H3C SecPath NSQM1F1KGM0 Manuale utente

H3C SecPath Firewall

Network Data Encryption Modules Manual

New H3C Technologies Co., Ltd.

http://www.h3c.com

Document version: 6W101-20201210

No part of this manual may be reproduced or transmitted in any form or by any means without prior written

consent of New H3C Technologies Co., Ltd.

Trademarks

Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this

document are the property of their respective owners.

Notice

The information in this document is subject to change without notice. All contents in this document, including

statements, information, and recommendations, are believed to be accurate, but they are presented without

warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions

contained herein.

Environmental protection

This product has been designed to comply with the environmental protection requirements. The storage, use,

and disposal of this product must meet the applicable national laws and regulations.

Preface

This manual describes the specifications and installation procedure for the network data encryption

modules.

This preface includes the following topics about the documentation:

•

Audience.

•

Conventions.

•

Documentation feedback.

Audience

This documentation is intended for:

•

Network planners.

•

Field technical support and servicing engineers.

•

Network administrators working with network data encryption modules.

Conventions

The following information describes the conventions used in the documentation.

Command conventions

Convention

Description

Boldface Bold text represents commands and keywords that you enter literally as shown.

Italic Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from which

you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars,

from which you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by vertical

bars, from which you select a minimum of one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntaxchoices separated byvertical

bars, from which you select one choice, multiple choices, or none.

&<1-n> The argument or keyword and argument combination before the ampersand (&) sign

can be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention

Description

Boldface Window names, button names, field names, and menu items are in Boldface. For

example, the New User window opens; click OK.

> Multi-level menus are separated by angle brackets. For example, File > Create >

Folder.

Symbols

Convention

Description

WARNING! An alert that calls attention to important information that if not understood or followed

can result in personal injury.

CAUTION:

An alert that calls attention to important information that if not understood or followed

can result in data loss, data corruption, or damage to hardware or software.

IMPORTANT:

An alert that calls attention to essential information.

NOTE:

An alert that contains additional or supplementary information.

TIP:

An alert that provides helpful information.

Network topology icons

Convention

Description

Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that

supports Layer 2 forwarding and other Layer 2 features.

Represents an access controller, a unified wired-WLAN module, or the access

controller engine on a unified wired-WLAN switch.

Represents an access point.

Represents a wireless terminator unit.

Represents a wireless terminator.

Represents a mesh access point.

Represents omnidirectional signals.

Represents directional signals.

Represents a security product, such as a firewall, UTM, multiservice security

gateway, or load balancing device.

Represents a security module, such as a firewall, load balancing, NetStream, SSL

VPN, IPS, or ACG module.

Examples provided in this document

Examples in this document might use devices that differ from your device in hardware model,

configuration, or software version. It is normal that the port numbers, sample output, screenshots,

and other information in the examples differ from what you have on your device.

Documentation feedback

You can e-mail your comments about product documentation to inf[email protected].

We appreciate your comments.

Contents

About the encryption modules ·······································································1

Specifications ································································································1

LED ···············································································································3

Compatible hardware and software ·······························································4

NSQM1F1KGM0················································································································································4

NSQM1F1KGMB················································································································································4

NSQM1F1KGMC ···············································································································································5

NSQM1F5KGM0················································································································································6

NSQM1F5KGMC ···············································································································································6

NS-HTIM-GMG2A··············································································································································6

NS-HTIM-GMG2B··············································································································································7

Installing the encryption modules···································································7

Installing an NSQM1F1KGM0 encryption module ·····························································································7

Installing an NSQM1F1KGMB or NSQM1F1KGMC encryption module····························································8

Installing an NSQM1F5KGM0 or NSQM1F5KGMC encryption module ····························································9

Installing an NS-HTIM-GMG2A or NS-HTIM-GMG2B encryption module·······················································10

Functionalities······························································································10

Application scenarios···················································································11

About the encryption modules

The NSQM1F1KGM0, NSQM1F5KGM0, NSQM1F1KGMB, NSQM1F1KGMC, NSQM1F5KGMC,

NS-HTIM-GMG2A, and NS-HTIM-GMG2B are network data encryption modules developed by H3C.

