Fortinet FortiGate 1000D Bedienungsanleitung

FortiGate 1000D

QuickStart Guide

May 28, 2014

01-503-237227-20140528

FortiCare® and FortiGuard®, and certain other marks are registered

trademarks of Fortinet, Inc., and other Fortinet names herein may also be

registered and/or common law trademarks of Fortinet. All other product

or company names may be trademarks of their respective owners.

Performance and other metrics contained herein were attained in internal

lab tests under ideal conditions, and actual performance and other results

may vary. Network variables, different network environments and other

conditions may affect performance results. Nothing herein represents any

binding commitment by Fortinet, and Fortinet disclaims all warranties,

whether express or implied, except to the extent Fortinet enters a binding

written contract, signed by Fortinet’s General Counsel, with a purchaser

that expressly warrants that the identiﬁed product will perform according

to certain expressly-identiﬁed performance metrics and, in such event,

only the speciﬁc performance metrics expressly identiﬁed in such binding

written contract shall be binding on Fortinet. For absolute clarity, any

such warranty will be limited to performance in the same ideal conditions

as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants,

representations,and guarantees pursuant hereto, whether express or

implied. Fortinet reserves the right to change, modify, transfer, or otherwise

revise this publication without notice, and the most current version of the

publication shall be applicable.

QuickStart Guide

• Technical Support

• New product features

• Protection from new threats

Vous devez enregistrer le produit pour recevoir:

• Support technique

• Nouvelles fonctionnalitées du produit

• Protection contre de nouvelles menaces

La reistrazione ti permette di usufruire di:

• Supporto Tecnico

• Nuove funzionalita

• Proteezione dalle ultime minaccce

Debe registrar el producto para recibir:

• Apoyo técnico

• Nuevas funcionalidades del producto

• Protección contra ataques

登録のお願い

本日、フォーティネット製品の登録をしてください。

登録すると次のメリットがあります。

テクニカルサポート • 新機能の追加 • 新しい脅威への防御

请马上注册

您的飞塔产品

您在注册以后才能得到技术支持、新产品特点信息、最新威胁防护

http://forti.net/support

Toll free: 1 866 648 4638

Phone: 1 408 486 7899

Fax: 1 408 235 7737

Email: [email protected]

Box Includes Before You Begin

Hostname

T1/E1, Static broadband, Cable, or DSL with a static

IP address

Cable Modem DHCP

It is normal to not require a hostname but your ISP may require it.

DSL PPPoE

Username Password

IP Address

Default Gateway

Write down details that you may need from your network administrator or ISP.

Primary/Secondary DNS

Subnet Mask

2 Power Cables Tools and Documentation CD

USB Cable

The FortiGate Cookbook

Console Cable

FortiGate 1000D

3 5

4 6

27 29

28 30

13 15

9 11

14 1610 12

19 21 23

20 22 24

10GSFP+

MGMT1

MGMT2

USB CONSOLE

USBMGMT

STATUS

ALARM

POWER

Ethernet Cable

6 Rubber Feet

22 3

2 Rack-Mount Brackets

QuickStart Guide

FortiGate 1000D

QuickStart Guide

FortiOS 5.0.6

QuickStart Guide Video

http://forti.net/vqsg

https://

544 5

Web-based Manager

1. Connect the Ethernet cable.

2. Visit 192.168.1.99 in your web browser.

3. Login using username “admin” and no password.

4. Click “Wizard” in the top right corner.

5. Conﬁgure your device and save your settings.

6. Register your device from the dashboard page.

Basic Connections

Web Browser with Ethernet cable

MGMT 1 Port

Web Browser

Setup Wizard (p.5) With FortiExplorer (p.6)

FortiExplorer App

Conﬁguration (pp.8-9)

OS X

Terminal Emulation

With console cable (p.7)

FortiGate Setup Options

Connect your device to separate power outlets and an Internet connection. This is

usually a modem, but could also be another device on your network.

