Fortinet FortiGate 5050 User Manual

1
2
2
3
4
5
ShMC
1
ShMC
POWER
FortiGate-5050
Chassis Guide
USB
CONSOLE
ACC
PWR
CONSOLE
ACC
PWR
CONSOLE
ACC
PWR
ETH
O
MANAGEMENT
ETH
O
MANAGEMENT
1 2 3 4 5 6 7 8
USB
1 2 3 4 5 6 7 8
USB
1 2 3 4 5 6 7 8
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
E1
9876543210
1514
1312
1110
E2
E1
9876543210
1514
1312
1110
E2
STA IPM
STA IPM
STA IPM
OKCLK
INTEXT
FLT
HOT SWAP
RESET
ZRE
ZRE
Alarm
LED MODE
FLT
OKCLK
INTEXT
FLT
HOT SWAP
RESET
LED MODE
FLT
Critical
Major
Minor Alarm Reset
Console Ethernet
Status
A detailed guide to the FortiGate-5050 chassis. This FortiGate-5050 Chassis Guide describes FortiGate-5050 hardware features, how to install the FortiGate-5050 chassis, and how to install FortiGate-5000 boards in the chassis.
The most recent versions of this and all FortiGate-5000 series documents are available from the FortiGate-5000 page of the Fortinet Technical Documentation web site (http://docs.forticare.com).
Visit http://support.fortinet.com to register your FortiGate-5050 chassis. By registering you can receive product
updates, technical support, and FortiGuard services.
FortiGate-5050 Chassis Guide
01-30000-87211-20090106

Warnings and cautions

Warnings and cautions
Only trained and qualified personnel should be allowed to install or maintain FortiGate-5000 series equipment. Read and comply with all warnings, cautions and notices in this document.
CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According to the Instructions.
Caution: You should be aware of the following cautions and warnings before installing FortiGate-5000 series hardware
Turning off all power switches may not turn off all power to the FortiGate-5000 series equipment. Some circuitry in the FortiGate-5000 series equipment may continue to operate even though all power switches are off.
Many FortiGate-5000 components are hot swappable and can be installed or removed while the power is on. But some of the procedures in this document may require power to be turned off and completely disconnected. Follow all instructions in the procedures in this document that describe disconnecting FortiGate-5000 series equipment from power sources, telecommunications links and networks before installing, or removing FortiGate-5000 series components, or performing other maintenance tasks. Failure to follow the instructions in this document can result in personal injury or equipment damage.
Install FortiGate-5000 series chassis at the lower positions of a rack to avoid making the rack top-heavy and unstable.
Do not insert metal objects or tools into open chassis slots.
Electrostatic discharge (ESD) can damage FortiGate-5000 series equipment. Only perform the procedures described in this document from an ESD workstation. If no such station is available, you can provide some ESD protection by wearing an anti-static wrist strap and attaching it to an available ESD connector such as the ESD sockets provided on FortiGate-5000 series chassis.
Make sure all FortiGate-5000 series components have reliable grounding. Fortinet recommends direct connections to the building ground.
If you install a FortiGate-5000 series component in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Make sure the operating ambient temperature does not exceed Fortinet’s maximum rated ambient temperature.
Installing FortiGate-5000 series equipment in a rack should be such that the amount of airflow required for safe operation of the equipment is not compromised.
FortiGate-5000 series chassis should be installed by a qualified electrician.
FortiGate-5000 series equipment shall be installed and connected to an electrical supply source in accordance with the applicable codes and regulations for the location in which it is installed. Particular attention shall be paid to use of correct wire type and size to comply with the applicable codes and regulations for the installation / location. Connection of the supply wiring to the terminal block on the equipment may be accomplished using Listed wire compression lugs, for example, Pressure Terminal Connector made by Ideal Industries Inc. or equivalent which is suitable for AWG 10. Particular attention shall be given to use of the appropriate compression tool specified by the compression lug manufacturer, if one is specified.
FortiGate-5050 Chassis Guide
2 01-30000-87211-20090106
http://docs.fortinet.com/Feedback

