Fortinet 3000B User manual

FortiWAN 3000B
QuickStart Guide

QuickStart Guide
Register for Support
Register your Fortinet product to receive:
• Technical Support
• New product features
• Protection from new threats
Vous devez enregistrer le produit pour recevoir:
• Support technique
• Nouvelles fonctionnalitées du produit
• Protection contre de nouvelles menaces
La reistrazione ti permette di usufruire di:
• Supporto Tecnico
• Nuove funzionalita
• Proteezione dalle ultime minaccce
Debe registrar el producto para recibir:
• Apoyo técnico
• Nuevas funcionalidades del producto
• Protección contra ataques
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート • 新機能の追加 • 新しい脅威への防御
请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特点信息、最新威胁防护
https://support.fortinet.com
Toll free: 1 866 648 4638
Fax: [phone]
Email: [email protected]
July 29, 2019
01-520-25047220190729
Copyright© 2018 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare®
and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., in
the U.S. and other jurisdictions, and other Fortinet names herein may also be registered
and/or common law trademarks of Fortinet. All other product or company names may
be trademarks of their respective owners. Performance and other metrics contained
herein were attained in internal lab tests under ideal conditions, and actual performance
and other results may vary. Network variables, different network environments and
other conditions may affect performance results. Nothing herein represents any binding
commitment by Fortinet, and Fortinet disclaims all warranties, whether express or
implied, except to the extent Fortinet enters a binding written contract, signed by
Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified
product will perform according to certain expressly-identified performance metrics and,
in such event, only the specific performance metrics expressly identified in such binding
written contract shall be binding on Fortinet. For absolute clarity, any such warranty
will be limited to performance in the same ideal conditions as in Fortinet’s internal lab
tests. In no event does Fortinet make any commitment related to future deliverables,
features or development, and circumstances may change such that any forward-
looking statements herein are not accurate. Fortinet disclaims in full any covenants,
representations, and guarantees pursuant hereto, whether express or implied. Fortinet
reserves the right to change, modify, transfer, or otherwise revise this publication without
notice, and the most current version of the publication shall be applicable.
2017

Before You Begin
Write down details that you may need from your network administrator or ISP.
5
DSL PPPoE
Username Password
Cable Modem DHCP
It is normal to not require a hostname, but your ISP may require it.
Hostname
Static IP address
IP Address Subnet Mask
Default Gateway Primary/Secondary DNS
Box Includes
4
4
5 Rubber Feet
FortiWAN 3000B
FortiWAN 3000B
QuickStart Guide
Quick Start Guide
2 Power Cables Console Cable
2 Rack-Mount Brackets 8 Front Screws 28 Side Screws
2 Sliding Rail Handles 10 Front Screws 6 Side Screws
2 Sliding Rails 20 Front Screws
Ethernet Cable

66 7
Power Connection
WAN Port
Internet
Basic Connections
1
FortiWAN is an edge device that typically connects an internal local area network
(LAN) with an external wide area network (WAN) or the Internet. Basic configuration on
the FortiWAN is required for deploying it in your network. The configuration includes
assigning IP addresses and default gateways for both LAN and WAN. Traffic will not be
transferred through FortiWAN until the configuration is complete.
FortiWAN provides a Web-based manager (Web UI) and a command line interface
(CLI). It requires connecting a computer to the LAN port of FortiWAN to access its
Web UI. FortiWAN has default physical network interfaces, of which Port 1 ~ Port 10
are the WAN ports, Port 11 is the LAN port and Port 12 is the DMZ port. Default port
assignments can be changed via the Web UI or CLI.
Connect your device to a power outlet and an Internet connection. This is usually a
modem, but could also be another device on your network.
For the further deployment instructions, please refer to FortiWAN Handbook. Here is a
typical and basic network topology for FortiWAN.
Setup Options
2
Web Browser
Setup Wizard ( p.7 )
ATerminal Emulation
With console cable ( p.9 )
B
Web-based Manager
1. Using the Ethernet cable, connect LAN port (Port 11) of the appliance to your
computer.
2. Switch on FortiWAN. It will emit 3 beeps, indicating the system is initialized and
activated. Meanwhile, the LAN port LED blinks, indicating a proper connection.
3. By default, the LAN IP address is 192.168.0.1. Configure your computer to match
the appliance’s default LAN subnet. For example, on Windows 7, click the Start
(Windows logo) menu to open it, and then click Control Panel. Click Network and
Sharing Center, Local Area Connection, and then the Properties button. Select
Internet Protocol Version 4 (TCP/IPv4), then click its Properties button. Select Use
the following IP address, then change your computer’s settings to:
IP address: 192.168.0.2 (or 192.168.0.X)
Subnet mask: 255.255.255.0
LAN Port
https://
Web Browser with Ethernet cable
A
Automated Local Configuration
If you are installing your FortiWAN via Automated Local Configuration (zero touch
provisioning), please equip it with Internet access by connecting Port 1 to a DHCP
network (such as the local LAN of your VAR partner or your installation site if a network
already exists there). Then FortiWAN will automatically connect to the Fortinet Call-Home
Server and download the predefined configuration file. Note that Automated Local
Configuration process requires storing predefined configuration files on the Fortinet Call-
Home server via FortiWAN Manager (V4.5.0 or later) in advance. For more details about
the instructions, please refer to FortiWAN Handbook and FortiWAN Manager Handbook.