Power Connections

Ethernet Port

Internet

766 7

Windows/OS X with USB

Microsoft Windows Install

2. Connect the USB cable and launch

FortiExplorer if it does not appear

automatically.

Mac OS X Install

2. Double-Click the .dmg ﬁle and drag the

FortiExplorer icon to the Applications

folder.

3. Connect the USB cable.

4. Click the FortiExplorer icon to launch the

application.

FortiExplorer Setup Wizard

1. Follow prompts or click “Register” to register your device with FortiCare.

2. Click “Setup Wizard”.

3. Login using username “admin” and no password.

4. Follow Setup Wizard steps.

5. Click “Conﬁgure” to complete the setup of your device.

Terminal Emulation with Console

Cable

To Connect to the CLI

1. Connect the FortiGate unit console port to the management computer using the

provided console cable.

2. Start a terminal emulation program on the management computer. Select the COM

port and use the following settings:

Baud Rate: 9600

Data bits: 8

Parity: None

Stop bits: 1

Flow Control: None

3. Press Enter on your keyboard to connect to the CLI.

4. Login using username “admin” and no password. You can now proceed with

conﬁguring your FortiGate unit.

Get started by typing “?” for a list of available commands.

Begin typing a command and type “?” for a list of available ways to complete.

For example “conﬁg ?” will show the lowest level of conﬁguration options.

For more information, see the reference manual at http://forti.net/cli.

1. Download FortiExplorer from http://forti.net/fexp.

B C

USB MGMT

988 9

http://forti.net/fexp-ios

USB Port

FortiExplorer App

1. Download the iOS FortiExplorer App to your device from http://forti.net/fexp-ios.

2. Use your Apple to USB cable to connect to the USB port.

3. Launch the FortiExplorer App and select the device model.

4. Login using username “admin” and no password.

5. Conﬁgure your device. This version does not have a wizard.

iOS with Apple to USB cable

The FortiGate unit can be placed on any ﬂat surface, or mounted in any standard 19 inch

rack unit with the provided rack-mount brackets and screws.

Please read “Cautions and Warnings” on page 18 prior to installing your device.

To install the FortiGate unit into a rack

1.Ensure that the FortiGate unit is placed on a stable surface

prior to rack-mount installation.

2.Attach the provided rack-mount brackets to the sides of

the unit using the provided screws.

a.If you are installing the unit into a four-post rack, attach

the rack-mount brackets with the handles aligned with the

front of the FortiGate unit.

b. If you are installing the unit into a two-post rack, attach

the rack-mount brackets with the handles aligned with the

middle of the FortiGate unit.

1010 11

Caution:

Electrostatic

discharge (ESD)

can damage

your Fortinet

equipment.

Do not place

heavy objects on

the unit.

To avoid personal

injury or damage

to the unit, it is

recommended

that two or more

people install the

unit into the rack.

Note: If the unit

has a redundant

power supply,

each power

cable should be

connected to a

different power

source. In this

way, if one power

source fails, the

other may still be

operational and

the unit will not

lose power.

1.5in 1.5in

Installation

33. Position the FortiGate unit in the rack. Ensure there is enough room around the unit to

allow for sufﬁcient air ﬂow.

4. Line up the rack-mount bracket holes to the holes on the rack and ensure that the

FortiGate unit is level.

5. Finger tighten four rack-mount screws to attach the unit to the rack.

6. Verify that the spacing around the FortiGate unit conforms to requirements and that

the unit is level, then tighten the rack-mount screws with an appropriate screwdriver.

7. Using the provided power cables, plug the cables into the rear of the unit, and then

into grounded electrical outlets or a separate power sources, such as uninterruptible

power supplies (UPS) or power distribution units (PDU).

To install the unit on a at surface

1. Ensure that the surface onto which the FortiGate unit to be installed is clean, level,

and stable and that there is at least 1.5in (3.8cm) of clearance on all sides to allow for

adequate airﬂow.

