Fortinet FortiGate 94D PoE User manual

FortiGate 94D PoE

February 21, 2014
01-504-214353-20140221
Copyright© 2014 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet
names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics
contained herein were attained in internal lab tests under ideal conditions, and performance may vary. Network variables, different network environments
and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties,
whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that

to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change,
modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

FortiGate 94D POE
QuickStart Guide
Register your Fortinet product to receive:
• Technical Support
• New product features
• Protection from new threats
Vous devez enregistrer le produit pour
recevoir:
• Support technique
• Nouvelles fonctionnalitées du produit
• Protection contre de nouvelles menaces
La reistrazione ti permette di usufruire di:
• Supporto Tecnico
• Nuove funzionalita
• Proteezione dalle ultime minaccce
Register for Support
Debe registrar el producto para recibir:
• Apoyo técnico
• Nuevas funcionalidades del producto
• Protección contra ataques
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート•新機能の追加•新しい脅威
への防御
请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特
点信息、最新威胁防护
http://forti.net/support
Toll free: 1 866 648 4638
Phone: [phone]
Fax: [phone]
Email: [email protected]

54
Before You Begin
It is normal to not require a hostname
but your ISP may require it.
Hostname
Write down details that you may need from your network administrator or ISP.
T1/E1, Static broadband, Cable, or DSL with a static IP
IP Address Subnet Mask
Cable Modem DHCP
Default Gateway Primary/Secondary DNS
DSL PPPoE
Username
Password
QuickStart Guide Video
http://forti.net/vqsg
USB Cable
Ethernet Cable
Power Cable
4 Rubber Feet
Console Cable
2 Rack-Mount Brackets
8 Bracket Screws
Box Includes
FortiGate 94D PoE & QuickStart Guide
USBMGMT USB CONSOLE
WAN1
WAN2
HA
MGMT
DMZ1
DMZ2
1
2
3
4
5
6
7
8
11
12
13
14 20
1915
16 18
17 21
22
23
24
25
26
27
28
9
10
29
30
31
32
33
34
35
36
STATUS
POWER
ALARM
HA
FortiGate94D POE
USBMGMT
1
2
3
4
DMZ1
DMZ2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21
25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WAN 1
WAN2
41
42
43
44
45
46
47
48
FortiGate94D POE
USBMGMT
1
2
3
4
DMZ1
DMZ2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21
25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WAN 1
WAN2
41
42
43
44
45
46
47
48
FortiGate94D POE
USBMGMT
1
2
3
4
DMZ1
DMZ2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21 25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WAN 1
WAN2
41
42
43
44
45
46
47
48
FortiGate940D-POE
PoE
USB MGMT

6 7
Caution: To avoid
personal injury or
damage to the unit, it
is recommended that
two or more people
install the unit into the
rack.
Installation
The FortiGate unit 
(48.3 cm) rack unit with the provided rack-mount brackets and screws.
To install the FortiGate unit into a rack
1. Ensure that the FortiGate unit is placed on a stable surface prior to rack-mount
installation.
2. Attach the provided rack-mount brackets to the sides of the unit using the provided
screws.
Caution: Electrostatic
discharge (ESD) can
damage your Fortinet
equipment.
POE devices only:
This equipment is to
be used in a Network
Environment 0 per
IECTR 62101. This
product is connected
only to PoE networks
without routing to the
outside plant.
3. Position the FortiGate unit in the rack. Ensure there is enough room around the unit to

4. Line up the rack-mount bracket holes to the holes on the rack and ensure that the
FortiGate unit is level.
5. Finger tighten four rack-mount screws to attach the unit to the rack.
6. Verify that the spacing around the FortiGate unit conforms to requirements and that the
unit is level, then tighten the rack-mount screws with an appropriate screwdriver.
7. Using the provided power cable, plug the cable into the rear of the unit, and then into a
grounded electrical outlet or separate power source.

