Huawei NIP6320 Manuel utilisateur

Safety Precautions

Be aware of the following safety precautions when installing the device.

Your product package includes the following items:

Device and Accessories

Thank you for using Huawei NIP6320/6330/6610/6620/6650/6680 products. The NIP6000 series is an intrusion detection

product developed by Huawei. It provides application and traffic security for enterprise networks, IDCs, and campus networks.

This Quick Start shows the product appearance and provides the essential information required for installing the device and

setting up Internet access. For detailed hardware description and installation guidelines, refer to the Hardware Guide. For

detailed configurations, refer to the Administrator Guide.

• Deactivate power whenever possible before performing maintenance on power cables.

• Always wear a properly-grounded wrist strap before touching the device or expansion cards in it.

NIP6680 Front panel

NIP6680 Rear panel

M4 screw

AC power cable

Cable bearer

(3U)

Rack-mounting

ears (3U)

Power cable

retention clip

Quick start OT bare crimp

terminals (3U)

Cord end

terminals

(3U)

PGND cable

M6 screw

DC power cable

(3U)

Rubber feet

(1U)

Rack-mounting

ears (1U)

DC power cable

(1U)

All other trademarks and trade names mentioned in this document are the

property of their respective holders.

NIP6000

4HDD 5PWR 6PWR

INPUT OUTPUT

OFF ~100-240V;50/60Hz;2.5A

XXXXXXXXXXXXXXXXXXXXXXXXXXX

SM-HDD-SAS300G-B

4 HDD 5 PWR 6 PWR

Protection ground

terminal

Power socket

Serial Number

NIP6330 Rear panel

NIP6000

0 1 2 3 4 5 6 7 8 9 10 11

RST

SYS

ALM

PWR

HDD

MGMT

MODE

0/1 2

CONSOLE

MGMT

WSIC(Slot 3)

WSIC(Slot 2)

4x1GE SFP

Management

port

Console port

ESD jack

10/100/1000M autosensing

Ethernet electrical port

0/1 2

NIP6330 Front panel

FAN STATUS

FAN

9 PWR 10 PWR

11 F

12 SPU

SPU

RUN ALM

SPUB

~100-240V;50/60Hz,10A

PAC-700WA-L

STATUS

~100-240V;50/60Hz,10A

PAC-700WA-L

STATUS

MGMT CONSOLE

HDD0 HDD1

RST

ENEN

SYS ALM MODE

SPUA

Management port

SPUASPUB Console port

Power socket 0 Power socket 1 9 PWR 10 PWR

11 F

12 SPU

SPU

8GEF

64 5 7

20 1 3

0 1 2 3 4 5 6 7

2XG8GE

0 1

10G

0 1 2 3 4 5 6 7

2XG8GE

0 1

10G

NIP6000

XXXXXXXXXXXXXXXXXXXXXXXXXXX

XSIC(Slot 7)

WSIC(Slot 4)

XSIC(Slot 6)

XSIC(Slot 8)

XSIC(Slot 5)

ESD jack 8x1GE RJ45

2x10GE SFP+ 8x1GE SFPProtection ground

terminal

XXXXXXXXXXXXXXXXXXXXXXXXXXX

Serial Number

HUAWEI NIP6320/6330/6610/6620/6650/6680

Network Intelligent Protection System

Quick Start

Issue: 03 Date: 2017-03-07 Part Number: 31507274

V500R001

Cabling

Fixed Interface Pair

Use the NIP6330 as an example. Connect the PGND cable to the ground terminal on the device on one end and to the

ground bar on the other.

Connect the MGMT (management) interface to the management PC or NMS using a switch or hub.

In in-line deployment, connect default interfaces to the upstream and downstream devices (in the figure, the electrical

bypass interface card is used to ensure service reliability).

If off-line deployment, connect a separate interface to the observing interface of the switch on the primary link (in the

figure, the 8GE WSIC interface card is used as an example, and you can use the fixed port preferentially).

Insert the cable retention clip into the hole close to the power socket. Then insert the power cable into the socket, and fix

it using the clip.

Turn on the power switch. When the SYS indicator on the front panel is blinking (once every two seconds), the device is

running and ready for configuration.

The following figure uses the NIP6330 as an example. The data interfaces on the fixed and expansion interface cards are

numbered in pair. The interface pair is used to connect upstream and downstream devices in the in-line deployment whereas

any interface of the interface pair can be used in the off-line deployment.

01 2 3

012345 6 7

MGMT 31 5 7

20 4 6

9 11

8 10

NIP6000

4HDD 5 PWR 6PWR

INPUT OUTPUT

OFF ~100-240V;50/60Hz;2.5A

XXXXXXXXXXXXXXXXXXXXXXXXXXX

SM-HDD-SAS300G-B

5 1

NIP6000

0 1 2 3 4 5 6 7 8 9 10 11

RST

SYS

ALM

PWR

HDD

MGMT

MODE

0/1 2

CONSOLE

MGMT

0 1 2 3

2 3

0 1

4GE-BYPASS

0 1 2 3

Power-Off

8GE

0 1 2 3 4 5 6 7

Web management PC

NMS,

Log Server

Console PC

In-line deployment, protecting the server farm

Off-line deployment, detecting network attacks

Observing

interface

Update of the

Signature Databases

Electrical bypass

interface card

Connecting cables

The NIP6320/6330/6610/6620/6650 is 1 U model. The figure above uses the NIP6330 as an example. The fixed interface

board on the front panel provides 8 10/100/1000M autosensing Ethernet electrical ports, 4 GE optical ports, and 2 USB ports.

