advertisement
V200HardwareGuide.book Page i Wednesday, March 5, 2003 9:40 AM
Firebox
®
V200
Hardware Guide
Vcontroller ™ 4.0
V200HardwareGuide.book Page ii Wednesday, March 5, 2003 9:40 AM
FCC Certification
This device has been tested and found to comply with limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. Operation is subject to the following two conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause undesired operation.
CE Notice
The CE symbol on your WatchGuard Technologies equipment indicates that it is in compliance with the Electromagnetic Compatibility (EMC) directive and the Low Voltage Directive (LVD) of the European Union
(EU).
Industry Canada
This Class A digital apparatus meets all requirements of the Canadian
Interference-Causing Equipment Regulations.
Cet appareil numerique de la classe A respecte toutes les exigences du
Reglement sur le materiel broulleur du Canada.
ii WatchGuard Firebox V200
V200HardwareGuide.book Page iii Wednesday, March 5, 2003 9:40 AM
VCCI Notice Class A ITE
Hardware Guide iii
V200HardwareGuide.book Page iv Wednesday, March 5, 2003 9:40 AM
Declaration of Conformity
iv WatchGuard Firebox V200
V200HardwareGuide.book Page v Wednesday, March 5, 2003 9:40 AM
Firebox V200 Limited Hardware Warranty
This Limited Hardware Warranty (the "Warranty") applies to the enclosed Firebox V200 hardware product, not including any associated software which is licensed pursuant to a separate end-user license agreement and warranty
(the "Product"). BY USING THE PRODUCT, YOU AGREE TO THE TERMS HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. ("WatchGuard") and you agree as follows:
1. Limited Warranty. WatchGuard warrants that upon delivery and for one (1) year thereafter (the "Warranty Period"):
(a) the Product will be free from material defects in materials and workmanship, and (b) the Product, when properly installed and used for its intended purpose and in its intended operating environment, will perform substantially in accordance with WatchGuard applicable specifications.
This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other than
WatchGuard except for replacement of specified components performed in strict accordance with the Firebox V200
Hardware Guide; or (ii) damaged or destroyed by accidents, power spikes or similar events or by any intentional, reckless or negligent acts or omissions of any party. You may have additional warranties with respect to the Product from the manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release
WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of, any such warranties or any breach thereof.
2. Remedies. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above,
WatchGuard will, at its option, either (a) repair the Product, or (b) replace the Product; provided, that you will be responsible for returning the Product to the place of purchase and for all costs of shipping and handling. Repair or replacement of the Product shall not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any software, firmware, information or data contained in, stored on, or integrated with any returned Products.
3. Disclaimer and Release. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND
YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION
FOR, AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES,
OBLIGATIONS AND LIABILITIES OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES
YOU MAY HAVE AGAINST WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE,
WITH RESPECT TO ANY NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT
LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR
PURPOSE, ANY IMPLIED WARRANTY ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING,
OR USAGE OF TRADE, ANY WARRANTY OF NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED
OR ERROR-FREE OPERATION, ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY IN TORT,
WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR IMPUTED) OR
FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY OR OTHER THEORY, AND ANY
OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO, OR CAUSED BY OR
CONTRIBUTED TO BY,THE PRODUCT).
4. Limitation of Liability. WATCHGUARD’S LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING
WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY
AND FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE
PURCHASE PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE
FAILURE OF ANY AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY
THIRD PARTY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE,
PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST
OF COVER OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING
WITHOUT LIMITATION LOSS OF PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION
WITH THIS WARRANTY OR THE USE OF OR INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD
HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS SHALL BE TRUE EVEN IN THE
EVENT OF THE FAILURE OF ANY AGREED REMEDY.
5. Miscellaneous Provisions. This Warranty will be governed by the laws of the state of Washington, U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on Contracts for the
International Sales of Goods, as amended, shall not apply. You agree not to directly or indirectly transfer the Product or associated documentation to any country to which such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product, and supersedes any prior purchase order, communications, advertising or representations concerning the
Hardware Guide v
V200HardwareGuide.book Page vi Wednesday, March 5, 2003 9:40 AM vi
Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. No change or modification of this
Agreement will be valid unless it is in writing, and is signed by WatchGuard.
