Fortinet 5001A-SW manual

FortiGate-5001A Security System Guide 01-30000-834 56-20081023 5001A -SW FortiGate-5001A Security System Guide A detailed guid e to the FortiGate-5001A- DW and FortiGate-50 01A-SW Security Systems. This FortiGate-5001A Security System Guide describes FortiGate-5001A hard wa re features, how to inst all a FortiGate-500 1A board in a FortiGate-50 00 [...]

FortiGate-5001A Security System Guide 01-30000-834 56-20081023 W arnings and cautions Only trained and qual ified personnel should b e allo wed to install or maintain FortiGate-5000 series equipment. Read and comply with all warning s, cautions and notices in this document. • T urn ing of f all po wer switches may not tur n of f all power to the [...]

Contents FortiGate-5001A Se curity System Guide 01-30000-83456-200810 23 3 Contents Warnings and cautions .............. ............. ................ ................ ............. ............. 2 FortiGate-5001A security system .................. ................... 5 Front panel LEDs and connectors ............ ................ ................[...]

FortiGate-5001A Security System Guide 4 01-30000-83456-200810 23 Contents Configuring Transparent mode ........... .... ... ...... ... .... ... ... ... .... ... ... ... ... .... ... ... ... . 31 Using the web-based manager to conf igure Transparent mode ... .............. 31 Using the CLI to configure Transparen t mode ..... ................... ...[...]

FortiGate-5001A security system FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 5 FortiGate-5001A security system The FortiGate-5001 A security system is a high-perfo rmance Advanced T elecommunications Computing Ar chitecture (ACT A) compliant FortiGate security system that can be installe d in any ACT A chassis including the FortiG[...]

FortiGate-5001A Security System Guide 6 01-30000-83456-200810 23 Front panel LEDs and connectors FortiGate-5001A security system Figure 1: FortiGate-5001A-DW fr ont panel Figure 2: FortiGate-5001A-SW front panel The FortiGate-5001A boa rd incl udes the following features: • T wo front p anel 10/100/1000Ba se-T co pper 1-gigabit etherne t interfac[...]

FortiGate-5001A security system Front panel LEDs and connectors FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 7 LEDs Ta b l e 1 lists and describes the Fort iGate-5001A LEDs. T able 1: FortiGate-5001A LEDs LED St ate Descr iption 1, 2 (Lef t LED) Green The correct cable is connec ted to the interface a nd the connected equipment ha[...]

FortiGate-5001A Security System Guide 8 01-30000-83456-200810 23 Base backplane communication Fo rtiGate-5001A security system Connectors Ta b l e 2 lists and describes the For tiGa te - 50 01 A con n ector s. Base backplane communication The FortiGate-5001A base backplane 1-gi gabit interfaces can be used for HA heartbeat communication betwe en Fo[...]

FortiGate-5001A security system AMC modules FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 9 FortiGate-RTM-XB2 The FortiGate-R TM-XB2 module provides two 10-gigabit fabric backplane interfaces and NP2 processor acce leration for FortiGate-5001A fabric interfaces. For 10-gigabit fabric backpla ne communications, each FortiGate- 5001A[...]

FortiGate-5001A Security System Guide 10 01-30000-83456-200810 23 AMC modules FortiGate-5001A security system • The FortiGate-ASM-FB4, provides 4 NP2 accelerated SFP 1-gigabit interfaces . • The FortiGate-ASM-S08, pr ovides adds a re movable hard disk th at you can use to store log files and content ar chives. Figure 5: FortiGate-ASM-FB4 ASM-FB[...]

Hardware installation FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 11 Hardware inst allation Before use, the FortiGat e-5001A bo ard must be correctly inse rted into a n Advanced T elecommunications Computing Ar chitecture (ACT A) chassis such as the FortiGate-5140, FortiGate-5050, or FortiGate-5020 chassis. Before inserting the b[...]

FortiGate-5001A Security System Guide 12 01-30000-83456-200810 23 Changing FortiGate-5001A SW1 1 switch settin gs Hardware installation Changing FortiGate-5001A SW1 1 switch settings The SW1 1 switch on the For tiGate-5001A boar d is factory set by Fort inet to detect a shelf manager ( Figur e 6 ). This is the cor rect sett ing if you are inst alli[...]

