FortiGate-5005-DIST Security System Getting Started
6
01-30000-0414-20070615
FortiController-5208 I/O modules
The FortiGate-5005-DIST Security System
Figure 1: Example basic FortiGate-5005-DIST security system
FortiController-5208 I/O modules
Data flows into and out of the FortiGate-5005-DIST system through the I/O
modules. The I/O modules are FortiController-5208 modules installed in chassis
slots 1 and 2 in a FortiGate-5050 or FortiGate-5140 chassis. The I/O module
installed in slot 1 is configured as the primary I/O module. The optional I/O module
installed in slot 2 becomes the secondary I/O module. A FortiGate-5005-DIST
system can include one or two I/O modules.
As the I/O module, the FortiController-5208 provides all FortiGate-5005-DIST
network connections. The FortiController-5208 module provides two 10 gigabit
interfaces and four 1 gigabit interfaces for network traffic. The FortiController-5208
front panel also contains four 1 gigabit interfaces. Two of these interfaces support
inter-chassis HA and two are for future use. Adding a second FortiController-5208
module doubles the number of FortiGate-5005-DIST network interfaces.
Figure 2: FortiController-5208 front panel
1
2
2
3
4
5
SMC
1
SMC
POWER
5050SAP
SERIAL
1
SERIAL
2
ALARM
10/100
link/Act
ETH0 Service
RESET
ST
AT
US
Hot Swap
link/Act
ETH0
ETH1
10/100
5000SM
10/100
link/Act
ETH0 Service
RESET
ST
AT
US
Hot Swap
link/Act
ETH0
ETH1
10/100
5000SM
PAYLOAD OPERATION
STATUS
IPM
X 1
X 2
1/2
3/4
D15/D16
C15/C16
1
2
3
4
5
6
7
8
9
10
11
12
D
13
14
15
16
D
1
2
3
4
5
6
7
8
9
10
11
12
C
13
14
15
16
C
10/100/1000 MBPS ETHERNET ACTIVITY
DATA
CONTROL
1
2
3
4
MANAGEMENT
COM 1
COM 2
X 1
X 2
CONSOLE
ACT
ACT
LINK
LINK
FABRIC
BASE
USB
USB
3
4
1
2
5
6
7
8
OOS
ACC
STATUS
IPM
CONSOLE
ACT
ACT
LINK
LINK
FA
BR
IC
BASE
USB
USB
3
4
1
2
5
6
7
8
OOS
ACC
STATUS
IPM
CONSOLE
ACT
ACT
LINK
LINK
FA
BR
IC
BASE
USB
USB
3
4
1
2
5
6
7
8
OOS
ACC
STATUS
IPM
CONSOLE
ACT
ACT
LINK
LINK
FA
BR
IC
BASE
USB
USB
3
4
1
2
5
6
7
8
OOS
ACC
STATUS
IPM
NAT mode policies
controlling 10G traffic
between internal and
external networks.
X2 (port1_X2)
204.23.1.5
X1 (port1_X1)
192.168.1.99
Management
interface (mng)
FortiGate-5005-DIST
security system in
NAT/Route mode
Internet
Internal
network
PAYLOAD OPERATION
STATUS
IPM
X 1
X 2
1/2
3/4
D15/D16
C15/C16
1
2
3
4
5
6
7
8
9
10
11
12
D
13
14
15
16
D
1
2
3
4
5
6
7
8
9
10
11
12
C
13
14
15
16
C
10/100/1000 MBPS ETHERNET ACTIVITY
DATA
CONTROL
1
2
3
4
MANAGEMENT
COM 1
COM 2
X 1
X 2
SFP Gigabit
Fiber or Copper
1
3
4
2
Management
RJ-45 Serial
Extraction
Lever
IPM
Status
X1 X2 XFP 10 Gigabit
Fiber or Copper
Payload
Operation
Link/
Traffic
Extraction
Lever
Mounting
Knot
Mounting
Knot
Link/Traffic
D15
D16
C15
C16
Management
RJ-45 Ethernet