Notice to Users
Information in this guide is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard Technologies, Inc.
Copyright, Trademark, and Patent Information
Copyright© 1998 - 2003 WatchGuard Technologies, Inc. All rights reserved.
AppLock®, AppLock®/Web, Designing peace of mind®, Firebox®, Firebox® 1000, Firebox® 2500, Firebox® 4500,
Firebox® II, Firebox® II Plus, Firebox® II FastVPN, Firebox® III, Firebox® SOHO, Firebox® SOHO 6, Firebox®
SOHO 6tc, Firebox® SOHO|tc, Firebox® V100, Firebox® V80, Firebox® V60, Firebox® V10, LiveSecurity®,
LockSolid®, RapidStream®, RapidCore®, ServerLock®, WatchGuard®, WatchGuard® Technologies, Inc., DVCP™ technology,, Enforcer/MUVPN™, FireChip™, HackAdmin™, HostWatch™, Make Security Your Strength™,
RapidCare™, SchoolMate™, ServiceWatch™, Smart Security. Simply Done.™, Vcontroller™, VPNforce™ are either registered trademarks or trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries.
© Hi/fn, Inc. 1993, including one or more U.S. Patents: 4701745, 5016009, 5126739, and 5146221 and other patents pending.
Microsoft®, Internet Explorer®, Windows® 95, Windows® 98, Windows NT® and Windows® 2000 are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
Netscape and Netscape Navigator are registered trademarks of Netscape Communications Corporation in the United
States and other countries.
RC2 Symmetric Block Cipher, RC4 Symmetric Stream Cipher, RC5 Symmetric Block Cipher, BSAFE, TIPEM, RSA
Public Key Cryptosystem, MD, MD2, MD4, and MD5 are either trademarks or registered trademarks of RSA Data
Security, Inc. Certain materials herein are Copyright © 1992-1999 RSA Data Security, Inc. All rights reserved.
RealNetworks, RealAudio, and RealVideo are either a registered trademark or trademark of RealNetworks, Inc. in the
United States and/or other countries.
Java and all Java-based marks are trademarks or registered trademarks of Sun Microsystems, Inc. in the United
States and other countries. All right reserved.
© 1995-1998 Eric Young (eay@cryptsoft). All rights reserved.
© 1998-2000 The OpenSSL Project. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
3. All advertising materials mentioning features or use of this software must display the following acknowledgment:
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http:// www.openssl.org/)"
4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact [email protected].
5. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior written permission of the OpenSSL Project.
6. Redistributions of any form whatsoever must retain the following acknowledgment: "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)"
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY EXPRESSED OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL
PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
WatchGuard Firebox V200
V200HardwareGuide.book Page vii Wednesday, March 5, 2003 9:40 AM
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This product includes cryptographic software written by Eric Young
([email protected]). This product includes software written by Tim
Hudson ([email protected]).
© 1995-1998 Eric Young ([email protected])
All rights reserved.
This package is an SSL implementation written by Eric Young ([email protected]).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are aheared to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the
SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson ([email protected]).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
3. All advertising materials mentioning features or use of this software must display the following acknowledgement:
"This product includes cryptographic software written by Eric Young ([email protected])" The word 'cryptographic' can be left out if the routines from the library being used are not cryptographic related :-).
4. If you include any Windows specific code (or a derivative thereof) from the apps directory (application code) you must include an acknowledgement: "This product includes software written by Tim Hudson ([email protected])"
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY,
WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
SUCH DAMAGE.
The licence and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution licence [including the GNU Public Licence.]
All other trademarks or trade names mentioned herein, if any, are the property of their respective owners.
