Fortinet FortiGate-7060E System Manual
  1. Manuals
  2. Brands
  3. Fortinet Manuals
  4. Firewall
  5. FortiGate-7060E
  6. System manual
Fortinet FortiGate-7060E System Manual

Fortinet FortiGate-7060E System Manual

8u 19-inch rackmount 6-slot chassis with a 80gbps fabric and 1gbps base backplane
Hide thumbs Also See for FortiGate-7060E:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Handbook
7000
FortiGate-7060E System Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the FortiGate-7060E and is the answer not in the manual?

Questions and answers

Related Manuals for Fortinet FortiGate-7060E

Summary of Contents for Fortinet FortiGate-7060E

  • Page 1 7000 FortiGate-7060E System Guide...

  • Page 2: Connecting To The Fortios Cli Of The Fim Module In Slot

    FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO GUIDE http://video.fortinet.com FORTINET BLOG https://blog.fortinet.com CUSTOMER SERVICE & SUPPORT https://support.fortinet.com  http://cookbook.fortinet.com/how-to-work-with-fortinet-support/ FORTIGATE COOKBOOK http://cookbook.fortinet.com FORTINET TRAINING SERVICES http://www.fortinet.com/training FORTIGUARD CENTER http://www.fortiguard.com FORTICAST http://forticast.fortinet.com END USER LICENSE AGREEMENT http://www.fortinet.com/doc/legal/EULA.pdf FORTINET PRIVACY POLICY https://www.fortinet.com/corporate/about-us/privacy.html FEEDBACK Email: techdocs@fortinet.com Monday, March 26, 2018 FortiGate-7060E System Guide 01-540-411632-20180326...

  • Page 3: Table Of Contents

    Connecting the FortiGate-7060E chassis to ground Turning on FortiGate-7060E chassis power FortiGate-7060E hardware assembly and rack mounting Installing accessories Mounting the FortiGate-7060E chassis in a four-post rack Mounting the FortiGate-7060E chassis in a two-post rack Air flow Inserting FIM and FPM-7000 series modules...
  • Page 4 Connecting to the SMC SDI CLI of the FPM module in slot 3 Changing the management module admin account password Connecting to the management module using an IPMI tool FortiGate-7060E chassis slots IPMB addresses Rebooting a chassis module from the SMC SDI CLI Comlog...

  • Page 5: Fortigate-7060E Chassis

    FortiGate-7060E Chassis FortiGate-7060E Chassis The FortiGate-7060E is a 8U 19-inch rackmount 6-slot chassis with a 80Gbps fabric and 1Gbps base backplane designed by Fortinet. The fabric backplane provides network data communication and the base backplane provides management and synch communication among the chassis slots.

  • Page 6: Fim Modules

    4 is a backup power supply. You can add a 5th or 6th power supply for 3+2 and 3+3 redundancy. The standard configuration of the FortiGate-7060E includes two FIM (interface) modules in chassis slots 1 and 2 and up to four FPM (processing) modules in chassis slots 3 to 6.

  • Page 7: Fortigate-7060E Back Panel

    FortiGate-7060E back panel FortiGate-7060E Chassis FortiGate-7060E back panel The FortiGate-7060E back panel provides access to three hot swappable cooling fan trays and the chassis ground connector that must be connected to ground. FortiGate-7060E back panel Fan Tray 3 Fan Tray 2...

  • Page 8: Fortigate-7060E Chassis Schematic

    FortiGate-7060E Chassis FortiGate-7060E chassis schematic register, enter your contact information and the serial numbers of the Fortinet products that you or your organization have purchased. FortiGate-7060E chassis schematic The FortiGate-7060E chassis schematic below shows the communication channels between chassis components including the management modules (MGMT), the FIM modules (called FIM1 and FIM2) and the FPM modules (FPM3, FPM4, FPM5, and FPM6).

  • Page 9: Chassis Hardware Information

    FPM modules include NP6 processors to offload sessions from the FPM CPU and CP9 processors that accelerate content processing. Chassis hardware information This section introduces FortiGate-7060E hardware components and accessories including power requirements and FIM and FPM modules that can be installed in the chassis. Shipping components...

  • Page 10: Physical Description Of The Fortigate-7060E Chassis

    FPM and FIM blank panels to be installed in empty chassis slots Physical description of the FortiGate-7060E chassis The FortiGate-7060E chassis is a 8U chassis that can be installed in a standard 19-inch rack. The following table describes the physical characteristics of the FortiGate-7060E chassis.

  • Page 11: Cooling Fans, Cooling Air Flow, And Minimum Clearance

    Cooling fans, cooling air flow, and minimum clearance The FortiGate-7060E chassis contains three hot swappable cooling fan trays installed in the back of the chassis. Each fan tray includes two fans that operate together. When the fan tray LED is green both fans are operating normally.

  • Page 12: Cooling Air Flow And Required Minimum Air Flow Clearance

    Make sure the cooling air intake and warm air exhaust openings are not blocked by cables or rack construction because this could result in cooling performance reduction and possible overheating and component damage. FortiGate-7060E cooling air flow and minimum air flow clearance Back Front...

