Fortinet FortiLog FortiLog-800 Quick Start Manual

Internet
Back
Ethernet Network
Connections
SCSI Connector
For Tape Drive For Future Use
Serial
Connection
ATX Redundant Power Supplies
Power Connection
Power Switch
Front
LCD
Panel
Hard Disk
LEDs
Setting
Switches
A and B
LED indicators:
Power, Error, Network,
and Disk Access
Hard Disk
LEDs
Rack-Mount
Brackets
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Documentation
FortiLog-800
QuickStart Guide
Copyright 2005 Fortinet Incorporated. All rights reserved. Trademarks Products mentioned in this document are trademarks.
Power Cable
Null-Modem Cable
(RS-232)
Straight-through Ethernet cable connects to hub or switch on the network
Null modem cable connects to serial port on management computer
Power cable connects to power outlet
FortiLog-800
Connector Type Speed Protocol Description
Ports 1 and 2 RJ-45 10/100/1000Base-T Ethernet Connection to the network.
CONSOLE DB-9 9600 bps RS-232
serial
Connection to the management computer. Provides access to the command line interface (CLI).
FortiLog unit LED Indicators
Light Icon Description
The FortiLog power indicator. The FortiLog unit is powered on when the light is on.
Warning light. The light is on when a system or hardware malfunction occurs.
Network activity. The light flashes as network activity is occurring on the FortiLog unit.
Hard disk activity. The light flashes as log packets are written to the FortiLog hard disk, and when the FortiLog unit access the hard disk to generate reports.
Check that the package contents are complete.
QuickStart Guide
Checking the package contents
1
Things you need to know before installing the FortiLog unit.
You can add the FortiLog unit to your local FortiGate network to receive log messages from your local FortiGate units. You can also connect the FortiLog unit to the FortiGate units remotely through the Internet or using FortiManager. To connect the FortiLog unit to the FortiGate units remotely, you must configure the DNS server and the default gateway. To manage the FortiLog unit, you can use a computer within the local network or over the Internet.
Factory Defaults
Administrator account
User name: admin
Password: (none)
LAN 1
IP: 192.168.1.99
Netmask: 255.255.255.0
Management Access: ping, https, ssh, http
LAN 2
IP: 192.168.2.99
Netmask: 255.255.255.0
Management Access: ping, https, ssh, http
Planning the installation
2
Connecting the FortiLog unit
3
Connect the FortiLog unit to a power outlet and to the network hub or switch .
• Place the FortiLog unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance on each side to allow for cooling.
• Make sure the power is not plugged into the wall before connecting the power cable.
• The Status light flashes while the unit is starting up and remains lit when the system is up and running.
© Copyright 2005 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks or registered trademarks of their respective holders.
Regulatory Compliance
FCC Class A Part 15, CE, and UL 09 September 2005
For technical support please visit http://www.fortinet.com.
FortiLog-800
05-30000-0224-20050909
Adding an administration password
By default, the admin user does not have a password. To restrict access to the FortiLog unit management account, add a password for the admin user account.
To add the admin user account password
1. In the web-based manager, go to System > Config > Admin.
2. For the admin user, select the Change Password icon.
3. Enter a new password in the New Password box. Reenter it in the Confirm Password box.
4. Select OK.
Congratulations! You have set up the FortiLog unit and finished configuring the basic settings.
For more information
7
Technical documentation
The most up-to-date publications and previous releases of Fortinet product documentation are available from the Fortinet Technical Documentation web
site at http://docs.forticare.com.
Fortinet Knowledge Center
The knowledge center contains short how-to articles, FAQs, technical notes, product and feature guides, and much more. Visit the Fortinet Knowledge Center at
http://kc.forticare.com.
Technical support
Fortinet Technical Support Web site:
http://support.fortinet.com
Fortinet email support:
amer_support@fortinet.com For customers in the United States, Canada,
Mexico, Latin America and South America.
apac_support@fortinet.com For customers in Japan, Korea, China, Hong Kong,
Singapore, Malaysia, all other Asian countries, and Australia.
eu_support@fortinet.com For customers in the United Kingdom, Scandinavia,
Mainland Europe, Africa, and the Middle East.
