Fortinet FortiGate 5140-R User Manual
1311975312468101214
5140
FILTER
12
0
12
FortiGate-5140-R
Chassis Guide
5140SAP
SERIAL 1 SERIAL 2 ALARM
USER2
USER3
USER1
MINOR
MAJOR
CRITICAL
RESET
5000SM
ETH1
ETH0
10/100
10/100
link/Act
link/Act
ETH0
Service
RESET
STATUS
Hot Swap
5000SM
ETH1
ETH0
10/100
10/100
link/Act
link/Act
ETH0
Service
RESET
STATUS
Hot Swap
FAN TRAY FAN TRAYFAN TRAY
A detailed guide to the FortiGate-5140 chassis. This FortiGate-5140-R Chassis Guide describes FortiGate-5140
hardware features, and how to install the FortiGate-5140 chassis.
The most recent versions of this and all FortiGate-5000 series documents are available from the FortiGate-5000
page of the Fortinet Technical Documentation web site (http://docs.forticare.com).
Visit http://support.fortinet.com to register your FortiGate-5140-R chassis. By registering you can receive product
updates, technical support, and FortiGuard services.
FortiGate-5140-R Chassis Guide
01-30000-87705-20090108
Warnings and cautions
Warnings and cautions
Only trained and qualified personnel should be allowed to install or maintain FortiGate-5000 series equipment.
Read and comply with all warnings, cautions and notices in this document.
CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According
to the Instructions.
Caution: You should be aware of the following cautions and warnings before installing FortiGate-5000 series
hardware
• Turning off all power switches may not turn off all power to the FortiGate-5000 series equipment. Some circuitry
in the FortiGate-5000 series equipment may continue to operate even though all power switches are off.
• Many FortiGate-5000 components are hot swappable and can be installed or removed while the power is on.
But some of the procedures in this document may require power to be turned off and completely disconnected.
Follow all instructions in the procedures in this document that describe disconnecting FortiGate-5000 series
equipment from power sources, telecommunications links and networks before installing, or removing
FortiGate-5000 series components, or performing other maintenance tasks. Failure to follow the instructions in
this document can result in personal injury or equipment damage.
• Install FortiGate-5000 series chassis at the lower positions of a rack to avoid making the rack top-heavy and
unstable.
• Do not insert metal objects or tools into open chassis slots.
• Electrostatic discharge (ESD) can damage FortiGate-5000 series equipment. Only perform the procedures
described in this document from an ESD workstation. If no such station is available, you can provide some ESD
protection by wearing an anti-static wrist strap and attaching it to an available ESD connector such as the ESD
sockets provided on FortiGate-5000 series chassis.
• Make sure all FortiGate-5000 series components have reliable grounding. Fortinet recommends direct
connections to the building ground.
• If you install a FortiGate-5000 series component in a closed or multi-unit rack assembly, the operating ambient
temperature of the rack environment may be greater than room ambient. Make sure the operating ambient
temperature does not exceed Fortinet’s maximum rated ambient temperature.
• Installing FortiGate-5000 series equipment in a rack should be such that the amount of airflow required for safe
operation of the equipment is not compromised.
• FortiGate-5000 series chassis should be installed by a qualified electrician.
• FortiGate-5000 series equipment shall be installed and connected to an electrical supply source in accordance
with the applicable codes and regulations for the location in which it is installed. Particular attention shall be
paid to use of correct wire type and size to comply with the applicable codes and regulations for the installation
/ location. Connection of the supply wiring to the terminal block on the equipment may be accomplished using
Listed wire compression lugs, for example, Pressure Terminal Connector made by Ideal Industries Inc. or
equivalent which is suitable for AWG 10. Particular attention shall be given to use of the appropriate
compression tool specified by the compression lug manufacturer, if one is specified.
