces, supporting full-duplex mode Standard compliance IEEE 802.3-2002 Cable specification Category 5 unshielded twisted pair (UTP) cables recommended when the interface rate is 10 Mbit/s or 100 Mbit/s;...
Page 114 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Technical Specifications Table 1-51 shows the technical specifications of the E8KE-X3-MPU. Table 1-51 Technical specifications of the E8KE-X3-MPU Item Description Silkscreen of the board name E8KE-X3-MPU Dimensions (W x D x H) 198.5 mm x 551 mm x 40 mm...
Page 115 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents indicator Table 1-52 describes the buttons and indicators on the MPUD panel. Table 1-52 Buttons and indicators on the MPUD panel Indicator/Button Description To remove a board, you must press and hold the button for six OFL button seconds until the OFL indicator turns on.
Page 116 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Connector Interface Name Description Type AUX interface RJ45 It connects to the Modem for remote maintenance through dialing. CF card interface TYPE II It is used to hold a CF card to store data standard files as a massive storage device.
Page 117 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-56 AUX interface attributes Attribute Description Connector type RJ45 Operation mode Duplex UART Electrical attribute RS-232 Baud rate 9600 bit/s (default value), which can be changed as required Data equipment type...
Page 118 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-56 Appearance of the E8KE-X16-SFUC-200SP Name Description OFL button To remove a board, you must press and hold the button for six seconds until the OFL indicator turns on. OFL indicator (red) Steady on: You can remove the board.
Page 119 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.3.2 E8KE-X8-SFUC-200 E8KE-X8-SFUC-200 is the USG9560 SFU. It uses the non-blocking switch fabric. It is hot-swappable and responsible for data switching of the entire system. Panel Figure 1-57 shows the appearance of the E8KE-X8-SFUC-200.
Page 120 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Dimensions (W x D x H) 400 mm x 553.5 mm x 35 mm Power consumption 77 W (typical value) Heat dissipation 262.72 BTU/hour Board weight 3.82 kg 1.4.4 SPUs and SPCs An SPU is a unit responsible for security service processing.
Page 121 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes The SPU-X3-B does not provide interfaces externally. Technical Specifications Table 1-60 shows the technical specifications of the SPU-X3-B. Table 1-60 Technical specifications of the SPU-X3-B Item Description Silkscreen of the board...
Page 122 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-59 Appearance of the SPU-X3-B2 Name Description OFL button To remove a board, you must press and hold the button for six seconds until the OFL indicator turns on. OFL indicator (red) Steady on: You can remove the board.
Page 123 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.4.3 X8&X16 SPU (SPU-X8X16-B) The SPU-X8X16-B applies to the USG9560 and USG9580 platforms and is a mother board. By default, this board does not have any service processing capability and must be used together with subcards.
Page 124 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Silkscreen of the board SPUD name SPU-X8X16-B Dimensions (W x D x H) 400 mm x 520 mm x 41 mm Power consumption 125 W (typical value) Heat dissipation 426.5 BTU/hour...
Page 125 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description ! NOT SWAP The SPC and SPU in one slot share one sales code. Either the SPC or SPU cannot be separately replaced. OFL button To remove an SPC, you must press and hold the OFL button for six seconds until the OFL indicator turns red for one second and then turns off.
Page 126 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.4.5 Firewall Service Processing Unit (SPUA-20-O-M, for USG9520) The SPUA-20-O-M is inserted into the LPU/SPU slot of the USG9520, provides no expansion slot, and is hot swappable. Panel Figure 1-62 shows the appearance of the SPUA-20-O-M.
Page 127 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes The SPUA-20-O-M does not provide interfaces externally. Technical Specifications Table 1-64 shows the technical specifications of the SPUA-20-O-M. Table 1-64 Technical specifications of the SPUA-20-O-M Item Description Silkscreen of the board...
Page 128 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description OFL button To remove an SPU, you must press and hold the OFL button for six seconds until the OFL indicator turns on. OFL indicator (red) Steady on: You can remove the SPU.
Page 129 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Maximum input voltage -72 V to -38 V range (DC) CPU number 1.6 GHz Memory DDR4 32GB/CPU 1.4.4.7 Firewall Service Processing Unit (SPU-X8X16-20-O-E8KE, for USG9560/USG9580) The SPU-X8X16-20-O-E8KE is inserted into the LPU/SPU slot of the USG9560 and USG9580, provides an expansion slot, and is hot swappable.
Page 130 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description for six seconds until the OFL indicator turns red for one second and then turns off.  OFL indicator If the indicator is green and blinks once every second (1 Hz), the SPC is running normally.
Page 131 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Panel Figure 1-65 shows the appearance of the SPUA-20-O-H. Figure 1-65 Appearance of the SPUA-20-O-H Name Description OFL button To remove an SPU, you must press and hold the OFL button for six seconds until the OFL indicator turns on.
Page 132 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Technical Specifications Table 1-67 shows the technical specifications of the SPUA-20-O-H. Table 1-67 Technical specifications of the SPUA-20-O-H Item Description Silkscreen of the board SPUD name SPUA-20-O-H Dimensions (W x D x H)
Page 133 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description OFL button To remove an SPU, you must press and hold the OFL button for six seconds until the OFL indicator turns on. OFL indicator (red) Steady on: You can remove the SPU.
Page 134 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Maximum input voltage -72 V to -38 V range (DC) CPU number 1.6 GHz Memory DDR4 32 GB/CPU 1.4.4.10 Firewall Performance Expansion Card (SPC-20-O-E8KE) The SPC-20-O-E8KE is a dual-CPU service sub-card of the firewall service board, can be inserted into a slot of the SPU, and is hot swappable.
Page 135 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-69 Technical specifications of the SPC-20-O-E8KE Item Description Silkscreen of the board SPCB02 name SPC-20-O-E8KE Dimensions (W x D x H) 175 mm x 280 mm x 36 mm Power consumption...
Page 136 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes The SPCA-20-O-H&M does not provide interfaces externally. Technical Specifications Table 1-70 lists the technical specifications of the SPCA-20-O-H&M. Table 1-70 Technical specifications of the SPCA-20-O-H&M Item Description Silkscreen of the board...
Page 137 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description for six seconds until the OFL indicator turns red for one second and then turns off.  OFL indicator If the indicator is green and blinks once every second (1 Hz), the board is running normally.
Page 138 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Panel Figure 1-70 shows the appearance of the SPC-APPSEC-FW. Figure 1-70 Appearance of the SPC-APPSEC-FW Name Description To remove a board, you must press and hold the OFL button OFL button for six seconds until the OFL indicator turns red for one second and then turns off.
Page 139 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description 1.2 GHz Memory DDR3 16 GB/CPU 1.4.4.14 Application Security Service Processing Card (SPC-IPS-20) The SPC-IPS-20 is a dual-CPU subcard for processing application security services and has an IAE to provide content security. This subcard takes up a slot on the mother board. You can insert the SPC-IPS-20 independently in a slot on the mother board or use it together with a firewall SPC on the mother board.
Page 140 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-73 Technical specifications of the SPC-IPS-20 Item Description Silkscreen of the board IPSC01 name SPC-IPS-20 Dimensions (W x D x H) 175 mm x 280 mm x 36 mm Power consumption...
Page 141 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-72 Appearance of the LPUF-240 Name Description To remove a board, you must press and hold the button for five OFL button seconds until the OFL indicator turns on. OFL indicator (red) Steady on: You can remove the board.
Page 142 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.5.2 20-Port 10/100/1000Base-RJ45 FPIC (FW-20X1G-RJ45) The FW-20X1G-RJ45 occupies one 1/2-width flexible card slot, applies to LPUF-240s and LPUF-120s, but does not support hot swap. Panel Figure 1-73 shows the appearance of the FW-20X1G-RJ45.
Page 143 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Technical Specifications Table 1-76 shows the technical specifications of the FW-20X1G-RJ45. Table 1-76 Technical specifications of the FW-20X1G-RJ45 Item Description Silk-screen board name FW-20X1G-RJ45 Dimensions (W x D x H) 178 mm x 225 mm x 38 mm...
Page 144 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description Indicator below the  Steady on: The link is connected. interface (green)  Blinking: There is data being transmitted or received.  Off: The link is disconnected. Interface Attributes Table 1-77 lists the attributes of interfaces on E8KE-X-101-24XGE-SFP.
Page 145 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.5.4 5-Port 10GBase LAN/WAN-SFP+ FPIC A (E8KE-X-101-5X10GE-SFP+) The E8KE-X-101-5X10GE-SFP+ occupies one 1/2-width flexible card slot, applies to LPUF-240s, LPUF-120s, and LPUF-101s, works in LAN or WAN mode, uses SFP+ optical modules, but does not support hot swap.
Page 146 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Technical Specifications Table 1-80 shows the technical specifications of the E8KE-X-101-5X10GE-SFP+. Table 1-80 Technical specifications of the E8KE-X-101-5X10GE-SFP+ Attribute Description Silkscreen of the board E8KE-X-101-5X10GE-SFP+ name Dimensions (W x D x H) 203.3 mm x 178.65 mm x 37.2 mm...
Page 147 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes Table 1-81 lists the attributes of interfaces on FW-6X10GE-SFP+. Table 1-81 FW-6X10GE-SFP+ interface attributes Attribute Description Connector type LC/PC Optical interface attribute Compliant with the selected SFP+ optical module. For the optional attributes of the optical module, see 1.5.4 10 Gbit/s...
Page 148 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-77 Appearance of the FW-12X10GE-SFP+ Name Description  STA (green) Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 149 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Dimensions (W x D x H) 193 mm x 178.65 mm x 37.2 mm Power consumption 52 W (typical value) Heat dissipation 168.7 BTU/hour Board weight 0.75 kg 1.4.5.7 3-Port 40GBase QSFP+ FPIC (FW-3X40G-QSFP+)
Page 150 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attribute Description Connector type LC/PC Optical interface Compliant with the selected SFP+ optical module. For the optional attribute attributes of the optical module, see 1.5.6 40 Gbit/s QSFP+ Optical Module. Working mode...
Page 151 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-79 Appearance of the E8KE-X-101-1X40GE-CFP Name Description  Blinks every two seconds (0.5 Hz): The system is running STATUS (green) normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 152 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Dimensions (W x D x H) 178 mm x 225 mm x 38 mm Power consumption 28 W (typical value) Heat dissipation 95.54 BTU/hour Board weight 0.9 kg 1.4.5.9 1*100GE CFP Daughter Card (FW-1X100GE-CFP)
Page 153 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attribute Description Optical interface attribute Compliant with the selected CFP optical module. For the optional attributes of the optical module, see 1.5.7 100 Gbit/s CFP Optical Modules. Working mode Full duplex...
Page 154 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Panel Figure 1-81 shows the appearance of the LPUF-120. Figure 1-81 Appearance of the LPUF-120 Name Description OFL button To remove a board, you must press and hold the button for five seconds until the OFL indicator turns on.
