Ruijie RG-WALL 1600-Z3200-S Cloud Managed Next Generation Firewall User Guide

Ruijie RG-WALL 1600-Z3200-S Cloud Managed Next Generation Firewall

Copyright

Copyright © 2023 Ruijie Networks All rights are reserved in this document and this statement. Any reproduction, excerption, backup, modification, transmission, translation or commercial use of this document or any portion of this document, in any form or by any means, without the prior written consent of Ruijie Networks is prohibited.

Trademarks and are owned by Ruijie Networks. All other trademarks or registered trademarks mentioned in this document are owned by their respective owners.

Disclaimer
The products, services, or features you purchase are subject to commercial contracts and terms. Some or all of the products, services or features described in this document may not be within the scope of your purchase or use. Unless otherwise agreed in the contract, Ruijie Networks does not make any express or implied statement or guarantee for the content of this document. Due to product version upgrades or other reasons, the content of this document will be updated from time to time. Ruijie Networks reserves the right to modify the content of the document without any notice or prompt. This manual is for reference only. Ruijie Networks endeavors to ensure content accuracy and will not shoulder any responsibility for losses and damages caused due to content omissions, inaccuracies or errors.

Preface

Intended Audience

This document is intended for:

• Network engineers
• Technical support and servicing engineers
• Network administrators

Technical Support

• Ruijie Networks website: https://www.ruijienetworks.com/
• Technical support website: https://ruijienetworks.com/support
• Case portal: https://caseportal.ruijienetworks.com
• Community: https://community.ruijienetworks.com
• Technical support email: service_rj@ruijienetworks.com
• Skype: service_rj@ruijienetworks.com

Conventions

Conversions

vertical bars.
[ x | y | z ]| Optional alternative keywords are grouped in brackets and separated by vertical bars.

&<1-n>

| The argument before the sign (&) can be input for consecutive 1- n times.

//

| Double slashes at the beginning of a line of code indicate a comment line.

Signs

• The signs used in this document are described as follows:

Warning

• An alert that calls attention to important rules and information that if not understood or followed can result in data loss or equipment damage.

Caution

• An alert that calls attention to essential information that if not understood or followed can result in function failure or performance degradation.

Note

• An alert that contains additional or supplementary information that if not understood or followed will not lead to serious consequences.

Specification
An alert that contains a description of product or version support.

Note
The manual offers configuration information (including product model, description, port type and software interface) for indicative purpose only. In case of any discrepancy or inconsistency between the manual and the actual version, the actual version prevails.

Overview

Introduction
The RG-WALL 1600-Z3200-S firewall (Z3200-S firewall or Z3200-S for short) is a next-generation Z series firewall of Ruijie Networks for all industries. It continuously improves the security detection capabilities of firewalls through cloud-network linkage. The Z3200-S firewall offers a quick intelligent deployment solution, simplifying deployment and reducing technical difficulty. In addition, it allows you to easily configure security policies.

Package Contents

7

| M4 x 8 mm cross recessed countersunk head screw| ****

6

8| Console cable| 1
9| Network cable| 1

10

| Warranty Manual and Hazardous Substance List| ****

1

11| Mounting Bracket Installation Guide| 1

Product Appearance

Front Panel

Components on the Front Panel

green: Data is being read or written.
2| PWSR indicator| Steady green: The power supply is normal. Off: The power supply is cut off or fails.

3

| ****

SYS indicator

| Blinking green: The device is powered on and being initialized.

Steady green: Initialization is complete. Steady red: An alarm is generated.

4

| ****

Reset button

| Restarting the device: Press the button for less than 3 seconds.

Restoring factory settings: Press the button for more than 3 seconds.

When you perform either of the preceding operations, device status information is collected. After the device restarts, you can access the web interface of the firewall, choose System Management > One-Click Collection , and download the information.

5

| ****

Console port

| It is used to connect to the console for device maintenance and diagnosis.

Note: The console port is used only in special scenarios. For details, contact technical support personnel.

6| USB port| Two USB 2.0 ports can be used to connect USB drives.

7

| ****

Electrical port 0 (port 0/MGMT)

| It is used to access the device management page upon first login.
8| Electrical ports 1 to 7| They are used to connect network cables.
No.| Component| Description
---|---|---

9

| ****

Optical port 0F indicator

| Steady green: The port is connected.

