Fortinet FIM-7920E User manual

FIM-7920E Processing Module Guide
FortiGate-7000E Series

FORTINET DOCUMENT LIBRARY
https://docs.fortinet.com
FORTINET VIDEO GUIDE
https://video.fortinet.com
FORTINET BLOG
https://blog.fortinet.com
CUSTOMER SERVICE & SUPPORT
https://support.fortinet.com
FORTINET TRAINING & CERTIFICATION PROGRAM
https://www.fortinet.com/support-and-training/training.html
NSE INSTITUTE
https://training.fortinet.com
FORTIGUARD CENTER
https://fortiguard.com/
END USER LICENSE AGREEMENT
https://www.fortinet.com/doc/legal/EULA.pdf
FEEDBACK
Email: [e-mail]
October 25, 2019
FIM-7920E Processing Module Guide
01-606-411351-20191025

TABLEOFCONTENTS
Change log 4
FIM-7920E interface module 5
Mounting hardware 5
Module levers 5
Power sliders 6
Secure screws 6
Front panel interfaces 6
Physical description 7
Front panel LEDs 8
FIM-7920E C1 to C4 interface combinations 9
Supported transceivers and breakout cables 9
Changing the interface type and splitting the FIM-7920E C1 to C4 interfaces 9
Changing the interface type 9
Splitting the C1 to C4 interfaces 10
Turning the module on and off 10
NMI switch 11
FIM-7920E hardware architecture 11
Hardware installation 12
Installing QSFP28, QSFP+, SFP+, and SFP transceivers 12
To install transceivers 12
Installing the optional front cable management bracket 13
FIM-7920E mounting hardware 14
Inserting a FIM-7920E module into a chassis 15
Shutting down and removing a FIM-7920E module from a chassis 19
Troubleshooting 24
FIM-7920E does not startup 24
FIM-7920E status LED is flashing during system operation 24
Quick FIM-7920E configuration 25
Registering your FortiGate-7000 series products 25
Choosing the configuration tool 25
Changing network settings 25
Cautions and warnings 27
Environmental specifications 27
Safety 28
Regulatory notices 29
Federal Communication Commission (FCC) – USA 29
Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada 29
European Conformity (CE) - EU 29
Voluntary Control Council for Interference (VCCI) – Japan 30
Bureau of Standards Metrology and Inspection (BSMI) – Taiwan 30
China 30
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Change log
Date Change description
October 25, 2019 Restructuring and bug fixing.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

FIM-7920E interface module
The FIM-7920E interface module is a hot swappable module that provides data, management, and session
sync/heartbeat interfaces, base backplane switching, and fabric backplane session-aware load balancing for a
FortiGate-7000 series chassis. The FIM-7920E includes an integrated switch fabric and DP2 processors to load balance
millions of data sessions over the 80Gbps fabric backplane channel to FPM processor modules. The FIM-7920E also
includes a 1Gbps base backplane channel for base backplane management communication with each FPMmodule in
the chassis, one 40Gbps fabric backplane channel for fabric backplane communication with the FIM module(s) in the
chassis, and a second 1Gbps base backplane channel for base backplane communication with the FIM module(s) in the
chassis.
The FIM-7920E can be installed in any FortiGate-7000 series chassis in chassis hub/switch slots 1 or 2. The FIM-7920E
provides four Quad Small Form-factor Pluggable 28 (QSFP28) 100GigE interfaces for a FortiGate-7000 chassis. Using
a 100GBASE-SR4 QSFP28 or 40GBASE-SR4 QSFP+ transceiver, each QSFP28 interface can also be split into four
10GBASE-SR SFP+ interfaces.
You can also install FIM-7920Es in a second chassis and operate the chassis in HA mode to provide chassis failover
protection.
FIM-7920E front panel
FIM-7920E
Power
Slider
Module
Lever
Secure
Screw
Module
Lever
Power
Slider
Secure
Screw
C1 to C4
100GigE Fabric Channel
QSFP28 Network
Interfaces (data)
M1 and M2 10GigE Base
Channel SFP+ Interfaces
(heartbeat and management)
MGMT1 - MGMT4
10/100/1000BASE-T Copper
Management Interface
Status, Alarm
HA, and Power
LEDS
USB
Power
Button
NMI
Button
Mounting hardware
Use the module levers, power sliders, and secure screws to insert, secure and remove the module from the chassis.
Module levers
Carefully slide the module all of the way into the chassis slot and fully close the module levers to seat the module into
the chassis slot and to connect the module to the chassis backplane connectors. When both module levers are fully
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