  • Page 13: Optional Air Filters

    AC Power Supply Units (PSUs) and supplying AC power to the chassis The AC version of the FortiGate-7060E chassis front panel includes four hot swappable DC PSUs. At least three PSUs (1, 2, and 3) must be connected to power. Power supplies 4 to 6 are backup power supplies that provide 3+1 , 3+2, and 3+3 redundancy.

  • Page 14: Dc Power Supply Units (Psus) And Supplying Dc Power To The Chassis

    DC Power Supply Units (PSUs) and supplying DC power to the chassis The DC version of the FortiGate-7060E chassis front panel comes with four hot swappable 48-72V to 12V 125A DC PSUs. Each PSU has a Internal 60A/170VDC fast blow fuse on the DC line input.

  • Page 15: Crimping Guidelines

    Strip the insulation from cable. Be careful not to nick cable strands which may later result in stands breaking. Cable end should be clean: wire brush or clean with emery cloth if necessary. Insert cable into connector until it stops. The insertion length must approximate the stripped length of cable. FortiGate-7060E System Guide Fortinet Technologies Inc.

  • Page 16: Connecting A Fortigate-7060E Psu To Dc Power

    -48VDC (black) You need the following equipment to connect the primary FortiGate-7060E PSUs to DC power: An electrostatic discharge (ESD) preventive wrist strap with connection cord. One black 8 AWG stranded wire with attached UL approved ring terminal for 8/M4 studs with ext ring diameter < 9.8 One red 8 AWG stranded wire with attached UL approved ring terminal for 8/M4 studs with ext ring diameter <...

  • Page 17: Hot Swapping A Dc Psu

    1. Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal surface on the chassis or frame. 2. Make sure that the chassis and ground wire are not energized. 3. Connect the green ground wire from the local ground to the ground connector on the FortiGate-7060E chassis. 4. Secure the ground wire to the chassis.

  • Page 18: Turning On Fortigate-7060E Chassis Power

    Turning on FortiGate-7060E chassis power Connect AC or DC power to PSUs 1, 2, 3, and 4. Once the FortiGate-7060E chassis is connected to power the chassis powers up. If the chassis is operating correctly, the LEDs on the PSUs and fans should be lit. As well, the LEDs on the FortiGate-7060E management module should be lit.

  • Page 19: Fortigate-7060E Hardware Assembly And Rack Mounting

    The FortiGate-7060E chassis should not be operated as a free-standing appliance. It is recommended that you mount the FortiGate-7060E chassis near the bottom of the rack to avoid making the rack top-heavy and potentially falling over. If you are going to mount the chassis higher make sure the rack is well anchored.

  • Page 20: Installing Accessories

    FortiGate-7060E hardware assembly and rack mounting Installing accessories Installing accessories These accessories are optional and not required for all configurations. If you have them, before mounting the chassis in a rack you should install the left and right front mounting brackets and the cable management brackets as shown in the following illustration.

  • Page 21: Mounting The Fortigate-7060E Chassis In A Four-Post Rack

    Mounting the FortiGate-7060E chassis in a four-post rack The FortiGate-7060E package includes a set of extendable brackets that you can use to mount the chassis in a 4- post rack. Install the brackets to create a 4-post rack mount tray that the chassis will slide on to. Attach each side of the tray to the 4-post rack using the front and back brackets as shown below.

  • Page 22: Mounting The Fortigate-7060E Chassis In A Two-Post Rack

    (Attach to the Rack First) Air flow For rack installation, make sure that the amount of air flow required for safe operation of the FortiGate-7060E chassis is not compromised. Make sure that the chassis ventilation openings at the front and back are not blocked by cables or other components.

  • Page 23: Inserting Fim And Fpm-7000 Series Modules

    FortiGate-7060E hardware assembly and rack mounting Inserting FIM and FPM-7000 series modules All FortiGate-7060E chassis are shipped with a protective front panel installed in the chassis to protect internal chassis components. This panel must be removed before you install FIM and FPM modules.

  • Page 24: Fortigate-7060E Management Modules

    Inserting FIM and FPM-7000 series modules FortiGate-7060E Management Modules The FortiGate-7060E chassis includes two management modules (shelf managers), located at the top of the chassis front panel. The management modules are factory installed and configured and is not field replaceable.

  • Page 25: Management Module Failure

    FIM and FPM modules in the chassis switch to standalone mode and manage their own power. Management Module LEDs The following table describes the management Module LED indicators: FortiGate-7060E Management Module LEDs State Description Status The management module is powered off or not initialized.
  • Page 26 FortiGate-7060E Management Modules Management Module LEDs State Description No alarms One or more analog sensors in the chassis or on a module in the chassis (other than PSUs) have surpassed a critical or non-recoverable (NR) threshold causing an alarm. When a...
  • Page 27 Management Module LEDs FortiGate-7060E Management Modules State Description Power Solid Green Normal operation. Chassis 12V disabled. This means that the administrator has entered commands into the management module CLI to Blinking Green power off the PSU main 12V outputs. All fans, FIM and FPM modules are completely powered off but the management module is still running.

