Fortinet FortiADC 4000D User manual

ApplicAtion Delivery controller
FortiADC™4000D
QuickStart Guide

1
Table of contents
Package contents ........................................1
Rack mounting ..........................................2
Installing SFP transceivers ..................................6
Connecting to FortiADC....................................8
Shutting down ..........................................10
Registering your product ..................................11
Ports & LEDs...........................................12
Cautions and warnings ...................................15
Regulatory notices.......................................17
License agreement & warranty..............................19
2 Power Cables Console Cable Ethernet Cable
Tools and Documentation
FortiADC 4000D
QuickStart Guide
Tools and
Documentation
CD
QuickStart Guide
5 Rubber Feet
2 Rack-Mount
Brackets 8 Front
Screws
28 Side
Screws
6 Side
Screws
2 Sliding Rails
2 Sliding Rail
Handles
10 Front
Screws
20 Crosshead
threaded screws
Package contents
The box should contain:
FortiADC 4000D appliance
FortiADC 4000D QuickStart Guide
Tools and Documentation CD
2 Power cables
Ethernet cable
Console cable
5 Rubber feet
2 Rack-mount brackets
2 Sliding rail handles
6 Sliding rails (2 pairs inner rails, 1 pair outer rails)
72 Screws for sliding rails and rack mount brackets

2 3
Rack mounting
FortiADC appliances should be installed in a restricted access location
such as a locked data center to ensure their physical security, which is
fundamental to your network security.
Either place the FortiADC appliance on a at surface, or mount it in any
standard 19 inch (48.3cm) rack with the rack-mount brackets. In a rack, a
FortiADC 4000D occupies 2U (3.5inches/8.9 cm).
You can use rack-mount brackets or sliding rails, according to your
requirements.
Racking-mount brackets
• 2-post rack: Attach the rack-
mount brackets to the middle
of each side of appliance so
that its weight is distributed
evenly.
• 4-post rack: Attach the rack-
mount brackets to the front
of each side of the appliance
with anges facing outwards,
towards the notches in the
rack.
Sliding rails
1. Install the inner rails to the chassis:
a. Release and detach the inner member from the slide.
b. Align the screw holes of the rail and the mounting holes of the
chassis and then attach the inner rail to the chassis.

4 5
c. Repeat the above steps for the other rails on the same side (two
inner rails need to be installed on each side).
d. Attach the front ear bracket (short) to the appliance.
e. Likewise, attach the inner rails and front ear bracket to the other
side of the appliance chassis.
2. Attach the outer rail bracket to the posts of the rack:
a. Install the outer rail by attaching the rail bracket to the posts of the
rack. Use two countersink screws and washers or the original rack
manufacturer’s bracket screws.
Do not completely tighten the screws; leave them loose so that the
middle rail can slide for adjustment.
b. Extend and adjust the rear bracket to meet the appropriate depth
of the rack and install it to the rack post rmly with rack bracket
screws.
c. Repeat the above steps to install the other rail to the rack.
3. Install the appliance to the rack:
a. Verify the ball bearing retainer is locked forward.
b. Install the system half-way into the slide rail.
c. Slide the release tab and push the system into the rack.

