Fortinet FortiGate-7000, Руководство пользователя

Страница: 4 / 87

Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors) 30
Getting started with FortiGate-7000 31
Managing individual modules 32
Managing individual modules from the CLI 33
Connecting to module CLIs using the management module 33
Connecting to the FortiOS CLI of the FIM module in slot 1 34
Default VDOM configuration 35
Default management VDOM 35
Firmware upgrades 35
Restarting the FortiGate-7000 35
Load balancing 36
Traffic that cannot be load balanced 36
Recommended configuration for traffic that cannot be load balanced 37
Configuration synchronization 39
Failover in a standalone FortiGate-7000 39
Replacing a failed FPM or FIM module 39
Replacing a failed module in a standalone FortiGate-7000 chassis 39
Replacing a failed module in a FortiGate-7000 chassis in an HA cluster 40
Installing firmware on an FIM or FPM module from the BIOS using a TFTP server 41
Uploading firmware from a TFTP server to an FIM module 41
Uploading firmware from a TFTP server to an FPM module 43
Operating a FortiGate-7000 45
Failover in a standalone FortiGate-7000 45
Replacing a failed FPM or FIM module 45
Replacing a failed module in a standalone FortiGate-7000 chassis 45
Replacing a failed module in a FortiGate-7000 chassis in an HA cluster 46
Installing firmware on an FIM or FPM module from the BIOS using a TFTP server 46
Uploading firmware from a TFTP server to an FIM module 47
Uploading firmware from a TFTP server to an FPM module 48
IPsec VPN 51
Adding source and destination subnets to IPsec VPN phase 2 configurations 51
Example basic IPsec VPN Phase 2 configuration 51
Example multiple subnet IPsec VPN Phase 2 configuration 52
Configuring the FortiGate-7000 as a dialup IPsec VPN server 53
Example dialup IPsec VPN configuration 53
Troubleshooting 54
High Availability 57
Before you begin configuring HA 57
Connect the M1 and M2 interfaces for HA heartbeat communication 58
HA configuration 60
Setting up HA on the FIM interface modules in the first FortiGate-7000 (chassis 1) 60
HA management configuration 62