Fortinet Fortigate-5000 series Скачать руководство пользователя страница 2

Страница: 2 / 94

FORTINET DOCUMENT LIBRARY

https://docs.fortinet.com

FORTINET VIDEO GUIDE

https://video.fortinet.com

FORTINET BLOG

https://blog.fortinet.com

CUSTOMER SERVICE & SUPPORT

https://support.fortinet.com

FORTINET TRAINING & CERTIFICATION PROGRAM

https://www.fortinet.com/support-and-training/training.html

NSE INSTITUTE

https://training.fortinet.com

FORTIGUARD CENTER

https://fortiguard.com/

END USER LICENSE AGREEMENT

https://www.fortinet.com/doc/legal/EULA.pdf

FEEDBACK

Email:

[email protected]

13 April, 2020

FortiGate-5144C 6.2.3 Chassis Guide

01-623-246510-20200413

Содержание Fortigate-5000 series

Страница 1: ...FortiGate 5144C Chassis Guide FortiGate 5000 Series...

Страница 2: ...t fortinet com FORTINET TRAINING CERTIFICATION PROGRAM https www fortinet com support and training training html NSE INSTITUTE https training fortinet com FORTIGUARD CENTER https fortiguard com END US...

Страница 3: ...boards and RTM modules 23 Installing FortiController or FortiSwitch boards 24 Power connection and configuration 25 FortiGate 5144C chassis power level requirements 25 Connecting the FortiGate 5144C c...

Страница 4: ...P address and default gateway 43 Sensor types 44 CLI command Reference 44 activate deactivate 44 alarm 45 board 46 clia 47 exit quit 47 fans 47 fru 48 fruinfo 48 getlanconfig 49 getthreshold threshold...

Страница 5: ...tices cautions and warnings 89 Federal Communication Commission FCC USA 89 Industry Canada Equipment Standard for Digital Equipment ICES Canada 89 Voluntary Control Council for Interference VCCI Japan...

Страница 6: ...Change log Fortinet Technologies Inc Change log Date Change description April 13 2020 New version FortiGate 5144C Chassis Guide 6...

Страница 7: ...ortiGate 5144C fabric and base backplane switching and to support FGCP clustering l Two FortiController 5103B boards can be installed in slots 1 and 2 to create an SLBC for FortiGate 5001D or older wo...

Страница 8: ...14 FortiGate 5001D boards slots 3 5 7 9 11 and 13 FortiController 5903C boards slots 1 and 2 ESD socket Slot numbers Fan Tray 1 front Fan Tray 2 front Primary Shelf Manager Secondary Shelf Manager Ai...

Страница 9: ...e covered by RTM air baffle slot covers The back panel includes the FortiGate 5144C chassis ground connector that must be connected to ground Example FortiGate 5144C chassis back panel Chassis ground...

Страница 10: ...RJ 45 RS 232 console cable l One RJ 45 Ethernet cable l Rack mount template labeled metal strips showing how to line up cage nuts with rack holes when installing the chassis l 5 spare nuts and washer...

Страница 11: ...3 919 FortiSwitch 5003B Front Panel 8 x 10 Gbps Fabric 10 Gbps Backplane switching FGCP HA and extended load balancing ELBC Max 180 Ave 150 614 FortiController 5103B Front Panel 8 x 10 Gbps or 8 x 1 G...

Страница 12: ...sical description of the FortiGate 5144C chassis The FortiGate 5144C chassis is a 14U chassis that can be installed in a standard 19 inch rack The following table describes the physical characteristic...

Страница 13: ...ch other and if the active shelf manager stops communicating for example because it has failed or is restarting the backup shelf manager becomes the active shelf manager When the failed or restarting...

Страница 14: ...panel Ethernet interface ETH0 or to the B1 or B2 interface of a hub or switch board installed in chassis slot 1 or 2 If your chassis has two shelf managers one in the primary shelf manager slot and o...

Страница 15: ...SH1 of one chassis slot and ETH1 connects to SH2 of the other chassis slot Shelf Manager Ethernet cross connections and connections to chassis slots Changing the shelf manager switch configuration to...

Страница 16: ...e front panel Ethernet interface Entering these commands except for get_EEPROM_config reboots the shelf manager If your chassis has two shelf managers if you enter one of these commands to change the...

