Fortinet FortiGate-5000 User manual

www.fortinet.com
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
1
2
2
3
4
5
ShMC
1
ShMC
POWER
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514 1312 1110
98 76 54 32 10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E T H O
R S 2 3 2 Z R E 0 Z R E 1 Z R E 2
Hot Swap
Status
Alarm Minor Console Ethernet
Alarm
Reset
Critical
Major
PSUA
PSU B
PWR IPM
USB
5
3 4 5 6
CONSOLE
STATUS
1
6
2
ALT
ON/OFF
RESET
PWR IPM
USB
5
3 4 5 6
CONSOLE
STATUS
1
6
2
ALT
ON/OFF
RESET
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
5140
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514
1312
1110
98
76
54
32
10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E
T
H
O
R
S
2
3
2
Z
R
E
0
Z
R
E
1
Z
R
E
2
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514
1312
1110
98
76
54
32
10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E
T
H
O
R
S
2
3
2
Z
R
E
0
Z
R
E
1
Z
R
E
2
13 11 9 7 5 3 1 2 4 6 8 10 12 14
Alarms
Rst
Min.
3
2
1
Crit.
Maj.
Link
Act
100
ETH 0
Stat.
Prim.
ShMC
Link
Act
100
ETH 0
Stat.
Sec.
ShMC
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 3 4
1 2 5 6 7 8
FortiGate-5000 Series
QUICK GUIDE
A high-level guide to all three FortiGate-5000 series chassis and the FortiGate and FortiSwitch modules that you can
install in them. For detailed information about the FortiGate-5000 series hardware, see the FortiGate-5000 Series
Hardware Guide and the FortiGate-5000 Installation Guide.

FortiGate-5000 Series Quick Guide
15 March 2006
01-00000-0294-20060315
© Copyright 2006 Fortinet, Inc. All rights reserved. No part of this
publication including text, examples, diagrams or illustrations may be
reproduced, transmitted, or translated in any form or by any means,
electronic, mechanical, manual, optical or otherwise, for any purpose,
without prior written permission of Fortinet, Inc.
Trademarks
Dynamic Threat Prevention System (DTPS), APSecure, FortiASIC,
FortiBIOS, FortiBridge, FortiClient, FortiGate, FortiGate Unified Threat
Management System, FortiGuard, FortiGuard-Antispam, FortiGuard-
Antivirus, FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiAnalyzer,
FortiManager, Fortinet, FortiOS, FortiPartner, FortiProtect, FortiReporter,
FortiResponse, FortiShield, FortiVoIP, and FortiWiFi are trademarks of
Fortinet, Inc. in the United States and/or other countries. The names of
actual companies and products mentioned herein may be the trademarks
of their respective owners.
Regulatory compliance
FCC Class A Part 15 CSA/CUS
!
Caution: If you install a battery that is not the correct type, it could
explode. Dispose of used batteries according to local regulations.
Version Date Description of changes
1 Feb 14, 2006 First release
2 March 15,
2006 •Corrected gigabit ethernet interface
specification (changed 1000Base-TX to
1000Base-T).
•Adjusted some page formatting.

Contents
FortiGate-5000 Series Quick Guide
01-00000-0294-20060315 3
Contents
Introduction........................................................................................ 5
FortiGate-5140 chassis...................................................................... 7
FortiGate-5050 chassis.................................................................... 13
FortiGate-5020 chassis.................................................................... 19
FortiGate-5001SX security system................................................. 21
FortiGate-5001FA2 security system............................................... 25
FortiGate-5002FB2 security system............................................... 29
FortiSwitch-5003 module................................................................. 33

