manualshive.com logo in svg

Fortinet FortiGate-6000F Series, System Manual, Page: 35 / 48

Share
Download
Fortinet FortiGate-6000F Series System Manual Download Page 35

Managing individual FortiGate-6000 management boards and FPCs

Fortinet Technologies Inc.

FortiGate-6000 special management port numbers

Slot Address

HTTP
(80)

HTTPS (443)

Telnet
(23)

SSH (22)

SNMP (161)

Slot 0, (MBD)

8000

44300

2300

2200

16100

Slot 1 (FPC01)

8001

44301

2301

2201

16101

Slot 2 (FPC02)

8002

44302

2302

2202

16102

Slot 3 (FPC03)

8003

44303

2303

2203

16103

Slot 4 (FPC04)

8004

44304

2304

2204

16104

Slot 5 (FPC05)

8005

44305

2305

2205

16105

Slot 6 (FPC06)

8006

44306

2306

2206

16106

Slot 7 (FPC07)

8007

44307

2307

2207

16107

Slot 8 (FPC08)

8008

44308

2308

2208

16108

Slot 9 (FPC09)

8009

44309

2309

2209

16109

Slot 10 (FPC10)

8010

44310

2310

2210

16110

For example, to connect to the CLI of the FPC in slot 3 using SSH, you would connect to ssh://192.168.1.99:2203.

To verify which slot you have logged into, the GUI header banner and the CLI prompt shows the current hostname. The
System Information dashboard widget also shows the host name and serial number. The CLI prompt also shows slot
address in the format

<hostname> [<slot address>] #

.

Logging in to different FPCs allows you to use the FortiView or Monitor GUI pages to view the activity on that FPC. You
can also restart the FPC from its GUI or CLI. Even though you can log in to different FPCs, you can only make
configuration changes from the management board.

HA mode special management port numbers

In an HA configuration consisting of two FortiGate-6000s in an HA cluster, you can connect to individual FPCs or to the
management board in chassis 1 (chassis ID = 1) using the same special port numbers as for a standalone FortiGate-
6000.

You use different special port numbers to connect to individual FPCs or the management board in the FortiGate-6000
with chassis ID 2 (chassis ID = 2).

FortiGate-6000 special management port numbers (chassis ID = 2)

Slot Address

HTTP
(80)

HTTPS (443)

Telnet
(23)

SSH (22)

SNMP (161)

Slot 0, (MBD)

8020

44320

2320

2220

16120

FortiGate-6000F 6.4.2 System Guide

35

Summary of Contents for FortiGate-6000F Series

Page 1: ...FortiGate 6000F System Guide FortiGate 6000F Series...

Page 2: ...fortinet com FORTINET TRAINING CERTIFICATION PROGRAM https www fortinet com support and training training html NSE INSTITUTE https training fortinet com FORTIGUARD CENTER https fortiguard com END USE...

Page 3: ...PSUs to low line AC power 19 AC PSU LED states 19 Connecting FortiGate 6000F PSUs to AC power 20 Hot swapping an AC PSU 20 Connecting the FortiGate 6000F to ground 20 FortiGate 6000F hardware assembl...

Page 4: ...individual FPC 38 Installing firmware from the BIOS after a reboot 39 Synchronizing the FPCs with the management board 41 Cautions and warnings 43 Environmental specifications 43 Safety 44 Regulatory...

Page 5: ...ecting generation 1 or 2 FortiGate 6000F PSUs to low line AC power on page 19 describes FortiGate 6000F generation 1 AC PSUs September 2 2020 More information about FPC failure with power loss added t...

Page 6: ...ocessor Cards FPCs that contain NP6 and CP9 security processors The management board handles management tasks separating management tasks from data processing tasks that are handled by the FPCs The Fo...

Page 7: ...P out of band management interface MGMT3 l One RJ 45 RS 232 serial console connection l One USB connector Interface groups and changing data interface speeds Depending on the networks that you want to...

