Fortinet FortiGate 240D User manual

.
FortiGate 240D
QuickStart Guide

.
April 01, 2014
01-501-190858-20140401
Copyright© 2014 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
FortiCare® and FortiGuard®, and certain other marks are registered
trademarks of Fortinet, Inc., and other Fortinet names herein may also be
registered and/or common law trademarks of Fortinet. All other product
or company names may be trademarks of their respective owners.
Performance and other metrics contained herein were attained in internal
lab tests under ideal conditions, and actual performance and other results
may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any
binding commitment by Fortinet, and Fortinet disclaims all warranties,
whether express or implied, except to the extent Fortinet enters a
binding written contract, signed by Fortinet’s General Counsel, with a



such binding written contract shall be binding on Fortinet. For absolute
clarity, any such warranty will be limited to performance in the same ideal
conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any
covenants, representations,and guarantees pursuant hereto, whether
express or implied. Fortinet reserves the right to change, modify, transfer,
or otherwise revise this publication without notice, and the most current
version of the publication shall be applicable.
Register for Support
Register your Fortinet product to receive:
• Technical Support
• New product features
• Protection from new threats
Vous devez enregistrer le produit pour recevoir:
• Support technique
• Nouvelles fonctionnalitées du produit
• Protection contre de nouvelles menaces
La reistrazione ti permette di usufruire di:
• Supporto Tecnico
• Nuove funzionalita
• Proteezione dalle ultime minaccce
Debe registrar el producto para recibir:
• Apoyo técnico
• Nuevas funcionalidades del producto
• Protección contra ataques
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート•新機能の追加•新しい脅威への防御


󺻖󺻖󰇉
http://forti.net/support
Toll free: 1 866 648 4638
Phone: [phone]
Fax: [phone]
Email: [email protected]

.
.
FortiGate 240D
QuickStart Guide
2 3
Box Includes
FortiGate 240D
QuickStart Guide Video
http://forti.net/vqsg
Before You Begin
Hostname
T1/E1, Static broadband, Cable, or DSL with a
static IP
Cable Modem DHCP
It is normal to not require a hostname but your ISP may require it.
DSL PPPoE
Username Password
IP Address
Default Gateway
Write down details that you may need from your network administrator or ISP.
Primary/Secondary DNS
Subnet Mask
STATUS
POWER
ALARM
HA
USBMGMT MGMT USB
CONSOLE
WAN1
WAN2
DMZ1
DMZ2
1
2
3
4
5
6
7
8
11
12
13
14
15
16
17
18
19
20
21
22
23
24
9
10
37
38
39
40
25
26
27
28
29
30
31
32
33
34
35
36
FortiGate 240D
QuickStart Guide
USB Cable Ethernet Cable
2 Rack-Mount Brackets
8 Bracket Screws
Console Cable
4 Rubber Feet
Power Cable
The FortiGate Cookbook
FortiOS 5.0.6 | 1U Models

4 5
.
.
Connect your device to a power outlet and an Internet connection. This is usually a
modem, but could also be another device on your network.
Power Connection
WAN Port
Internet
1Basic Connections
Web-based Manager
1. Connect the Ethernet cable.
2. Visit 192.168.1.99 in your web browser.
3. Login using username “admin” and no password.
4. Click “Wizard” in the top right corner.
5. and save your settings.
6. Register your device from the dashboard page.
Web Browser with Ethernet cable
A
https://
LAN Port
FortiGate Setup Options
2
Web Browser
Setup Wizard (p.5) With FortiExplorer (p.6)
FortiExplorer App

OS X
Terminal Emulation
With console cable (p.7)
AB
C D

6 7
.
.
Windows/OS X with USB
Microsoft Windows Install
2. Connect the USB cable and launch
FortiExplorer if it does not appear
automatically.
Mac OS X Install
2. Double-Click the  and
drag the FortiExplorer icon to the
Applications folder.
3. Connect the USB cable.
4. Click the FortiExplorer icon to launch
the application.
FortiExplorer Setup Wizard
1. Follow prompts or click “Register” to register your device with FortiCare.
2. Click “Setup Wizard”.
3. Login using username “admin” and no password.
4. Follow Setup Wizard steps.
5. Click to complete the setup of your device.
1. Download FortiExplorer from http://forti.net/fexp.
B
USB MGMT
Terminal Emulation with Console Cable
To Connect to the CLI
1. Connect the FortiGate unit console port to the management computer using a
console cable.
2. Start a terminal emulation program on the management computer. Select the COM
port and use the following settings:
Baud Rate: 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow Control: None
3. Press Enter on your keyboard to connect to the CLI.
4. Login using username “admin” and no password. You can now proceed with
FortiGate unit.
C
Get started by typing “?” for a list of available commands.
Begin typing a command and type “?” for a list of available ways to complete.
For example 
For a detailed guide visit http://forti.net/cli.

