INSTALL GUIDE
FortiGate-3000 and
FortiGate-3600
FortiOS 3.0MR4
www.fortinet.com
FortiGate-3000 and FortiGate-3600 Install Guide
!
FortiOS 3.0MR4
15 February 2007
01-30004-0270-20070215
© Copyright 2007 Fortinet, Inc. All rights reserved. No part of this
publication including text, examples, diagrams or illustrations may be
reproduced, transmitted, or translated in any form or by any means,
electronic, mechanical, manual, optical or otherwise, for any purpose,
without prior written permission of Fortinet, Inc.
Trademarks
Dynamic Threat Prevention System (DTPS), APSecure, FortiASIC,
FortiBIOS, FortiBridge, FortiClient, FortiGate, FortiGate Unified Threat
Management System, FortiGuard, FortiGuard-Antispam, FortiGuardAntivirus, FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiAnalyzer,
FortiManager, Fortinet, FortiOS, FortiPartner, FortiProtect, FortiReporter,
FortiResponse, FortiShield, FortiVoIP, and FortiWiFi are trademarks of
Fortinet, Inc. in the United States and/or other countries. The names of
actual companies and products mentioned herein may be the trademarks
of their respective owners.
Regulatory compliance
FCC Class A Part 15 CSA/CUS
Caution: Risk of Explosion if Battery is replaced by an Incorrect Type.
Dispose of Used Batteries According to the Instructions.
Contents
Contents
Contents.............................................................................................. 3
Introduction ........................................................................................ 7
About the FortiGate units ................................................................................. 7
FortiGate-3000 .............................................................................................. 7
FortiGate-3600 .............................................................................................. 8
Register your FortiGate unit .......................................................................... 8
Fortinet Family Products .................................................................................. 8
FortiGuard Subscription Services ................................................................. 8
FortiClient...................................................................................................... 9
FortiMail ........................................................................................................ 9
FortiAnalyzer ................................................................................................. 9
FortiReporter ................................................................................................. 9
FortiBridge................................................................................................... 10
FortiManager............................................................................................... 10
About this document....................................................................................... 10
Document conventions................................................................................ 10
Typographic conventions...................................................................... 11
FortiGate documentation ................................................................................ 11
Fortinet Tools and Documentation CD ........................................................ 12
Fortinet Knowledge Center ......................................................................... 12
Comments on Fortinet technical documentation......................................... 12
Customer service and technical support ...................................................... 13
Installing the FortiGate unit ............................................................ 15
Package Contents............................................................................................ 15
FortiGate-3000 ............................................................................................ 15
Mounting ............................................................................................... 16
FortiGate-3600 ............................................................................................ 16
Mounting ............................................................................................... 17
Air Flow ....................................................................................................... 17
Mechanical loading ..................................................................................... 17
Powering on the FortiGate unit ...................................................................... 17
Powering off the FortiGate unit ................................................................... 19
Connecting the FortiGate unit ........................................................................ 19
Web-based manager................................................................................... 19
Front control buttons and LCD .................................................................... 19
Command line interface .............................................................................. 19
Connecting to the web-based manager ...................................................... 20
Connecting to the web-based manager using port 1 ............................ 20
Connecting to the web-based manager using the internal interface..... 21
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 3
Contents
System Dashboard ............................................................................... 22
Connecting to the CLI ................................................................................. 22
LCD front control buttons............................................................................... 23
Using the front control buttons and LCD ..................................................... 23
Factory defaults ............................................................................... 25
Factory default NAT/Route mode network configuration ............................ 26
Factory default Transparent mode network configuration........................... 27
Factory default firewall configuration .......................................................... 27
Factory default protection profiles............................................................... 28
Restoring the default settings........................................................................ 28
Restoring the default settings using the web-based manager .................... 29
Restoring the default settings using the CLI ............................................... 29
Configuring the FortiGate unit........................................................ 31
Planning the FortiGate configuration ............................................................ 31
NAT/Route mode ........................................................................................ 31
NAT/Route mode with multiple external network connections .................... 32
Transparent mode....................................................................................... 33