The encryption modules provide the following functionalities:

•

Support rapid generation of random numbers, SM1 fast grouping algorithm, and SM2 public key

encryption algorithm.

•

Provide rich security features including keymanagement, digital signature and verification, data

encryption and decryption, and data integrity protection.

•

Offers high-performance and reliable data encryption for the IPsec module.

Specifications

Figure 1 NSQM1F1KGM0

(1) Captive screw

(2) Ejector lever

(3) LED (READY)

Figure 2 NSQM1F1KGMB

(1) Captive screw

(2) Ejector lever

(3) LED (READY)

Figure 3 NSQM1F1KGMC

(1) Captive screw

(2) Ejector lever

(3) LED (READY)

123

132

Figure 4 NSQM1F5KGM0

(1) Captive screw

(2) Ejector lever

(3) LED (READY)

Figure 5 NSQM1F5KGMC

(1) Captive screw

(2) Ejector lever

(3) LED (READY)

Figure 6 NS-HTIM-GMG2A

(1) Captive screw

(2) LED (READY)

(3) Ejector lever

Figure 7 NS-HTIM-GMG2B

(1) Captive screw

(2) LED (READY)

(3) Ejector lever

1 32

12 3

123

Table 1 Technical specifications

Model

Specifications

Dimensions

(H × W × D)

Max

power

consum

ption

Weight Hot

swapping Temperature Humidity

NSQM1

F5KGM

40.1 × 399.2 ×

195.8 mm

(1.58 × 15.72 ×

7.71 in)

3.95 W 1.44 kg

(3.17 lb)

Not

supported

•Operating:

0°C to 45°C

(32°F to

113°F)

•Storage: –

40°C to

+70°C (–

40°F to

+158°F)

•Operating

: 10% RH

to 80%

RH,

nonconde

sing

•Storage:

5% RH to

95% RH,

nonconde

sing

NSQM1

F5KGM

40.1 × 399.2 ×

195.8 mm

(1.58 × 15.72 ×

7.71 in)

5.5 W 1.34 kg

(2.95 lb)

NSQM1

F1KGM

40.1 ×150 ×

172.9 mm

(1.58 × 5.91 ×

6.81 in)

4.14 W 0.64 kg

(1.41 lb)

NSQM1

F1KGM

19.8 × 150 ×

172.9 mm

(0.78 × 5.91 ×

6.81 in)

3.7 W 0.36 kg

(0.79 lb)

NSQM1

F1KGM

19.8 × 150 ×

172.9 mm

(0.78 × 5.91 ×

6.81 in)

5.7 W 0.38 kg

(0.84 lb)

NS-HTI

M-GMG

40.1 × 189.0 ×

212.4 mm

(1.58 × 7.44 ×

8.36 in)

7 W 0.6 kg

(1.32 lb)

NS-HTI

M-GMG

40.1 × 189.0 ×

212.4 mm

(1.58 × 7.44 ×

8.36 in)

7 W 0.6 kg

(1.32 lb)

LED

The encryption modules each provide a LED to show their operating status.

Table 2 LED description

Mark

Status

Description

READY

Steady green The module has normal power input and is being initialized.

Flashing green (1 Hz) The module is operating correctly.

Off/steady yellow No power is present or the module is faulty.

