Fortinet FortiGate FortiGate-5140 User manual

www.fortinet.com
FortiGate-5140 Chassis Guide
01-30000-0396-20070201
FAN TRAY FAN TRAYFAN TRAY
1311975312468101214
5140
CRITICAL
RESET
MAJOR
MINOR
USER1
USER2
USER3
5140SAP
SERIAL1 SERIAL 2 ALARM
FILTER
12
012
10/100
link/Act
ETH0
Service
RESET
STATUS
HotSwap
link/Act
ETH0 ETH1
10/100
5000SM
10/100
link/Act
ETH0
Service
RESET
STATUS
HotSwap
link/Act
ETH0 ETH1
10/100
5000SM
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514
1312
1110
98
76
54
32
10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E
T
H
O
R
S
2
3
2
Z
R
E
0
Z
R
E
1
Z
R
E
2
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514
1312
1110
98
76
54
32
10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E
T
H
O
R
S
2
3
2
Z
R
E
0
Z
R
E
1
Z
R
E
2
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
FortiGate-5140
Chassis Guide
A detailed guide to the features and capabilities FortiGate-5140 chassis. This FortiGate-5140 Chassis Guide
describes FortiGate-5140 hardware features, and how to install the FortiGate-5140 chassis.
The most recent versions of this and all FortiGate-5000 series documents are available from the FortiGate-5000
page of the Fortinet Technical Documentation web site (http://docs.forticare.com).
Visit http://support.fortinet.com to register your FortiGate-5140 chassis. By registering you can receive product
updates, technical support, and FortiGuard services.

FortiGate-5140 Chassis Guide
01-30000-0396-20070201
Warnings and cautions
Only trained and qualified personnel should be allowed to install or maintain FortiGate-5000 series
equipment. Read and comply with all warnings, cautions and notices in this document.
• Turning off all power switches may not turn off all power to the FortiGate-5000 series equipment.
Except where noted, disconnect the FortiGate-5000 series equipment from all power sources,
telecommunications links and networks before installing, or removing FortiGate-5000 series
components, or performing other maintenance tasks. Failure to do this can result in personal injury or
equipment damage. Some circuitry in the FortiGate-5000 series equipment may continue to operate
even though all power switches are off.
• An easily accessible disconnect device, such as a circuit breaker, should be incorporated into the data
center wiring that connects power to the FortiGate-5000 series equipment.
• Install FortiGate-5000 series chassis at the lower positions of a rack to avoid making the rack top-heavy
and unstable.
• Do not insert metal objects or tools into open chassis slots.
• Electrostatic discharge (ESD) can damage FortiGate-5000 series equipment. Only perform the
procedures described in this document from an ESD workstation. If no such station is available, you
can provide some ESD protection by wearing an anti-static wrist or ankle strap and attaching it to an
ESD connector or to a metal part of a FortiGate chassis.
• Some FortiGate-5000 series components may overload your supply circuit and impact your overcurrent
protection and supply wiring. Refer to nameplate ratings to address this concern.
• Make sure all FortiGate-5000 series components have reliable grounding. Fortinet recommends direct
connections to the branch circuit.
• If you install a FortiGate-5000 series component in a closed or multi-unit rack assembly, the operating
ambient temperature of the rack environment may be greater than room ambient. Make sure the
operating ambient temperature does not exceed the manufacturer's maximum rated ambient
temperature.
• Installing FortiGate-5000 series equipment in a rack should be such that the amount of airflow required
for safe operation of the equipment is not compromised.
• This equipment is for installation only in a Restricted Access Location (dedicated equipment room,
service closet or the like), in accordance with the National Electrical Code.
• Per the National Electrical Code, sizing of a Listed circuit breaker or branch circuit fuse and the supply
conductors to the equipment is based on the marked input current rating. A product with a marked input
current rating of 25 A is required to be placed on a 40 A branch circuit. The supply conductors will also
be sized according to the input current rating and also derated for the maximum rated operating
ambient temperature, Tma, of the equipment.
• FortiGate-5000 series equipment shall be installed and connected to an electrical supply source in
accordance with the applicable codes and regulations for the location in which it is installed. Particular
attention shall be paid to use of correct wire type and size to comply with the applicable codes and
regulations for the installation / location. Connection of the supply wiring to the terminal block on the
equipment may be accomplished using Listed wire compression lugs, for example, Pressure Terminal
Connector made by Ideal Industries Inc. or equivalent which is suitable for AWG 10. Particular attention
shall be given to use of the appropriate compression tool specified by the compression lug
manufacturer, if one is specified.
!CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According
to the Instructions.
!Caution: You should be aware of the following cautions and warnings before installing FortiGate-5000 series
hardware