Страница 17: ...chassis MINOR Minor Alarm Amber Minor alarm detected in chassis POWER OK Green Input power to the chassis is within limits FortiGate 5144Cshelf manager Buttons Button Description H S Hot Swap Start th...

Страница 18: ...up and running the shelf manager reduces cooling fan speeds to maintain an optimum temperature in the chassis If shelf managers are not installed or not operating correctly the FortiGate 5144C chassi...

Страница 19: ...rm connector pin assignment Pin Descrption 1 MinorReset 2 MinorReset 3 MajorReset 4 MajorReset 5 CriticalAlarm NO 6 Critical Alarm NC 7 Critical Alarm COM 8 Minor Alarm NO 9 Minor Alarm NCT 10 Minor A...

Страница 20: ...ews Cooling fans cooling air flow and minimum clearance The FortiGate 5144C chassis contains four hot swappable cooling fans fan 1 to fan 4 installed in the fan cabinet at the top of the chassis Two f...

Страница 21: ...is enough clearance for effective cooling air flow The following diagram shows the cooling air flow through the chassis and the locations of the air filter and cooling fans Make sure the cooling air i...

Страница 22: ...chassis can be mounted in a 4 post rack using the rack mount brackets in the standard front mounting position as they are installed the chassis when it is shipped If you choose to mount the chassis in...

Страница 23: ...rtiSwitch 5000 series boards into the front of the FortiGate 5144C chassis and RTM modules into the back of the chassis Arrange the boards and modules in slots as required for your configuration Forti...

Страница 24: ...ntation supplied with the board or module Installing FortiController or FortiSwitch boards FortiController and FortiSwitch boards are always installed in chassis in slots 1 or 2 to provide fabric and...

Страница 25: ...ould only be used to connect the FortiGate 5144C PEMs to a FortiGate 5053B power convertor shelf if purchased with your FortiGate 5144C chassis The double hole lugs to be connected to the FortiGate 51...

Страница 26: ...undant power you can also connect the PEMs in Feed B to a 48VDC 60VDC power source Each PEM includes a Reverse Voltage LED that lights if you have reversed the polarity when connecting power FortiGate...

Страница 27: ...e system power to remove a PEM You can add remove or replace a second PEM without interrupting FortiGate 5144C operation Crimping guidelines To connect the PEMs to data center power you should use 8 A...

Страница 28: ...Voltage LEDs Terminal Cover Terminal Cover Fuse LEDs channels 5 to 8 Active OOS and H S LEDs FortiGate 5144C PEM LEDs LED State Description ACTIVE Solid Green Normal operation OOS Out of Service Off N...

Страница 29: ...que of more than 3 8 Nm 33 62 lbf in 6 Connect red RTN power wires from your location s RTN terminal to the connectors on the PEMs labeled using double hole lugs Install each double hole lug verticall...

Страница 30: ...helf and PSU 5000B power supplies If DC power is not available at your location you can use the FortiGate 5053B 1U 19 inch rack mount power supply shelf with PSU 5000B hot swappable power supplies to...

Страница 31: ...de 2725W of DC power and a fully populated FortiGate 5053B power supply shelf can provide up to 10 9KW of DC power and 8175W of DC power with 3 1 redundancy with an output voltage of 54 VDC l When con...

Страница 32: ...require one FortiGate 5053B power supply shelf connected to power feed A PEM 1 and PEM 2 The power supply shelf would include three PSU 5000B units and produce a total of 8175W You can add a fourth p...

Страница 33: ...elf 4 Connect four black 48V power wires to the connectors labeled NEG on the back of the FortiGate 5053B power supply shelf using the double hole lug Install each double hole lug either horizontally...

Страница 34: ...AC connectors 1 and 2 to AC power If your power supply shelf contains four power supplies connect all four AC in connectors to AC power Connecting Feed A PEM1 and PEM2 or Feed B PEM3 and PEM4 a Forti...

Страница 35: ...chassis power If you are using a power supply shelf connect the power supply shelf to AC power and verify that it is operating correctly If you are using local DC power turn on the power to the chassi...

Страница 36: ...lligent management controllers of the shelf with boards and with the Shelf Manager itself The CLI is an IPMI based set of commands The Intelligent Platform Management Interface specification IPMI spec...