Page 155 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.6.2 20-Port 10/100/1000Base-RJ45 FPIC (FW-20X1G-RJ45) The FW-20X1G-RJ45 occupies one 1/2-width flexible card slot, applies to LPUF-240s and LPUF-120s, but does not support hot swap. Panel Figure 1-82 shows the appearance of the FW-20X1G-RJ45.
Page 156 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Technical Specifications Table 1-93 shows the technical specifications of the FW-20X1G-RJ45. Table 1-93 Technical specifications of the FW-20X1G-RJ45 Item Description Silk-screen board name FW-20X1G-RJ45 Dimensions (W x D x H) 178 mm x 225 mm x 38 mm...
Page 157 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description Indicator below the  Steady on: The link is connected. interface (green)  Blinking: There is data being transmitted or received.  Off: The link is disconnected. Interface Attributes Table 1-94 lists the attributes of interfaces on E8KE-X-101-24XGE-SFP.
Page 158 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.6.4 5-Port 10GBase LAN/WAN-SFP+ FPIC A (E8KE-X-101-5X10GE-SFP+) The E8KE-X-101-5X10GE-SFP+ occupies one 1/2-width flexible card slot, applies to LPUF-240s, LPUF-120s, and LPUF-101s, works in LAN or WAN mode, uses SFP+ optical modules, but does not support hot swap.
Page 159 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Technical Specifications Table 1-97 shows the technical specifications of the E8KE-X-101-5X10GE-SFP+. Table 1-97 Technical specifications of the E8KE-X-101-5X10GE-SFP+ Attribute Description Silkscreen of the board E8KE-X-101-5X10GE-SFP+ name Dimensions (W x D x H) 203.3 mm x 178.65 mm x 37.2 mm...
Page 160 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes Table 1-98 lists the attributes of interfaces on FW-6X10GE-SFP+. Table 1-98 FW-6X10GE-SFP+ interface attributes Attribute Description Connector type LC/PC Optical interface attribute Compliant with the selected SFP+ optical module. For the optional attributes of the optical module, see 1.5.4 10 Gbit/s...
Page 161 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-86 Appearance of the FW-12X10GE-SFP+ Name Description  STA (green) Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 162 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Dimensions (W x D x H) 193 mm x 178.65 mm x 37.2 mm Power consumption 52 W (typical value) Heat dissipation 168.7 BTU/hour Board weight 0.75 kg 1.4.6.7 3-Port 40GBase QSFP+ FPIC (FW-3X40G-QSFP+)
Page 163 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attribute Description Connector type LC/PC Optical interface Compliant with the selected SFP+ optical module. For the optional attribute attributes of the optical module, see 1.5.6 40 Gbit/s QSFP+ Optical Module. Working mode...
Page 164 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-88 Appearance of the E8KE-X-101-1X40GE-CFP Name Description  Blinks every two seconds (0.5 Hz): The system is running STATUS (green) normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 165 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Dimensions (W x D x H) 178 mm x 225 mm x 38 mm Power consumption 28 W (typical value) Heat dissipation 95.54 BTU/hour Board weight 0.9 kg 1.4.6.9 1*100GE CFP Daughter Card (FW-1X100GE-CFP)
Page 166 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attribute Description Optical interface attribute Compliant with the selected CFP optical module. For the optional attributes of the optical module, see 1.5.7 100 Gbit/s CFP Optical Modules. Working mode Full duplex...
Page 167 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Panel Figure 1-90 shows the appearance of the LPUF-101. Figure 1-90 Appearance of the LPUF-101 Name Description OFL button To remove a board, you must press and hold the button for five seconds until the OFL indicator turns on.
Page 168 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.7.2 24-Port 100/1000 Base-X-SFP FPIC (E8KE-X-101-24XGE-SFP) The E8KE-X-101-24XGE-SFP occupies one 1/2-width flexible card slot, applies to LPUF-240s, LPUF-120s and LPUF-101s, but does not support hot swap. The 24-port 100/1000Base-X-SFP flexible card supports the following features: ...
Page 169 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attribute Description optional attributes of the optical module, see  1.5.1 1 Gbit/s Electrical Transceiver  1.5.2 1.25 Gbit/s SFP/eSFP Optical Module Working mode Full duplex Standard compliance IEEE 802.3-2002 Frame format Ethernet_II, Ethernet_SAP, Ethernet_SNAP, and 802.3...
Page 170 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-92 Appearance of the E8KE-X-101-4X10GE-SFP+ Name Description STATUS (green)  Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 171 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Parameter Description Dimensions (W x D x H) 89.1 mm x 203.3 mm x 37.2 mm Power consumption 20 W (typical value) Heat dissipation 68.26 BTU/hour Board weight 0.4 kg 1.4.7.4 5-Port 10GBase LAN/WAN-SFP+ FPIC A...
Page 172 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attribute Description Connector type LC/PC Optical interface attribute Compliant with the selected SFP+ optical module. For the optional attributes of the optical module, see 1.5.4 10 Gbit/s SFP+ Optical Module. Working mode...
Page 173 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description STATUS (green)  Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state. L/A (green) ...
Page 174 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.8 LPUF-40-A and FPIC This chapter describes the structure and specifications of the Flexible Card Line Processing Unit (LPUF-40-A, 2 sub-slots) and FPIC. 1.4.8.1 LPUF-40-A The LPUF-40-A is hot swappable and provides two 1/2-width slots, each of which holds one FPIC.
Page 175 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes Th LPUF-40-A does not provide interfaces externally. Technical Specifications Table 1-117 shows the technical specifications of the LPUF-40-A. Table 1-117 Technical specifications of the LPUF-40-A Item Description Silkscreen of the board...
Page 176 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description STATUS (green)  Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state. Indicator below the ...
Page 177 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.4.8.3 2-Port 10GBase LAN/WAN-XFP Flexible Card (P40-2x10GBase LAN/WAN-XFP) The P40-2x10GBase LAN/WAN-XFP occupies one 1/2-width flexible card slot, applies to LPUF-40-A, works in LAN or WAN mode, uses XFP optical modules, but does not support hot swap.
Page 178 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Attributes Description Optical interface Compliant with the selected XFP optical module. For the attributes optional attributes of the optical module, see 1.5.3 10 Gbit/s XFP Optical Module. Working mode Full-duplex Frame format...
Page 179 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-98 Appearance of the P40-4x10GBase LAN/WAN-XFP Name Description  STATUS (green) Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 180 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-123 Technical specifications of the P40-4x10GBase LAN/WAN-XFP Item Specifications Silkscreen of the board P40-4x10GBase LAN/WAN-XFP name Dimensions (W x D x H) 180 mm x 145 mm x 40 mm...
Page 181 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Name Description OFL button To remove a board, you must press and hold the button for five seconds until the OFL indicator turns on. OFL indicator (red) Steady on: You can remove the board.
Page 182 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-100 Appearance of the 12x10/100/1000Base-TX-RJ45 Name Description STATUS (green)  Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 183 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Dimensions (W x D x H) 180 mm x 145 mm x 40 mm Power consumption 10 W (typical value) Heat dissipation value 34.12 BTU/hour Board weight 0.50 kg 1.4.9.3 12-port 100Base-FX/1000Base-X-SFP FPIC (12x100/1000Base-SFP)
Page 184 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes Table 1-127 lists the attributes of interfaces on the 12x100/1000Base-SFP. Table 1-127 12x100/1000Base-SFP interface attributes Attribute Description Connector type LC/PC Interface attributes Compliant with the selected SFP optical module. For the optional attributes of the optical module, see ...
Page 185 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-102 Appearance of the 1 x OC-192c/STM-64c POS-XFP Name Description  STATUS (green) Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 186 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Silk-screen board name 1 x OC-192c/STM-64c POS-XFP Dimensions (W x D x H) 180 mm x 145 mm x 40 mm Power consumption 16 W (typical value) Heat dissipation value 54.59 BTU/hour...
Page 187 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents If you configure 10 GE interface to work in WAN mode, use single-mode optical fibers to connect devices. Table 1-131 1 x 10GBase LAN/WAN interface attributes Attribute Description Connector type LC/PC Optical interface Compliant with the selected XFP optical module.
Page 188 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-104 Appearance of the 4x10GBase LAN/WAN Name Description  STATUS (green) Blinks every two seconds (0.5 Hz): The system is running normally.  Blinks twice each second (2 Hz): The system is in the alarm state.
Page 189 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Specifications Power consumption 31 W (typical value) Heat dissipation 105.77 BTU/hour Board weight 1.2 kg 1.4.10 1-Port 100GBase-CFP Integrated Line Processing Unit (LPUI-101) The LPUI-101 is hot swappable and supports packet forwarding at the line speed of 100 Gbit/s on a single interface.
Page 190 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Interface Attributes Table 1-135 lists the attributes of interfaces on LPUI-101. Table 1-135 LPUI-101 Interface attributes Attribute Description Connector type LC/PC Optical interface attribute Compliant with the selected CFP optical module. For the optional attributes of the optical module, see 1.5.7 100 Gbit/s...
Page 191 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-106 1 Gbit/s Electrical Transceiver Table 1-137 lists the currently available 1 Gbit/s electrical transceivers. Table 1-137 1 Gbit/s electrical transceivers Product Interface Transmis Transmis Auto-neg Remarks Model Number Standard...
Page 192 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Environment standard RoHS(exempted) Security standard FCC class B, IEC 61000-4-3 > 500 V (Human body model) Table 1-139 lists the specifications of 1 Gbit/s electrical transceivers. Table 1-139 Specifications of 1 Gbit/s electrical transceivers...
Page 193 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-140 1.25 Gbit/s SFP/eSFP optical modules Product Interface Transmis Transmis Wavelen Remarks Model Number Standard sion sion gth (nm) Distance medium (km) (mi) eSFP-GE- 1000BAS Multi-mod 02315204 0.5 (0.31) Preferred...
Page 194 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-142 lists the specifications of the eSFP-GE-MM850-500 optical module. Table 1-142 Specifications of the eSFP-GE-MM850-500 optical module Item Description Interface standard 1000BASE-SX Transmission rate 1.25 Gbit/s Interface type LC/PC Transmission distance 500m (310.7 ft.) (50/125 um MMF)
Page 195 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Parameter Description Interface standard 1000BASE-LX Transmission rate 1.25 Gbit/s Interface type Transmission distance 10 km(6.21 mi) Optical transmitter Optical source type Center wavelength 1310 nm Operating wavelength range 1270-1355 nm Spectral characteristics...
Page 196 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Parameter Description Transmission distance 40 km (25 mi) Optical transmitter Optical source type Center wavelength 1310 nm Operating wavelength range 1275 nm-1335 nm Spectral characteristics Maximum root mean square (RMS) Spectral Width Maximum spectral width (-20 dB) 1.0 nm...
Page 197 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Parameter Description Center wavelength 1550 nm Operating wavelength range 1540 nm-1570 nm Spectral characteristics Maximum root mean square (RMS) Spectral Width Maximum spectral width (-20 dB) 1.0 nm Minimum side mode suppression ratio...