Preventing the public FortiGate interface from responding to ping requests
34
NAT/Route mode installation ......................................................................... 35
Preparing to configure the FortiGate unit in NAT/Route mode ................... 35
DHCP or PPPoE configuration ................................................................... 36
Using the web-based manager ................................................................... 37
Configuring basic settings .................................................................... 37
Adding a default route .......................................................................... 38
Verifying the web-based manager configuration .................................. 38
Verify the connection ............................................................................ 38
Using the front control buttons and LCD ..................................................... 38
Adding a default gateway using the LCD ............................................. 39
Verifying the front control buttons and LCD configuration .................... 40
Verify the connection ............................................................................ 40
Using the command line interface............................................................... 40
Configuring the FortiGate unit to operate in NAT/Route mode............. 40
Adding a default route .......................................................................... 42
Verifying the CLI configuration ............................................................. 42
Verify the connection ............................................................................ 42
Connecting the FortiGate unit to the network(s) ......................................... 43
Configuring the networks ............................................................................ 43
Transparent mode installation ....................................................................... 44
Preparing to configure Transparent mode .................................................. 44
Using the web-based manager ................................................................... 44
Using the front control buttons and LCD ..................................................... 45
Adding a default gateway using the LCD ............................................. 46
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
4 01-30004-0270-20070215
Contents
Verifying the front control buttons and LCD configuration .................... 46
Verify connection .................................................................................. 46
Using the command line interface............................................................... 46
Reconnecting to the web-based manager ............................................ 47
Connecting the FortiGate unit to your network............................................ 47
Verify the connection ............................................................................ 48
Next steps......................................................................................................... 48
Set the date and time .................................................................................. 48
Updating antivirus and IPS signatures ........................................................ 49
Updating antivirus and IPS signatures from the web-based manager.. 50
Updating the IPS signatures from the CLI ............................................ 50
Scheduling antivirus and IPS updates .................................................. 50
Adding an override server..................................................................... 51
FortiGate Firmware .......................................................................... 53
Upgrading to a new firmware version............................................................ 53
Upgrading the firmware using the web-based manager ............................. 53
Upgrading the firmware using the CLI......................................................... 54
Reverting to a previous firmware version ..................................................... 55
Reverting to a previous firmware version using the web-based manager .. 55
Reverting to a previous firmware version using the CLI.............................. 56
Installing firmware images from a system reboot using the CLI ................ 57
Restoring the previous configuration........................................................... 59
Testing a new firmware image before installing it........................................ 60
Index.................................................................................................. 63
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 5
Contents
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
6 01-30004-0270-20070215
Introduction About the FortiGate units
Introduction
Welcome and thank you for selecting Fortinet products for your real-time network
protection.
The FortiGate™ Unified Threat Management System improves network security,
reduces network misuse and abuse, and helps you use communications
resources more efficiently without compromising the performance of your
network. FortiGate Unified Threat Management Systems are ICSA-certified for
firewall, IPSec, and antivirus services.
The FortiGate Unified Threat Management Systemis a dedicated, easily managed
security device that delivers a full suite of capabilities, which include:
• application-level services such as virus protection and content filtering
• network-level services such as firewall, intrusion detection, VPN and traffic
shaping
The FortiGate Unified Threat Management System uses Fortinet’s Dynamic
Threat Prevention System (DTPS™) technology, which leverages breakthroughs
in chip design, networking, security and content analysis. The unique ASIC-based
architecture analyzes content and behavior in real-time, enabling key applications
to be deployed right at the network edge where they are most effective at
protecting your networks.
About the FortiGate units
The FortiGate-3000 and FortiGate-3600 provides carrier-class levels of
performance and reliability demanded by large enterprises and service providers.
Both the FortiGate-3000 and FortiGate-3600 meet the needs of the most
demanding applications, including redundant power supplies to minimize
single-point failures. The easy management of both units is a natural choice for
managed service offerings.
FortiGate-3000
The FortiGate-3000
provides the
carrier-class levels of
performance and
reliability demanded
by large enterprises
and service providers.
The unit uses multiple CPUs and FortiASIC chips to deliver a throughput of
3Gbps, meeting the needs of the most demanding applications. The
FortiGate-3000 includes redundant power supplies to minimize single-point
failures, including load-balanced operation and redundant failover with no
interruption in service. The high capacity, reliability, and easy management of the
FortiGate-3000 makes it a natural choice for managed service offerings.