Contents
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 3
Contents
Warnings and cautions..................................................................................... 2
FortiGate-5140 chassis...................................................... 5
FortiGate-5140 chassis front panel.................................................................. 6
FortiGate-5140 chassis back panel.................................................................. 7
Physical description of the FortiGate-5140 chassis....................................... 8
FortiGate-5140 shelf alarm panel..................................................................... 9
Shelf alarm panel telco alarms.................................................................... 10
FortiGate-5140 shelf managers...................................................................... 11
Shelf Manager fan and power control ......................................................... 12
Air filter............................................................................................................. 13
Cooling fan trays ............................................................................................. 13
Power connection and configuration............................. 15
About data center DC power .......................................................................... 15
Connecting a FortiGate-5140 chassis to data center DC power and data
center ground................................................................................................... 15
Connecting a FortiGate-5140 PEM to data center DC power..................... 16
Connecting the FortiGate-5140 chassis to data center ground................... 17
Connecting the FortiGate-5140 chassis to AC power using the
FortiGate-5053 power converter tray............................................................. 18
FortiGate-5053 power converter tray front and back panel......................... 19
Selecting the power supplies and power convertor trays that you need for your
FortiGate-5140 configuration ...................................................................... 20
Connecting a FortiGate-5140 chassis to the FortiGate-5053 power converter
tray.............................................................................................................. 23
Connecting the FortiGate-5140 chassis to data center ground................... 25
Turning on FortiGate-5140 chassis power.................................................... 25
FortiGate-5140 hardware procedures ............................ 27
Mounting the FortiGate-5140 chassis............................................................ 27
Air flow ........................................................................................................ 27
Inserting 5000-series modules into a FortiGate-5140 chassis .................... 27
Use FortiSwitch-5003 modules for base backplane communication ......... 28
For more information....................................................... 29
Fortinet documentation................................................................................... 29
Fortinet Tools and Documentation CD........................................................ 29
Fortinet Knowledge Center ........................................................................ 29
Comments on Fortinet technical documentation ........................................ 29
Customer service and technical support...................................................... 29
Register your Fortinet product....................................................................... 29

FortiGate-5140 Chassis Guide
401-30000-0396-20070201
Contents

FortiGate-5140 chassis
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 5
FortiGate-5140 chassis
You can install up to 14 FortiGate-5000 series modules in the 14 front panel slots
of the FortiGate-5140 ATCA chassis. The FortiGate-5140 is a 12U chassis that
contains two redundant hot swappable DC power entry modules that connect to
-48 VDC Data Center DC power. The FortiGate-5140 chassis also includes three
hot swappable cooling fan trays and a front accessible air filter. If all 14 front panel
slots contain FortiGate-5005A2, FortiGate-5001SX, or FortiGate-5001FA2
modules the FortiGate-5140 chassis provides a total of 112 Gigabit ethernet
FortiGate interfaces.
You can also install a FortiSwitch-5003 module in the FortiGate-5140 chassis to
provide base backplane communications. Base backplane communications can
be used for HA heartbeat communications and for data communications. You can
add a second FortiSwitch-5003 module for redundancy. The First
FortiSwitch-5003 module should be installed in slot 2, the second in slot 1.
You can mix and match any combination of FortiGate-5000 series modules in the
FortiGate-5140 chassis. For example, you could install four FortiGate-5005FA2
modules, four FortiGate-5001SX modules, and four FortiGate-5001FA2 modules.
You can also install FortiController-5208 and FortiGate-5005FA2 modules in a
FortiGate-5140 chassis to create a FortiGate-5005-DIST security system.
Some of the modules installed in a FortiGate-5140 chassis can be operating in a
FortiGate HA cluster and some can be operating as standalone FortiGate units.
You can also operate multiple HA clusters and standalone FortiGate units in a
single FortiGate-5140 chassis. You can also use the FortiSwitch-5003 module to
operate HA clusters consisting of FortiGate-5000 series modules installed in
multiple FortiGate-5140 chassis.
The FortiGate-5140 chassis also includes 14 backplane slots which are used by
some FortiGate-5000 series modules.
The FortiGate-5140 chassis requires -48VDC Data Center DC power. If DC power
is not available you can install a FortiGate-5053 power converter tray (purchased
separately) with FortiGate-5140 power supplies.
This chapter describes the FortiGate-5140 chassis and includes the following
sections:
•FortiGate-5140 chassis front panel
•FortiGate-5140 chassis back panel
•Physical description of the FortiGate-5140 chassis
•FortiGate-5140 shelf alarm panel
•FortiGate-5140 shelf managers
•Air filter
•Cooling fan trays