FortiGate-5140-R Chassis Guide
2 01-30000-87705-20090108
http://docs.fortinet.com/ • Feedback
Contents
Contents
Warnings and cautions................................................................................................... 2
FortiGate-5140 chassis............................................................................ 5
FortiGate-5140 chassis front panel ............................................................................... 6
FortiGate-5140 chassis back panel ............................................................................... 7
Physical description of the FortiGate-5140 chassis .................................................... 8
FortiGate-5140 shelf managers...................................................................................... 8
Shelf Manager fan and power control....................................................................... 10
FortiGate-5140 shelf alarm panel................................................................................. 10
Shelf alarm panel telco alarms ................................................................................. 11
Shelf manager command line interface (CLI) ............................................................. 12
Connecting to the shelf manager CLI using a serial port.......................................... 12
Air filter .......................................................................................................................... 14
Cooling fan trays........................................................................................................... 15
Power connection and configuration................................................... 17
About data center DC power........................................................................................ 17
Connecting a FortiGate-5140 chassis to data center DC power
and data center ground ................................................................................................ 17
Connecting a FortiGate-5140 PEM to data center DC power................................... 18
Connecting the FortiGate-5140 chassis to data center ground ................................ 19
Connecting the FortiGate-5140 chassis to AC power using the
FortiGate-5053 power converter tray .......................................................................... 20
FortiGate-5053 power converter tray front and back panel ...................................... 21
Selecting the power supplies and power convertor trays that you
need for your FortiGate-5140 configuration.............................................................. 22
Connecting a FortiGate-5140 chassis to the FortiGate-5053
power converter tray ................................................................................................. 25
Connecting the FortiGate-5140 chassis to data center ground ................................ 27
Turning on FortiGate-5140 chassis power ................................................................. 27
FortiGate-5140 hardware procedures .................................................. 29
Mounting the FortiGate-5140 chassis ......................................................................... 29
Air flow ...................................................................................................................... 29
Inserting 5000-series modules into a FortiGate-5140 chassis.................................. 29
Using FortiSwitch-5003A and FortiSwitch-5003 boards for backplane
communication.............................................................................................................. 30
FortiGate-5140-R Chassis Guide
01-30000-87705-20090108 3
http://docs.fortinet.com/ • Feedback
Contents
For more information............................................................................. 31
Fortinet documentation ................................................................................................ 31
Fortinet Tools and Documentation CD ..................................................................... 31
Fortinet Knowledge Center ...................................................................................... 31
Comments on Fortinet technical documentation ..................................................... 31
Customer service and technical support.................................................................... 31
Register your Fortinet product .................................................................................... 31
FortiGate-5140-R Chassis Guide
4 01-30000-87705-20090108
http://docs.fortinet.com/ • Feedback
FortiGate-5140 chassis
FortiGate-5140 chassis
You can install up to 14 FortiGate-5000 series boards in the 14 front panel slots of the
FortiGate-5140 ATCA chassis. The FortiGate-5140 is a 12U chassis that contains two
redundant hot swappable DC power entry modules that connect to -48 VDC Data Center
DC power. The FortiGate-5140 chassis also includes three hot swappable cooling fan
trays and a front accessible air filter. If all 14 front panel slots contain FortiGate-5005A2,
FortiGate-5001SX, or FortiGate-5001FA2 boards the FortiGate-5140 chassis provides a
total of 112 FortiGate gigabit ethernet interfaces. If all 14 slots contain FortiGate-5001A
boards the FortiGate-5140 chassis supports 28 1-Gigabit ethernet FortiGate interfaces. If
you add FortiGate-ADM-XB2 modules to the FortiGate-5001A boards the FortiGate-5140
chassis supports another 28 10-Gigabit interfaces.
You can also install a FortiSwitch-5003A or FortiSwitch-5003 board in the FortiGate-5140
chassis to provide base backplane communications. Base backplane communications can
be used for HA heartbeat communications and for data communications. You can add a
second FortiSwitch-5003A or FortiSwitch-5003 board for redundancy. FortiSwitch-5003A
boards can also provide fabric backplane communication using the FortiGate-5140 fabric
backplane channels.
You can mix and match any combination of FortiGate-5000 series boards in the
FortiGate-5140 chassis. For example, you could install four FortiGate-5005FA2 boards,
four FortiGate-5001SX boards, and four FortiGate-5001FA2 boards. You can also install
FortiController-5208 and FortiGate-5005FA2 boards in a FortiGate-5140 chassis to create
a FortiGate-5005-DIST security system.
Some of the boards installed in a FortiGate-5140 chassis can be operating in a FortiGate
HA cluster and some can be operating as standalone FortiGate units. You can also
operate multiple HA clusters and standalone FortiGate units in a single FortiGate-5140
chassis. You can also use FortiSwitch-5003A or FortiSwitch-5003 boards to operate HA
clusters consisting of FortiGate-5000 series boards installed in multiple FortiGate-5000
chassis. You can also use FortiSwitch-5003A boards for fabric data communication
between chassis.
The FortiGate-5140 chassis also includes 14 rear transition module (RTM) slots. The
FortiGate-5050 chassis supports 10-gigabit fabric channel communication if you have
installed FortiGate-5001A boards with FortiGate-RTM-XB2 modules and one or two
FortiSwitch-5003A boards.
The FortiGate-5140 chassis requires -48VDC Data Center DC power. If DC power is not
available you can install a FortiGate-5053 power converter tray (purchased separately)
with FortiGate-5140 power supplies.
This chapter describes the FortiGate-5140 chassis and includes the following sections:
• FortiGate-5140 chassis front panel
• FortiGate-5140 chassis back panel
• Physical description of the FortiGate-5140 chassis
• FortiGate-5140 shelf managers
• FortiGate-5140 shelf alarm panel
• Shelf manager command line interface (CLI)
• Air filter
• Cooling fan trays
FortiGate-5140-R Chassis Guide
01-30000-87705-20090108 5
http://docs.fortinet.com/ • Feedback
FortiGate-5140 chassis front panel FortiGate-5140 chassis
FortiGate-5001A-DW
boards
slots 4, 6, 8, 10,
12, and 14
Primary
shelf manager
Secondary
shelf manager
Cooling fan
trays 0, 1, 2
FortiGate-5001A-DW
boards
slots 3, 5, 7, 9,
11, and 13
FortiSwitch-5003A
boards
slots 1 and 2
Front cable
tray
ESD socket
Slot
numbers
Shelf alarm
panel (SAP)
Front accessible
air filter
FortiGate-5140 chassis front panel
Figure 1 shows the front panel of a FortiGate-5140 chassis. Two FortiSwitch-5003A
boards are installed in slots 1 and 2. Twelve FortiGate-5001A-DW boards installed in slots
3 to 14.
Figure 1: FortiGate-5140 chassis front panel with FortiGate-5001A-DW and FortiSwitch-5003A
boards installed
5140SAP
5140
RESET
1311975312468101214
SERIAL 1 SERIAL 2 ALARM
USER2
USER1
USER3
MINOR
MAJOR
CRITICAL
The FortiGate-5140 shelf alarm panel (SAP) and primary and secondary FortiGate-5140
Shelf Managers are also visible. The factory installed shelf alarm panel displays alarms,
provides a telco alarm interface, and also provides serial connections to the shelf
managers. The factory installed shelf managers provide power distribution, cooling,
alarms, and shelf status for the FortiGate-5140 chassis. For more information about these
components, see “FortiGate-5140 shelf alarm panel” on page 10 and “FortiGate-5140
shelf managers” on page 8.
5000SM
ETH1
ETH0
10/100
10/100
link/Act
link/Act
ETH0
Service
RESET
STATUS
Hot Swap
12
5000SM
ETH1
ETH0
10/100
10/100
link/Act
link/Act
ETH0
FILTER
Service
RESET
STATUS
Hot Swap
0
FAN TRAY FAN TRAYFAN TRAY
12
Caution: Do not operate the FortiGate-5140 chassis with open slots on the front panel. For
optimum cooling performance and safety, the slots must contain a FortiGate-5000 series
board or an air baffle slot filler. As well the removable terminal block cover must be installed
over the power connectors on the back of the chassis.
6 01-30000-87705-20090108
FortiGate-5140-R Chassis Guide
http://docs.fortinet.com/ • Feedback
FortiGate-5140 chassis FortiGate-5140 chassis back panel
Also visible on the front of the FortiGate-5140 chassis:
• Electrostatic discharge (ESD) socket, used for connecting an ESD wrist or ankle band
when working with the chassis.
• Front cable tray, used for managing and securing ethernet and other cables.
• Front accessible air filter.
• Three hot swappable FortiGate-5140 cooling fan trays.
FortiGate-5140 chassis back panel
Figure 2 on page 7 shows the back panel of the FortiGate-5140 chassis. The back panel
includes two hot-swappable redundant -48V/-60 VDC power entry modules (PEMs)
labelled A and B. Fortinet ships the FortiGate-5140 chassis with PEM A and B installed.
The PEMs provide redundant DC power connections for the FortiGate-5140 chassis and
distribute DC power to the chassis slots and to the fan trays.
Figure 2: FortiGate-5140 chassis back panel
RTM
slot filler
panels
Back cable
tray
ESD
socket
Chassis
ground
connector
(green)
1412108642135791113
BPEM PEM
-48V/-60 VDC nom RETURN
B
PEM
-48V/-60 VDC
nom (black)
Power
Entry Module B
TERMINAL BLOCK COVER
Remove terminal block cover and
decable before removing PEM.
12341234
12341234
RTN
(red)
Entry Module A
-48V/-60 VDC nom RETURN
A
PEM
-48V/-60 VDC
nom (black)
Power
A
12341234
12341234
RTN
(red)
TERMINAL BLOCK COVER
Remove terminal block cover and
decable before removing PEM.
RTM
slot numbers
(terminal block
cover removed)
If you require redundant power you should connect both PEMs to DC power. If redundant
power is not required, you should connect PEM A to DC power. Each PEM has four
-48V/-60 VDC connectors and 4 RTN connections. All eight of these connectors should be
connected to DC power. Figure 2 on page 7 shows the terminal block cover removed from
PEM A and the wiring required to connect PEM A to DC power. While operating the
FortiGate-5140 both terminal block covers should be installed.
FortiGate-5140-R Chassis Guide
01-30000-87705-20090108 7
http://docs.fortinet.com/ • Feedback
Physical description of the FortiGate-5140 chassis FortiGate-5140 chassis
For detailed information about connecting power to the FortiGate-5140 chassis, see
“Connecting a FortiGate-5140 chassis to data center DC power and data center ground”
on page 17 or “Connecting the FortiGate-5140 chassis to AC power using the
FortiGate-5053 power converter tray” on page 20.
The power entry modules are hot swappable, which means you can remove and replace a
defective PEM while the FortiGate-5140 is operating assuming that the FortiGate-5140
system has both PEMs connected to DC power for redundancy.
The back panel also includes the back cable tray, an ESD socket and the chassis ground
connector. The ground connector must be connected to Data Center ground (see
“Connecting the FortiGate-5140 chassis to data center ground” on page 27). Use the back
cable tray for securing and managing DC power, RTN, and ground wires.
The back panel also contains 14 RTM slots numbered to correspond to the front panel
slots. The RTM slots are available for FortiGate-5000 RTM modules such as the
FortiGate-RTM-XB2 module. When the FortiGate-5140 chassis is shipped, these slots are
covered by RTM slot filler panels.
Physical description of the FortiGate-5140 chassis
The FortiGate-5140 chassis is a 12U chassis that can be installed in a standard 19-inch
rack. Table 1 describes the physical characteristics of the FortiGate-5140 chassis.
Table 1: FortiGate-5140 chassis physical description
Dimensions 21 x 19 x 20.6 in. (53.3 x 48.3 x 52.4 cm)
Shipping weight
completely assembled
with packaging
Operating environment Temperature: 32 to 104°F (5 to 45°C)
Storage environment Temperature: -13 to 158°F (-25 to 70°C)
Power consumption Maximum: 2,980W DC
Power input 2x redundant -37VDC to -72VDC, 30A per power feed (total 4 + 4
FortiGate-5140 shelf managers
The FortiGate-5140 chassis includes one or two redundant hot-swappable shelf
managers, located in the dedicated shelf manager slots on the right of the FortiGate-5140
front panel. The primary shelf manager is installed above the secondary shelf manager.
The shelf managers support redundant operation with automatic switchover. If both shelf
managers are operating normally, one acts as the active shelf manager and the other as
the standby. Usually the primary shelf manager would be the active shelf manager and the
secondary shelf manager would be the standby shelf manager. The shelf managers
monitor each other and either can trigger a switchover if necessary. The active shelf
manager performs all shelf manager functions. If the active shelf manager fails or is
removed, the standby shelf manager takes over all shelf manager functions.
(Height x Width x Depth)
110 lb. (50 kg)
Relative humidity: 5 to 85% (Non-condensing)
Relative humidity: 5 to 85% (Non-condensing)
power feeds)
FortiGate-5140-R Chassis Guide
8 01-30000-87705-20090108
http://docs.fortinet.com/ • Feedback
FortiGate-5140 chassis FortiGate-5140 shelf managers
Retention
Screw
ETH 0 and 1 network
activity LEDs
ETH0
100base-T
Ethernet
Status
LEDs
Handle
Reset
Button
Hot Swap
LED
The FortiGate-5140 shelf managers control chassis power up and power down, chassis
power distribution, monitor chassis operating parameters, monitor and control chassis
cooling, and can signal alarms if the chassis encounters problems. All FortiGate-5000
modules installed in the chassis communicate with the shelf managers.
The FortiGate-5140 shelf managers are factory installed. In most cases users do not have
to install or configure the shelf managers.