Page 198 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-108 10 Gbit/s XFP Optical Module Table 1-146 lists the currently available 10 Gbit/s XFP optical modules. Table 1-146 10 Gbit/s XFP optical modules Product Interface Transmis Transmis Wavelen Remarks...
Page 199 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-147 lists the basic features of 10 Gbit/s XFP optical modules and the compliant standards. Table 1-147 Basic features of 10 Gbit/s XFP optical modules and the compliant standards Item...
Page 200 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description (SMSR) Average transmit optical power Maximum transmit optical power -1.3 dBm Minimum transmit optical power -7.3 dBm Minimum extinction ratio 3.0 dB Optical receiver Operating wavelength range 840-860 nm Receiver sensitivity -9.9 dBm...
Page 201 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Maximum transmit optical power -1 dBm Minimum transmit optical power -6 dBm Minimum extinction ratio 6 dB Optical receiver Operating wavelength range 1270-1565 nm Receiver sensitivity -14.4 dBm Overload power 0.5 dBm...
Page 202 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Minimum extinction ratio 8.2 dB Optical receiver Operating wavelength range 1270-1565 nm Receiver sensitivity -15.8 dBm Overload power -1 dBm Maximum optical channel cost 2 dB Maximum reflection factor -26 dB Table 1-151 lists the specifications of the XFP-10G-SM1550-80K optical module.
Page 203 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Operating wavelength range 1270-1600 nm Receiver sensitivity -24 dBm Overload power -7 dBm Maximum optical channel cost 2 dB Maximum reflection factor -27 dB 1.5.4 10 Gbit/s SFP+ Optical Module The 10 Gbit/s SFP+ optical modules can only be used on 10 GE interfaces.
Page 204 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Product Interface Transmis Wavelen Mode Remarks Model Number Standard sion gth (nm) Distance (km) 0-40Km mi.) modules produced FINISAR are of the cooled type, and initializati on time does not exceed 90s.
Page 205 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-154 lists the specifications of the SFP+-10G-MM850-300 optical modules. Table 1-154 Specifications of the SFP+-10G-MM850-300 optical modules Item Description Interface standard 10GBASE-SR Transmission rate 10.3125 Gbit/s (10GBASE-SR) Interface type Transmission distance 300 m (984.24 ft) (50/125um MMF, OM3)
Page 206 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-155 Specifications of the SFP+-10G-SM1310-10Km optical modules Item Description Interface standard 10GBASE-LR Transmission rate 10.3125 Gbit/s (10GBASE-LR) Interface type Transmission distance 10 km (6.21 mi.) Optical transmitter Optical source type...
Page 207 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Interface type Transmission distance 40 km (24.86 mi.) Optical transmitter Optical source type Center wavelength 1550 nm Operating wavelength range 1530-1565 nm Spectral characteristics Maximum root mean square (RMS)
Page 208 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Optical transmitter Optical source type Center wavelength 1550 nm Operating wavelength range 1530-1565 nm Spectral characteristics Maximum root mean square (RMS) spectral width Maximum spectral width (-20dB) 1 nm...
Page 209 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Figure 1-110 40 Gbit/s CFP Optical Modules Table 1-158 lists the available 40 Gbit/s CFP optical modules. Table 1-158 40 Gbit/s CFP optical modules Model Interface Transmis Transmis Wavelen Remarks Number...
Page 210 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-160 CFP-40G-SM1310-10k optical module specifications Item Description Interface standard 40GBASE-LR4 Transmission rate 41.25 Gbit/s Interface type Transmission distance 10 km (6.21 mi) Optical transmitter Optical source type Semi-cooled EA-DFB Center wavelength...
Page 211 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents 1.5.6 40 Gbit/s QSFP+ Optical Module The 40 Gbit/s QSFP+ optical modules can only be used on 40 GE interfaces. The wavelength of these 40 Gbit/s QSFP+ optical modules can be 850 nm, or 1310 nm-center multiple wavelength ranges.
Page 212 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-162 Basic features of 40 Gbit/s QSFP+ optical modules and the compliant standards Item Description Interface standard IEEE 802.3ba Bit Error Ratio (BER) <1x10E Temperature 0° C to 70° C (32° F to 158° F)
Page 213 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Minimum extinction ratio 3.5 dB Optical receiver Operating wavelength range 1264.5 nm-1277.5 nm 1284.5 nm-1297.5 nm 1304.5 nm-1317.5 nm 1324.5 nm-1337.5 nm –11.5 dBm Receiver sensitivity Overload power 2.3 dBm Maximum optical channel cost 1.9 dB...
Page 214 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Optical receiver Operating wavelength range 840 nm-860 nm Receiver sensitivity -9.5 dBm Overload power 2.4 dBm Maximum optical channel cost Maximum reflection factor Table 1-164 lists the specifications of the QSFP+-40G-MM-0.3km optical modules.
Page 215 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Overload power 2.4 dBm Maximum optical channel cost Maximum reflection factor 1.5.7 100 Gbit/s CFP Optical Modules The 100 Gbit/s CFP Optical Modules can only be used on 100 GE interfaces. They provide multiple wavelength ranges.
Page 216 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Table 1-167 Attributes and standards of 100 Gbit/s CFP optical modules Item Description Interface standard 100GBASE-LR4 100GBASE-SR10 Bit error rate (BER) < 1 x 10E Operating temperature 0-70° C (32° F to 158° F)
Page 217 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description (SMSR) Average transmit optical power Maximum transmit optical power 4.5 dBm Minimum transmit optical power -4.3 dBm Minimum extinction ratio 4.0 dB Optical receiver Working wavelength 1294.53-1296.59 nm 1299.02-1301.09 nm 1303.54-1305.63 nm...
Page 218 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide Contents Item Description Average transmit optical power Maximum transmit optical power -2.4 dBm Minimum transmit optical power -7.6 dBm Minimum extinction ratio 3 dB Optical receiver Working wavelength 840-860 nm Receiver sensitivity -9.5 dBm...
Page 219 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Hardware Installation 2.1 Installation Preparation Before installing the USG9500, learn installation preparations and requirements, prepare technical files, tools, and instruments, and unpack and check the device. 2.1.1 Preparing Technical Documents Technical documents are a vital prerequisite for installing a cabinet successfully.
Page 220 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Document Category Document Name Description Packing List 2.1.2 Preparing Tools and Meters The owner of installation needs to arrange the tools and meters for hardware installation. Table 2-2 lists the required tools and meters for USG9500 installation.
Page 221 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Category Instrument/Meter cable.  Optical power meter: used to test the optical power.  Optical attenuator: used to measure optical attenuation.  Multimeter: used to test insulation within the cabinet, cable connections, and electric performance specifications of the device, such as the voltage, current, and resistance.
Page 222 Step 3 The engineering supervisor must send the Cargo Inspection Feedback Form that is confirmed and signed by the customer to the order management engineer in the local Huawei representative office within three days. At the same time, stop unpacking the products.
Page 223 Step 5 Stop unpacking the products, trace the cause, report the problem to the order management engineer of the local Huawei representative office, and wait for further assistance. To protect the device and trace the cause, transfer the unpacked device indoors to ensure proper storage.
Page 224 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Step 2 Place the wooden case in an even manner on the ground, and make sure that the side with the pallet faces downwards. Step 3 Insert one end of the spanner into the hole of the tongue on the cover of the wooden case. Lift the spanner to straighten the tongue, as shown in Figure 2-1.
Page 225 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-2 Removing the cover Step 5 Straighten all the tongues that join the side wooden panels and remove the wooden panels, as shown in Figure 2-3. Issue 01 (2017-03-13) Huawei Proprietary and Confidential Copyright ©...
Page 226 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-3 Removing the side wooden panels Step 6 Stand the cabinet. Remove the pallet, foam plates, and package bag. Three to five persons are required to stand the cabinet. When standing the cabinet, prevent the cabinet from tipping over, as this may cause injury to the personnel who are handling it.
Page 227 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Step 7 Check the cabinet according to the following requirements:  Check the appearance of the cabinet. Ensure that the exterior (especially the bottom) of the cabinet is intact, free from water penetration, distortion, and rust.
Page 228 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-4 Unpacking the carton 1 Pressure-sensitive adhesive tape 2 Packing strap 3 Carton label 4 Carton 5 Foam plate 6 Label of the board box 7 Board box...
Page 229 Meanwhile, two AC power chassis must be installed on the device. Cabinet Requirements You are advised to use Huawei standard NE68E cabinet. The self-purchased cabinet must meet A.6 Requirements on Customers' Cabinets Purchased from Other Vendors. Cabinet Clearance Requirements The N68E-22 cabinet is used as an example.
Page 230 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-5 Diagram for cabinet deployment Device Clearance Requirements The USG9580 chassis is 32 U high and requires front and back maintenance mode. Device clearance must meet the following requirements: ...
Page 231 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation  The USG9580 is heavy and requires four people to lift and move.  Use the handles on the chassis sides when moving the device. Do not use the handles of modules to avoid damages to the device.
Page 232 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-7 Installing mounting ears Step 3 Mount the USG9580 in the cabinet. Lift the USG9580, move it to the cabinet, place it onto the guide rails, and push it into the cabinet.
Page 233 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-8 Mounting the USG9580 in the cabinet Step 4 Mount the AC power chassises in the cabinet. (Mandatory in case of AC power supply) When the equipment room uses the AC power supply, one USG9580 requires two AC power chassises, as shown in Figure 2-9.
Page 234 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Follow-up Procedure Perform the following checks after the installation:  Ensure that the USG9580 is placed securely inside the cabinet.  Ensure that the exhaust of the USG9580 is not blocked by other objects.
Page 235 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-10 Connecting the PGND cable ----End Follow-up Procedure Verify the following after the cabling is complete:  The PGND cable is securely connected to the ground terminal. ...
Page 236 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation  Ensure that no water is on the device or board before you insert the board into the device.  Before installing boards, wear the ESD wrist strap and that the strap is well grounded to prevent any electrostatic discharge of the human body from damaging the sensitive components.
Page 237 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-12 Installing a board Step 3 Install a subcard. Before you install a subcard, remove redundant guide rails from the board and store them properly for future use.
Page 238 The front cable rack is classified into upper and lower cable racks. The logo of the upper cable rack is "HUAWEI", the logo of the lower cable rack is "USG9500 Series" Align the studs of the cable rack with the holes on the front panel of the device and insert the rack.
Page 239 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Use M4 x 10 screws to fix the cable rack. Figure 2-15 Install the front cable rack  Install the rear cable rack. There are four rear cable racks on the rear panel of the chassis.
Page 240 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-16 Install the rear cable rack ----End 2.2.6 Installing Power Cables-DC Power Distribution In standard configuration, the USG9580 has eight PEM modules. Each PEM module requires an NEG DC power cable and an RTN DC power cable. This section describes how to connect power cables to the two DC supply modules.
Page 241 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Cable Image NEG cable RTN cable  The terminals on DC cables. Terminal Image OT bare crimping terminal (M8) JG2 double-hole bare crimping terminal (M6)  For details, see 2.5.1.1 Guide to the DC Power Distribution.