Hardware installation Changing Fort iGate-50 01A SW1 1 switch settings FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 13 T o chang e or verify the SW1 1 sw itch setting T o complete this procedure, you ne ed: • A FortiGate-5001A boar d • A tool for changing the SW1 1 switch setting (optional) • An electrost atic discharge (ESD[...]

FortiGate-5001A Security System Guide 14 01-30000-83456-200810 23 FortiGate-5001A mo unting co mponents Hardware installation FortiGate-5001A mounting component s T o install a FortiGate- 5001A board you slide the boar d into an open slot in the front of an A TCA chassis and then use the mounting compo nents to lock the board into place in the slot[...]

Hardware installation Inserting a FortiGate-5001 A board FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 15 Figure 10: FortiGate-5001A-DW left (top) mounting comp onents Inserting a FortiGate-5001A board The FortiGate-5001 A board must be fully inst alled in a chassis slot, with the handles closed and locked and re tention screws ful[...]

FortiGate-5001A Security System Guide 16 01-30000-83456-200810 23 Inserting a FortiGate-5001A boa rd Hardware installation 1 Attach the ESD wrist strap to yo ur wrist and to an available ES D socket or w rist strap terminal. 2 If required , remove the pro tective metal frame that the FortiGate-5001A board has been shipped in. 3 Insert the Fort iGat[...]

Hardware installation Inserting a FortiGate-5001 A board FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 17 9 T urn both handles to th eir f ully-closed position s. The handles should hook into the sides of the chassis slot. Closing the handles draws the FortiGate-50 01A board into place in the chassis slot and into full contact with[...]

FortiGate-5001A Security System Guide 18 01-30000-83456-200810 23 Removing a FortiGate-5001A board Hardware installation 10 Once the board is inserted correctly , fully tighten the retent io n screws to lock the FortiGate-5001A board into po sition in the chassis slot. Removing a FortiGate-5001A board The following procedure describes how to co rre[...]

Hardware installation Removing a FortiGa te-5001A board FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 19 3 Fully loosen the retention scr ews on the FortiGate-5001A fro nt panel. 4 Unlock the handles by squeezing the handle locks. 5 Open the handles to their fully open positions. Y ou need to open the handles with moderate pres sur[...]

FortiGate-5001A Security System Guide 20 01-30000-83456-200810 23 Resetting a FortiGate-5001A board Hardware installation Resetting a FortiGate-5001A board Y ou must eject the FortiGate-5001A board from the chassis slot to cycle the power and reset the board . See “Removing a FortiGate-5001A bo ard” on page 18 for information about how to eject[...]

Hardware installation Installing and removing AMC modules FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 21 Inserting AMC slot filler panels The following procedur e desc ribes how to install a slot filler panel in the FortiGate-5001A front p anel AMC opening. The FortiGate-5001A-DW board includes one AMC double-width slot filler pa[...]

FortiGate-5001A Security System Guide 22 01-30000-83456-200810 23 Installing and removing AMC modules Hardware installation T o complete this proced ure, you need: • A FortiGat e-5001A bo ard with an op en slot • FortiGate AMC mo dule to install • An electrostatic dischar ge (ESD) prevent ive wrist strap with connection cord 1 Attach the ESD [...]

Hardware installation T roubl eshooting FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 23 1 Attach the ESD wrist strap to your wrist and to an available ESD socket or wrist strap terminal. 2 Eject the FortiGate-5001A boar d from the chassis slot. 3 With the FortiGate-5001 A left (top) ha ndle fully open, pull the latch on the AMC mo[...]

FortiGate-5001A Security System Guide 24 01-30000-83456-200810 23 T roublesh ooting Hardware installation FortiGate-5001A status LED is flashing dur ing system operation Normally , the FortiGate-5001A S tatus LE D is off when the For tiGate-5001A board is operating n ormally . If this LED start s flashing while the board is operating, a fault condi[...]

Quick Configuration Guide Registering your Fortinet product FortiGate-5001A Se curity System Guide 01-30000-83456-200810 23 25 Quick Configuration Guide This section is a quick start guide to connectin g and configuring a FortiGate-5001A security system for your network. Before using this chapter , your FortiGate-5000 series or comp atible A TCA ch[...]

FortiGate-5001A Security System Guide 26 01-30000-83456-200810 23 Planning the confi guration Quick Configuration Guide NAT/Route mode In NA T/Route mode, the FortiGate-5001A security system is visi ble to the networks that it is connected to. Each in terface connected to a network must be configured with an IP addres s that is valid for that netw [...]