2. Attach the provided rubber feet to the bottom of the FortiGate unit.

3. Place the unit in the designated location.

4. Verify that the spacing around the FortiGate unit conforms to requirements and that

the unit is level.

5. Using the provided power cables, plug the cables into the rear of the unit, and then

into grounded electrical outlets or a separate power sources, such as uninterruptible

power supplies (UPS) or power distribution units (PDU).

1212 13

Caution: SFP

transceivers are

static sensitive

devices. Use

an ESD wrist

strap or similar

grounding device

when handling

transceivers.

Do not install

or remove SFP

transceivers while

ﬁber-optic cables

are still attached.

This can cause

damage to the

cables, cable

connectors,

and the optical

interfaces. It may

also prevent the

transceiver from

latching correctly

into the socket

connector.

Note: Installing

and removing

SFP transceivers

can shorten their

useful life. Do not

install or remove

transceivers more

than is necessary.

SFP Cage Sockets

Socket Latch

Transmit Optical Bore

Extraction Lever

Receive Optical Bore

To install the SFP transceivers

1. Ensure that you are properly grounded.

2. Remove the caps from the SFP cage sockets on the front

panel of the unit.

3. Position the SFP transceiver in front of the cage socket

opening and ensure that the transceiver is correctly

oriented. When the transceiver is correctly oriented, the

extraction lever will be level with the socket latch.

Note: SFP cage socket orientation may vary. Ensure that

the SFP transceiver module is correctly oriented

each time that you are inserting a transceiver.

4. Hold the sides of the SFP transceiver and slide it into the

cage socket until it clicks into place.

SFP Transceivers Caution: Do not

force the SFP

transceivers into

the cage slots.

If the transceiver

does not easily

slide in and click

into place, it may

not be aligned

correctly or may

be upside down.

If this happens,

remove the SFP

transceiver, realign

it or rotate it and

slide it in again.

Note: Follow

proper ﬁber-

optic handling

procedures when

installing and

removing

SFP transceivers

to ensure the

devices remain

clean and are not

damaged.

5. Press the transceiver ﬁrmly into the cage socket with your

thumb.

6. Verify that the transceiver is latched correctly by grasping

the sides of the transceiver and trying to pull it out without

lowering the extraction lever.

If the transceiver cannot be removed, it is installed and

latched correctly.

If the transceiver can be removed, reinsert it and press

harder with your thumb.

If necessary, repeat this process until the transceiver is

securely latched into the cage socket.

To remove the SFP transceivers

1. Ensure that you are properly grounded.

2. If applicable, disconnect the ﬁber-optic cable from the

transceiver connector and install a clean dust plug in the

transceiver’s optical bores.

3. Pull the extraction lever out and down to eject the

transceiver. If you are unable to use your ﬁnger to open the

lever, use a small ﬂat-head screwdriver or other similar tool

to open the lever.

4. Hold the sides of the transceiver and carefully pull it away

from the cage socket.

5. Replace the cap on the SFP cage socket and place the

removed SFP transceiver into an antistatic bag.

FortiGate 1000D

3 5

4 6

27 29

28 30

13 15

9 11

14 1610 12

19 21 23

20 22 24

10G SFP+

MGMT 1

MGMT 2

USB CONSOLE

USB MGMT

STATUS

ALARM

POWER

1414 15

Console (RJ-45)

Optional connection to the management

computer. Provides access to the CLI

USB MGMT (USB mini-B)

USB client port for management

SFP Ports 1 - 8 and 17 - 24 (SFP)

1Gbps small form-factor pluggable

transceiver ports

SFP+ Ports A & B (SFP+)

10Gbps small form-factor

pluggable transceiver ports

MGMT 1 & 2 (RJ-45)

Client ports for management.