FortiGate-5140 Chassis Guide
601-30000-0396-20070201
FortiGate-5140 chassis front panel FortiGate-5140 chassis
FortiGate-5140 chassis front panel
Figure 1 shows the front panel of a FortiGate-5140 chassis. Two FortiSwitch-5003
modules are installed in slots 1 and 2. Six FortiGate-5001SX modules are installed
in slots 3, 5, 7, 9, 11, and 13 and six FortiGate-5001FA2 modules are installed in
slots 4, 6, 8, 10, 12, and 14.
Figure 1: FortiGate-5140 chassis front panel with FortiGate-5001SX,
FortiGate-5001FA2, and FortiSwitch-5003 modules installed
The FortiGate-5140 shelf alarm panel (SAP) and primary and secondary
FortiGate-5140 Shelf Managers are also visible. The factory installed shelf alarm
panel displays alarms, provides a telco alarm interface, and also provides serial
connections to the shelf managers. The factory installed shelf managers provide
power distribution, cooling, alarms, and shelf status for the FortiGate-5140
chassis. For more information about these components, see“FortiGate-5140 shelf
alarm panel” on page 9 and “FortiGate-5140 shelf managers” on page 11.
FAN TRAY FAN TRAYFAN TRAY
1311975312468101214
5140
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
PWR STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
ACC
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514
1312
1110
98
76
54
32
10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E
T
H
O
R
S
2
3
2
Z
R
E
0
Z
R
E
1
Z
R
E
2
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514
1312
1110
98
76
54
32
10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E
T
H
O
R
S
2
3
2
Z
R
E
0
Z
R
E
1
Z
R
E
2
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
CRITICAL
RESET
MAJOR
MINOR
USER1
USER2
USER3
5140SAP
SERIAL1 SERIAL 2 ALARM
FILTER
12
012
10/100
link/Act
ETH0
Service
RESET
STATUS
HotSwap
link/Act
ETH0 ETH1
10/100
5000SM
10/100
link/Act
ETH0
Service
RESET
STATUS
HotSwap
link/Act
ETH0 ETH1
10/100
5000SM
FortiGate-5001FA2
modules
slots 4, 6, 8, 10,
12, and 14
Primary
shelf manager
Secondary
shelf manager
Cooling fan
trays 0, 1, 2
FortiGate-5001SX
modules
slots 3, 5, 7, 9,
11, and 13
FortiSwitch-5003
modules
slots 1 and 2
Front cable
tray
ESD socket
Slot
numbers
Shelf alarm
panel (SAP)
Front accessible
air filter
!Caution: Do not operate the FortiGate-5140 chassis with open slots on the front panel. For
optimum cooling performance and safety, the slots must contain a FortiGate-5000 series
module or an air baffle slot filler. As well the removable terminal block cover must be
installed over the power connectors on the back of the chassis.

FortiGate-5140 chassis FortiGate-5140 chassis back panel
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 7
Also visible on the front of the FortiGate-5140:
• Electrostatic discharge (ESD) socket, used for connecting an ESD wrist or
ankle band when working with the chassis.
• Front cable tray, used for managing and securing ethernet and other cables.
• Front accessible air filter.
• Three hot swappable FortiGate-5140 cooling fan trays.
FortiGate-5140 chassis back panel
Figure 2 on page 7 shows the back panel of the FortiGate-5140 chassis. The back
panel includes two hot-swappable redundant -48V/-60 VDC power entry modules
(PEMs) labelled A and B. Fortinet ships the FortiGate-5140 chassis with PEM A
and B installed. The PEMs provide redundant DC power connections for the
FortiGate-5140 chassis and distribute DC power to the chassis slots and to the
fan trays.
Figure 2: FortiGate-5140 chassis back panel
BPEM PEM A
12341234
-48V/-60 VDC nom RETURN
12341234
PEM
12341234
-48V/-60 VDC nom RETURN
12341234
PEM
A
B
1412108642135791113
Power
Entry Module A
(terminal block
cover removed)
Power
Entry Module B
Chassis
ground
connector
(green) -48V/-60 VDC
nom (black)
RTN
(red)
RTN
(red)
Back cable
tray
TERMINAL BLOCK COVER
Remove terminal block cover and
decable before removing PEM.
TERMINAL BLOCK COVER
Remove terminal block cover and
decable before removing PEM.
ESD
socket
GND
-48V
RTN
-48V/-60 VDC
nom (black)
Backplane
slot numbers
Backplane
slot filler
panels