Part No: 0570-000
Hardware Guide vii
V200HardwareGuide.book Page viii Wednesday, March 5, 2003 9:40 AM viii WatchGuard Firebox V200
V200HardwareGuide.book Page ix Wednesday, March 5, 2003 9:40 AM
Contents
Hardware Guide
CHAPTER 1
Hardware Description ............................... 1
Package Contents
........................................................... 1
Firebox V200 Front Panel
................................................. 2
.................................................................... 2
Host card .................................................................... 3
Firebox V200 Back Panel
.................................................. 5
................................................. 6
CHAPTER 2
Replacing the WatchGuard Firebox
V200 Hardware ......................................... 9
Removing line cards
...................................................... 10
Replacing the line cards
Replacing a fan card
................................................. 12
...................................................... 12
Replacing a power supply module
.................................. 15
Index ...................................................................... 19
ix
V200HardwareGuide.book Page x Wednesday, March 5, 2003 9:40 AM x WatchGuard Firebox V200
V200HardwareGuide.book Page 1 Wednesday, March 5, 2003 9:40 AM
CHAPTER 1
Hardware Description
This chapter provides a visual tour of the external hardware features of the WatchGuard
®
Firebox
®
V200 security appliance, focusing on the buttons, LEDs, interfaces, ports, and outlets.
Package Contents
The Firebox V200 appliance is packaged with:
• Two power cords.
• One 6-foot red, crossover 10/100 BaseT Ethernet cable.
• One green, straight-through, 10/100 BaseT Ethernet cable.
• Two Gigabit fiber-optic cables.
• One 6-foot console, RJ 45-to-RJ 45, serial cable and DB-9 adapter.
• A CD containing the WatchGuard Vcontroller application software for use with three different operating systems: Windows 9x/2000/XP,
Solaris, and Linux. The CD also provides electronic versions of the complete user documentation set.
• Rack-mounting hardware. If you are mounting the appliance in a rack, note that V200 appliances are 4U high.
Hardware Guide 1
V200HardwareGuide.book Page 2 Wednesday, March 5, 2003 9:40 AM
Firebox V200 Front Panel
This illustration of a Firebox V200 security appliance’s front panel shows the two fan cards, two line cards, and one host card.
Line cards
The front of each line card includes the following:
2
Monitor port
A single DB-9 connector provides direct console connection to the appliance.
Ready LED
Blinks while the appliance powers up or down and is steadily lit when the appliance is ready for network traffic.
WatchGuard Firebox V200
V200HardwareGuide.book Page 3 Wednesday, March 5, 2003 9:40 AM
Firebox V200 Front Panel
Diag LED
Reserved for future use.
Link LED
When lit, indicates that the cable is plugged in correctly.
TX LED
Blinks if the appliance is sending a data packet.
RX LED
Blinks if the appliance is receiving a data packet.
TX Gigabit port
Port for outgoing data.
RX Gigabit port
Port for incoming data.
Host card
The front of the host card includes the following:
Hardware Guide
AUX port
Reserved for future use.
Console port
A single RJ-45 connector provides direct workstation-to-appliance connection.
Appliance Reset
Place a pin in this port to reset the appliance.
3
V200HardwareGuide.book Page 4 Wednesday, March 5, 2003 9:40 AM
Fan Cards Status LEDs
If the lights appear green, the fans are working properly; if red, the fans are not working properly.
Power Supply Status LEDs
If the lights appear green, the power supply is functioning correctly; if red, the power supply is not functioning correctly.
Ready LED
Blinks while the appliance powers up or down and is steadily lit when the appliance is ready for network traffic.
Admin LED
If the light appears red, an administrator is logged in to the appliance through the console port or the Private interface.
Alarm LED
If the light appears green, an alarm is triggered.
Diag LED
Blinks while appliance runs diagnostics.
High Availability Status LED
Reserved for future use.
HA1/HA2 Interfaces
High Availability ports.
4 WatchGuard Firebox V200
V200HardwareGuide.book Page 5 Wednesday, March 5, 2003 9:40 AM
Firebox V200 Back Panel
Firebox V200 Back Panel
The back panel of a Firebox V200 security appliance includes the following:
Hardware Guide
Filter
Reserved for future use.
