Fortinet FortiGate FortiGate-5001SX Скачать руководство пользователя страница 1

Страница: 1 / 36

www.fortinet.com

FortiGate-5001SX Security System Guide

01-30000-0380-20070201

FortiGate-5001SX

S e c u r i t y S y s t e m G u i d e

PWR

STA IPM

CONSOLE

USB

ACC

A detailed guide to the features and capabilities FortiGate-5001SX Security System. This

FortiGate-5001SX Security

System Guide

describes FortiGate-5001SX hardware features, how to install the FortiGate-5001SX module in a

FortiGate-5000 series chassis, how to configure the FortiGate-5001SX security system for your network, and
contains troubleshooting information to help you diagnose and fix problems.

The most recent versions of this and all FortiGate-5000 series documents are available from the

FortiGate-5000

page of the

Fortinet Technical Documentation

web site (

http://docs.forticare.com

Visit

http://support.fortinet.com

to register your FortiGate-5001SX system. By registering you can receive product

updates, technical support, and FortiGuard services.

Содержание FortiGate FortiGate-5001SX

Страница 1: ...rtiGate 5001SX module in a FortiGate 5000 series chassis how to configure the FortiGate 5001SX security system for your network and contains troubleshooting information to help you diagnose and fix problems The most recent versions of this and all FortiGate 5000 series documents are available from the FortiGate 5000 page of the Fortinet Technical Documentation web site http docs forticare com Visi...

Страница 2: ...00 series component in a closed or multi unit rack assembly the operating ambient temperature of the rack environment may be greater than room ambient Make sure the operating ambient temperature does not exceed the manufacturer s maximum rated ambient temperature Installing FortiGate 5000 series equipment in a rack should be such that the amount of airflow required for safe operation of the equipm...

Страница 3: ...9 FortiGate 5001SX does not startup 19 FortiGate 5001SX cannot display chassis information 21 Quick Configuration Guide 23 Registering your Fortinet product 23 Planning the configuration 23 NAT Route mode 24 Transparent mode 24 Choosing the configuration tool 25 Web based manager 25 Command Line Interface CLI 26 Factory default settings 26 Configuring NAT Route mode 27 Using the web based manager ...

Страница 4: ...0070201 Contents For more information 35 Fortinet documentation 35 Fortinet Tools and Documentation CD 35 Fortinet Knowledge Center 35 Comments on Fortinet technical documentation 35 Customer service and technical support 35 Register your Fortinet product 35 ...

Страница 5: ... FortiGate 5000 chassis monitoring Figure 1 FortiGate 5001SX front panel The FortiGate 5001SX module includes the following features A total of eight front panel gigabit interfaces Four gigabit interfaces that can accept Small Formfactor Pluggable SFP fiber or copper transceivers interfaces 1 2 3 and 4 Four 10 100 1000Base T gigabit copper network interfaces interfaces 5 6 7 and 8 Two base backpla...

Страница 6: ...SX module is powered on ACC Off or Flashing red The ACC LED flashes red when the FortiGate 5001SX module accesses the FortiOS flash disk The FortiOS flash disk stores the current FortiOS firmware build and configuration files The system accesses the flash disk when starting up during a firmware upgrade or when an administrator is using the CLI or GUI to change the FortiOS configuration Under norma...

Страница 7: ...mation about base backplane communication in FortiGate 5140 and FortiGate 5050 chassis see the FortiGate 5000 Base Backplane Communication Guide For information about the FortiSwitch 5003 module see the FortiSwitch 5003 Guide 5 6 7 8 Link LED Green The correct cable is inserted into this interface and the connected equipment has power Flashing Network activity at this interface Speed LED Green The...

Страница 8: ...FortiGate 5001SX Security System Guide 8 01 30000 0380 20070201 Base backplane gigabit interfaces FortiGate 5001SX security system ...

Страница 9: ...ortiGate 5001SX circuit board You should confirm that the RAM DIMMs are installed correctly before inserting the FortiGate 5001SX module into a chassis To install FortiGate 5001SX RAM DIMMs To complete this procedure you need A FortiGate 5001SX module Two RAM DIMMs to be installed into the FortiGate 5001SX module RAM DIMM slots An electrostatic discharge ESD preventive wrist or ankle strap with co...

Страница 10: ... DIMM slots Push the DIMM firmly into place using the minimum amount of force required When the DIMM is properly seated the socket guide posts click into place Do not use excessive force when installing a DIMM The RAM slots allow only one alignment of each RAM DIM If you cannot lock the locking levers the DIM is not aligned correctly or is in upside down JP3 JP1 JP2 RAM DIMM slots Front Faceplate ...

Страница 11: ...supported To install SFP transceivers To complete this procedure you need A FortiGate 5001SX module Four SFP transceivers An electrostatic discharge ESD preventive wrist or ankle strap with connection cord 1 Attach the ESD wrist or ankle strap to your wrist or ankle and to an ESD socket or to a bare metal surface on the chassis or frame 2 Remove the caps from SFP cage sockets on the FortiGate 5001...

Страница 12: ...umper setting To complete this procedure you need A FortiGate 5001SX module A tool for moving jumpers optional An electrostatic discharge ESD preventive wrist or ankle strap with connection cord 1 Attach the ESD wrist or ankle strap to your wrist or ankle and to an ESD socket or to a bare metal surface on a chassis or frame Table 3 FortiGate 5001SX JP3 jumper settings for each chassis Chassis Corr...

Страница 13: ...hassis on page 17 3 Use Figure 3 to locate the jumper settings on the module circuit board 4 If required carefully move the jumper to the correct setting 5 You can now insert the module into a chassis and verify that it is operating correctly For inserting instructions see Inserting a FortiGate 5001SX module into a chassis on page 14 Figure 3 FortiGate 5001SX jumper settings JP3 JP1 JP2 Front Face...

Страница 14: ...e FortiGate 5001SX module to receive power and operate normally If the FortiGate 5001SX module is not receiving power the IPM LED glows blue and all other LEDs remain off It is important to carefully seat the FortiGate 5001SX module all the way into the chassis to not use too much force on the extraction levers and to make sure that the extraction levers are properly locked and engaged with the hi...

Страница 15: ...discharge ESD preventive wrist or ankle strap with connection cord 1 Attach the ESD wrist or ankle strap to your wrist or ankle and to an ESD socket or to a bare metal surface on the chassis or frame 2 Fully loosen the left extraction lever locking screw to unlock the left extraction lever Caution Do not carry the FortiGate 5001SX module by holding the extraction levers When inserting or removing ...

Страница 16: ... the module back out and try inserting it again 6 Slide the module in until the alignment pins are inserted half way into their sockets in the chassis If the chassis is powered on the IPM LED lights up and turns blue 7 Turn both extraction levers to their fully closed positions The extraction levers should hook into the sides of the chassis slot Closing the extraction levers draws the FortiGate 50...

Страница 17: ...es are hot swappable The procedure for removing the FortiGate 5001SX module from a FortiGate 5000 series chassis slot is the same whether or not the FortiGate 5000 series chassis is powered on or not To complete this procedure you need A FortiGate 5000 series chassis with a FortiGate 5001SX module installed An electrostatic discharge ESD preventive wrist or ankle strap with connection cord Tighten...

Страница 18: ...crew to unlock the left extraction lever 5 Turn both extraction levers to their fully open positions Opening the extraction levers slides the module a short distance out of the slot disconnecting the module from the chassis backplane The IPM LED turns blue All other LEDs turn off 6 Pull the module about half way out All LEDs turn off Caution FortiGate 5001SX modules must be protected from static d...

Страница 19: ...mper settings and firmware problems may all prevent a FortiGate 5001SX module for starting up correctly This section describes how to find and fix each of these problems All chassis left extraction lever not contacting power switch The left extraction lever activates the FortiGate 5001SX module power switch Figure 5 If the left extraction lever is damaged or positioned incorrectly the FortiGate 50...

Страница 20: ...odule will not start up if the JP3 jumper connects pins 2 and 3 see Figure 3 on page 13 and a shelf manager is not installed or is not operating correctly If the shelf manager is not installed or not operating correctly when you insert a FortiGate 5001SX module the module attempts to communicate with the shelf manager If the FortiGate 5001SX module cannot communicate with the shelf manager the mod...

Страница 21: ... if the JP3 jumper is set between pins 2 and 3 the FortiGate 5001SX module should be able to communicate with the chassis shelf manager If the FortiGate 5001SX module can communicate with the shelf manager the FortiGate 5001SX web based manager System Chassis pages should display information about the modules installed in the chassis If any one of the conditions listed above are not met theFortiGa...

Страница 22: ...FortiGate 5001SX Security System Guide 22 01 30000 0380 20070201 Troubleshooting Hardware installation ...

Страница 23: ...ing Transparent mode Upgrading FortiGate 5001SX firmware FortiGate 5001SX base backplane data communication Powering off the FortiGate 5001SX module Registering your Fortinet product Register your Fortinet product to receive Fortinet customer services such as product updates and technical support You must also register your product for FortiGuard services such as FortiGuard Antivirus and Intrusion...

Страница 24: ...erate in NAT mode or in Route mode In NAT mode the FortiGate firewall performs network address translation before IP packets are sent to the destination network In Route mode no translation takes place Figure 7 Example FortiGate 5001SX module operating in NAT Route mode Transparent mode In Transparent mode the FortiGate 5001SX security system is invisible to the network All of the FortiGate 5001SX...

Страница 25: ...module Web based manager The FortiGate 5001SX web based manager is an easy to use management tool Use the web based manager to configure the FortiGate 5001SX administrator password the interface addresses the default gateway and the DNS server addresses Requirements An Ethernet connection between the FortiGate 5001SX module and management computer Internet Explorer 6 0 or higher on the management ...

Страница 26: ...001SX module onto the network To configure the FortiGate 5001SX module onto the network you add an administrator password change the network interface IP addresses add DNS server IP addresses and if required configure basic routing Table 5 FortiGate 5001SX factory default settings Operation Mode NAT Route Administrator Account User Name admin Password none port1 IP Netmask 192 168 1 99 24 port2 IP...

Страница 27: ...e settings Admin Administrator Password port1 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port2 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port3 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port4 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port5 IP _____ _____ _____ _____ Netmask _____ _____ _____ _____ port6 IP _____ _____ _____ _____ Ne...

Страница 28: ...ings To configure the Primary and Secondary DNS server IP addresses 1 Go to System Network Options 2 Enter the Primary and Secondary DNS IP addresses that you added to Table 6 on page 27 as required and select Apply To configure the Default Gateway 1 Go to Router Static and select Edit icon for the static route 2 Select the Device that you recorded above 3 Set Gateway to the Default Gateway IP add...

Страница 29: ...gateway gateway_ip end Configuring Transparent mode Use Table 7 to gather the information you need to customize Transparent mode settings Using the web based manager to configure Transparent mode 1 Connect port1 of the FortiGate 5001SX module to the same hub or switch as the computer you will use to configure the FortiGate module Table 7 Transparent mode settings Admin Administrator Password Manag...

Страница 30: ...r the admin administrator and enter the password that you added to Table 7 on page 29 To change the management interface 1 Go to System Config Operation 2 Enter the Management IP address and netmask hat you added to Table 7 on page 29 and select Apply To configure the Primary and Secondary DNS server IP addresses 1 Go to System Network Options 2 Enter the Primary and Secondary DNS IP addresses tha...

Страница 31: ...ager or CLI and using the FortiUSB key see the FortiGate 5000 Series Firmware and FortiUSB Guide To upgrade the firmware using the web based manager 1 Copy the firmware image file to your management computer 2 Log into the web based manager as the admin administrator 3 Go to System Status 4 Under System Information Firmware Version select Update 5 Type the path and filename of the firmware image f...

Страница 32: ...s and attack definitions You can use the command execute update now FortiGate 5001SX base backplane data communication You can configure the FortiGate 5001SX modules for data communications using the two FortiGate 5140 FortiGate 5050 or FortiGate 5020 chassis base backplane interfaces By default the base backplane interfaces are used for HA heartbeat communication However using the information in ...

Страница 33: ...ation 1 Go to System Network Interface 2 Select Show backplane interfaces The port9 and port10 backplane interfaces now appear in the Interface list To enable base backplane data communication from the FortiGate 5001SX CLI From the FortiGate 5001SX module CLI you can use the following steps to enable base backplane data communication 1 Enter the following command to show the backplane interfaces c...

Страница 34: ...FortiGate 5001SX Security System Guide 34 01 30000 0380 20070201 Powering off the FortiGate 5001SX module Quick Configuration Guide ...

Страница 35: ...ble from the Fortinet Knowledge Center The knowledge center contains troubleshooting and how to articles FAQs technical notes and more Visit the Fortinet Knowledge Center at http kc forticare com Comments on Fortinet technical documentation Please send information about any errors or omissions in this document or any Fortinet technical documentation to techdoc fortinet com Customer service and tec...

Страница 36: ...namic Threat Prevention System DTPS APSecure FortiASIC FortiBIOS FortiBridge FortiClient FortiGate FortiGate Unified Threat Management System FortiGuard FortiGuard Antispam FortiGuard Antivirus FortiGuard Intrusion FortiGuard Web FortiLog FortiAnalyzer FortiManager Fortinet FortiOS FortiPartner FortiProtect FortiReporter FortiResponse FortiShield FortiVoIP and FortiWiFi are trademarks of Fortinet ...

Результаты поиска

Содержание FortiGate FortiGate-5001SX

Отзывы:

Похожие инструкции для FortiGate FortiGate-5001SX

Бренды по названию

Популярные бренды

Fortinet FortiGate FortiGate-5001SX, Руководство по системе безопасности

Результаты поиска

Содержание FortiGate FortiGate-5001SX

Отзывы:

Похожие инструкции для FortiGate FortiGate-5001SX

Бренды по названию

Популярные бренды