Resumen del contenido incluido en la página 1
Security System Guide
FortiGate-5001FA2-LENC
A detailed guide to the FortiGate-5001FA2-LENC Security System. This FortiGate-5001FA2-LENC Security System
Guide describes FortiGate-5001FA2-LENC hardware features, how to install the FortiGate-5001FA2-LENC board in
a FortiGate-5000 series chassis, how to configure the FortiGate-5001FA2-LENC security system for your network,
and contains troubleshooting information to help you diagnose and fix problems.
The most recent versions of this and all Fo
Resumen del contenido incluido en la página 2
Warnings and cautions Only trained and qualified personnel should be allowed to install or maintain FortiGate-5000 series equipment. Read and comply with all warnings, cautions and notices in this document. CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According ! to the Instructions. Caution: You should be aware of the following cautions and warnings before installing FortiGate-5000 series ! hardware • Turning off all power switches may no
Resumen del contenido incluido en la página 3
Contents Contents Warnings and cautions ..................................................................................... 2 FortiGate-5001FA2-LENC security system...................... 5 Front panel LEDs and connectors ................................................................... 6 LEDs ............................................................................................................. 6 Connectors...............................................................................
Resumen del contenido incluido en la página 4
Contents Powering off the FortiGate-5001FA2-LENC board ....................................... 32 For more information ...................................................... 33 Fortinet documentation .................................................................................. 33 Fortinet Tools and Documentation CD........................................................ 33 Fortinet Knowledge Center ........................................................................ 33 Comments on Forti
Resumen del contenido incluido en la página 5
FortiGate-5001FA2-LENC security system FortiGate-5001FA2-LENC security system The FortiGate-5001FA2-LENC security system is a high-performance FortiGate security system with a total of 8 front panel gigabit ethernet interfaces and two base backplane interfaces. Use the front panel interfaces for connections to your networks and the backplane interfaces for communication between FortiGate-5000 series boards over the FortiGate-5000 chassis backplane. You can also configure two or more Forti
Resumen del contenido incluido en la página 6
Front panel LEDs and connectors FortiGate-5001FA2-LENC security system • Mounting hardware • LED status indicators The FortiGate-5001FA2-LENC board comes supplied with four optical or four copper SFP transceivers. Before you can connect FortiGate-5001FA2-LENC interfaces 1 to 4, you must insert the SFP transceivers into the FortiGate-5001FA2-LENC front panel cage slots numbered 1 to 4. The FortiGate-5001FA2-LENC board ships with two RAM DIMMs installed on the FortiGate-5001FA2-LENC circuit bo
Resumen del contenido incluido en la página 7
FortiGate-5001FA2-LENC security system Accelerated packet forwarding and policy enforcement Table 1: FortiGate-5001FA2-LENC board LEDs (Continued) LED State Description 5, 6, Link Green The correct cable is inserted into this interface and the connected equipment has power. 7, 8 LED Flashing Network activity at this interface. Speed Green The interface is connected at 1000 Mbps. LED Amber The interface is connected at 100 Mbps. Unlit The interface is connected at 10 Mbps. Connectors Table 2 li
Resumen del contenido incluido en la página 8
Base backplane gigabit communication FortiGate-5001FA2-LENC security system • Session Oriented Traffic with long session lifetime, such as FTP sessions. Packet size does not affect performance for traffic with long session lifetime. For long sessions, processing that would otherwise be handled by the FortiGate-5001FA2-LENC CPUs is off-loaded to the acceleration module. • Firewall and intrusion protection (IPS), when there is a reasonable percentage of P2P packets. • Firewall, intrusion protec
Resumen del contenido incluido en la página 9
Hardware installation RAM DIMMs Hardware installation Before use, the FortiGate-5001FA2-LENC board must be correctly inserted into an Advanced Telecommunications Computing Architecture (ACTA) chassis such as the FortiGate-5140, FortiGate-5050, or FortiGate-5020 chassis. Before inserting the board into a chassis you should make sure RAM DIMMS are installed and FortiGate-5001FA2-LENC jumpers are set. SFP transceivers must also be installed for interfaces 1 to 4 before these interfaces can be
Resumen del contenido incluido en la página 10
Installing SFP transceivers Hardware installation Figure 2: Location of FortiGate-5001FA2-LENC RAM DIMM slots RAM DIMM slots Front Faceplate 3 Insert each RAM DIMM perpendicular to the RAM DIMM slots. Push the DIMM firmly into place using the minimum amount of force required. When the DIMM is properly seated, the socket guide posts click into place. Do not use excessive force when installing a DIMM. The RAM slots allow only one alignment of each RAM DIM. If you cannot lock the locking levers
