manualshive.com logo in svg

Fortinet FortiGate FortiGate-5001SX, Security System Manual

Share
Download
Fortinet FortiGate FortiGate-5001SX Security System Manual Download Page 32

FortiGate-5001SX   Security System Guide

32

01-30000-0380-20070201

FortiGate-5001SX base backplane data communication

Quick Configuration Guide

4

Make sure the FortiGate module can connect to the TFTP server. 

You can use the following command to ping the computer running the TFTP 
server. For example, if the IP address of the TFTP server is 192.168.1.168:

execute ping 192.168.1.168

5

Enter the following command to copy the firmware image from the TFTP server to 
the FortiGate-5001SX module: 

execute restore image <name_str> <tftp_ipv4>

Where 

<name_str>

 is the name of the firmware image file and 

<tftp_ipv4>

 is 

the IP address of the TFTP server. For example, if the firmware image file name is 

image.out

 and the IP address of the TFTP server is 192.168.1.168, enter: 

execute restore image image.out 192.168.1.168

The FortiGate-5001SX module responds with the message: 

This operation will replace the current firmware version!

Do you want to continue? (y/n)

6

Type 

y

. 

The FortiGate-5001SX module uploads the firmware image file, upgrades to the 
new firmware version, and restarts. This process takes a few minutes. 

7

Reconnect to the CLI.

8

To confirm the firmware image is successfully installed, enter: 

get system status

9

Update antivirus and attack definitions. You can use the command 

execute update-now

FortiGate-5001SX base backplane data communication

You can configure the FortiGate-5001SX modules for data communications using 
the two FortiGate-5140, FortiGate-5050, or FortiGate-5020 chassis base 
backplane interfaces.

By default the base backplane interfaces are used for HA heartbeat 
communication. However, using the information in this section, you can configure 
the FortiGate-5001SX to also use the base backplane interfaces for data 
communication. Once the base backplane interfaces are configured for data 
communication you can operate and configure them in the same way as any 
FortiGate-5001SX interface.

Although not recommended, you can use base backplane interfaces for data 
communication and HA heartbeat communication at the same time.

Note: 

Different FortiGate-5000 series modules may use different names for the base 

backplane interfaces. For example, on the FortiGate-5001SX and FortiGate-5001FA2 
modules the base backplane interfaces are called port9 and port10. On the 
FortiGate-5005FA2 module the base backplane interfaces are called base1 and base2.

Note: 

VLAN communication over the backplane is only available for FortiGate-5005FA2 

modules installed in a FortiGate-5020 chassis. The FortiSwitch-5003 does not support 
VLAN-tagged packets so VLAN communication is not available over the FortiGate-5050 
and FortiGate-5140 chassis backplanes.

Summary of Contents for FortiGate FortiGate-5001SX

Page 1: ...rtiGate 5001SX module in a FortiGate 5000 series chassis how to configure the FortiGate 5001SX security system for your network and contains troubleshooting information to help you diagnose and fix problems The most recent versions of this and all FortiGate 5000 series documents are available from the FortiGate 5000 page of the Fortinet Technical Documentation web site http docs forticare com Visi...

Page 2: ...00 series component in a closed or multi unit rack assembly the operating ambient temperature of the rack environment may be greater than room ambient Make sure the operating ambient temperature does not exceed the manufacturer s maximum rated ambient temperature Installing FortiGate 5000 series equipment in a rack should be such that the amount of airflow required for safe operation of the equipm...

Page 3: ...9 FortiGate 5001SX does not startup 19 FortiGate 5001SX cannot display chassis information 21 Quick Configuration Guide 23 Registering your Fortinet product 23 Planning the configuration 23 NAT Route mode 24 Transparent mode 24 Choosing the configuration tool 25 Web based manager 25 Command Line Interface CLI 26 Factory default settings 26 Configuring NAT Route mode 27 Using the web based manager ...

Page 4: ...0070201 Contents For more information 35 Fortinet documentation 35 Fortinet Tools and Documentation CD 35 Fortinet Knowledge Center 35 Comments on Fortinet technical documentation 35 Customer service and technical support 35 Register your Fortinet product 35 ...

Page 5: ... FortiGate 5000 chassis monitoring Figure 1 FortiGate 5001SX front panel The FortiGate 5001SX module includes the following features A total of eight front panel gigabit interfaces Four gigabit interfaces that can accept Small Formfactor Pluggable SFP fiber or copper transceivers interfaces 1 2 3 and 4 Four 10 100 1000Base T gigabit copper network interfaces interfaces 5 6 7 and 8 Two base backpla...

Page 6: ...SX module is powered on ACC Off or Flashing red The ACC LED flashes red when the FortiGate 5001SX module accesses the FortiOS flash disk The FortiOS flash disk stores the current FortiOS firmware build and configuration files The system accesses the flash disk when starting up during a firmware upgrade or when an administrator is using the CLI or GUI to change the FortiOS configuration Under norma...