FortiGate-5140 Chassis Guide
801-30000-0396-20070201
Physical description of the FortiGate-5140 chassis FortiGate-5140 chassis
If you require redundant power you should connect both PEMs to DC power.
If redundant power is not required, you should connect PEM A to DC power. Each
PEM has four -48V/-60 VDC connectors and 4 RTN connections. All eight of these
connectors should be connected to DC power. Figure 2 on page 7 shows the
terminal block cover removed from PEM A and the wiring required to connect
PEM A to DC power. While operating the FortiGate-5140 both terminal block
covers should be installed.
For detailed information about connecting power to the FortiGate-5140 chassis,
see “Connecting a FortiGate-5140 chassis to data center DC power and data
center ground” on page 15 or “Connecting the FortiGate-5140 chassis to AC
power using the FortiGate-5053 power converter tray” on page 18.
The power entry modules are hot swappable, which means you can remove and
replace a defective PEM while the FortiGate-5140 is operating assuming that the
FortiGate-5140 system has both PEMs connected to DC power for redundancy.
The back panel also includes the back cable tray, an ESD socket and the chassis
ground connector. The ground connector must be connected to Data Center
ground (see “Connecting the FortiGate-5140 chassis to data center ground” on
page 25). Use the back cable tray for securing and managing DC power, RTN,
and ground wires.
The back panel also contains 14 backplane slots, which are numbered to
correspond to the front panel slots. The backplane slots are used by some
FortiGate-5000 series modules for various functions. When the FortiGate-5140
chassis is shipped, these slots are covered by backplane slot fillers.
Physical description of the FortiGate-5140 chassis
The FortiGate-5140 chassis is a 12U chassis that can be installed in a standard
19-inch rack. Table 1 describes the physical characteristics of the FortiGate-5140
chassis.
Table 1: FortiGate-5140 chassis physical description
Dimensions 21 x 19 x 20.6 in. (53.3 x 48.3 x 52.4 cm)
(Height x Width x Depth)
Shipping weight
completely assembled
with packaging
110 lb. (50 kg)
Operating environment Temperature: 32 to 104°F (5 to 45°C)
Relative humidity: 5 to 85% (Non-condensing)
Storage environment Temperature: -13 to 158°F (-25 to 70°C)
Relative humidity: 5 to 85% (Non-condensing)
Power consumption Maximum: 2,980W DC
Power input 2x redundant -37VDC to -72VDC, 30A per power feed (total 4
+ 4 power feeds)

FortiGate-5140 chassis FortiGate-5140 shelf alarm panel
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 9
FortiGate-5140 shelf alarm panel
The FortiGate-5140 shelf alarm panel (SAP), located at the top of the
FortiGate-5140 front panel, provides LED indicators of FortiGate-5140 alarms, a
telco alarm connector, an alarm LED reset button, and console access to the
FortiGate-5140 shelf managers. The LED alarm indicators include critical, major,
and minor alarms as well as three user defined alarms.
The alarm LED reset button (RESET) on the shelf alarm panel activates the Alarm
Cutoff (ACO) state. When ACO is activated, the active alarm LEDs blink and all of
the alarm relays are deactivated.
Figure 3: FortiGate-5140 shelf alarm panel front panel
Table 2 lists and describes the FortiGate-5140 shelf alarm panel LEDs.
Table 5 lists and describes the FortiGate-5140 shelf alarm panel connectors.
Table 2: FortiGate-5140 shelf alarm panel LEDs
LED State Description
CRITICAL Off Normal operation.
Red Indicates a critical alarm.
Blinking
Red Alarm cutoff (ACO) activated by pressing the alarm LED reset button.
MAJOR Off Normal operation.
Red Indicates a major alarm.
Blinking
Red Alarm cutoff (ACO) activated by pressing the alarm LED reset button.
MINOR Off Normal operation.
Amber Indicates a minor alarm.
Blinking
Amber Alarm cutoff (ACO) activated by pressing the alarm LED reset button.
USER1
USER2
USER3
Off Normal operation
Amber Indicates a user-definable alarm.
Blinking
Amber Alarm cutoff (ACO) activated by pressing the alarm LED reset button.
CRITICAL
RESET
MAJOR
MINOR
USER1
USER2
USER3
5140SAP
SERIAL1 SERIAL 2 ALARM
Mounting
Knot
Mounting
Knot
Telco Alarm
Interface
Alarm
LED Reset
Button
Minor Alarm (Amber)
Major Alarm (Red)
Critical Alarm (Red)
User 1 Alarm (Amber)
User 2 Alarm (Amber)
User 3 Alarm (Amber)
Serial 1 (Primary
Shelf Manager)
Serial 2 (Secondary
Shelf Manager)