6 7
Installing SFP transceivers
If not already installed, install the transceivers that will be used to connect
your appliance to the network.
Caution: Do not install or remove transceivers while ber-optic cables are
still attached. This can cause damage to the cables, cable connectors, and
optical interfaces. It may also prevent the transceiver from latching correctly
into the socket.
Note: Installing and removing transceivers can shorten their life. Do not
install or remove transceivers more than is necessary.
Extraction Lever
Transmit
Optical Bore
Receive
Optical Bore Socket Latch
SFP Cage Sockets
To install the transceivers
1. On the appliance’s front panel, remove the caps from the cage sockets.
2. Position the transceiver in front of the cage socket so that the extraction
lever is level with the socket latch.
Note: Cage socket orientation may vary. Ensure that the transceiver
module is correctly oriented.
3. Holding the sides of the transceiver, gently slide it into the cage socket.
Caution: Do not force transceivers into cage slots. Force can cause
damage. If the transceiver does not easily slide in and click into place,
it may not be aligned correctly or may be upside down. If this happens,
remove the transceiver, realign or rotate it, and try again.
4. Press the transceiver rmly into the cage socket with your thumb until it
clicks, indicating that it is latched.
5. To verify that the transceiver is latched, grasp its sides and try to pull it out
without lowering the extraction lever.
If you can remove the transceiver, it was not latched correctly, and could
become accidentally dislodged. Try again.
To remove the transceivers
1. Disconnect the ber optic cable from the transceiver connector.
2. To prevent dust from entering the optical bores, insert clean plugs.
3. To eject the transceiver, pull the extraction lever out and down.
Tip: Instead of using your nger, try a small at-head screwdriver.
4. Hold the sides of the transceiver and carefully pull it from the cage socket.
5. Replace the cap on the cage socket.
6. Put the removed transceiver into an anti-static bag.

8 9
Connecting to FortiADC
If the appliance has a redundant power supply, connect each power cable
to a different power source.
You can congure FortiADC for your network through a connection to
eitherits web UI or command line interface (CLI).
Connect FortiADC only to your computer until you nish setup. (If you
place FortiADC in your network before FortiADC is set up, trafc could be
interrupted until setup is complete.) Deployment instructions are in the
FortiADC Handbook.One typical, basic network topology is shown below.
FortiADC-4000D
POWER
STATUS
HDD
RESET
MGMT
CONSOLE USB
1 2 3 4 13 14 15 16
5/6 7/8 9/10 11/12
17/18 19/20 21/22 23/24
Link to
ISP1
Link to
ISP2
Internet
Firewall Switch
Administrator
Servers
FortiADC
To connect to the web UI
Requires: Microsoft Internet Explorer 8, Mozilla Firefox 20, Apple Safari 6,
or Google Chrome 20 or newer
1. Using the Ethernet cable, connect the MGMT port of the appliance to
your computer.
2. Congure your computer to match the appliance’s default MGMT subnet.
For example, on Windows 7, go to the Control Panel Networkand Sharing
Center. In Local Area Connection, click the Properties button. Select
InternetProtocolVersion4 (TCP/IPv4) then click its Properties button.
Select Use the following IP address and set the following values:
• IP address: 192.168.1.2
• Subnet mask: 255.255.255.0
3. To connect to FortiADC’s web UI, start a web browser and go to
https://192.168.1.99. (Remember to include the “s” in https://.)
4. Type admin in the Name eld, leave the Password eld blank, then click
Log In.
To connect to the CLI via serial console
Requires: Terminal emulator such as PuTTY, TeraTerm, or a terminal server
1. Using the console cable, connect the appliance’s console port to your
terminal server or computer.
2. On your computer or terminal server, start the terminal emulator.
Usethesesettings:
• Baud rate: 9600
• Data bits: 8
• Parity: None
• Stop bits: 1
• Flow control: None
3. Press Enter on your keyboard to connect to the CLI.

