Fortinet FortiGate-7000E Series Manual de usuario

FPM-7620E Processing Module Guide

FortiGate-7000E Series

FORTINET DOCUMENT LIBRARY

https://docs.fortinet.com

FORTINET VIDEO GUIDE

https://video.fortinet.com

FORTINET BLOG

https://blog.fortinet.com

CUSTOMER SERVICE & SUPPORT

https://support.fortinet.com

FORTINET TRAINING & CERTIFICATION PROGRAM

https://www.fortinet.com/support-and-training/training.html

NSE INSTITUTE

https://training.fortinet.com

FORTIGUARD CENTER

https://fortiguard.com/

END USER LICENSE AGREEMENT

https://www.fortinet.com/doc/legal/EULA.pdf

FEEDBACK

Email: techdoc@fortinet.com

October 28, 2019

FPM-7620E Processing Module Guide

01-606-374568-20191028

TABLEOFCONTENTS

Change log 4

FPM-7620E processing module 5

Mounting hardware 5

Module levers 5

Power sliders 6

Secure screws 6

Physical description 6

Front panel LEDs 7

Turning the module on and off 7

NMI switch 7

NP6 network processors - offloading data traffic 7

Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors) 8

Hardware installation 10

FPM-7620E mounting hardware 10

Inserting a FPM-7620E module into a chassis 11

Shutting down and removing a FPM-7620E module from a chassis 15

Troubleshooting 20

FPM-7620E does not startup 20

FPM-7620E status LED is flashing during system operation 20

Cautions and warnings 21

Environmental specifications 21

Safety 22

Regulatory notices 23

Federal Communication Commission (FCC) – USA 23

Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada 23

European Conformity (CE) - EU 23

Voluntary Control Council for Interference (VCCI) – Japan 24

Bureau of Standards Metrology and Inspection (BSMI) – Taiwan 24

China 24

FPM-7620E Processing Module Guide Fortinet Technologies Inc.

Change log

Date Change description

October 28, 2019 Restructuring and bug fixing.

FPM-7620E Processing Module Guide Fortinet Technologies Inc.

FPM-7620E processing module

The FPM-7620E processing module is a high-performance worker module that processes sessions load balanced to it

by FortiGate-7000 series interface (FIM) modules over the chassis fabric backplane. The FPM-7620E can be installed in

any FortiGate-7000 series chassis in slots 3 and up.

The FPM-7620E includes two 80Gbps connections to the chassis fabric backplane and two 1Gbps connections to the

base backplane. The FPM-7620E processes sessions using a dual CPU configuration, accelerates network traffic

processing with four NP6 processors, and accelerates content processing with eight CP9 processors. The NP6 network

processors are connected by the FIM switch fabric so all supported traffic types can be fast path accelerated by the NP6

processors.

FPM-7620E front panel

Power

Slider

Module

Lever

Secure

Screw

Module

Lever

Power

Slider

Secure

Screw

Status, Alarm,

and Power LEDS

Power

Button

NMI

Button

Mounting hardware

Use the module levers, power sliders, and secure screws to insert, secure and remove the module from the chassis.

Module levers

Carefully slide the module all of the way into the chassis slot and fully close the module levers to seat the module into

the chassis slot and to connect the module to the chassis backplane connectors. When both module levers are fully

closed, the power sliders can be lowered to their bottom position, locking the module levers and turning on power to the

module.

Raise the power sliders to unlock the module levers and turn off module power. Then open the module levers to eject

the module from the backplane connectors; allowing the module to be removed from the chassis.

The module lever mechanism helps reduce the engagement force required to insert or eject the module from the

backplane connectors.

FPM-7620E Processing Module Guide Fortinet Technologies Inc.

FPM-7620E processing module 6

The module levers do not fully secure the module in the chassis. The secure screws must be tightened to reliably secure

the module in the chassis and to make sure the module remains securely connected to the backplane for power and

network connectivity.

Power sliders

Close the module levers and move the power sliders to their bottom position to lock the module levers and turn the

module power switch on.

Move the power sliders to the top position to unlock the module levers and turn the module power switch off.

Gently push the power sliders down to make sure they are in their bottom position. If the module LEDs do not light the

module is not receiving power. If this happens check the power sliders to make sure they are in their bottom position.

Secure screws

Fully tighten the secure screws to lock the module in the chassis providing a secure and reliable connection with the

backplane.

Loosen the secure screws before ejecting the module from the chassis.

Physical description

Dimensions 1.69 x 17.11 x 18.49 in. (43 x 435 x 470 mm) (Height x Width x Length)

Weight 14.0 lb. (6.4 kg)

Operating Temperature 32 to 104°F (0 to 40°C)

Storage Temperature -31 to 158°F (-35 to 70°C)

Relative Humidity 10% to 90% (Non-condensing)

Power consumption Max: 410W; Average: 320W

Max Current 34A

Heat Dissipation 1395BTU/h

Joules/h 1466KJ/h

FPM-7620E Processing Module Guide Fortinet Technologies Inc.

FPM-7620E processing module 7

Front panel LEDs

LED State Description

STATUS Off The FPM-7620E is powered off.

Green The FPM-7620E is powered on and operating normally.

Flashing Green The FPM-7620E is starting up.

ALARM Red Major alarm.

Amber Minor alarm

Off No alarms

POWER Green The FPM-7620E is powered on and operating normally.

Off The FPM-7620E is powered off.

Turning the module on and off

You can use the front panel power button to turn the FPM-7620E power on or off. If the FPM-7620E is powered on,

press the power switch to turn it off. If the FPM-7620E is turned off and installed in a chassis slot, press the power

button to turn it on.

