Fortinet FortiGate FortiGate-5003 User manual

QuickStart Guide
FortiGate-5003
© Copyright 2005 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks or registered trademarks of their
respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
20 June 2005
For technical support please visit http://www.fortinet.com.
01-28005-0125-20050620
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
Mounting
Knot
Extraction
Lever
10/100/1000
Ethernet
LED Mode Button
Mounting
Knot
Extraction
Lever Reset
Button
RJ-45 10/100
Port
RS-232
Port
Installing the FortiGate-5003
Technical support
Fortinet Technical Support Web site: http://support.fortinet.com
Fortinet email support:
[email protected]m
For customers in the United States,
Canada, Mexico, Latin America and South
America.
[email protected]
For customers in Japan, Korea, China,
Hong Kong, Singapore, Malaysia, all other
Asian countries, and Australia.
[email protected]
For customers in the United Kingdom,
Scandinavia, Mainland Europe, Africa, and
the Middle East.
LED State Description
+ Green The FortiGate-5003 module is powered on.
Yellow Caution status.
Yellow Out of service. Normally off. On for switch failure.
System
Console Green Normal operation.
Port LED
0-15
Yellow Link/Activity mode - Port is not forwarding packets. Link/
Speed mode - 1000 Mbps connection
Green Link/Activity mode - Blinking LED indicates network
traffic. Link/Speed mode - 100 Mbps connection.
Off Link/Activity mode - No link. Link/Speed mode - 10 Mbps
connection.
E1
Yellow Link/Activity mode - Port is not forwarding packets. Link/
Speed mode - 1000 Mbps connection
Green Link/Activity mode - Blinking LED indicates network
traffic. Link/Speed mode - 100 Mbps connection.
Off Link/Activity mode - No link. Link/Speed mode - 10 Mbps
connection.
E0
Yellow Link/Activity mode - Port is not forwarding packets. Link/
Speed mode - 1000 Mbps connection
Green Link/Activity mode - Blinking LED indicates network
traffic. Link/Speed mode - 100 Mbps connection.
Off Link/Activity mode - No link. Link/Speed mode - 10 Mbps
connection.
OK Green Initialization completed successfully.
EXT FLT Yellow Cannot establish link to a configured port or connection
problem external to the adaptor.
INT FLT Yellow Failure of internal tests. Off during power up.
Hot Swap Blue
On when switch is ready to remove and during hot swap.
Off when switch is correctly installed.
Reset Press Reset for three seconds to restart switch.
LED Mode Change the port LED display function from LInk/Activity
mode to Link/Speed mode.
+
Connector Type Speed Protocol Description
ETH0 RJ-45 100Base-T Ethernet Ethernet out of band
management connection.
CONSOLE RJ-45 9600 bps RS-232
serial
Serial connection to the
command line interface.
ZRE0, ZRE1,
ZRE2 RJ-45 1000Base-T Ethernet
Redundant connections to
another FortiGate-5000
series chassis.
Install the FortiGate-5003 module into a FortiGate 5050 or 5140
chassis. Always wear an ESD wrist strap or ankle strap to avoid static
discharges.
You must install the FortiGate-5003 module in specific slots in the
chassis. These specific slots are wired on the backplane for internal
port switching capabilities. For the FortiGate-5050 and FortiGate-5140,
install the FortiGate-5003 in slot 1 or 2.
Note: If you are using one FortiGate-5003 module, install the module in
slot 2.
To install the FortiGate-5003 module
1. Extend the extraction levers.
2. Carefully slide the module into a chassis slot. The module is
seated properly when it touches the chassis up to the
extraction levers.
3. Lock the extraction levers by pushing them towards each other.
4. If power is supplied to the chassis, the FortiGate-5003 module
powers on when the extraction levers are closed.
5. Tighten the mounting knots on the left and right sides of the
FortiGate-5003 front panel.

Clustering FortiGate-5001 Antivirus Firewall modules
The FortiGate-5003 Switch Blade module is an HA component that is designed for use with the FortiGate-5050 and FortiGate-5140 chassis to
provide full HA clustering capabilities between the FortiGate-5001 modules. The FortiGate-5003 acts as the switch, providing automatic connection
through port 10 the backplane of the chassis. Using two FortiGate-5003 modules provides redundant HA interconnects with no single point of
failure.
For information on configuring the FortiGate-5001 module for HA see the FortiGate-5000 series Installation Guide.
High Availability Modes
Active-Active Load balancing and failover HA. Each FortiGate unit in the HA cluster actively processes connections and
monitors the status of the other FortiGate units in the cluster. The primary FortiGate unit in the cluster
controls load balancing.
Active-Passive Failover HA. The primary FortiGate unit in the cluster processes all connections. All other FortiGate units in
the cluster are passively monitor the cluster status and remain synchronized with the primary FortiGate unit.
All members of the HA cluster must be set to the same HA mode.
HA setup
Fan
Tray
FortiGate 5050 SM
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiGate 5050 SM
FortiB lade 5003 Switch
HA Int erface
FortiGate-5001 clusters using a single FortiGate-5003
Fan
Tray
FortiB lade 5003 Switch
FortiGate 5001 Blade
HA Int erface
FortiGate 5050 SM FortiGate 5050 SM
FortiB lade 5003 Switch
HA Int erface
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiGate-5001 clusters using a redundant FortiGate-5003
Clustering FortiGate-5000 series chassis
The FortiGate-5003 Switch Blade module provides full HA clustering capabilities between FortiGate-5050 and FortiGate-5140 chassis to provide
inter-chassis communication. The FortiGate-5003 acts as the switch, providing automatic connection through port 10 the backplane of the chassis.
The diagrams shown also apply to the FortiGate-5140 chassis.
FortiGate inter-chassis cluster using a single
FortiGate-5003 module
Using the FortiGate-5003 for intercommunications
provides inter-chassis HA links.
FortiGate-5050 inter-chassis cluster using
redundant FortiGate-5003 modules.
Using two FortiGate-5003 in both chassis provides
redundant inter-chassis communication with no single
point of failure.
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
1
2
2
3
4
5
ShMC
1
ShMC
POWER
ON
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOTSWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
HOTSWAP
STATUS
ALARMS
MINOR
ALARM
RESET
CRITICAL
MAJOR
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
1
2
2
3
4
5
ShMC
1
ShMC
POWER
ON
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOTSWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
HOTSWAP
STATUS
ALARMS
MINOR
ALARM
RESET
CRITICAL
MAJOR
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
1
2
2
3
4
5
ShMC
1
ShMC
POWER
ON
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOTSWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
HOTSWAP
STATUS
ALARMS
MINOR
ALARM
RESET
CRITICAL
MAJOR
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOTSWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
1
2
2
3
4
5
ShMC
1
ShMC
POWER
ON
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOTSWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
HOTSWAP
STATUS
ALARMS
MINOR
ALARM
RESET
CRITICAL
MAJOR
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOTSWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2