Fortinet FortiGate-5001D Manual Download Page 2

FortiGate-5001D Security System Guide

01-500-0242101-20151109

http://docs.fortinet.com/

Cautions and Warnings

Environmental specifications

Operating Temperature 

– If this device is installed in a closed or multi-unit rack assembly, the rack’s ambient temperature 

may be greater than the room’s ambient temperature. Make sure the rack environment is compatible with the manufacturer’s 
maximum rated ambient temperature (Tma). 

Température ambiante élevée

 — Si cet appareil est installé dans un cabinet fermé, la température ambiante du cabinet peut 

être supérieure à la température ambiante de la pièce. Assurez- vous que l’environnement dans le cabinet est compatible avec 
la température ambiante maximale du fabricant (Tma).

Air flow

 – For rack installation, make sure that the amount of air flow required for safe operation of the equipment is not 

compromised. For free-standing installation, make sure that the appliance has at least 2 inches (5 cm) of clearance on each 
side to allow for adequate air flow and cooling.

Ventilation

 — Pour une installation dans un cabinet, assurez-vous que la ventilation nécessaire au fonctionnement de 

l’équipement n’est pas compromise.  Pour une installation autonome, assurez-vous que l’appareil dispose d’au moins 2 
pouces (5 cm) de dégagement de chaque côté pour permettre l’écoulement de l’air et un refroidissement adéquat.

Circuit overloading

 – To avoid overloading, use the ratings on the label. Consider the equipment’s connection to the supply 

circuit and the effect that circuit overloading might have on current protection and supply wiring. 
For redundant power sources, connect each to an IEC/UL Listed power source whose output rating is greater than or equal to 
the equipment.

Surtension

 – Pour éviter de surcharger le circuit d’alimentation, référez-vous aux notes sur l’étiquette de l’équipement . 

Envisagez l’effet que la surtension du circuit pourrait avoir sur la protection de surtension et le câblage d’alimentation .
Pour les sources d'alimentation redondantes, connectez chacun à une source d'alimentation Mis CEI / UL dont la cote de 
rendement est supérieur ou égal à l'équipement.

Reliable earthing

 – Make sure all rack-mounted equipment is grounded. This includes supply connections (e .g . power 

strips), not only direct connections to the branch circuit.

Mise à la terre

 – Assurez-vous que tout l’équipement est mis à la terre . Ceci comprend les connexions d’alimentation (par 

exemple, les barres d’alimentation) en plus des connexions directes au circuit de dérivation.

Interference

 – If possible, use Shielded Twisted Pair (STP) Ethernet cables instead of Unshielded Twisted Pair (UTP) .

Interférence

 – Si possible, utilisez des câbles Ethernet de paire torsadée blindée (STP) plutôt que de paire torsadée non 

blindée (UTP).

Mechanical loading

 – To avoid personal injury or damage to the appliance, Fortinet recommends that 2 or more people 

together install the appliance into the rack.  Balance the equipment to avoid uneven mechanical loading and tipping.  Do not 
place heavy objects on the appliance. 

Installation

 – Pour éviter des blessures ou des dommages à l’appareil, Fortinet recommande que deux personnes ou plus 

installent ensemble cet équipement dans un cabinet. L’installation du matériel à l’intérieur de la baie doit être effectuée de 
façon à éviter toute situation dangereuse liée à une installation non conforme .  Ne placez pas d’objets lourds sur l’appareil, 
celui-ci n’étant pas conçu pour soutenir un poids additionnel. 

Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, 
Humidity, and Altitude)

Safety 

Moving parts

 — Hazardous moving parts. Keep away from moving fan blades.

Pièces mobiles

 – Pièces mobiles dangerouses. Se tenir éloigné des pales de ventilateurs mobiles.

Do not install this equipment in a home or public area accessible to the general population. When installed in schools, this 
equipment must be installed in a location where access is restricted to trained personnel.
Dans les écoles, ce matériel doit être installé en lieu sûr, de façon à le rendre accessible seulement aux personnels qualifies.