FIM-7920E interface module 6
closed, the power sliders can be lowered to their bottom position, locking the module levers and turning on power to the
module.
Raise the power sliders to unlock the module levers and turn off module power. Then open the module levers to eject
the module from the backplane connectors; allowing the module to be removed from the chassis.
The module lever mechanism helps reduce the engagement force required to insert or eject the module from the
backplane connectors.
The module levers do not fully secure the module in the chassis. The secure screws must be tightened to reliably secure
the module in the chassis and to make sure the module remains securely connected to the backplane for power and
network connectivity.
Power sliders
Close the module levers and move the power sliders to their bottom position to lock the module levers and turn the
module power switch on.
Move the power sliders to the top position to unlock the module levers and turn the module power switch off.
Gently push the power sliders down to make sure they are in their bottom position. If the module LEDs do not light the
module is not receiving power. If this happens check the power sliders to make sure they are in their bottom position.
Secure screws
Fully tighten the secure screws to lock the module in the chassis providing a secure and reliable connection with the
backplane.
Loosen the secure screws before ejecting the module from the chassis.
Front panel interfaces
You connect the FIM-7920E to your 100Gbps networks using the C1 to C4 front panel QSFP28 interfaces. The front
panel also includes M1 and M2 SFP+ interfaces for the base channel, four Ethernet management interfaces (MGMT1 to
MGMT4), and a USB port. The USB port can be used with any USB key for backing up and restoring configuration files.
Connector Type Speed Protocol Description
C1 to C4 QSFP28 100Gbps/40Gbps/10Gbps Ethernet Four front panel 100GigE QSFP28 fabric
channel interfaces that can be connected to
100Gbps networks to distribute sessions to
the FPM processor modules installed in
chassis slots 3 and up. Using a 100GBASE-
SR4 QSFP28 or 40GBASE-SR4 QSFP+
transceiver, each QSFP28 interface can
also be split into four 10GBASE-SR
interfaces. These interfaces also support
creating link aggregation groups (LAGs)
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

FIM-7920E interface module 7
Connector Type Speed Protocol Description
that can include interfaces from multiple
FIM-7920Es.
M1 and M2 SFP+ 10Gbps/1Gbps Ethernet Two front panel 10GigE SFP+ interfaces
that connect to the base backplane
channel. These interfaces are used for
heartbeat, session sync, and management
communication between FIM-7920Es in
different chassis. These interfaces can also
be configured to operate as Gigabit
Ethernet interfaces using SFP transceivers,
but should not normally be changed. If you
use switches to connect these interfaces,
the switch ports should be able to accept
packets with a maximum frame size of at
least 1526. The M1 and M2 interfaces need
to be on different broadcast domains. If M1
and M2 are connected to the same switch,
Q-in-Q must be enabled on the switch
MGMT1 to
MGMT4
RJ-45 10/100/1000Mbps Ethernet Four 10/100/1000BASE-T copper out of
band management Ethernet interfaces.
USB USB 3.0
Type A
USB 3.0
USB 2.0
Standard USB connector.
Physical description
Dimensions 1.88 x 17.11 x 18.49 in. (48 x 435 x 470 mm) (Height x Width x Length)
Weight 16.6 lb. (7.6 kg)
Operating Temperature 32 to 104°F (0 to 40°C)
Storage Temperature -31 to 158°F (-35 to 70°C)
Relative Humidity 10% to 90% (Non-condensing)
Power consumption Max: 460W; Average: 410W
Max Current 38.3 A
Heat Dissipation 1565BTU/h
Joules/h 1644KJ/h
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