Each shelf manager has two ethernet interfaces (ETH 0 and ETH 1). You can connect to
ETH 0 from the shelf manager front panel. ETH 1 connects to the FortiGate-5140
backplane.
The shelf managers detect alarm conditions and communicate alarm signals to the
FortiGate-5140 shelf alarm panel. The shelf alarm panel also contains serial interfaces for
connecting to the shelf managers.
The shelf managers are hot swappable. You can remove a shelf manager by opening the
extraction lever until the hot swap LED starts blinking. When the hot swap LED turns solid
blue you can remove the shelf manager from the FortiGate-5140 chassis.
Figure 3: FortiGate-5140 shelf manager front panel
5000SM
10/100
link/Act
ETH1
10/100
ETH0
link/Act
ETH0
Service
STATUS
RESET
Hot Swap
Table 2: FortiGate-5140 shelf manager LEDs
LED State Description
ETH 0
ETH 1
10/100 Yellow The Ethernet interface is connected at 100 Mbps.
link/Act Green Blinking LED indicates network traffic.
Off No link.
STATUS Green This shelf manager is operating normally as the active shelf
manager. Usually the primary shelf manager operates as the
active shelf manager.
Red This shelf manager is operating normally as the backup shelf
manager. Usually the secondary shelf manager operates as the
standby shelf manager.
HOT SWAP Off The shelf manager is not ready to be removed.
Blue The shelf manager is ready to be removed.
Long blink The shelf manager is starting up after being inserted into the
chassis.
Short blink The shelf manager is shutting down in preparation for being
removed from the chassis.
FortiGate-5140-R Chassis Guide
01-30000-87705-20090108 9
http://docs.fortinet.com/ • Feedback
FortiGate-5140 shelf alarm panel FortiGate-5140 chassis
Retention
Screw
Retention
Screw
Telco Alarm
Interface
Alarm
LED Reset
Button
Minor Alarm (Amber)
Major Alarm (Red)
Critical Alarm (Red)
User 1 Alarm (Amber)
User 2 Alarm (Amber)
User 3 Alarm (Amber)
SERIAL 1 (Primary
Shelf Manager)
SERIAL 2 (Secondary
Shelf Manager)
Shelf Manager fan and power control
The FortiGate-5140 shelf managers monitor the internal temperature of the
FortiGate-5140 chassis and adjust the operating speed of the FortiGate-5140 chassis
cooling fans as required.
When the chassis is first powered on all cooling fans run at full speed. Once the shelf
manager is up and running, the shelf manager reduces cooling fan speeds to maintain an
optimum temperature in the chassis. If shelf managers are not installed or not operating
correctly the FortiGate-5140 chassis cooling fans always operate at full speed.
FortiGate-5140 shelf alarm panel
The FortiGate-5140 shelf alarm panel (SAP), located at the top of the FortiGate-5140 front
panel, provides LED indicators of FortiGate-5140 alarms, a telco alarm connector, an
alarm LED reset button, and console access to the FortiGate-5140 shelf managers. The
LED alarm indicators include critical, major, and minor alarms as well as three user
defined alarms.
The alarm LED reset button (RESET) on the shelf alarm panel activates the Alarm Cutoff
(ACO) state. When ACO is activated, the active alarm LEDs blink and all of the alarm
relays are deactivated.
Figure 4: FortiGate-5140 shelf alarm panel front panel
RESET
5140SAP
CRITICAL
MAJOR
MINOR
USER1
USER2
SERIAL 1 SERIAL 2 ALARM
USER3
Table 3: FortiGate-5140 shelf alarm panel LEDs
LED State Description
CRITICAL Off Normal operation.
Red Indicates a critical alarm.
Blinking
Alarm cutoff (ACO) activated by pressing the alarm LED reset button.
Red
MAJOR Off Normal operation.
Red Indicates a major alarm.
Blinking
Alarm cutoff (ACO) activated by pressing the alarm LED reset button.
Red
MINOR Off Normal operation.
Amber Indicates a minor alarm.
Blinking
Alarm cutoff (ACO) activated by pressing the alarm LED reset button.
Amber
USER1
USER2
USER3
Off Normal operation
Amber Indicates a user-definable alarm.
Blinking
Alarm cutoff (ACO) activated by pressing the alarm LED reset button.
Amber
FortiGate-5140-R Chassis Guide
10 01-30000-87705-20090108
http://docs.fortinet.com/ • Feedback
Loading...