Fortinet FortiScan-1000B User manual

© Copyright 2010 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trademarks
of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
27 July 2010
Connecting
R
1000B
For future
use USB Ethernet
ports
Ethernet ports
Power supply
Console
connection
R
1000B
Ethernet cables connect to
the internal network and to
the Internet (public switch
or router)
Power cable
connects to
power supply
Ethernet cables connect to
the internal network and to
the Internet (public switch
or router)
Null modem
cable connects to serial
port on management
computer
FortiGate-30B
Tools and Documenation
Copyright 2008 Fortinet Incorporated. All rights reserved.
Trademarks
QuickStart Guide
Welcome | Bienvenue | Willkommen | 歓迎 | Bienvenido | Benvenuto
2 Mounting Slide Rails
Straight-through
Ethernet cable
Power Cable Null-Modem Cable
(RS-232)
R
1000B
Package Contents
Connect the following to the FortiScan unit. Ensure the FortiScan unit is placed on a stable surface or install in a standard 19 inch rack. See the FortiScan-1000B Rack Install Guide for
details.
• Insert a network cable to port 1.
• Connect the other end of network cable to the network hub or switch.
• Connect the AC Power Cord to the Power Supply.
• Connect the Power Cord to a surge protected power bar or power supply.
• Remove the front panel and press the power button.
FortiScan-1000B
17-10000-95945-20090428
QuickStart Guide
LED State Description
Ports 1 and 2 Left Green The correct cable is connected to the interface and
the connected equipment has power
Ports 1 and 2 Right Flashing
Amber
Network activity at this interface.
Ports 3 and 4 Left LED
Green The correct cable is connected to the interface and
the connected equipment has power.
Flashing Network activity at this interface.
Ports 3 and 4 Right LED
Green The interface is connected at 1000 Mbps.
Amber The interface is connected at 100 Mbps.
Off The interface is connected at 10 Mbps.
Connector Type Speed Protocol Description
Ports 1 to 4 RJ-45 10/100/1000 Base-T Ethernet Copper gigabit connection to 10/100/1000 copper networks.
CONSOLE DB9 9600 8/N/1 RS-232 serial Optional connection to the management computer. Provides access to the command line inter-
face (CLI).
USB USB USB Optional connection to a USB key for rmware installation.

Visit these links for more information and documentation for your Fortinet product.
• Technical Documentation - http://docs.forticare.com
• Knowledge Center - http://kb.forticare.com
• Technical Support - http://support.fortinet.com
• Training Services - http://campus.training.fortinet.com
Port Information
Port 1 IP: ____.____.____.____
Netmask: ____.____.____.____
Port 2 IP: ____.____.____.____
Netmask: ____.____.____.____
Port 3 IP: ____.____.____.____
Netmask: ____.____.____.____
Port 4 IP: ____.____.____.____
Netmask: ____.____.____.____
The internal interface IP address and netmask must be valid for the internal network.
General settings
Administrator password:
Network Settings: Default Gateway: ____.____.____.____
Primary DNS Server: ____.____.____.____
Secondary DNS Server: ____.____.____.____
Factory default settings
Port 1 interface 192.168.1.99 Management IP 192.168.1.99:8443
Port 2 interface 192.168.2.99 Administrative account settings
Port 3 interface 192.168.3.99 User name admin
Port 4 interface 192.168.4.99 Password P@ssword1
To reset the FortiScan unit to the factory defaults, in the CLI type the command
execute factoryreset
Collecting Information
Conguring
Web-based Manager
Use the following procedure to connect to the web-based manager for the rst time. Congu-
ration changes made with the web-based manager are effective immediately without reset-
ting the FortiScan unit or interrupting service.
Requirements:
• An Ethernet connection between the FortiScan unit and management computer.
• A web browser such as FireFox or Internet Explorer on the management computer.
To connect to the web-based manager
1. Connect the Port 1 interface of the FortiScan unit to Ethernet port of the management
computer.
Use a cross-over Ethernet cable to connect the devices directly. Use straight-through
Ethernet cables to connect the devices through a hub or switch.
2. Congure the management computer to be on the same subnet as the FortiScan Port 1
interface. To do this, change the IP address of the management computer to 192.168.1.2
and the netmask to 255.255.255.0.
3. To access the FortiScan web-based manager, in your browser, go to https://192.168.1.99
(remember to include the “s” in https://).
4. Type admin in the Name eld, P@ssword1 in the Password eld, and click Login.
After connecting to the Web-based manager, you can congure the FortiScan unit IP ad-
dress, DNS server IP address, and default gateway to connect the FortiScan unit to the
network.
To congure interfaces
1. Go to System > Network > Interface.
2. Select the edit icon for each interface to congure.
3. Set the IP address and netmask for the interface and click OK.
To congure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > DNS.
2. Enter the Primary and Secondary DNS IP addresses and click Apply.
To congure a Default Gateway
1. Go to System > Network > Routing and click Create New.
2. Set Gateway to the Default Gateway IP address and click OK.
Administration password
To restrict access to the FortiScan unit management account, it is recommended that the
default password is changed after you rst login.
To change the admin user account password after login
1. Go to System > Admin.
2. For the admin user, click the Change Password icon.
3. Enter a new password in the New Password box.
4. Reenter the password to Conrm Password box.
5. Click OK.
Command Line Interface
The FortiScan unit has serial port. Use the null modem cable to connect it to your manage-
ment computer.
Requirements:
• The RJ-45 to DB9 serial connection between the FortiScan unit and management com-
puter.
• A terminal emulation application (such as HyperTerminal for Windows) on the manage-
ment computer.
To connect to the FortiScan unit
1. Use a null modem cable to connect the FortiScan serial port to the management com-
puter serial port.
2. Start a terminal emulation program (such as HyperTerminal) on the management com-
puter.
3. Use these settings: Baud Rate 9600, Data bits 8, Parity None, Stop bits 1, Flow Control
None.
4. At the login prompt, type admin and press Enter twice.
(The login prompt is preceded by the server default host name.)
After connecting to the CLI, you can congure the FortiScan unit IP address, DNS server IP
address, and default gateway to connect the FortiScan unit to the network.
To congure the FortiScan unit using the CLI
1. Set the IP address and netmask of the Port1 interface.
cong system interface
edit port1
set ip <intf_ip>/<netmask_ip>
end
2. Congure the primary and secondary DNS server IP addresses.
cong system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
3. Congure the default gateway.
config system route
edit 1
set device <interface>
set dst <destination_ip>
set gateway <gateway_ip>
end
Shutting down the FortiScan unit
When powering off the FortiScan unit, always shut down the unit using the following pro-
cedures before disconnecting the power supply. If you do not follow this procedure, it can
increase the risk of damaging the FortiScan hard disk.
1. Enter the following command at the prompt:
execute shutdown
2. To power down completely, remove the front panel and press the power button.
Web-based manager
The FortiScan web-based manager is an easy to use management tool.
Use it to congure the administrator password, the interface and default gateway addresses,
add Fortinet devices and congure reports.
Requirements:
• An Ethernet connection between the FortiScan unit and management computer.
• A web browser such as FireFox or Internet Explorer on the management computer.
Command Line Interface (CLI)
The CLI is a full-featured management tool. Use it to congure the administrator password,
the interface addresses, the default gateway address, and the DNS server addresses. To
congure advanced settings, see the Tools and Documentation CD included with the
FortiScan unit.
Requirements:
• The DB9 serial connection between the FortiScan unit and management computer.
• A terminal emulation application (HyperTerminal for Windows) on the management
computer.
Conguration Tools