Страница 37: ...e prompt Connecting to the shelf manager CLI from an Ethernet network You can connect to the shelf manager CLI by connecting the shelf manager front panel front panel Ethernet interface to a network I...

Страница 38: ...elf manager root account password becomes lost you can reset the password to its factory default using the password_reset U Boot variable Setting this variable to y and rebooting the shelf manager rem...

Страница 39: ...er_supply N valid in 2 x systems only fan_tray N PwrReorder addr1 fru_id1 before after addr2 fru_id2 Using CLIA interactive mode You can also enter clia without parameters to enter interactive mode In...

Страница 40: ...with an ID of FRU 0 However if a FortiGate 5001A board is installed in a slot with an AMC module this slot has two FRUs FRU 0 and FRU 1 For example a FortiGate 5001A board with an AMC module is instal...

Страница 41: ...C ATCA logical slot 13 9A 4D ATCA logical slot 14 9C 4E Change IP address of the primary Shelf Manager The default IP address of the primary shelf manager is 192 168 0 2 Use the following command to c...

Страница 42: ...sensor t Display sensor data for a FRU clia sensordata IPMB_address sensor_number Display the FRU information for a FRU clia fruinfo IPMB_address FRU_id Change the speed for a fan tray clia setfanlev...

Страница 43: ...Port Number 0x026f Secondary RMCP Port Number 0x0298 BMC generated ARP Control 0x02 Enable BMC generated ARP Response Gratuitous ARP Interval 2 0 seconds Default Gateway Address 192 168 0 1 Default G...

Страница 44: ...sor types and monitored entities are represented using numeric codes in hexadecimal defined in the IPMI specification Example of sensor type l 01 for temperature sensor l 02 for voltage sensor l C0 FF...

Страница 45: ...conf file contains the following lines ALLOW_CLEARING_CRITICAL_ALARM This parameter of boolean type enables the ability to clear the critical alarm condition without the alarm cutoff button Default i...

Страница 46: ...ddressable using the IPMB address FRU device ID pair Viewing information about a board Enter the following command to view information about a particular board for example the board in physical slot 1...

Страница 47: ...mode fans clia fans v IPMB_address FRU_device_ID Display information about the specified fan FRU If FRU_device_ID is omitted the command displays information about all fan FRUs controlled by the IPM...

Страница 48: ...or a specific FRU Enter this command with an IPMB address that refers to a physical slot to display information similar to that displayed by the clia board command see board on page 46 For example to...

Страница 49: ...on for a configuration parameter The following table lists some commonly used parameter_names and parameter_ numbers Displaying all configuration parameters for a channel If you do not include a param...

Страница 50: ...Mask 255 255 255 0 The following command displays the default gateway IP address associated with channel 1 clia getlanconfig 1 dft_gw_ip Pigeon Point Shelf Manager Command Line Interpreter Default Gat...

Страница 51: ...1 754200 Volts 90 LUN 0 Sensor 6 5 0V Type Threshold 0x01 Voltage 0x02 Lower Non Critical Threshold Raw Data 0xbe Processed data 4 655000 Volts Lower Critical Threshold Raw Data 0xb8 Processed data 4...

Страница 52: ...e Threshold Raw Data 0x6c Processed data 1 058400 Volts Upper Non Critical Threshold Raw Data 0x80 Processed data 1 254400 Volts Upper Critical Threshold Raw Data 0x85 Processed data 1 303400 Volts Up...

Страница 53: ...ds clia help Pigeon Point Shelf Manager Command Line Interpreter Command Line Interface command set Parameters are case insensitive In general IPMB address is hexadecimal ALWAYS All other numbers may...

Страница 54: ...arameter number parameter name getlanconfig channel number parameter number parameter name getpefconfig parameter name parameter number set selector getsensoreventenable addr lun sensor_id sensor name...

Страница 55: ...ssertion mask event_data b1 b2 b3 event_data_no_offset b1 b2 b3 setsensoreventenable addr lun sensor_id sensor name global assertion_events deassertion_events setsolconf a Displaying more information...

Страница 56: ...the contents of the SEL on the specified IPM Controller at IPMB address 20h by default The optional record count indicates how many records from the record number starting entry in the SEL are displa...