Resumen del contenido incluido en la página 11
Hardware installation Changing FortiGate-5001FA2-LENC jumper settings You can install the following types of SFP transceivers for connectors 1, 2, 3, and 4: • optical SFP transceivers • SFP 1000Base-LX, SM module • SFP 1000Base-SX, MM module (multimode) • copper SFP transceivers • SFP 1000Base-T, SERDES version only (SGMII version not supported) To install SFP transceivers To complete this procedure, you need: • A FortiGate-5001FA2-LENC board • Four SFP transceivers • An electrostatic discharge
Resumen del contenido incluido en la página 12
Changing FortiGate-5001FA2-LENC jumper settings Hardware installation Normally, because the jumpers are factory set, you do not have to change them. However, if you are moving a FortiGate-5001FA2-LENC from a FortiGate-5140 or FortiGate-5050 to a FortiGate-5020 or the reverse, you need to move the JP3 jumper. Also, if a new FortiGate-5001FA2-LENC board does not function properly, you should check the JP3 jumper settings. Table 3: FortiGate-5001FA2-LENC JP3 jumper settings for each chassis Ch
Resumen del contenido incluido en la página 13
Hardware installation Inserting a FortiGate-5001FA2-LENC board into a chassis To change or verify the JP3 jumper setting To complete this procedure, you need: • A FortiGate-5001FA2-LENC board • A tool for moving jumpers (optional) • An electrostatic discharge (ESD) preventive wrist strap with connection cord Caution: FortiGate-5001FA2-LENC boards must be protected from static discharge and physical shock. Only handle or work with FortiGate-5001FA2-LENC boards at a static-free ! workstation. Al
Resumen del contenido incluido en la página 14
Inserting a FortiGate-5001FA2-LENC board into a chassis Hardware installation Figure 4: FortiGate-5001FA2-LENC mounting components Closed Alignment Pin Alignment Pin Retention Retention Lock Screw Screw Handle Handle Lock Open Left Handle Power Switch Lock Switch Contact Before inserting the FortiGate-5001FA2-LENC board in a chassis Before installing the FortiGate-5001FA2-LENC board in a chassis you should verify that the RAM DIMMs are installed and the JP3 jumper is set correctly. Yo
Resumen del contenido incluido en la página 15
Hardware installation Inserting a FortiGate-5001FA2-LENC board into a chassis • A FortiGate-5000 series chassis with an empty slot • An electrostatic discharge (ESD) preventive wrist strap with connection cord Caution: FortiGate-5001FA2-LENC boards must be protected from static discharge and physical shock. Only handle or work with FortiGate-5001FA2-LENC boards at a static-free ! workstation. Always wear a grounded electrostatic discharge (ESD) preventive wrist strap when handling FortiGate-5
Resumen del contenido incluido en la página 16
Inserting a FortiGate-5001FA2-LENC board into a chassis Hardware installation 7 Turn both handles to their fully-closed positions. The handles should hook into the sides of the chassis slot. Closing the handles draws the FortiGate-5001FA2-LENC board into place in the chassis slot and into contact with the chassis backplane. The FortiGate-5001FA2-LENC front panel should be in contact with the chassis front panel. When the handles are fully- closed they lock into place. Alignment Pin Alignment
Resumen del contenido incluido en la página 17
Hardware installation Removing a FortiGate-5001FA2-LENC board from a chassis Removing a FortiGate-5001FA2-LENC board from a chassis The following procedure describes how to correctly use the FortiGate-5001FA2-LENC mounting components shown in Figure 4 to remove a FortiGate-5001FA2-LENC board from a FortiGate-5000 series chassis slot. To remove a FortiGate-5001FA2-LENC board from a FortiGate-5000 series chassis FortiGate-5001FA2-LENC boards are hot swappable. The procedure for removing the Fo
Resumen del contenido incluido en la página 18
Troubleshooting Hardware installation 5 Open the left and right handles to their fully open positions. Opening the handles slides the board a short distance out of the slot, disconnecting the board from the chassis backplane. The IPM LED turns blue. All other LEDs turn off. Alignment Pin Handle Handle Fully Open Open 6 Pull the board about half way out. All LEDs turn off. 7 Turn both handles to their fully-closed positions. When the handles are fully-closed they lock into place. Alignment
Resumen del contenido incluido en la página 19
Hardware installation Troubleshooting Figure 5: Location of FortiGate-5001FA2-LENC power switch Left Handle Power Switch Lock Switch Contact If the left handle is damaged or positioned incorrectly the FortiGate-5001FA2-LENC board does not receive power and will not start up. Make sure the left handle is correctly aligned, fully inserted and locked. Sometimes you may have to make small adjustments to the handle to achieve contact with the switch. FortiGate-5020 chassis: incorrect FortiGat
Resumen del contenido incluido en la página 20
Troubleshooting Hardware installation All chassis: Firmware problem If the FortiGate-5001FA2-LENC board power switch is connected and the JP3 jumper and shelf manager are set as required, and the FortiGate-5001FA2-LENC still does not start up, the problem could be with FortiOS. Connect to the FortiGate-5001FA2-LENC console and try cycling the power to the board. If the BIOS starts up, interrupt the BIOS startup and install a new firmware image. For details about installing a new firmware im