88 9
4. To connect to FortiWAN’s Web UI, start a web browser and go to
https://192.168.0.1 (Remember to include the “s” in https://).
5. Log into Web UI with the default username “admin” (case sensitive) and leave the
password blank.
Note:
1. Make sure the proxy settings of the web browser are disabled. For example,
open Internet Explorer and select “Internet Option” on “Tools” menu. Click the
“Connection” tab, “LAN settings” and open “Local Area Network Settings” dialog
box, then disable “Proxy server”.
2. It is strongly recommended that you reset the password the first time you log into
Web UI, and take good care of it (See FortiWAN Handbook).
3. Requires: Microsoft Internet Explorer 6, Mozilla Firefox 2.0, or Google Chrome 2.0 or
newer.
To connect to the CLI
1. Using the console cable, connect the appliance’s console port to your terminal server
or computer. On your computer or terminal server, start the terminal emulator.
2. Start a terminal emulation program on the management computer, select the
COMport, and use the following settings:
Bits per second: 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow Control: None
3. Press Enter on your keyboard to connect to the CLI.
4. Login with the default username “admin” (case sensitive) and leave the password
blank.
5. Note: FortiWAN CLI has limited functionality and cannot fully conigure the system.
Normal configuration changes should be done via the WebUI. Get started by typing
“Help” for a list of available commands.
Terminal Emulation with Console
Cable
B
Console Port
Serial Port

1010 11
Installation
3
FortiWAN appliances should be installed in a restricted access location such as a locked
data center to ensure their physical security, which is fundamental to your network
security. Either place the FortWAN appliance on a flat surface, or mount it in any
standard 19 inch (48.3 cm) rack with the rack-mount brackets. In a rack, a FortiWAN
3000B occupies 2U (3.5 inches/8.9 cm).
To install the unit into a rack
Use the screws provided to fasten the rack-mount brackets (flanges facing
outwards) to the front of each side of the appliance. Use the rest screws to
install the appliance into the rack (towards the notches in the rack).
To install the unit with sliding rails
1. Install the inner rails to the chassis:
Release and detach the inner member from the slide. Align the screw holes
of the rail and the mounting holes of the chassis and then use the screws to
fasten the inner rail to the chassis.
Repeat the above steps for the other rails on the same side (two inner rails
need to be installed on each side). Likewise, attach the inner rails to the
other side of the appliance. Attach the rack-mount brackets (short) to the
front of each side of the appliance.

1212 13
1.5in 1.5in
To install the unit on a flat surface
Ensure that the surface where the appliance would be placed onto is flat,
stable, and clean and spaced for adequate airflow. Attach the rubber feet
provided to the bottom of the appliance and place it on the specified location.
2. Attach the outer rail bracket to the posts of the rack:
Install the outer rail by attaching the rail bracket to the posts of the
rack. Use two countersink screws and washers or the original rack
manufacturer’s bracket screws. Do not completely tighten the screws; leave
them loose so that the middle rail can slide for adjustment.
Extend and adjust the rear bracket to meet the appropriate depth of the
rack and install it to the rack post firmly with rack bracket screws.
Repeat the above steps to install the other rail to the rack.
3. Install the appliance to the rack:
Verify the ball bearing retainer is locked forward. Install the system half-way
into the slide rail.
Slide the release tab and push the system into the rack.

