Resumen del contenido incluido en la página 1
FortiGate-5001A
Security System Guide
FortiGate-5001A-DW
5001A-SW
FortiGate-5001A-SW
A detailed guide to the FortiGate-5001A-DW and FortiGate-5001A-SW Security Systems. This FortiGate-5001A
Security System Guide describes FortiGate-5001A hardware features, how to install a FortiGate-5001A board in a
FortiGate-5000 series chassis, and how to configure the FortiGate-5001A security system for your network.
The most recent versions of this and all FortiGate-5000 series documents are available fro
Resumen del contenido incluido en la página 2
Warnings and cautions Only trained and qualified personnel should be allowed to install or maintain FortiGate-5000 series equipment. Read and comply with all warnings, cautions and notices in this document. CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According ! to the Instructions. Caution: You should be aware of the following cautions and warnings before installing FortiGate-5000 series ! hardware • Turning off all power switches may no
Resumen del contenido incluido en la página 3
Contents Contents Warnings and cautions ..................................................................................... 2 FortiGate-5001A security system ..................................... 5 Front panel LEDs and connectors ................................................................... 6 LEDs ............................................................................................................. 7 Connectors......................................................................
Resumen del contenido incluido en la página 4
Contents Configuring Transparent mode...................................................................... 31 Using the web-based manager to configure Transparent mode................. 31 Using the CLI to configure Transparent mode ............................................ 32 Upgrading FortiGate-5001A firmware............................................................ 33 FortiGate-5001A base backplane data communication............................... 34 FortiGate-5001A fabric backplane data
Resumen del contenido incluido en la página 5
FortiGate-5001A security system FortiGate-5001A security system The FortiGate-5001A security system is a high-performance Advanced Telecommunications Computing Architecture (ACTA) compliant FortiGate security system that can be installed in any ACTA chassis including the FortiGate-5140, FortiGate-5050, or FortiGate-5020 chassis. Two FortiGate-5001A models are available: • The FortiGate-5001A-DW (double-width) board includes a double-width Advanced Mezzanine Card (AMC) opening. You can inst
Resumen del contenido incluido en la página 6
Front panel LEDs and connectors FortiGate-5001A security system Figure 1: FortiGate-5001A-DW front panel RJ-45 Fabric and Base Console network activity Double-width AMC LEDs opening USB Retention Retention Screw Screw IPM ACC Extraction port1 and port2 LED OOS Extraction Lever 10/100/1000 (board Power Lever Copper Interfaces position) Status LEDs Figure 2: FortiGate-5001A-SW front panel RJ-45 Fabric and Base Console network activity Single-width AMC LEDs opening USB 5001A-SW Retention
Resumen del contenido incluido en la página 7
FortiGate-5001A security system Front panel LEDs and connectors LEDs Table 1 lists and describes the FortiGate-5001A LEDs. Table 1: FortiGate-5001A LEDs LED State Description 1, 2 Green The correct cable is connected to the interface and the connected equipment has power. (Left LED) Flashing Network activity at the interface. Green Off No link is established. 1, 2 Green Connection at 1 Gbps. (Right LED) Amber Connection at 100 Mbps. Off Connection at 10 Mbps. Base CH0 Green Base backplane inte
Resumen del contenido incluido en la página 8
Base backplane communication FortiGate-5001A security system Connectors Table 2 lists and describes the FortiGate-5001A connectors. Table 2: FortiGate-5001A connectors Connector Type Speed Protocol Description 1, 2 RJ-45 10/100/1000 Ethernet Copper 1-gigabit connection to Base-T 10/100/1000Base-T copper networks. CONSOLE RJ-45 9600 bps RS-232 Serial connection to the command line 8/N/1 serial interface. USB USB FortiUSB key firmware updates and configuration backup. Base backplane communicati
Resumen del contenido incluido en la página 9
FortiGate-5001A security system AMC modules FortiGate-RTM-XB2 The FortiGate-RTM-XB2 module provides two 10-gigabit fabric backplane interfaces and NP2 processor acceleration for FortiGate-5001A fabric interfaces. For 10-gigabit fabric backplane communications, each FortiGate-5001A board requires one FortiGate-RTM-XB2 module. The FortiGate-RTM-XB2 module is an ATCA rear transition module (RTM) that installs into an RTM slot at the back of a FortiGate-5140 and FortiGate-5050 chassis. To suppo
Resumen del contenido incluido en la página 10
AMC modules FortiGate-5001A security system • The FortiGate-ASM-FB4, provides 4 NP2 accelerated SFP 1-gigabit interfaces. • The FortiGate-ASM-S08, provides adds a removable hard disk that you can use to store log files and content archives. Figure 5: FortiGate-ASM-FB4 HS OOS PWR OT 12 3 4 LINK ACT LINK ACT LINK ACT LINK ACT ASM-FB4 Note: You can operate a FortiGate-5001A board with both a FortiGate-RTM-XB2 module and a supported FortiGate AMC module installed at the same time. FortiGate-5001
Resumen del contenido incluido en la página 11