FortiGate-5000 Series Quick Guide
401-00000-0294-20060315
Contents

Introduction Fortinet documentation
FortiGate-5000 Series Quick Guide
01-00000-0294-20060315 5
Introduction
This FortiGate-5000 series Quick Guide is a high-level guide to all three
FortiGate-5000 series chassis and the FortiGate and FortiSwitch modules that
you can install in them. For detailed information about the FortiGate-5000 series
hardware, see the FortiGate-5000 Series Hardware Guide and the FortiGate-
5000 Installation Guide.
Fortinet documentation
The most up-to-date publications and previous releases of Fortinet product
documentation are available from the Fortinet Technical Documentation web site
at http://docs.forticare.com.
Fortinet Knowledge Center
Additional Fortinet technical documentation is available from the Fortinet
Knowledge Center. The knowledge center contains troubleshooting and how-to
articles, FAQs, technical notes, and more. Visit the Fortinet Knowledge Center at
http://kc.forticare.com.
Customer service and technical support
Fortinet Technical Support provides services designed to make sure that your
Fortinet systems install quickly, configure easily, and operate reliably in your
network.
Please visit the Fortinet Technical Support web site at http://support.fortinet.com
to learn about the technical support services that Fortinet provides.

FortiGate-5000 Series Quick Guide
601-00000-0294-20060315
Customer service and technical support Introduction

FortiGate-5140 chassis
FortiGate-5000 Series Quick Guide
01-00000-0294-20060315 7
FortiGate-5140 chassis
You can install up to 14 FortiGate-5000 series modules in the 14 slots of the
FortiGate-5140 ATCA chassis. The FortiGate-5140 is a 12U chassis that contains
two redundant hot swappable DC power entry modules that connect to -48 VDC
Data Center DC power. The FortiGate-5140 chassis also includes three hot
swappable cooling fan trays. If all 14 slots contain FortiGate-5001SX modules, the
FortiGate-5140 chassis provides a total of 112 Gigabit ethernet FortiGate
interfaces.
You can also install a FortiSwitch-5003 module in the FortiGate-5140 chassis to
provide HA heartbeat communications. You can add a second FortiSwitch-5003
module for redundancy. The First FortiSwitch-5003 module is installed in slot 1,
the second in slot 2.
The FortiGate-5140 chassis requires -48VDC Data Center DC power. If DC power
is not available you can install a FortiGate-5053 power converter tray (purchased
separately) with FortiGate-5140 power supplies.
Figure 1 shows the front of a FortiGate-5140 chassis. Two FortiSwitch-5003
modules are installed in slots 1 and 2. Twelve FortiGate-5001SX modules are
installed in slots 3 to 14.
Figure 1: FortiGate-5140 chassis front panel
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
PWR ACC STA IPM
CONSOLE USB 1 2 3 4 5 6 7 8
5140
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514
1312
1110
98
76
54
32
10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E
T
H
O
R
S
2
3
2
Z
R
E
0
Z
R
E
1
Z
R
E
2
MANAGEMENT
SYSTEM
E1
ZRE
LED MODE
1514
1312
1110
98
76
54
32
10
E2
OKCLK INTEXT FLT
HOT SWAP
RESET
FLT
CONSOLE
E
T
H
O
R
S
2
3
2
Z
R
E
0
Z
R
E
1
Z
R
E
2
13 11 9 7 5 3 1 2 4 6 8 10 12 14
Alarms
Rst
Min.
3
2
1
Crit.
Maj.
Link
Act
100
ETH 0
Stat.
Prim.
ShMC
Link
Act
100
ETH 0
Stat.
Sec.
ShMC
FortiGate-5001SX
modules
slots 4, 6, 8, 10,
12, and 14
FortiGate-5140
Shelf Manager
3 hot-swappable
cooling fan trays
(numbered 0, 1, and
2 behind panel)
FortiGate-5001SX
modules
slots 3, 5, 7, 9,
11, and 13
FortiSwitch-5003
modules
slots 1 and 2
Front cable
tray
ESD socket
Slot
numbers