Esc Enter
POWER
12
Hi-Temp
INT
4/HA
123 4/HA INTERNAL EXTERNAL
3
EXT
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 7
Fortinet Family Products Introduction
FortiGate-3600
The FortiGate-3600 provides
carrier-class levels of
performance and reliability
demanded by large
Esc Enter
2
1
3 4 5/HA
POWER
Hi-Temp 4
INTERNAL EXTERNAL
12
3
5/HA
EXT
INT
enterprises and service
providers. The unit uses
multiple CPUs and
FortiASIC chips to deliver throughput of 4Gbps, meeting the needs of the most
demanding applications. The FortiGate-3600 includes redundant power supplies,
which minimize single-point failures, and supports load-balanced operation. The
high-capacity, reliability and easy management makes the FortiGate-3600 a
natural choice for managed service offerings.
Register your FortiGate unit
After installing a new FortiGate unit, register the unit by visiting
http://support.fortinet.com and select Product Registration.
To register, enter your contact information and the serial numbers of the FortiGate
units that you or your organization have purchased. You can register multiple
FortiGate units in a single session without re-entering your contact information.
By registering your FortiGate unit, you will receive updates to threat detection and
prevention databases (Antivirus, Intrusion Detection, etc.) and will also ensure
your access to technical support.
Fortinet Family Products
Fortinet offers a family of products that includes both software and hardware
appliances, for a complete network security solution including mail, logging,
reporting, network management, and security along with FortiGate Unified Threat
Management Systems. For more information on the Fortinet product family, go to
www.fortinet.com/products.
FortiGuard Subscription Services
FortiGuard Subscription Services are security services created, updated and
managed by a global team of Fortinet security professionals. They ensure the
latest attacks are detected and blocked before harming your corporate resources
or infecting your end-user computing devices. These services are created with the
latest security technology and designed to operate with the lowest possible
operational costs.
FortiGuard Subscription Services includes:
• FortiGuard Antivirus Service
• FortiGuard Intrusion Prevention subscription services (IPS)
• FortiGuard Web Filtering
• FortiGuard Antispam Service
• FortiGuard Premier Service
An online virus scanner and virus encyclopedia is also available for your
reference.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
8 01-30004-0270-20070215
Introduction Fortinet Family Products
FortiClient
FortiClient™ Host Security software provides a secure computing environment for
both desktop and laptop users running the most popular Microsoft Windows
operating systems. FortiClient offers many features including:
• creating VPN connections to remote networks
• configuring real-time protection against viruses
• guarding against modification of the Windows registry
• virus scanning
FortiClient also offers a silent installation feature, enabling an administrator to
efficiently distribute FortiClient to several users’ computers with preconfigured
settings.
FortiMail
FortiMail™ Secure Messaging Platform provides powerful, flexible heuristic
scanning and reporting capabilities to incoming and outgoing email traffic. The
FortiMail unit has reliable, high performance features for detecting and blocking
malicious attachments such as Distributed Checksum Clearinghouse (DCC)
scanning and Bayesian scanning. Built on Fortinet’s award winning FortiOS and
FortiASIC technology, FortiMail antivirus technology extends full content
inspection capabilities to detect the most advanced email threats.
FortiAnalyzer
FortiReporter
FortiAnalyzer™ provides network administrators with the information they need to
enable the best protection and security for their networks against attacks and
vulnerabilities. The FortiAnalyzer unit features include:
• collects logs from FortiGate] devices and syslog devices
• creates hundreds of reports using collected log data
• scans and reports vulnerabilities
• stores files quarantined from a FortiGate unit
The FortiAnalyzer unit can also be configured as a network analyzer to capture
real-time traffic on areas of your network where firewalls are not employed. You
can also use the unit as a storage device where users can access and share files,
including the reports and logs that are saved on the FortiAnalyzer hard disk.
FortiReporter™ Security Analyzer software generates easy-to-understand reports
and can collect logs from any FortiGate unit, as well as over 30 network and
security devices from third-party vendors. FortiReporter reveals network abuse,
manages bandwidth requirements, monitors web usage, and ensures employees
are using the office network appropriately. FortiReporter allows IT administrators
to identify and respond to attacks, including identifying ways to proactively secure
their networks before security threats arise.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 9
About this document Introduction
!
FortiBridge
FortiBridge™ products are designed to provide enterprise organizations with
continuous network traffic flow in the event of a power outage or a FortiGate
system failure. The FortiBridge unit bypasses the FortiGate unit to make sure that
the network can continue processing traffic. FortiBridge products are easy to use
and deploy, and you can customize the actions a FortiBridge unit takes when a
power failure or a FortiGate system failure occurs.
FortiManager
The FortiManager™ system is designed to meet the needs of large enterprises
(including managed security service providers) responsible for establishing and
maintaining security policies across many dispersed FortiGate installations. With
this system, you can configure multiple FortiGate devices and monitor their status.
You can also view real-time and historical logs for the FortiGate devices, including
updating firmware images of managed FortiGate devices. The FortiManager
System emphasizes ease of use, including easy integration with third party
systems.
About this document
This document explains how to install and configure your FortiGate unit onto your
network. This document also includes how to install and upgrade new firmware
versions on your FortiGate unit.
This document contains the following chapters:
• Installing the FortiGate unit – Describes setting up and powering on a
FortiGate unit.
• Factory defaults – Provides the factory default settings for the FortiGate unit.
• Configuring the FortiGate unit – Provides an overview of the operating modes
of the FortiGate unit and how to integrate the FortiGate unit into your network.
• FortiGate Firmware – Describes how to install, update, restore and test
firmware for the FortiGate device.
Document conventions
The following document conventions are used in this guide:
• In the examples, private IP addresses are used for both private and public IP
addresses.
• Notes and Cautions are used to provide important information:
Note: Highlights useful additional information.
Caution: Warns you about commands or procedures that could have unexpected or
undesirable results including loss of data or damage to equipment.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
10 01-30004-0270-20070215
Introduction FortiGate documentation
Typographic conventions
FortiGate documentation uses the following typographical conventions:
Convention Example
Keyboard input In the Gateway Name field, type a name for the remote VPN
Code examples config sys global
CLI command syntax config firewall policy
Document names FortiGate Administration Guide
Menu commands Go to VPN > IPSEC > Phase 1 and select Create New.
Program output Welcome!
Varia bles
peer or client (for example, Central_Office_1).
set ips-open enable
end
edit id_integer
set http_retry_count <retry_integer>
set natip <address_ipv4mask>
end
<address_ipv4>
FortiGate documentation
The most up-to-date publications and previous releases of Fortinet product
documentation are available from the Fortinet Technical Documentation web site
at http://docs.forticare.com.
The following FortiGate product documentation is available:
• FortiGate QuickStart Guide
Provides basic information about connecting and installing a FortiGate unit.
• FortiGate Install Guide
Describes how to install a FortiGate unit. Includes a hardware reference,
default configuration information, installation procedures, connection
procedures, and basic configuration procedures. Choose the guide for your
product model number.
• FortiGate Administration Guide
Provides basic information about how to configure a FortiGate unit, including
how to define FortiGate protection profiles and firewall policies; how to apply
intrusion prevention, antivirus protection, web content filtering, and spam
filtering; and how to configure a VPN.
• FortiGate online help
Provides a context-sensitive and searchable version of the Administration
Guide in HTML format. You can access online help from the web-based
manager as you work.
• FortiGate CLI Reference
Describes how to use the FortiGate CLI and contains a reference to all
FortiGate CLI commands.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 11
FortiGate documentation Introduction
• FortiGate Log Message Reference
Available exclusively from the Fortinet Knowledge Center, the FortiGate Log
Message Reference describes the structure of FortiGate log messages and
provides information about the log messages that are generated by FortiGate
units.
• FortiGate High Availability User Guide
Contains in-depth information about the FortiGate high availability feature and
the FortiGate clustering protocol.
• FortiGate IPS User Guide
Describes how to configure the FortiGate Intrusion Prevention System settings
and how the FortiGate IPS deals with some common attacks.
