Fortinet FIM-7904E User Manual

FIM-7904E Interface Module Guide

7000

FORTINET DOCUMENTLIBRARY

http://docs.fortinet.com

FORTINETVIDEOGUIDE

http://video.fortinet.com

FORTINETBLOG

https://blog.fortinet.com

CUSTOMERSERVICE&SUPPORT

https://support.fortinet.com

http://cookbook.fortinet.com/how-to-work-with-fortinet-support/

FORTIGATECOOKBOOK

http://cookbook.fortinet.com

FORTINETTRAININGSERVICES

http://www.fortinet.com/training

FORTIGUARDCENTER

http://www.fortiguard.com

FORTICAST

http://forticast.fortinet.com

ENDUSER LICENSE AGREEMENT

http://www.fortinet.com/doc/legal/EULA.pdf

FEEDBACK

Email: [e-mail]

Friday, June 23, 2017

FIM-7904E Interface Module Guide

01-540-374567-20170623

TABLEOFCONTENTS

FIM-7904E interface module 4

Physical Description 5
Front panel LEDs 5
Front panel connectors 6
Supported transceivers and breakout cables 7
Splitting the FIM-7904E B1 to B8 interfaces 7
Turning the module on and off 8
NMI switch 8
FIM-7904E hardware architecture 8

Hardware installation 10

Installing QSFP+, SFP+, and SFP transceivers 10

To install transceivers 10
FIM-7904E mounting components 11
Inserting a FIM-7904E module into a chassis 12
Shutting down and removing a FIM-7904E board from a chassis 16
Troubleshooting 18

FIM-7904E does not startup 19

FIM-7904E status LED is flashing during system operation 19

Quick FIM-7904E configuration 20

Registering your FortiGate-7000 series products 20
Choosing the configuration tool 20
Changing network settings 20

Cautions and Warnings 22

Environmental Specifications 22
Safety 23

Regulatory Notices 25

Federal Communication Commission (FCC) – USA 25
Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada 25
European Conformity (CE) - EU 25
Voluntary Control Council for Interference (VCCI) – Japan 26
Product Safety Electrical Appliance & Material (PSE) – Japan 26
Bureau of Standards Metrology and Inspection (BSMI) – Taiwan 26
China 26

FIM-7904E interface module

Sliding

Latch

Handle

Retention

Screw

Handle

Sliding

Latch

Retention

Screw

B1 to B8

40GigE Fabric Channel

QSFP Network

Interfaces (data)

M1 and M2 10GigE Base
Channel SFP+ Interfaces

(heartbeat and management)

MGMT1 - MGMT4

10/100/1000BASE-T Copper

Management Interface

Status, Alarm

HA a nd Power

LEDS

USB

Power
Button

NMI
Button

FIM-7904E interface module

The FIM-7904E interface module is a hot swappable module that provides data, management and session
sync/heartbeat interfaces, base backplane switching and fabric backplane session-aware load balancing for a
FortiGate-7000 series chassis. The FIM-7904E includes an integrated switch fabric and DP2 processors to load
balance millions of data sessions over the chassis fabric backplane to FPM processor modules.

The FIM-7904E can be installed in any FortiGate-7000 series chassis. Normally you would install two FIM-7904E
modules in chassis hub/switch slots 1 and 2. Two FIM-7904Es provide a total of eight Quad Small Form-factor
Pluggable plus (QSFP+) interfaces for a FortiGate-7000 chassis. Using a 40GBASE-SR10 multimode QSFP+
transceiver, each QSFP+ interface can also be split into four 10GBASE-SR interfaces.

You can also install FIM-7904Es in a second chassis and operate the chassis in HA mode with another set of
processor modules to provide chassis failover protection.