Blinking green: The port is receiving or sending data. Off: The optical port is incorrectly connected.

10

| ****

Optical port 8F indicator

| Steady green: The port is connected.

Blinking green: The port is receiving or sending data. Off: The optical port is incorrectly connected.

11

| ****

Optical port 8F

| Gigabit optical port. For details about optical modules that support this port, see Specifications.

12

| ****

Optical port 0F

| 10 Gigabit optical port. For details about optical modules that support this port, see Specifications.

13

| Speed indicators (round) of electrical ports 0 to 7| Steady orange: Gbps port speed Off: 100/10 Mbps port speed

14

| Link/ACT status indicators (square) of electrical ports 0 to 7| Steady green: The port is connected.

Blinking green: The port is receiving or sending data. Off: The port is incorrectly connected.

Rear Panel

Components on the Rear Panel

1

| Installation position of a power cord retention clip| ****

Used to install a power cord retention clip.

2| Power socket| Used to connect an AC power cord.
3| Power switch| Used to power on or power off the device.

4

| Expansion slot for a hard disk| ****

Used to install a hard disk.

5| Grounding terminal| Used to ground the device to ensure electrical safety.

Hard Disk

The Z3200-S firewall can be equipped with the RG-NSEC-HDD-1T module to store logs and report data. Figure 1-3 shows the appearance of the hard disk.

Figure 1-3 RG-NSEC-HDD-1T Appearance

Hard Disk Specifications

4.02 in.)
Type| Hard disk drive
Capacity| 1 TB
Hot Swapping| Not supported

Note

• The hard disk has built-in software that uses third extended filesystem (ext3). It supports plug-and-play.
• The hard disk does not support hot swapping. Before inserting the hard disk, power off the firewall. After inserting the hard disk, restart the firewall.

Caution

• During the transfer and use of the hard disk, avoid vibration and shock.
• The original package of the hard disk must be used for transportation.
• At an altitude above 3000 m, the hard disk may not function properly.
• When operating the hard disk, do not drop it, press the surface, or cover the air vent.

Specifications

Storage

| DDR4 SDRAM: 4 GB
Boot ROM: 8 MB
eMMC: 8 GB
SATA hard disk: 1 TB

Port

| The firewall supports eight electrical ports and two optical ports.

Electrical port: works at a rate of 10 Mbps, 100 Mbps, or 1000 Mbps in auto- negotiation mode and automatically identifies network cables and crossover cables.

Gigabit optical port: supports 1000BASE-SX/LX/ZX mini GBIC and GE-SFP- LX20/LH40-BIDI optical modules.

10 Gigabit optical port: supports XG-SFP-SR-MM850, XG-SFP-LR-SM1310, and XG- SFP-ER-SM1550 optical modules, as well as BIDI optical modules.

MGMT port

Used as GE 0/0 port. It works at a rate of 10 Mbps, 100 Mbps, or 1000 Mbps in auto- negotiation mode and automatically identifies network cables and crossover cables.

Console port: 1
USB port: two USB 2.0 ports
Bypass| Not supported
Expansion Slot for Hard Disk| ****

(Optional) One 1 TB hard disk can be configured.

Expansion Card| Not supported
Hot Swapping| Hard disk: not supported

Port Standards

| Ethernet port: 10Base-T/100Base-TX/1000Base-TX, 1000BASE-SX/LX/ZX, and 10GBASE-SR/LR/ZR
Console port: RS-232
Dimensions

(H x W x D)

| ****

43.6 mm x 440 mm × 200 mm (1.72 in. x 17.32 in. x 7.87 in.; without rubber pads)

Power Supply| 100–240 V AC, 50–60 Hz; 0.65 A
Max. Power Consumption| ****

Less than 25 W

Temperature| 0°C to 45°C (32°F to 113°F)
Operating Humidity| 10% to 90% RH (non-condensing)

Warning

• During the transfer and use of the product, avoid vibration and shock.
• The original package of the product must be used for transportation.
• The device is not suitable for use in locations where children are likely to be present.

Caution
As USB drive models are diversified, the system may not support specific models. You are advised to use a Kingston USB drive that applies the FAT32 file system.

Warning
This product contains a button battery. If the button battery is swallowed, it may cause severe internal burns and possibly death within 2 hours.

