Technical support
Fortinet Technical Support Web site: http://support.fortinet.com
Fortinet email support:
amer_support@fortinet.com
apac_support@fortinet.com
eu_support@fortinet.com
For customers in the United States,
Canada, Mexico, Latin America and South
America.
For customers in Japan, Korea, China,
Hong Kong, Singapore, Malaysia, all other
Asian countries, and Australia.
For customers in the United Kingdom,
Scandinavia, Mainland Europe, Africa, and
the Middle East.
Installing the FortiGate-5003
FortiGate-5003
ETH
O
MANAGEMENT
© Copyright 2005 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks or registered trademarks of their
respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
20 June 2005
QuickStart Guide
For technical support please visit http://www.fortinet.com.
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
OKCLK
INTEXT
E1
9876543210
1514
1312
1110
E2
FLT
HOT SWAP
RESET
ZRE
LED MODE
FLT
01-28005-0125-20050620
Mounting
Knot
RJ-45 10/100
Port
MANAGEMENT
Extraction
Lever
ETH
O
RS-232
Port
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
LED State Description
+ Green The FortiGate-5003 module is powered on.
Yellow Caution status.
+
System
Console
Port LED
0-15
E1
E0
Yellow Out of service. Normally off. On for switch failure.
Green Normal operation.
Yellow
Green
Off
Yellow
Green
Off
Yellow
Green
Off
Link/Activity mode - Port is not forwarding packets. Link/
Speed mode - 1000 Mbps connection
Link/Activity mode - Blinking LED indicates network
traffic. Link/Speed mode - 100 Mbps connection.
Link/Activity mode - No link. Link/Speed mode - 10 Mbps
connection.
Link/Activity mode - Port is not forwarding packets. Link/
Speed mode - 1000 Mbps connection
Link/Activity mode - Blinking LED indicates network
traffic. Link/Speed mode - 100 Mbps connection.
Link/Activity mode - No link. Link/Speed mode - 10 Mbps
connection.
Link/Activity mode - Port is not forwarding packets. Link/
Speed mode - 1000 Mbps connection
Link/Activity mode - Blinking LED indicates network
traffic. Link/Speed mode - 100 Mbps connection.
Link/Activity mode - No link. Link/Speed mode - 10 Mbps
connection.
OK Green Initialization completed successfully.
EXT FLT Yellow
Cannot establish link to a configured port or connection
problem external to the adaptor.
INT FLT Yellow Failure of internal tests. Off during power up.
Hot Swap
Blue
On when switch is ready to remove and during hot swap.
Off when switch is correctly installed.
Reset Press Reset for three seconds to restart switch.
LED Mode
Change the port LED display function from LInk/Activity
mode to Link/Speed mode.
10/100/1000
Ethernet
LED Mode Button
E1
9876543210
1514
1312
1110
E2
OKCLK
INTEXT
FLT
HOT SWAP
FLT
Reset
Button
RESET
Extraction
LED MODE
Lever
Mounting
Knot
ZRE
Install the FortiGate-5003 module into a FortiGate 5050 or 5140
chassis. Always wear an ESD wrist strap or ankle strap to avoid static
discharges.
You must install the FortiGate-5003 module in specific slots in the
chassis. These specific slots are wired on the backplane for internal
port switching capabilities. For the FortiGate-5050 and FortiGate-5140,
install the FortiGate-5003 in slot 1 or 2.
Note: If you are using one FortiGate-5003 module, install the module in
slot 2.
To install the FortiGate-5003 module
1. Extend the extraction levers.
2. Carefully slide the module into a chassis slot.
The module is
seated properly when it touches the chassis up to the
extraction levers.
3. Lock the extraction levers by pushing them towards each other.
4. If power is supplied to the chassis, the FortiGate-5003 module
powers on when the extraction levers are closed.
5. Tighten the mounting knots on the left and right sides of the
FortiGate-5003 front panel.
Connector Type Speed Protocol Description
ETH0 RJ-45 100Base-T Ethernet
CONSOLE RJ-45 9600 bps
ZRE0, ZRE1,
ZRE2
RJ-45 1000Base-T Ethernet
RS-232
serial
Ethernet out of band
management connection.
Serial connection to the
command line interface.
Redundant connections to
another FortiGate-5000
series chassis.
HA setup
Clustering FortiGate-5001 Antivirus Firewall modules
The FortiGate-5003 Switch Blade module is an HA component that is designed for use with the FortiGate-5050 and FortiGate-5140 chassis to
provide full HA clustering capabilities between the FortiGate-5001 modules. The FortiGate-5003 acts as the switch, providing automatic connection
through port 10 the backplane of the chassis. Using two FortiGate-5003 modules provides redundant HA interconnects with no single point of
failure.
For information on configuring the FortiGate-5001 module for HA see the FortiGate-5000 series Installation Guide.
High Availability Modes
Active-Active Load balancing and failover HA. Each FortiGate unit in the HA cluster actively processes connections and
monitors the status of the other FortiGate units in the cluster. The primary FortiGate unit in the cluster
controls load balancing.