Contents

Contents
Warnings and cautions................................................................................................... 2
FortiGate-5050 chassis............................................................................ 5
FortiGate-5050 front panel ............................................................................................. 6
FortiGate-5050 back panel ............................................................................................. 6
Physical description of the FortiGate-5050 chassis .................................................... 7
FortiGate-5050 shelf manager........................................................................................ 8
Shelf manager command line interface (CLI) ............................................................. 9
FortiGate-5050 shelf manager alarm functions ........................................................ 11
FortiGate-5050 shelf management functions............................................................ 12
Power connection and configuration................................................... 13
About data center DC power........................................................................................ 13
Connecting the FortiGate-5050 chassis to data center DC power and
data center ground........................................................................................................ 13
Connecting a FortiGate-5050 power input connector to data center
DC power.................................................................................................................. 13
Connecting the FortiGate-5050 chassis to data center ground ................................ 14
Connecting the FortiGate-5050 chassis to AC power using the
FortiGate-5053 power converter tray .......................................................................... 15
FortiGate-5053 power converter tray front and back panel ...................................... 15
Selecting the power supplies and power converter trays that you need
for your FortiGate-5050 configuration....................................................................... 17
Connecting a FortiGate-5050 chassis to the FortiGate-5053 power
converter tray............................................................................................................ 20
Turning on FortiGate-5050 chassis power ................................................................. 22
FortiGate-5050 hardware procedures .................................................. 23
Mounting the FortiGate-5050 chassis ......................................................................... 23
Air flow ...................................................................................................................... 23
Inserting 5000 series boards into a FortiGate-5050 chassis..................................... 23
Using FortiSwitch-5003A and FortiSwitch-5003 boards for backplane
communication.............................................................................................................. 24
For more information............................................................................. 25
Fortinet documentation ................................................................................................ 25
Fortinet Tools and Documentation CD ..................................................................... 25
Fortinet Knowledge Center ...................................................................................... 25
Comments on Fortinet technical documentation ..................................................... 25
Customer service and technical support.................................................................... 25
Register your Fortinet product .................................................................................... 25
FortiGate-5050 Chassis Guide 01-30000-87211-20090106 3
http://docs.fortinet.com/Feedback
Contents
FortiGate-5050 Chassis Guide
4 01-30000-87211-20090106
http://docs.fortinet.com/Feedback

FortiGate-5050 chassis

FortiGate-5050 chassis
You can install up to five FortiGate-5000 series boards in the five slots of the FortiGate-5050 ATCA chassis. The FortiGate-5050 is a 5U 19-inch rackmount ATCA chassis that contains two redundant DC power connections that connect to -48 VDC Data Center DC power. The FortiGate-5050 chassis also includes a hot swappable cooling fan tray. If all five slots contain FortiGate-5005FA2, FortiGate-5001SX, or FortiGate-5001FA2 boards, the FortiGate-5050 chassis provides a total of 40 1-Gigabit ethernet FortiGate interfaces. If all 5 slots contain FortiGate-5001A boards the FortiGate-5050 chassis supports 10 1-Gigabit ethernet FortiGate interfaces. If you add FortiGate-ADM-XB2 modules to the FortiGate-5001A boards the FortiGate-5050 chassis supports up to ten 10-Gigabit interfaces
You can also install FortiSwitch-5003A or FortiSwitch-5003 boards in the FortiGate-5050 chassis slots 1 and 2 to provide base backplane communications. Base backplane communications can be used for HA heartbeat communications and data communications using FortiGate-5050 base backplane channels. You can add a second FortiSwitch-5003A or FortiSwitch-5003 board for redundancy. FortiSwitch-5003A boards can also provide fabric backplane communication using the FortiGate-5050 fabric backplane channels.
You can mix and match any combination of FortiGate-5000 series boards in the FortiGate-5050 chassis. For example, you could install two FortiGate-5005FA2 boards, two FortiGate-5001SX boards, and one FortiGate-5001FA2 board. You can also install FortiController-5208 and FortiGate-5005FA2 boards in a FortiGate-5050 chassis to create a FortiGate-5005-DIST security system.
Some of the boards installed in a FortiGate-5050 chassis can be operating in a FortiGate HA cluster and some can be operating as standalone FortiGate units. You can also operate multiple HA clusters and standalone FortiGate units in a single FortiGate-5050 chassis. You can also use FortiSwitch-5003A or FortiSwitch-5003 boards to operate HA clusters consisting of FortiGate-5000 series boards installed in multiple FortiGate-5000 chassis. You can also use FortiSwitch-5003A boards for fabric data communication between chassis.
The FortiGate-5050 chassis also includes 5 rear transition module (RTM) slots. The FortiGate-5050 chassis supports 10-gigabit fabric channel communication if you have installed FortiGate-5001A boards with FortiGate-RTM-XB2 modules and one or two FortiSwitch-5003A boards.
The FortiGate-5050 chassis requires -48VDC Data Center DC power. If DC power is not available you can install a FortiGate-5053 power converter tray (purchased separately) with FortiGate-5020/5050 power supplies.
This chapter describes the FortiGate-5050 chassis and includes the following sections:
FortiGate-5050 front panel
FortiGate-5050 back panel
Physical description of the FortiGate-5050 chassis
FortiGate-5050 shelf manager
FortiGate-5050 Chassis Guide 01-30000-87211-20090106 5
http://docs.fortinet.com/Feedback
FortiGate-5050 front panel FortiGate-5050 chassis