• Keep new and used batteries away from children.
• If the battery compartment is not closed securely, stop using the product and keep it away from children.
• Seek medical help immediately if you believe a battery may have been swallowed or retained in any part of your body.

Warning
The device contains a lithium button battery.

• If the battery is damaged, contact technical support personnel to replace it with the same type of battery and properly dispose of the used battery. Do not replace the battery by yourself. Replacing the battery with an incorrect type may cause explosion or void safety protection.
• If the battery is exposed to extremely high temperatures and/or extremely low air pressure, the battery may explode or leak flammable liquids or gases.
• If the battery is thrown into a fire or oven, or mechanically crushed or cut, it may explode.

Preparing for Installation

Safety Precautions

Note

• To avoid personal injury and device damage, carefully rea d the safety precautions before installation.
• The following safety precautions may not cover all possible dangers.

General Safety

• Install the device in a standard 19 inch cabinet.
• Do not place the device in a wet position, and keep the device away from li quid. Keep the chassis clean and dust free.
• Install the device in a position far away from heat sources.
• Ensure that the cabinet and power distribution system are properly grounded.
• Do not place the device in walking areas.
• During installation and maintenance, do not wear loose clothes, ornaments, or any other things that may be hooked by the chassis.
• Keep tools and components away from walking areas.

Transfer Safety

• Do not frequently move devices.
• Cut off all power supplies and unplug all power cor ds before moving or transferring the device.
• The device should be moved by at least two persons. Keep balance and prevent personal injuries when moving the device.

Electrical Safety

Warning

• Any non standard and inaccurate operation can cause an accident su ch as fire or electric shock, thus causing severe damages to human bodies and the device.
• Direct or indirect touch on high voltage and mains supply through a wet object can bring a fatal danger.
• Observe local regulations and specifications when performing electrical operations. The operators must be qualified.
• Carefully check any potential danger in the work area, such as ungrounded power supply, unreliable power grounding, and wet floor.
• Before installing the device, find out the location of the emergency power switch in the room. First cut off the power supply in the case of an accident.
• Make a careful check before you cut off the power supply.
• You are advised to use an uninterrupted power supply (UPS) to avoid interference caused by power failures.

ESD Safety

• Properly ground the device and floor.
• Keep the indoor installation environment clean and dust free.
• Maintain appropriate humidity conditions.
• Before installing various pluggable modules, wear an ESD wrist strap and make sure that it is well grounded.
• Do not directly touch the components and PCB of a board with your hands.
• Use an ESD bag to store a board, or place the board upwards on an ESD workbench.
• Avoid touching the circuit board with items such as clothing. The ESD wrist strap can only prevent damage to the circuit board caused by static electricity on the body. Static electricity on clothing cannot be prevented.

Laser Safety
Many optical modules supported by the device are Class I laser products.

Precautions:

• When an optical module is working, ensure that its port has been connected to an optical fiber or covered by a dust cap to keep out dust and avoid eye burning.
• Do not look directly into an optical port.

Note
Do not approach or look directly into an optical port under any circumstances. This may cause permanent damage to your eyes.

Installation Environment Requirements
Install the RG WALL 1600 series firewall indoors to ensure its normal operation and prolonged service life. The installation site must meet the following requirements:

Ventilation Requirements
Reserve sufficient space in front of the air vents to ensure normal heat dissipation. After the cables are connected, bundle the cables or place them in the cable management bracket to avoid blocking air inlets.

Space Requirements
To have sufficient room for chassis handling and module swapping, you are advised to maintain an indoor pathway of at least 0.8 m (31.50 in.) wide. Do not install the device against the wall. Instead, maintain a minimum space of 0.4 m (15.75 in.) wide around the devi ce for proper ventilation.

Temperature and Humidity Requirements
To ensure the normal operation and prolonged service life of the device, maintain an appropriate temperature and humidity in the equipment room. If the device works in an environment with too high or too low temperature and humidity for a long period, it may be damaged.

• If the relative humidity is too high, insulating materials may have poor insulation or even leak electricity.
• If the relative humidity is too low, insulating gaskets may shrink, which makes fastening screws loose.
• In a dry environment, internal circuits are prone to static electricity.
• A high temperature can accelerate the aging process of insulating materials, greatly reducing the reliability of the device and severely affecting its service life.

