H3C SecPath F5030 Manuale utente

H3C SecPath Firewalls

Comware 7 Fundamentals Configuration Guide

New H3C Technologies Co., Ltd.

http://www.h3c.com

Software version:

F5030, F5030-6GW, F5060, F5080, F5000-M, F5000-A E9628

F5010, F5020-GM, F5020, F5040, F5000-C, F5000-S E9342

F1020, F1030, F1050, F1060, F1070, F1080, F1020-GM, F1070-GM E9345

F1000-AK130, AK135, AK140, AK145, AK150, AK155, AK160, AK165, AK170,

AK175, AK180, AK185 E9345

F1005, F1010, F1003-L, F1005-L E9536

F1000-AK108, AK109, AK110, AK115, AK120, AK125 E9536

Document version: 6W400-20190620

No part of this manual may be reproduced or transmitted in any form or by any means without prior written

consent of New H3C Technologies Co., Ltd.

Trademarks

Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this

document are the property of their respective owners.

Notice

The information in this document is subject to change without notice. All contents in this document, including

statements, information, and recommendations, are believed to be accurate, but they are presented without

warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions

contained herein.

Preface

•This configuration guide describes the fundamentals and configuration procedures for Layer

2—WAN access features, including PPP, 3G modem, and 4G modem.

•CLI.

•RBAC, device login, and device access control.

•Management of the device, file systems, configuration files, and licenses.

•FTP and TFTP.

•Tcl and Python.

•ISSU and common software upgrade.

•MAC address learning through a Layer 3 device.

•Automatic configuration.

This preface includes the following topics about the documentation:

•Audience.

•Conventions.

•Documentation feedback.

Audience

This documentation is intended for:

•Network planners.

•Field technical support and servicing engineers.

•Network administrators.

Conventions

The following information describes the conventions used in the documentation.

Command conventions

Convention Description

Boldface Bold text represents commands and keywords that you enter literally as shown.

Italic Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from which

you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars,

from which you select one or none.

Convention Description

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by vertical

bars, from which you select a minimum of one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by vertical

bars, from which you select one choice, multiple choices, or none.

&<1-n> The argument or keyword and argument combination before the ampersand (&) sign

can be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention Description

Boldface Window names, button names, field names, and menu items are in Boldface. For

example, the New User window opens; click OK.

> Multi-level menus are separated by angle brackets. For example, File > Create >

Folder.

Symbols

Convention Description

WARNING! An alert that calls attention to important information that if not understood or followed

can result in personal injury.

CAUTION: An alert that calls attention to important information that if not understood or followed

can result in data loss, data corruption, or damage to hardware or software.

IMPORTANT: An alert that calls attention to essential information.

NOTE: An alert that contains additional or supplementary information.

TIP: An alert that provides helpful information.

Network topology icons

Convention Description

Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that

supports Layer 2 forwarding and other Layer 2 features.

Represents an access controller, a unified wired-WLAN module, or the access

controller engine on a unified wired-WLAN switch.

Represents an access point.

Represents a wireless terminator unit.

Convention Description

Represents a wireless terminator.

Represents a mesh access point.

Represents omnidirectional signals.

Represents directional signals.

Represents a security product, such as a firewall, UTM, multiservice security

gateway, or load balancing device.

Represents a security module, such as a firewall, load balancing, NetStream, SSL

VPN, IPS, or ACG module.

Examples provided in this document

Examples in this document might use devices that differ from your device in hardware model,

configuration, or software version. It is normal that the port numbers, sample output, screenshots,

and other information in the examples differ from what you have on your device.

Documentation feedback

You can e-mail your comments about product documentation to info@h3c.com.

We appreciate your comments.



Contents

Managing a 3G/4G modem ································································1

About managing a 3G/4G modem ·································································································1

Restrictions: Hardware compatibility with 3G/4G modem management··················································1

Restrictions and guidelines: 3G/4G modem management···································································1

3G/4G modem management tasks at a glance·················································································2

Configuring the 3G modem cellular interface····················································································2

Configuring the 4G modem cellular interface····················································································3

Configuring an Eth-channel interface for a 4G modem ·······································································3

Configuring basic parameters for an Eth-channel interface···························································3

Restoring the default settings for an Eth-channel interface ···························································4

Configuring an IP address for an Eth-channel interface of a 4G modem··········································4

Configuring a 3G/4G network ·······································································································5

Configuring parameter profiles······································································································6

About parameter profiles·······································································································6

Creating a parameter profile for a 3G modem············································································6

Creating a parameter profile for a 4G modem············································································6

Specifying the primary and backup profiles ···············································································7

Specifying the primary or secondary SIM card··················································································7

Associating 3G/4G link backup with a track entry··············································································8

Configuring PIN verification··········································································································8

Configuring DM ·························································································································9

Setting the RSSI thresholds ·········································································································9

Issuing a configuration directive to a 3G/4G modem········································································10

Configuring 3G/4G modem reboot·······························································································56H10

24HConfiguring automatic reboot ·······························································································57H10

25HConfiguring manual reboot ··································································································58H11

26HBinding the IMSI of the SIM card to an interface ·············································································59H11

27HDisplay and maintenance commands for 3G/4G modem management ················································60H11

28H3G/4G modem management configuration examples·······································································61H12

29HExample: Configuring 4G modem management·······································································62H12

30HTroubleshooting·······················································································································63H13

31HSymptom·························································································································64H13

32HSolution···························································································································65H13

Managing a 3G/4G modem

About managing a 3G/4G modem

A 3G/4G modem connects a device to a 3G/4G network.