8 9
.
.
http://forti.net/fexp-ios
USB Port
FortiExplorer App
1. Download the iOS FortiExplorer App to your device from http://forti.net/fexp-ios.
2. Use your Apple to USB cable to connect to the USB port.
3. Launch the FortiExplorer App and select the device model.
4. Login using username “admin” and no password.

iOS with Apple to USB cable
D

10 11
.
.
Installation
To install the FortiGate unit into a rack
1. Ensure that the FortiGate unit is placed on a stable
surface prior to rack-mount installation.
2. Attach the provided rack-mount brackets to the sides of
the unit using the provided screws.
3. Position the FortiGate unit in the rack. Ensure there is


4. Line up the rack-mount bracket holes to the holes on the
rack and ensure that the FortiGate unit is level.
Caution:
Electrostatic
discharge (ESD)
can damage
your Fortinet
equipment.
Do not place
heavy objects on
the unit.
To avoid personal
injury or damage
to the unit, it is
recommended
that two or more
people install the
unit into the rack.
Note: If the unit
has a redundant
power supply,
each power
cable should be
connected to a
different power
source. In this
way, if one power
source fails, the
other may still be
operational and
the unit will not
lose power.
5. Finger tighten four rack-mount screws to attach the unit to the rack.
6. Verify that the spacing around the FortiGate unit conforms to requirements and
that the unit is level, then tighten the rack-mount screws with an appropriate
screwdriver.
7. Using the provided power cable, plug the cable into the rear of the unit, and
then into a grounded electrical outlet or a separate power source such as an
uninterruptible power supply (UPS) or a power distribution unit (PDU).

1. Ensure that the surface onto which the FortiGate unit to be installed is clean, level,
and stable and that there is at least 1.5 inches (3.8cm) of clearance on all sides to

2. Attach the provided rubber feet to the bottom of the FortiGate unit.
3. Place the unit in the designated location.
4. Verify that the spacing around the FortiGate unit conforms to requirements and
that the unit is level.
5. Using the provided power cable, plug the cable into the rear of the unit, and
then into a grounded electrical outlet or a separate power source such as an
uninterruptible power supply (UPS) or a power distribution unit (PDU).
The FortiGate unit 
inch rack unit with the provided rack-mount brackets and screws.
Please read the Cautions and Warnings section prior to installing your device.
1.5in 1.5in
3

12 13
.
.
4. Hold the sides of the transceiver and carefully pull it
away from the cage socket.
5. Replace the cap on the SFP cage socket and place the
removed SFP transceiver into an antistatic bag.
Caution: SFP
transceivers are
static sensitive
devices. Use
an ESD wrist
strap or similar
grounding device
when handling
transceivers.
Do not install
or remove SFP
transceivers while

are still attached.
This can cause
damage to the
cables, cable
connectors,
and the optical
interfaces. It may
also prevent the
transceiver from
latching correctly
into the socket
connector.
Note: Installing
and removing
SFP transceivers
can shorten their
useful life. Do not
install or remove
transceivers more
than is necessary.
SFP Cage Sockets
Socket Latch
Transmit Optical Bore
Extraction Lever
Receive Optical Bore
To install the SFP transceivers
1. Ensure that you are properly grounded.
2. Remove the caps from the SFP cage sockets on the
front panel of the unit.
3. Position the SFP transceiver in front of the cage socket
opening and ensure that the transceiver is correctly
oriented. When the transceiver is correctly oriented, the
extraction lever will be level with the socket latch.
Note: SFP cage socket orientation may vary. Ensure that
the SFP transceiver module is correctly oriented each
time that you are inserting a transceiver.
4. Hold the sides of the SFP transceiver and slide it into
the cage socket until it clicks into place.
SFP Transceivers Caution: Do not
force the SFP
transceivers into
the cage slots. If
the transceiver
does not easily
slide in and click
into place, it may
not be aligned
correctly or may
be upside down.
If this happens,
remove the SFP
transceiver,
realign it or rotate
it and slide it in
again.
Note: Follow

optic handling
procedures when
installing and
removing
SFP transceivers
to ensure the
devices remain
clean and are not
damaged.
5. Press the transceiver  cage socket with
your thumb.
6. Verify that the transceiver is latched correctly by
grasping the sides of the transceiver and trying to pull it
out without lowering the extraction lever.
If the transceiver cannot be removed, it is installed and
latched correctly.
If the transceiver can be removed, reinsert it and press
harder with your thumb.
If necessary, repeat this process until the transceiver is
securely latched into the cage socket.
To remove the SFP transceivers
1. Ensure that you are properly grounded.
2. If applicable, disconnect the  from the
transceiver connector and install a clean dust plug in
the transceiver’s optical bores.
3. Pull the extraction lever out and down to eject the
transceiver
screwdriver or other
similar tool to open the lever.