Temperature and Humidity Requirements

Temperature

| Long-term operating temperature: 15°C to 30°C (59°F to 86°F)

Short-term operating temperature: 0°C to 45°C (32°F to 113°F)

Humidity

| Long-term operating humidity: 40% to 65% RH (non-condensing)

Short-term operating humidity: 10% to 90% RH (non-condensing)

Note

• The operating temperature and humidity of the device are measured at the point that is 1.5 m (59.06 in.) above the floor and 0.4 m (15.75 in.) before the device when there is no protective plate in front or on the rear of the device.
• Short-term operating: The continuous operating period is no more than 48 hours or the total operating period per year is no more than 15 days.

Cleanliness Requirements
Dust poses a major threat to device operating. In an indoor environment, dust may fall on the device and be attached on the surface due to static electricity, causing poor contact of metallic joints. Such electrostatic adhesion may occur more easily when the relative humidity is low, not only affecting the service life of the device, but also causing communication faults. The following table describes the requirements on the dust content and granularity in the equipment room.

Requirements on Dust

Apart from dust, the salt, acid, and sulfide in the air in the equipment room must meet strict requirements. These harmful substances will accelerate metal corrosion and component aging. Therefore, the equipment room should be properly protected against the intrusion of harmful gases, such as sulfur dioxide, hydrogen sulfide, nitrogen dioxide, and chlorine gas. The following table lists limit values for harmful gases.

Requirements on Gases

Note
Average refers to the average value of harmful gases measured in one week. Maximum refers to the upper limit of harmful gases measured in one week for up to 30 minutes every day

Grounding Requirements
A proper grounding system is the basis for stable and reliable running and is indispensable for protection against lightning and interf erence. Carefully check the grounding conditions at the installation site according to the grounding specifications, and complete grounding properly based on the actual situation.

Safe Grounding
Ensure that the cabinet and power distribution device are sec urely grounded when the device uses an AC power supply. Otherwise, electric shock may occur when the insulation resistance between the power supply inside the device and the chassis becomes small.

Caution
The building should provide protective grounding to ensure that the device can be properly grounded.

Lightning Grounding
The lightning protection system of facilities is standalone, and is composed of a lightning rod, a down conductor, and a connector connected to the grounding system. The grounding sys tem is typically used as the reference point for power supply and for safe grounding of the cabinet. Lightning grounding is required only by facilities and is not required by the device.

EMC Grounding
Grounding for electromagnetic compatibility (EMC) includes shielded grounding, filter grounding, noise and interference suppression, and level reference. The grounding resistance should be smaller than 1 ohm. The grounding terminal on the cabinet should be  properly grounded before the device running.

Anti interfer ence Requirements

• Take interference prevention measures for the power supply system.
• Keep the firewall away from the lightning protection and grounding system of power devices.
• Keep the firewall away from high frequency current devices such as a high power radio transmitting station and radar launcher.
• Take electromagnetic shielding measures when necessary.

Lightning Protection Requirements

• The device provides lightning protection. However, as an electrical device, it may still be damaged by strong lightnin g strikes. Take the followi ng lightning protection measure : Ensure that the grounding cable of the cabinet is in good contact with the ground.
• Ensure that the neutral point of the AC power socket is in good contact with the ground.
• You are advised to insta ll a power lightning arrester in front of the power input end to enhance lightning protection for the power supply.

Installation Site Requirements
Regardless of whether the device is installed in a cabinet or on a workbench, observe the following conditions:

• Maintain a proper clearance around the air intakes and outlets for heat dissipation.
• The device is equipped with fans to draw in cold air and dissipate heat through the side of the chassis. Maintain a minimum clearance of 15 cm (5.91 in.) around the ven tilation openings for heat dissipation. You are advised to install the device in a standard 19 inch cabinet. Or, place the device on a clean workbench. In hot areas, air conditioning is recommended.
• The installation site has good cooling and ventilation.
• The installation site is sturdy enough to support the weight of the device and its accessories.
• The installation site is properly grounded.

Tools

connector crimping plier
Relevant Devices| PC, display, and keyboard

Note
The RG WALL 1600 series firewall is delivered without a tool kit. You need to prepare a tool kit.