AC input module
Enables you to use the supplied power cords to connect the appliances two power supplies to a 100 to 240VAC (50/60Hz) power source. The power supply switch shuts off power to the appliance. Do not shut off power to the appliance unless you first complete a system shutdown in the CLI or Vcontroller. For more information on completing a system shutdown, see the Firebox
Vclass User Guide .
N
OTE
Do not connect any Firebox V200 appliance to a source of power that supplies the wrong voltage. Doing so will damage the appliance and void the warranty.
5
V200HardwareGuide.book Page 6 Wednesday, March 5, 2003 9:40 AM
6
Power supply modules
Source of power for appliance. Each power supply has a Fault
LED and Power Good LED which indicates the status of the power supply.
Appliance Status
Normal
Possible connection problem. Make sure Power Supply is properly inserted.
Power Supply failure. Replace
Power Supply.
No power. Check Power Supply connection or Power Switch.
Fault LED
Off
Amber
Amber
Off
Power Good
LED
Green
Green
Off
Off
Grounding connector
Used to attach an ESD wrist strap so you can safely channel static electricity.
W ARNING
Under normal circumstances, you do not need to open the Firebox V200 appliance, and WatchGuard recommends that you do not. However, if you must open the box to replace a card or for some other reason, see Chapter
2, “Replacing the WatchGuard Firebox V200 Hardware” on page 9 for
information on how to put in and take out the line cards, fan cards, and power supplies.
If a power failure occurs
In the event of a power failure, this security appliance–if left connected to the power source– automatically restarts itself when electrical power is restored. You do not have to press the power supply switch on the back of the appliance.
WatchGuard Firebox V200
V200HardwareGuide.book Page 7 Wednesday, March 5, 2003 9:40 AM
Firebox V200 Back Panel
If both power supplies are plugged in and power is lost to one power supply, the unit will continue to operate on the secondary power supply.
Hardware Guide 7
V200HardwareGuide.book Page 8 Wednesday, March 5, 2003 9:40 AM
8 WatchGuard Firebox V200
V200HardwareGuide.book Page 9 Wednesday, March 5, 2003 9:40 AM
CHAPTER 2
Replacing the WatchGuard
Firebox V200 Hardware
Hardware Guide
Under normal circumstances, you do not need to open the Firebox V200 appliance, and WatchGuard recommends that you do not. However, one of the appliance’s major components might occasionally need to be replaced. This appendix describes how to remove and replace the following:
• Line cards
• Fan cards
• Power supply module
You can not replace the host card. Removing and replacing components should only be performed by a networking hardware maintenance technician experienced in servicing electrical equipment.
C AUTION
Electro-Static Discharge, ESD, can damage the board or system. Attach an ESD strap to your wrist and to the grounding connector on the back of the unit before opening the appliance or removing any card or module.
Wear the ESD strap at all times while handling both old and new cards and modules.
Note: The appliance must be plugged into a properly grounded outlet for the grounding connector to function.
9
V200HardwareGuide.book Page 10 Wednesday, March 5, 2003 9:40 AM
Removing line cards
The Firebox V200 has two line cards, which are installed from the front side of the appliance. These cards are not redundant or hot-swappable.
You must complete a system shutdown in CLI or Vcontroller and turn off the appliance before you replace the line cards. For more information on completing a system shutdown, see the Firebox Vclass User Guide . Do not remove the defective line cards until a replacement is available. The following figure shows an assembled Firebox V200 appliance.
10
To remove a line card:
1 Shut down the system and turn off the power supply switch located on the back of the appliance. For more information on system shutdown, see the Firebox Vclass User Guide .
WatchGuard Firebox V200
V200HardwareGuide.book Page 11 Wednesday, March 5, 2003 9:40 AM
Removing line cards
C AUTION
You must properly shutdown the system and turn off the power switch on the rear of the unit before removing a line card. Failure to do so could cause file corruption or damage to the board or system.
2 Attach an ESD strap to your wrist and to the grounding connector at the back of the unit before opening the appliance or removing any card or module. Electro-Static Discharge, ESD, can damage the board or system. Wear the ESD strap at all times while handling both old and new cards and modules.