Page 242 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Step 3 Use tie wraps to bind the cables every 100 mm upwards from the bottom end, and fix the cables to the cabling rack. Step 4 Affix permanent labels 20 mm from both ends of each power cable.
Page 243 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Follow-up Procedure Note that the power cable has polarity. After the device is powered on, if the PEM indicator blinks red, check whether the anode and cathode of the power cable for the PEM are connected without error.
Page 244 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Cable Image DC cables NEG cable from the device to the AC power chassis RTN cable Terminals JG2 double-hole on DC bare crimping cables from terminal (M6) the device...
Page 245 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Step 3 Connect one end of the DC power cables to the PEM modules on USG9580. Connect the other end of the DC power cables to the output terminals of the AC power chassis.
Page 246 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Follow-up Procedure Note that the power cable has polarity. After the device is powered on, if the PEM indicator blinks red, check whether the anode and cathode of the power cable for the PEM are connected without error.
Page 247 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Before bundling network cables, use a network cable tester to test cable connectivity. Bind the network cables to form a rectangle inside the cabinet. Each bundle contains a maximum of 20 network cables.
Page 248 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-19 Connecting a network cable Step 4 Lay out the network cable along a cabinet and route the cable through the cable hole for the signal cables at the top (overhead cabling) or bottom (underfloor cabling) of the cabinet.
Page 249 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation 2.2.9 Connecting Optical Fibers This section describes how to install optical transceivers on the ports and connect them to the ports of the peer device using optical fibers according to the network plan.
Page 250 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Do not look into the optical interface of the optical module or the optical fiber connector without eye protection. Wear an ESD wrist strap or ESD gloves before installing optical modules.
Page 251 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-21 Figure 1 Installing optical transceivers and connecting optical fibers Step 5 Repeat Step 1 Step 4 to install all optical transceivers and connect all optical fibers. Step 6 Coil up the redundant optical fibers around a fiber management tray.
Page 252 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Follow-up Procedure After you power on the USG9500, check the connection by observing the optical port indicator. If the indicator is on or blinks, the link is connected or data is being transmitted. If the indicator is off, the link is disconnected.
Page 253 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Cable Installation Checklist Item Verify that all the self-made ground cables are copper-based with proper wire diameters. There is no switch, fuse, or disconnection on the cable. Verify that ground cables, AC input power cables, cables in the cabinet are connected correctly according to the wiring diagram of the power system, and the screws are tightened.
Page 254 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Before power-on check, switch all circuit breakers to the OFF position. Before you power on the USG9580, ensure that:  The power cable and PGND cable are properly connected.
Page 255 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-22 Indicator status when the USG9580 is operating properly ----End Result Table 2-4 Device indicators Item Indicator Color Status Description Green If the indicator is steady green, the PEM has normal output.
Page 256 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Indicator Color Status Description seconds (0.5 Hz), the fan module or PEM is faulty (including the case that not all PEMs are powered on). MPU/SRU Green From the MPU/SRU being powered on...
Page 257 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Context Before power-on check, switch all circuit breakers to the OFF position. Before you power on the USG9580, ensure that:  The power cable and PGND cable are properly connected.
Page 258 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-24 Indicator status when the USG9580 is operating properly ----End Result Table 2-5 Indicators on the AC power chassis Item Color Status Description Cause of the Abnormality Operation...
Page 259 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Color Status Description Cause of the Abnormality Fault If the indicator is off, The AC power chassis is indicator the AC power chassis powered off due to over-voltage is running properly.
Page 260 Meanwhile, one AC power chassis must be installed on the device. Cabinet Requirements You are advised to use Huawei standard NE68E cabinet. The self-purchased cabinet must meet A.6 Requirements on Customers' Cabinets Purchased from Other Vendors. Issue 01 (2017-03-13) Huawei Proprietary and Confidential Copyright ©...
Page 261 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Cabinet Clearance Requirements The N68E-22 cabinet is used as an example. As shown in Figure 2-25, cabinet clearance must meet the following requirements: Aisles in the equipment room ≥ 1000 mm; aisles between cabinet rows ≥ 1000 mm ...
Page 262 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation 2.3.2 Installing the Chassis into the Cabinet The USG9560 can be mounted into a 19-inch standard cabinet through guide rails. Context  The USG9560 is heavy and requires four people to lift and move.
Page 263 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-26 Installing floating nuts and guide rails Step 2 Install mounting ears on the USG9560. Use a Phillips screwdriver to fix the mounting ears to both sides of the chassis with M4 screws, as shown in Figure 2-27.
Page 264 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-27 Installing Mounting Ears Step 3 Mount the USG9560 in the cabinet. Lift the USG9560, move it to the cabinet, place it onto the guide rails, and push it into the cabinet.
Page 265 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-28 Mounting the USG9560 in the cabinet Step 4 Mount the AC power chassises in the cabinet. (Mandatory in case of AC power supply) When the equipment room uses the AC power supply, one USG9560 requires one AC power chassis, as shown in Figure 2-29.
Page 266 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Follow-up Procedure Perform the following checks after the installation:  Ensure that the USG9560 is placed securely inside the cabinet.  Ensure that the exhaust of the USG9560 is not blocked by other objects.
Page 267 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-30 Connecting the PGND cable ----End Follow-up Procedure Verify the following after the cabling is complete:  The PGND cable is securely connected to the ground terminal. ...
Page 268 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation  Ensure that no water is on the device or board before you insert the board into the device.  Before installing boards, wear the ESD wrist strap and that the strap is well grounded to prevent any electrostatic discharge of the human body from damaging the sensitive components.
Page 269 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Before you install a subcard, remove redundant guide rails from the board and store them properly for future use. Remove the filler panel from the board. Smoothly insert the subcard into the board along the guide rail.
Page 270 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-34 Install air filters to the air intake frame  Install the cable rack. Install the front cable rack. Slide the rack to the right to click it into place.
Page 271 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation 2.3.6 Installing Power Cables-DC Power Distribution In standard configuration, the USG9560 has four PEM modules. Each PEM module requires an NEG DC power cable and an RTN DC power cable. This section describes how to connect power cables to the two DC supply modules.
Page 272 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Terminal Image OT bare crimping terminal JG2 double-hole bare crimping terminal  For details, see 2.5.2.1 Guide to the DC Power Distribution. Procedure Step 1 Make temporary marks on both ends of each power cable using a marker.
Page 273 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-36 Affix permanent labels ----End Follow-up Procedure Note that the power cable has polarity. After the device is powered on, if the PEM indicator blinks red, check whether the anode and cathode of the power cable for the PEM are connected without error.
Page 274 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Labels for the power cables must be filled in and attached to the cables as required. All labels are neat and face the same direction for easy viewing. The power cable, grounding cable and the signal cable should be bound separately. The distance between them must be more than 3 cm.
Page 275 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Cable Image RTN cable Terminals JG2 double-hole on DC bare crimping cables from terminal (M6) the device to the AC power chassis AC cables from the AC power chassis to the AC power supply device ...
Page 276 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-37 Affix permanent labels ----End Follow-up Procedure Note that the power cable has polarity. After the device is powered on, if the PEM indicator blinks red, check whether the anode and cathode of the power cable for the PEM are connected without error.
Page 277 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Labels for the power cables must be filled in and attached to the cables as required. All labels are neat and face the same direction for easy viewing. The power cable, grounding cable and the signal cable should be bound separately. The distance between them must be more than 3 cm.
Page 278 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation The electrical module can be inserted only in the interface with an odd number on the 24-port 100/1000Base-X-SFP flexible interface card. Step 3 Connect one end of a network cable to the electrical transceiver of the USG9560 and the other end to the Ethernet port of the peer device based on the network plan.
Page 279 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Follow-up Procedure Verify the following after the installation:  The labels at both ends of the cable are correct, clear, neat, and facing the same direction.  The cables and connectors are free of any damage or breakage and are connected properly and reliably.
Page 280 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Do not look into the optical interface of the optical module or the optical fiber connector without eye protection. Wear an ESD wrist strap or ESD gloves before installing optical modules.
Page 281 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-40 Figure 1 Installing optical transceivers and connecting optical fibers Step 5 Repeat Step 1 Step 4 to install all optical transceivers and connect all optical fibers. Step 6 Coil up the redundant optical fibers around a fiber management tray.
Page 282 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Follow-up Procedure After you power on the USG9500, check the connection by observing the optical port indicator. If the indicator is on or blinks, the link is connected or data is being transmitted. If the indicator is off, the link is disconnected.
Page 283 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Cable Installation Checklist Item Verify that all the self-made ground cables are copper-based with proper wire diameters. There is no switch, fuse, or disconnection on the cable. Verify that ground cables, AC input power cables, cables in the cabinet are connected correctly according to the wiring diagram of the power system, and the screws are tightened.
Page 284 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Before power-on check, switch all circuit breakers to the OFF position. Before you power on the USG9580, ensure that:  The power cable and PGND cable are properly connected.
Page 285 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Result Table 2-7 Device indicators Item Indicator Color Status Description Green If the indicator is steady green, the PEM has normal output. Alarm indicator. If the indicator is steady red, ...
Page 286 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Indicator Color Status Description Hz). After the SFU is registered, the SFU is working properly if the indicator blinks at 0.5 Hz. Green If the indicator is steady green, the SFU is working properly;...
Page 287 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-42 Indicator status when the AC power chassis is working properly Figure 2-43 Indicator status when the USG9560 is operating properly ----End Result Table 2-8 Indicators on the AC power chassis...
Page 288 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Color Status Description Cause of the Abnormality exception occurs. the AC power chassis is in the dormant state (the indicator is on and no alarm is generated). Fault...
Page 289 90 V AC to 264 V AC. Two different power sources are required for redundancy. Cabinet Requirements You are advised to use Huawei standard NE68E cabinet. The self-purchased cabinet must meet A.6 Requirements on Customers' Cabinets Purchased from Other Vendors. Issue 01 (2017-03-13) Huawei Proprietary and Confidential Copyright ©...
Page 290 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Cabinet Clearance Requirements The N68E-22 cabinet is used as an example. As shown in Figure 2-44, cabinet clearance must meet the following requirements: Aisles in the equipment room ≥ 1000 mm; aisles between cabinet rows ≥ 1000 mm ...
Page 291 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation The height of three holes on the mounting rails is 1 U, which is equivalent to 44.45 mm. 2.4.2 Installing Cable Racks and Mounting Ears Mounting ears are used to fix a device to the cabinet, and cable racks are used to route optical fibers and cables.
Page 292 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-47 Mounting ears can be installed either normally or reversely ----End 2.4.3 Installing the Chassis into the Cabinet The USG9520 can be mounted into a 19-inch standard cabinet through guide rails.
Page 293 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-48 Installing floating nuts and guide rails Step 2 Mount the USG9520 in the cabinet. Lift the USG9520, move it to the cabinet, place it onto the guide rails, and push it into the cabinet.
Page 294 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-49 Mounting the USG9520 in the cabinet ----End Follow-up Procedure Perform the following checks after the installation:  Ensure that the USG9520 is placed securely inside the cabinet.