USB 3G/4G modems are available for the device.

AUSB 3G/4G modem is hot swappable. The device uses a fixed cellular interface to manage a USB

3G/4G modem. You can enter cellular interface view to perform configurations when the device does

not have a USB 3G/4G modem installed. The configurations remain after the USB 3G/4G modem is

removed from the device.

A cellular interface can be channelized into a serial or an Eth-channel interface. The data link layer

protocols of the serial interface and Eth-channel interface are PPP and Ethernet, respectively. The

two interfaces support IP at the network layer.

The cellular interface of a 3G modem can only be channelized into a serial interface. The cellular

interface of a 4G modem can only be channelized into an Eth-channel interface.

Restrictions: Hardware compatibility with 3G/4G

modem management

Hardware Compatibility with 3G/4G modem

management

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060,

F5080, F5000-C, F5000-S, F5000-M, F5000-A No

F1005, F1010 Yes

F1020, F1020-GM, F1030, F1050, F1060, F1070, F1070-GM,

F1080 No

F1003-L, F1005-L Yes

F1000-AK108, AK109, AK110, AK115, AK120, AK125 Yes

F1000-AK130, AK135, AK140, AK145, AK150, AK155, AK160,

AK165, AK170, AK175, AK180, AK185 No

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1 No

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV,

LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD,

LSQM2FWDSC0 No

Restrictions and guidelines: 3G/4G modem

management

Follow these restrictions and guidelines when you configure 3G/4G modem management:

•Do not remove a USB 3G/4G modem while it is transmitting data. As a best practice, execute

the shutdown command to shut down the USB 3G/4G modem before removing it.

•AUSB 3G/4G modem is not usable when the USB interface to which the modem is attached is

shut down. For more information about shutting down a USB interface, see Fundamentals

Configuration Guide.

•Unless otherwise noted, the 3G/4G modem configuration in this document is saved in the NVM

of the 3G/4G modem. To verify the configuration, use the display cellular command.

3G/4G modem management tasks at a glance

To management a 3G/4G modem, perform the following tasks:

1. Configuring the 3G/4G modem cellular interface

{Configuring the 3G modem cellular interface

{Configuring the 4G modem cellular interface

2. Configuring an Eth-channel interface for a 4G modem

3. Configuring a 3G/4G network

4. Configuring parameter profiles

5. (Optional.) Specifying the primary or secondary SIM card

6. (Optional.) Associating 3G/4G link backup with a track entry

7. (Optional.) Configuring PIN verification

8. (Optional.) Configuring DM

9. (Optional.) Setting the RSSI thresholds

10. (Optional.) Issuing a configuration directive to a 3G/4G modem

11. (Optional.) Configuring 3G/4G modem reboot

{Configuring automatic reboot

{Configuring manual reboot

12. Binding the IMSI of the SIM card to an interface

Configuring the 3G modem cellular interface

1. Enter system view.

system-view

2. Enter cellular interface view.

controller cellular cellular-number

3. (Optional.) Configure a description for the cellular interface.

description text

By default, the description for a cellular interface is interface name Interface, for example,

Cellular 2/4/0 Interface.

4. Channelize the cellular interface into a synchronous/asynchronous serial interface.

serial-set set-number

This command names the serial interface as serial cellular-number:set-number.

Configure PPP and DDR, and specify an IP address for the serial interface channelized from

the cellular interface of a 3G modem as needed.

5. Bring up the cellular interface.

undo shutdown

By default, a cellular interface is up.

Configuring the 4G modem cellular interface

1. Enter system view.

system-view

2. Enter cellular interface view.

controller cellular cellular-number

3. Configure a description for the cellular interface.

description text

By default, the description for a cellular interface is interface name Interface, for example,

Cellular 2/4/0 Interface.

4. Channelize the cellular interface into an Eth-channel interface.

eth-channel channel-number

This command names the Eth-channel interface as eth-channel

cellular-number:channel-number.

Configure DDR and specify an IP address for the Eth-channel interface channelized from the

cellular interface of a 4G modem as needed.

5. Bring up the cellular interface.

undo shutdown

By default, a cellular interface is up.

Configuring an Eth-channel interface for a 4G

modem

Configuring basic parameters for an Eth-channel interface

1. Enter system view.

system-view

2. Enter Eth-channel interface view.

interface eth-channel interface-number

3. Configure a description of the Eth-channel interface.

description text

By default, the description for an Eth-channel interface is interface name Interface, for example,

Echannel 2/4/0:0 Interface.