FIM-7904E front panel

The FIM-7904E includes the following hardware features:

l Eight front panel 40GigE QSFP+ fabric channel interfaces (B1 to B8). These interfaces are connected to 40Gbps

networks to distribute sessions to the FPM processor modules installed in chassis slots 3 and up. Using 40GBASE­SR10 multimode QSFP+ transceivers, each QSFP+ interface can also be split into four 10GBASE-SR interfaces.
These interfaces also support creating link aggregation groups (LAGs) that can include interfaces from both FIM­7904Es.

l Two front panel 10GigE SFP+ interfaces (M1 and M2) that connect to the base backplane channel. These

interfaces are used for heartbeat, session sync, and management communication between FIM-7904Es in different
chassis. These interfaces can also be configured to operate as Gigabit Ethernet interfaces using SFP transceivers,
but should not normally be changed. If you use switches to connect these interfaces, the switch ports should be
able to accept packets with a maximum frame size of at least 1526. The M1 and M2 interfaces need to be on
different broadcast domains. If M1 and M2 are connected to the same switch, Q-in-Q must be enabled on the
switch.

l Four 10/100/10000BASE-T out of band management Ethernet interfaces (MGMT1 to MGMT4).

l One 80Gbps fabric backplane channel for traffic distribution with each FPM module installed in the same chassis as

the FIM-7904E.

4 FIM-7904E Interface Module Guide

Fortinet Technologies Inc.

FIM-7904E interface module Physical Description

l One 1Gbps base backplane channel for base backplane with each FPM module installed in the same chassis as the

FIM-7904E.

l One 40Gbps fabric backplane channel for fabric backplane communication with the other FIM-7904E in the chassis.

l One 1Gbps base backplane channel for base backplane communication with the other FIM-7904E in the chassis.

l On-board DP2 processors and an integrated switch fabric to provide high-capacity session-aware load balancing.

l One front panel USB port.

l Power button.

l NMIswitch (for troubleshooting as recommended by Fortinet Support).

l Mounting hardware.

l LED status indicators.

Physical Description

Dimensions 1.2 x 11.34 x 14 in. (3.1 x 28.8 x 35.1 cm) (Height x Width x Depth)

Weight 7.2 lb. (3.23 kg)

Operating Temperature 32 to 104°F (0 to 40°C)

Storage Temperature -31 to 158°F (-35 to 70°C)

Relative Humidity 10% to 90% (Non-condensing)

Front panel LEDs

From the FIM-7904E font panel you can view the status of the module LEDs to verify that the module is
functioning normally.

LED State Description

Off The FIM-7904E is powered off.

STATUS

Green The FIM-7904E is powered on and operating normally.

Flashing

The FIM-7904E is starting up.

Green

Red Major alarm.

ALARM

Amber Minor alarm

Off No alarms

FIM-7904E Interface Module Guide
Fortinet Technologies Inc.

5

Front panel connectors FIM-7904E interface module

LED State Description

Off The FIM-7904E is operating in normal mode.

HA

POWER

B1 to B8

M1 and M2

Green The FIM-7904E is operating in HA mode.

Red A failover has occurred

Green The FIM-7904E is powered on and operating normally.

Off The FIM-7904E is powered off.

Green The correct cable is connected to the interface and the connected equipment has

power and is connected at 40Gbps or 10Gbps. If the port is split the LED will light
as long as at least one of the 10 Gbps connections is active.

Flashing
Green

Off No link is established.

Green

Flashing
Green

40 Gbps or 10Gbps network activity at the interface.

The correct cable is connected to the interface and the connected equipment has
power.

Network activity at the interface.

Off No link is established.

MGMT1-4
Link/Act

MGMT1-4
Speed

Solid
Green

Blinking
Green

Off No Link

Green Connection at 1Gbps.

Amber Connection at 100Mbps.

Off Connection at 10Mbps.

Indicates this interface is connected with the correct cable and the attached
network device has power.

Indicates network traffic on this interface.

Front panel connectors

You connect the FIM-7904E to your 100Gbps networks using the C1 to C4 front panel CFP2 interfaces. The front
panel also includes M1 and M2 SFP+ interfaces for the base channel, four Ethernet management interfaces

6 FIM-7904E Interface Module Guide

Fortinet Technologies Inc.

FIM-7904E interface module Supported transceivers and breakout cables

(MGMT1 to MGMT4), and a USB port. The USB port can be used with any USB key for backing up and restoring
configuration files.

Connector Type Speed Protocol Description

USB USB 3.0

Type A

B1 to B8 QSFP+ 40Gbps/10Gbps Ethernet 40GbE connections using 40GBASE-SR/LR

M1 and M2 SFP+ 10Gbps/1Gbps Ethernet 10GbE connection (using SFP transceiver). For

MGMT1 to
MGMT4

RJ-45 10/100/1000Mbps Ethernet 10/100/1000BASE-T copper connection for

USB 3.0
USB 2.0

Standard USB connector.