FortiGate-5140 Chassis Guide
10 01-30000-0396-20070201
FortiGate-5140 shelf alarm panel FortiGate-5140 chassis
Shelf alarm panel telco alarms
The shelf alarm panel telco alarm interface relay circuits are capable of carrying
60 VDC or 1 A with a max. rating of 30 VA. The shelf alarm panel accepts timed
pulse inputs for clearing minor and major alarm states. Reset is accomplished by
asserting a voltage differential from 3.3 V to 48 V for between 200 and 300 ms.
The acceptance voltage range is from 0 to 48 VDC continuous (handles up to 60
VDC at a 50% duty cycle). The current drawn by a reset input does not exceed 12
mA.
The alarm LED reset button activates the alarm cutoff (ACO) state for major,
minor, and user-defined alarms. You cannot reset critical alarms with the alarm
LED reset button.
When the ACO state is activated, active alarm LEDs blink and all of the alarm
relays are deactivated. The alarm reset button activates the ACO state but does
not clear the alarm completely.
Figure 4: The telco alarm connector (DB-15 male)
Table 3: FortiGate-5140 shelf alarm panel connectors
Connector Type Speed Protocol Description
SERIAL 1
SERIAL 2 RJ-45 115,200
bps RS-232 serial Serial connection to the command line interface of each shelf manager. Serial 1
connects to the primary (upper) shelf
manager. Serial 2 connects to the
secondary (lower) shelf manager. The
serial default configuration is 115,200
baud, no parity, 8 data bits, and 1 stop bit.
ALARM micro
DB-15
male
N/A Telco
Form-c The external dry relay Telco alarm interface (48VDC) provides Telco form-c
relay connections for minor, major and
critical power faults. The cable required to
connect to the alarm interface is not
supplied by Fortinet.
Table 4: Telco alarm connector pin assignment
Pin Name Description
1 AMIR+ MinorReset+
2 AMIR- MinorReset-
3 AMAR+ MajorReset+
4 AMAR- MajorReset-
5 ACNO CriticalAlarm - NO
6 ACNC CriticalAlarm - NC
7 ACCOM CriticalAlarm - COM
8 AMINO MinorAlarm -NO
9 AMINC MinorAlarm - NC
1
915
8

FortiGate-5140 chassis FortiGate-5140 shelf managers
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 11
FortiGate-5140 shelf managers
The FortiGate-5140 chassis includes two identical redundant hot-swappable shelf
managers, located in the dedicated shelf manager slots on the right of the
FortiGate-5140 front panel. The primary shelf manager is installed above the
secondary shelf manager. The FortiGate-5140 and 5050 chassis include the
same shelf managers.
The shelf managers support redundant operation with automatic switchover. If
both shelf managers are operating normally, one acts as the active shelf manager
and the other as the standby. Usually the primary shelf manager would be the
active shelf manager and the secondary shelf manager would be the standby
shelf manager. The shelf managers monitor each other and either can trigger a
switchover if necessary. The active shelf manager performs all shelf manager
functions. If the active shelf manager fails or is removed, the standby shelf
manager takes over all shelf manager functions.
The FortiGate-5140 shelf managers control chassis power up and power down,
chassis power distribution, monitor chassis operating parameters, monitor and
control chassis cooling,and can signal alarms if the chassisencounters problems.
All FortiGate-5000 modules installed in the chassis communicate with the shelf
managers.
The FortiGate-5140 shelf managers are factory installed. In most cases users do
not have to install or configure the shelf managers.
Each shelf manager has two ethernet interfaces (ETH 0 and ETH 1). You can
connect to ETH 0 from the shelf manager front panel. ETH 1 connects to the
FortiGate-5140 backplane.
The shelf managers detect alarm conditions and communicate alarm signals to
the FortiGate-5140 shelf alarm panel. The shelf alarm panel also contains serial
interfaces for connecting to the shelf managers.
The shelf managers are hot swappable. You can remove a shelf manager by
opening the extraction lever until the hot swap LED starts blinking. When the hot
swap LED turns solid blue you can remove the shelf manager from the
FortiGate-5140 chassis.
10 AMINCOM MinorAlarm - COM
11 AMANO MajorAlarm - NO
12 AMANC MajorAlarm - NC
13 AMACOM MajorAlarm - COM
14 APRCO PwrAlarm - NO
15 APRCOM PwrAlarm - COM
Shield Shelf-GND Shelf Ground
Table 4: Telco alarm connector pin assignment (Continued)
Pin Name Description

FortiGate-5140 Chassis Guide
12 01-30000-0396-20070201
FortiGate-5140 shelf managers FortiGate-5140 chassis
Figure 5: FortiGate-5140 shelf manager front panel
Table 5 lists and describes the FortiGate-5140 shelf manager LEDs.
Shelf Manager fan and power control
The FortiGate-5140 shelf managers monitor the internal temperature of the
FortiGate-5140 chassis and adjust the operating speed of the FortiGate-5140
chassis cooling fans as required. If the temperature in the chassis becomes too
high, the shelf managers can also power down FortiGate-5000 modules installed
in the chassis to help reduce the temperature.
When the chassis is first powered on all cooling fans run at full speed. Once the
shelf manager is up and running, the shelf manager reduces cooling fan speeds to
maintain an optimum temperature in the chassis. If shelf managers are not
installed or not operating correctly the FortiGate-5140 chassis cooling fans always
operate at full speed.
Table 5: FortiGate-5140 shelf manager LEDs
LED State Description
ETH 0
ETH 1 10/100 Yellow The Ethernet interface is connected at 100 Mbps.
link/Act Green Blinking LED indicates network traffic.
Off No link.
STATUS Green This shelf manager is operating normally as the active shelf
manager. Usually the primary shelf manager operates as
the active shelf manager.
Red This shelf manager is operating normally as the backup
shelf manager. Usually the secondary shelf manager
operates as the standby shelf manager.
HOT SWAP Off The shelf manager is not ready to be removed.
Blue The shelf manager is ready to be removed.
Long blink The shelf manager is starting up after being inserted into the
chassis.
Short
blink The shelf manager is shutting down in preparation for being removed from the chassis.
10/100
link/Act
ETH0
Service
RESET
STATUS
Hot Swap
link/Act
ETH0 ETH1
10/100
5000SM
Mounting
Knot
ETH 0 and 1 network
activity LEDs
ETH0
100base-T
Ethernet
Status
LEDs
Extraction
lever
Reset
Button
Hot Swap
LED

