Fortinet FortiCarrier-5001A-DW User manual

FortiCarrier-5001A Security System Guide
01-400-91945 -20090223
FortiCarrier-5001A
Security System Guide
A detailed guide to the FortiCarrier-5001A-DW Security System. This FortiCarrier-5001A Security System Guide
describes FortiCarrier-5001A hardware features, how to install a FortiCarrier-5001A board in a FortiGate-5000 series
chassis, and how to configure the FortiCarrier-5001A security system for your network.
The most recent versions of this and all FortiGate-5000 series documents are available from the FortiGate-5000 page of
the Fortinet Technical Documentation web site (http://docs.forticare.com).
Visit http://support.fortinet.com to register your FortiCarrier-5001A security system. By registering you can receive
product updates, technical support, and FortiGuard services.
FortiCarrier-5001A-DW

Warnings and cautions
FortiCarrier-5001A Security System Guide
201-400-91945 -20090223
http://docs.fortinet.com/ • Feedback
Warnings and cautions
Only trained and qualified personnel should be allowed to install or maintain FortiGate-5000 series equipment.
Read and comply with all warnings, cautions and notices in this document.
• Turning off all power switches may not turn off all power to the FortiGate-5000 series equipment. Some circuitry
in the FortiGate-5000 series equipment may continue to operate even though all power switches are off.
• Many FortiGate-5000 components are hot swappable and can be installed or removed while the power is on.
But some of the procedures in this document may require power to be turned off and completely disconnected.
Follow all instructions in the procedures in this document that describe disconnecting FortiGate-5000 series
equipment from power sources, telecommunications links and networks before installing, or removing
FortiGate-5000 series components, or performing other maintenance tasks. Failure to follow the instructions in
this document can result in personal injury or equipment damage.
• Install FortiGate-5000 series chassis at the lower positions of a rack to avoid making the rack top-heavy and
unstable.
• Do not insert metal objects or tools into open chassis slots.
• Electrostatic discharge (ESD) can damage FortiGate-5000 series equipment. Only perform the procedures
described in this document from an ESD workstation. If no such station is available, you can provide some ESD
protection by wearing an anti-static wrist strap and attaching it to an available ESD connector such as the ESD
sockets provided on FortiGate-5000 series chassis.
• Make sure all FortiGate-5000 series components have reliable grounding. Fortinet recommends direct
connections to the building ground.
• If you install a FortiGate-5000 series component in a closed or multi-unit rack assembly, the operating ambient
temperature of the rack environment may be greater than room ambient. Make sure the operating ambient
temperature does not exceed Fortinet’s maximum rated ambient temperature.
• Installing FortiGate-5000 series equipment in a rack should be such that the amount of airflow required for safe
operation of the equipment is not compromised.
• FortiGate-5000 series chassis should be installed by a qualified electrician.
• FortiGate-5000 series equipment shall be installed and connected to an electrical supply source in accordance
with the applicable codes and regulations for the location in which it is installed. Particular attention shall be
paid to use of correct wire type and size to comply with the applicable codes and regulations for the installation
/ location. Connection of the supply wiring to the terminal block on the equipment may be accomplished using
Listed wire compression lugs, for example, Pressure Terminal Connector made by Ideal Industries Inc. or
equivalent which is suitable for AWG-10. Particular attention shall be given to use of the appropriate
compression tool specified by the compression lug manufacturer, if one is specified.
CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According
to the Instructions.
Caution: You should be aware of the following cautions and warnings before installing FortiGate-5000 series
hardware