Страница 57: ...ate a problem last hex number is not 0x88 for the IPMB link sensor F1 on slot 9 and 10 The problem has cleared quickly because the last two lines show last hex number is 0x88 0x0219 Event at Aug 6 10...

Страница 58: ...ollowing information is displayed for each sensor l IPMB address of the owning IPM controller l Sensor number sensor name device ID string from the SDR and the LUN by which the sensor can be accessed...

Страница 59: ...qualification and the target controller exposes sensor 3 on LUN 1 and another sensor 3 on LUN 3 the command is applied to the sensor 3 on LUN 1 This command can also be issued on the backup Shelf Mana...

Страница 60: ...agement Control Protocol RMCP interface and state of the backup Shelf Manager if the Shelf Manager being queried is the active one The command output includes a Ready For Operation flag that shows Yes...

Страница 61: ...nclude force to force the switchover without any negotiation The backup shelf manager immediately becomes the active shelf manager and the active shelf manager reboots and starts up as the backup shel...

Страница 62: ...l user_name is a user name truncated to the 16 characters without notice l channel_access_flags is the first byte of the SetUserInfo commands only bits 4 5 6 are meaningful l bit 6 enables IPMI messa...

Страница 63: ...xample enter the following command to disable user account 34 clia user enable 34 0 Changing a user account user name Use the following command syntax to change a user account user name clia user name...

Страница 64: ...configure the shelf manager to send SNMP traps when a component of a chassis or a board in a chassis fails or encounters a problem for example a temperature sensor exceeds its range This section descr...

Страница 65: ...can create multiple alert policies and configure multiple destinations for each policy This section describes how to create one alert policy called alert policy number 5 The alert policy number is us...

Страница 66: ...use the following command to set the community name to MyCommunity clia setlanconfig 1 16 MyCommunity 3 You can enter the following command to confirm that the community name has been changed clia ge...

Страница 67: ...selecting particluar events In this example they are all set to 0 which means they have no effect Add filter entry 1 for the FortiSwitch board in logical slot 1 The filter entry uses filter configurat...

Страница 68: ...n Process Last State Change Cause Normal State Change 0x0 Device ID String PEMA1 Enter the following command to deactivate this PEM clia deactivate 20 7 Enter the following command to display the syst...

Страница 69: ...ternet 192 168 181 66 192 168 181 66 generic trap enterpriseSpecific 6 specific trap 15757062 time stamp 1975765011 variable bindings 1 item Item name 1 3 6 1 4 1 3183 1 1 1 SNMPv2 SMI enterprises 318...

Страница 70: ...4 state changes and 4 SNMP traps sent Setting up SNMP polling for the shelf manager To allow an SNMP manager to poll monitor the shelf manager you need to change the community strings in the shelf man...

Страница 71: ...ents and this section describes how to read and interpret the SEL Before you begin Before going further in this section you should log into your active shelf manager and enter the following commands T...

Страница 72: ...ay 0 IPMC 10 Sensor 7 l RPM of fan 2 of 2 in Fan Tray 2 IPMC 10 Sensor 14 l Physical presence of Fan Tray 2 IPMC 20 Sensor 14 l Chassis center exhaust temperature IPMC 20 sensor 120 l Slot 1 FG 5005FA...

Страница 73: ...oing wrong but also when they return to normal In this case asserted is the key point meaning that the sensor has observed that the device has gone outside the bounds or thresholds that have been set...

Страница 74: ...e M7 Communication Lost Previous M4 Active Last State Change Cause Unknown 0xf 88 Entity 0xa0 0x60 Maximum FRU device ID 0x00 Hot Swap State M7 Communication Lost Previous M4 Active Last State Change...

Страница 75: ...ause Normal State Change 0x0 Device ID String ShelfFRU1 20 FRU 2 Entity 0xf2 0x61 Hot Swap State M4 Active Previous M3 Activation In Process Last State Change Cause Normal State Change 0x0 Device ID S...

Страница 76: ...Cause Normal State Change 0x0 Device ID String PEMB2 Example sensor log output clia sensordata Pigeon Point Shelf Manager Command Line Interpreter 10 LUN 0 Sensor 0 FRU 0 HOT_SWAP Type Discrete 0x6f H...