FortiGate-5140 chassis Air filter
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 13
Air filter
The FortiGate-5140 chassis includes a front accessible air filter. This filter must be
in place for the FortiGate-5140 chassis to operate normally. If the air filter is not
locked into place this is detected by an air filter presence switch.
Air filters should be inspected regularly and cleaned if dirty or replaced if
damaged. If the filter becomes dirty, clean it with a vacuum or with compressed
air. The filter meets the requirements of the Telcordia Technologies Generic
Requirements GR-78-CORE specification.
The air filter can be removed by pulling the air filter handle on the front of the
FortiGate-5140 chassis. To install a new filter, push the air filter into the guide rails
at each side of the shelf until the filter locks into place.
Cooling fan trays
The FortiGate-5140 chassis contains three interchangeable hot-swappable
cooling fan trays installed at the front bottom of the chassis.
You can remove any fan tray by lifting the front cable tray, pressing the hot swap
button on the tray front panel, fully loosening the mounting knots, and then pulling
the fan tray out using the extraction handle.
Each cooling fan tray contains two radial fans for cooling the modules installed in
the FortiGate-5140 chassis. Fan speeds are monitored by a tachometer signal
sent from the cooling fan trays to the shelf manager. The shelf manager regulates
the fan speed by adjusting the DC voltage supplied to the fan trays.
Figure 6: Cooling fan tray front panel
FAN TRAY
Hot swap
button
Hot swap
LED Fan tray
alarm LED
Fan tray
OK LED

FortiGate-5140 Chassis Guide
14 01-30000-0396-20070201
Cooling fan trays FortiGate-5140 chassis

Power connection and configuration About data center DC power
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 15
Power connection and configuration
This chapter describes how to connect data center DC power to a FortiGate-5140
chassis. If data center DC power is not available, this document also describes
how to use the FortiGate-5053 power convertor tray to supply DC power to the
FortiGate-5140 chassis.
This chapter describes:
•About data center DC power
•Connecting a FortiGate-5140 chassis to data center DC power and data center
ground
•Connecting the FortiGate-5140 chassis to AC power using the FortiGate-5053
power converter tray
•Turning on FortiGate-5140 chassis power
About data center DC power
The FortiGate-5140 chassis is designed to be installed in a data center or similar
location that has available -48VDC power (also called battery power). Fortinet
expects that most FortiGate-5140 customers will be installing their FortiGate
equipment in a data center or similar location that is already equipped with a -
48VDC power system that provides power to existing networking or telecom
equipment. The FortiGate-5140 chassis are designed to be connected directly to
this DC power system.
In this document, data center DC power refers to a -48VDC power system that is
already available at the location at which the FortiGate-5140 chassis is being
installed.
Connecting a FortiGate-5140 chassis to data center DC power
and data center ground
Connect the FortiGate-5140 chassis to data center DC power using the redundant
power entry modules (PEMs) on the FortiGate-5140 back panel. Fortinet supplies
and recommends AWG-14 stranded wires for all power connections: Black for
-48VDC and red for RTN. Green AWG-6 wires are recommended for ground
connections. If required, install terminal lugs on the wires before connecting them
to the PEM terminal strips. Connect all eight of the terminals on the PEM terminal
strips, four black -48VDC connections and four red RTN connections.
Each FortiGate-5140 PEM includes 4 connectors that connect power to 4 different
power zones in the FortiGate-5140 chassis. Each power zone supplies power to
different FortiGate-5140 slots and cooling fan trays. You should always connect all
4 power zones.