Unpacking the Device
Before installing the Z3200 S firewall, open the accessories box delivered with the product and check whether the accessories are complete. The accessories of the product depend on the product model. For details, see the package contents.

Installing the Device

Installation Procedure

• Install the device according to the following procedure to prevent damage.

Preparing for Installation
Prepare for installation according to 2 Preparing for Installation and check whether the following conditions are met:

• The installation site provides sufficient space for heat dissipation.
• The installation site meets the temperature and humidity requirements of the device.
• The power supply is available at the installation site and its currently meets the requirement.
• Network cables have been deployed at the installation site.
• The selected power supply meets the requirement on the system power.
• The emergency power switch in the room is located so that the power supply can be cut off in the case of an accident.

(Optional) Installing t he Hard Disk

Application Scenario
The RG NSEC HDD 1T hard disk can be configured for the device to store logs and report data.

Precautions
Pay attention to the following:

• Install the hard disk when the device is powered off. Otherwise, the hard disk will be damaged.
• Do not cover the hole on top of the hard disk.
• Do not press down on the hard disk.
• Do not drop, shake, or vibrate the hard disk. When handling the hard disk, hold it by its sides.
• Do not touch PCB components with hands or tools.

Procedure
(1) Loosen the two fixing screws of the hard disk on the rear of the device when the device is powered off. Figure 3 1 shows the position of t he fixing screws of the hard disk.

Figure 3-1 Position of the Fixing Screws of the Hard Disk

1. Remove the hard disk panel.
2. Insert the hard disk.
3. Fasten the fixing screws.

Installing the Device at the Specific Position
The Z3200-S firewall can be installed in a stan dard cabinet. If no cabinet is available, the device can be installed on a workbench.

Installing in a Cabinet

Application Scenario
When a standard cabinet is configured, the fixed accessories delivered with the device can be used. The Z3200 S firewall is designed based on a standard cabinet. You can use the fixed accessories as required.

Prerequisites
Before installation, check the following items:

• The cabinet has been properly secured.
• The device installation position in the cabinet has been planned.

Procedure

1. Install the mounting brackets on both sides of the device according to the Mounting Bracket Installation Guide in the package contents
2. Install the cage nuts on both sides of the device.
3. Lift the device by both sides and push it horizontally into the cabinet.
4. Secure the left and right mounting brackets of the device to the front of the cabinet to fix the device in the cabinet.

Follow up Procedure
After installation, check the following items:

• The device is securely installed in the cabinet.
• About 1 U space is reserved above and below the device to facilitate heat dissipation.
• No objects around the device hinder heat dissipation.

Installing on a Workbench

Application Scenario
In many cases, a standard cabinet is unavailable. In such cases, you can simply place the device on a clean workbench.

Prerequisites
Before installation, check the following items:

• The workbench has been properly grounded.
• The workbench is clean, sturdy, and stable.

Procedure

1. Paste the four rubber pads delivered with the device on the holes at the four corners of the bottom of the device.
2. Place the device on the workbench.

Follow up Procedure

After installation, check the following items:

• The device is securely placed on the workbench.
• A 10 cm space has been reserved around the device for heat dissipation, and no objects that hinder heat dissipation exist.
• No heavy objects are placed on top of the device.

Connecting the Grounding Cable

Application Scenario
You must correctly connect the grounding cable to ensure lightning protection and anti-interference of the firewall.

Procedure

1. Remove the screw from the grounding terminal of the device. Icon 1 in Figure 3 2 shows the grounding terminal of the firewall.
   Figure 3-2 Grounding Terminal of the Z3200 S Firewall

2. Align the M4 end of the grounding cable with the screw hole of the grounding terminal, and fasten the screw.

3. Connect the M6 end of the grounding cable to the grounding terminal of the cabinet or workbench.

Follow up Procedure
After connecting the grounding cable, check the following items:

• The grounding cable is securely connected to the grounding term inal.
• Use the ohm mode of a multimeter to measure the resistance between the grounding terminal and the grounding point. The grounding resistance is less than 1 ohm.

Connecting the Power Cord

Application Scenario
A power cord is used to connect a power module and an external power supply. If dual power supplies are configured, the power cords need to be connected for both power modules.