1414 15
SFP Transceivers
4
Caution: SFP
transceivers are
static sensitive
devices. Use
an ESD wrist
strap or similar
grounding device
when handling
transceivers.
Do not install
or remove SFP
transceivers while
fiber-optic cables
are still attached.
This can cause
damage to the
cables, cable
connectors,
and the optical
interfaces. It may
also prevent the
transceiver from
latching correctly
into the socket
connector.
Note: Installing
and removing
SFP transceivers
can shorten their
useful life. Do not
install or remove
transceivers more
than is necessary.
To install the SFP transceivers
1. Ensure that you are properly grounded.
2. Remove the caps from the SFP cage sockets on the front
panel of the unit.
3. Position the SFP transceiver in front of the cage socket
opening and ensure that the transceiver is correctly
oriented. When the transceiver is correctly oriented, the
extraction lever will be level with the socket latch. Note:
SFP cage socket orientation may vary. Ensure that the SFP
transceiver module is correctly oriented each time that you
are inserting a transceiver.
4. Hold the sides of the SFP transceiver and slide it into the
cage socket until it clicks into place.
Caution: Do not
force the SFP
transceivers into
the cage slots.
If the transceiver
does not easily
slide in and click
into place, it may
not be aligned
correctly or may
be upside down.
If this happens,
remove the SFP
transceiver, realign
it or rotate it and
slide it in again.
Note: Follow
proper fiberoptic
handling
procedures when
installing and
removing
SFP transceivers
to ensure the
devices remain
clean and are not
damaged.
5. Press the transceiver firmly into the cage socket with your
thumb.
6. Verify that the transceiver is latched correctly by grasping
the sides of the transceiver and trying to pull it out without
lowering the extraction lever.
If the transceiver cannot be removed, it is installed and
latched correctly.
If the transceiver can be removed, reinsert it and press
harder with your thumb.
If necessary, repeat this process until the transceiver is
securely latched into the cage socket.
To remove the SFP transceivers
1. Ensure that you are properly grounded.
2. If applicable, disconnect the fiber-optic cable from the
transceiver connector and install a clean dust plug in the
transceiver’s optical bores.
3. Pull the extraction lever out and down to eject the
transceiver. If you are unable to use your finger to open the
lever, use a small flat-head screwdriver or other similar tool
to open the lever.
4. Hold the sides of the transceiver and carefully pull it away
from the cage socket.
5. Replace the cap on the SFP cage socket and place the
removed SFP transceiver into an antistatic bag.

1616 17
Device Guide
POWER
Green: The appliance is receiving power
Off: The appliance is off
STATUS
Reserved for future use
HDD
Amber: The HDD is data processing
Off: The HDD is idle
SFP+ Ports Activity
Flashing Amber: Port is transmitting and receiving data
Off: No network activity
SFP+ Ports Speed
Green: Port is connected at 1Gbps or 10 Gbps
Off: No link detected
Ethernet Ports Link/Activity
Amber: Link detected
Flashing Amber: Port is transmitting and receiving data
Off: No link detected
Ethernet Ports Speed
Amber: Port is connected at 1Gbps
Green: Port is connected at 100Mbps
Off: Port is connected at 10Mbps or is not in use
SFP Ports Activity
Flashing Amber: Port is transmitting and receiving data
Off: No network activity
SFP Ports Speed
Amber: Port is connected at 1Gbps
Off: No link detected
Power supply status
Green: Power supply is operating normally

1818 19
Device Guide
Console (RJ-45)
RS-232 serial for connection to
management computer
USB Port 1 - 2 (USB-A)
USB 2.0 reserved for future use
HA Port (RJ-45)
Gigabit Ethernet for connection to the peer unit
(FortiWAN 3000B) for high availability deployment
Ethernet Ports 5 - 12 (RJ-45)
Gigabit Ethernet ports for connection to your
network and the Internet
By default, Ports 5 ~ 10 are for connections to
WAN (or the Internet), Port 11 is for connection to
LAN and Port 12 is for connection to DMZ
Redundant Power Connections
120 – 240 V AC, 9 – 4 A, 50/60Hz
Power Switch on/off
SFP+ Ports 1 - 4
10 Gigabit Ethernet ports for connection to your
network and the Internet
By default, Ports 1 ~ 4 are for connections to WAN
(or the Internet)
SFP+ Ports 13 - 16
10 Gigabit Ethernet ports for connection to your
network and the Internet
SFP Ports 17 - 24
Gigabit Ethernet ports for connection to your
network and the Internet
Power Supply Alarm on/off