Страница 77: ...FRU 0 10 LUN 0 Sensor 237 I2C Switch Ch4 i Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0xf0 96 FRU 0 10 LUN 0 Sensor 240 Shelf BP ID Type Discrete 0x6f OEM reserved 0xd6 Belongs to enti...

Страница 78: ...HOT_SWAP Type Discrete 0x6f Hot Swap 0xf0 Belongs to entity 0x15 98 FRU 9 20 LUN 0 Sensor 11 FRU 10 HOT_SWAP Type Discrete 0x6f Hot Swap 0xf0 Belongs to entity 0x15 99 FRU 10 20 LUN 0 Sensor 12 IPMB...

Страница 79: ...IPMB Link 0xf1 Belongs to entity 0xf0 1 FRU 0 20 LUN 0 Sensor 25 IPMB LINK 2 Type Discrete 0x6f IPMB Link 0xf1 Belongs to entity 0xf0 1 FRU 0 20 LUN 0 Sensor 26 IPMB LINK 15 Type Discrete 0x6f IPMB L...

Страница 80: ...1 Feed1 Fuse P Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 LUN 1 Sensor 145 FT1 Feed2 Fuse P Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 L...

Страница 81: ...e 0x6f Entity Presence 0x25 Belongs to entity 0x15 96 FRU 7 20 LUN 1 Sensor 163 FT3 Feed2 Power Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 98 FRU 5 20 LUN 0 Sensor 163 PEM A1 FuseF...

Страница 82: ...pe Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 99 FRU 6 20 LUN 1 Sensor 174 FT4 Feed1 Fuse P Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 99 FRU 6 20 LUN 1 Sensor 175 F...

Страница 83: ...Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x15 97 FRU 8 20 LUN 0 Sensor 199 PEM A2 Presence Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x15 97 FRU 8 20 LUN 0 Sensor 200 PEM...

Страница 84: ...crete 0x6f Entity Presence 0x25 Belongs to entity 0x15 99 FRU 10 20 LUN 1 Sensor 221 PEM A1 Presence Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0xf0 1 FRU 0 20 LUN 0 Sensor 222 PEM B2 F...

Страница 85: ...e Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x15 99 FRU 10 20 LUN 0 Sensor 232 PEM B2 Rev In5_8 Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x15 99 FRU 10 20 LUN 1 Sensor 232...

Страница 86: ...pe Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 LUN 0 Sensor 242 FAN3 RPM Type Threshold 0x01 Fan 0x04 Belongs to entity 0x1e 98 FRU 5 20 LUN 3 Sensor 242 FT3 INIT Type Discre...

Страница 87: ...e Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 LUN 3 Sensor 248 FT3 COMM LOST Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 98 FRU 5 20 LUN 1 Sensor 249 FT2 C...

Страница 88: ...0x6f asserted HotSwap FRU 0 M3 M4 Cause 0x0 Fan 2 in middle Fan Tray is spinning slower than required 0x018D Event at Jan 1 00 02 15 1970 from 0x10 0 0 sensor 0x04 10 event 0x1 asserted Upper Critica...

Страница 89: ...cations Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense WARNING Any cha...

Страница 90: ...temp rature ambiante maximale du fabricant Tma Air flow For rack installation make sure that the amount of air flow required for safe operation of the equipment is not compromised For free standing in...

Страница 91: ...eur de la baie doit tre effectu e de fa on viter toute situation dangereuse li e une installation non conforme Ne placez pas d objets lourds sur l appareil celui ci n tant pas con u pour soutenir un p...

Страница 92: ...WG Seul un technicien qualifi est autoris effectuer le raccordement Caution Double pole neutral fusing Attention fusion bipolaire neutre Turning off all power switches may not turn off all power to th...

Страница 93: ...r 5000 Series Boards including Shelf Manager of the equipment or subassembly is suitable for connection to intrabuilding or unexposed wiring or cabling only The intrabuilding port s of the equipment o...

Страница 94: ...inet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warrants that the identified product will perform according to certain expressly identified...

Результаты поиска

Содержание Fortigate-5000 series

Отзывы:

Похожие инструкции для Fortigate-5000 series

Бренды по названию

Популярные бренды

Fortinet Fortigate-5000 series, Руководство пользователя

Результаты поиска

Содержание Fortigate-5000 series

Отзывы:

Похожие инструкции для Fortigate-5000 series

Бренды по названию

Популярные бренды