Compatible hardware and software

NSQM1F1KGM0

Table 3 Compatible hardware and software for the NSQM1F1KGM0 encryption module

Compatible firewalls

Compatible slots

Software version

•F1020, F1030, F1050, F1060, F1070, F1080

•F100-A-G2, F100-A-EI, F100-E-G2, F100-A-SI,

F100-E-EI

•F1000-C-G2, F1000-C-EI, F1000-E-G2,

F1000-S-G2, F1000-A-G2

•F1020-GM, F1030-GM, F1070-GM, F1070-GM-L

•F1000-AK130, F1000-AK135, F1000-AK140,

F1000-AK145, F1000-AK150, F1000-AK155,

F1000-AK160, F1000-AK165, F1000-AK170,

F1000-AK175, F1000-AK1212, F1000-AK1222,

F1000-AK1232, F1000-AK1312, F1000-AK1322,

F1000-AK1332, F1000-AK180, F1000-AK185,

F1000-GM-AK370, F1000-GM-AK370

•F1000-AI-20, F1000-AI-30, F1000-AI-50

•F1000-920-AI, F1000-930-AI, F1000-950-AI,

F1000-960-AI, F1000-970-AI, F1000-980-AI,

F1000-990-AI

•F1000-E-VG, F1000-V70

•F100-A-G3, F100-E-G3, F100-A80-WiNet

Slot 1 R9333 or higher

•F1000-AI-60

•F1000-C-G3 Slot 1

E8601P07 or higher

•F1090

•F1000-AI-70, F1000-AI-80, F1000-AI-90

•F1000-S-G3, F1000-A-G3, F1000-E-G3

•F1000-AK1414, F1000-AK1424, F1000-AK1434,

F1000-AK1514, F1000-AK1524, F1000-AK1534,

F1000-AK1614

Slots 1 and 3

NSQM1F1KGMB

Table 4 Compatible hardware and software for the NSQM1F1KGMB encryption module

Compatible firewalls

Compatible slots

Software version

•F1020

•F100-A-G2, F100-A-EI

•F1000-AK130

•F1020-GM

•F1000-920-AI

•F100-A-G3

•F100-A80-WiNet

Slot 1

R9345 or higher

•F1030, F1050, F1060, F1070, F1080

•F100-E-G2, F100-A-SI, F100-E-EI

•F1000-C-G2, F1000-C-EI, F1000-E-G2,

Slots 1 to 2

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali H3C Firewall

H3C

H3C SecPath F5030 Manuale utente

H3C

H3C SecPath F100-C-A-W Manuale utente

H3C

H3C F1000-AI-20 Manuale utente

H3C

H3C SecPath F1000-AI-5 Series Manuale utente

H3C

H3C SecPath F10X0 Manuale utente

H3C

H3C SecPath Series Manuale di installazione

H3C

H3C H3C SECPATH F100-A Manuale utente

H3C

H3C SecPath F100-C Manuale utente

H3C

H3C SecPath F5030 Manuale utente

H3C

H3C SecPath F1000-AI-X0 Manuale utente

H3C

H3C SecPath F10 0 Series Manuale utente

H3C

H3C H3C SECPATH F1000-A Manuale utente

H3C

H3C SecPath F5000-A5 Manuale utente

H3C

H3C SecPath T9000 IPS Series Manuale operativo e di manutenzione

H3C

H3C SecPath Series Istruzioni per l'installazione

H3C

H3C H3C SecPath F1800-A Manuale utente

H3C

H3C SecPath F5000 Series Manuale di istruzioni

H3C

H3C SecPath F5020 Manuale utente

H3C

H3C F5000-AI160 Manuale utente

H3C

H3C SecPath F100-C-EI Manuale utente

H3C

H3C H3C SecPath F1800-A Manuale utente

H3C

H3C SecPath F1000-E Manuale utente

H3C

H3C SecPath F5030 Manuale utente

H3C

H3C H3C SECPATH F1000-S Manuale utente

Manuali Firewall popolari di altre marche

Cisco

Cisco S190 Manuale utente

Fortinet

Fortinet FortiGate Voice Series Manuale utente

ADTRAN

ADTRAN NetVanta 2300 Manuale utente

SecureLogix

SecureLogix ETM System Manuale utente

NETGEAR

NETGEAR ProSafe FVX538 Manuale utente

Lanner

Lanner FW-8877 Manuale utente

Huawei

Huawei USG6000 Series Manuale di installazione e funzionamento

Nexcom

Nexcom DNA 1150 Manuale utente

Fortinet

Fortinet FortiGate-60 series Manuale utente

Cisco

Cisco 3110 Manuale

Draytek

Draytek Vigor2860 Series Manuale utente

Lanner electronics

Lanner electronics FW-7650 Series Manuale utente

Swisscom

Swisscom Internet Backup Manuale utente

SonicWALL

SonicWALL NSa 5700 Manuale utente

DPtech

DPtech FW1000 SERIES Manuale utente

FEITIAN

FEITIAN MultiPass FIDO Manuale utente

EBLOCKER

EBLOCKER PRO Manuale utente

GTA

GTA GB-200 Manuale utente