Page 295 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-50 Connecting the PGND cable ----End Follow-up Procedure Verify the following after the cabling is complete:  The PGND cable is securely connected to the ground terminal. ...
Page 296 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation You can determine whether it is a correct slot for a board by checking whether the color on both ends of the board panel is the same as the color on the slot.
Page 297 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-53 Installing a subcard ----End Follow-up Procedure Check the following items after the installation is complete:  Check whether the boards and subcards are installed in position and the captive screws are fastened.
Page 298 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Cable Image NEG cable RTN cable  The terminals on DC cables. Terminal Image OT bare crimping terminal JG2 double-hole bare crimping terminal  For details, see 2.5.3.1 Guide to the DC Power Distribution.
Page 299 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-54 Installing power cables Step 3 Use tie wraps to bind the cables every 100 mm upwards from the bottom end, and fix the cables to the cabling rack.
Page 300 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Note that the power cable has polarity. After the device is powered on, if the power module indicator blinks red, check whether the anode and cathode of the power cable for the power module are connected without error.
Page 301 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-56 Cables of AC power distribution  For details, see 2.5.3.2 Guide to the AC Power Distribution. Procedure Step 1 Make temporary marks on both ends of each power cable using a marker.
Page 302 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-58 Installing AC Power Cables Step 4 Use tie wraps to bind the cables every 100 mm upwards from the bottom end, and fix the cables to the cabling rack.
Page 303 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Labels for the power cables must be filled in and attached to the cables as required. All labels are neat and face the same direction for easy viewing. The power cable, grounding cable and the signal cable should be bound separately. The distance between them must be more than 3 cm.
Page 304 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation The electrical module can be inserted only in the interface with an odd number on the 24-port 100/1000Base-X-SFP flexible interface card. Step 3 Connect one end of a network cable to the electrical transceiver of the USG9520 and the other end to the Ethernet port of the peer device based on the network plan.
Page 305 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation 2.4.9 Connecting Optical Fibers This section describes how to install optical transceivers on the ports and connect them to the ports of the peer device using optical fibers according to the network plan.
Page 306 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Step 2 Remove the dust cap from an optical interface and insert an optical module in the optical interface. Step 3 Remove the dust cap from the optical transceiver.
Page 307 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Step 7 Bind optical fibers every 200 mm with binding tapes and use tie wraps to fix the bundle of the optical fibers to the cabling rack. Step 8 Affix permanent labels 20 mm from both ends of the optical fiber.
Page 308 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item the cables. Verify that no tapes, cable ties, wastepaper, or packaging bags are left around the equipment. Verify that all the items around the equipment are neat, clean, and intact.
Page 309 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation 2.4.11 Powering On the USG9520-DC Power Distribution Check whether the USG9520 is operating properly in the DC power supply environment. Power on the USG9520 according to the following requirements to ensure device security.
Page 310 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Figure 2-62 Indicator status when the USG9520 is operating properly ----End Result Table 2-10 Device indicators Item Indicator Color Status Description DC power If this indicator is steady on, the power...
Page 311 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Indicator Color Status Description have input power). Green From the MPU being powered on until it is registered, the indicator status changes in the sequence of off-blinks once every 250 ms (4 Hz)-off-steady on-blinks once every two seconds (0.5...
Page 312 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Step 2 Measure the input voltage of the device with a multimeter and ensure that the voltage falls within the range of 90 V AC to 264V AC. Step 3 Turn on the AC power switch of the device.
Page 313 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Indicator Color Status Description module steady on, the power module is running properly. ALARM Yellow Alarm indicator.  If this indicator is blinking, the communication is interrupted. ...
Page 314 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation 2.5 Guide to Power Distribution Design This section describes how to configure power distribution. 2.5.1 Guide to Power Distribution Design of the USG9580 This section describes how to configure power distribution for the USG9580.
Page 315 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Specification Note power module (70 A). ≥60 A @ -48 V Each power supply To support the maximum (A1,A2,B1,B2,C1,C2,D1,D configuration, it is recommended that each DC power line should provide a minimum of 55 A @ -48 V current.
Page 316 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Distance from the PDF to Selection of Power Cables a and b the Device project survey on site. Wire,450/750V,227 IEC Each power module should 02(RV)25mm ,black,110A be equipped with one cable of this type.
Page 317 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation If the customer uses a purchased three-core cable, the ground core does not need to be connected to the ground terminal on the device. This is because the ground terminal on the device has already been connected to a separate ground cable, ensuring that the device is properly grounded.
Page 318 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Description Plating,Insulated Ring Terminal,12~10AWG,yellow a12,b12,c12, Cables Monitor and Alarm Cable,3m,D9M,CC4P0.48B(S),D9M d12, Wire,450/750V,227 IEC 02(RV)16mm ,blue,85A a22,b22,c22, Wire,450/750V,227 IEC 02(RV)16mm ,black,85A Terminal Naked Crimping Terminal,JG2,16mm ,M6,95A,Tin Plated,for OEM 2.5.2 Guide to Power Distribution Design of the USG9560 This section describes how to configure power distribution for the USG9560.
Page 319 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Specification Note on the user side should be greater than or equal to that of the circuit breaker of the power module (70 A). ≥60 A @ -48 V...
Page 320 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Distance from the PDF to Selection of Power Cables a and b the Device to or shorter than 25 m 02(RV)25mm ,blue,110A be equipped with one cable of this type. The cable length is determined by the project survey on site.
Page 321 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation 2.5.2.2 Guide to the AC Power Distribution This section describes AC power distribution and matching AC cables. If the customer uses a purchased three-core cable, the ground core does not need to be connected to the ground terminal on the device.
Page 322 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Description Terminal Wire,450/750V,227 IEC 02(RV)16mm ,black,85A Naked Crimping Terminal,JG2,16mm ,M6,95A,Tin Plated,for OEM 2.5.3 Guide to Power Distribution Design of the USG9520 This section describes how to configure power distribution for the USG9520.
Page 323 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Item Specification Note power line should provide a minimum of 33 A @ -48 V current. If the PDF cannot provide 50 A circuit breakers and the full configuration is unnecessary, you can select the circuit breaker of each DC line by using the following formula.
Page 324 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation Distance from the PDF to Selection of Power Cables a and b the Device project survey on site. Naked Crimping Each cable should be Connector,JG2,25mm ,M6,1 equipped with one terminal 50A,Tin Plating,For OEM of this type.
Page 325 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 2 Hardware Installation It is recommended that the current specifications of the circuit breakers (A and B) on the PDF or distribution box should be no less than 10 A (because the current specifications of the circuit breaker of the EPW30B-48A power module is 10 A).
Page 326 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Hardware Maintenance 3.1 Replacing Boards This section describes the precaution and procedure for replacing MPU/SRU, SFU, FPIC of the LPU, and SPC of the SPU. 3.1.1 Replacing an MPU/SRU This section describes the precaution and procedure for replacing an MPU/SRU.
Page 327 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Run the save command to save the current configuration. Run the compare configuration command to compare the saved configuration file and the current configuration file. Step 4 Check the location of the MPU/SRU to be replaced.
Page 328 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance  During the operation, pull out the MPU/SRU slowly and smoothly to prevent it from colliding with the neighboring boards and from causing the failure of the running boards.
Page 329 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance  During the operation, pull out the MPU/SRU slowly and smoothly to prevent it from colliding with the neighboring boards and from causing the failure of the running boards.
Page 330  If an MPU/SRU that is replaced is confirmed to be faulty, you should fill in the Faulty Card for Repair, and send the card and the faulty MPU/SRU to a Huawei local office for timely maintenance. 3.1.2 Replacing an SFU This section describes the precaution and procedure for replacing an SFU.
Page 331 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance USG9520 does not have independent SFU. Tool Before replacing an SFU, you need the following tools:  ESD wrist strap or ESD glove  Phillips screwdriver  ESD bag Procedure Step 1 Check the location of the SFU to be replaced.
Page 332 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance with the other hand. Then, pull out the SFU smoothly from the slot, as (3) shown in Figure 3-3. Place the SFU that is pulled out in the ESD-preventative bag.
Page 333 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-4 Schematic diagram of inserting the new SFU into the chassis Step 6 Check the running status of the new SFU. In normal situations, after the new SFU is inserted into the chassis, the SFU automatically communicates with the boards in the chassis.
Page 334  If an SFU that is replaced is confirmed to be faulty, you should fill in the Faulty Card for Repair, and send the card and the faulty SFU to a Huawei local office for timely maintenance. 3.1.3 Replacing an LPU This section describes the precaution and procedure for replacing an LPU.
Page 335 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance You can use either of the following methods.  Press and hold the OFL button on the panel of the LPU for five seconds until the OFL indicator is on. It means that the LPU is powered off.
Page 336 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-5 Pulling out an LPU from a chassis Step 6 Insert the new LPU into the chassis. Take out the new LPU from the ESD-preventive bag.  During the operation, pull out the LPU slowly and smoothly to prevent it from colliding with the neighboring boards and from causing the failure of the running boards.
Page 337 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-6 Insert an LPU into a chassis Step 7 Connect the cables to the corresponding interfaces in the original sequence. Step 8 Check the running status of the new LPU.
Page 338  If the LPU that is replaced is confirmed to be faulty, you should fill in the Faulty Card for Repair, and send the card and the faulty LPU to a Huawei local office for timely maintenance. 3.1.4 Replacing an FPIC of the LPU This section describes the precautions and procedures for replacing an FPIC.
Page 339 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Step 3 Pull out the cables from the FPIC and label the cables to mark the corresponding interface numbers. Step 4 Power off the LPU to be replaced. You can use either of the following methods.
Page 340 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Step 6 Insert a new FPIC into the LPU. Take out the new FPIC from the ESD bag.  During the operation, pull out the LPU slowly and smoothly to prevent it from colliding with the neighboring boards and from interrupting other running boards.
Page 341 LPUF. If an FPIC that is replaced is confirmed to be faulty, you should fill in the Faulty Card for Repair and send the faulty FPIC together with the card to the Huawei local office for timely repair. 3.1.5 Replacing an SPU This section describes the precautions and procedures for replacing an SPU.
Page 342 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Tool Before replacing the SPU, you need the following tools:  ESD wrist strap or ESD gloves  Phillips screwdriver  ESD bag Procedure Step 1 Check the location of the SPU to be replaced.
Page 343 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance  During the operation, pull out the SPU slowly and smoothly to prevent it from colliding with the neighboring boards and from interrupting other running boards.  When removing an SPU, do not touch the parts on it to avoid damages to the SPU.
Page 344 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Turn the Phillips screwdriver clockwise to tighten the two captive screws, as (3) shown in Figure 3-10. Figure 3-10 Inserting an SPU Step 6 Check the running status of the new SPU.
Page 345  If the SPU that is replaced is confirmed to be faulty, you should fill in the Faulty Card for Repair and send the faulty SPU together with the card to the Huawei local office for timely repair. 3.1.6 Replacing the SPC of the SPU This section describes the precautions and procedures for replacing the SPC of the SPU.