14 15
.
.
Device Guide
Status
Green: Normal
Flashing green: Booting up
Red: Major alarm
Alarm
Not in Use
HA
Green: Operating in an HA cluster
Off: Disabled
Power
Green: On
Off
Ethernet Ports Link/Activity
Green: Connected
Flashing green: Transmitting & receiving data
Off: No link established
Ethernet Ports Speed
Green: Connected at 1Gbps
Amber: Connected at 100Mbps
Off: Connected at 10Mbps or not in use
SFP Ports
Green: Active
Flashing green: Transmitting & receiving data
Off: No link established
Logo
Green: On
Off
STATUS
POWER
ALARM
HA
USB MGMT MGMT USB
CONSOLE
WAN 1
WAN 2
DMZ 1
DMZ 2
1
2
3
4
5
6
7
8
11
12
13
14
15
16
17
18
19
20
21
22
23
24
9
10
37
38
39
40
25
26
27
28
29
30
31
32
33
34
35
36
FortiGate 240D

16 17
.
.
Console (RJ-45)
Optional connection to the management computer.
Provides access to the CLI
USB (USB-A)
USB server port for USB key, modem, or
management functions
USB MGMT (USB mini-B)
USB client port for management
WAN 1 & 2 (RJ-45)
Gigabit Ethernet Internet connection
DMZ 1 & 2 (SFP)
1 Gbps/auto small form-factor pluggable transceiver
ports for connection to a DMZ network/device
Internet LAN Ports 1 - 40 (RJ-45)
Switched Gigabit Ethernet ports for connection to your
network and the Internet
MGMT (RJ-45)
Client port for management.
Default IP address 192.168.1.99
RPS
Optional connection to a remote
power supply (FRPS-100).
12V @ 12.5A
Power
100-240V AC, 50-60Hz, 3A MAX
STATUS
POWER
ALARM
HA
USB MGMT MGMT USB
CONSOLE
WAN 1
WAN 2
DMZ 1
DMZ 2
1
2
3
4
5
6
7
8
11
12
13
14
15
16
17
18
19
20
21
22
23
24
9
10
37
38
39
40
25
26
27
28
29
30
31
32
33
34
35
36
FortiGate 240D
AC INPUT
100-240V
50-60Hz
3A MAX
DC INPUT FOR REMOTE POWER
SUPPLY SPECIFIED IN MANUAL
[email protected]
Device Guide

.
.
Cautions and Warnings

Operating Temperature

Température ambiante élevée — Si cet appareil est installé dans un cabinet fermé, la température ambiante du cabinet peut être supérieure à la




Ventilation


Circuit overloading 


Surtension 



Reliable earthing

Mise à la terre 

Interference
Interférence

Safety
Mechanical loading – To avoid personal injury or damage to the appliance, Fortinet recommends that 2 or more people together install the appliance

Installation


Moving parts 
Pièces mobiles




Choc électrique / feu












Battery

Batterie




Grounding 


Mise à la terre 






Alimentation par Ethernet









This separate protective earthing terminal must be permanently connected to earth with a green with yellow stripe conductor minimum size # 14 AWG


























この装置は、クラスＡ情報技術装置です。この装置を家庭環境で使用すると電波妨害を引き起こすことが
あります。この場合には使用者が適切な対策を講ずるよう要求されることがあります。ＶＣＣＩ−Ａ

󺻘󺻘󺻘󺻘󺻗
China
󺻘󺻘󺻗󺻘󺻗

......
Fortinet.com
The FortiGate Cookbook
Advanced installation and setup, networking, security policies

Authentication, Logging and reporting.
http://forti.net/cookbook
FortiGate System Administration Guide

management, tightening security, and best practices.
http://forti.net/systemadmin

your device using the command line.
http://forti.net/cli
FortiOS Handbook

http://forti.net/handbook
Training Services
Course descriptions, availability, schedules, and location of
training programs in your area.
http://forti.net/training