Battery

  – Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries in a fire. They may 

explode. Dispose of used batteries according to your local regulations. IMPORTANT: Switzerland: Annex 4.10 of SR814.013 
applies to batteries.

Batterie

  – Risque d’explosion si vous remplacez la batterie par un modèle incompatible. Jetez les piles usagées selon les 

réglementations locales en vigueur. IMPORTANT: Suisse: Annexe 4.10 de SR814.013 s’appliquant aux batteries.

警告
本電池如果更換不正確會有爆炸的危險
請依製造商說明書處理⽤過之電池

Summary of Contents for FortiGate-5001D

Page 1: ...cent versions of this and all FortiGate 5000 series documents are available from the FortiGate 5000 page of the Fortinet Technical Documentation web site http docs fortinet com Visit https support for...

Page 2: ...includes supply connections e g power strips not only direct connections to the branch circuit Mise la terre Assurez vous que tout l quipement est mis la terre Ceci comprend les connexions d alimentat...

Page 3: ...3 Changing FortiGate 5001D SW6 switch settings 14 FortiGate 5001D mounting components 16 Inserting a FortiGate 5001D board 17 Shutting down and removing a FortiGate 5001D board 19 Power cycling a Fort...

Page 4: ...nication 33 FortiGate 5001D fabric backplane data communication 35 For more information 36 Training Services 36 Technical Documentation 36 Comments on Fortinet technical documentation 36 Customer serv...

Page 5: ...aces Use the front panel interfaces for connections to your networks and the backplane interfaces for communication across the ATCA chassis backplane The FortiGate 5001D also includes two front panel...

Page 6: ...fic on the interfaces port1 port2 port3 port4 fabirc1 and fabric2 Four CP8 content processors that accelerate IPS SSL VPN and IPsec VPN Internal 200 GByte SSD for storing log messages DLP archives his...

Page 7: ...and the connected equipment has power Flashing Green Network activity at the interface Off No link is established Fabric 1 and 2 Off Fabric backplane interface 1 or 2 fabric1 or fabric2 is connected...

Page 8: ...bps IPM Blue The FortiGate 5001D board is ready to be hot swapped removed from the chassis If the IPM light is blue and no other LEDs are lit the FortiGate 5001D board has lost power Flashing Blue The...

Page 9: ...slots 1 and 2 For information about FortiSwitch and FortiController 5000 series boards see the FortiGate 5000 page of the Fortinet Technical Documentation website Fabric backplane communication The Fo...

Page 10: ...g load is removed from the CPU The NP6 processor can also handle some CPU intensive tasks like IPsec VPN encryption decryption Because of the integrated switch fabric all sessions are fast pathed and...

Page 11: ...re CRT support Primarily checking for RSA key generation Handshake accelerator with automatic key material generation Random Number generator compliance with ANSI X9 31 Sub public key engine PKCE to s...

Page 12: ...Splitting the FortiGate 5001D front panel port1 and port2 interfaces FortiGate 5001D security system FortiGate 5001D Security System Guide 12 01 500 0242101 20151109 http docs fortinet com...

Page 13: ...You can install the QSFP transceivers before or after inserting the FortiGate 5001D board into a chassis You must install SR SFP transceivers for normal operation of the FortiGate 5001D front panel p...

Page 14: ...es chassis The top of the FortiGate 5001D board is covered with a metal panel The printed circuit board is under the metal panel SW6 is located on the printed circuit board and is accessible from the...

Page 15: ...electrostatic discharge ESD preventive wrist strap with connection cord Table 5 FortiGate 5001D SW6 settings Chassis Correct SW6 Setting Result of wrong jumper setting FortiGate 5140B or 5060 or a ATC...

Page 16: ...o place in the slot When locked into place and positioned correctly the board front panel is flush with the chassis front panel The board is also connected to the chassis backplane To position the boa...