FortiGate-5050 front panel

Figure 1 shows the front of a FortiGate-5050 chassis. Two FortiSwitch-5003 boards are
installed in slots 1 and 2. Three FortiGate-5001SX boards are installed in slots 3, 4, and 5.
The FortiGate-5050 primary Shelf Manager is also visible. The factory-installed shelf managers provide power distribution, cooling, alarms, shelf status, and a telco alarm interface for the FortiGate-5050 chassis. For more information about these components, see “FortiGate-5050 shelf manager” on page 8.
Figure 1: FortiGate-5050 front panel with FortiGate-5001SX and FortiSwitch-5003 boards
installed
USB
1 2 3 4 5 6 7 8
FortiGate-5001SX
boards
slots 3, 4,
and 5
FortiSwitch-5003
boards
slots 1 and 2
5
4
3
2
1
ShMC
2
USB
1 2 3 4 5 6 7 8
CONSOLE
ACC
PWR
USB
1 2 3 4 5 6 7 8
CONSOLE
ACC
PWR
ETH
O
MANAGEMENT
MANAGEMENT
ETH
O
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
E1
9876543210
1514
1312
1110
E2
E1
9876543210
1514
1312
1110
E2
CONSOLE
ACC
PWR
STA IPM
STA IPM
STA IPM
OKCLK
INTEXT
FLT
HOT SWAP
RESET
ZRE
FLT
OKCLK
INTEXT
FLT
HOT SWAP
RESET
ZRE
FLT
Critical
Major
Minor
Alarm
Alarm
Console Ethernet
Reset
POWER
LED MODE
LED MODE
ShMC
Hot Swap
Status
1
Hot-swappable
cooling fan tray Power LED
Also visible on the front of the FortiGate-5050:
Electrostatic discharge (ESD) socket, used for connecting an ESD wrist or ankle band when working with the chassis.
The location of the hot swappable FortiGate-5050 cooling fan tray behind panel.
Power LED.
Caution: Do not operate the FortiGate-5050 chassis with open slots on the front panel. For optimum cooling performance and safety, the slots must contain a FortiGate-5000 series board or an air baffle slot filler. As well the removable power supply panel must be installed over the power connectors on the back of the chassis.