Active-Passive Failover HA. The primary FortiGate unit in the cluster processes all connections. All other FortiGate units in
the cluster are passively monitor the cluster status and remain synchronized with the primary FortiGate unit.
All members of the HA cluster must be set to the same HA mode.
FortiGate-5001 clusters using a single FortiGate-5003
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiB lade 5003 Switch
HA Int erface
FortiGate 5001 Blade
FortiGa te 5050 S M
FortiGate 5050 SM
Fan
Tray
FortiGate-5001 clusters using a redundant FortiGate-5003
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiGate 5001 Blade
FortiB lade 5003 Switch
HA Int erface
FortiB lade 5003 Switch
HA Int erface
FortiGate 5050 SM FortiGate 5050 SM
Fan
Tray
Clustering FortiGate-5000 series chassis
The FortiGate-5003 Switch Blade module provides full HA clustering capabilities between FortiGate-5050 and FortiGate-5140 chassis to provide
inter-chassis communication. The FortiGate-5003 acts as the switch, providing automatic connection through port 10 the backplane of the chassis.
The diagrams shown also apply to the FortiGate-5140 chassis.
USB
1 2 3 4 5 6 7 8
CONSOLE
PWRACC
5
4
3
2
1
ShMC
2
CONSOLE
PWRACC
CONSOLE
PWRACC
ETH
O
MANAGEMENT
CONSOLE
PWRACC
USB
1 2 3 4 5 6 7 8
USB
1 2 3 4 5 6 7 8
RS232ZRE0ZRE1ZRE2
E1
SYSTEM
CONSOLE
USB
1514
E2
1 2 3 4 5 6 7 8
1312
STA IPM
STA IPM
STA IPM
OKCLK
INTEXT
FLT
9876543210
1110
HOT SWAP
RESET
ZRE
LED MODE
FLT
CRITICAL
MAJOR
MINOR
ALARM
RESET
ALARMS
POWER
ON
STA IPM
HOT SWAP
ShMC
STATUS
1
FortiGate-5050 inter-chassis cluster using
redundant FortiGate-5003 modules.
Using two FortiGate-5003 in both chassis provides
redundant inter-chassis communication with no single
point of failure.
USB
1 2 3 4 5 6 7 8
CONSOLE
PWRACC
5
4
3
2
1
ShMC
2
USB
1 2 3 4 5 6 7 8
CONSOLE
PWRACC
USB
1 2 3 4 5 6 7 8
CONSOLE
PWRACC
ETH
O
RS232ZRE0ZRE1ZRE2
E1
1514
SYSTEM
CONSOLE
MANAGEMENT
USB
CONSOLE
PWRACC
1312
E2
1 2 3 4 5 6 7 8
PWRACC
5
4
PWRACC
3
PWRACC
ETH
O
2
MANAGEMENT
ETH
O
1
MANAGEMENT
ShMC
2
OKCLK
INTEXT
FLT
9876543210
1110
HOT SWAP
RESET
ZRE
FLT
CRITICAL
MAJOR
MINOR
ALARM
RESET
ALARMS
USB
1 2 3 4 5 6 7 8
CONSOLE
USB
1 2 3 4 5 6 7 8
CONSOLE
USB
1 2 3 4 5 6 7 8
CONSOLE
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
STA IPM
STA IPM
STA IPM
LED MODE
STA IPM
HOT SWAP
ShMC
STATUS
1
E1
9876543210
1514
1312
1110
E2
E1
9876543210
1514
1312
1110
E2
FortiGate inter-chassis cluster using a single
FortiGate-5003 module
Using the FortiGate-5003 for intercommunications
provides inter-chassis HA links.
POWER
ON
USB
1 2 3 4 5 6 7 8
CONSOLE
PWRACC
STA IPM
STA IPM
STA IPM
OKCLK
INTEXT
FLT
HOT SWAP
RESET
ZRE
LED MODE
FLT
OKCLK
INTEXT
FLT
HOT SWAP
RESET
ZRE
FLT
CRITICAL
MAJOR
MINOR
ALARM
RESET
ALARMS
POWER
ON
LED MODE
HOT SWAP
ShMC
STATUS
1
5
4
3
2
1
ShMC
2
CONSOLE
PWRACC
CONSOLE
PWRACC
ETH
O
MANAGEMENT
ETH
O
MANAGEMENT
USB
1 2 3 4 5 6 7 8
USB
1 2 3 4 5 6 7 8
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
RS232ZRE0ZRE1ZRE2
SYSTEM
CONSOLE
STA IPM
STA IPM
E1
1514
1312
E2
E1
1514
1312
E2
STA IPM
OKCLK
INTEXT
FLT
9876543210
1110
HOT SWAP
RESET
ZRE
LED MODE
FLT
OKCLK
INTEXT
FLT
9876543210
1110
HOT SWAP
RESET
ZRE
FLT
CRITICAL
MAJOR
MINOR
ALARM
RESET
ALARMS
POWER
ON
LED MODE
HOT SWAP
ShMC
STATUS
1
Loading...