8 9

1. Ensure that the surface onto which the FortiGate unit
to be installed is clean, level, and stable and that
there is at least 1.5 inches (3.8cm) of clearance on all

2. Attach the provided rubber feet to the bottom of the
FortiGate unit.
3. Place the unit in the designated location.
4. Verify that the spacing around the FortiGate unit
conforms to requirements and that the unit is level.
5. Using the provided power cable, plug the cable
into the rear of the unit, and then into a grounded
electrical outlet or separate power source.
Note: If the unit
has a redundant
power supply, each
power cable should
be connected to
a different power
source. In this way,
if one power source
fails, the other may
still be operational
and the unit will not
lose power.
1.5in 1.5in
Caution: SFP
transceivers are static
sensitive devices. Use
an ESD wrist strap
or similar grounding
device when handling
transceivers.
Do not install
or remove SFP
transceivers while

still attached. This
can cause damage
to the cables, cable
connectors, and the
optical interfaces.
It may also prevent
the transceiver from
latching correctly into
the socket connector.
SFP Transceivers
Transmit Optical Bore
Receive Optical Bore
SFP Cage Sockets
Socket Latch
To install the SFP transceivers
1. Ensure that you are properly grounded.
2. Remove the caps from the SFP cage sockets on the
front panel of the unit.
Extraction Lever

10 11
Caution: Do not force
the SFP transceivers
into the cage slots. If
the transceiver does
not easily slide in
and click into place,
it may not be aligned
correctly or may be
upside down. If this
happens, remove
the SFP transceiver,
realign it or rotate it
and slide it in again.
Note: SFP cage
socket orientation
may vary. Ensure that
the SFP transceiver
module is correctly
oriented each time
that you are inserting a
transceiver. Installing
and removing SFP
transceivers can
shorten their useful
life. Do not install or
remove transceivers
more than is
necessary.
3. Position the SFP transceiver in front of the cage
socket opening and ensure that the transceiver is
correctly oriented.
When the transceiver is correctly oriented, the
extraction lever will be level with the socket latch.
4. Hold the sides of the SFP transceiver and slide it into
the cage socket until it clicks into place.
5. Press the transceiver  cage socket with
your thumb.
6. Verify that the transceiver is latched correctly by
grasping the sides of the transceiver and trying to pull
it out without lowering the extraction lever.
If the transceiver cannot be removed, it is installed
and latched correctly.
If the transceiver can be removed, reinsert it and
press harder with your thumb.
If necessary, repeat this process until the transceiver
is securely latched into the cage socket.
To remove the SFP transceivers
1. Ensure that you are properly grounded.
2. If applicable, disconnect the  from the transceiver connector and install
a clean dust plug in the transceiver’s optical bores.
3. Pull the extraction lever out and down to eject the transceiver. If you are unable to use
screwdriver or other similar tool to
open the lever.
4. Hold the sides of the transceiver and carefully pull it away from the cage socket.
5. Replace the cap on the SFP cage socket and place
the removed SFP transceiver into an antistatic bag.
Note: Follow proper

procedures when
installing and
removing SFP
transceivers to ensure
the devices remain
clean and are not
damaged.

DMZ1
DMZ2
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
FortiGate94D POE
USBMG
MT
1
2
3
4
5
6
7
8
9
10
11
12
15
16
17
1824
23
19
2022
21
13
14
STATUS
POWER
ALARM
HA
W
AN1
WAN2
1
2
FortiGate 940D-POE
PoE
USBMGMT
DMZ1
DMZ2
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
FortiGate94D POE
USBMG
MT
1
2
3
4
5
6
7
8
9
10
11
12
15
16
17
1824
23
19
2022
21
13
14
STATUS
POWER
ALARM
HA
W
AN1
WAN2
1
2
FortiGate940D-POE
PoE
USBMGMT
100-240V
AC
5.4
A-2.3A
50-60
Hz
CONSOLE
1312
Basic Connections
Connect your device to an electrical outlet and an Internet connection.
This is usually a modem, but could also be another device on your network.
1
Power Connection
WAN1
Internet
FortiGate Setup Options
2
Web Browser
Setup Wizard (p.13) With FortiExplorer (pp14-15)