FortiGate-5050 back panel

Figure 2 shows the back panel of a FortiGate-5050 chassis. The back panel includes two
redundant -48V to - 58V DC power input connectors labelled Input A and Input B. The power input connectors provide redundant DC power connections for the FortiGate-5050 chassis and distribute DC power to the fan tray and the FortiGate-5000 series boards installed in the FortiGate-5050 chassis. Each power input connector includes a 24 Amp circuit breaker that also functions as an on/off switch for the power input connector.
If you require redundant power you should connect both power input connectors to DC power. If redundant power is not required, you should connect power input connector A to DC power. When operating, the power input connectors are covered with clear protection plates.
FortiGate-5050
Shelf Manager
ESD socket
FortiGate-5050 Chassis Guide
6 01-30000-87211-20090106
http://docs.fortinet.com/Feedback
FortiGate-5050 chassis Physical description of the FortiGate-5050 chassis
5
4
3
2
1
-48V to -58V (-DC in)
(black)
Power
wire
Ground
(green)
-48V to -58V (-DC in)
(black)
Positive
(RTN)
(red)
Positive
(RTN)
(red)
DC VOLTAGE RANGE
-48V TO -58V
RTN (-DC IN)
INPUT B
25
AMP
DC VOLTAGE RANGE
-48V TO -58V RTN (-DC IN)
INPUT A
25
AMP
RTN
GND
RTN
-48V
-48V
RTM
slot filler
panels
Figure 2: FortiGate-5050 chassis back panel
The back panel includes the FortiGate-5050 chassis ground connector which must be connected to Data Center ground. Use the power wire fixtures for securing and managing DC power wires. The FortiGate-5050 chassis also includes an ESD socket on the back panel.
For detailed information about connecting power to the FortiGate-5050 chassis, see
“Connecting the FortiGate-5050 chassis to data center DC power and data center ground” on page 13 or “Connecting the FortiGate-5050 chassis to AC power using the FortiGate-5053 power converter tray” on page 15.
The back panel also contains 5 RTM slots numbered to correspond to the front panel slots. The RTM slots are available for FortiGate-5000 RTM modules such as the FortiGate-RTM-XB2 module. When the FortiGate-5050 chassis is shipped, these slots are covered by RTM slot filler panels.

Physical description of the FortiGate-5050 chassis

The FortiGate-5050 chassis is a 5U chassis that can be installed in a standard 19-inch rack. Table 1 describes the physical characteristics of the FortiGate-5050 chassis.
Table 1: FortiGate-5050 chassis physical description
Dimensions 8.75 x 17 x 15.5 in. (13.3 x 43.2 x 39.4 cm)
(H x W x D)
Weight 26.75 lb. (12.1 kg)
Operating environment Temperature: 32 to 104°F (0 to 45°C)
Relative humidity: 5 to 85% (Non-condensing)
Storage environment Temperature: -13 to 158 °F (-25 to 70°C)
Power consumption Maximum: 1,135 W
Power input 2x redundant -48VDC to -58VDC
FortiGate-5050 Chassis Guide 01-30000-87211-20090106 7
http://docs.fortinet.com/Feedback
Relative humidity: 5 to 95% (Non-condensing)
FortiGate-5050 shelf manager FortiGate-5050 chassis
Hot Swap
Status
Alarm
Minor
Console Ethernet
Alarm
Reset
Critical
Major
10/100 base-T
Ethernet
Alarm
LED
Reset
Button
RS-232
Console
Port
Retention
Screw
Retention
Screw
Handle
Telco
Alarm
Interface
Critial, Major, and Minor Alarm LEDs
Hot Swap and
Status LEDs

FortiGate-5050 shelf manager

The FortiGate-5050 chassis includes one or two identical redundant hot-swappable shelf managers (also called shelf manager cards (SMCs)), located in the dedicated shelf manager slots on the bottom of the FortiGate-5050 front panel. The primary shelf manager is installed on the right (SMC 1) the secondary shelf manager is installed on the left (SMC 2).
The FortiGate-5050 shelf manager supports alarm and shelf management functions.
Figure 3: FortiGate-5050 shelf manager front panel
Ta bl e 2 lists and describes the FortiGate-5050 shelf manager LEDs.
Table 2: FortiGate-5050 shelf manager LEDs
LED State Description
Critical Major Minor
Green Normal operation
Red Indicate the level of alarm: critical, major, or minor.
Hot Swap Blue LED is on when ready to be hot swapped.
Status Green Normal operation.
Ethernet port
Yellow Port is not forwarding packets.
Green Blinking LED indicates network traffic.
Off No link.
Ta bl e 3 lists and describes the FortiGate-5050 shelf manager connectors.
Table 3: FortiGate-5050 shelf manager connections
Connector Type Speed Protocol Description
Alarm micro
DB-15 male
Console RJ-45 9600 bps,
Ethernet RJ-45 100Base-T Ethernet Provides access to Telnet , Web or SNMP
9600 bps RS-232
serial
RS-232
8/N/1
serial
The external dry relay Telco alarm interface (48VDC) provides Telco form-c relay connections for minor, major and critical power faults.
Serial connection to the command line interface.
management methods.
FortiGate-5050 Chassis Guide
8 01-30000-87211-20090106
http://docs.fortinet.com/Feedback
Loading...
+ 18 hidden pages