Fortinet FortiGate 5001A User Manual Download

Page: 1 / 40

FortiGate-5001A Security System Guide

01-30000-83456-20081023

5001A

-SW

FortiGate-5001A

Security System Guide

A detailed guide to the FortiGate-5001A-DW and FortiGate-5001A-SW Security Systems. This

FortiGate-5001A

Security System Guide

describes FortiGate-5001A hardware features, how to install a FortiGate-5001A board in a

FortiGate-5000 series chassis, and how to configure the FortiGate-5001A security system for your network.

The most recent versions of this and all FortiGate-5000 series documents are available from the

FortiGate-5000

page of

the

Fortinet Technical Documentation

web site (

http://docs.forticare.com

Visit

http://support.fortinet.com

to register your FortiGate-5001A security system. By registering you can receive product

updates, technical support, and FortiGuard services.

FortiGate-5001A-DW

FortiGate-5001A-SW

Summary of Contents for FortiGate 5001A

Page 1: ... board in a FortiGate 5000 series chassis and how to configure the FortiGate 5001A security system for your network The most recent versions of this and all FortiGate 5000 series documents are available from the FortiGate 5000 page of the Fortinet Technical Documentation web site http docs forticare com Visit http support fortinet com to register your FortiGate 5001A security system By registering...

Page 2: ... to an available ESD connector such as the ESD sockets provided on FortiGate 5000 series chassis Make sure all FortiGate 5000 series components have reliable grounding Fortinet recommends direct connections to the building ground If you install a FortiGate 5000 series component in a closed or multi unit rack assembly the operating ambient temperature of the rack environment may be greater than roo...

Page 3: ...01A board 20 Installing and removing AMC modules 20 Inserting AMC slot filler panels 21 Inserting AMC modules 21 Removing AMC modules 22 Troubleshooting 23 FortiGate 5001A does not start up 23 FortiGate 5001A status LED is flashing during system operation 24 FortiGate AMC modules not detected by FortiGate 5001A board 24 Quick Configuration Guide 25 Registering your Fortinet product 25 Planning the...

Page 4: ...ng FortiGate 5001A firmware 33 FortiGate 5001A base backplane data communication 34 FortiGate 5001A fabric backplane data communication 36 Powering off the FortiGate 5001A board 37 For more information 39 Fortinet documentation 39 Fortinet Tools and Documentation CD 39 Fortinet Knowledge Center 39 Comments on Fortinet technical documentation 39 Customer service and technical support 39 Register yo...

Page 5: ...use to store log files and content archives Other than the double width and single width AMC openings the FortiGate 5001A DW and SW models have the same functionality and performance The FortiGate 5001A security system contains two front panel 1 gigabit ethernet interfaces two base backplane 1 gigabit interfaces and two fabric backplane 1 gigabit interfaces Use the front panel interfaces for conne...

Page 6: ...RJ 45 RS 232 serial console connection 2 USB connectors Mounting hardware LED status indicators Front panel LEDs and connectors From the FortiGate 5001A font panel you can view the status of the front panel LEDs to verify that the board is functioning normally You also connect the FortiGate 5001A board to your network through the front panel 10 100 1000 ethernet connectors The front panel also inc...

Page 7: ... ACC LED flashes green when the FortiGate 5001A board accesses the FortiOS flash disk The FortiOS flash disk stores the current FortiOS firmware build and configuration files The system accesses the flash disk when starting up during a firmware upgrade or when an administrator is using the CLI or GUI to change the FortiOS configuration Under normal operating conditions this LED flashes occasionall...

Page 8: ...e FortiSwitch 5003 board see the FortiSwitch 5003 System Guide For information about the FortiSwitch 5003A board see the FortiSwitch 5003A System Guide Fabric backplane communication The FortiGate 5001A fabric backplane interfaces can be used for data communication or HA heartbeat communication between FortiGate 5001A boards installed in the same or in different FortiGate 5000 chassis To support 1...