Note: The appliance must be plugged in to a properly grounded outlet for the grounding connector to function.
3 Turn the card’s latching screws counter-clockwise until they pop out.
4 Pull both ejector latches out toward the sides of the line card. The card disengages from the backplane and pops out of the slot slightly.
5 Remove the card from the unit. Be sure you handle it only by its faceplace and the bottom metal plate.
W ARNING
The heat sink and other electrical components on the top of the card may be hot enough to cause burns. Handle the card only by its face plate and the bottom metal plate. Do not touch the heat sink or other electrical components on the top of the card. Do not place paper or other flammable materials on the top of the card.
W ARNING
To prevent personal injury or damage to the board or system, do not insert your fingers, tools, or anything else into the appliance when a card is removed. The fan blades inside the appliance may continue to spin when a line card is removed. Do not leave the appliance unattended when a card or module is removed.
Hardware Guide 11
V200HardwareGuide.book Page 12 Wednesday, March 5, 2003 9:40 AM
Replacing the line cards
Use the following procedure to replace a line card:
1 Attach an ESD strap to your wrist and to the grounding connector at the back of the unit before opening the appliance or removing any card or module. Electro-Static Discharge, ESD, can damage the board or system. Wear the ESD strap at all times while handling both old and new cards and modules.
Note: The appliance must be plugged in to a properly grounded outlet for the grounding connector to function.
2 Set the metal tray of the new line card on the bottom edge of the slot and slide the card along the two rails until the front of the card is flush with the chassis front. Be careful not to bump the heat sink of the line card on the top of the chassis opening.
3 Turn the latching screws clockwise until the card is fastened securely to the appliance chassis.
4 During initialization, the Firebox V200 detects what software version is on the host card and two line cards. If there is any difference between the software versions, the following error message appears.
A discrepancy in software version on the host card and line cards has been detected. Please perform a software update.
5 Follow the instructions that appear to perform a software update. The software update loads the same software version on both the host and line cards.
Replacing a fan card
The Firebox V200 operates with two fan cards. To view the status of each fan card, check the Fan Card Status LEDs on the front of the unit. If one of the five fans on a fan card is not operating, the status light for that card turns from green to red. However, you must not remove a fan card with an inoperative fan until a replacement is available. The fans that are still operating on the fan card will help cool the appliance.
12 WatchGuard Firebox V200
V200HardwareGuide.book Page 13 Wednesday, March 5, 2003 9:40 AM
Replacing a fan card
C AUTION
The fan status light changes to red when any one or more of the five fans on the fan card are not operating. To maintain optimal cooling, the fan card should be replaced promptly when the light is red. However, do not remove the fan card until a replacement fan card is available. Removing a fan card without having a replacement available will reduce cooling capacity and may damage the boards or system.
When the replacement fan card is available, the fan card with the inoperative fan can be replaced while the appliance is in operation.
Fan cards are not interchangeable because the fans on the first card are not in the same positions as those on the second card. Fan cards are labeled
Fan1 and Fan2. Fan1 is in the left slot and Fan2 is in the right slot, as shown in the front of the appliance illustration on page 10.
A fan card appears as follows:
Hardware Guide 13
V200HardwareGuide.book Page 14 Wednesday, March 5, 2003 9:40 AM
All fan cards have two latching screws that fasten the card to the chassis.
The following figure shows the screws when they are unlatched.
14
To replace a fan card:
1 Unscrew the two latching screws that hold the fan card in place.
2 Attach an ESD strap to your wrist and to the grounding connector at the back of the unit before opening the appliance or removing any card or module. Electro-Static Discharge, ESD, can damage the board or system. Wear the ESD strap at all times while handling both old and new cards and modules.
Note: The appliance must be plugged in to a properly grounded outlet for the grounding connector to function.
3 Grasp the metal handle of the fan card and pull the card part of the way out of the chassis (about one inch out from the installed position).
Wait five to ten seconds for the fans to stop spinning before removing the fan tray the rest of the way from the chassis. Some fans may still be moving.