10 11
Shutting down
Always properly shut down the FortiADC
appliance’s operating system before turning off
the power switch or unplugging the appliance.
This causes it to nish writing buffered data, and
to slow and park the harddisks.
Do not unplug or switch off the FortiADC
appliance before halting the operating
system. Failure to shut down correctly could
cause dataloss and hardware problems.
To power off the appliance via the web UI
1. Go to System > Status > Dashboard.
2. In the System Information widget, click the Shut Down button.
The appliance becomes more quiet when it stops its hardware
and operating system, indicating that it is ready for power to be
disconnected.
3. Disconnect the power cable from the power supply.
To power off the appliance via the CLI
1. Either connect to the CLI using a terminal emulator, or connect to the
webUI and go to the CLI Console widget.
2. Enter the following command:
execute shutdown
The appliance becomes more quiet when it stops its hardware and
operating system, indicating that it is ready for power to be disconnected.
3. Disconnect the power cable from the power supply.
Registering your product
Register
You must register the product with Fortinet
inorder to receive:
• Technical support • Software updates
Enregistrer
Vous devez enregistrer le produit pour recevoir:
•Support technique •Mises-à-jour logiciel
Registra
La registrazione vi permette di usufruire di:
• Supporto tecnico •Aggiornamenti software
Registrar
Debe registrar el producto para recibir:
• Apoyo técnico •Actualizaciones del software
登録のお願い
下記フォーティネットからのサービスを受けるために、ご購入製品の登録が必要
で す 。
• テクニカルサポート • ソフトウェアのアップデート
请马上注册
您的飞塔产品
您在注册以后才能得到技术支持, 软件升级
Web: https://support.fortinet.com/
Toll free: 1 866 648 4638
Phone: [phone]
Fax: [phone]
Email: [email protected]

12 13
Ports & LEDs
Alarm off
FortiADC-4000D
POWER
STATUS
HDD
RESET
MGMT
CONSOLE USB
1 2 3 4 13 14 15 16
5/6 7/8 9/10 11/12
17/18 19/20 21/22 23/24
3
2
4
5
Back
Front
61
7
2
89
# Interface Type Protocol Description
1 SFP Ports
17-24
SFP Gigabit
Ethernet
Connections to your network & the
Internet. SFP tranceiver.
2 SFP+ Ports
1-4, 13-16
SFP+ 10-Gigabit
Ethernet
Connections to your network & the
Internet. SFP tranceiver.
3 Ethernet
Ports 5-12
RJ-45 Gigabit
Ethernet
Connections to your network & the
Internet.
4 USB Ports
1 - 2
USB-A USB 2.0 Reserved for future use.
5 Console RJ-45 RS-232 serial Connection to the management
computer. 9600 bps access to the
CLI.
6 MGMT RJ-45 Gigabit
Ethernet
Management port. Default IP
address is https://192.168.1.99.
7 Redundant
Power
Connections
100 - 240 V AC
50 - 60 Hz
9 - 4 A
8Power supply
alarm on/off
9 Power on/off
Alarm off
FortiADC-4000D
POWER
STATUS
HDD
RESET
MGMT
CONSOLE USB
1 2 3 4 13 14 15 16
5/6 7/8 9/10 11/12
17/18 19/20 21/22 23/24
5
3
2
14
10
8 9
6 5 7
# LED State Description
1 Power (top) Green The appliance is receiving power.
2 Status (middle)
Off System is normal.
Green Minor system alarm.
Red System failure.
3 HDD (bottom) Flashing
Amber
Hard drive read or write activity.
4
MGMT Network
Activity (left)
Flashing
Amber
Port is transmitting & receiving data.
Off No link detected.
MGMT Network
Speed (right)
Amber Port is connected at 1 Gbps.
Green Port is connected at 100 Mbps.
Off Port is connected at 10 Mbps or is not in
use.
5
SFP+ Ports -
Speed (left)
Green Port is connected at 1 Gbps or 10 Gbps.
Off No link detected.
SFP+ Ports -
Activity (right)
Amber Link detected.
Flashing
Amber
Port is transmitting & receiving data.
Off No link detected.