FortiGate-5000 Series Quick Guide
801-00000-0294-20060315
FortiGate-5140 chassis
Figure 2 shows the back panel of the FortiGate-5140 chassis. The back panel
includes two hot-swappable redundant -48V/-60 VDC power entry modules
(PEMs) labelled PEM A and PEM B.
Figure 2: FortiGate-5140 chassis back panel
12341234
HS HS
operate
Alarm
12341234
HS HS
operate
Alarm
-48V/-60 VDC nom RTN
12341234
-48V/-60 VDC nom RTN
12341234
Power
Entry Module A
(protection
plate removed)
Power
Entry Module B
(protection
plate removed)
Ground
connectors
(green)
-48V/-60 VDC
nom (black)
-48V/-60 VDC
nom (black)
RTN
(red)
RTN
(red)
Back cable
tray
GND
GND
-48V
-48V RTN
RTN
BPEM PEM A
-48V
-48V RTN
RTN

FortiGate-5140 chassis Connecting a FortiGate-5140 chassis to Data Center DC power and Data Center ground
FortiGate-5000 Series Quick Guide
01-00000-0294-20060315 9
Connecting a FortiGate-5140 chassis to Data Center DC power
and Data Center ground
Connect the FortiGate-5140 chassis to Data Center DC power (also called battery
power) using the redundant power entry modules (PEMs). Fortinet supplies and
recommends AWG-14 stranded wires for all power connections. Black for
-48VDC, red for RTN, and green forground. If required, install terminal lugs on the
wires before connecting them to the PEM terminal strips. If you are connecting
both PEMs the -48VDC and RTN terminals on PEM A and PEM B must be wired
symmetrically.
Figure 3: Connecting a FortiGate-5140 PEM to Data Center DC power
Figure 4: Connecting a FortiGate-5140 chassis to Data Center ground
12341234
HS HS
operate
Alarm
-48V/-60 VDC nom RTN
12341234
RTN (positive)
terminal strip
connectors
1, 2, 3, 4
RTN (positive)
red to Data
Center RTN
-48V/-60 VDC nom
terminal strip
connectors
1, 2, 3, 4
-48V/-60 VDC
black to Data
Center -48VDC
Data Center
-48VDC
connector
Data Center
RTN connector
-48V
-48V
RTN
RTN
FortiGate-5140
Ground
connectors
Data Center
ground
connectors

FortiGate-5000 Series Quick Guide
10 01-00000-0294-20060315
Connecting the FortiGate-5140 chassis to AC power using the FortiGate-5053 power converter tray FortiGate-5140 chassis
Connecting the FortiGate-5140 chassis to AC power using the
FortiGate-5053 power converter tray
If Data Center DC power is not available, you can use the FortiGate-5053 power
converter tray with FortiGate-5140 power supplies (shown in Figure 5) to convert
AC power to DC power. The FortiGate-5053 power converter tray and the power
supplies are not supplied with the FortiGate-5140 chassis and must be purchased
separately.
The front panel of the FortiGate-5053 power converter tray (shown in Figure 5)
provides access to the FortiGate-5140 power supplies.
Figure 5: Front panel of the FortiGate-5053 power converter tray with one power
supply removed
The back panel of the FortiGate-5053 (shown in Figure 6) includes one DC power
connector terminal consisting of a RTN connector and a -48VDC connector. The
-48VDC connector is labelled -V. The RTN connector is not labelled.
Figure 6: Back panel of the FortiGate-5053 power converter tray
Selecting the power supplies and power convertor trays that you need for
your FortiGate-5140 configuration
The FortiGate-5053 power converter tray contains space for up to three
FortiGate-5140 power supplies. A FortiGate-5140 power supply converts AC
power to -48 VDC power. Each FortiGate-5140 power supply provides 1200W of
power.
The FortiGate-5053 power converter tray uses 2 + 1 power supply redundancy.
If three FortiGate-5140 power supplies are installed in a FortiGate-5053 power
converter tray, the first two power supplies provide a total of 2400W (2 x 1200W)
of power. The third power supply is the redundant backup.
Slot 1
Slot 2
Slot 3
Positive
(RTN)
(red)
V-
-48V/-58 VDC
(black)
DC out
AC in
V-
24 VAC 1 2 3