Resumen del contenido incluido en la página 1
Security System Guide
FortiGate-5001FA2
USB
1 2 3 4 5 6 7 8
CONSOLE
STA IPM
PWR ACC
A detailed guide to the FortiGate-5001FA2 Security System. This FortiGate-5001FA2 Security System Guide
describes FortiGate-5001FA2 hardware features, how to install the FortiGate-5001FA2 board in a FortiGate-5000
series chassis, how to configure the FortiGate-5001FA2 security system for your network, and contains
troubleshooting information to help you diagnose and fix problems.
The most recent versions of t
Resumen del contenido incluido en la página 2
Warnings and cautions Only trained and qualified personnel should be allowed to install or maintain FortiGate-5000 series equipment. Read and comply with all warnings, cautions and notices in this document. CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According ! to the Instructions. Caution: You should be aware of the following cautions and warnings before installing FortiGate-5000 series ! hardware • Turning off all power switches may no
Resumen del contenido incluido en la página 3
Contents Contents Warnings and cautions ..................................................................................... 2 FortiGate-5001FA2 security system................................. 5 Front panel LEDs and connectors ................................................................... 6 LEDs ............................................................................................................. 6 Connectors.........................................................................
Resumen del contenido incluido en la página 4
Contents For more information ...................................................... 33 Fortinet documentation .................................................................................. 33 Fortinet Tools and Documentation CD........................................................ 33 Fortinet Knowledge Center ........................................................................ 33 Comments on Fortinet technical documentation ........................................ 33 Customer service
Resumen del contenido incluido en la página 5
FortiGate-5001FA2 security system FortiGate-5001FA2 security system The FortiGate-5001FA2 security system is a high-performance FortiGate security system with a total of 8 front panel gigabit ethernet interfaces and two base backplane interfaces. Use the front panel interfaces for connections to your networks and the backplane interfaces for communication between FortiGate-5000 series boards over the FortiGate-5000 chassis backplane. You can also configure two or more FortiGate-5001FA2 boa
Resumen del contenido incluido en la página 6
Front panel LEDs and connectors FortiGate-5001FA2 security system The FortiGate-5001FA2 board comes supplied with four optical or four copper SFP transceivers. Before you can connect FortiGate-5001FA2 interfaces 1 to 4, you must insert the SFP transceivers into the FortiGate-5001FA2 front panel cage slots numbered 1 to 4. The FortiGate-5001FA2 board ships with two RAM DIMMs installed on the FortiGate-5001FA2 circuit board. You should confirm that the RAM DIMMs are installed correctly before
Resumen del contenido incluido en la página 7
FortiGate-5001FA2 security system Accelerated packet forwarding and policy enforcement Table 1: FortiGate-5001FA2 board LEDs (Continued) LED State Description 5, 6, Link Green The correct cable is inserted into this interface and the connected equipment has power. 7, 8 LED Flashing Network activity at this interface. Speed Green The interface is connected at 1000 Mbps. LED Amber The interface is connected at 100 Mbps. Unlit The interface is connected at 10 Mbps. Connectors Table 2 lists and de
Resumen del contenido incluido en la página 8
Base backplane gigabit communication FortiGate-5001FA2 security system • Session Oriented Traffic with long session lifetime, such as FTP sessions. Packet size does not affect performance for traffic with long session lifetime. For long sessions, processing that would otherwise be handled by the FortiGate-5001FA2 CPUs is off-loaded to the acceleration module. • Firewall and intrusion protection (IPS), when there is a reasonable percentage of P2P packets. • Firewall, intrusion protection (IPS)
Resumen del contenido incluido en la página 9
Hardware installation RAM DIMMs Hardware installation Before use, the FortiGate-5001FA2 board must be correctly inserted into an Advanced Telecommunications Computing Architecture (ACTA) chassis such as the FortiGate-5140, FortiGate-5050, or FortiGate-5020 chassis. Before inserting the board into a chassis you should make sure RAM DIMMS are installed and FortiGate-5001FA2 jumpers are set. SFP transceivers must also be installed for interfaces 1 to 4 before these interfaces can be connected
Resumen del contenido incluido en la página 10
Installing SFP transceivers Hardware installation Figure 2: Location of FortiGate-5001FA2 RAM DIMM slots RAM DIMM slots Front Faceplate 3 Insert each RAM DIMM perpendicular to the RAM DIMM slots. Push the DIMM firmly into place using the minimum amount of force required. When the DIMM is properly seated, the socket guide posts click into place. Do not use excessive force when installing a DIMM. The RAM slots allow only one alignment of each RAM DIM. If you cannot lock the locking levers the D