14 15
# LED State Description
6
Ethernet Ports -
Activity (left)
Flashing
Amber
Port is transmitting & receiving data.
Off No link detected.
Ethernet Ports -
Speed (right)
Amber Port is connected at 1 Gbps.
Green Port is connected at 100 Mbps.
Off Port is connected at 10 Mbps or is not in
use.
7
SPF Ports -
Activity (left)
Flashing
Amber
Port is transmitting & receiving data.
Off No link detected.
SPF Ports - Speed
(right)
Amber Port is connected at 1 Gbps.
Off No link detected.
8SSL Accelerator -
Power
Green The SSL Accelerator card is receiving
power.
9SSL Accelerator -
Alarm
Red Accelerator card failure.
Off Accelerator is operating normally.
10 Power supply
status
Green Power supply is operating normally.
Cautions and warnings
Environmental specications
• Operating temperature — If this device is installed in a closed or multi-unit
rack assembly, the rack’s ambient temperature may be greater than the room’s
ambient temperature. Make sure the rack environment is compatible with the
manufacturer’s maximum rated ambient temperature (Tma).
Température ambiante élevée — Si cet appareil est installé dans un
cabinet fermé, la température ambiante du cabinet peut être supérieure à la
température ambiante de la pièce. Assurez- vous que l’environnement dans le
cabinet est compatible avec la température ambiante maximale du fabricant
(Tma).
• Air ow — For rack installation, make sure that the amount of air ow required
for safe operation of the equipment is not compromised. For free-standing
installation, make sure that the appliance has at least 2 inches (5 cm) of
clearance on each side to allow for adequate air ow and cooling.
Ventilation — Pour une installation dans un cabinet, assurez-vous que
la ventilation nécessaire au fonctionnement de l’équipement n’est pas
compromise. Pour une installation autonome, assurez-vous que l’appareil
dispose d’au moins 2 pouces (5 cm) de dégagement de chaque côté pour
permettre l’écoulement de l’air et un refroidissement adéquat.
• Circuit overloading — To avoid overloading, use the ratings on the label.
Consider the equipment’s connection to the supply circuit and the effect that
circuit overloading might have on current protection and supply wiring.
For redundant power sources, connect each to an IEC/UL Listed power source
whose output rating is greater than or equal to the equipment.
Surtension — Pour éviter de surcharger le circuit d’alimentation, référez-
vous aux notes sur l’étiquette de l’équipement . Envisagez l’effet que la
surtension du circuit pourrait avoir sur la protection de surtension et le câblage
d’alimentation.
Pour les sources d’alimentation redondantes, connectez chacun à une source
d’alimentation Mis CEI / UL dont la cote de rendement est supérieur ou égal à
l’équipement.
• Reliable earthing — Make sure all rack-mounted equipment is grounded. This
includes supply connections (e .g . power strips), not only direct connections to
the branch circuit.
Mise à la terre – Assurez-vous que tout l’équipement est mis à la terre
. Ceci comprend les connexions d’alimentation (par exemple, les barres
d’alimentation) en plus des connexions directes au circuit de dérivation.
• Interference — If possible, use Shielded Twisted Pair (STP) Ethernet cables
instead of Unshielded Twisted Pair (UTP).
Interférence — Si possible, utilisez des câbles Ethernet de paire torsadée
blindée (STP) plutôt que de paire torsadée non blindée (UTP).
• Mechanical loading — To avoid personal injury or damage to the appliance,
Fortinet recommends that 2 or more people together install the appliance into
the rack. Balance the equipment to avoid uneven mechanical loading and

