Fortinet FIM-7901E User Manual
FIM-7901E Interface Module Guide
7000
FORTINET DOCUMENTLIBRARY
http://docs.fortinet.com
FORTINETVIDEOGUIDE
http://video.fortinet.com
FORTINETBLOG
https://blog.fortinet.com
CUSTOMERSERVICE&SUPPORT
https://support.fortinet.com
http://cookbook.fortinet.com/how-to-work-with-fortinet-support/
FORTIGATECOOKBOOK
http://cookbook.fortinet.com
FORTINETTRAININGSERVICES
http://www.fortinet.com/training
FORTIGUARDCENTER
http://www.fortiguard.com
FORTICAST
http://forticast.fortinet.com
ENDUSER LICENSE AGREEMENT
http://www.fortinet.com/doc/legal/EULA.pdf
FEEDBACK
Email: techdocs@fortinet.com
Friday, June 23, 2017
FIM-7901E Interface Module Guide
01-540-374567-20170623
TABLEOFCONTENTS
FIM-7901E interface module 4
Physical Description 5
Front panel LEDs 5
Front panel connectors 6
Supported transceivers 7
Turning the module on and off 7
NMI switch 7
FIM-7901E hardware architecture 8
Hardware installation 9
Installing SFP+ and SFP transceivers 9
To install transceivers 9
FIM-7901E mounting components 10
Inserting a FIM-7901E module into a chassis 11
Shutting down and removing a FIM-7901E board from a chassis 16
Troubleshooting 19
FIM-7901E does not startup 19
FIM-7901E status LED is flashing during system operation 19
Quick FIM-7901E configuration 20
Registering your FortiGate-7000 series products 20
Choosing the configuration tool 20
Changing network settings 20
Cautions and Warnings 22
Environmental Specifications 22
Safety 23
Regulatory Notices 25
Federal Communication Commission (FCC) – USA 25
Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada 25
European Conformity (CE) - EU 25
Voluntary Control Council for Interference (VCCI) – Japan 26
Product Safety Electrical Appliance & Material (PSE) – Japan 26
Bureau of Standards Metrology and Inspection (BSMI) – Taiwan 26
China 26
FIM-7901E interface module
Sliding
Latch
Handle
Retention
Screw
Handle
Sliding
Latch
Retention
Screw
A1 to A32
10GigE Fabric Channel
SPF+ Network
Interfaces (data)
M1 and M2 10GigE Base
Channel SFP+ Interfaces
(heartbeat and management)
MGMT1 - MGMT4
10/100/1000BASE-T Copper
Management Interface
Status, Alarm
HA a nd Power
LEDS
USB
Power
Button
NMI
Button
FIM-7901E interface module
The FIM-7901E interface module is a hot swappable module that provides data, management and session
sync/heartbeat interfaces, base backplane switching and fabric backplane session-aware load balancing for a
FortiGate-7000 series chassis. The FIM-7901E includes an integrated switch fabric and DP2 processors to load
balance millions of data sessions over the chassis fabric backplane to FPM processor modules.
The FIM-7901E can be installed in any FortiGate-7000 series chassis. Normally you would install two FIM-7901E
modules in chassis hub/switch slots 1 and 2. Two FIM-7901Es provide a total of 32 10GigE small form-factor
pluggable plus (SPF+) interfaces for a FortiGate-7000 chassis.
You can also install FIM-7901Es in a second chassis and operate the chassis in HA mode with another set of
processor modules to provide chassis failover protection.