Page 17: ...are hot swappable The procedure for inserting a FortiGate 5001D board into a chassis slot is the same whether or not the chassis is powered on To insert a FortiGate 5001D board into a chassis slot To...

Page 18: ...ould lock into place As the handles closed power is supplied to the board If the chassis is powered on the IPM LED starts flashing blue If the board is aligned correctly inserted all the way into the...

Page 19: ...ate 5001D board For example From the web based manager go to System Status and from the Unit Operation widget select Shutdown and then select OK From the CLI enter execute shutdown 2 Attach the ESD wr...

Page 20: ...open the handles with moderate pressure to eject the board from the chassis Pivoting the handles turns off the microswitch turns off all LEDs and ejects the board from the chassis slot 9 Pull the boar...

Page 21: ...e 5001D board installed An electrostatic discharge ESD preventive wrist strap with connection cord 1 Shut down the operating system running on the FortiGate 5001D board For example From the web based...

Page 22: ...s If you are operating a FortiGate 5000 series chassis you can power down and then restart the chassis without removing FortiGate 5000 series components All chassis Firmware problem If the FortiGate 5...

Page 23: ...in some cases you have to set these interface speeds to 40000full if the cluster is installed in a FortiGate 5144C chassis or 10000full if the cluster is installed in a chassis with a 10 gbyte backpl...

Page 24: ...Troubleshooting Hardware installation FortiGate 5001D Security System Guide 24 01 500 0242101 20151109 http docs fortinet com...

Page 25: ...ct to receive Fortinet customer services such as product updates and customer support You must also register your product for FortiGuard services such as FortiGuard Antivirus and Intrusion Prevention...

Page 26: ...oute mode Transparent mode In Transparent mode the FortiGate 5001D security system is invisible to the network All of the FortiGate 5001D interfaces are connected to different segments of the same net...

Page 27: ...et connection between the FortiGate 5001D board and management computer Internet Explorer 6 0 or higher on the management computer Command Line Interface CLI The CLI is a full featured management tool...

Page 28: ...1 IP Netmask 192 168 1 99 24 mgmt2 IP Netmask 192 168 100 99 24 Default route Gateway 192 168 100 1 Device mgmt2 Primary DNS Server 208 91 112 53 Secondary DNS Server 208 91 112 52 At any time during...

Page 29: ...o System Network Interface and edit each interface to configure 2 Set the addressing mode for the interface See the online help for information For manual addressing enter the IP address and netmask f...

Page 30: ...edit admin set password password end 5 Configure the mgmt1 port1 and port1 interfaces to the settings that you added to Table 8 on page 28 config system interface edit mgmt1 set ip intf_ip netmask_ip...

Page 31: ...System Dashboard Status and select the Change link beside Operation Mode NAT 2 Set Operation Mode to Transparent 3 Set the Management IP Netmask to the settings that you added to Table 9 on page 31 4...

Page 32: ...twice no password required 4 Change from NAT Route mode to Transparent mode Configure the Management IP address and default gateway to the settings that you added to Table 9 on page 31 config system s...

Page 33: ...TFTP server You can use the following command to ping the computer running the TFTP server For example if the IP address of the TFTP server is 192 168 1 168 execute ping 192 168 1 168 5 Enter the foll...

Page 34: ...ons Guide and the FortiSwitch 5000 Series CLI Reference To enable base backplane data communication from the FortiGate 5001D web based manager From the FortiGate 5001D web based manager use the follow...

Page 35: ...stem Network Interface 2 Select Show backplane interfaces The fabric1 fabric2 base1 and base2 backplane interfaces now appear in all Interface lists You can now configure the fabric backplane interfac...

Page 36: ...ticles examples FAQs technical notes and more Visit the Fortinet Knowledge Base at http kb fortinet com Comments on Fortinet technical documentation Send information about any errors or omissions in t...

Page 37: ...ortinet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warrants that the identified product will perform according to certain expressly identifi...

Page 38: ...residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense WARNING Any changes or modifications to this product no...

Reviews: