Installing expansion cards on the USG2000&5000

36

Pay attention to the following items in the installation of the USG2000/5000 expansion card (interface card):
-Before installing the interface card, power off the device.
-The MIC, DMIC, FIC, and DFIC interface cards of the USG do not support hot swapping. Hot swapping may cause board damage.
-The USB-3G interface card of the USG supports hot swapping, but the Subscriber Identity Module (SIM) card and User Service Identity Module (USIM) card do not support hot swapping. Therefore, insert the SIM or USIM card into the 3G data card before installing the USB-3G interface card.
-The interface card must be horizontally oriented during installation.
-Make sure that you have worn an ESD wrist strap and the strap is well grounded before you hold the interface card. Otherwise, the interface card may be damaged.
-After system startup, do not insert and remove the USB interface card repeatedly to prevent problems that the device may fail to identify.
-If you need to insert two USB interface cards, use a USB extension cable.
Perform as follows to install the MIC/FIC/DMIC/DFIC:
1. Ensure that the power module is set to OFF to power off the device.
2. Loosen screws on the filler panel of the front panel and remove the filler panel. For the DMIC/DFIC interface card, you need also to remove the filler panel in the upper slot.
3. Align the interface card with the guide rails of the slot and tighten the screws.
Perform as follows to install the 3G interface card:
1. Install the SIM card on the 3G interface card.
2. Refer to the procedure for installing the MIC/FIC/DMIC/DFIC.
Perform as follows to install the USB interface card:
1. Insert the USB interface card into the USB port on the USG.
Perform as follows to install the SD data card:
1. Insert the SD data card into the flash card port of the USG.

Other related questions:
Whether the USG2000&5000 support optional expansion cards
The USG2000/5000 supports multiple types of expansion interface cards, which provide powerful interface expansion capabilities in addition to abundant fixed interfaces. The support of expansion interface cards on models of various types are as follows: -The USG2110-X does not support optional expansion cards. -The USG2130 and USG2130W provide a MIC/DMIC slot, and the USG2160 and USG2160W provide two MIC slots or one DMIC slot. MIC and DMIC interface cards, excluding Wi-Fi interface cards, are optional. FIC and DFIC interface cards are not supported. -The USG2210, USG2220, USG2230, USG2250, and USG2260 provide four MIC slots and two FIC slots. The USG2210E, USG2220E, USG2230E, and USG2250E provide four MIC slots and one FIC slot. MIC/DMIC and FIC/DFIC interface cards are optional. -The USG5120 provides four MIC and 4 FIC slots, and MIC/DMIC and FIC/DFIC interface cards are optional. -The USG5150/5160 provides four MIC and six FIC slots, and MIC/DMIC and FIC/DFIC interface cards are optional. -The USG5520S/5530S supports two FIC interface card expansion slots. These two FIC slots can be combined into one DFIC interface card expansion slot. -The USG5530 supports six FIC interface card expansion slots and two MIC interface card expansion slots. The six FIC interface card expansion slots can be combined into four DFIC interface card expansion slots, and two MIC interface card expansion slots can be combined into one DMIC interface card expansion slot. -The USG5550/5560 supports five FIC interface card expansion slots and two MIC interface card expansion slots. The five FIC interface card expansion slots can be combined into three DFIC interface card expansion slots, and two MIC interface card expansion slots can be combined into one DMIC interface card expansion slot.

Installing expansion cards on the USG6000
The USG6000 provides the WSIC expansion card that can be installed in the WSIC slot. The slots of the 3U USG6650/6660/6670/6680 are divided into two types: one for Wide Service Interface Cards (WSIC) and the other for Extended Service Interface Cards (XSIC). An XSIC is twice as high as a WSIC. An XSIC slot can also hold a WSIC card, but only in the lower part, and in this case, no other card can be installed in the upper part. Pay attention to the following items in the installation of the USG6000 expansion card: -The expansion card does not support hot swapping. Therefore, power off the USG before installing the expansion card. -Make sure that you have worn an ESD wrist strap and the strap is well grounded before you hold the expansion card. Otherwise, the expansion card may be damaged. The installation procedure is as follows: 1. Ensure that the power module is set to OFF to power off the device. 2. Determine the slot in which an expansion card is to be installed and note the slot number. For details, see the slot numbers on the front panel of the device. 3. Loosen screws on the filler panel of a WSIC slot and remove the filler panel. 4. Open the ejector lever on an expansion card and push the expansion card along the guide rails of the slot until the ejector lever touches the front panel. 5. Push the ejector lever inward until the expansion card is well seated into the slot, and tighten screws on both sides of the expansion card.