Page 7: ...mation about base backplane communication in FortiGate 5140 and FortiGate 5050 chassis see the FortiGate 5000 Base Backplane Communication Guide For information about the FortiSwitch 5003 module see the FortiSwitch 5003 Guide 5 6 7 8 Link LED Green The correct cable is inserted into this interface and the connected equipment has power Flashing Network activity at this interface Speed LED Green The...

Page 8: ...FortiGate 5001SX Security System Guide 8 01 30000 0380 20070201 Base backplane gigabit interfaces FortiGate 5001SX security system ...

Page 9: ...ortiGate 5001SX circuit board You should confirm that the RAM DIMMs are installed correctly before inserting the FortiGate 5001SX module into a chassis To install FortiGate 5001SX RAM DIMMs To complete this procedure you need A FortiGate 5001SX module Two RAM DIMMs to be installed into the FortiGate 5001SX module RAM DIMM slots An electrostatic discharge ESD preventive wrist or ankle strap with co...

Page 10: ... DIMM slots Push the DIMM firmly into place using the minimum amount of force required When the DIMM is properly seated the socket guide posts click into place Do not use excessive force when installing a DIMM The RAM slots allow only one alignment of each RAM DIM If you cannot lock the locking levers the DIM is not aligned correctly or is in upside down JP3 JP1 JP2 RAM DIMM slots Front Faceplate ...

Page 11: ...supported To install SFP transceivers To complete this procedure you need A FortiGate 5001SX module Four SFP transceivers An electrostatic discharge ESD preventive wrist or ankle strap with connection cord 1 Attach the ESD wrist or ankle strap to your wrist or ankle and to an ESD socket or to a bare metal surface on the chassis or frame 2 Remove the caps from SFP cage sockets on the FortiGate 5001...

Page 12: ...umper setting To complete this procedure you need A FortiGate 5001SX module A tool for moving jumpers optional An electrostatic discharge ESD preventive wrist or ankle strap with connection cord 1 Attach the ESD wrist or ankle strap to your wrist or ankle and to an ESD socket or to a bare metal surface on a chassis or frame Table 3 FortiGate 5001SX JP3 jumper settings for each chassis Chassis Corr...

Page 13: ...hassis on page 17 3 Use Figure 3 to locate the jumper settings on the module circuit board 4 If required carefully move the jumper to the correct setting 5 You can now insert the module into a chassis and verify that it is operating correctly For inserting instructions see Inserting a FortiGate 5001SX module into a chassis on page 14 Figure 3 FortiGate 5001SX jumper settings JP3 JP1 JP2 Front Face...

Page 14: ...e FortiGate 5001SX module to receive power and operate normally If the FortiGate 5001SX module is not receiving power the IPM LED glows blue and all other LEDs remain off It is important to carefully seat the FortiGate 5001SX module all the way into the chassis to not use too much force on the extraction levers and to make sure that the extraction levers are properly locked and engaged with the hi...

Page 15: ...discharge ESD preventive wrist or ankle strap with connection cord 1 Attach the ESD wrist or ankle strap to your wrist or ankle and to an ESD socket or to a bare metal surface on the chassis or frame 2 Fully loosen the left extraction lever locking screw to unlock the left extraction lever Caution Do not carry the FortiGate 5001SX module by holding the extraction levers When inserting or removing ...

Page 16: ... the module back out and try inserting it again 6 Slide the module in until the alignment pins are inserted half way into their sockets in the chassis If the chassis is powered on the IPM LED lights up and turns blue 7 Turn both extraction levers to their fully closed positions The extraction levers should hook into the sides of the chassis slot Closing the extraction levers draws the FortiGate 50...

Page 17: ...es are hot swappable The procedure for removing the FortiGate 5001SX module from a FortiGate 5000 series chassis slot is the same whether or not the FortiGate 5000 series chassis is powered on or not To complete this procedure you need A FortiGate 5000 series chassis with a FortiGate 5001SX module installed An electrostatic discharge ESD preventive wrist or ankle strap with connection cord Tighten...

Page 18: ...crew to unlock the left extraction lever 5 Turn both extraction levers to their fully open positions Opening the extraction levers slides the module a short distance out of the slot disconnecting the module from the chassis backplane The IPM LED turns blue All other LEDs turn off 6 Pull the module about half way out All LEDs turn off Caution FortiGate 5001SX modules must be protected from static d...

Page 19: ...mper settings and firmware problems may all prevent a FortiGate 5001SX module for starting up correctly This section describes how to find and fix each of these problems All chassis left extraction lever not contacting power switch The left extraction lever activates the FortiGate 5001SX module power switch Figure 5 If the left extraction lever is damaged or positioned incorrectly the FortiGate 50...

Page 20: ...odule will not start up if the JP3 jumper connects pins 2 and 3 see Figure 3 on page 13 and a shelf manager is not installed or is not operating correctly If the shelf manager is not installed or not operating correctly when you insert a FortiGate 5001SX module the module attempts to communicate with the shelf manager If the FortiGate 5001SX module cannot communicate with the shelf manager the mod...