Contents
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 3
http://docs.fortinet.com/ • Feedback
Contents
Warnings and cautions................................................................................................... 2
FortiCarrier-5001A security system ....................................................... 5
Front panel LEDs and connectors................................................................................. 6
LEDs........................................................................................................................... 6
Connectors ................................................................................................................. 7
Base backplane communication ................................................................................... 7
Fabric backplane communication ................................................................................. 8
FortiGate-RTM-XB2.................................................................................................... 8
AMC modules .................................................................................................................. 9
Hardware installation............................................................................. 11
Changing FortiCarrier-5001A SW11 switch settings ................................................. 12
FortiCarrier-5001A mounting components................................................................. 14
Inserting a FortiCarrier-5001A board .......................................................................... 15
Removing a FortiCarrier-5001A board ........................................................................ 18
Resetting a FortiCarrier-5001A board ......................................................................... 20
Installing and removing AMC modules....................................................................... 21
Inserting AMC slot filler panels................................................................................. 22
Inserting AMC modules ............................................................................................ 23
Removing AMC modules.......................................................................................... 24
Troubleshooting............................................................................................................ 24
FortiCarrier-5001A does not start up........................................................................ 24
FortiCarrier-5001A status LED is flashing during system operation......................... 25
FortiGate AMC modules not detected by FortiCarrier-5001A board......................... 25
Quick Configuration Guide ................................................................... 27
Registering your Fortinet product............................................................................... 27
Planning the configuration........................................................................................... 27
NAT/Route mode...................................................................................................... 28
Transparent mode .................................................................................................... 28
Choosing the configuration tool.................................................................................. 29
Web-based manager................................................................................................ 29
Command Line Interface (CLI) ................................................................................. 30
Factory default settings................................................................................................ 30
Configuring NAT/Route mode...................................................................................... 30
Using the web-based manager to configure NAT/Route mode................................ 31
Using the CLI to configure NAT/Route mode ........................................................... 32

Contents
FortiCarrier-5001A Security System Guide
401-400-91945 -20090223
http://docs.fortinet.com/ • Feedback
Configuring Transparent mode ................................................................................... 33
Using the web-based manager to configure Transparent mode............................... 33
Using the CLI to configure Transparent mode.......................................................... 34
Upgrading FortiCarrier-5001A firmware...................................................................... 35
FortiCarrier-5001A base backplane data communication......................................... 36
FortiCarrier-5001A fabric backplane data communication ....................................... 38
Powering off the FortiCarrier-5001A board ................................................................ 39
For more information............................................................................. 41
Fortinet documentation................................................................................................ 41
Fortinet Tools and Documentation CD ..................................................................... 41
Fortinet Knowledge Center ...................................................................................... 41
Comments on Fortinet technical documentation ..................................................... 41
Customer service and technical support.................................................................... 41
Register your Fortinet product .................................................................................... 41

FortiCarrier-5001A security system
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 5
FortiCarrier-5001A security system
The FortiCarrier-5001A security system is a high-performance Advanced
Telecommunications Computing Architecture (ACTA) compliant FortiOS Carrier
security system that can be installed in any ACTA chassis including the
FortiGate-5140, FortiGate-5050, or FortiGate-5020 chassis.
The FortiCarrier-5001A-DW (double-width) board includes a double-width
Advanced Mezzanine Card (AMC) opening. You can install a supported FortiGate
AMC Double width Module (ADM) such as the FortiGate-ADM-XB2 or the
FortiGate-ADM-FB8 in the AMC opening. The FortiGate-ADM-XB2 adds two
accelerated 10-gigabit interfaces to the FortiCarrier-5001A board and the
FortiGate-ADM-FB8 adds 8 accelerated 1-gigabit interfaces.
The FortiCarrier-5001A security system contains two front panel 1-gigabit
ethernet interfaces, two base backplane 1-gigabit interfaces, and two fabric
backplane 1-gigabit interfaces. Use the front panel interfaces for connections to
your networks and the backplane interfaces for communication across the ACTA
chassis backplane.
If you install a FortiGate-RTM-XB2 module for each FortiCarrier-5001A board, the
FortiCarrier-5001A fabric interfaces can operate at 10 Gbps. The
FortiGate-RTM-XB2 also provides NP2-accelerated network processing for
eligible traffic passing through the FortiGate-RTM-XB2 interfaces.
You can also configure two or more FortiCarrier-5001A boards to create a high
availability (HA) cluster using the base or fabric backplane interfaces for HA
heartbeat communication through the chassis backplane, leaving front panel
interfaces available for network connections.
The FortiCarrier-5001A board also supports all FortiOS Carrier features including
GTP and MMS content filtering, SIP load balancing, 802.1Q VLANs, multiple
virtual domains, and 802.3ad aggregate interfaces.
Figure 1: FortiCarrier-5001A-DW front panel
The FortiCarrier-5001A board includes the following features:
• Two front panel 10/100/1000Base-T copper 1-gigabit ethernet interfaces.
• Two base backplane 1-gigabit interfaces (base CH0 and Base CH1 on the
front panel and base1 and base2 in the firmware) for HA heartbeat and data
communications across the FortiGate-5000 chassis backplane.
Note: In most cases the base backplane interfaces are used for HA heartbeat
communication and the fabric backplane interfaces are used for data communication.
port1 and port2
10/100/1000
Copper Interfaces
USB
Fabric and Base
network activity
LEDs
Double-width AMC
opening
RJ-45
Console
Extraction
Lever
Retention
Screw Extraction
Lever
Retention
Screw
IPM
LED
(board
position)
ACC
OOS
Power
Status
LEDs