Page 9: ... For information about Fortinet NP2 processor acceleration see the Fortinet Hardware Acceleration Technical Note Follow the instructions in the FortiGate RTM XB2 System Guide to install the FortiGate RTM XB2 module AMC modules You can install one FortiGate AMC Double width Module ADM in the FortiGate 5001A DW front panel AMC double width opening For example The FortiGate ADM XB2 provides 2 NP2 acc...

Page 10: ...abit interfaces The FortiGate ASM S08 provides adds a removable hard disk that you can use to store log files and content archives Figure 5 FortiGate ASM FB4 ASM FB4 LINK ACT 1 2 3 4 LINK ACT LINK ACT LINK HS OOS PWR OT ACT Note You can operate a FortiGate 5001A board with both a FortiGate RTM XB2 module and a supported FortiGate AMC module installed at the same time ...

Page 11: ... a FortiGate 5001A board Removing a FortiGate 5001A board Resetting a FortiGate 5001A board Installing and removing AMC modules Troubleshooting Caution If you are installing a FortiGate RTM XB2 module you should install the FortiGate RTM XB2 module first before you install the FortiGate 5001A board to avoid possible damage Follow the instructions in the FortiGate RTM XB2 System Guide to install th...

Page 12: ...ou must change the SW11 switch setting as shown in Figure 7 Figure 7 FortiGate 5020 setting for SW11 standalone mode In all cases you should confirm that you have the correct SW11 setting before installing the board in a chassis Table 3 FortiGate 5001A SW11 settings for different chassis Chassis CorrectSW11 Setting Result of wrong jumper setting FortiGate 5140 or 5050 or any ACTA chassis with an o...

Page 13: ...oard and is accessible from the left side of the FortiGate 5001A board under the copper heat sink see Figure 8 Figure 8 Location of SW11 on the FortiGate 5001A board 4 If required change SW11 to the correct setting 5 Insert the FortiGate 5001A board into a chassis and verify that the board starts up and operates correctly For inserting instructions see Inserting a FortiGate 5001A board on page 15 ...

Page 14: ... 5001A boards are horizontal when inserted into a FortiGate 5050 chassis and vertical when inserted into a FortiGate 5140 chassis The inserting and removing procedures are the same in either case For clarity the descriptions in this document refer to the left top and right bottom mounting components Closed Open Alignment Pin Retention Screw Lock Handle Alignment Pin Retention Screw Lock Handle Han...

Page 15: ...o complete this procedure you need A FortiGate 5001A board with either the correct AMC slot filler panel or a FortiGate AMC module installed in the front panel AMC opening An ATCA chassis with an empty slot An electrostatic discharge ESD preventive wrist strap with connection cord Alignment Pin Retention Screw Lock AMC Slot Filler Handle Caution Do not carry the FortiGate 5001A board by holding th...

Page 16: ...ot in the chassis 7 Carefully guide the board into the chassis using the rails in the slot Insert the board by applying moderate force to the front faceplate not the handles to slide the board into the slot The board should glide smoothly into the chassis slot If you encounter any resistance while sliding the board in the board could be aligned incorrectly Pull the board back out and try inserting...

Page 17: ... LED flashes blue for a few seconds At the same time the STATUS LED flashes green the interface LEDs flash amber and the ACC LED starts flashing green After a few seconds the IPM LED goes out and the FortiGate 5001A firmware starts up During start up the STATUS LED may continue to flash green Once the board has started up and is operating correctly the front panel LEDs are lit as described in Tabl...

Page 18: ...rtiGate 5001A board installed An electrostatic discharge ESD preventive wrist strap with connection cord 1 Attach the ESD wrist strap to your wrist and to an available ESD socket or wrist strap terminal 2 Disconnect all cables from the FortiGate 5001A board including all network cables the console cable and any USB cables or keys Tighten Retention Screw Caution Do not carry the FortiGate 5001A boa...

Page 19: ...croswitch turns off all LEDs and ejects the board from the chassis slot 6 Pull the board about half way out 7 Turn both handles to their fully closed positions 8 Carefully slide the board completely out of the slot 9 Re attach the protective metal frame before shipping or storing the FortiGate 5001A board Loosen Retention Screw Caution To avoid damaging the lock make sure you squeeze the handles f...

Page 20: ...rformance and safety the AMC opening must contain a slot filler panel or a FortiGate AMC module Caution Because the FortiGate 5001A board does not support hot swapping AMC modules you must eject the FortiGate 5001A board from its chassis slot and completely open the handles before inserting or removing AMC modules or slot filler panels Table 6 FortiGate AMC module LEDs LED State Description HS Off...

Page 21: ...he slot filler panel Inserting AMC modules The following procedure describes how to install an AMC module into your FortiGate 5001A front panel AMC opening Insert the fiber transceivers into the module before inserting the module into the FortiGate unit For details on installing the transceivers see the QuickStart Guide for the AMC module To insert an AMC module into a FortiGate 5001A board Cautio...

Page 22: ...ide the module into the opening The module should glide smoothly into the opening If you encounter any resistance while sliding the module in the module could be aligned incorrectly Pull the module back out and try inserting it again 8 Press the latch on the module front panel to lock in the module 9 Insert the FortiGate 5001A board into a chassis slot Removing AMC modules Before removing an AMC m...

Page 23: ...sed and the FortiGate 5001A still does not start up the problem could be that the FortiGate 5001A cannot communicate with the chassis shelf manager This problem can only occur in an ATCA chassis that contains a shelf manager such as the FortiGate 5140 and FortiGate 5050 To correct this problem power down and then restart the chassis If you are operating a FortiGate 5000 series chassis you can powe...

Page 24: ...re metal surface on the chassis or frame 2 Remove the FortiGate 5001A board from the chassis slot See Removing a FortiGate 5001A board on page 18 You do not have to completely remove the FortiGate 5001A board from the slot however the board should be disconnected from power 3 With the FortiGate 5001A left top handle fully open pull the latch on the AMC module front panel to open the latch and pull...

Page 25: ... mode Configuring Transparent mode Upgrading FortiGate 5001A firmware FortiGate 5001A base backplane data communication Powering off the FortiGate 5001A board Registering your Fortinet product Register your Fortinet product to receive Fortinet customer services such as product updates and technical support You must also register your product for FortiGuard services such as FortiGuard Antivirus and...

Page 26: ...h the FortiGate 5001A security system until you add firewall policies In NAT Route mode firewall policies can operate in NAT mode or in Route mode In NAT mode the FortiGate firewall performs network address translation before IP packets are sent to the destination network In Route mode no translation takes place Figure 11 Example FortiGate 5001A board operating in NAT Route mode Transparent mode I...

Page 27: ...figuration tool You can use either the web based manager or the Command Line Interface CLI to configure the FortiGate board Web based manager The FortiGate 5001A web based manager is an easy to use management tool Use the web based manager to configure the FortiGate 5001A administrator password the interface addresses the default gateway and the DNS server addresses Requirements An Ethernet connec...

Page 28: ...twork you add an administrator password change the network interface IP addresses add DNS server IP addresses and if required configure basic routing Configuring NAT Route mode Use Table 8 to gather the information you need to customize NAT Route mode settings for the FortiGate 5001A security system You can use one table for each board to configure Table 7 FortiGate 5001A factory default settings ...

Page 29: ... configure interfaces 1 Go to System Network Interface 2 Select the edit icon for each interface to configure Table 8 FortiGate 5001A board NAT Route mode settings Admin Administrator Password port1 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port2 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ Default Route Device Name of the Interface connected to the external network ...

Page 30: ... that you recorded above 3 Set Gateway to the Default Gateway IP address that you added to Table 8 on page 29 4 Select OK Using the CLI to configure NAT Route mode 1 Use the serial cable supplied with your FortiGate 5001A board to connect the FortiGate Console port to the management computer serial port 2 Start a terminal emulation program HyperTerminal on the management computer Use these setting...

Page 31: ...b or switch as the computer you will use to configure the FortiGate board 2 Configure the management computer to be on the same subnet as the port1 interface of the FortiGate 5001A board To do this change the IP address of the management computer to 192 168 1 2 and the netmask to 255 255 255 0 3 To access the FortiGate web based manager start Internet Explorer and browse to https 192 168 1 99 reme...

Page 32: ...ry and Secondary DNS server IP addresses 1 Go to System Network Options 2 Enter the Primary and Secondary DNS IP addresses that you added to Table 9 on page 31 as required and select Apply Using the CLI to configure Transparent mode 1 Use the serial cable supplied with your FortiGate 5001A board to connect the FortiGate Console port to the management computer serial port 2 Start a terminal emulati...

Page 33: ...Under System Information Firmware Version select Update 5 Type the path and filename of the firmware image file or select Browse and locate the file 6 Select OK The FortiGate 5001A board uploads the firmware image file upgrades to the new firmware version restarts and displays the FortiGate login This process takes a few minutes 7 Log into the web based manager 8 Go to System Status and check the ...

Page 34: ...munication This section describes how to configure FortiGate 5001A boards for base backplane data communication Base backplane data communication is supported for FortiGate 5001A boards installed in FortiGate 5140 FortiGate 5050 and FortiGate 5020 chassis By default the base backplane interfaces are not enabled for data communication Once the base backplane interfaces are configured for data commu...

Page 35: ...te 5001A web based manager use the following steps to enable base backplane data communication 1 Go to System Network Interface 2 Select Show backplane interfaces The base1 and base2 backplane interfaces now appear in all Interface lists You can now configure the base backplane interfaces and add routes firewall policies and other configuration settings using these interfaces Figure 13 FortiGate 5...

Page 36: ...enabled for data communication Once the fabric backplane interfaces are configured for data communication you can operate and configure them in the same way as any FortiGate 5001A interfaces Although not recommended you can use fabric backplane interfaces for data communication and HA heartbeat communication at the same time For more details and configuration examples of FortiGate 5001A fabric bac...

Page 37: ...iSwitch 5003A board receives the heartbeat packets to verify that the FortiGate 5001A board is still active The FortiGate 5001A board sends 10 packets per second from each fabric interface The packets are type 255 bridge protocol data unit BPDU packets 1 Enter the following command to enable sending heartbeat packets config system global set fortiswitch heartbeat enable end Powering off the FortiG...

Page 38: ...FortiGate 5001A Security System Guide 38 01 30000 83456 20081023 Powering off the FortiGate 5001A board Quick Configuration Guide ...

Page 39: ...le from the Fortinet Knowledge Center The knowledge center contains troubleshooting and how to articles FAQs technical notes and more Visit the Fortinet Knowledge Center at http kc forticare com Comments on Fortinet technical documentation Please send information about any errors or omissions in this document or any Fortinet technical documentation to techdoc fortinet com Customer service and tech...

Page 40: ...Guard are registered trademarks and Dynamic Threat Prevention System DTPS APSecure FortiASIC FortiBIOS FortiBridge FortiClient FortiGate FortiGate Unified Threat Management System FortiGuard Antispam FortiGuard Antivirus FortiGuard Intrusion FortiGuard Web FortiLog FortiAnalyzer FortiManager FortiOS FortiPartner FortiProtect FortiReporter FortiResponse FortiShield and FortiVoIP are trademarks of F...

Search results

Summary of Contents for FortiGate 5001A

Reviews:

Related manuals for FortiGate 5001A

Brands by name

Popular brands

Fortinet FortiGate 5001A, User Manual

Search results

Summary of Contents for FortiGate 5001A

Reviews:

Related manuals for FortiGate 5001A

Brands by name

Popular brands