Page 21: ... if the JP3 jumper is set between pins 2 and 3 the FortiGate 5001SX module should be able to communicate with the chassis shelf manager If the FortiGate 5001SX module can communicate with the shelf manager the FortiGate 5001SX web based manager System Chassis pages should display information about the modules installed in the chassis If any one of the conditions listed above are not met theFortiGa...

Page 22: ...FortiGate 5001SX Security System Guide 22 01 30000 0380 20070201 Troubleshooting Hardware installation ...

Page 23: ...ing Transparent mode Upgrading FortiGate 5001SX firmware FortiGate 5001SX base backplane data communication Powering off the FortiGate 5001SX module Registering your Fortinet product Register your Fortinet product to receive Fortinet customer services such as product updates and technical support You must also register your product for FortiGuard services such as FortiGuard Antivirus and Intrusion...

Page 24: ...erate in NAT mode or in Route mode In NAT mode the FortiGate firewall performs network address translation before IP packets are sent to the destination network In Route mode no translation takes place Figure 7 Example FortiGate 5001SX module operating in NAT Route mode Transparent mode In Transparent mode the FortiGate 5001SX security system is invisible to the network All of the FortiGate 5001SX...

Page 25: ...module Web based manager The FortiGate 5001SX web based manager is an easy to use management tool Use the web based manager to configure the FortiGate 5001SX administrator password the interface addresses the default gateway and the DNS server addresses Requirements An Ethernet connection between the FortiGate 5001SX module and management computer Internet Explorer 6 0 or higher on the management ...

Page 26: ...001SX module onto the network To configure the FortiGate 5001SX module onto the network you add an administrator password change the network interface IP addresses add DNS server IP addresses and if required configure basic routing Table 5 FortiGate 5001SX factory default settings Operation Mode NAT Route Administrator Account User Name admin Password none port1 IP Netmask 192 168 1 99 24 port2 IP...

Page 27: ...e settings Admin Administrator Password port1 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port2 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port3 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port4 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port5 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port6 IP _____ _____ _____ _____ Ne...

Page 28: ...ings To configure the Primary and Secondary DNS server IP addresses 1 Go to System Network Options 2 Enter the Primary and Secondary DNS IP addresses that you added to Table 6 on page 27 as required and select Apply To configure the Default Gateway 1 Go to Router Static and select Edit icon for the static route 2 Select the Device that you recorded above 3 Set Gateway to the Default Gateway IP add...

Page 29: ...gateway gateway_ip end Configuring Transparent mode Use Table 7 to gather the information you need to customize Transparent mode settings Using the web based manager to configure Transparent mode 1 Connect port1 of the FortiGate 5001SX module to the same hub or switch as the computer you will use to configure the FortiGate module Table 7 Transparent mode settings Admin Administrator Password Manag...

Page 30: ...r the admin administrator and enter the password that you added to Table 7 on page 29 To change the management interface 1 Go to System Config Operation 2 Enter the Management IP address and netmask hat you added to Table 7 on page 29 and select Apply To configure the Primary and Secondary DNS server IP addresses 1 Go to System Network Options 2 Enter the Primary and Secondary DNS IP addresses tha...

Page 31: ...ager or CLI and using the FortiUSB key see the FortiGate 5000 Series Firmware and FortiUSB Guide To upgrade the firmware using the web based manager 1 Copy the firmware image file to your management computer 2 Log into the web based manager as the admin administrator 3 Go to System Status 4 Under System Information Firmware Version select Update 5 Type the path and filename of the firmware image f...

Page 32: ...s and attack definitions You can use the command execute update now FortiGate 5001SX base backplane data communication You can configure the FortiGate 5001SX modules for data communications using the two FortiGate 5140 FortiGate 5050 or FortiGate 5020 chassis base backplane interfaces By default the base backplane interfaces are used for HA heartbeat communication However using the information in ...

Page 33: ...ation 1 Go to System Network Interface 2 Select Show backplane interfaces The port9 and port10 backplane interfaces now appear in the Interface list To enable base backplane data communication from the FortiGate 5001SX CLI From the FortiGate 5001SX module CLI you can use the following steps to enable base backplane data communication 1 Enter the following command to show the backplane interfaces c...

Page 34: ...FortiGate 5001SX Security System Guide 34 01 30000 0380 20070201 Powering off the FortiGate 5001SX module Quick Configuration Guide ...

Page 35: ...ble from the Fortinet Knowledge Center The knowledge center contains troubleshooting and how to articles FAQs technical notes and more Visit the Fortinet Knowledge Center at http kc forticare com Comments on Fortinet technical documentation Please send information about any errors or omissions in this document or any Fortinet technical documentation to techdoc fortinet com Customer service and tec...

Page 36: ...namic Threat Prevention System DTPS APSecure FortiASIC FortiBIOS FortiBridge FortiClient FortiGate FortiGate Unified Threat Management System FortiGuard FortiGuard Antispam FortiGuard Antivirus FortiGuard Intrusion FortiGuard Web FortiLog FortiAnalyzer FortiManager Fortinet FortiOS FortiPartner FortiProtect FortiReporter FortiResponse FortiShield FortiVoIP and FortiWiFi are trademarks of Fortinet ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands