Fortinet FortiGate-5001D Скачать руководство пользователя страница 3

Страница: 3 / 38

FortiGate-5001D Security System Guide
01-500-0242101-20151109

http://docs.fortinet.com/

FortiGate-5001D

Contents

Cautions and Warnings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Environmental specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Safety. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

FortiGate-5001D security system

Front panel components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Connectors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

NMI switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Base backplane communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Fabric backplane communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Accelerated packet forwarding and policy enforcement (NP6 network processors) . 10

Accelerated IPS, SSL VPN, and IPsec VPN (CP8 content processors) . . . . . . . . 10

Splitting the FortiGate-5001D front panel port1 and port2 interfaces . . . . . . . . . 11

Hardware installation

Installing QSFP+ and SFP+ transceivers . . . . . . . . . . . . . . . . . . . . . . . . 13

Changing FortiGate-5001D SW6 switch settings . . . . . . . . . . . . . . . . . . . 14

FortiGate-5001D mounting components . . . . . . . . . . . . . . . . . . . . . . . . 16

Inserting a FortiGate-5001D board . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Shutting down and removing a FortiGate-5001D board . . . . . . . . . . . . . . . . 19

Power cycling a FortiGate-5001D board . . . . . . . . . . . . . . . . . . . . . . . . 21

Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

FortiGate-5001D board does not start up . . . . . . . . . . . . . . . . . . . . . 22

FortiGate-5001D STA (status) LED is flashing during system operation. . . . . . 22

The FortiGate-5001D can’t join a FortiController-5903 SALB cluster and other fabric
backplane communication problems . . . . . . . . . . . . . . . . . . . . . . . 23

Quick Configuration Guide

Registering your Fortinet product . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Planning the configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

NAT/Route mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Transparent mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Choosing the configuration tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Web-based manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Command Line Interface (CLI) . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Factory default settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Configuring NAT/Route mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Using the web-based manager to configure NAT/Route mode . . . . . . . . . . 29

Содержание FortiGate-5001D

Страница 1: ...cent versions of this and all FortiGate 5000 series documents are available from the FortiGate 5000 page of the Fortinet Technical Documentation web site http docs fortinet com Visit https support for...

Страница 2: ...includes supply connections e g power strips not only direct connections to the branch circuit Mise la terre Assurez vous que tout l quipement est mis la terre Ceci comprend les connexions d alimentat...

Страница 3: ...3 Changing FortiGate 5001D SW6 switch settings 14 FortiGate 5001D mounting components 16 Inserting a FortiGate 5001D board 17 Shutting down and removing a FortiGate 5001D board 19 Power cycling a Fort...

Страница 4: ...nication 33 FortiGate 5001D fabric backplane data communication 35 For more information 36 Training Services 36 Technical Documentation 36 Comments on Fortinet technical documentation 36 Customer serv...

Страница 5: ...aces Use the front panel interfaces for connections to your networks and the backplane interfaces for communication across the ATCA chassis backplane The FortiGate 5001D also includes two front panel...

Страница 6: ...fic on the interfaces port1 port2 port3 port4 fabirc1 and fabric2 Four CP8 content processors that accelerate IPS SSL VPN and IPsec VPN Internal 200 GByte SSD for storing log messages DLP archives his...

Страница 7: ...and the connected equipment has power Flashing Green Network activity at the interface Off No link is established Fabric 1 and 2 Off Fabric backplane interface 1 or 2 fabric1 or fabric2 is connected...

Страница 8: ...bps IPM Blue The FortiGate 5001D board is ready to be hot swapped removed from the chassis If the IPM light is blue and no other LEDs are lit the FortiGate 5001D board has lost power Flashing Blue The...

Страница 9: ...slots 1 and 2 For information about FortiSwitch and FortiController 5000 series boards see the FortiGate 5000 page of the Fortinet Technical Documentation website Fabric backplane communication The Fo...

Страница 10: ...g load is removed from the CPU The NP6 processor can also handle some CPU intensive tasks like IPsec VPN encryption decryption Because of the integrated switch fabric all sessions are fast pathed and...

Страница 11: ...re CRT support Primarily checking for RSA key generation Handshake accelerator with automatic key material generation Random Number generator compliance with ANSI X9 31 Sub public key engine PKCE to s...

Страница 12: ...Splitting the FortiGate 5001D front panel port1 and port2 interfaces FortiGate 5001D security system FortiGate 5001D Security System Guide 12 01 500 0242101 20151109 http docs fortinet com...

Страница 13: ...You can install the QSFP transceivers before or after inserting the FortiGate 5001D board into a chassis You must install SR SFP transceivers for normal operation of the FortiGate 5001D front panel p...

Страница 14: ...es chassis The top of the FortiGate 5001D board is covered with a metal panel The printed circuit board is under the metal panel SW6 is located on the printed circuit board and is accessible from the...

Страница 15: ...electrostatic discharge ESD preventive wrist strap with connection cord Table 5 FortiGate 5001D SW6 settings Chassis Correct SW6 Setting Result of wrong jumper setting FortiGate 5140B or 5060 or a ATC...

Страница 16: ...o place in the slot When locked into place and positioned correctly the board front panel is flush with the chassis front panel The board is also connected to the chassis backplane To position the boa...

Страница 17: ...are hot swappable The procedure for inserting a FortiGate 5001D board into a chassis slot is the same whether or not the chassis is powered on To insert a FortiGate 5001D board into a chassis slot To...

Страница 18: ...ould lock into place As the handles closed power is supplied to the board If the chassis is powered on the IPM LED starts flashing blue If the board is aligned correctly inserted all the way into the...

Страница 19: ...ate 5001D board For example From the web based manager go to System Status and from the Unit Operation widget select Shutdown and then select OK From the CLI enter execute shutdown 2 Attach the ESD wr...

Страница 20: ...open the handles with moderate pressure to eject the board from the chassis Pivoting the handles turns off the microswitch turns off all LEDs and ejects the board from the chassis slot 9 Pull the boar...

Страница 21: ...e 5001D board installed An electrostatic discharge ESD preventive wrist strap with connection cord 1 Shut down the operating system running on the FortiGate 5001D board For example From the web based...

Страница 22: ...s If you are operating a FortiGate 5000 series chassis you can power down and then restart the chassis without removing FortiGate 5000 series components All chassis Firmware problem If the FortiGate 5...

Страница 23: ...in some cases you have to set these interface speeds to 40000full if the cluster is installed in a FortiGate 5144C chassis or 10000full if the cluster is installed in a chassis with a 10 gbyte backpl...

Страница 24: ...Troubleshooting Hardware installation FortiGate 5001D Security System Guide 24 01 500 0242101 20151109 http docs fortinet com...

Страница 25: ...ct to receive Fortinet customer services such as product updates and customer support You must also register your product for FortiGuard services such as FortiGuard Antivirus and Intrusion Prevention...

Страница 26: ...oute mode Transparent mode In Transparent mode the FortiGate 5001D security system is invisible to the network All of the FortiGate 5001D interfaces are connected to different segments of the same net...

Страница 27: ...et connection between the FortiGate 5001D board and management computer Internet Explorer 6 0 or higher on the management computer Command Line Interface CLI The CLI is a full featured management tool...

Страница 28: ...1 IP Netmask 192 168 1 99 24 mgmt2 IP Netmask 192 168 100 99 24 Default route Gateway 192 168 100 1 Device mgmt2 Primary DNS Server 208 91 112 53 Secondary DNS Server 208 91 112 52 At any time during...

Страница 29: ...o System Network Interface and edit each interface to configure 2 Set the addressing mode for the interface See the online help for information For manual addressing enter the IP address and netmask f...

Страница 30: ...edit admin set password password end 5 Configure the mgmt1 port1 and port1 interfaces to the settings that you added to Table 8 on page 28 config system interface edit mgmt1 set ip intf_ip netmask_ip...

Страница 31: ...System Dashboard Status and select the Change link beside Operation Mode NAT 2 Set Operation Mode to Transparent 3 Set the Management IP Netmask to the settings that you added to Table 9 on page 31 4...

Страница 32: ...twice no password required 4 Change from NAT Route mode to Transparent mode Configure the Management IP address and default gateway to the settings that you added to Table 9 on page 31 config system s...

Страница 33: ...TFTP server You can use the following command to ping the computer running the TFTP server For example if the IP address of the TFTP server is 192 168 1 168 execute ping 192 168 1 168 5 Enter the foll...

Страница 34: ...ons Guide and the FortiSwitch 5000 Series CLI Reference To enable base backplane data communication from the FortiGate 5001D web based manager From the FortiGate 5001D web based manager use the follow...

Страница 35: ...stem Network Interface 2 Select Show backplane interfaces The fabric1 fabric2 base1 and base2 backplane interfaces now appear in all Interface lists You can now configure the fabric backplane interfac...

Страница 36: ...ticles examples FAQs technical notes and more Visit the Fortinet Knowledge Base at http kb fortinet com Comments on Fortinet technical documentation Send information about any errors or omissions in t...

Страница 37: ...ortinet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warrants that the identified product will perform according to certain expressly identifi...

Страница 38: ...residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense WARNING Any changes or modifications to this product no...

Результаты поиска

Содержание FortiGate-5001D

Отзывы:

Бренды по названию

Популярные бренды

Fortinet FortiGate-5001D, Руководство пользователя

Результаты поиска

Содержание FortiGate-5001D

Отзывы:

Бренды по названию

Популярные бренды