Default IP address of MGMT 1 is 192.168.1.99

Power

100-240V AC, 50-60Hz, 5-3A, redundant power supplies

Device Guide

USB (USB A)

USB server port for USB key,

modem, or management functions

Ethernet Ports 9 - 16 and 25 - 32 (RJ-45)

Gigabit Ethernet ports for connection to

your network and the Internet

1616 17

SFP & SFP+ Ports

Green: Connected

Flashing Green: Transmitting and

receiving data

Off: No link established

Ethernet Ports Link/Activity

Green: Connected

Flashing Green: Transmitting & receiving data

Off: No link established

Ethernet Ports Speed

Green: Connected at 1Gbps

Amber: Connected at 100Mbps

Off: Connected at 10Mbps or not in use

Logo

Green: The unit is on

Off: The unit is off

Power

Green: The unit is on

Off: The unit is off

Status

Green: Normal

Flashing Green: Booting up

Red: The unit has a major alarm

Green: Operating in an HA cluster

Red: HA failure

Off: Not operating in an HA cluster

Device Guide

FortiGate 1000D

3 5

4 6

27 29

28 30

13 15

9 11

14 1610 12

19 21 23

20 22 24

10G SFP+

MGMT 1

MGMT 2

USB CONSOLE

USB MGMT

STATUS

ALARM

POWER

Alarm

Red: The unit has a major alarm

Amber: The unit has a minor alarm

Off: The unit is operating normally

Power Supplies

Green: Power supply providing power

Flashing Green: Power supply functional but not providing power

Red: Power supply has failed

Flashing Red: Only this power supply is not powered

Flashing Red and Green: Power supply warning

Off: Power supply not powered

Inhaltsverzeichnis

Andere Fortinet Firewall Handbücher

Fortinet

Fortinet FortiGate FortiGate-ADM-XB2 Bedienungsanleitung

Fortinet

Fortinet FortiGate FortiGate-100A Bedienungsanleitung

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

Fortinet

Fortinet FortiGate-51B Bedienungsanleitung

Fortinet

Fortinet FortiAnalyzer-4000A Bedienungsanleitung

Fortinet

Fortinet FortiGate-3016B Bedienungsanleitung

Fortinet

Fortinet FortiGate FortiGate-60M Bedienungsanleitung

Fortinet

Fortinet FortiGate FortiGate-300A Bedienungsanleitung

Fortinet

Fortinet FortiGate-100 Bedienungsanleitung

Fortinet

Fortinet FortiDB 1000D Bedienungsanleitung

Fortinet

Fortinet FortiGate FortiGate-5001FA2 Bedienungsanleitung

Fortinet

Fortinet FortiGate 310B-LENC Bedienungsanleitung

Fortinet

Fortinet FortiGate 300C Bedienungsanleitung

Fortinet

Fortinet FortiGate 5001FA2-LENC Bedienungsanleitung

Fortinet

Fortinet FortiGate FortiGate-1000 Bedienungsanleitung

Fortinet

Fortinet FortiGate FortiGate-300 Bedienungsanleitung

Fortinet

Fortinet FortiGate FortiGate-500 Bedienungsanleitung

Fortinet

Fortinet FortiGate 240D Bedienungsanleitung

Fortinet

Fortinet FortiDB-1000B Bedienungsanleitung

Fortinet

Fortinet FortiGate-400A Bedienungsanleitung

Fortinet

Fortinet FortiGate-100 Bedienungsanleitung

Fortinet

Fortinet FortiMail-3000C Bedienungsanleitung

Fortinet

Fortinet FortiGate FortiGate-3600A Bedienungsanleitung

Fortinet

Fortinet FortiGate-400A Bedienungsanleitung

Beliebte Firewall Handbücher anderer Marken

Cisco

Cisco S190 Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Cisco

Cisco 3110 Handbuch

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung

GTA

GTA GB-200 Bedienungsanleitung

Trend Micro

Trend Micro Deep Edge Bedienungsanleitung