Hardware installation Hardware installation Before use, the FortiGate-5001A board must be correctly inserted into an Advanced Telecommunications Computing Architecture (ACTA) chassis such as the FortiGate-5140, FortiGate-5050, or FortiGate-5020 chassis. Before inserting the board into a chassis you should make sure the SW-11 switch is set correctly. In the available Advanced Mezzanine Card (AMC) double-width module (ADM) opening on the FortiGate-5001A-DW front panel you can install a suppo
Resumen del contenido incluido en la página 12
Changing FortiGate-5001A SW11 switch settings Hardware installation Changing FortiGate-5001A SW11 switch settings The SW11 switch on the FortiGate-5001A board is factory set by Fortinet to detect a shelf manager (Figure 6). This is the correct setting if you are installing the FortiGate-5001A board in a chassis that contains an operating shelf manager (such as the FortiGate-5140 or FortiGate-5050 chassis). Figure 6: FortiGate-5140 and 5050 setting for SW11 (factory default shelf manager mode
Resumen del contenido incluido en la página 13
Hardware installation Changing FortiGate-5001A SW11 switch settings To change or verify the SW11 switch setting To complete this procedure, you need: • A FortiGate-5001A board • A tool for changing the SW11 switch setting (optional) • An electrostatic discharge (ESD) preventive wrist strap with connection cord Caution: FortiGate-5001A boards must be protected from static discharge and physical shock. Only handle or work with FortiGate-5001A boards at a static-free workstation. ! Always wear a
Resumen del contenido incluido en la página 14
FortiGate-5001A mounting components Hardware installation FortiGate-5001A mounting components To install a FortiGate-5001A board you slide the board into an open slot in the front of an ATCA chassis and then use the mounting components to lock the board into place in the slot. When locked into place and positioned correctly the board front panel is flush with the chassis front panel. The board is also connected to the chassis backplane. Note: FortiGate-5001A boards are horizontal when inser
Resumen del contenido incluido en la página 15
Hardware installation Inserting a FortiGate-5001A board Figure 10: FortiGate-5001A-DW left (top) mounting components Alignment Pin Retention AMC Slot Lock Screw Filler Handle Inserting a FortiGate-5001A board The FortiGate-5001A board must be fully installed in a chassis slot, with the handles closed and locked and retention screws fully tightened for the FortiGate-5001A board to receive power and operate normally. If the FortiGate-5001A board is not receiving power, the IPM LED glows solid b
Resumen del contenido incluido en la página 16
Inserting a FortiGate-5001A board Hardware installation 1 Attach the ESD wrist strap to your wrist and to an available ESD socket or wrist strap terminal. 2 If required, remove the protective metal frame that the FortiGate-5001A board has been shipped in. 3 Insert the FortiGate-5001A board into the empty slot in the chassis. 4 Unlock the handles by squeezing the handle locks. Unlock Handle 5 Open the handles to their fully open positions. Caution: To avoid damaging the lock, make sure you sque
Resumen del contenido incluido en la página 17
Hardware installation Inserting a FortiGate-5001A board 9 Turn both handles to their fully-closed positions. The handles should hook into the sides of the chassis slot. Closing the handles draws the FortiGate-5001A board into place in the chassis slot and into full contact with the chassis backplane. The FortiGate-5001A front panel should be in contact with the chassis front panel. For the FortiGate-5001A-DW, the right (bottom) handle locks into place. For the FortiGate-5001A-SW, both handle
Resumen del contenido incluido en la página 18
Removing a FortiGate-5001A board Hardware installation 10 Once the board is inserted correctly, fully tighten the retention screws to lock the FortiGate-5001A board into position in the chassis slot. Retention Screw Tighten Removing a FortiGate-5001A board The following procedure describes how to correctly use the FortiGate-5001A mounting components described in “FortiGate-5001A mounting components” on page 14 to remove a FortiGate-5001A board from an ATCA chassis slot. FortiGate-5001A boards
Resumen del contenido incluido en la página 19
Hardware installation Removing a FortiGate-5001A board 3 Fully loosen the retention screws on the FortiGate-5001A front panel. Retention Screw Loosen 4 Unlock the handles by squeezing the handle locks. 5 Open the handles to their fully open positions. Caution: To avoid damaging the lock, make sure you squeeze the handles fully to unlock ! them before opening. The handles should pop easily out of the board front panel. You need to open the handles with moderate pressure to eject the board from t
Resumen del contenido incluido en la página 20
Resetting a FortiGate-5001A board Hardware installation Resetting a FortiGate-5001A board You must eject the FortiGate-5001A board from the chassis slot to cycle the power and reset the board. See “Removing a FortiGate-5001A board” on page 18 for information about how to eject a FortiGate-5001A board from a chassis. Installing and removing AMC modules This section describes installing a FortiGate AMC Double width Module (ADM) in the FortiGate-5001A-DW front panel AMC double-width opening or a