4. Set the MTU for the Eth-channel interface.

mtu size

By default, the MTU for an Eth-channel interface is 1500 bytes.

5. Set the expected bandwidth of the Eth-channel interface.

bandwidth bandwidth-value

By default, the expected bandwidth (in kbps) of an Eth-channel is the interface baud rate

divided by 1000.

The baud rate of an Eth-channel interface is 100 Mbps.

6. Bring up the Eth-channel interface.

undo shutdown

By default, the Eth-channel interface is up.

Restoring the default settings for an Eth-channel interface

Restrictions and guidelines

CAUTION:

Restoring the default interface settings might interrupt ongoing network services. Make sure you are

fully aware of the impact of this command when you use it on a live network.

The default command might fail to restore the default settings for some commands for reasons

such as command dependencies and system restrictions. Use the display this command in

interface view to identify these commands. Then use their undo forms or follow the command

reference to individually restore their default settings. If your restoration attempt still fails, follow the

error message instructions to resolve the problem.

Procedure

1. Enter system view.

system-view

2. Enter Eth-channel interface view.

interface eth-channel interface-number

3. Restore the default configurations.

default

Configuring an IP address for an Eth-channel interface of a

4G modem

About obtaining an IP address for an Eth-channel interface

An Eth-channel interface can communicate with other devices only after it obtains an IP address.

You can configure an IP address for an Eth-channel interface in the following ways:

•DHCP—The Eth-channel interface obtains the modem's IP address as its own IP address

through DHCP. The modem's IP address is automatically allocated by the service provider.

•Modem manufacturer's proprietary protocol—The Eth-channel interface obtains the

modem's IP address as its own IP address through the modem manufacturer's proprietary

protocol. The modem's IP address is automatically allocated by the service provider.

•Manual configuration.

The ways for the Eth-channel interface to obtain an IP address are mutually exclusive. The most

recent configuration overrides the previous one.

Restrictions and guidelines

Changing the IP address will result in dialup interruption. Immediate re-dialup upon interruption

might not be supported by service providers.

Procedure

1. Enter system view.

system-view

2. Enter Eth-channel interface view.

interface eth-channel interface-number

3. Configure an IP address for the Eth-channel interface in one of the three ways.

{Obtain an IP address by using DHCP.

ip address dhcp-alloc

Altri manuali per SecPath F5030

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali H3C Firewall

H3C

H3C SecPath F5020 Manuale utente

H3C

H3C SecPath F100-C Manuale utente

H3C

H3C F5000-AI160 Manuale utente

H3C

H3C SecPath F5020 Manuale utente

H3C

H3C SecPath F1000-AI-5 Series Manuale utente

H3C

H3C SecPath Series Istruzioni per l'installazione

H3C

H3C SecPath F5000-A5 Manuale utente

H3C

H3C SecPath F100-X-G3 Manuale utente

H3C

H3C SecPath T9000 IPS Series Manuale operativo e di manutenzione

H3C

H3C H3C SecPath F1800-A Manuale utente

H3C

H3C SecPath F100-C-EI Manuale utente

H3C

H3C H3C SECPATH F100-A Manuale utente

H3C

H3C LSUM1FWCEAB0 Manuale utente

H3C

H3C SecPath F1000-E Manuale utente

H3C

H3C SecPath F5000-AI-15 Manuale utente

H3C

H3C SecPath F10 0 Series Manuale utente

H3C

H3C SecPath NSQM1F1KGM0 Manuale utente

H3C

H3C SecPath M9000-S NSQM2FWDFG0 Manuale utente

H3C

H3C SecPath F5000 Series Manuale di istruzioni

H3C

H3C SecPath F50X0-D Series Manuale di installazione

H3C

H3C SecPath F100-C-A-W Manuale utente

H3C

H3C SecPath F10X0 Manuale utente

H3C

H3C H3C SECPATH F1000-S Manuale utente

H3C

H3C F1000-AI-20 Manuale utente

Manuali Firewall popolari di altre marche

Cisco

Cisco S190 Manuale utente

Fortinet

Fortinet FortiGate Voice Series Manuale utente

ADTRAN

ADTRAN NetVanta 2300 Manuale utente

SecureLogix

SecureLogix ETM System Manuale utente

NETGEAR

NETGEAR ProSafe FVX538 Manuale utente

Lanner

Lanner FW-8877 Manuale utente

Huawei

Huawei USG6000 Series Manuale di installazione e funzionamento

Nexcom

Nexcom DNA 1150 Manuale utente

Fortinet

Fortinet FortiGate-60 series Manuale utente

Cisco

Cisco 3110 Manuale

Draytek

Draytek Vigor2860 Series Manuale utente

Lanner electronics

Lanner electronics FW-7650 Series Manuale utente

Swisscom

Swisscom Internet Backup Manuale utente

SonicWALL

SonicWALL NSa 5700 Manuale utente

DPtech

DPtech FW1000 SERIES Manuale utente

FEITIAN

FEITIAN MultiPass FIDO Manuale utente

EBLOCKER

EBLOCKER PRO Manuale utente

GTA

GTA GB-200 Manuale utente