(pp.18-19)
OS X
AB
CTerminal Emulation
With console cable (p.16-17)
D
A
Web-based Manager
1. Connect the Ethernet cable to the MGMT port and your computer.
2. Visit 192.168.1.99 in a web browser.
If this does not show the login page, change the IP address of you computer to
192.168.1.2 and try again.
3. Login using username “admin” and no password.
4. Click “Wizard” in the top right corner and follow instructions.
5. Register your device from the dashboard page.
Web Browser with Ethernet cable
https://
LAN Port 1

14 15
DMZ1
DMZ2
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
FortiGate94D POE
USBMG
MT
1
2
3
4
5
6
7
8
9
10
11
12
15
16
17
1824
23
19
2022
21
13
14
STATUS
POWER
ALARM
HA
W
AN1
WAN2
1
2
FortiGate 940D-POE
PoE
USBMGMT
Windows/OS X with USB

2. Connect the USB cable and launch
FortiExplorer if it does not appear
automatically.
Mac OS X Install
2. Double-Click the  and drag the
FortiExplorer icon to the Applications
folder.
3. Connect the USB cable.
4. Click the FortiExplorer icon to launch
the application.
1. Download FortiExplorer from http://forti.net/fexp.
B
USB MGMT Port
FortiExplorer Setup Wizard
FortiGate 
of the network settings.

access to additional device resources.
1. Follow prompts or click “Register” to register your device with FortiCare.
2. Click “Setup Wizard”.
3. Login using username “admin” and no password.
4. Follow Setup Wizard steps.
5. Click to complete the setup of your device.

16 17
100-240V
AC
5.4
A-2.3A
50-60
Hz
CONSOLE
CTerminal Emulation with Console Cable
To Connect to the CLI
1. Connect the FortiGate unit console port to the management computer using the
provided console cable.
2. Start a terminal emulation program on the management computer. Select the COM port
and use the following settings:
Baud Rate: 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow Control: None
3. Press Enter on your keyboard to connect to the CLI.
4. Login using username “admin” and no password. You can now proceed with

Console Port
Get started by typing “?” for a list of available commands.
Begin typing a command and type “?” for a list of available ways to complete.
For example 
A comprehensive reference guide with all commands can be found at http://forti.net/cli.
>
_

18 19
100-240V
AC
5.4
A-2.3A
50-60
Hz
CONSOLE
iPhone/iPad/iPod Touch with Apple to
USB cable
FortiExplorer App
1. Download the FortiExplorer iOS App to your device from http://forti.net/fexp-ios.
2. Use your Apple USB cable to connect to the USB port.
3. Launch the FortiExplorer App and select the device model.
4. Login using username “admin” and no password.

USB Port
D
http://forti.net/fexp-ios

20 21
Internet
USB MGMT (USB Mini-B)
USB client port for management
LAN Ports 1 - 24
Gigabit Ethernet 24-Port switch
connection for the internal network
LAN PoE Ports 25-48
Fast Ethernet ports with Power over Ethernet (PoE)
up to a maximum of 200W for all ports
DMZ 1 & 2 (SFP)
1 Gbps/auto small form-factor pluggable transceiver
ports for connection to a DMZ network device
USB MGMT USB CONSOLE
WAN 1
WAN 2
HA
MGMT
DMZ 1
DMZ 2
1
2
3
4
5
6
7
8
11
12
13
14 20
1915
16 18
17 21
22
23
24
25
26
27
28
9
10
29
30
31
32
33
34
35
36
STATUS
POWER
ALARM
HA
Device Guide
FortiGate 94D POE
FortiGate 94D POE
USB MGMT
1
2
3
4
DMZ 1
DMZ 2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21
25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WA N 1
WAN 2
41
42
43
44
45
46
47
48
WAN 1 & 2 (RJ-45)
Gigabit Ethernet Internet connections
FortiGate 94D POE
USB MGMT
1
2
3
4
DMZ 1
DMZ 2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21
25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WA N 1
WAN 2
41
42
43
44
45
46
47
48
FortiGate 94D POE
USB MGMT
1
2
3
4
DMZ 1
DMZ 2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21 25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WA N 1
WAN 2
41
42
43
44
45
46
47
48
FortiGate 940D-POE
PoE
USB MGMT