Quick Configuration Guide Choosing the configuration to ol FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 27 Figure 12: E xam ple FortiGate-5001A board oper ating in T ransparent mode Y ou would typically deploy a FortiGate-5001A security system in T ransparent mode on a private network be hind an exis ting firewall or behind a ro u[...]

FortiGate-5001A Security System Guide 28 01-30000-83456-200810 23 Factory default settings Quick Configuration Guide Command Line Interface (CLI) The CLI is a full-featured management tool . Use it to configur e the administrator password, the inter face addresses, the default gateway , and the DNS server addresses. Requirement s: • The serial co[...]

Quick Configuration Guide Configuring NA T/Route mode FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 29 Using the web-based manager to configure NAT/Route mode 1 Connect port1 of the F ortiGate-5001A board to the sam e hub or switch a s the computer you will use to co nfigure the Fo rtiGate board. 2 Configure the manag ement compute[...]

FortiGate-5001A Security System Guide 30 01-30000-83456-200810 23 Configuring NA T/Route mode Quick Configu ration Guide 3 Set the addressing mode for the interface. ( See the online help for information.) • For manual addr essing, enter the IP address and ne tmask for the interface th at you added to T able 8 on page 29 . • For DHCP addressing[...]

Quick Configuration Guide Configuring T ransparent mode FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 31 6 Repeat to configure each interf ace as requ ired, for example, to con figure the port2 interface to the setting that you ad ded to T able 8 on page 29 . config system interface edit port2 ... 7 Configure the primar y and secon[...]

FortiGate-5001A Security System Guide 32 01-30000-83456-200810 23 Configuring T ransparent mode Quick Configuration Guide 4 T ype admin in the Name field and select Login. T o switch from NA T/Route mode to transp arent mode 1 Go to System > St atus and select the Change link beside Operation Mode: NA T . 2 Set Operation Mode to T ransparent. 3 [...]

Quick Configuration Guide Upgrading FortiGate-5001A firmware FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 33 Upgrading FortiGate-5001A firmware Fortinet periodically updates the Fort iGate-5001A FortiOS firmware to includ e enhancement s and address issues. Af ter you have registered your FortiGate-5001A secu rity system (see “R[...]

FortiGate-5001A Security System Guide 34 01-30000-83456-200810 23 FortiGate-5001A base back plane data commu nicatio n Quick Configuration Guide Where <name_str> is the name of the fir mware im age file and <tftp_ipv4 > is the IP address of the TFTP serve r . For ex am ple, if the firmware image fil e name is image.out and the IP addres[...]

Quick Configuration Guide FortiGate-5001A base backplane data communicati on FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 35 In a FortiGat e-5140 or FortiGate- 5050 chassis, FortiGate-5001A base backplane communication requires one or two FortiSwitch-500 3A or FortiSwitch-5003 boards. A FortiSwitch board inst alled in chassis base[...]

FortiGate-5001A Security System Guide 36 01-30000-83456-200810 23 FortiGate-5001A fabric backplane data communication Quick Configuration Guide FortiGate-5001A fabric backp lane dat a communication This section describes how to configur e FortiGa te-5001A boards for fabric backplane dat a communication using the fabric1 and fabric2 interfaces. Fabr[...]

Quick Configuration Guide Powering off the FortiGate-5001A board FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 37 T o enable fabric backplane dat a communication from the FortiGate-500 1A CLI From the FortiGate-5001A board CLI you can use the following step s to enable fabric backplane data commu nication. 1 Enter the following com[...]

FortiGate-5001A Security System Guide 38 01-30000-83456-200810 23 Powering off the FortiGate-5001A board Quick Configuration Guide[...]

For more information Fortinet documentation FortiGate-5001A Security System Guide 01-30000-83456-2008 1023 39 For more information Support for your Fo rt ine t pr od u ct is availab l e as onlin e he lp fr om w ithin the web-based manager, fro m the T ools and Document ation CD included with the product, on the Fortinet T ech nical Docume ntation w[...]

FortiGate-5001A Security System Guide 01-30000-83456-200810 23 www.fortinet.com © Copyright 2008 Fortinet, Inc. All rights rese rved. No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or tran slated in any form or by any means, electronic, mechan ical, manual, optical or otherwise, for [...]