FIM-7901E front panel
The FIM-7901E includes the following hardware features:
l Thirty-two front panel 10GigE SFP+ fabric channel interfaces (A1 to A32). These interfaces are connected to
10Gbps networks to distribute sessions to the FPM processor modules installed in chassis slots 3 and up. These
interfaces can also be configured to operate as Gigabit Ethernet interfaces using SFP transceivers. These
interfaces also support creating link aggregation groups (LAGs) that can include interfaces from both FIM-7901Es.
l Two front panel 10GigE SFP+ interfaces (M1 and M2) that connect to the base backplane channel. These
interfaces are used for heartbeat, session sync, and management communication between FIM-7901Es in different
chassis. These interfaces can also be configured to operate as Gigabit Ethernet interfaces using SFP transceivers,
but should not normally be changed. If you use switches to connect these interfaces, the switch ports should be
able to accept packets with a maximum frame size of at least 1526. The M1 and M2 interfaces need to be on
different broadcast domains. If M1 and M2 are connected to the same switch, Q-in-Q must be enabled on the
switch.
l Four 10/100/1000BASE-T out of band management Ethernet interfaces (MGMT1 to MGMT4).
l One 80Gbps fabric backplane channel for traffic distribution with each FPM module installed in the same chassis as
the FIM-7901E.
l One 1Gbps base backplane channel for base backplane with each FPM module installed in the same chassis as the
FIM-7901E.
4 FIM-7901E Interface Module Guide
Fortinet Technologies Inc.
FIM-7901E interface module Physical Description
l One 40Gbps fabric backplane channel for fabric backplane communication with the other FIM-7901E in the chassis.
l One 1Gbps base backplane channel for base backplane communication with the other FIM-7901E in the chassis.
l On-board DP2 processors and an integrated switch fabric to provide high-capacity session-aware load balancing.
l One front panel USB port.
l Power button.
l NMIswitch (for troubleshooting as recommended by Fortinet Support).
l Mounting hardware.
l LED status indicators.
Physical Description
Dimensions 1.2 x 11.34 x 14 in. (3.1 x 28.8 x 35.1 cm) (Height x Width x Depth)
Weight 7.2 lb. (3.23 kg)
Operating Temperature 32 to 104°F (0 to 40°C)
Storage Temperature -31 to 158°F (-35 to 70°C)
Relative Humidity 10% to 90% (Non-condensing)
Front panel LEDs
From the FIM-7901E font panel you can view the status of the module LEDs to verify that the module is
functioning normally.
LED State Description
Off The FIM-7901E is powered off.
STATUS
ALARM
Green The FIM-7901E is powered on and operating normally.
Flashing
The FIM-7901E is starting up.
Green
Red Major alarm.
Amber Minor alarm
Off No alarms
FIM-7901E Interface Module Guide
Fortinet Technologies Inc.
5
Front panel connectors FIM-7901E interface module
LED State Description
Off The FIM-7901E is operating in normal mode.
HA
POWER
A1 to A32
M1 and M2
MGMT1-4
Link/Act
Green The FIM-7901E is operating in HA mode.
Red A failover has occurred
Green The FIM-7901E is powered on and operating normally.
Off The FIM-7901E is powered off.
Green The correct cable is connected to the interface and the connected equipment
has power.
Flashing
Green
Off No link is established.
Solid
Green
Blinking
Green
Off No Link
Network activity at the interface.
Indicates this interface is connected with the correct cable and the attached
network device has power.
Indicates network traffic on this interface.
Green Connection at 1Gbps.
MGMT1-4
Speed
Amber Connection at 100Mbps.
Off Connection at 10Mbps.
Front panel connectors
You connect the FIM-7901E to your 100Gbps networks using the C1 to C4 front panel CFP2 interfaces. The front
panel also includes M1 and M2 SFP+ interfaces for the base channel, four Ethernet management interfaces
(MGMT1 to MGMT4), and a USB port. The USB port can be used with any USB key for backing up and restoring
configuration files.
Connector Type Speed Protocol Description
USB USB 3.0
Type A
USB 3.0
USB 2.0
Standard USB connector.
6 FIM-7901E Interface Module Guide
Fortinet Technologies Inc.
FIM-7901E interface module Supported transceivers
Connector Type Speed Protocol Description
A1 to A32 SFP+ 10Gbps/1Gbps Ethernet 10GbE connection or 1GbE connection
(using SFP transceiver).
M1 and M2 10GbE connection using SFP transceiver.
For heartbeat and synchronization between
chassis. 1GbE not recommended.
MGMT1 to
MGMT4
RJ-45 10/100/1000Mbps Ethernet 10/100/1000BASE-T copper connection for
management or system administration.
