Fortinet FortiGate-5001FA2 manuale d’uso

www.fortinet.com FortiGate-5001F A2 Security System Guide 01-30000-037 9-20080606 For tiGat e-500 1F A2 Security System Guide PWR ACC ST A IPM CONSOLE USB 3 4 1 2 5 6 7 8 A detailed guide to the FortiGate- 5001F A2 Securi ty System. This FortiG ate-5001F A2 Security Syst em Guide describes FortiGate-5001F A2 hardware features, how to in stall the F[...]

FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 W arnings and cautions Only trained and qual ified personnel should b e allo wed to install or maintain FortiGate-5000 series equipment. Read and comply with all warning s, cautions and notices in this document. • T urning off all power switche s may not turn of f all power to the F[...]

Contents FortiGate-5001F A2 Security System Guide 01-30000-0379-2008060 6 3 Contents Warnings and cautions .............. ................ ................ ................. ................ ...... 2 FortiGate-5001FA2 securi ty system .............. ................... 5 Front panel LEDs and connectors ............ ................ ................[...]

FortiGate-5001F A2 Security System Guide 4 01-30000-0379-200806 06 Contents For more information ... .................................... ............... 33 Fortinet documentatio n .... ................ ................ ............. ................ ............. .... 33 Fortinet Tools and Documentation CD ............. ................. .........[...]

FortiGate-5001F A2 security system FortiGate-5001F A2 Security System Guide 01-30000-0379-2008060 6 5 FortiGate-5001F A2 security system The FortiGate-5001F A2 security system is a high-perfo rmance FortiGate security system with a total of 8 front pan el gig abit ethernet interfaces and two ba se backplane in terfaces. Us e the fro nt pane l inter[...]

FortiGate-5001F A2 Security System Guide 6 01-30000-0379-200806 06 Front panel LEDs and connectors Fo rtiGate-5001F A2 security system The For tiGate-5001FA2 board comes supp lied with four optical or f our coppe r SFP transceivers. Before you can connect FortiGate-5001F A2 interfaces 1 to 4, you must insert the SFP transceiver s into the FortiGate[...]

FortiGate-5001F A2 security system Accelera ted packet forwarding and policy enforcement FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 7 Connectors Ta b l e 2 lists and describes the Fo rt iGate-5001F A2 connectors. Accelerated p acket forwarding and policy enforcement FortiGate-5001F A2 Accelerated packet forwarding an d policy [...]

FortiGate-5001F A2 Security System Guide 8 01-30000-0379-200806 06 Base backplane gigabit communication FortiGate- 5001F A2 security system • Session Oriented T raffic with long se ssion lifetime, such as FTP sessions. Packet size does not af fect performance for traf fic with long session lifetime. For long sessions, pr ocessing that would other[...]

Hardware installation RAM DIMMs FortiGate-5001F A2 Security System Guide 01-30000-0379-2008060 6 9 Hardware inst allation Before use, the FortiGate-5001F A2 board must be correctly inserted into an Advanced T elecommunications Computing Archite cture (ACT A) chassis such as the FortiGate-5140, FortiGate-505 0, or FortiGate-5020 ch assis. Before ins[...]

FortiGate-5001F A2 Security System Guide 10 01-30000-0379-200806 06 Installing SFP transceivers Hardware installation Figure 2: Location of For tiGate-5001F A2 RAM DIMM s lot s 3 Insert each RAM DIMM perpendicula r to the RAM DIMM slots. Push the DIMM firmly into place using the minimum amou nt o f force required. When the DIMM is properly seated, [...]

Hardware installation Changing FortiGate-5001F A2 jumper settings FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 11 Y ou can install the following types of SFP transceivers for connectors 1, 2, 3, and 4: • optical SFP transc eivers • SFP 1000 Base-LX, SM module • SFP 1000 Base-SX, MM module (mu ltimode) • copper SFP transc[...]

FortiGate-5001F A2 Security System Guide 12 01-30000-0379-200806 06 Changing FortiGate-5001F A2 jumper settings Hardware installation Normally , because the jumper s are factor y set, you d o not have to change th em. However , if you are moving a FortiGate-5001F A2 from a FortiGate-5140 or FortiGate-5050 to a FortiGate -5020 or the reverse, you ne[...]

Hardware installation Inserting a FortiGate-5001F A2 board into a chassis FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 13 T o change or verify the JP3 jumper sett ing T o complete this procedure, you need: • A FortiGate-5001F A2 board • A tool for moving jumpers (optional) • An electrost atic discharge (ESD) preven tive wr[...]

FortiGate-5001F A2 Security System Guide 14 01-30000-0379-200806 06 Inserting a Fo rtiGate-5001F A2 board into a chassis Hardware installation Figure 4: FortiGate-5001F A2 mounting components Before inserting the FortiGate -5001FA2 board in a chassis Before installing the FortiGat e-5001F A2 board in a chassis you should verify that the RAM DIMMs a[...]

Hardware installation Inserting a FortiGate-5001F A2 board into a chassis FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 15 1 Attach the ESD wrist strap to your wrist an d to an ESD socket or to a bare metal surface on the chassis or frame. 2 Unlock the left and right handles by squeezing the handle locks. 3 Open the left and r ig[...]

FortiGate-5001F A2 Security System Guide 16 01-30000-0379-200806 06 Inserting a Fo rtiGate-5001F A2 board into a chassis Hardware installation 7 T urn both handles to their fully-closed positions. The handles should hook into the sides of the chassis slot. Closing the ha ndles draws the FortiGate-5001 F A2 board into place in th e chassis slot and [...]