16 17
tipping. Do not place heavy objects on the appliance.
Installation – Pour éviter des blessures ou des dommages à l’appareil, Fortinet
recommande que deux personnes ou plus installent ensemble cet équipement
dans un cabinet. L’installation du matériel à l’intérieur de la baie doit être
effectuée de façon à éviter toute situation dangereuse liée à une installation
non conforme . Ne placez pas d’objets lourds sur l’appareil, celui-ci n’étant
pas conçu pour soutenir un poids additionnel.
• Refer to specic Product Model Data Sheet for Environmental Specications
(Operating Temperature, Storage Temperature, Humidity, and Altitude)
Safety
• Moving Parts — Hazardous moving parts. Keep away from moving fan
blades.
Pièces mobiles – Pièces mobiles dangerouses. Se tenir éloigné des pales de
ventilateurs mobiles.
• Battery — Risk of explosion if the battery is replaced by an incorrect type. Do
not dispose of batteries in a re. They may explode. Dispose of used batteries
according to your local regulations. IMPORTANT: Switzerland: Annex 4.10 of
SR814.013 applies to batteries.
Batterie — Risque d’explosion si vous remplacez la batterie par un modèle
incompatible. Jetez les piles usagées selon les réglementations locales en
vigueur. IMPORTANT: Suisse: Annexe 4.10 de SR814.013 s’appliquant aux
batteries.
• 警告
本電池如果更換不正確會有爆炸的危險
請依製造商說明書處理用過之電池
• Power over Ethernet (PoE) — Do not connect this device to PoE networks
with routing to the outside plant. Use this equipment in a Network Environment
0 per IECTR 62101. Do not use PoE injectors that are not IEEE 802.3af
compliant. They may damage your device. The unit is intended to be powered
by PoE source of a LPS UL Listed or Class 2 IEC certied power adaptor.
Alimentation par Ethernet — Ce matériel doit être utilisé dans un
Environnement Réseau 0 par IECTR 62101. Ce matériel est uniquement
connecté aux réseaux PoE sans installation externe de routage. Cet appareil
est conforme aux normes IEEE 802.3af. Ne pas utiliser d’autres injecteurs
d’alimentation non conformes sous peine d’endommager votre matériel. Le
produit doit être alimenté par une source PoE d’une alimentation à puissance
limitée (UL Listed) ou par une alimentation Class 2 certiée par IEC.
• Caution: Disconnect power supply cords before servicing.
Attention: Débranchez les cordons de la source d’alimentation avant tout
entretien.
Regulatory notices
Federal Communication Commission (FCC) – USA
This device complies with Part 15 of FCC Rules. Operation is subject to the following two
conditions:
• This device may not cause harmful interference, and
• This device must accept any interference received, including interference that may cause
undesired operation.
This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio frequency
energy, and if it is not installed and used in accordance with the instruction manual, it may
cause harmful interference to radio communications. Operation of this equipment in a
residential area is likely to cause harmful interference, in which case the user will be required to
correct the interference at his own expense.
Warning: Any changes or modications to this product not expressly approved by the party
responsible for compliance could void the user’s authority to operate the equipment.
Industry Canada Equipment Standard for Digital Equipment (ICES) –
Canada
CAN ICES-3 (A) / NMB-3 (A)
This digital apparatus does not exceed the Class A limits for radio noise emissions from
digital apparatus set out in the Radio Interference Regulations of the Canadian Department of
Communications.
Le présent appareil numérique n’emet pas de bruits radioélectriques dépassant les limites
applicables aux appareils numeriques de la classe A préscrites dans le Règlement sur le
brouillage radioélectrique édicte par le ministère des Communications du Canada.
Product Safety Electrical Appliance & Material (PSE) – Japan
日本では電気用品安全法(PSE)の規定により、同梱している電源コードは本製品の専用電源コ
ードとして利用し、他の製品に使用しないでください。
Voluntary Control Council for Interference (VCCI) – Japan
この装置は、クラスＡ情報技術装置です。 この装置を 家庭環境で使用すると電波妨害を引き起
こすことがあります。 この場合には使用者が適切な対策を講ずるよう要求されることがありま
す。ＶＣＣＩ－Ａ
Bureau of Standards Metrology and Inspection (BSMI) – Taiwan
這是甲類的資訊產品，在居住的環境中使用時，可能會造成射頻干擾，在這種情況下，使用
者會被要求採取某些適當的對策。
The presence conditions of the restricted substance (BSMI RoHS table) are available at the
link below:
https://www.fortinet.com/bsmi
China
此为A级产品，在生活环境中，该产品可能会造成无线电干扰。这种情况下，可能需要用户
对其采取切实可行的措施。