Supported transceivers
Transceivers available from Fortinet for the FIM-7901E A1 to A32 SFP+ interfaces.
Transceiver Description
FG-TRAN-SFP+SR 10GE SFP+ transceiver module, short range.
FG-TRAN-SFP+LR 10GE SFP+ transceiver module, long range.
FG-TRAN-SFP-LX 1 GE SFP LX transceiver module.
FG-TRAN-SFP-SX 1 GE SFP SX transceiver module.
Turning the module on and off
You can use the front panel power button to turn the module power on or off. If the module is powered on, press
the power switch to turn it off. If the module is turned off and installed in a chassis slot, press the power button to
turn it on.
NMI switch
When working with Fortinet Support to troubleshoot problems with the FIM-7901E you can use the front panel
non-maskable interrupt (NMI) switch to assist with troubleshooting. Pressing this switch causes the software to
dump registers/backtraces to the console. After the data is dumped the board reboots. While the board is
rebooting, traffic is temporarily blocked. The board should restart normally and traffic can resume once its up and
running.
FIM-7901E Interface Module Guide
Fortinet Technologies Inc.
7
FIM-7901E hardware architecture FIM-7901E interface module
DP2 DP2 DP2
Chassis Base Backplane
Chassis Fabric Backplane
CPU
Integrated Switch Fabric
1G
80G
40G
Management
(MGMT1-4)
Heartbeat
(M1 M2)
Data
(A1 - A32)
FIM-7901E hardware architecture
The FIM-7901E includes an integrated switch fabric (ISF) that connects the front panel interfaces to the DP2
session-aware load balancers and to the chassis backplanes. The ISFalso allows the DP2 processors to
distribute sessions amoung all NP6 processors on the FPMmodules in the same chassis.
FIM-7901E hardware architecture
8 FIM-7901E Interface Module Guide
Fortinet Technologies Inc.
Hardware installation Installing SFP+ and SFP transceivers
Hardware installation
This chapter describes installing a FIM-7901E interface module into a FortiGate-7000 chassis.
Installing SFP+ and SFP transceivers
You must install SPF+ transceivers into the FIM-7901E front panel A1 to A32 interfaces before connecting them
to 10Gbps networks. The FIM-7901E ships with two 10GBASE-SR SFP+ transceivers. See FIM-7901E front
panel on page 4 for the locations of the A1 to A32 interfaces. You can also configure the A1 to A32 interfaces to
operate at 1Gbps and install SFP transceivers. You can install the transceivers before or after inserting the FIM7901E module into a chassis.
You must install SFP+ transceivers into the FIM-7901E M1 and M2 interfaces before connecting them to 10Gbps
networks. You can also configure the M1 and M2 interfaces to operate at 1Gbps and install SFP transceivers. You
can install these transceivers before or after inserting the FIM-7901E board into a chassis.
You can install the following types of transceivers for connectors M1 and M2:
l 10GBASE-SR SFP+ (10Gbps)
l 10GBASE-LR SFP+ (10Gbps)
l 1000BASE SFP (1Gbps)
The M1 and M2 interfaces are used for heartbeat, session sync, and management
communication between FIM-7901Es in different chassis. This communication
requires 10 Gbps connections so, even though it supported, the M1 and M2 interfaces
should not changed to 1000Base SFP 1Gbps interfaces.
To install transceivers
To complete this procedure, you need:
l A FIM-7901E
l Transceivers to install
l An electrostatic discharge (ESD) preventive wrist strap with connection cord
FIM-7901Es must be protected from static discharge and physical shock. Only handle
or work with FIM-7901Es at a static-free workstation. Always wear a grounded
electrostatic discharge (ESD) preventive wrist strap when handling FIM-7901Es.
Handling the transceivers by holding the release latch can damage the connector. Do
not force transceivers into their cage slots. If the transceiver does not easily slide in
and click into place, it may not be aligned correctly. If this happens, remove the
transceiver, realign it and slide it in again.
FIM-7901E Interface Module Guide
Fortinet Technologies Inc.
9
Loading...