Resumen del contenido incluido en la página 11
Hardware installation Changing FortiGate-5001FA2 jumper settings You can install the following types of SFP transceivers for connectors 1, 2, 3, and 4: • optical SFP transceivers • SFP 1000Base-LX, SM module • SFP 1000Base-SX, MM module (multimode) • copper SFP transceivers • SFP 1000Base-T, SERDES version only (SGMII version not supported) To install SFP transceivers To complete this procedure, you need: • A FortiGate-5001FA2 board • Four SFP transceivers • An electrostatic discharge (ESD) pre
Resumen del contenido incluido en la página 12
Changing FortiGate-5001FA2 jumper settings Hardware installation Normally, because the jumpers are factory set, you do not have to change them. However, if you are moving a FortiGate-5001FA2 from a FortiGate-5140 or FortiGate-5050 to a FortiGate-5020 or the reverse, you need to move the JP3 jumper. Also, if a new FortiGate-5001FA2 board does not function properly, you should check the JP3 jumper settings. Table 3: FortiGate-5001FA2 JP3 jumper settings for each chassis Chassis Correct JP3 Re
Resumen del contenido incluido en la página 13
Hardware installation Inserting a FortiGate-5001FA2 board into a chassis To change or verify the JP3 jumper setting To complete this procedure, you need: • A FortiGate-5001FA2 board • A tool for moving jumpers (optional) • An electrostatic discharge (ESD) preventive wrist strap with connection cord Caution: FortiGate-5001FA2 boards must be protected from static discharge and physical shock. Only handle or work with FortiGate-5001FA2 boards at a static-free workstation. ! Always wear a grounded
Resumen del contenido incluido en la página 14
Inserting a FortiGate-5001FA2 board into a chassis Hardware installation Figure 4: FortiGate-5001FA2 mounting components Closed Alignment Pin Alignment Pin Retention Retention Lock Screw Screw Handle Handle Lock Open Left Handle Power Switch Lock Switch Contact Before inserting the FortiGate-5001FA2 board in a chassis Before installing the FortiGate-5001FA2 board in a chassis you should verify that the RAM DIMMs are installed and the JP3 jumper is set correctly. You can also install
Resumen del contenido incluido en la página 15
Hardware installation Inserting a FortiGate-5001FA2 board into a chassis Caution: FortiGate-5001FA2 boards must be protected from static discharge and physical shock. Only handle or work with FortiGate-5001FA2 boards at a static-free workstation. ! Always wear a grounded electrostatic discharge (ESD) preventive wrist strap when handling FortiGate-5001FA2 boards. 1 Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal surface on the chassis or frame. 2 Unlock the le
Resumen del contenido incluido en la página 16
Inserting a FortiGate-5001FA2 board into a chassis Hardware installation 7 Turn both handles to their fully-closed positions. The handles should hook into the sides of the chassis slot. Closing the handles draws the FortiGate-5001FA2 board into place in the chassis slot and into contact with the chassis backplane. The FortiGate-5001FA2 front panel should be in contact with the chassis front panel. When the handles are fully-closed they lock into place. Alignment Pin Alignment Pin Close Hand
Resumen del contenido incluido en la página 17
Hardware installation Removing a FortiGate-5001FA2 board from a chassis Removing a FortiGate-5001FA2 board from a chassis The following procedure describes how to correctly use the FortiGate-5001FA2 mounting components shown in Figure 4 to remove a FortiGate-5001FA2 board from a FortiGate-5000 series chassis slot. To remove a FortiGate-5001FA2 board from a FortiGate-5000 series chassis FortiGate-5001FA2 boards are hot swappable. The procedure for removing the FortiGate-5001FA2 board from a Fo
Resumen del contenido incluido en la página 18
Troubleshooting Hardware installation 5 Open the left and right handles to their fully open positions. Opening the handles slides the board a short distance out of the slot, disconnecting the board from the chassis backplane. The IPM LED turns blue. All other LEDs turn off. Alignment Pin Handle Handle Fully Open Open 6 Pull the board about half way out. All LEDs turn off. 7 Turn both handles to their fully-closed positions. When the handles are fully-closed they lock into place. Alignment
Resumen del contenido incluido en la página 19
Hardware installation Troubleshooting Figure 5: Location of FortiGate-5001FA2 power switch Left Handle Power Switch Lock Switch Contact If the left handle is damaged or positioned incorrectly the FortiGate-5001FA2 board does not receive power and will not start up. Make sure the left handle is correctly aligned, fully inserted and locked. Sometimes you may have to make small adjustments to the handle to achieve contact with the switch. FortiGate-5020 chassis: incorrect FortiGate-5001FA2 j
Resumen del contenido incluido en la página 20
Troubleshooting Hardware installation All chassis: Firmware problem If the FortiGate-5001FA2 board power switch is connected and the JP3 jumper and shelf manager are set as required, and the FortiGate-5001FA2 still does not start up, the problem could be with FortiOS. Connect to the FortiGate-5001FA2 console and try cycling the power to the board. If the BIOS starts up, interrupt the BIOS startup and install a new firmware image. For details about installing a new firmware image in this way