ACLs for the USG2000&5000
An access control list (ACL) is a general tool for traffic matching. It can filter and match traffic in terms of MAC addresses, IP addresses, protocols, and time ranges. ACL Rule and Matching Order In common cases, any security function can reference multiple ACLs. Therefore, overlaps and conflicts may occur among the traffic defined by these ACLs. Additionally, to effectively use the ACL, an ACL contains multiple ACL rules, each of which can specify certain traffic, and define the permit or deny action accordingly. As a result, the traffic defined by these rules may overlap and actions for overlapped traffic may conflict with each other. Therefore, it is necessary to specify the matching orders of ACLs and of multiple rules in an ACL. The matching orders on the USG are as follows: ? ACLs applied to the same function in the same direction are matched according to the configuration time. The earlier the ACL is created; the earlier it is matched. Once the matching succeeds, no subsequent matching is performed. ? ACL rules in the same ACL are matched according to the specified matching type. Two matching types are available: ? Automatic order: indicates automatic matching. It is also called minimal matching or in-depth matching. Actions are performed according to the rule with the minimal matching range. For example, rule 1 allows packets at 192.168.1.0/24 through; rule 2 denies packets at 192.168.1.100. In this case, the final action for packets at 192.168.1.100 is deny. This is because the IP address range specified by rule 2 is smaller and more accurate. ? Configuration order: indicates that ACL rules are matched based on the rule ID. It is the default matching mode. The smaller the rule ID is; the earlier the matching occurs. Once the matching succeeds, no subsequent matching is performed. Step and Dynamic Insertion of an ACL Rule After an ACL rule is created, its ID cannot be changed. Therefore, it is difficult for you to manually adjust matching orders of rules in ACLs in configuration order mode. You can only delete existing rules and create new ones. To address this issue, the step function is added. During the creation of an ACL rule, if no rule ID is specified, the system automatically assigns a rule ID. Rule IDs increase based on the step. For example, the step is 5. If you create a rule but do not assign a rule ID, the system automatically assigns the minimal ID (which is larger than that of the previous rule and its number takes 5 as the base and increases by 5) to the rule. Suppose that you do not specify the rule ID for rule 1, the system assigns 5 to the rule. When creating rule 2, you assign 12 to it. Then you do not specify the rule ID for rule 3. In this case, the system assigns 15 (larger than 12) to it. Therefore, the IDs of three rules in the ACL are 5, 12, and 15 respectively. After the step mechanism is used, rule IDs are reserved for rules in an ACL for the further use. In this example, to ensure that rule 4 takes effect between rule 2 and rule 3, you can specify 13 as the ID for the rule during the creation. Through the dynamic insertion of new rules between two rules, you can control the valid sequences of rules in the ACL.

Configuring ACLs for the USG2000&5000
The USG2000&5000 series supports configuring ACLs using the CLI. acl [ number ] acl-number [ vpn-instance vpn-instance-name ] [ match-order { config | auto } ] undo acl { all | [ number ] acl-number } The default matching order is config. An access control list contains a series of rules with permit or deny statements. You need to first create an access control list and then configure its rules. Example # Create an ACL numbered 2000. system-view [sysname] acl number 2000 [sysname-acl-basic-2000]

Configuring SSH on the USG2000&5000
Configure SSH on the USG2000&5000 as follows: Configuration roadmap: USG_A serves as the client, and USG_B as the SSH server. 1. Create an SSH user on USG_B. 2. Generate a local key pair on USG_B. 3. Enable the STelnet/SFTP service on USG_B. 4. Log in to USG_B through USG_A on the client.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top