Hardware installation Removing a FortiGate-5001F A2 board from a chassis FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 17 Removing a FortiGate-5001F A2 board from a chassis The following procedure describes h ow to correc tly use the F ortiGate-500 1F A2 mounting c omponents shown in Figure 4 to remove a FortiGate-500 1F A2 board[...]

FortiGate-5001F A2 Security System Guide 18 01-30000-0379-200806 06 T roublesh ooting Hardware installation 5 Open the left an d right handles to their fully open position s. Opening the handles slides the boar d a short dista nce out of the slot, disconnecting the board fr om the chassis backplane. The IPM LED turns blue. All other LEDs turn off. [...]

Hardware installation T r oubleshooting FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 19 Figure 5: Location of Fo rtiGate-5001F A2 p ower switch If the left handle is dama ged or positioned incorrectly the FortiGate-5 001F A2 board does not receive power and will not st art up. Mak e sure th e left handle is correctly aligned, fu[...]

FortiGate-5001F A2 Security System Guide 20 01-30000-0379-200806 06 T roublesh ooting Hardware installation All chassis: Firmware problem If the FortiGate-5001 F A2 board power s witch is connected and the JP3 jump er and shelf manager ar e set as required, and the Fo rtiGate-5001F A2 still does not start up, the pr oblem could be with Fort iOS. Co[...]

Quick Configuration Guide Registering your Fortinet product FortiGate-5001F A2 Security System Guide 01-30000-0379-2008060 6 21 Quick Configuration Guide This section is a quick start guide to connectin g and configuring a FortiGate- 5001F A2 security system for your network. Before using this chapter , your FortiGate-5000 series or compa tible A T[...]

FortiGate-5001F A2 Security System Guide 22 01-30000-0379-200806 06 Planning the confi guration Quick Configuration Guide NAT/Route mode In NA T/Route mode, the FortiGate-500 1F A2 security system is visib le to the networks that it is connected to. Each in terface connected to a network must be configured with an IP address that is v alid for that[...]

Quick Configuration Guide Choosing the configuratio n tool FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 23 Figure 8: Example FortiGate-5001F A2 bo ard operating in T ransparent mode Y ou would typically deploy a FortiGate-50 01F A2 security system in T ransparen t mode on a private network be hind an exis ting firewall or behin [...]

FortiGate-5001F A2 Security System Guide 24 01-30000-0379-200806 06 Factory default settings Quick Configuration Guide Factory default settings The FortiGat e-5001F A2 u nit ships with a fa ctory default configuration. Th e default configuration allows you to connect to and use th e FortiGate-5001F A2 web-based manager to configure the For tiGate-5[...]

Quick Configuration Guide Configuring NA T/Route mode FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 25 Using the web-based manager to configure NAT/Route mode 1 Connect port1 of the FortiGate-5001F A2 bo ard to the same hub or switch as the computer you will use to co nfigure the Fo rtiGate board. 2 Configure the manag ement comp[...]

FortiGate-5001F A2 Security System Guide 26 01-30000-0379-200806 06 Configuring NA T/Route mode Quick Configuration Guide Using the CLI to c onfigure NAT/Route mode 1 Use the serial cable supplied with your FortiGate -5001F A2 board to connect the FortiGate Console port to the ma nagement compu ter serial port. 2 S tart a terminal emula tion progra[...]

Quick Configuration Guide Configuring T ransparent mode FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 27 Configuring T ransp arent mode Use Ta b l e 7 to gather the information you need to customize T ranspare nt mode settings. Using the web-based manager to configure Transparent mode 1 Connect port1 of the FortiGate-5001F A2 bo [...]

FortiGate-5001F A2 Security System Guide 28 01-30000-0379-200806 06 Upgrading FortiGate-5001F A2 firmware Quick Configuration Guide T o configure the Primary and Secondary DNS server IP address es 1 Go to System > Network > Options . 2 Enter the Primary a nd Secondary DNS IP add resses that you added to Ta b l e 7 o n page 27 as required and [...]

Quick Configuration Guide Upgrading FortiGate-5001F A2 firmware FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 29 4 Under System Information > Firmware V ersion , select Update. 5 T ype the path a nd filename of the fir mware image file, or select Browse and locate the file. 6 Select OK. The FortiGate-5001 F A2 board uploads th[...]

FortiGate-5001F A2 Security System Guide 30 01-30000-0379-200806 06 FortiGate-5001F A2 base backplane data communication Quick Configuration Guide FortiGate-5001F A2 base backp lane dat a communication Y ou can configure the FortiGate-5001 F A2 boards for da ta communication s using the two FortiGa te-5140, FortiGate-5050, or FortiGat e-5020 cha ss[...]

Quick Configuration Guide Powering off the F ortiGate-5001F A2 bo ard FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 31 Figure 9: FortiGate-5001F A2 interface list with backplane in terfaces enabled T o enable base backplane dat a communication from the FortiGate-5001F A2 CLI From the F ortiGate-50 01F A2 boar d CLI yo u can use t[...]

FortiGate-5001F A2 Security System Guide 32 01-30000-0379-200806 06 Powering off the FortiGate-5001F A2 board Quick Configuration Guide[...]

For more information Fortinet documentation FortiGate-5001F A2 Security System Guide 01-30000-0379-20080 606 33 For more information Support for you r Fortinet produ ct is available as online he lp from within the web-based manager, fro m the T ools and Document ation CD included with the product, on the Fortinet T echnical Document ation web site,[...]

FortiGate-5001F A2 Security System Guide 01-30000-0379-200806 06 www.fortinet.com © Copyright 2008 Fortinet, Inc. All rights rese rved. No part of this publica tion including text, examples, diagrams or illustrations may be reproduced, transmitted, or tran slated in any form or by any means, electro nic, mechanical, manual, optical or otherwise, f[...]