Page 8: ...arm One or more analog sensors excluding PSUs has surpassed a major or critical CR threshold Any sensor including sensors on PSUs has generated an alert Sensor alert criteria is defined per sensor For...

Page 9: ...and the attached network device has power Flashing Green Network activity at the interface Off No link is established MGMT3 Right LED Not used HA1 HA2 Link Activity Green This interface is connected a...

Page 10: ...nsceiver For out of band management or system administration HA1 HA2 SFP 1 10Gbps Ethernet 1 10GigE connection using SFP or SFP transceivers For HA heartbeat and synchronization 1GigE not recommended...

Page 11: ...connect to the management board MBD CLI of the FortiGate 6000F You can also press Ctrl T to switch between the management board CLI and the CLIs of each of the FPCs in your FortiGate 6000F the new de...

Page 12: ...hoot problems with your FortiGate 6000F you can use the front panel non maskable interrupt NMI switch to assist with troubleshooting Pressing this switch causes the software to dump management board r...

Page 13: ...anagement functions such as administrator logins configuration and session synchronization SNMP and other monitoring HA heartbeat communication and remote and if supported local disk logging Separatin...

Page 14: ...ace over the HA1 and HA2 interfaces Administrator logins SNMP monitoring remote logging to one or more FortiAnalyzers or syslog servers and other management functions use the MGMT1 MGMT2 and MGMT3 int...

Page 15: ...J 45 Ethernet cable l Two FG TRAN SFP SR transceivers Optional accessories and replacement parts The following optional accessories can be ordered separately SKU Description FG 6000F FAN FortiGate 600...

Page 16: ...When connected to high line AC power generation 2 FortiGate 6000F models provide 1 1 PSU redundancy When connected to high line AC power each PSU provides 2000W which is enough power to run the entir...

Page 17: ...FortiGate 6000F AC power supply units PSUs The FortiGate 6000F back panel includes three hot swappable redundant AC PSUs PSU1 PSU2 and PSU3 Two generations of FortiGate 6000F models have been release...

Page 18: ...power If you connect a generation 2 FortiGate 6000F to high line AC power each PSU provides 2000W AC which is all the power required by the FortiGate 6000F Only two PSUs PSU1 and PSU2 each connected t...

Page 19: ...he FPC with the highest slot number until only four FPCs are running Usually this results in the FPCs in slots 1 to 4 running if there is only one PSU connected If one of the FPCs in slot 1 to 4 has p...

Page 20: ...ng traffic as long as one PSU remains connected to power at all times 1 Attach an ESD wrist strap to your wrist and to an ESD socket or to a bare metal surface on the chassis or frame 2 Turn off the p...

Page 21: ...1 Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal surface on the FortiGate 6000F 2 Make sure that the FortiGate 6000F and ground wire are not energized 3 Connect the g...

Page 22: ...ended that two or more people install the FortiGate 6000F into the rack Do not place heavy objects on the appliance Ensure there is enough room around the appliance to allow for sufficient air flow Co...

Page 23: ...the rails and fully slid into the rack the FortiGate 6000F locks into place You can press the system release buttons that project out of the front of the rack to unlock the rails and slide the FortiGa...

Page 24: ...For example on a lifting device in front of the rack that it will be installed into 2 Remove the right rail assembly from the packaging and begin sliding the right inner rail out of it 3 Unlock the ri...

Page 25: ...it to lock the pins in place 4 Pull out the bracket on the back of the right outer rail to adjust its position until it matches up with the back post of the rack 5 Verify that the rail is level then p...

Page 26: ...l the lock out tabs on the inner rails click into the front of the middle rails Keep the rails aligned and apply even pressure to both sides of the FortiGate 6000F while doing this 6 Slide the release...

Page 27: ...ed to it 2 Remove the four rack screws to allow the FortiGate 6000F to slide out of the rack 3 Squeeze the system release buttons on the front of both inner rails at the same time to release the Forti...

Page 28: ...level Installing QSFP28 SFP28 SFP and SFP transceivers You must install QSFP28 or QSFP transceivers into the 25 to 28 interfaces before connecting them to 100Gbps or 40Gbps networks You must install S...