FIM-7920E interface module 8
Front panel LEDs
From the FIM-7920E font panel you can view the status of the module LEDs to verify that the module is functioning
normally.
LED State Description
STATUS
Off The FIM-7920E is powered off.
Green The FIM-7920E is powered on and operating normally.
Flashing Green The FIM-7920E is starting up.
ALARM Red Major alarm.
Amber Minor alarm
Off No alarms
HA
Off The FIM-7920E is operating in normal mode.
Green The FIM-7920E is operating in HA mode.
Red A failover has occurred
POWER Green The FIM-7920E is powered on and operating normally.
Off The FIM-7920E is powered off.
C1 to C4
Green The correct cable is connected to the interface and the connected equipment
has power and is connected at 100Gbps or 40Gbps. If the port is split the LED
will light as long as at least one of the 10Gbps connections is active.
Flashing Green Network activity at the interface.
Off No link is established.
M1 and M2 Green The correct cable is connected to the interface and the connected equipment
has power.
Flashing Green Network activity at the interface.
Off No link is established.
MGMT1-4
Link/Act
Solid Green Indicates this interface is connected with the correct cable and the attached
network device has power.
Blinking Green Indicates network traffic on this interface.
Off No Link
MGMT1-4
Speed
Green Connection at 1Gbps.
Amber Connection at 100Mbps.
Off Connection at 10Mbps.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

FIM-7920E interface module 9
FIM-7920E C1 to C4 interface combinations
The following table shows the different combinations of interface speeds that you can set up with the FIM-7920E C1 to
C4 front panel interfaces.
100GE QSFP28 4 3 3 2 2 2 1 1 1 1 x x x x x
40GE QSFP+ x 1 x 2 1 x 3 2 1 x 4 3 2 1 x
10Ge SFP+ x x 4 x 4 8 x 4 8 12 x 4 8 12 16
Supported transceivers and breakout cables
Transceivers available from Fortinet for the FIM-7920E C1 to C4 QSFP28 interfaces.
Transceiver Description
FG-TRAN-QSFP28-SR4 100 GE QSFP28 transceivers, 4 channel parallel fiber, short range.
FG-TRAN-QSFP28-LR4 100 GE QSFP28 transceivers, 4 channel parallel fiber, long range.
FG-TRAN-QSFP+SR 40GE QSFP+ transceivers, short range.
FG-TRAN-QSFP+LR 40GE QSFP+ transceivers, long range.
Breakout cables available from Fortinet for the FIM-7920E C1 to C4 QSFP28 interfaces.
Breakout Description
FG-TRAN-QSFP-4XSFP 40GE QSFP+ Parallel Breakout Active Optical Cable with 1m length.
FG-TRAN-QSFP-4SFP-5 40G QSFP+ Parallel Breakout MPO to 4xLC connectors, 5m reach.
Changing the interface type and splitting the FIM-7920E C1 to C4
interfaces
By default, the FIM-7920E C1 to C4 interfaces are configured as 100GE QSFP28 interfaces. You can use the following
command to convert them to 40GE QSFP+ interfaces. Once converted, you can use the other command below to split
them into four 10GBASE-SR interfaces.
Changing the interface type
For example, to change the interface type of the C1 interface of the FIM-7920E in slot 1 to 40GE QSFP+ connect to the
CLI of your FortiGate-7000 system using the management IP and enter the following command:
config system global
set qsfp28-40g-port 1-C1
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

FIM-7920E interface module 10
end
The FortiGate-7000 system reboots and when it starts up interface C1 of the FIM-7920E in slot 1 is operating as a 40GE
QSFP+ interface .
To change the interface type of the C3 and C4 ports of the FIM-7920E in slot 2 to 40GE QSFP+ enter the following
command:
config system global
set qsfp28-40g-port 2-C3 2-C4
end
The FortiGate-7000 system reboots and when it starts up interfaces C3 and C4 of the FIM-7920E in slot 2 are operating
as a 40GE QSFP+ interfaces.
Splitting the C1 to C4 interfaces
Each 40GE interface (C1 to C4) on the FIM-7920Es in slot 1 and slot 2 of a FortiGate-7000 system can be split into 4 x
10GBE interfaces. You split these interfaces after the FIM-7920Es are installed in your FortiGate-7000 system and the
system us up and running. You can split the interfaces of the FIM-7920Es in slot 1 and slot 2 at the same time by
entering a single CLI command. Enabling, disabling, or changing the split interfaces configuration requires a system
reboot. Fortinet recommends that you split multiple interfaces at the same time according to your requirements to avoid
traffic disruption.
For example, to split the C1 interface of the FIM-7920E in slot 1 (this interface is named 1-C1) and the C1 and C4
interfaces of the FIM-7920E in slot 2 (these interfaces are named 2-C1 and 2-C4) connect to the CLI of your FortiGate-
7000 system using the management IP and enter the following command:
config system global
set split-port 1-C1 2-C1 2-C4
end
After you enter the command, the FortiGate-7000 reboots and when it comes up:
lThe 1-C1 interface will no longer be available. Instead the 1-C1/1, 1-C1/2, 1-C1/3, and 1-C1/4 interfaces will be
available.
lThe 2-C1 interface will no longer be available. Instead the 2-C1/1, 2-C1/2, 2-C1/3, and 2-C1/4 interfaces will be
available.
lThe 2-C4 interface will no longer be available. Instead the 2-C4/1, 2-C4/2, 2-C4/3, and 2-C4/4 interfaces will be
available.
You can now connect breakout cables to these interfaces and configure traffic between them just like any other
FortiGate interface.
Turning the module on and off
You can use the front panel power button to turn the FIM-7920E power on or off. If the FIM-7920E is powered on, press
the power switch to turn it off. If the FIM-7920E is turned off and installed in a chassis slot, press the power button to
turn it on.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

FIM-7920E interface module 11
NMI switch
When working with Fortinet Support to troubleshoot problems with the FIM-7920E you can use the front panel non-
maskable interrupt (NMI) switch to assist with troubleshooting. Pressing this switch causes the software to dump
registers/backtraces to the console. After the data is dumped the FIM-7920E reboots. While the FIM-7920E is
rebooting, traffic is temporarily blocked. The FIM-7920E should restart normally and traffic can resume once the it is up
and running.
FIM-7920E hardware architecture
The FIM-7920E includes an integrated switch fabric (ISF) that connects the front panel interfaces to the DP2 session-
aware load balancers and to the chassis backplanes. The ISFalso allows the DP2 processors to distribute sessions
among all NP6 processors on the FPMmodules in the same chassis.
The FIM-7920E also includes the following backplane communication channels:
lOne 80Gbps fabric backplane channel to distribute traffic to the FPMs.
lOne 1Gbps base backplane channel for base backplane communication with the FPMs.
lOne 40Gbps fabric backplane channel for fabric backplane communication with the other FIM.
lOne 1Gbps base backplane channel for base backplane communication with the other FIM.
FIM-7920E hardware architecture
1G
FIM-7920E
Chassis Base Backplane
Chassis Fabric Backplane
CPU Integrated Switch Fabric
Management
(MGMT1-4)
Heartbeat
(M1 M2)
Data
(C1 - C4)
DP2 DP2 DP2
1G 80G
40G
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation
This chapter describes installing a FIM-7920E interface module into a FortiGate-7000 chassis.
Installing QSFP28, QSFP+, SFP+, and SFP transceivers
You must install QSFP28 or QSFP+, transceivers into the FIM-7920E front panel C1 to C4 fabric channel interfaces
before connecting them to 100Gbps or 40Gbps networks (10Gbps networks if splitting one or more interfaces into
10GBASE-SR SFP+ interfaces). You can install the transceivers before or after inserting the FIM-7920E module into a
chassis.
You must install SFP+ transceivers into the FIM-7920E M1 and M2 interfaces before connecting them to 10Gbps
networks. The FIM-7920E ships with two 10GBASE-SR SFP+ transceivers. You can also configure the M1 and M2
interfaces to operate at 1Gbps and install SFP transceivers. You can install these transceivers before or after inserting
the FIM-7920E board into a chassis.
You can install the following types of transceivers for connectors M1 and M2:
l10GBASE-SR SFP+ (10Gbps)
l10GBASE-LR SFP+ (10Gbps)
l1000BASE SFP (1Gbps)
The M1 and M2 interfaces are used for heartbeat, session sync, and management
communication between FIM-7920Es in different chassis. This communication requires 10
Gbps connections so, even though it supported, the M1 and M2 interfaces should not
changed to 1000Base SFP 1Gbps interfaces.
To install transceivers
To complete this procedure, you need:
lA FIM-7920E
lTransceivers to install
lAn electrostatic discharge (ESD) preventive wrist strap with connection cord
FIM-7920Es must be protected from static discharge and physical shock. Only handle or work
with FIM-7920Es at a static-free workstation. Always wear a grounded electrostatic discharge
(ESD) preventive wrist strap when handling FIM-7920Es.
Handling the transceivers by holding the release latch can damage the connector. Do not
force transceivers into their cage slots. If the transceiver does not easily slide in and click into
place, it may not be aligned correctly. If this happens, remove the transceiver, realign it and
slide it in again.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation 13
1. Attach the ESD wrist strap to your wrist and to an available ESD socket or wrist strap terminal.
2. Remove the caps from the cage sockets on the FIM-7920E front panel.
3. Hold the sides of the transceiver and slide it into the cage socket until it clicks into place.
Installing the optional front cable management bracket
Your FIM-7920E package includes a front cable management bracket. This bracket helps support the relatively large
QSFP28 transceivers used to connect the front panel C1 to C4 interfaces to your networks.
Using the front cable management bracket is optional, but if you decide to use the bracket it should be attached to the
FortiGate-7000 chassis left and right cable management brackets.
Install one front cable management bracket for each FIM-7920E after you have installed the FIM-7920E in your
FortiGate-7000 chassis.
Installing FIM-7920E front cable management brackets in a FortiGate-7040E chassis
Front mounting
bracket
Optional front
cable management
brackets
Left cable
management
bracket
Right cable
management
bracket
M4x8 large head
pan head screws
M4x8 large head
pan head screws
M4x8 flat-head
screws
M4x8 flat-head
screws
Front mounting
bracket
Power cord
clamp
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation 14
FIM-7920E mounting hardware
To install a FIM-7920E you slide the module into a hub/switch slot in the front of an FortiGate-7000 series chassis
(either slot 1 or 2) and then use the mounting hardware, described in Mounting hardware on page 5, to lock the module
into place in the slot. When locked into place and positioned correctly, the module front panel is flush with the chassis
front panel and connected to the chassis backplane.
To position the module correctly you must use the mounting hardware shown below for the right of the FIM-7920E front
panel. The mounting hardware on the left of the front panel is the same but reversed. The FIM-7920E mounting
hardware aligns the module in the chassis slot and is used to insert and eject the module from the slot.
On some FIM modules there may be very little clearance between the front panel interfaces
and the module lever on the right side of the FIM-7920E. In fact, you may have to remove
network connectors from some front panel interfaces to open the module lever. In most cases
you should remove all network connectors from the front panel before opening the module
levers to remove an FIM module from a chassis slot.
FIM-7920E mounting hardware
Closed
Secure Screw
Module Lever
Power Slider
Power Slider
Alignment Pin Module Lever
Secure Screw
Alignment Pin
Open
(to open move the power slider up about 2 mm)
The FIM-7920E module levers align the module in the chassis slot and insert and eject the module from the slot. The
power sliders activate micro switches that turn on or turn off power to the module. When both sliders are raised, the
module cannot receive power. When the sliders are fully closed, the module can receive power if it is fully inserted into a
chassis slot.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation 15
Inserting a FIM-7920E module into a chassis
This procedure describes how to insert a FIM-7920E module into slot 1 or 2 of a FortiGate-7000 chassis. The procedure
includes photographs to illustrate the procedure steps. The photos were taken in one of Fortinet's hardware labs using a
generic module and FortiGate-7000 chassis.
You must carefully slide the module all the way into the chassis slot, close the module levers
to seat the module into the slot, and tighten the secure screws to make sure the module is
fully engaged with the backplane and secured. You must also make sure that the power
sliders are fully closed by gently pushing them down.
Installation Highlights:
1. Module levers must be closed.
2. Secure screws must be tightened.
3. Power sliders must be fully closed for the module to get power and start up.
If the module is not receiving power all LEDs remain off.
FIM-7920E modules are hot swappable. This procedure is the same whether or not the chassis is powered on.
Do not carry the FIM-7920E module by holding the module levers or secure screws. When
inserting or removing the FIM-7920E from a chassis slot, handle the module by the front
panel. The levers are not designed for carrying the module. If the levers become bent or
damaged, the FIM-7920E may not align correctly in the chassis slot.
To complete this procedure, you need the following equipment and tools:
la FIM-7920E
la FortiGate-7000 chassis with an empty slot
lan electrostatic discharge (ESD) preventive wrist strap with connection cord
la Phillips screwdriver
FIM-7920Es must be protected from static discharge and physical shock. Only handle or work
with FIM-7920Es at a static-free workstation. Always wear a grounded electrostatic discharge
(ESD) preventive wrist strap when handling FIM-7920Es. Attach the ESD wrist strap to your
wrist and to an ESD socket or to a bare metal surface on the chassis or frame. (An ESD wrist
strap is not visible in the photographs below because they were taken in an ESD safe lab
environment.)
1. Remove the FIM-7920E module from its packaging.
The module levers are closed when you first remove a new module from its packaging.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation 16
2. Align the module with the chassis slot, slowly slide the module into the slot, stop at
about 1-2 inches from fully inserting it.
Module levers Module levers
Slide in slowly
Stop position
3. Unlock the left and right module levers by pushing the power sliders up until the
levers pop open.