• FortiGate IPSec VPN User Guide
Provides step-by-step instructions for configuring IPSec VPNs using the webbased manager.
• FortiGate SSL VPN User Guide
Compares FortiGate IPSec VPN and FortiGate SSL VPN technology, and
describes how to configure web-only mode and tunnel-mode SSL VPN access
for remote users through the web-based manager.
• FortiGate PPTP VPN User Guide
Explains how to configure a PPTP VPN using the web-based manager.
• FortiGate Certificate Management User Guide
Contains procedures for managing digital certificates including generating
certificate requests, installing signed certificates, importing CA root certificates
and certificate revocation lists, and backing up and restoring installed
certificates and private keys.
• FortiGate VLANs and VDOMs User Guide
• Describes how to configure VLANs and VDOMS in both NAT/Route and
Transparent mode. Includes detailed examples.
Fortinet Tools and Documentation CD
All Fortinet documentation is available from the Fortinet Tools and Documentation
CD shipped with your Fortinet product. The documents on this CD are current at
shipping time. For up-to-date versions of Fortinet documentation see the Fortinet
Technical Documentation web site at http://docs.forticare.com.
Fortinet Knowledge Center
Additional Fortinet technical documentation is available from the Fortinet
Knowledge Center. The knowledge center contains troubleshooting and how-to
articles, FAQs, technical notes, and more. Visit the Fortinet Knowledge Center at
http://kc.forticare.com.
Comments on Fortinet technical documentation
Please send information about any errors or omissions in this document, or any
Fortinet technical documentation, to techdoc@fortinet.com.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
12 01-30004-0270-20070215
Introduction Customer service and technical support
Customer service and technical support
Fortinet Technical Support provides services designed to make sure that your
Fortinet systems install quickly, configure easily, and operate reliably in your
network.
Please visit the Fortinet Technical Support web site at http://support.fortinet.com
to learn about the technical support services that Fortinet provides.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 13
Customer service and technical support Introduction
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
14 01-30004-0270-20070215
Installing the FortiGate unit Package Contents
Installing the FortiGate unit
This section provides information on installing and setting up the FortiGate unit on
your network. This section includes the following topics:
• Package Contents
• Air Flow
• Mechanical loading
• Powering on the FortiGate unit
• Connecting the FortiGate unit
Package Contents
Review the contents of your FortiGate package to ensure all components were
included.
FortiGate-3000
The FortiGate-3000 package contains the following items:
• FortiGate-3000 Unified Threat Management System
• one orange crossover Ethernet cable (Fortinet part number CC300248)
• one gray straight-through Ethernet cable (Fortinet part number CC300249)
• one null-modem cable (Fortinet part number CC300247)
• two 19-inch rack mount brackets
• two power cables
• FortiGate-3000 QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 1: FortiGate-3000 package contents
Front
POWER
12
LCD
Display
Esc Enter
Control
Buttons
Hi-Temp
INT
4/HA
123 4/HA INTERNAL EXTERNAL
1, 2, 3, 4/HA
Interface
Internal
Interface
External
Interface
Back
3
EXT
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Null-Modem Cable
(RS-232)
Power Cables (2)
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 15
RS-232 Serial
Connection
Power
Connections
Power
Supply
LEDs
Rack-Mount Brackets
USER MANUAL
Documentation
FortiGate-3000
Esc Enter
123 4/HA INTERNAL EXTERNAL
QuickStart Guide
Copyright 2003 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
POWER
12
3
4/HA
INT
Hi-Temp
EXT
Package Contents Installing the FortiGate unit
Mounting
The FortiGate-3000 unit can be mounted in a standard 19-inch rack. It requires
2 U of vertical space in the rack. The FortiGate-3000 unit can also be installed as
a free-standing appliance on any stable surface.
Table 1: Technical Specifications
Dimensions 16.75 x 13.5 x 3.5 in. (42.7 x 33 x 8.9 cm)
Weight 17.5 lb. (8 kg)
Power
requirements
Environmental
Specifications
Power dissipation: 360W (max.)
AC input voltage: 100 to 240 VAC
AC input current: 6A
Frequency: 50 to 60Hz
• The FortiGate-3000 unit may overload your supply circuit and impact
your overcurrent protection and supply wiring. Use appropriate
equipment nameplate ratings to address this concern.
• Make sure the FortiGate-3000 unit has reliable grounding. Fortinet
recommends direct connection to the branch circuit.
Operating temperature: 32 to 104 F (0 to 40 C)
Storage temperature: -13 to 158 F (-25 to 70 C)
Humidity: 5 to 95% non-condensing
FortiGate-3600
• FortiGate-3600 Unified Threat Management System
• one orange crossover Ethernet cable (Fortinet part number CC300248)
• one gray regular Ethernet cable (Fortinet part number CC300249)
• one null-modem cable (Fortinet part number CC300247)
• two 19-inch rack mount brackets
• two power cables
• FortiGate-3600 QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 2: FortiGate-3600 package contents
Front
POWER
12
3
5/HA
Hi-Temp 4
Hot Swappable
Power Supplies
INT
INTERNAL EXTERNAL
External
Interface
Redundant
EXT
Power
Supply
LEDs
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Rack-Mount Brackets
USER MANUAL
Null-Modem Cable
(RS-232)
Power Cables (2)
FortiGate-3600
Esc Enter
12345/HA
QuickStart Guide
Copyright 2003 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
Documentation
LCD
Display
Esc Enter
Control
Buttons
Redundant
Hot-Swappable
Fan Assemblies
1
Back
RS-232 Serial
Connection
2
3 4 5/HA
1, 2, 3, 4, 5/HA
Interfaces
Alarm
Cancel
Button
Internal
Interface
12
POWER
3
Hi-Temp 4
5/HA
INT
EXT
INTERNALEXTERNAL
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
16 01-30004-0270-20070215
Installing the FortiGate unit Powering on the FortiGate unit
Mounting
The FortiGate-3600 unit can be mounted in a standard 19-inch rack. It requires
2 U of vertical space in the rack. The FortiGate-3600 unit can also be installed as
a free-standing appliance on any stable surface.
Table 2: Technical Specifications
Dimensions 16.75 x 13.5 x 3.5 in. (42.7 x 33 x 8.9 cm)
Weight 17.5 lb. (8 kg)
Power
requirements
Environmental
Specifications
Power dissipation: 460W (max.)
AC input voltage: 100 to 240 VAC
AC input current: 6A
Frequency: 50 to 60Hz
• The FortiGate-3600 unit may overload your supply circuit and impact
your overcurrent protection and supply wiring. Use appropriate
equipment nameplate ratings to address this concern.
• Make sure the FortiGate-3600 unit has reliable grounding. Fortinet
recommends direct connection to the branch circuit.
Operating temperature: 32 to 104 F (0 to 40 C)
Storage temperature: -13 to 158 F (-25 to 70 C)
Humidity: 5 to 95% non-condensing
Air Flow
• For rack installation, make sure the amount of air flow required for safe
operation of the FortiGate unit is not compromised.
• For free-standing installation, make sure the FortiGate unit has at least 1.5 in.
(3.75 cm) of clearance on each side to allow for adequate air flow and cooling.
• If you install the FortiGate unit in a closed or multi-rack assembly, the
operating ambient temperature of the rack environment may be greater than
room ambient. Make sure the operating ambient temperature does not exceed
the manufacturer’s maximum rated ambient temperature.
Mechanical loading
For rack installation, make sure the mechanical loading of the FortiGate unit is
evenly distributed to avoid a hazardous condition.
Powering on the FortiGate unit
The FortiGate unit does not have an on/off switch.
To power on the FortiGate unit
1 Connect the power cables to the power connections on the back of the FortiGate
unit.
2 Connect the power cables to power outlets.
Each power cable should be connected to a different power source. If one power
source fails, the other may still be operative.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 17
Powering on the FortiGate unit Installing the FortiGate unit
After a few seconds, SYSTEM STARTING appears on the LCD.
The main menu setting appears on the LCD when the system is running.
Menu [ Fortigat -> ]
NAT, Standalone
The FortiGate unit starts and the Power LEDs light up.
Table 3: LED indicators
LED State Description
Power Green The FortiGate unit is powered on.