Transceivers or 4x10GbE connections using
breakout cables.

heartbeat and synchronization between
chassis. 1GbE not recommended.

management or system administration.

Supported transceivers and breakout cables

Transceivers available from Fortinet for the FIM-7904E B1 to B8 QSFP+ interfaces.

Transceiver Description

FG-TRAN-QSFP+SR 40GE QSFP+ transceivers, short range.

FG-TRAN-QSFP+LR 40GE QSFP+ transceivers, long range.

Breakout cables available from Fortinet for the FIM-7904E B1 to B8 QSFP+ interfaces.

Breakout Description

FG-TRAN-QSFP-4XSFP 40GE QSFP+ Parallel Breakout Active Optical Cable with 1m length.

FG-TRAN-QSFP-4SFP-5 40GE QSFP+ Parallel Breakout MPO to 4x LC connectors, 5m reach.

Splitting the FIM-7904E B1 to B8 interfaces

Each 40GE interface (B1 to B8) on the FIM-7904Es in slot 1 and slot 2 of a FortiGate-7000 system can be split
into 4x10GBE interfaces. You split these interfaces after the FIM-7904Es are installed in your FortiGate-7000
system and the system us up and running. You can split the interfaces of the FIM-7904Es in slot 1 and slot 2 at
the same time by entering a single CLI command. Splitting the interfaces requires a system reboot so Fortinet
recommends that you split multiple interfaces at the same time according to your requirements to avoid traffic
disruption.

FIM-7904E Interface Module Guide
Fortinet Technologies Inc.

7

Turning the module on and off FIM-7904E interface module

For example, to split the B1 interface of the FIM-7904E in slot 1 (this interface is named 1-B1) and the B1 and B4
interfaces of the FIM-7904E in slot 2 (these interfaces are named 2-B1 and 2-B4) connect to the CLI of your
FortiGate-7000 system using the management IP and enter the following command:

config system global

set split-port 1-B1 2-B1 2-B4

end

After you enter the command, the FortiGate-7000 reboots and when it comes up:

l The 1-B1 interface will no longer be available. Instead the 1-B1/1, 1-B1/2, 1-B1/3, and 1-B1/4 interfaces will be

available.

l The 2-B1 interface will no longer be available. Instead the 2-B1/1, 2-B1/2, 2-B1/3, and 2-B1/4 interfaces will be

available.

l The 2-B4 interface will no longer be available. Instead the 2-B4/1, 2-B4/2, 2-B4/3, and 2-B4/4 interfaces will be

available.

You can now connect breakout cables to these interfaces and configure traffic between them just like any other
FortiGate interface.

Turning the module on and off

You can use the front panel power button to turn the module power on or off. If the module is powered on, press
the power switch to turn it off. If the module is turned off and installed in a chassis slot, press the power button to
turn it on.

NMI switch

When working with Fortinet Support to troubleshoot problems with the FIM-7904E you can use the front panel
non-maskable interrupt (NMI) switch to assist with troubleshooting. Pressing this switch causes the software to
dump registers/backtraces to the console. After the data is dumped the board reboots. While the board is
rebooting, traffic is temporarily blocked. The board should restart normally and traffic can resume once its up and
running.

FIM-7904E hardware architecture

The FIM-7904E includes an integrated switch fabric (ISF) that connects the front panel interfaces to the DP2
session-aware load balancers and to the chassis backplanes. The ISFalso allows the DP2 processors to
distribute sessions amoung all NP6 processors on the FPMmodules in the same chassis.

8 FIM-7904E Interface Module Guide

Fortinet Technologies Inc.

FIM-7904E interface module FIM-7904E hardware architecture

Chassis Base Backplane

Chassis Fabric Backplane

CPU

Integrated Switch Fabric

Management

(MGMT1-4)

Heartbeat

(M1 M2)

Data

(B1 - B8)

DP2 DP2 DP2

1G

80G

40G

FIM-7904E hardware architecture

FIM-7904E Interface Module Guide
Fortinet Technologies Inc.

9