FortiGate-5140 Chassis Guide
16 01-30000-0396-20070201
Connecting a FortiGate-5140 chassis to data center DC power and data center ground Power connection and configuration
If you are connecting both PEMs the -48VDC and RTN terminals on PEM A and
PEM B must be wired symmetrically. This means that the connections must be the
same to both PEMs.
FortiGate-5140 PEMs are hot-swappable, which means you can remove and
replace a defective PEM while the system is operating (assuming that the
FortiGate-5140 system has both PEMs connected for redundancy). It is not
necessary to notify the software or reset the system power. You can add, remove,
or replace a second PEM without interrupting FortiGate-5140 operation.
This section describes:
•Connecting a FortiGate-5140 PEM to data center DC power
•Connecting the FortiGate-5140 chassis to data center ground
Connecting a FortiGate-5140 PEM to data center DC power
The following procedure describes how to connect power to PEM A. You can
repeat this procedure to connect PEM B.
Figure 7: Connecting a FortiGate-5140 PEM to data center DC power
You need the following tools and equipment to connect a FortiGate-5140 PEM to
data center DC power:
• A number 2 Phillips screwdriver.
• An electrostatic discharge (ESD) preventive wrist or ankle strap with
connection cord.
• Four black AWG-14 stranded wires with terminal lugs attached and labelled
-48V.
• Four red AWG-14 stranded wires with terminal lugs attached and labelled
RTN.
12341234
-48V/-60 VDC nom RETURN
12341234
PEM
RTN (positive)
terminal strip
connectors
1, 2, 3, 4
RTN (positive)
red to Data
Center RTN
-48V/-60 VDC nom
terminal strip
connectors
1, 2, 3, 4
-48V/-60 VDC
black to Data
Center -48VDC
Data Center
-48VDC connector
Data Center
RTN connector
RTN
TERMINAL BLOCK COVER
Remove terminal block cover and
decable before removing PEM.
-48V
Hot swap
button
Hot swap
LED
A
larm LED
OK LED

Power connection and configuration Connecting a FortiGate-5140 chassis to data center DC power and data center ground
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 17
To connect a FortiGate-5140 PEM to data center DC power
1Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal
surface on the chassis or frame.
2Loosen the screws and remove the terminal block cover from the FortiGate-5140
PEM.
3Connect the DC power wires (see Figure 7):
• Connect a black -48V power wire from the data center DC power source to
connector 1 on the FortiGate-5140 PEM terminal strip labeled -48V/-60 VDC
nom.
• Connect a black -48V power wire from the data center DC power source to
connector 2 on the FortiGate-5140 PEM terminal strip labeled -48V/-60 VDC
nom.
• Connect a black -48V power wire from the data center DC power source to
connector 3 on the FortiGate-5140 PEM terminal strip labeled -48V/-60 VDC
nom.
• Connect a black -48V power wire from the data center DC power source to
connector 4 on the FortiGate-5140 PEM terminal strip labeled -48V/-60 VDC
nom.
• Connect a red RTN return wire from data center RTN to connector 1 on the
FortiGate-5140 PEM terminal strip labeled RTN.
• Connect a red RTN return wire from data center RTN to connector 2 on the
FortiGate-5140 PEM terminal strip labeled RTN.
• Connect a red RTN return wire from data center RTN to connector 3 on the
FortiGate-5140 PEM terminal strip labeled RTN.
• Connect a red RTN return wire from data center RTN to connector 4 on the
FortiGate-5140 PEM terminal strip labeled RTN.
4Secure the power cabling to the chassis using tie wraps and the back cable tray.
5If required, label the black wires -48V.
6If required, label the red wires RTN.
7Re-attach the terminal block cover to the FortiGate-5140 PEM.
Connecting the FortiGate-5140 chassis to data center ground
The FortiGate-5140 chassis includes a ground terminal on the lower left side of
the FortiGate-5140 back panel (see Figure 2 on page 7). The shelf ground
terminal provides two M6 bolts to connect a double-lug ground terminal cable.
This connector must be connected to data center ground.
You need the following tools and equipment to connect the FortiGate-5140
chassis to ground:
• A number 2 Phillips screwdriver.
• An electrostatic discharge (ESD) preventive wrist or ankle strap with
connection cord.
• One green AWG-6 stranded wire with terminal lug with 45° angle tongue
attached.

FortiGate-5140 Chassis Guide
18 01-30000-0396-20070201
Connecting the FortiGate-5140 chassis to AC power using the FortiGate-5053 power converter tray Power connection and configuration
Figure 8: Connecting a FortiGate-5140 chassis to data center ground
To connect the FortiGate-5140 chassis to data center ground
1Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal
surface on the chassis or frame.
2Connect the green ground wire from the data center ground to the ground
connector on the FortiGate-5140 chassis (see Figure 8).
3Secure the ground wire to the chassis using tie wraps and the back cable tray.
4Optionally label the ground wire GND.
Connecting the FortiGate-5140 chassis to AC power using the
FortiGate-5053 power converter tray
If data center DC power is not available, you can use the FortiGate-5053 power
converter tray with FortiGate-5140 power supplies (shown in Figure 9) to convert
AC power to DC power. The FortiGate-5053 power converter tray and the power
supplies are not supplied with the FortiGate-5140 chassis and must be purchased
separately.
This section contains the following information about the FortiGate-5140 chassis
and the FortiGate-5053 power converter tray:
•FortiGate-5053 power converter tray front and back panel
•Selecting the power supplies and power convertor trays that you need for your
FortiGate-5140 configuration
•Connecting a FortiGate-5140 chassis to the FortiGate-5053 power converter
tray
•Connecting the FortiGate-5140 chassis to data center ground
FortiGate-5140
Ground
connector
Data Center
ground
connector
Chassis
ground
connector
(green)
GND