The power module on the rear panel is removable. For the NIP6320/6610, the fixed interface board on the front panel

provides 6 service ports (4 GE electrical ports and 2 combo ports) and 1 USB port, and the power module on the rear panel

is non-removable. For the Eudemon1000E-N3/N5, the standard configuration has 2 power modules installed.

The NIP6620/6650 and NIP6330 have the same appearance but different performance. The NIP6650 of the standard config-

uration has dual power supplies.

The NIP6680 is a 3 U model. The lower part of the XSIC slot can hold the WSIC expansion card.

Compatible power cables are delivered. AC power cables vary by country or area, and the AC power cable in the figure is

used for reference only.

Set the IP address to 192.168.0.2 (or any other in the range of 192.168.0.2 to 192.168.0.254) and subnet mask to

255.255.255.0 of the corresponding network interface on the administration PC.

Open a web browser and navigate to https://192.168.0.1:8443.

Enter the user name (admin) and password (Admin@123) in the login dialog box, and then click Login. You need to change

the user password as instructed after the first login.

Activate licenses.

The intrusion prevention and antivirus signature database upgrade services are controlled by licenses.

1）Find the license authorization certificate in the delivery accessories and obtain the activation password.

2）On the web UI, select Dashboard. On the System Information page, obtain the ESN in SN.

3）Access http://app.huawei.com/isdp to apply for a license file.

4）On the web UI, choose System > License Management. Then load and activate the license file.

(Optional) When the NIP needs to be deployed in off-line mode, split an interface pair and configure a single interface to work

in off-line mode.

1）Choose Network > Interface Pair. On the page that is displayed, select the interface pair to be split and click Delete.

2）Choose Network > Interface. On the page that is displayed, click one of the interfaces in the interface pair to be split and

configure the interface to work in off-line mode.

Choose Policy > Security Policy. You can find that the default security policy is applied to the device and meet the require-

ments of most intrusion prevention scenarios.

Multiple types of intrusion prevention policy templates are preconfigured on the NIP so that you can create a security policy

based on the required template. Upgrade the intrusion prevention and antivirus signature databases to the latest versions by

choosing System > Upgrade Center.

Initial Configuration

The following table lists the default configuration.

Default Configuration

Item

MGMT (management port)

The MGMT port is numbered GE0/0/0 and assigned with IP address 192.168.0.1.

You can use the default account/password (admin/Admin@123) to log in through web

or console.

The default intrusion prevention policy is applied to each interface.

Administrator account/password

Intrusion prevention policy

Description

HUAWEI TECHNOLOGIES CO., LTD.

Huawei Industrial Base Bantian Longgang

Shenzhen 518129

People's Republic of China

e.huawei.com

Appendix

• Open Source Software Notice

You can access the device web UI and click Open Source Software Notice at the bottom of the UI to view details of the

open source software notice.

• Obtaining Product Documents and Technical Support

• Log in to http://support.huawei.com/enterprise, and select a speciﬁc product model and version to ﬁnd its documenta-

tion.

• Log in to http://support.huawei.com/ecommunity and post your questions in the community.

Huawei Enterprise

Technical Support

• Contact your local representative for further information.

The contact information is available at http://e.huawei.com/en/service-hotline.

Ce manuel convient aux modèles suivants

Autres manuels Huawei Matériel réseau

Huawei

Huawei RT-FIC-1GBE Manuel utilisateur

Huawei

Huawei PDU8000 Series Manuel utilisateur

Huawei

Huawei LSBM1SRP Manuel utilisateur

Huawei

Huawei CR52-10GE Manuel utilisateur

Huawei

Huawei LUNA2000-5KW-NHC0 Manuel utilisateur

Huawei

Huawei DRH Manuel du propriétaire

Huawei

Huawei CR52-MPUA Manuel utilisateur

Huawei

Huawei HW-TX-5000 Manuel utilisateur

Huawei

Huawei SUN2000-M3 Manuel utilisateur

Huawei

Huawei RT-FIC-1CPOS Manuel utilisateur

Huawei

Huawei HG8145V5 Manuel utilisateur

Huawei

Huawei PDU8000 Series Manuel utilisateur

Huawei

Huawei FusionServer Pro CH225 V5 Guide de référence rapide

Huawei

Huawei ME906J Instructions d'installation

Huawei

Huawei FusionDC1000A Manuel utilisateur

Huawei

Huawei EN83CTLC Manuel utilisateur

Huawei

Huawei EchoLife HG8245W5-6T Manuel utilisateur

Huawei

Huawei OptiX RTN 910A Manuel utilisateur

Huawei

Huawei CR52K-4xPOS/STM16-SFP Manuel utilisateur

Huawei

Huawei SmartAX MT880a Manuel utilisateur

Huawei

Huawei IDS2000 Dual-Row Aisle Containment Manuel utilisateur

Huawei

Huawei BBU3900 V300 Manuel utilisateur

Huawei

Huawei FusionDC1000A Caractéristiques techniques

Huawei

Huawei RRU Manuel utilisateur

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur