Fortinet FortiWLC 3000D User manual

QuickStart Guide
FortiWLC 3000D

October 26, 2018
3rd Edition
Copyright© 2018 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare®
and FortiGuard®, and certain other marks are registered trademarks of Fortinet,
Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also
be registered and/or common law trademarks of Fortinet. All other product or
company names may be trademarks of their respective owners. Performance and
other metrics contained herein were attained in internal lab tests under ideal
conditions, and actual performance and other results may vary. Network variables,
dierent network environments and other conditions may aect performance
results. Nothing herein represents any binding commitment by Fortinet, and
Fortinet disclaims all warranties, whether express or implied, except to the extent
Fortinet enters a binding written contract, signed by Fortinet’s General Counsel,
with a purchaser that expressly warrants that the identied product will perform
according to certain expressly-identied performance metrics and, in such event,
only the specic performance metrics expressly identied in such binding written
contract shall be binding on Fortinet. For absolute clarity, any such warranty will
be limited to performance in the same ideal conditions as in Fortinet’s internal
lab tests. In no event does Fortinet make any commitment related to future
deliverables, features or development, and circumstances may change such that
any forward-looking statements herein are not accurate. Fortinet disclaims in full
any covenants, representations, and guarantees pursuant hereto, whether express
or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the
publication shall be applicable.

QuickStart Guide
Register for Support
Register your Fortinet product to receive:
• Technical Support
• New product features
• Protection from new threats
Vous devez enregistrer le produit pour recevoir:
• Support technique
• Nouvelles fonctionnalitées du produit
• Protection contre de nouvelles menaces
La reistrazione ti permette di usufruire di:
• Supporto Tecnico
• Nuove funzionalita
• Proteezione dalle ultime minaccce
Debe registrar el producto para recibir:
• Apoyo técnico
• Nuevas funcionalidades del producto
• Protección contra ataques
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート • 新機能の追加 • 新しい脅威への防御
请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特点信息、最新威胁防护
https://support.fortinet.com
Toll free: 1 866 648 4638
Phone: [phone]
Fax: [phone]
Email: [e-mail]

Box Includes
2
FortiWLC 3000D
Ethernet Cable
Console Cable
2 Power Cables
QuickStart Guide
QuickStart Guide
FortiWLC 3000D
4 Rubber Feet
Rail Mount Kit
4 Bracket Screws 2 HDD tray keys26 Rail Mount
Screws

33
1Basic Connections
Connect your device to a power outlet and to switch with an SFP+ Port (ports 1-8).
SFP+ Port
Power Connection
Switch
Typical Deployment Setup

4
Terminal Emulation with Console
Cable
To Connect to the CLI
1. Connect the FortiWLC unit console port to the management computer using the
provided console cable.
2. Start a terminal emulation program on the management computer. Select the COM
port and use the following settings:
Baud Rate: 115200
Data bits: 8
Parity: None
Stop bits: 1
Flow Control: None
3. Press Enter on your keyboard to connect to the CLI.
4. Login using username“admin” and password “admin”. You can now proceed with
conguring your FortiWLC unit.
Get started by typing “?” for a list of available commands.
Begin typing a command and type “?” for a list of available ways to complete.
For example “cong ?” shows the lowest level of conguration options.
For a detailed guide, visit http://docs.fortinet.com/wireless-infrastructure/reference.
B
Console Port
Serial Port

5
Hardware
The FortiWLC unit can be mounted in any standard 19 inch rack unit with the provided
rail mount kit.
Please read the“Cautions and Warnings” on page 20 prior to installing your device.
To install the FortiWLC unit into a rack:
1. Ensure that the FortiWLC unit is placed on a stable surface prior to rack-mount
installation.
2. Assemble the rails and install the system in the rack following the safety instructions
and the rack installation instructions in Rail Installation (p. 8).
3. Verify that the spacing around the FortiWLC unit conforms to requirements and that
the unit is level.
4. Connect the provided power cables to the system.
5. Plug the other end of the power cables into separate power sources, such as
uninterruptible power supplies (UPS) or power distribution units (PDU).
6. Insert one end of the provided Ethernet cable into one of the Ethernet ports on the
FortiWLC unit. Insert the other end to a router or switch that is connected to the
Internet.
7. Press the power button on the system to turn on the device.
Do not place heavy objects on the unit.
General Installation
3
Installation