Using the web-based manager
Use the following procedure to connect to the web-based manager for the first time. Configuration changes made with the web-based manager are effective immediately without resetting the FortiLog unit or interrupting service.
To connect to the web-based manager, you need:
• An Ethe rnet connection between the FortiLog unit and management computer.
• Internet Explorer version 6.0 or higher, or recent browser such as FireFox on the management computer.
To connect to the web-based manager
1. Connect the LAN 1 interface of the FortiLog unit to Ethernet port of the management computer.
Use a cross-over Ethernet cable to connect the devices directly. Use straight-through Ethernet cables to connect the devices through a hub or switch.
2. Configure the management computer to be on the same subnet as the FortiLog LAN interface.
To do this, change the IP address of the management computer to 192.168.1.2 and the netmask to 255.255.255.0.
3. To access the FortiLog web-based manager, in your browser, go to https://
192.168.1.99 (remember to include the “s” in https://).
4. Type
admin
in the Name field and select Login.
After connecting to the Web-based manager, you can configure the FortiLog unit IP address, DNS server IP address, and default gateway to connect the FortiLog unit to the network.
To configure interfaces
1. Go to System > Network > Interface.
2. Select the edit icon for each interface to configure.
3. Set the IP address and netmask for the interface.
4. Select OK.
To configure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > DNS, enter the Primary and Secondary DNS IP addresses select Apply.
To configure a Default Gateway
1. Go to System > Network > Routing and select Create New.
2. Set Gateway to the Default Gateway IP address and select OK.
Use these procedures if you experience problems operating the FortiLog unit.
Restarting the FortiLog Unit
5
Should you mistakenly change a network setting and cannot connect to the unit, reboot the unit and try again or to set the unit back to factory defaults and start over again.
To use the web-based manager procedures
1. Go to System > Dashboard.
2. For the System Operation list, do one of the following:
• Select Restart to reboot the unit.
• Select Reset to factory default to restore the factory default configuration.
To use the CLI
1. Restart the unit:
execute reboot
2. Restore factory default configuration:
execute factoryreset
The FortiLog-800 has serial port. Use the null modem cable to connect it to your management computer.
To connect to the FortiLog-800 unit
1. Use a null modem cable to connect the FortiLog serial port to the management computer serial port.
2. Start a terminal emulation program (such as HyperTerminal) on the management computer. Use these settings: Baud Rate 9600, Data bits 8, Parity None, Stop bits 1, Flow Control None.
3. At the login: prompt, type admin and press Enter twice. (The
login
prompt is preceded by the server IP address.)
After connecting to the CLI, you can configure the FortiLog unit IP address, DNS server IP address, and default gateway to connect the FortiLog unit to the network.
To configure the FortiLog unit using the CLI
1. Set the IP address and netmask of the LAN interface:
set system interface port1 mode static ip <IP_address> <netmask>
2. Confirm that the address is correct:
get system interface
3. Set the primary DNS server IP address:
set system dns primary <IP_address>
4. Optionally set the secondary DNS server IP address:
set system dns secondary <IP_address>
5. Set the default gateway:
set system route number <route_no> dst 0.0.0.0 0.0.0.0 gw1 <gw_ip>
Using the CLI
Use the web-based manager or the Command Line Interface (CLI) to configure the FortiLog unit IP address, netmask, DNS server IP address, and default gateway IP address. Remember to change the password.
Configuring the FortiLog unit
4
Using the CLI
Use these procedures when turning off the FortiLog unit.
Shutting down the FortiLog Unit
6
When powering off the FortiLog unit, always shut down the unit using the following procedures before disconnecting the power supply. By not following this procedure you risk damaging the FortiLog hard disk.
To power off the FortiLog unit
1. From the web-based manager, go to System > Dashboard.
2. In the System Operation list, select Shut Down and select Go.
From the CLI
Enter
execute shutdown
.
Loading...