Power connection and configuration Connecting the FortiGate-5140 chassis to AC power using the FortiGate-5053 power converter tray
FortiGate-5140 Chassis Guide
01-30000-0396-20070201 19
FortiGate-5053 power converter tray front and back panel
The front panel of the FortiGate-5053 power converter tray (shown in Figure 9)
provides access to the FortiGate-5140 power supplies.
Figure 9: Front panel of the FortiGate-5053 power converter tray with one power
supply removed
The back panel of the FortiGate-5053 (shown in Figure 10) includes one DC
power connector terminal consisting of a RTN connector and a -48VDC
connector:
• The -48VDC connector is labelled V- and may also be labelled with -48V
(BLACK).
• The RTN connector is labelled V+ and may also be labelled RTN (RED)
Each FortiGate-5140 PEM includes 4 connectors that connect power to 4 different
power zones in the FortiGate-5140 chassis. Each power zone supplies power to
different FortiGate-5140 slots and cooling fan trays. You should always connect all
4 power zones. See “Connecting a FortiGate-5140 chassis to the FortiGate-5053
power converter tray” on page 23 for details.
Figure 10: Back panel of the FortiGate-5053 power converter tray
The back panel also includes three AC power connectors, numbered 1, 2, 3.
The AC connector numbering corresponds to the slot numbering showing in
Figure 9. Each connector connects AC power directly to a FortiGate-5140 power
supply. The FortiGate-5053 can contain 1, 2, or 3 FortiGate-5140 power supplies
depending on your requirements. You should only connect AC power to the power
supplies that are installed.
AC input power characteristics:
• AC input voltage: 110 to 250 VAC
• AC input current: 10A
• Frequency: 47 to 63 Hz
Slot 1
Slot 2
Power LEDs
Slot 3
V-V+
100-240VAC 1 2 3RTN(RED) -48V(BLACK)
V+
(RTN)
(RED)
V-
-48V
(BLACK)
DC out
AC in
-48V
-48V
RTN
RTN

FortiGate-5140 Chassis Guide
20 01-30000-0396-20070201
Connecting the FortiGate-5140 chassis to AC power using the FortiGate-5053 power converter tray Power connection and configuration
Selecting the power supplies and power convertor trays that you need for
your FortiGate-5140 configuration
This section provides some basic information for determining how many
FortiGate-5053 power converter trays and FortiGate-5140 power supplies that
you need, depending on the power requirements of your FortiGate-5140 chassis.
This section provides guidelinesonly. Actual requirements may vary depending on
your installation requirements. Contact Fortinet Technical Support if you need
more information.
The FortiGate-5053 power converter tray contains space for up to three
FortiGate-5140 power supplies. A FortiGate-5140 power supply converts AC
power to -48 VDC power. Each FortiGate-5140 power supply provides 1200W of
power.
The FortiGate-5053 power converter tray uses 2 + 1 power supply redundancy.
If three FortiGate-5140 power supplies are installed in a FortiGate-5053 power
converter tray, the first two power supplies provide a total of 2400W (2 x 1200W)
of power. The third power supply is the redundant backup.
The maximum power output for a FortiGate-5053 power converter tray with
FortiGate-5140 power supplies is 2400W; which can be achieved with two
FortiGate-5140 power supplies. If you need 2400W of power and power supply
redundancy, you can add a third FortiGate-5140 power supply.
Individual power requirements vary. If 1200W is enough power and redundancy is
not required, you require one FortiGate-5053 power converter tray and one
FortiGate-5140 power supply.
If 1200W is sufficient but a redundant power supply is required, you can add a
second FortiGate-5140 power supply. This second power supply will also cover
power requirements between 1200 and 2400W. If you require redundant power
greater than 1200W you can add a third FortiGate-5140 power supply.
Basic power requirements
To supply enough power for a FortiGate-5140 chassis with a total of 14 FortiGate
and FortiSwitch modules you require one FortiGate-5053 power converter tray
and two FortiGate-5140 power supplies (see Figure 11). The FortiGate-5140
power supplies are installed in FortiGate-5053 slots 1 and 2. This configuration
supplies 2400W of power to the FortiGate-5140 chassis.
Note: If you will not be filling all of the FortiGate-5140 slots you may not need both
FortiGate-5140 power supplies.