FortiCarrier-5001A Security System Guide
601-400-91945 -20090223
Front panel LEDs and connectors FortiCarrier-5001A security system
• Two fabric backplane interfaces (Fabric CH0 and Fabric CH1 on the front
panel and fabric1 and fabric2 in the firmware) for HA heartbeat and data
communications across the FortiGate-5000 chassis backplane. The fabric
backplane interfaces operate at 1 Gbps. If you install a FortiGate-RTM-XB2
module the fabric backplane interfaces operate at 10 Gbps.
• One double-width AMC opening (FortiCarrier-5001A-DW board).
• One single-width AMC opening (FortiCarrier-5001A-SW board).
• RJ-45 RS-232 serial console connection.
• 2 USB connectors.
• Mounting hardware.
• LED status indicators.
Front panel LEDs and connectors
From the FortiCarrier-5001A font panel you can view the status of the front panel
LEDs to verify that the board is functioning normally. You also connect the
FortiCarrier-5001A board to your network through the front panel 10/100/1000
ethernet connectors. The front panel also includes the RJ-45 console port for
connecting to the FortiOS CLI and two USB ports. The USB ports can be used
with any USB key for backing up and restoring configuration files. For information
about using the using a USB key with a FortiGate or FortiOS Carrier unit, see the
FortiGate-5000 Series Firmware and FortiUSB Guide.
LEDs
Table 1 lists and describes the FortiCarrier-5001A LEDs.
Table 1: FortiCarrier-5001A LEDs
LED State Description
1, 2
(Left LED) Green The correct cable is connected to the interface and the
connected equipment has power.
Flashing
Green Network activity at the interface.
Off No link is established.
1, 2
(Right LED) Green Connection at 1 Gbps.
Amber Connection at 100 Mbps.
Off Connection at 10 Mbps.
Base CH0 Green Base backplane interface 0 (base1) is connected at 1 Gbps.
Flashing
Green Network activity at base backplane interface 0.
Base CH1 Green Base backplane interface 1 (base2) is connected at 1 Gbps.
Flashing
Green Network activity at base backplane interface 1.
Fabric CH0 Off Fabric backplane interface 0 (fabric1) is connected at 10
Gbps.
Flashing
Green Network activity at fabric backplane interface 0.

FortiCarrier-5001A security system Base backplane communication
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 7
Connectors
Table 2 lists and describes the FortiCarrier-5001A connectors.
Base backplane communication
The FortiCarrier-5001A base backplane 1-gigabit interfaces can be used for HA
heartbeat communication between FortiCarrier-5001A boards installed in the
same or in different FortiGate-5000 chassis. You can also configure
FortiCarrier-5001A boards to use the base backplane interfaces for data
communication among FortiGate and FortiCarrier boards. To support base
Fabric CH1 Off Fabric backplane interface 1 (fabric2) is connected at 10
Gbps.
Flashing
Green Network activity at fabric backplane interface 1.
ACC Off or
Flashing
green
The ACC LED flashes green when the FortiCarrier-5001A
board accesses the FortiOS flash disk. The FortiOS flash
disk stores the current FortiOS firmware build and
configuration files. The system accesses the flash disk when
starting up, during a firmware upgrade, or when an
administrator is using the CLI or GUI to change the FortiOS
configuration. Under normal operating conditions this LED
flashes occasionally, but is mostly off.
OOS
(Out of
Service)
Off Normal operation.
Green A fault condition exists and the FortiCarrier-5001A blade is
out of service (OOS). This LED may also flash very briefly
during normal startup.
Power Green The FortiCarrier-5001A board is powered on.
Status Off The FortiCarrier-5001A board is powered on.
Flashing
Green The FortiCarrier-5001A is starting up. If this LED is flashing at any time other than system startup, a fault condition may
exist.
IPM Blue The FortiCarrier-5001A is ready to be hot-swapped (removed
from the chassis). If the IPM light is blue and no other LEDs
are lit the FortiCarrier-5001A board has lost power.
Flashing
Blue The FortiCarrier-5001A is changing from hot swap to running mode or from running mode to hot swap. This happens when
the FortiCarrier-5001A board is starting up or shutting down.
Off Normal operation. The FortiCarrier-5001A board is in contact
with the chassis backplane.
Table 1: FortiCarrier-5001A LEDs (Continued)
LED State Description
Table 2: FortiCarrier-5001A connectors
Connector Type Speed Protocol Description
1, 2 RJ-45 10/100/1000
Base-T Ethernet Copper 1-gigabit connection to 10/100/1000Base-T copper networks.
CONSOLE RJ-45 9600 bps
8/N/1 RS-232 serial Serial connection to the command line interface.
USB USB FortiUSB key firmware updates and
configuration backup.

FortiCarrier-5001A Security System Guide
801-400-91945 -20090223
Fabric backplane communication FortiCarrier-5001A security system
backplane communications your FortiGate-5140 or FortiGate-5050 chassis must
include one or more FortiSwitch-5003 boards, FortiSwitch-5003A boards, or other
1-gigabit base backplane switching boards installed in the chassis in base slots 1
and 2. The FortiGate-5020 chassis supports base backplane communication with
no additions or changes to the chassis.
For information about base backplane communication in FortiGate-5140 and
FortiGate-5050 chassis, see the FortiGate-5000 Backplane Communication
Guide. For information about the FortiSwitch-5003 board, see the
FortiSwitch-5003 System Guide. For information about the FortiSwitch-5003A
board, see the FortiSwitch-5003A System Guide.
Fabric backplane communication
The FortiCarrier-5001A fabric backplane interfaces can be used for data
communication or HA heartbeat communication between FortiCarrier-5001A
boards installed in the same or in different FortiGate-5000 chassis. To support
1-gigabit fabric backplane communications your FortiGate-5140 or
FortiGate-5050 chassis must include one or more FortiSwitch-5003A boards or
other 1-gigabit fabric backplane switching boards installed in the chassis in fabric
slots 1 and 2. The FortiGate-5020 chassis does not support fabric backplane
communications.
For information about fabric backplane communication in FortiGate-5140 and
FortiGate-5050 chassis, see the FortiGate-5000 Backplane Communication
Guide. For information about the FortiSwitch-5003A board, see the
FortiSwitch-5003A System Guide.
FortiGate-RTM-XB2
The FortiGate-RTM-XB2 module provides two 10-gigabit fabric backplane
interfaces and NP2 processor acceleration for FortiCarrier-5001A fabric
interfaces. For 10-gigabit fabric backplane communications, each
FortiCarrier-5001A board requires one FortiGate-RTM-XB2 module. The
FortiGate-RTM-XB2 module is an ATCA rear transition module (RTM) that installs
into an RTM slot at the back of a FortiGate-5140 and FortiGate-5050 chassis.
To support 10-gigabit fabric backplane communications your FortiGate-5140 or
FortiGate-5050 chassis must also include one or more FortiSwitch-5003A boards
or other 10-gigabit fabric backplane switching boards installed in the chassis in
fabric slots 1 and 2.
Note: On some versions of the FortiCarrier-5001A firmware, when a FortiGate-5001A
board starts up with a FortiGate-RTM-XB2 module installed, the fabric1 and fabric2
interfaces are replaced with interfaces that are named RTM/1 and RTM/2 to indicate the
presence of the FortiGate-RTM-XB2 module. Configuration settings that include the fabric1
and fabric2 interface names will have to be changed to use the RTM/1 and RTM/2 interface
names.

FortiCarrier-5001A security system AMC modules
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 9
Figure 2: FortiGate-RTM-XB2 front panel
The FortiGate-RTM-XB2 NP2 processors provide hardware accelerated network
processing for eligible traffic passing through the FortiGate-RTM-XB2 interfaces.
For information about Fortinet NP2 processor acceleration, see the Fortinet
Hardware Acceleration Technical Note.
Follow the instructions in the FortiGate-RTM-XB2 System Guide to install the
FortiGate-RTM-XB2 module.
AMC modules
You can install one FortiGate AMC Double width Module (ADM) in the
FortiCarrier-5001A-DW front panel AMC double-width opening. For example:
• The FortiGate-ADM-XB2, provides 2 NP2 accelerated XFP 10-gigabit
interfaces.
• The FortiGate-ADM-FB8, provides 8 NP2 accelerated SFP 1-gigabit
interfaces.
Figure 3: FortiGate-ADM-XB2
Handle
Retention
Screw
Power
LED
Handle
Retention
Screw
ADM-XB2
LINK
ACT
1 2
HS
OOS
PWR
OT
LINK
ACT
Note: You can operate a FortiCarrier-5001A board with both a FortiGate-RTM-XB2 module
and a supported FortiGate AMC module installed at the same time.

FortiCarrier-5001A Security System Guide
10 01-400-91945 -20090223
AMC modules FortiCarrier-5001A security system

Hardware installation
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 11
Hardware installation
Before use, the FortiCarrier-5001A board must be correctly inserted into an
Advanced Telecommunications Computing Architecture (ACTA) chassis such as
the FortiGate-5140, FortiGate-5050, or FortiGate-5020 chassis.
Before inserting the board into a chassis you should make sure the SW-11 switch
is set correctly.
In the available Advanced Mezzanine Card (AMC) double-width module (ADM)
opening on the FortiCarrier-5001A-DW front panel you can install a supported
FortiGate ADM module such as the FortiGate-ADM-XB2 or the
FortiGate-ADM-FB8.
This section describes:
•Changing FortiCarrier-5001A SW11 switch settings
•FortiCarrier-5001A mounting components
•Inserting a FortiCarrier-5001A board
•Removing a FortiCarrier-5001A board
•Resetting a FortiCarrier-5001A board
•Installing and removing AMC modules
•Troubleshooting
!
Caution: If you are installing a FortiGate-RTM-XB2 module you should install the
FortiGate-RTM-XB2 module in the chassis RTM slot first, before you install the
FortiCarrier-5001A board to avoid possible damage. Follow the instructions in the
FortiGate-RTM-XB2 System Guide to install the FortiGate-RTM-XB2 module.
!
Caution: Because FortiCarrier-5001A boards do not support hot swapping AMC modules,
the FortiCarrier-5001A board must be disconnected from power before you install a
FortiGate AMC module. Also, the FortiCarrier-5001A-DW left (top) handle must be opened
to install a FortiGate AMC module. See “Installing and removing AMC modules” on
page 21.
!
Caution: Do not operate the FortiCarrier-5001A board with an open AMC opening. For
optimum cooling performance and safety, the AMC opening must contain an AMC slot filler
panel or a FortiGate AMC module.
Note: FortiCarrier-5001A boards are hot swappable even if the FortiCarrier-5001A board
contains an AMC module and you have installed a FortiGate-RTM-XB2 module for the
FortiCarrier-5001A board.

FortiCarrier-5001A Security System Guide
12 01-400-91945 -20090223
Changing FortiCarrier-5001A SW11 switch settings Hardware installation
Changing FortiCarrier-5001A SW11 switch settings
The SW11 switch on the FortiCarrier-5001A board is factory set by Fortinet to
detect a shelf manager (Figure 4). This is the correct setting if you are installing
the FortiCarrier-5001A board in a chassis that contains an operating shelf
manager (such as the FortiGate-5140 or FortiGate-5050 chassis).
Figure 4: FortiGate-5140 and 5050 setting for SW11 (factory default shelf manager
mode)
By default a FortiCarrier-5001A board will not start up if the board is installed in a
chassis, such as a FortiGate-5020, that does not contain a shelf manager or that
contains a shelf manager that is not operating. Before installing a
FortiCarrier-5001A board in a FortiGate-5020 chassis or a chassis that does not
contain an operating shelf manager you must change the SW11 switch setting as
shown in Figure 5.
Figure 5: FortiGate-5020 setting for SW11 (standalone mode)
In all cases you should confirm that you have the correct SW11 setting before
installing the board in a chassis.
Factory Default (Shelf Manager Required)
ON
SW11
3421
1 Off
2 On
3 Off
4 Off
ON
SW11
3421
1 Off
2 On
3 On
4 Off
Standalone Mode for FortiGate-5020
(no Shelf Manager)

Hardware installation Changing FortiCarrier-5001A SW11 switch settings
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 13
To change or verify the SW11 switch setting
To complete this procedure, you need:
• A FortiCarrier-5001A board
• A tool for changing the SW11 switch setting (optional)
• An electrostatic discharge (ESD) preventive wrist strap with connection cord
1Attach the ESD wrist strap to your wrist and to an available ESD socket or wrist
strap terminal.
2If you have installed the FortiCarrier-5001A board in a chassis, remove it.
For removal instructions, see “Removing a FortiCarrier-5001A board” on page 18.
3Use Figure 6 to locate SW11 on the FortiCarrier-5001A board.
The top of the FortiCarrier-5001A board is covered with a copper heat sink. The
printed circuit board is under the copper heat sink. SW11 is located on the printed
circuit board and is accessible from the left side of the FortiCarrier-5001A board
under the copper heat sink (see Figure 6).
Table 3: FortiCarrier-5001A SW11 settings for different chassis
Chassis CorrectSW11
Setting Result of wrong jumper setting
FortiGate-5140 or 5050 or
any ACTA chassis with an
operating shelf manager
(factory default shelf manager
mode).
1OffShelf manager cannot find
FortiCarrier-5001A board. No shelf
manager information about the
FortiCarrier-5001A board available.
2On
3Off
4Off
FortiGate-5020 or any ACTA
chassis without an operating
shelf manager (standalone
mode).
1OffFortiCarrier-5001A board will not start
up.
2On
3On
4Off
Note: If the shelf manager in a FortiGate-5140 or FortiGate-5050 chassis is missing or not
functioning, FortiCarrier-5001A boards with factory default SW11 settings will not start up.
!
Caution: FortiCarrier-5001A boards must be protected from static discharge and physical
shock. Only handle or work with FortiCarrier-5001A boards at a static-free workstation.
Always wear a grounded electrostatic discharge (ESD) preventive wrist strap when
handling FortiCarrier-5001A boards.

FortiCarrier-5001A Security System Guide
14 01-400-91945 -20090223
FortiCarrier-5001A mounting components Hardware installation
Figure 6: Location of SW11 on the FortiCarrier-5001A board
4If required, change SW11 to the correct setting.
5Insert the FortiCarrier-5001A board into a chassis and verify that the board starts
up and operates correctly.
For inserting instructions, see “Inserting a FortiCarrier-5001A board” on page 15.
FortiCarrier-5001A mounting components
To install a FortiCarrier-5001A board you slide the board into an open slot in the
front of an ATCA chassis and then use the mounting components to lock the
board into place in the slot. When locked into place and positioned correctly the
board front panel is flush with the chassis front panel. The board is also connected
to the chassis backplane.
To position the board correctly you must use the mounting components shown in
Figure 7 for the right (bottom) side of the front panel and in Figure 8 for the left
(top) side of the front panel. The FortiCarrier-5001A mounting components align
the board in the chassis slot and are used to insert and eject the board from the
slot.
FortiCarrier-5001A
Front Faceplate
Location of SW 11
Factory Default (Shelf Manager Required)
ON
SW11
3421
1 Off
2 On
3 Off
4 Off
ON
SW11
3421
1 Off
2 On
3 On
4 Off
Standalone Mode for FortiGate-5020
(no Shelf Manager)
FortiCarrier-5001A
board (top view)
Note: FortiCarrier-5001A boards are horizontal when inserted into a FortiGate-5050
chassis and vertical when inserted into a FortiGate-5140 chassis. The inserting and
removing procedures are the same in either case. For clarity the descriptions in this
document refer to the left (top) and right (bottom) mounting components.

Hardware installation Inserting a FortiCarrier-5001A board
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 15
Figure 7: FortiCarrier-5001A right (bottom) mounting components
Figure 8: FortiCarrier-5001A left (top) mounting components
Inserting a FortiCarrier-5001A board
The FortiCarrier-5001A board must be fully installed in a chassis slot, with the
handles closed and locked and retention screws fully tightened for the
FortiCarrier-5001A board to receive power and operate normally. If the
FortiCarrier-5001A board is not receiving power, the IPM LED glows solid blue
and all other LEDs remain off. See “Front panel LEDs and connectors” on page 6.
Closed
Open
Alignment
Pin
Retention
Screw
Lock Handle
Alignment Pin
Retention
Screw
Lock
Handle
Handle
Hook
(right handle
only)
Alignment Pin
Retention
Screw
Lock
Hook
(right handle
only)
Alignment
Pin
Retention
Screw
Lock Handle
Note: The FortiCarrier-5001A-DW right (bottom) handle includes a hook that secures the
handle into place when the board is mounted in the chassis (Figure 7). The hook is not
included on the FortiCarrier-5001A-DW left (top) handle (Figure 8). Otherwise the left (top)
and right (bottom) mounting components are the same. Operating the left (top) and right
(bottom) handles is also basically the same except that without the hook you do not have to
squeeze the FortiCarrier-5001A-DW left (top) handle lock. Also the FortiCarrier-5001A-DW
left (top) handle does not lock into place in the same way as the right (bottom) handle. The
hook is not present on FortiCarrier-5001A-DW left (top) handle because of the double-width
AMC opening.
Alignment
Pin
Retention
Screw Lock AMC Slot
Filler
Handle

FortiCarrier-5001A Security System Guide
16 01-400-91945 -20090223
Inserting a FortiCarrier-5001A board Hardware installation
It is important to carefully seat the FortiCarrier-5001A board all the way into the
chassis, to not use too much force on the handles, and to make sure that the
handles are properly locked. Only then will the FortiCarrier-5001A board power-on
and start up correctly.
FortiCarrier-5001A boards are hot swappable. The procedure for inserting
a FortiCarrier-5001A board into a chassis slot is the same whether or not the
chassis is powered on.
To insert a FortiCarrier-5001A board into a chassis slot
To complete this procedure, you need:
• A FortiCarrier-5001A board with either the correct AMC slot filler panel or a
FortiGate AMC module installed in the front panel AMC opening
• An ATCA chassis with an empty slot
• An electrostatic discharge (ESD) preventive wrist strap with connection cord
1Attach the ESD wrist strap to your wrist and to an available ESD socket or wrist
strap terminal.
2If required, remove the protective metal frame that the FortiCarrier-5001A board
has been shipped in.
3Insert the FortiCarrier-5001A board into the empty slot in the chassis.
4Unlock the handles by squeezing the handle locks.
5Open the handles to their fully open positions.
!
Caution: Do not carry the FortiCarrier-5001A board by holding the handles or retention
screws. When inserting or removing the FortiCarrier-5001A board from a chassis slot,
handle the board by the front panel. The handles are not designed for carrying the board. If
the handles become bent or damaged the FortiCarrier-5001A board may not align correctly
in the chassis slot.
!
Caution: If you are installing a FortiGate-RTM-XB2 module you must install the
FortiGate-RTM-XB2 module first, before you install the FortiCarrier-5001A board to avoid
possible damage. Follow the instructions in the FortiGate-RTM-XB2 System Guide to
install the FortiGate-RTM-XB2 module.
!
Caution: FortiCarrier-5001A boards must be protected from static discharge and physical
shock. Only handle or work with FortiCarrier-5001A boards at a static-free workstation.
Always wear a grounded electrostatic discharge (ESD) preventive wrist strap when
handling FortiCarrier-5001A boards.
Unlock Handle

Hardware installation Inserting a FortiCarrier-5001A board
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 17
6Insert the FortiCarrier-5001A board into the empty slot in the chassis.
7Carefully guide the board into the chassis using the rails in the slot.
Insert the board by applying moderate force to the front faceplate (not the
handles) to slide the board into the slot. The board should glide smoothly into the
chassis slot. If you encounter any resistance while sliding the board in, the board
could be aligned incorrectly. Pull the board back out and try inserting it again.
8Slide the board in until the alignment pins are inserted half way into their sockets
in the chassis.
9Turn both handles to their fully-closed positions.
The handles should hook into the sides of the chassis slot. Closing the handles
draws the FortiCarrier-5001A board into place in the chassis slot and into full
contact with the chassis backplane. The FortiCarrier-5001A front panel should be
in contact with the chassis front panel. The right (bottom) handle locks into place.
As the handles closed power is supplied to the board. If the chassis is powered on
the IPM LED starts flashing blue. If the board is aligned correctly, inserted all the
way into the slot, and the handles are properly closed the IPM LED flashes blue
for a few seconds. At the same time the STATUS LED flashes green, the interface
LEDs flash amber, and the ACC LED starts flashing green. After a few seconds
the IPM LED goes out and the FortiCarrier-5001A firmware starts up. During start
up the STATUS LED may continue to flash green. Once the board has started up
and is operating correctly, the front panel LEDs are lit as described in Table 4.
!
Caution: To avoid damaging the lock, make sure you squeeze the handles fully to unlock
them before opening. The handles should pop easily out of the board front panel.
Handle
Alignment Pin
Open
Alignment Pin
Lock
Handle
Table 4: FortiCarrier-5001A normal operating LEDs
LED State
ACC Off (Or flashing green when the system accesses the
FortiCarrier-5001A flash disk.)
OOS
(Out of
Service)
Off
Power Green
Status Off
IPM Off

