Fortinet FortiBridge FortiBridge-1000 User manual

PWR STATUS
PWR
INT 1
INT 2 NORMAL
EXT 2
EXT 1 BYPASS MODE
MODE FACTORY RESET
FortiGate
Esc Enter
INT 2
EXT 2
DC+5V
PWR CONSOLE
TO FORTIGATE
INT 1EXT 1
Power
Change
Mode
Factory
Reset
Bypass
Mode
Normal
Mode
INT 1
INT 2
EXT 1
EXT 2
2 Orange Crossover
Ethernet Cables
USER MANUAL
FortiBridge-1000
QuickStart Guide
Copyright 2005 Fortinet Incorporated. All rights reserved.
Trademar ks
Products mentioned in this document are trademarks.
Power Cable Power Supply
RJ-45 to
DB-9 Serial Cable
Power
FortiGate unit
connections Network
connections
Console
Connection
Front
Back
EXT 2
INT 2
EXT 1
INT 1
PWR
INT1
INT2 NORMAL EXT2
EXT1 BYPASSMODE
MODE FACTORYRESET
FortiGate
EscEnter
Documentation
Router
INT 1
INT 2
EXT 1
EXT 2
Internal External
(Transparent mode)
Internal network
Internet
Switch Switch
INT 2
EXT 2
DC+5V
PWR CONSOLE
TO FORTIGATE
INT 1EXT 1
Ethernet connection to FortiGate Internal interface
Power cable connects to power supply
Ethernet connection to FortiGate External interface
Ethernet connection to External network
Ethernet connection to Internal network
Optional RJ-45 serial cable connects to management computer
Check that the package contents are complete.
Checking the package contents
1
Connector Type Speed Protocol Description
INT 1 & EXT 1 RJ-45 10/100/1000
Base-T Ethernet Copper gigabit ethernet
connections to the network.s
INT 2 & EXT 2 RJ-45 10/100/1000
Base-T Ethernet Copper gigabit ethernet
connections to FortiGate unit
interfaces.
CONSOLE RJ-45 9600 bps RS-232
serial Console connection to the command line interface (CLI).
LED Indicators
Default settings
LED State Description
PWR Green The FortiBridge unit is powered on.
Off The FortiBridge unit is powered off.
INT 1
INT 2
EXT 1
EXT 2
Green The correct cable is in use and the
connected equipment has power.
Flashing Green Network activity at this interface.
Off No link established or the interface has
been turned off.
INT 1
INT 2
EXT 1
EXT 2
(back)
Green The correct cable is in use, and the
connected equipment has power.
Flashing amber Network activity at this interface.
Off No link established.
Administrator account admin
Password (none)
Management IP 192.168.1.99
Netmask 255.255.255.0
Management Access Telnet and ping access to the INT 1
interface.
Connect the FortiBridge unit to the internal and external networks and the
FortiGate unit. Connect the power cable to the FortiBridge unit.
Connecting the FortiBridge-1000
2
Normally, you would use straight-through ethernet
cables to connect the FortiBridge-1000 unit. However,
for some connections you may need a crossover
ethernet cable (for example, for compatibility with
network devices that do not support Auto MDI/MDIX).
1. Connect the FortiBridge INT 2 interface to the
FortiGate unit internal interface.
2. Connect the FortiBridge EXT 2 interface to the
FortiGate unit external interface.
3. Connect the FortiBridge INT 1 interface to the
internal network.
4. Connect the FortiBridge EXT 1 interface to the
external network.
5. Turn on the FortiGate unit and any network
equipment that was turned off.
6. Connect the AC adapter to the power connection at
the back of the FortiBridge unit and to a power outlet.
The PWR and Bypass Mode LEDs turn on. After a short
time, the FortiBridge unit switches to Normal mode. The
Bypass LED turns off and the Normal LED turns on.
PWR
INT 1
INT 2 NORMAL
EXT 2
EXT 1 BYPASS MODE
MODE FACTORY RESET
FortiGate
Esc Enter
The FortiBridge unit functions as a pass-through device when a
FortiGate unit or FortiGate HA cluster operating in Transparent mode
fails or loses power. The FortiBridge unit bypasses the FortiGate unit to
make sure that the network can continue processing traffic. The
FortiBridge unit is not a firewall or antivirus device. FortiGate services
are not applied when the FortiBridge unit bypasses traffic.
© Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks or registered trademarks of their
respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
9 November 2006
QuickStart Guide
FortiBridge-1000
09-30000-0164-20061109

Collecting information
4
FortiBridge configuration settings
Administrator password
Management IP address/netmask
Default route
Primary DNS IP address
Secondary DNS IP address
Probes and Alerts
5
Technical support
6
Visit these links for more information and documentation for your Fortinet product.
Fortinet Technical Support Web site: http://support.fortinet.com
Fortinet Knowledge Center: http://kc.forticare.com
Technical Documentation: http://docs.forticare.com
Probes
Configure probe settings to set actions on failure, add a dynamic IP
pattern used by the probe packets, and enter the serial number of the
FortiGate unit. Actions on failure can include failing open and sending
an alert email, a syslog message, and an SNMP trap.
config probe setting
set action_on_failure alertmail failopen snmp syslog
set dynamic_ip_pattern #.#.#.*
set fgt_serial <FortiGate_serial>
end
Enable ping, HTTP, FTP, POP3, SMTP, and IMAP probes. Optionally
change the failure threshold and probe interval for each probe.
Enable the ping probe to send ping packets through the FortiGate unit.
config probe probe_list ping
set status enable
end
Enable the HTTP probe and change the failure threshold and probe
interval.
config probe probe_list http
set status enable
set failure_threshold 5
set probe_interval 8
end
You can also change HTTP, FTP, POP3, SMTP, and IMAP probe port
numbers. See the FortiBridge Administration Guide for details.
Alerts
Configure alert email.
config alertemail setting
set server mail.myorg.com
set username [email protected]
set password PassWORD
set mailto1 [email protected]
end
Add the IP address of a syslog server that receives FortiBridge
syslog messages.
config log syslogd setting
set server 172.20.120.11
end
Add an SNMP community and add the IP address of a SNMP
manager to the community
config system snmp community
edit 1
set name snmp_community
config hosts
edit 1
set ip 192.168.20.102
end
end
Probes monitor the FortiGate unit by sending packets from the INT 2 interface
through the FortiGate unit to the EXT 2 interface. If probe packets are not
received at the EXT 2 interface the FortiBridge unit detects a failure.
Basic configuration
4
1. Change administrator password.
config system admin
edit admin
set password <password>
end
2. Change the Management IP address.
config system manageip
set ip <mng_ip>/<netmask>
end
3. Change DNS server IP addresses.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Add the default route.
config system route
edit 1
set gateway <gateway_ip>
end
Connecting to the CLI
1. Connect the FortiBridge console port to the serial communications port
on your computer.
2. Start a terminal emulation program (HyperTerminal) on the
management computer. Use these settings: Baud Rate (bps) 9600,
Data bits 8, Parity None, Stop bits 1, and Flow Control None.
3. Press Escape to display the login prompt.
4. At the Login: prompt, type admin and press Enter twice (no password
required).
Collect information you need to set up the FortiBridge unit for your network.
Configure the FortiBridge unit from the command line interface (CLI).
Complete the basic FortiBridge unit network configuration.
Collecting information
3