Page 346 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance You can use either of the following methods.  Press and hold the OFL button on the panel of the SPC for six seconds until the OFL indicator turns red for one second and then turns off. It means that the SPC is powered off.
Page 347 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance  During the operation, pull out the SPC slowly and smoothly to prevent it from colliding with the neighboring boards and from interrupting other running boards.  When inserting an SPC, do not touch the parts on it to avoid damages to the SPC.
Page 348  If an SPC that is replaced is confirmed to be faulty, you should fill in the Faulty Card for Repair and send the faulty SPC together with the card to the Huawei local office for timely repair. 3.2 Expanding SPU Capacities This section describes how to expand SPU capacities.
Page 349 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance If two FWs work in active/standby mode, you must expand the SPU capacity for the standby FW first and then for the active FW. If two FWs work in load balancing mode, run the hrp switch active command on one FW to switch the operating mode to the active/standby mode and then expand SPU capacities.
Page 350 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84...
Page 351 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85...
Page 352 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance  During the operation, pull out the SPU slowly and smoothly to prevent it from colliding with the neighboring boards and from interrupting other running boards.  When inserting an SPU, do not touch the parts on it to avoid damages to the SPU.
Page 353 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Present Normal Master Present Registered Normal Master Present Registered Normal Present Registered Abnormal Present Registered Normal Run the display device pic-status command on the standby FW to query the operating status of the subcard.
Page 354 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance active command is executed (namely, the FW in standby status) to cancel operations in step Step If two FWs work in active/standby mode, and operations in step Step 3 are not performed, skip this step.
Page 355 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Item Description IPSec SA Not affected Preparations Tools:  ESD wrist strap or ESD gloves  Phillips screwdriver  ESD bag Record card tables of the two FWs before capacity expansion so that you can compare them with those after capacity expansion to check whether capacity expansion succeeds.
Page 356 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85 80 84 85...
Page 357 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance The FW on which the hrp switch active command is executed has its VGMP group priority increased by 1 to be higher than that of the other FW and therefore becomes the active FW.
Page 358 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-14 Inserting an SPC into the SPU Step 6 Check the operating status of the inserted SPC. Run the display device command on the standby FW to query the operating status of the SPU motherboard.
Page 359 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Registered LAN_WAN_5x10GF_B_CARD 5 SUCCESS SUCCESS Registered ETH_24xGF_B_CARD SUCCESS SUCCESS Run the display firewall cpu-table command on the standby FW to view the card table. Compare it with that before capacity expansion to confirm whether the card table is updated.
Page 360 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance 3.3 Replacing a Fan Frame This section describes the fan frame of the device and the procedure for replacing the fan frame. 3.3.1 Replacing the Fan Module of the USG9580 This section describes the fan frame of the USG9580 and the procedure for replacing the fan frame.
Page 361 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Before removing the old fan module, check its location, for example, the cabinet and chassis where the fan module resides. Then, find the fan module to be replaced in the chassis and attach a label to the panel to identify the fan module to avoid misoperation.
Page 362 If a fan module that is replaced is confirmed to be faulty, you need to fill in the Faulty Card for Repair and send the faulty fan module together with the card to the Huawei local office for timely repair.
Page 363 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Precautions  In the process of removing an old fan module, you need to pull it out about 5 cm first. After the fans stop rotating, you can pull out the complete module.
Page 364 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-19 Diagram of removing the fan module from the USG9560 Step 5 Hold the upper and lower handles of the fan module, and slowly and horizontally insert the fan module along the guide rails in the slot until the back of the fan module properly connects to the backplane.
Page 365  If a fan module is replaced and confirmed to be faulty, you need to fill in the Faulty Card for Repair and send the card with the faulty fan module to the Huawei local office for timely maintenance. 3.3.3 Replacing the Fan Frame of the USG9520 This section describes the fan frame of the USG9520 and the procedure for replacing the fan frame.
Page 366 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-21 Appearance of the fan module The method to replace the fan frame of the USG9520 chassis that is configured with DC power supply module is similar to that of the chassis which is configured with AC power supply module. Take the fan frame of the chassis that is configured with DC power supply module as an example.
Page 367 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-22 Pulling out the fan frame of the USG9520 You must spend not more than five minutes to replace a fan frame. Otherwise, the security and stability of the device is severely affected.
Page 368  If a fan frame that is replaced is confirmed to be faulty, you should fill in the Faulty Card for Repair, and send the card and the faulty fan frame to a Huawei local office for timely maintenance. 3.4 Replacing a Power Module This section describes the power module of the device and the procedure for replacing the power module.
Page 369 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-24 Appearance of the PEM Tools  ESD wrist strap or ESD gloves  Phillips screwdriver Procedure Step 1 Check the location of the PEM to be replaced.
Page 370 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-25 Diagram of removing the PEM from the USG9580 Step 7 Insert the new PEM into the chassis. Hold the handle on the PEM with one hand and the PEM with the other hand. Then, insert the...
Page 371 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance  Run the display device slot id command on the console interface to check the running status of the new PEM. If the PEM statuses are displayed as the following bold characters, it indicates that the PEM runs normally.
Page 372 InputVoltage:53.13 InputCurrent:8.42 InputPower :447 The preceding command output indicates that the new PEM is normal. If the new PEM fails to return to the normal state, you should contact a Huawei local office for timely technical support. ----End Follow-up Procedure ...
Page 373 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-27 Appearance of the PEM Tools  ESD wrist strap or ESD gloves  Phillips screwdriver Procedure Step 1 Check the location of the PEM to be replaced.
Page 374 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-28 Diagram of removing the PEM from the USG9560 Step 7 Insert the new PEM into the chassis. Hold the handle on the PEM with one hand and the PEM with the other hand. Then, insert the...
Page 375 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - The preceding command output indicates that the new PEM is normal. If the new PEM fails to return to the normal state, you should contact a Huawei local office for timely technical support.
Page 376 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-30 Appearance of the DC power module Tool  ESD wrist strap or ESD glove  Phillips screwdriver Procedure Step 1 Check the location of the power module to be replaced.
Page 377 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-31 Schematic diagram of removing the power module on the USG9520 Step 8 Insert the backup power module into the chassis. Hold both sides of the power module and insert the module into the guide rail of the slot, as (1) shown in Figure 3-32.
Page 378 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - The preceding output also indicates that the power module has returned to the normal state. If the fan frame fails to return to the normal state, you should contact a Huawei local office for timely technical support.
Page 379  If a power module that is replaced is confirmed to be faulty, you should fill in the Faulty Card for Repair, and send the card and the faulty power module to a Huawei local office for timely maintenance. 3.4.4 Replacing an AC Power Module of USG9520 This section describes the AC power module of the USG9520 and the procedure for replacing the power module.
Page 380 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-34 Appearance of the EPW30B-48A AC power module (1600 W) When AC 110 V input is used, the AC power module is half-load output, which cannot afford the maximum system power consumption with the full configuration. Therefore, two AC power modules are required, so that the device can work properly.
Page 381 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Disconnect the buckle in the upper right of the power module and lower the ejector lever on the right. Hold the ejector lever and remove the power module from the slot.
Page 382 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-36 Schematic diagram of installing the R4850G2 power module on the USG9520  Replace the EPW30B-48A power module. Use the Phillips screwdriver to loosen the captive screw on the right of the power module.
Page 383 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-38 Schematic diagram of installing the EPW30B-48A power module on the USG9520 Step 6 Verify the functions of the new power module. After inserting the power module into the chassis, switch on the circuit breaker on the power distribution cabinet and then switch on the power module.
Page 384 3 Hardware Maintenance The preceding output also indicates that the power module has returned to the normal state. If the fan frame fails to return to the normal state, you should contact a Huawei local office for timely technical support.
Page 385 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Step 3 If the MPU/SRU on which the CF card needs to be replaced is the master one, run the following commands to perform the master/slave switchover. <sysname> system-view...
Page 386 Device name The preceding output also indicates that the new CF card has returned to the normal state. If the new CF card fails to return to the normal state, you should contact a Huawei local office for timely technical support.
Page 387 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Context Before replacing CF card 2, you need to note the following points:  CF card 2 of a USG device supports hot swap. Therefore, before replacing CF card 2 of a USG device, press the CF OFL button on the panel of the MPU/SRU.
Page 388 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-41 Schematic diagram of pulling out CF card 2 Step 4 Place the removed CF card in the ESD bag. Step 5 Insert the new CF card into the slot of CF card 2 of the MPU/SRU and push the CF card in the proper position, as (1) shown in Figure 3-42.
Page 389 <cr> The preceding output also indicates that the new CF card has returned to the normal state. If the new CF card fails to return to the normal state, you should contact a Huawei local office for timely technical support.
Page 390 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance An optical module is an electrostatic sensitive device. Therefore, you must take antistatic measures during the whole process of replacing an optical module to prevent the optical module from being damaged.
Page 391 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Fragment: 0, Undersized Frame: 0 RxPause: 0 ---- More ---- Step 3 Record the location of the cables and check whether the labels on the cables are correct and clear.
Page 392 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-44 Schematic diagram of inserting an optical module Remove the dust cap from the connector and insert the optical cables in the original sequence. Step 7 Verify the functions of the new optical module.
Page 393 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance If the new optical module fails to return to the normal state, you should contact a Huawei local office for timely technical support. ----End Follow-up Procedure  After replacing an optical module, collect the tools.
Page 394 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Before removing the old air filter, check its location, for example, the cabinet and chassis where the air filter resides. Then, find the air filter to be replaced in the chassis and attach a label to the panel to identify the air filter and avoid misoperation.
Page 395 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-46 Diagram of removing the air filter from the SFU area on the USG9580 Step 5 Install an air filter on the air intake frame. Place the clean and dry air filter onto the panel of the air intake frame, Place fingers in the holes on both sides of the panel to install the panel back to the original place, as shown in Figure 3-47.
Page 396 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Step 6 Install an air filter in the SFU area. Support the bottom of the air filter with one hand and hold the handle on the air filter with the other hand. Then, insert the clean and dry air filter in the chassis horizontally, as shown in Figure 3-48.
Page 397 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance The air filter is a component without memory. All the monitored information is saved on the MPU, which may be inserted, removed, switched, or replaced during usage. Therefore, the monitoring cycle may differ from the set cycle, but this does not affect the monitoring function.
Page 398 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-50 Diagram of installing the air filter onto the air intake frame of the USG9560 ----End Follow-up Procedure  After finishing the replacement, put all the tools away.
Page 399 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance clear the alarm and re-count the runtime of the air filter. The default cleaning cycle is 90 days. The value 0 indicates that the monitoring of the air filter is stopped.
Page 400 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-52 Installing the air filter of the air intake frame of the USG9520 ----End Follow-up Procedure  After replacing an air filter, collect the tools.  Handle an air filter that is replaced according to the compliance and safety standards.
Page 401 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Procedure Step 1 Record the location of both ends of the power cable to be replaced and the cabling mode in case of misoperation. Step 2 Make a new power cable. For details, refer to the A.2 On-site Cable Assembly and Installation.