NMI switch

When working with Fortinet Support to troubleshoot problems with the FPM-7620E you can use the front panel non-

maskable interrupt (NMI) switch to assist with troubleshooting. Pressing this switch causes the software to dump

registers/backtraces to the console. After the data is dumped the FPM-7620E reboots. While the FPM-7620E is

rebooting, traffic is temporarily blocked. The FPM-7620E should restart normally and traffic can resume once the it is up

and running.

NP6 network processors - offloading data traffic

The four FPM-7620E NP6 network processors, eight CP9 processors, and FIM module integrated switch fabric (ISF)

provide hardware acceleration by offloading data traffic from the FPM-7620E CPUs. The result is enhanced network

performance provided by the NP6 processors plus the network processing load is removed from the CPU. The NP6

processor can also handle some CPU intensive tasks, like IPsec VPN encryption/decryption. Because of the integrated

switch fabric, all sessions are fast-pathed and accelerated.

FPM-7620E Processing Module Guide Fortinet Technologies Inc.

FPM-7620E processing module 8

FPM-7620E hardware architecture

Chassis Base Backplane

Chassis Fabric Backplane

CPU

80G 80G

CP9

NP6

np6_0

NP6

np6_1

NP6

np6_2

NP6

np6_3

System Bus

Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors)

The FPM-7620E includes eight CP9 processors that provide the following performance enhancements:

lFlow-based inspection (IPS, application control etc.) pattern matching acceleration with over 10Gbps throughput

lIPS pre-scan

lIPS signature correlation

lFull match processors

lHigh performance VPN bulk data engine

lIPsec and SSL/TLS protocol processor

lDES/3DES/AES128/192/256 in accordance with FIPS46-3/FIPS81/FIPS197

lMD5/SHA-1/SHA256/384/512-96/128/192/256 with RFC1321 and FIPS180

lHMAC in accordance with RFC2104/2403/2404 and FIPS198

lESN mode

lGCM support for NSA "Suite B" (RFC6379/RFC6460) including GCM-128/256; GMAC-128/256

lKey Exchange Processor that supports high performance IKE and RSA computation

lPublic key exponentiation engine with hardware CRT support

lPrimary checking for RSA key generation

lHandshake accelerator with automatic key material generation

lTrue Random Number generator

lElliptic Curve support for NSA "Suite B"

FPM-7620E Processing Module Guide Fortinet Technologies Inc.

FPM-7620E processing module 9

lSub public key engine (PKCE) to support up to 4096 bit operation directly (4k for DH and 8k for RSA with CRT)

lDLP fingerprint support

lTTTD (Two-Thresholds-Two-Divisors) content chunking

lTwo thresholds and two divisors are configurable

FPM-7620E Processing Module Guide Fortinet Technologies Inc.

Hardware installation

This chapter describes installing a FPM-7620E processing module into a FortiGate-7000 chassis.

FPM-7620E mounting hardware

To install a FPM-7620E you slide the module into slot 3 or up in the front of an FortiGate-7000 series chassis and then

use the mounting hardware, described in Mounting hardware on page 5, to lock the module into place in the slot. When

locked into place and positioned correctly, the module front panel is flush with the chassis front panel and connected to

the chassis backplane.

To position the module correctly, you must use the mounting hardware shown below for the right of the FPM-7620E

front panel. The mounting hardware on the left of the front panel is the same but reversed. The FPM-7620E mounting

hardware aligns the module in the chassis slot and is used to insert and eject the module from the slot.

Open Closed

Secure Screw

Module lever

Power Slider

(to open move the power slider up about 2 mm)

Power Slider

Alignment Pin Module Lever

Secure Screw

Alignment Pin

The FPM-7620E module levers align the module in the chassis slot and insert and eject the module from the slot. The

power sliders activate micro switches that turn on or turn off power to the module. When both power sliders are raised,

the module cannot receive power. When the sliders are fully closed, the module can receive power if it is fully inserted

into a chassis slot.

FPM-7620E Processing Module Guide Fortinet Technologies Inc.

Otros manuales para FortiGate-7000E Series

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Unidad de control de Fortinet

Fortinet

Fortinet FIM-7920E Manual de usuario

Fortinet

Fortinet FortiFone FF-60b Manual de usuario

Fortinet

Fortinet FIM-7910E Manual de usuario

Fortinet

Fortinet TalkSwitch 8plus Manual de instrucciones

Fortinet

Fortinet FortiGate-7000E Series Manual de usuario

Fortinet

Fortinet FIM-7904E Manual de usuario

Fortinet

Fortinet FIM-7941F Manual de usuario

Fortinet

Fortinet FPM-7620F Manual de usuario

Manuales populares de Unidad de control de otras marcas

Festo

Festo Compact Performance CP-FB6-E Manual de lista de piezas

Elo TouchSystems

Elo TouchSystems DMS-SA19P-EXTME Manual de usuario

JS Automation

JS Automation MPC3034A Manual de usuario

JAUDT

JAUDT SW GII 6406 Series Guía rápida

Spektrum

Spektrum Air Module System Manual de usuario

BOC Edwards

BOC Edwards Q Series Manual de usuario

KHADAS

KHADAS BT Magic Manual de usuario

Etherma

Etherma eNEXHO-IL Manual de usuario

PMFoundations

PMFoundations Attenuverter Manual de usuario

GEA

GEA VARIVENT Manual de usuario

Walther Systemtechnik

Walther Systemtechnik VMS-05 Manual de usuario

Altronix

Altronix LINQ8PD Instrucciones de montaje

Eaton

Eaton Powerware Series Manual de usuario

WAGO

WAGO 750-407/040-000 Manual de usuario

Sony

Sony CCU-590 Manual de usuario

Graco

Graco 25D614 Manual de usuario

Task Force Tips

Task Force Tips YE-RF-900 Manual de programación

Shini

Shini SPV-U Series Manual de usuario