  • Page 28: About Management Module Alarm Levels

    FortiGate-7060E Management Modules About management module alarm levels State Description This console port is not connected or is connected to the management module SMM CLI. Console 1 and 2 Green This console port is connected to this module host console in this chassis slot.

  • Page 29: Connecting To The Fortios Cli Of The Fim Module In Slot 1

    Connecting to the FortiOS CLI of the FIM module in slot 1 FortiGate-7060E Management Modules By default when the chassis first starts up Console 1 is connected to the FortiOS CLI of the FIM module in slot 1 and Console 2 is disconnected.

  • Page 30: Connecting To The Smc Sdi Cli Of The Fpm Module In Slot 3

    FortiGate-7060E Management Modules Connecting to the FortiOS CLI of the FIM module in slot 2 Connecting to the FortiOS CLI of the FIM module in slot 2 Use the following steps to connect to the FortiOS CLI of the FIM module in slot 2: 1.

  • Page 31: Connecting To The Management Module Using An Ipmi Tool

    -I lanplus -H 10.160.19.30 -k gkey -U <username> -P <password0> -t 0x82 sensor FortiGate-7060E chassis slots IPMB addresses The following table lists the IPMB addresses of the FortiGate-7060E chassis slots. Chassis slot number Name IPMB Address (FRUID)

  • Page 32: Rebooting A Chassis Module From The Smc Sdi Cli

    FortiGate-7060E Management Modules Rebooting a chassis module from the SMC SDI CLI Chassis slot number Name IPMB Address (FRUID) FPM3 0x86 FIM1 0x82 FIM2 0x84 FPM4 0x88 FPM6 0x8C You can use the IPMB address or chassis slot number to reference a chassis slot when entering commands in the management module CLI.
  • Page 33 Comlog FortiGate-7060E Management Modules Header Cause \n--- COMLOG SYSTEM BOOT: YYYY/MM/DD hh:mm:ss ---\n The module is starting up after being powered on or reset. \n--- COMLOG DISABLED: YYYY/MM/DD hh:mm:ss ---\n Logging is disabled. \n--- COMLOG ENABLED: YYYY/MM/DD hh:mm:ss ---\n Logging is enabled...

  • Page 34: System Event Log (Sel)

    FortiGate-7060E Management Modules System event log (SEL) System event log (SEL) The SMC in each module generates system event log (SEL) messages that record system events as they occur. All SEL messages are stored by individual FIM and FPM module SMCs. They are also all collected and stored by the management module SMC.

  • Page 35: Common Management Module Cli Operations

    Common management module CLI operations FortiGate-7060E Management Modules Common management module CLI operations The following table lists many of the operations you can perform from the management module CLI and the commands you use to perform them. Only a subset of these commands are available on the passive management module as indicated below.
  • Page 36 FortiGate-7060E Management Modules Common management module CLI operations Action SMC CLI Commands IPMI Commands Change the SDI verbose <level> verbosity level. <level> can be: 0: Alerts + Errors 1: Alerts + Errors + Verbose + Low-Level Errors 2: Alerts + Errors +...
  • Page 37 Common management module CLI operations FortiGate-7060E Management Modules Action SMC CLI Commands IPMI Commands Set a user account user set password <user-id> user set password <user-id> password. Available on <password> <password> the passive module. Set the privilege level that a user account...
  • Page 38 FortiGate-7060E Management Modules Common management module CLI operations Action SMC CLI Commands IPMI Commands Run a module self mc selftest test. Power on a module. fru activate <slot> [<fruid>] picmg activate Power off a module. fru deactivate <slot> picmg deactivate [<fruid>]...

  • Page 39: Cautions And Warnings

    Reliable Earthing - Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit (e.g. use of power strips). FortiGate-7060E System Guide Fortinet Technologies Inc.

  • Page 40: Safety

    Attention: Débranchez les cordons de la source d’alimentation avant tout entretien. Grounding — To prevent damage to your equipment, connections that enter from outside the building should pass through a lightning / surge protector, and be properly grounded. Use an electrostatic discharge workstation FortiGate-7060E System Guide Fortinet Technologies Inc.
  • Page 41 Fiber optic transceiver must be rated 3.3V, 22mA max, Laser Class 1, UL certified component. Le transceiver optique doit avoir les valeurs nominales de 3.3 V, maximum 22 mA, Laser Class 1, homologué UL. FortiGate-7060E System Guide Fortinet Technologies Inc.

  • Page 42: Regulatory Notices

    Communications du Canada. European Conformity (CE) - EU This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. FortiGate-7060E System Guide Fortinet Technologies Inc.

  • Page 43: Voluntary Control Council For Interference (Vcci) - Japan

    此 为 A级 产 品 ， 在 生 活 环 境 中 ， 该 产 品 可 能 会 造 成 无 线 电 干 扰 。 这 种 情 况 下 ， 可 能 需 要 用 户 对 其 采 取 切 实 可 行 的 措 施 。 FortiGate-7060E System Guide Fortinet Technologies Inc.
  • Page 44 Regulatory Notices China FortiGate-7060E System Guide Fortinet Technologies Inc.
  • Page 45 Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features, or development, and circumstances may change such that any forward-looking statements herein are not accurate.

Table of Contents