Off The FortiGate unit is powered off.
1, 2, 3, 4,
4/HA, 5/HA,
INT, EXT
1, 2, 3
(Interfaces)
(10/100
Interface)
Internal
External
(gigabit copper
Interfaces)
4/HA
(Interface)
Green The correct cable is in use, and the connected equipment has
Flashing
green
Off No link established.
Green The correct cable is in use, and the connected equipment has
Flashing
Green
Green The interface is connected at 100 Mbps.
Off No link established.
Amber The correct cable is in use, and the connected equipment has
Flashing
amber
Green The interface is connected at 1000 Mbps.
Off No link established.
power.
Network activity at this interface.
power.
Network activity at this interface.
power.
Network activity at this interface.
Note: If only one power supply is connected, an audible alarm sounds to indicate a failed
power supply. Press the red alarm cancel button on the rear panel next to the power supply
to stop the alarm.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
18 01-30004-0270-20070215
Installing the FortiGate unit Connecting the FortiGate unit
Powering off the FortiGate unit
Always shut down the FortiGate operating system properly before turning off the
power switch to avoid potential hardware problems.
To power off the FortiGate unit
1 From the web-based manager, go to System > Status.
2 In the Unit Operation display, select Shutdown, or from the CLI enter:
execute shutdown
3 Disconnect the power cables from the power supply.
Connecting the FortiGate unit
There are three methods of connecting and configuring the basic FortiGate
settings:
• the web-based manager
• the front control buttons and LCD
• the command line interface (CLI)
Web-based manager
You can configure and manage the FortiGate unit using HTTP or a secure HTTPS
connection from any computer running Microsoft Internet Explorer 6.0 or recent
browser. The web-based manager supports multiple languages.
Use the web-based manager to configure most FortiGate settings, and monitor
the status of the FortiGate unit.
Front control buttons and LCD
You can use the front control buttons and LCD on the FortiGate unit to configure
IP addresses, default gateways and switch operating modes. The LCD shows you
what mode you are in without having to go to the command line interface or the
web-based manager. For more information on the front control buttons and LCD,
see “LCD front control buttons” on page 23.
Command line interface
You can access the FortiGate command line interface (CLI) by connecting a
management computer serial port to the FortiGate serial console connector. You
can also use Telnet or a secure SSH connection to connect to the CLI from any
network that is connected to the FortiGate unit, including the Internet.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 19
Connecting the FortiGate unit Installing the FortiGate unit
Connecting to the web-based manager
Use the following procedure to connect to the web-based manager for the first
time. Configuration changes made with the web-based manager are effective
immediately, without resetting the firewall or interrupting service.
To connect to the web-based manager, you require:
• a computer with an Ethernet connection
• Microsoft Internet Explorer version 6.0 or higher or any recent version of the
most popular web browser
• a crossover Ethernet cable or an Ethernet hub and two Ethernet cables
Note: Before starting Internet Explorer, (or any recent version of the most popular web
browser), ping to your FortiGate unit to see if the connection between the computer and the
FortiGate unit is working properly.
Connecting to the web-based manager using port 1
You can use the port 1 interface to connect to the web-based manager. The port 1
interface can be used as an optional interface on the FortiGate-3000 when there
is no optical network to connect to the internal interface.
To connect to the web-based manager using port 1
1 Connect to the FortiGate-3000 command line interface (CLI). See “Connecting to
the CLI” on page 22.
2 Set the IP address and netmask of Port 1 to an IP address you can connect to a
computer with an Ethernet connection, and set the administrative access to
HTTPS.
config system interface
edit port1
set ip <address_ip> <netmask>
set allowaccess https
end
Example
To set the IP address of Port 1 to 192.168.20.99 and netmask to 255.255.255.0
and set administrative access to HTTPS, enter:
config system interface
edit port1
set ip 192.168.20.99. 255.255.255.0
set allowaccess https
end
3 Set the IP address of the computer with an Ethernet connection to a static IP
address on the same subnet as Port 1.
4 Using the crossover cable (or the Ethernet hub and cables), connect Port 1 of the
FortiGate unit to the computer Ethernet connection.
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
20 01-30004-0270-20070215
Loading...