Before sliding the final portion of the module into the chassis fully open both levers by pushing the power sliders up.
Fully open both levers to avoid damaging the lever mechanism. Damaging the levers can prevent the module from
connecting to power.
Levers pop open
Power
slider
up
Power
slider
up
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation 17
4. Continue pushing the module into the slot until the levers engage with the sides of
the chassis slot.
Insert the module by applying moderate force to the front faceplate (not the levers) to slide the module into the slot. The
module should glide smoothly. If you encounter any resistance, the module could be aligned incorrectly. Pull the module
back out and try inserting it again.
Module alignment pin
inserted into chassis
Apply moderate force to
push the module slowly
into the slot. Stop Position
Levers engage with chassis
5. Close both levers by pushing them into contact with the module front panel.
Closing the levers draws the module into the chassis slot and connects the module rear connectors to the chassis
backplane. The design of the levers leaves gaps to compensate for tolerances. So even when the levers are fully closed,
the module may not be fully into position and in contact with the chassis backplane.
Levers closed
Rotate to close
Small gap between the
module and the chassis
when levers are closed.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation 18
6. Tighten both secure screws to close the gap between the module and the chassis.
Begin by engaging the secure screws into the chassis tapped hole by hand and roughly tighten them. Then use a Phillips
screwdriver to fully tighten the two secure screws. Do not use a power screwdriver, because the high torque and speed
can damage the chassis or screw thread. After tightening both secure screws, the module is fully seated in the chassis
slot and the module connectors are fully in contact with the chassis backplane.
After tightening both secure
screws, the module is fully
engaged with the chassis.
Tighten by hand
Fully tighten with a
screwdriver
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation 19
7. Push down both power sliders to make sure the module power switch is on.
When the module is fully in position, the power sliders should drop down, lock the levers, and turn module power on.
Gently push both power sliders down to their bottom position to make sure they are fully closed.
Levers locked
Power slider
down to bottom
Power slider
down to bottom
8. If the chassis is powered on, check the modle LEDs to verify that the module is
operating correctly
LED Normal operation state
Status Green
Alarm Off
HA Off
Power Green
Shutting down and removing a FIM-7920E module from a chassis
This procedure describes how to shut down and remove a FIM-7920E module from FortiGate-7000 chassis. The
procedure includes photographs to illustrate the procedure steps. The photos were taken in one of Fortinet's hardware
labs using a generic module and FortiGate-7000 chassis.
FIM-7920Es are hot swappable. This procedure is the same whether or not the chassis is powered on.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.

Hardware installation 20
Do not carry the FIM-7920E by holding the module levers or secure screws. When inserting or
removing the FIM-7920E from a chassis slot, handle the module by the front panel. The
levers are not designed for carrying the module. If the levers become bent or damaged, the
FIM-7920E may not align correctly in the chassis slot.
To complete this procedure, you need the following equipment and tools:
la FortiGate-7000 chassis with a FIM-7920E module installed
lan electrostatic discharge (ESD) preventive wrist strap with connection cord
la Phillips screwdriver
FIM-7920Es must be protected from static discharge and physical shock. Only handle or work
with FIM-7920Es at a static-free workstation. Always wear a grounded electrostatic discharge
(ESD) preventive wrist strap when handling FIM-7920Es. (An ESD wrist strap is not visible in
the photographs below because they were taken in an ESD safe lab environment.)
1. Shut down the module operating system properly.
To avoid potential hardware problems, always shut down the module operating system properly before removing the
module from a chassis slot or before powering down the chassis. To shutdown the module, connect to the module GUI
and select Shutdown from the administrator menu. Or, from the module CLI,enter the execute shutdown
command.
2. Disconnect all cables from the module, including all network cables and USB cables
or keys.
FIM-7920E Processing Module Guide Fortinet Technologies Inc.