W ARNING
Fans will continue to rotate as you pull out the card. Keep fingers, hair, and all objects clear of the rotating fans until fans stop.
W ARNING
To prevent personal injury or damage to the board or system, do not insert your fingers, tools, or anything else into the appliance when a fan card is removed. When one fan card is removed, the blades on the other fan card continue to spin to provide cooling as long as the appliance is powered. Do not leave the appliance unattended when a fan card is removed.
WatchGuard Firebox V200
V200HardwareGuide.book Page 15 Wednesday, March 5, 2003 9:40 AM
Replacing a power supply module
4 Unpack the replacement card (Fan1 or Fan2) and make sure the openings in the replacement card match the ones in the inoperative card. The fans on each card must be in the same position.
5 Line up the fan card with the Serial Number sticker at the top inside rail and gently slide the fan card in until the front of the module is flush with the chassis front.
6 Turn the two latching screws until the card is fastened securely to the appliance chassis.
7 Check that the Fan Card Status LED on the front of the host card is green.
Replacing a power supply module
Because the Firebox V200 supports two fully redundant power supplies, either module can be removed while the appliance is in operation. To determine the status of each power supply, check the Fault LED and
Power Good LED on each power supply, or check the Power Supply
Status LEDs on the front of the unit. If a power supply needs to be replaced, you must not remove the inoperative power supply until a replacement is available.
Hardware Guide 15
V200HardwareGuide.book Page 16 Wednesday, March 5, 2003 9:40 AM
C AUTION
Do not run the appliance with only one power supply inserted. Leaving one power supply slot open removes EMI shielding and changes the airflow from the cooling fans, which could damage the board or system.
You insert the power supply modules into two horizontal slots in the center back of the unit, and secure them with two latches each. Two power cords are located below the power supplies to connect the power supplies to a 100 to 240VAC (50/60Hz) power source. Power supplies are interchangeable, and can be inserted into either slot.
The power supply modules appear as shown on the back of the appliance.
16
To replace a power supply module:
1 Do not shut off power to the appliance to replace a power supply. A power supply module can be removed while the appliance is in operation.
If you want to shut off the power to the appliance to replace the power supply, make sure you complete a system shutdown in CLI or
Vcontroller before shutting off the power. For information on how to complete a system shutdown, see the Firebox Vclass User Guide .
WatchGuard Firebox V200
V200HardwareGuide.book Page 17 Wednesday, March 5, 2003 9:40 AM
Replacing a power supply module
C AUTION
You must properly shutdown the system software before you turn off the power switch on the rear of the unit. Failure to do so, could cause file corruption or damage to the board or system.
2 Attach an ESD strap to your wrist and to the grounding connector at the back of the unit before opening the appliance or removing any card or module. Electro-Static Discharge, ESD, can damage the board or system. Wear the ESD strap at all times while handling both old and new cards and modules.
Note: The appliance must be plugged in to a properly grounded outlet for the grounding connector to function.
3 Press in the two latches and remove the power supply module.
W ARNING
To prevent personal injury or damage to the board or system, do not inset your fingers, tools, or anything else into the appliance when a power supply module is removed. The fan blades inside the appliance continue to spin when a power supply module is removed. Do not leave the appliance unattended when a power supply module is removed.
4 Line up the new module with the interior rail guides and gently slide it in until the front of the module is flush with the chassis back.
5 Lock in the new module using the latches.
Hardware Guide 17
V200HardwareGuide.book Page 18 Wednesday, March 5, 2003 9:40 AM
18 WatchGuard Firebox V200
V200HardwareGuide.book Page 19 Wednesday, March 5, 2003 9:40 AM
Index
A
Admin light
Alarm light
appliances
opening or assembling
C cards removing
certification, FCC
Console port
E
Ethernet ports
F fan cards removing
FCC certification
Firebox V200 assembling
opening
package contents
H host card front of
L line cards
removing
replacing
P ports
AC power
Ethernet
power failures
Power switch
R
Ready light
Hardware Guide 19
advertisement
Related manuals
advertisement