FortiCarrier-5001A Security System Guide
18 01-400-91945 -20090223
Removing a FortiCarrier-5001A board Hardware installation
If you have installed an AMC module in the FortiCarrier-5001A board, the AMC
LEDs are lit as described in Table 5.
If the board has not been inserted properly the IPM LED changes to solid blue and
all other LEDS turn off. If this occurs, open the handles, slide the board part way
out, and repeat the insertion process.
10 Once the board is inserted correctly, fully tighten the retention screws to lock the
FortiCarrier-5001A board into position in the chassis slot.
Removing a FortiCarrier-5001A board
The following procedure describes how to correctly use the FortiCarrier-5001A
mounting components described in “FortiCarrier-5001A mounting components” on
page 14 to remove a FortiCarrier-5001A board from an ATCA chassis slot.
FortiCarrier-5001A boards are hot swappable. The procedure for removing
a FortiCarrier-5001A board from a chassis slot is the same whether or not the
chassis is powered on.
To remove a FortiCarrier-5001A board from a chassis slot
To complete this procedure, you need:
• An ATCA chassis with a FortiCarrier-5001A board installed
• An electrostatic discharge (ESD) preventive wrist strap with connection cord
Table 5: FortiGate AMC module normal operating LEDs
LED State
HS Off
OOS Off
PWR Amber
OT Off
Tighten
Retention
Screw
!
Caution: Do not carry the FortiCarrier-5001A board by holding the handles or retention
screws. When inserting or removing the FortiCarrier-5001A board from a chassis slot,
handle the board by the front panel. The handles are not designed for carrying the board. If
the handles become bent or damaged the FortiCarrier-5001A board may not align correctly
in the chassis slot.

Hardware installation Removing a FortiCarrier-5001A board
FortiCarrier-5001A Security System Guide
01-400-91945 -20090223 19
1Attach the ESD wrist strap to your wrist and to an available ESD socket or wrist
strap terminal.
2Disconnect all cables from the FortiCarrier-5001A board, including all network
cables, the console cable, and any USB cables or keys.
3Fully loosen the retention screws on the FortiCarrier-5001A front panel.
4Unlock the handles by squeezing the handle locks.
5Open the handles to their fully open positions.
You need to open the handles with moderate pressure to eject the board from the
chassis. Pivoting the handles turns off the microswitch, turns off all LEDs, and
ejects the board from the chassis slot.
6Pull the board about half way out.
!
Caution: FortiCarrier-5001A boards must be protected from static discharge and physical
shock. Only handle or work with FortiCarrier-5001A boards at a static-free workstation.
Always wear a grounded electrostatic discharge (ESD) preventive wrist strap when
handling FortiCarrier-5001A boards.
Loosen
Retention
Screw
!
Caution: To avoid damaging the lock, make sure you squeeze the handles fully to unlock
them before opening. The handles should pop easily out of the board front panel.
Handle
Alignment Pin
Open
Alignment Pin
Lock
Handle

FortiCarrier-5001A Security System Guide
20 01-400-91945 -20090223
Resetting a FortiCarrier-5001A board Hardware installation
7Turn both handles to their fully-closed positions.
8Carefully slide the board completely out of the slot.
9Re-attach the protective metal frame before shipping or storing the
FortiCarrier-5001A board.
Resetting a FortiCarrier-5001A board
By default you must eject the FortiCarrier-5001A board from the chassis slot to
cycle the power and reset the board. See “Removing a FortiCarrier-5001A board”
on page 18 for information about how to eject a FortiCarrier-5001A board from a
chassis.
The FortiCarrier-5001A includes a microswitch that can be used to power the
board off and on by opening and closing the right (bottom) handle. By opening and
closing the right handle you can reset the FortiCarrier-5001A board without
ejecting the board from the chassis. Before you can do this you must enable the
microswitch using the following FortiCarrier-5001A CLI command:
config system global
set microswitch {enable | disable}
end
Once you enter this command, you can use the following procedure to reset a
FortiCarrier-5001A board without ejecting it from the chassis.
To reset a FortiCarrier-5001A board without removing the board from the
chassis
You do not have to loosen the retention screws or adjust the position of the
FortiCarrier-5001A board to use this procedure.
To complete this procedure, you need:
• An ATCA chassis with a FortiCarrier-5001A board installed
• An electrostatic discharge (ESD) preventive wrist strap with connection cord
Fully Closed
and Locked
Alignment Pin
Handle
Close
Alignment Pin
Handle
!
Caution: The right (bottom) handle (and the microswitch) must be closed before you enter
this command.
!
Caution: FortiCarrier-5001A boards must be protected from static discharge and physical
shock. Only handle or work with FortiCarrier-5001A boards at a static-free workstation.
Always wear a grounded electrostatic discharge (ESD) preventive wrist strap when
handling FortiCarrier-5001A boards.