Prerequisites

• The power supply meets power requirements of the Z3200 S firewall. AC power supported by the RG WALL 1600 series firewall: 100 240 V AC/50 60 Hz. The power cord of the firewall has three cores. It is recommended that a single phase three core power socket with a neutral point connector or a multi function microcomputer power socket be used. The neutral point of the power supply has been securely grounded in the building. Typically, the neutral point of the power supply system of a building has been buried during construction and cabling. Ensure that the power
  supply of the building has been properly grounded. The grounding resistance is less than 1 ohm.

• The device has been properly grounded.

• The power switch is off.

Procedure

Warning
Use the delivered power cords. Otherwise, security accidents may occur.

1. Plug one end of a power cord into the power socket on the rear panel of the firewall chassis.
2. Verify that the power cord retention clip is properly installed and secure the power cord with the clip.
3. Connect the other end of the power cable to the AC power socket.

Verifying Installation
After installing the device, check the following items before powering on the device:

• If the device is installed in a cabinet, check whether the mounting angle irons of the cabinet and device are secure. If the device is installed on a workbench, check whether there is sufficient space for heat dissipation and whether the workbench is secure.
• Check whether the connected power supply meets the power requirements of the device.
• Check whether the cabinet is properly grounded.
• Check whether the device is correctly connected to other devices such as configuration terminals.
• Check whether the power cord is long enough to avoid cord tension and reduced service life.

Commissioning

Setting Up the Configuration Environment

Prerequisites
The Z3200-S firewall provides the default configuration, as described in Table 4-1.

Factory Settings of the Device

Account and Password

| Default account: admin

Default password: firewall

Management Port| Port 0/MGMT

Procedure
Use a network cable to connect port 0/MGMT on the firewall to the management PC.

Figure 4-1 Connecting the Network Cable

By default, the DHCP server function is enabled on port 0/MGMT. In this case, the local NIC of the management PC can automatically obtain an IP address from the firewall to communicate with the firewall. Therefore, you do not need to manually configure the IP address.

Powering on and Starting the Device

Checklist Before Power On

• The device is properly grounded. (The three core power supply and grounding connector are properly grounded.)
• The power cord is properly connected.
• The power voltage meets the device requirement.
• The Ethernet cable is properly connected.

Powering on and Starting the Device

1. Turn on the switch of the external power supply.
2. Turn on the power switch of the firewall.

Checklist After Power On
Check the status of the PWR indicator on the device.

Table 4-2 PWR Indicator Status

Configuring the Product
Open a browser on the management PC, enter https://192.168.1.200 in the search box, and press Enter. Then, log in to the web interface of the firewall to configure services.

Caution
By default, the prefix https must be used. If http://192.168.1.200 is used, you may fail to log in. For details about device configuration, see the User Manual of the required version.

FAQs

AC Power Module Does Not Work

Symptom
All indicators on the front panel are off, and the fan does not rotate.

Solution

1. Remove the power cord from the power socket
2. Check whether cables in the cabinet or on the workbench are correctly connected and whether the power cord is securely connected to the power socket.
3. Check whether the power cord is securely connected to the power supply module.

Serial Console Has No Output

Symptom
After the system is started, the serial console does not display any information.

Solution

1. Check whether the serial cable is properly connected and whether the connected serial port is consistent with that configured on HyperTerminal.
2. Check whether the baud rate configured for the serial port on HyperTerminal is correct.
3. If there is still no output on the serial port, contact Ruijie technical support.

Optical Port Fails

Symptom
After an optical module is inserted into an optical port and the optical fiber is properly connected, the indicator of the optical port is still off.

Solution
Perform the following steps:

1. Check whether the receive end and transmit end of the fiber connection are reversed. In normal cases, the transmit end on a local optical port must be connected to the receive end on the peer port. You can change the connection sequenc e of the two fibers on the optical modules.
2. Check whether the wavelengths of the optical modules on both ends are the same. For example, an optical module with a wavelength of 1310 nm cannot be connected to an optical module of 1550 nm.
3. Check whether the distance between the two ends exceeds the maximum length marked on the optical modules.
4. Check whether the fiber type meets the requirement.
5. Optical ports of some devices can work at different rates. In this case, you need to check whether the rates of the two ends are the same.

References

• csm
• csm
• Ruijie Community
• Ruijie Community
• Support Center - Ruijie Reyee
• Ruijie Networks | Network Devices and Solutions Provider

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Download this manual  >>