Page 29: ...preventive wrist strap when handling FortiGate 6000Fs Handling the transceivers by holding the release latch can damage the connector Do not force transceivers into their cage slots If the transceiver...

Page 30: ...necting MGMT1 or MGMT2 to your network and browsing to https 192 168 1 99 or https 192 168 2 99 l Log in to the management board CLI by connecting MGMT1 or MGMT2 to your network and using an SSH clien...

Page 31: ...with in_sync 0 that FPC is not synchronized The following example just shows a few output lines diagnose sys confsync status grep in_sy FPC6KF3E17900200 Slave uptime 5385 45 priority 119 slot_id 2 1...

Page 32: ...me set ip ip address netmask end Adding a password to the admin administrator account For security purposes one of the first things you should do is add a password to the admin account Depending on yo...

Page 33: ...the FortiGate 6000 connect to the management board CLI and enter the execute reboot command After you enter this command the management board and all of the FPCs restart To restart an individual FPC...

Page 34: ...agement port numbers you can set slbc mgmt intf to an interface that is not connected to a network does not have a valid IP address or has management or administrative access disabled For example if t...

Page 35: ...e The System Information dashboard widget also shows the host name and serial number The CLI prompt also shows slot address in the format hostname slot address Logging in to different FPCs allows you...

Page 36: ...For example from the management board CLI use the following command to log in to the console of the FPC in slot 3 execute system console server connect 3 Authenticate to log in to the console and use...

Page 37: ...FPC slot numbers start at 1 When connected to the CLI of a FPC you can view information about the status or configuration of the FPC restart the FPC or perform other operations You should not change t...

Page 38: ...stem Some firmware upgrades may take longer depending on factors such as the size of the configuration and whether an upgrade of the DP3 processor is included Before beginning a firmware upgrade Forti...

Page 39: ...FortiGate 6301F devices The field in_sync 1 indicates that the configuration of the FPC is synchronized FPC6KFT018901327 Slave uptime 615368 33 priority 19 slot_id 1 1 idx 1 flag 0x4 in_sync 1 F6KF31...

Page 40: ...management board CLI 6 To restart the management board enter the execute reboot command 7 When the management board starts up follow the boot process in the terminal session and press any key when pro...

Page 41: ...ve uptime 57 40 priority 23 slot_id 1 5 idx 2 flag 0x4 in_sync 0 FPC6KFT018901346 Slave uptime 58 44 priority 21 slot_id 1 3 idx 3 flag 0x4 in_sync 0 FPC6KFT018901372 Slave uptime 58 48 priority 20 sl...

Page 42: ...x4 in_sync 1 F6KF31T018900143 Master uptime 3837 25 priority 1 slot_id 1 0 idx 0 flag 0x0 in_sync 1 F6KF31T018900143 Master uptime 3837 25 priority 1 slot_id 1 0 idx 0 flag 0x0 in_sync 1 FPC6KFT018901...

Page 43: ...ment M canique Montage de l quipement dans le rack doit tre telle qu une situation dangereuse n est pas li un chargement m canique in gal Circuit Overloading Consideration should be given to the conne...

Page 44: ...ez pas les batteries au feu Ils peuvent exploser Jetez les piles usag es conform ment aux r glementations locales IMPORTANT Suisse l annexe 4 10 de SR814 013 s appliquent aux batteries CAUTION There i...

Page 45: ...a terre de la prise This product has a separate protective earthing terminal provided on the back of the product in addition to the grounding terminal of the attachment plug This separate protective e...

Page 46: ...ause harmful interference in which case the user will be required to correct the interference at his own expense WARNING Any changes or modifications to this product not expressly approved by the part...

Page 47: ...fety Electrical Appliance Material PSE Japan PSE Bureau of Standards Metrology and Inspection BSMI Taiwan The presence conditions of the restricted substance BSMI RoHS table are available at the link...

Page 48: ...inet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warrants that the identified product will perform according to certain expressly identified...

Reviews:

No comments