Page 402 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Step 3 Wear the ESD gloves or wrist strap and connect the grounding terminal to the ESD jack on the rack. Step 4 Lay out the new network cable according to the original cabling mode.
Page 403 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance 3.8.3 Replacing an Optical Cable This section describes the optical cable of the device and the procedure for replacing the optical cable. Context Before replacing an optical cable, you need to note the flowing points: ...
Page 404 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide 3 Hardware Maintenance Figure 3-54 Schematic diagram of attaching a label to a new optical cable Step 8 Lay out the new optical cable in a tidy manner in the cabinet and bind the optical cable with a binding strap.
Page 405 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Appendix A.1 Cable This section describes the PGND cable, power cable, configuration cable, Ethernet cable, and optical fiber of the USG9500. A.1.1 DC Power Cable This section describes the DC power cables of the USG9500 that uses the DC power supply.
Page 406 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-1 NEG(-) Figure A-2 RTN (+) The terminals on DC cables vary with the devices to which the cables are connected. Two commonly used terminals are OT bare crimping terminal and JG2 double-hole bare crimping terminal.
Page 407 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-4 Appearance of the JG2 double-hole bare crimping terminal If the power supply distance is longer than 35 m, you need to place the DC power distribution cabinet near the USG9500. For cables to be selected, see...
Page 408 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Item Description power cable (-48 Wire,450/750V,60227 IEC 02(RV)16mm ,black,85A power cable Terminal USG9580 Naked Crimping Terminal,JG2,16mm ,M6,95A,Tin Plated,for DC Power Naked Crimping Terminal,OT,16mm ,M8,Tin Plating,Naked distribution Ring Terminal cabinet Power Supply Distance Longer Than 15 m and Shorter Than or Equal to 25 m If the power supply distance is longer than 15 m and shorter than or equal to 25 m, use the 25 power cable to connect the USG9580 to the power distribution cabinet.
Page 409 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Table A-4 Cables used when the power supply distance is longer than 25 m and shorter than or equal to 35 m Item Description Cable type Wire,450/750V,60227 IEC 02(RV)35mm ,Blue,135A...
Page 410 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-6 RTN (+) The terminals on DC cables vary with the devices to which the cables are connected. Two commonly used terminals are OT bare crimping terminal and JG2 double-hole bare crimping terminal.
Page 411 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix You need to prepare suitable cables according to the surveyed power supply distance between the USG9500 and the power distribution cabinet. Power Supply Distance Shorter Than 3 m (Cables Between the AC power chassis and the USG9560) Place the AC power chassis as near to the device as possible.
Page 412 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Power Supply Distance Longer Than 15 m and Shorter Than or Equal to 25 m If the power supply distance is longer than 15 m and shorter than or equal to 25 m, use the 25 power cable to connect the USG9560 to the power distribution cabinet.
Page 413 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix A.1.1.3 DC Power Cable of the USG9520 This section describes the DC power cable of the USG9520. Structure and Appearance The DC power cable consists of a -48 V power cable NEG(-), and a cable RTN (+). The power cable transfers -48 V DC from the DC distribution equipment to the terminal block of the USG9500 power module, supplying power for the USG9500.
Page 414 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-11 Appearance of the OT bare crimping terminal Figure A-12 shows the appearance of the JG2 double-hole bare crimping terminal without a cable. Figure A-12 Appearance of the JG2 double-hole bare crimping terminal If the power supply distance is longer than 35 m, you need to place the DC power distribution cabinet near the USG9500.
Page 415 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Item Description distribution Ring Terminal cabinet Power Supply Distance Longer Than 15 m and Shorter Than or Equal to 35 m If the power supply distance is longer than 15 m and shorter than or equal to 35 m, use the 25 power cable to connect in the USG9520 and the DC power distribution cabinet.
Page 416 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Structure and Appearance The USG9580 uses electric and electronic cables as AC power cables, as shown in Figure A-13. Figure A-13 Appearance of the fixed-length electric and electronic cable An electric and electronic cable consists of a cable and two terminals. The terminals are mainly OT bare crimp terminals.
Page 417 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Item Description cabinet A.1.2.2 AC Power Cable of the USG9560 This section describes the AC power cable of the USG9560. USG9560 AC Power Cable includes two parts:  Cable between the AC power chassis and the USG9560 ...
Page 418 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Cables Between the AC power chassis and the AC Power Distribution cabinet If the power supply distance is longer than 50 m, you need to place the power distribution cabinet near the AC power chassis.
Page 419 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-18 Chinese standard AC power cable (for the EPW30B-48A AC power module) Technical Specifications Table A-13 and Table A-14 show the technical specifications for the R4850G2 and EPW30B-48A AC power cables, respectively.
Page 420 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Item Description Maximum voltage 125 V/250 V Maximum current 10 A A.1.3 PGND Cable This section describes the structure and specifications of the protection ground (PGND) cable for you to ground the USG9500. Read this section before you make or purchase any PGND cables for the USG9500.
Page 421 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-20 OT bare crimp terminal Installation Connect the OT bare crimp terminal at one end of the PGND cable to the connection hole of the USG9500, with the conducting wire upward, as shown in A of Figure A-21.
Page 422 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Table A-15 Technical specifications of the PGND cable Item Description PGND Cable type Wire,450/750V,227 IEC 02(RV)25mm ,yellow green,110A cable Terminal Naked Crimping Terminal,OT,25mm ,M8,Tin Plating,Naked Ring Terminal Fireproof class A.1.4 Console Cable The console interface cable is used to connect the console interface on the Eudemon8000E to the serial interface of the console to transmit configuration data of the USG9500.
Page 423 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix RJ45 Direction DB25 Signal -> DSR (Data Set Ready) -> RXD (Receive Data) — — <- TXD (Transmit Data) <- DTR (Data Terminal Ready) <- RTS (Request to Send) Technical Specifications Table A-17 lists the technical specifications of the console interface cable.
Page 424 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Structure and Appearance As shown in Figure A-23 the structure of the AUX interface cable is the same as that of the console interface cable. Table A-18 shows the pin assignment on the AUX interface cable.
Page 425 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Table A-19 Technical specifications of the AUX interface cable Item Description Network interface connector-crystal Connector X1 connector-8PIN-8bit-shielded plug Connector X2 Cable connector-D type-25PIN-male Connector X3 Cable connector-D type-9PIN-male Cable type Symmetrical twisted cable-120-ohm-SEYVPV-0.5mm-24AWG-8core-PANTONE...
Page 426 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-25 Wiring scheme EIA/TIA 568A or EIA/TIA 568B EIA/TIA 568A EIA/TIA 568B Core Wire Core Wire Green-white Orange-white Green Orange Orange-white Green-white Blue Blue Blue-white Blue-white Orange Green Brown-white...
Page 427 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-26 and Figure A-27 show how to distinguish and make straight-through cables and crossover cables. You need to strictly observe the wiring scheme to ensure the quality of services.
Page 428 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-27 Schematic diagram of the connection scheme of crossover cables You can use the crossover cables in the following scenarios: − Connecting a computer and a router − Connecting two switches −...
Page 429 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-29 Appearance of an unshielded cable The figure is for reference only. Technical Specifications Table A-20 and Table A-21 show the technical specifications of the straight-through cable and crossover cable respectively.
Page 430 The optical fiber connects to the interface on the USG9500 through an optical module. You can select optical modules and fibers based on the interfaces of the peer device. Huawei optical modules are recommended. The optical modules of other vendors may have incompatibility issues and cause faults on the USG9500.
Page 431 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-31 LC/PC-LC/PC multi-mode optical fiber  To ensure the normal transmission of optical signals, do not use single-mode optical fibers to connect multi-mode optical modules or multi-mode optical fibers to connect single-mode optical modules.
Page 432 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix The procedure and precautions for inserting and removing FC/PC connectors are as follows: − When you insert an optical fiber, aim the FC/PC connector at the optical interface on the interface board to avoid damaging the inner layer of the optical interface.
Page 433 Precautions for Assembly  Use dedicated tools or tools delivered by Huawei and follow the correct methods during assembly.  Hold terminals of cables instead of pulling the cables when installing or removing cable components.
Page 434 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix − Coil the cables that are longer than 2 m after cutting. Bind and fasten the coils using bundling ropes. The inner diameters of the coils should be larger than 20 times the outer diameters of the cables.
Page 435 When you strip a power cable, do not damage the conductor of the cable.  If the bare crimping terminal is not provided by Huawei, the value of L1 is 1 mm to 2 mm greater than the value of L.
Page 436 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Step 2 Put the heat-shrinkable (A) tube onto the bare crimping terminal, as shown in Figure A-34. Figure A-34 Putting the heat-shrinkable tube onto the bare crimping terminal Step 3 Put the OT terminal onto the exposed conductor, and ensure that the OT terminal is in good contact with the insulation layer of the power cable, as shown in Figure A-34.
Page 437 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Step 5 Push the heat-shrinkable tube (A) towards the connector until the tube covers the crimped part, and then heat the tube by using a heat gun, as shown in Figure A-36.
Page 438 When you strip a power cable, do not damage the conductor of the cable.  If the bare crimping terminal is not provided by Huawei, you can adjust the value of L as required. Figure A-38 Stripping a power cable (JG terminal)
Page 439 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-39 Putting the heat-shrinkable tube onto the bare crimping terminal Step 3 Put the bare crimping terminal onto the exposed conductor, and ensure that the bare crimping terminal is in good contact with the insulation layer of the power cable, as shown in Figure A-39.
Page 440 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-41 Heating the heat-shrinkable tube (JG terminal) ----End A.2.2.3 Assembling the Cord End Terminal and the Power Cable This topic describes how to assemble a cord end terminal and a power cable.
Page 441 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix When you strip a power cable, do not damage the conductor of the cable. Figure A-43 Stripping a power cable (cord end terminal) Table A-26 Mapping between the cross-sectional area of the conductor and the value of L1...
Page 442 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-44 Put the cord end terminal onto the conductor Step 3 Crimp the joint parts of the cord end terminal and the conductor, as shown in Figure A-45. Figure A-45 Crimping the cord end terminal and the conductor Step 4 Check the maximum width of the tubular crimped terminal.
Page 443 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Cross-Sectional Area of Tubular Maximum Width of Crimped Terminal Terminal (mm W1 (mm) ----End A.2.3 Assembling Ethernet Cables This topic describes how to assemble RJ45 connectors and Ethernet cables. A.2.3.1 Assembling the Shielded RJ45 Connector and the Ethernet Cable This topic describes how to assemble a shielded RJ45 connector and an Ethernet cable, or specifically, a straight-through Ethernet cable.
Page 444 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-47 Fit the jacket of the connector onto the Ethernet cable Step 2 Remove a 30-mm long section of the jacket, cut off the nylon twine inside the jacket, and cut a 5-mm cleft in the cable jacket, as shown Figure A-48.