66
Software
IMPORTANT: FortiWLC-3000D is supported from FortiWLC-SD 8.3 and above. This
controller requires fresh installation and cannot be upgraded from older FortiWLC-SD
releases.
To install release 8.3 in the new controllers, use the following instructions:
Upgrading via CLI
Use the show images command to view the available images in the controller. By
default, the new controller boots from the primary partition with the running image.
NOTE: The new controllers have two logical partitions, and the default image is
available in both the partitions.
default(15)# sh images
Running image: Primary <-- denotes the current partition
---------------------------------------------------------------
Running image details.
System version: 0.0.7
System hash: e9efe2c7ab0d10da660cad019d333f8d7772d6f1
System branch: master
System built: 20161115072723
System memory: 114M/463M <-- Shows the available/total memory
Apps version: 8.3-48
Apps size: 303M/850M
----------------------------------------------------------------
Other image details.
System version: 0.0.7
System hash: e9efe2c7ab0d10da660cad019d333f8d7772d6f1
System branch: master
System built: 20161115072723
System memory: 150M/473M
Apps version: False
Apps size: 662M/849M
General Installation
3

7
Installation
To install the latest release, download the release image using the upgrade-image
command (mandatory keywords are marked in red color):
upgrade-image scp://<username>@<remote-server-ip>:<path-to-
image>/<image-name>-rpm.tar both reboot
image-name for FortiWLC: forti-{release-version}-{hardware-model}-rpm.tar.
Eg,: forti-8.3-0-FWC3KD-rpm.tar
The above command will upgrade the secondary partition and the controller will reboot
to secondary partition.
default(15)# sh images
Running image: Secondary <-- Current partition after the upgrade.
-------------------------------------------------------------------
Running image details.
System version: 0.0.7
System hash: e9efe2c7ab0d10da660cad019d333f8d7772d6f1
System branch: master
System built: 20161115072723
System memory: 150M/473M
Apps version: 8.3-0build-47
Apps size: 230M/849M
--------------------------------------------------------------------
Other image details.
System version: 0.0.7
System hash: e9efe2c7ab0d10da660cad019d333f8d7772d6f1
System branch: master
System built: 20161115072723
System memory: 116M/463M
Apps version: 8.3-0build-46
Apps size: 298M/850M
NOTE: After an upgrade the current partition becomes the second partition. For
example, if you started upgrade in primary partition, post upgrade the default
partition becomes secondary partition and vice- versa.

88
Upgrading via WebUI
In the FortiWLC-SD WebUI, navigate to Maintenance > File Management > SD Version.
Click the Import button to choose the image le.
After the import is complete, the following message is displayed.
Now, from the CLI run the upgrade commands to complete the upgrade process.
Switching Partitions
To switch partitions, select the partition during the bootup process.

9
Installation

1010
To install the FortiWLC unit using the rail mount kit:
1. To remove the chassis (inner) member, pull the slide open, and then press the trigger
down as shown on the drawing, and pull the chassis (inner) member out.
2. Use the standos to mount the chassis (inner) member to the chassis.
3. To attach the cabinet (outer) member to the rail, rst ensure that the safety lock is in
the unlocked position. Then, insert the stag into the upper and lower square holes on
the EIA rail from the back of the rail.
Finally, push the safety lock forward to secure the bracket.
Rail Installation
4
Pull chassis (inner)
member out
Press the trigger
down to release

11
4. To mount the chassis into the cabinet, rst ensure that the ball retainer is in the fully
open position. Then, insert the chassis (inner) member into the cabinet member.
When you push the chassis back into the cabinet, press the trigger down to release
the slide from the locked position.
Release safety lock
before mounting
Push the safety lock forward to secure
Retainer is in fully open position
Press trigger down to unlock slides

1212
To install the SFP transceivers
1. Ensure that you are properly grounded.
2. Remove the caps from the SFP cage sockets on the
front panel of the unit.
3. Position the SFP transceiver in front of the cage socket
opening and ensure that the transceiver is correctly
oriented. When the transceiver is correctly oriented, the
extraction lever will be level with the socket latch.
Note: SFP cage socket orientation may vary. Ensure that
the SFP transceiver module is correctly oriented each
time that you are inserting a transceiver.
4. Hold the sides of the SFP transceiver and slide it into the
cage socket until it clicks into place.
Caution: SFP
transceivers are
static sensitive
devices. Use
an ESD wrist
strap or similar
grounding device
when handling
transceivers.
Do not install
or remove SFP
transceivers while
ber-optic cables
are still attached.
This can cause
damage to the
cables, cable
connectors,
and the optical
interfaces. It may
also prevent the
transceiver from
latching correctly
into the socket
connector.
Note: Installing
and removing
SFP transceivers
can shorten their
useful life. Do not
install or remove
transceivers more
than is necessary.
SFP Transceivers
SFP Cage Sockets
Socket Latch
Transmit Optical Bore
Extraction Lever
Receive Optical Bore

13
5. Press the transceiver rmly into the cage socket with
your thumb.
6. Verify that the transceiver is latched correctly by grasping
the sides of the transceiver and trying to pull it out
without lowering the extraction lever.
If the transceiver cannot be removed, it is installed and
latched correctly.
If the transceiver can be removed, reinsert it and press
harder with your thumb.
If necessary, repeat this process until the transceiver is
securely latched into the cage socket.
To remove the SFP transceivers
1. Ensure that you are properly grounded.
2. If applicable, disconnect the ber-optic cable from the
transceiver connector and install a clean dust plug in the
transceiver’s optical bores.
3. Pull the extraction lever out and down to eject the
transceiver. If you are unable to use your nger to open
the lever, use a small at-head screwdriver or other
similar tool to open the lever.
4. Hold the sides of the transceiver and carefully pull it away
from the cage socket.
5. Replace the cap on the SFP cage socket and place the
removed SFP transceiver into an antistatic bag.
Caution: Do not
force the SFP
transceivers into
the cage slots.
If the transceiver
does not easily
slide in and click
into place, it may
not be aligned
correctly or may
be upside down.
If this happens,
remove the SFP
transceiver, realign
it or rotate it and
slide it in again.
Note: Follow
proper ber-
optic handling
procedures when
installing and
removing
SFP transceivers
to ensure the
devices remain
clean and are not
damaged.

1414
Supported SFP Transceivers
These are the supported transceivers for FWLC-1000D.
Supplier Type Part Numbers
Intel DUAL RATE 1G/10G SFP+ SR
(bailed)
FTLX8571D3BCV-IT
Finisar SFP+ SR bailed, 10g single rate FTLX8571D3BCL
Avago 10GBASE-SR/SW, SFP+ AFBR-709ASMZ
Finisar DUAL RATE 1G/10G SFP+ FTLX8571D3BCV
Finisar SFP+ SR, 10g single rate FTLX 8574D3BCL
JDSU 10GB Fiber PLRXPL-SC-S43-22-N
AXCEN 10GB Fiber AXXE-5886-05B1
Finisar 1GB Copper FCLF-8521-3
Finisar 1GB Copper FCLF-8521P2BTL

15
Supplier Type Part Numbers
Avago Dual Rate 10GBASE-SR/1000BASE-
SX
AFBR-709DMZ
Finisar DUAL RATE 1G/10G SFP+ FTLX8574D3BCVxxx

1616
USB Ports (USB A)
Reserved for future use
Console
Optional connection
to the management
computer. Provides
access to the CLI
IPMI, MGMT1, and MGMT2
Not used
Power Switch

17
Device Guide
SFP+ Ports 1 - 8 (SFP+)
1G/10G Ethernet ports for
connection to your network and the
Internet

1818