22 23
HA
Green: HA mode
Red: HA failure
Off: Not in HA mode
Power
Green: On
Off
Status
Green: Normal
Flashing green: Booting up
Red: Major alarm
Alarm
Red: Major alarm
Amber: Minor alarm
Off: No alarm
DMZ Ports
Green: Active
Flashing green: Transmitting & receiving data
Off: Not active
WAN & LAN Ports Speed
Green: Connected at 1Gbps
Amber: Connected at 100Mbps
Off: Connected at 10Mbps or not connected
WAN & LAN Ports Activity
Green: Connected
Flashing green: Transmitting & receiving data
Off: Not in use
USB (USB-A)
USB server ports for USB key,
modem, or management functions
Console (RJ-45)
Optional connection to the management computer.
Provides access to the CLI
CONSOLE
USB
Power
100-240V, 5.4-2.9A, 50-60Hz
100-240Vac
5.4-2.9A
50-60Hz
Device Guide
FortiGate 94D POE
USB MGMT USB CONSOLE
WAN 1
WAN 2
HA
MGMT
DMZ 1
DMZ 2
1
2
3
4
5
6
7
8
11
12
13
14 20
1915
16 18
17 21
22
23
24
25
26
27
28
9
10
29
30
31
32
33
34
35
36
STATUS
POWER
ALARM
HA
FortiGate 94D POE
USB MGMT
1
2
3
4
DMZ 1
DMZ 2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21
25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WA N 1
WAN 2
41
42
43
44
45
46
47
48
FortiGate 94D POE
USB MGMT
1
2
3
4
DMZ 1
DMZ 2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21
25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WA N 1
WAN 2
41
42
43
44
45
46
47
48
FortiGate 94D POE
USB MGMT
1
2
3
4
DMZ 1
DMZ 2
5
6
7
8
9
10
11
12
15
16
17
18 24
2319
20 22
21 25
26
27
28
29
30
31
32
13
14
33
34
35
36
37
38
39
40
STATUS
POWER
ALARM
HA
WA N 1
WAN 2
41
42
43
44
45
46
47
48
FortiGate 940D-POE
PoE
USB MGMT
PoE Status
Green: PoE device connected and receiving power
Red: PoE device connected but not receiving
Off: PoE device not connected

2424
About Fortinet
More Information
FortiGate Cookbook
Advanced installation and setup, networking, security policies

Authentication, Logging and reporting.
http://forti.net/cookbook
Training Services
Course descriptions, availability, schedules, and locations of
training programs in your area.
http://forti.net/training


http://forti.net/cli
FortiOS Handbook

http://forti.net/handbook

a
n
c
e
r
F
o
r
t
i
A
u
t
h
e
n
t
i
c
a
t
o
r
F
o
r
t
i
M
a
n
a
g
e
r
F
o
r
t
i
A
n
a
l
y
z
e
r
F
o
r
t
i
C
l
i
e
n
t
F
o
r
t
i
M
a
i
l
F
o
r
t
i
W
e
b
F
o
r
t
i
B
r
i
d
g
e
F
o
r
t
i
S
w
i
t
c
h
F
o
r
t
i
T
o
k
e
n
F
o
r
t
i
W
i
F
i
F
o
r
t
i
A
P
F
o
r
t
i
D
D
o
S
F
o
r
t
i
B
a
l
Application
Control
WiFi
Controller
DLP
Anti
Virus
Firewall
Web
g
n
i
r
e
t
l
i
F
WAN
Optimization
Traffic
Optimization
VPN
IPS
Anti
Spam