Page 445 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-49 Fit the metal shell onto the twisted-pair cable Step 4 Fit the metal shell onto the twisted-pair cable until the shielding layer is covered completely. Along the edge of the metal shell, cut off the shielding layer with aluminum foil and ensure that there is no surplus copper wire.
Page 446 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-52 Cable locations in a wire holder Step 6 Align the four pairs of cables on the holder, as shown in Figure A-53. The connections between the core wires and the pins are shown in Figure A-54 and listed in Table A-28.
Page 447 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-54 Connections between core wires and pins Table A-28 Connections between core wires and pins Matching Pins of Wires Core Wire Color White-Orange Orange White-Green Blue White-Blue Green White-Brown Brown Step 7 Cut off the surplus cables along the lower edge of the wire holder, as shown in Figure A-55.
Page 448 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-55 Cutting off surplus cables Step 8 Putting the connector body onto the wire holder and turn the metal shell by 90° , as shown in Figure A-56. Ensure that the wire holder is in good contact with the connector body.
Page 449 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Step 10 Push the jacket towards the metal shell until the metal shell is wrapped. One end of the cable is completely assembled, as shown in Figure A-58. Figure A-58 Wrapping the metal shell...
Page 450 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix When you remove the shielding layer, do not damage the insulation layer of the twisted-pair cable. Figure A-60 Removing the jacket of a twisted-pair cable (unit: mm) Step 2 Align the four pairs of cables and cut the ends neatly, as shown in Figure A-61. The connections between the core wires and the pins are listed in Table A-29.
Page 451 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Ensure that the cable is in good contact with the plug. Figure A-62 Crimping the connector Step 4 To complete the assembly of the other end, repeat Step 1 through...
Page 452 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-63 Metal contact strips of different heights Figure A-64 Metal contact strips of the same height Step 2 Hold an RJ45 connector and turn it by 45° . Observe the top edges of the metal contact strips.
Page 453 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-66 Dirt on a metal contract strip Step 4 Check whether the metal contact strips and the plastic septa are well aligned and intact. If a part is skewed and it cannot be fixed, replace it with a new RJ45 connector. Figure A-67 shows an unqualified piece.
Page 454 This topic illustrates how to test a straight-through Ethernet cable. Context Huawei provides two types of Ethernet cables: straight-through cables and crossover cables.  Straight-through cables are connected in a one-to-one manner. They are used to connect network adapters to equipment such as switches or hubs.
Page 455 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-69 shows the pins of an RJ45 connector. Figure A-69 Pins of an RJ45 connector Procedure Step 1 Feed both connectors of the cable into the ports of the cable tester.
Page 456 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-71 Checking the reliability The procedure for testing a crossover cable is the same as that for testing a straight-through cable except for the sequence in which the indicators turn on. You need to refer to the wire connections of a crossover cable.
Page 457 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix ----End A.3 Environmental Requirements for Device Running This section describes the environment requirements for device running, including the requirements for the environment of an equipment room and power supply conditions.
Page 458 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix A.3.2 Equipment Room Layout The equipment room is usually used to install mobile switching equipment, telecom transmission equipment and power supply equipment as well as other auxiliary equipment. To ensure easy maintenance and management, place the telecom equipment in different rooms.
Page 459 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Item Requirements static electricity conductive floor material or raise floor so that the static electricity can be conducted. You can connect them with the grounding unit by using the current limiting resistor and connection line. The resistance of the current limiting resistor is one megohm.
Page 460 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix A.3.4 Requirements for Temperature, Humidity, and Altitude Ensure proper temperature and humidity in the equipment room. Ensure the altitude of the equipment room in the regulated range. Table A-33 gives the specific requirements.
Page 461 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Mechanical active Unit Concentration material ≤3×10 Dust particle Particle /m (no visible dust accumulated on the workbench in three days) Description Dust particle diameter ≥ 5 µm ≤0.2 Suspending dust mg/m ≤1.5...
Page 462 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix  Ensure the air intake vent of the room is in the perennial upwind direction of the pollution source.  The batteries should be placed separately and it is best to install them in different rooms.
Page 463 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Item Requirements system shall be the metal jacket or steel tube to cover the power cables before burying adopted. them under the ground. Ground both ends of the metal jacket or steel tube nearby and properly with the buried length less than 15 m.
Page 464 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Item Requirements Grounding The grounding resistance must be lower than 1 ohm. resistance The upper end of the grounding body should be at least 0.7 m over the ground. In cold areas, bury the grounding body below the frozen ground.
Page 465 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Table A-37 Specifications for the DC power supply Item Requirements Range of the -48 -38 V to -72 V V input voltage DC power Greater than 1.5 times the rated current at least...
Page 466 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Low voltage power supply should adopt three-phase five-wire mode or monophase three-wire mode. Low voltage of AC power supply should be 110 V/127 V/220 V/380 V, and the frequency is 50 Hz.
Page 467 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix  UPS power supply system or inverter power supply system is required for uninterrupted or non-transient telecommunication load of AC.  When abnormality occurs on mains, telecommunication server should be equipped with self-supplied electric generator set as power supply to ensure the key telecommunication load and force load.
Page 468 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix A.4.3 Grounding Specifications for the Device This describes the requirements for the grounding of the device in details. Table A-40 shows the equipment grounding specifications. Table A-40 Equipment Grounding Specifications...
Page 469 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Description The AC power supply system of the communication equipment room should adopt the TN-S power supply mode. The inlet for the AC power cable at the equipment room should be equipped with a lightning protection device (C-level) with a nominal discharging current no less than 20 kA.
Page 470 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Description group of grounding body with the cabinet. The signal cables within the area of the communication office and mobile station should not be arranged aerially. A.4.6 Specifications for Laying Out Grounding Cables This describes the requirements for laying out grounding cables in details.
Page 471 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Fill in the label according to the user's requirements if the user needs an integrated description of the label. Make a relevant statement in the self-check report. A.5.1 Introduction to Labels This describes the material, types, structure, and contents of engineering labels, and how to print, fill in, and paste engineering labels, and the precautions for using engineering labels.
Page 472 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-75 Label for signal cables To specify more clearly the position of a cable, use the dividing lines on the label. For example, there is a dividing line between the cabinet number and the chassis number, and another one between the chassis number and the slot number.
Page 473  Download the template from http://support.huawei.com/enterprise.  Obtain the template from the Huawei local office. The templates are made in Microsoft Word and the following requirements should be met:  When using the template, you can directly modify the contents on the template. The settings of centered characters, direction, and fonts should not be changed.
Page 474 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Merging Cells in the Template To merge two or more cells, do as follows: Select Edit/Select All. Select Format/Borders and Shading/Borders. Select Box tab and click OK. Drag the mouse to select cells to be merged and select the Table/Merge Cells.
Page 475 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Different models of printers may have different feeding modes, make sure to feed in the labels correctly. Requirements on the Printed Label Make sure that the printed labels satisfy the following requirements: ...
Page 476 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-78 Writing direction of the characters on the label A.5.1.5 Affixing Labels After printing or writing the label, remove the label from the bottom page and affix it to the signal cable, or the identification plate of the power cable.
Page 477 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-80 Label for Signal Cables Power Cable Label Remove the label from the bottom page, and then affix it to the identification plate on the cable tie. Remove the label from the bottom page, and then affix it to the identification plate on the cable tie.
Page 478 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-81 Binding the Label for the Power Cable A.5.1.6 Contents of Engineering Labels Contents of Labels for Power Cables Labels for power cables are only affixed on one side of the identification plates. On the labels, there is information (the part after the mark "TO:") about the location of the device on the...
Page 479 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Therefore, the information in Area 1 at one end is the same as the information in Area 2 at the other end of the cable. In other words, the local information at one end is called the opposite information at the other end.
Page 480 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Content Meaning Example D: optical Numbered with two digits in up-bottom and left-right interface order. For example, 1 is the second optical interface. number. R: Receiving interface T: optical transmitting...
Page 481 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix The meaning of the labels is listed in Figure A-83.  "A0-01-05-01-R" indicates that the local end of the optical fiber is connected with the optical receiving interface 01 on slot 5, chassis 01 in the cabinet on row A, column 01 in the machine room.
Page 482 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Content Meaning Example receiving interface T: optical transmitting interface Example of the Label Figure A-84 shows the label on the cable. Figure A-84 Example of the label on the optical fiber between the device and the ODF Meaning of the label in Figure A-84 ...
Page 483 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Content Meaning Example B: chassis Numbered in the bottom-up order with two digits, number for example, 01. C: physical slot Numbered with two digits in bottom-up and number left-right order. For example, 01.
Page 484 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-85 Example of the label on network cables Meaning of the label in Figure A-85.  "A01-03-01-01" indicates that one end of the network cable is connected to network interface 01 of slot 01, chassis 03 of the cabinet on row A, column 01 in the equipment room.
Page 485 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Content Meaning Example R: optical receiving interface, T: optical transmit interface. MN-B-C-D-R MN: cabinet For example, A01. number B: chassis Numbered in the bottom-top order with two digits, for number example, 01.
Page 486 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix A.5.4.2 Engineering Labels for Trunk Cables Between the Device and a Meaning of the Engineering Labels for Trunk Cables Between the Device and a Table A-49 shows the engineering labels for trunk cables between the device and a DDF.
Page 487 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-87 Engineering labels for trunk cables between the device and a DDF Meaning of the label in Figure A-87 is as follows:  "A01-03-01-01-R" indicates that the local end of the trunk cable is connected to receiving interface 01 on slot 01, chassis 03 in the cabinet on row A, column 01 in the equipment room.
Page 488 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Content Meaning Example device Example of the Label Figure A-88 shows an example. Figure A-88 Example of labels for user cables The meaning of the label in Figure A-88 is as follows: ...
Page 489 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Content Meaning connector can be identified without them, BC can be omitted. It is unnecessary for BGND and PGND to identify the row and column number. The label only carries location information about the destination direction of the power cable while information of the local end is not necessary.
Page 490 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix A.5.6.2 Engineering Labels for AC Power Cables The labels are affixed to both ends of an AC power cable that provides AC power supply to cabinets, including 220 V, PGND, and BGND cables. The 220 V AC cables and related PGND and BGND cables are covered with insulating sheath, so the labels need to contain only the words of "AC"...
Page 491 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix A.6 Requirements on Customers' Cabinets Purchased from Other Vendors This section describes the requirements on customers' cabinets purchased from other vendors. Cabinets purchased from other vendors must meet the following requirements: ...
Page 492 HUAWEI USG9500 Series Terabit-level Next-Generation Firewall Hardware Guide A Appendix Figure A-92 Requirements on the cabinet customized by the customer  If the overhead cabling mode is adopted, a cable outlet must be reserved on the top of the cabinet; if the underfloor cabling mode is adopted, a cable outlet must be reserved in the bottom of the cabinet.

This manual is also suitable for:

Usg9500Usg9520 Usg9560 Usg9580

Huawei USG9500 Series Hardware Manual

Quick Links

Related Manuals for Huawei USG9500 Series

Summary of Contents for Huawei USG9500 Series

This manual is also suitable for: