Fortinet FortiGate 240D Manual de usuario

FortiGate 240D

QuickStart Guide

April 01, 2014

01-501-190858-20140401

FortiCare® and FortiGuard®, and certain other marks are registered

trademarks of Fortinet, Inc., and other Fortinet names herein may also be

registered and/or common law trademarks of Fortinet. All other product

or company names may be trademarks of their respective owners.

Performance and other metrics contained herein were attained in internal

lab tests under ideal conditions, and actual performance and other results

may vary. Network variables, different network environments and other

conditions may affect performance results. Nothing herein represents any

binding commitment by Fortinet, and Fortinet disclaims all warranties,

whether express or implied, except to the extent Fortinet enters a

binding written contract, signed by Fortinet’s General Counsel, with a







such binding written contract shall be binding on Fortinet. For absolute

clarity, any such warranty will be limited to performance in the same ideal

conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any

covenants, representations,and guarantees pursuant hereto, whether

express or implied. Fortinet reserves the right to change, modify, transfer,

or otherwise revise this publication without notice, and the most current

version of the publication shall be applicable.

• Technical Support

• New product features

• Protection from new threats

Vous devez enregistrer le produit pour recevoir:

• Support technique

• Nouvelles fonctionnalitées du produit

• Protection contre de nouvelles menaces

La reistrazione ti permette di usufruire di:

• Supporto Tecnico

• Nuove funzionalita

• Proteezione dalle ultime minaccce

Debe registrar el producto para recibir:

• Apoyo técnico

• Nuevas funcionalidades del producto

• Protección contra ataques

登録のお願い

本日、フォーティネット製品の登録をしてください。

登録すると次のメリットがあります。

テクニカルサポート•新機能の追加•新しい脅威への防御





󺻖󺻖󰇉

http://forti.net/support

Toll free: 1 866 648 4638

Phone: 1 408 486 7899

Fax: 1 408 235 7737

Email: [email protected]

FortiGate 240D

QuickStart Guide

2 3

Box Includes

FortiGate 240D

QuickStart Guide Video

http://forti.net/vqsg

Before You Begin

Hostname

T1/E1, Static broadband, Cable, or DSL with a

static IP

Cable Modem DHCP

It is normal to not require a hostname but your ISP may require it.

DSL PPPoE

Username Password

IP Address

Default Gateway

Write down details that you may need from your network administrator or ISP.

Primary/Secondary DNS

Subnet Mask

STATUS

POWER

ALARM

USBMGMT MGMT USB

CONSOLE

WAN1

WAN2

DMZ1

DMZ2

FortiGate 240D

QuickStart Guide

USB Cable Ethernet Cable

2 Rack-Mount Brackets

8 Bracket Screws

Console Cable

4 Rubber Feet

Power Cable

The FortiGate Cookbook

FortiOS 5.0.6 | 1U Models

4 5

Connect your device to a power outlet and an Internet connection. This is usually a

modem, but could also be another device on your network.

Power Connection

WAN Port

Internet

1Basic Connections

Web-based Manager

1. Connect the Ethernet cable.

2. Visit 192.168.1.99 in your web browser.

3. Login using username “admin” and no password.

4. Click “Wizard” in the top right corner.

5. and save your settings.

6. Register your device from the dashboard page.

Web Browser with Ethernet cable

https://

LAN Port

FortiGate Setup Options

Web Browser

Setup Wizard (p.5) With FortiExplorer (p.6)

FortiExplorer App



OS X

Terminal Emulation

With console cable (p.7)

C D

6 7

Windows/OS X with USB

Microsoft Windows Install

2. Connect the USB cable and launch

FortiExplorer if it does not appear

automatically.

Mac OS X Install

2. Double-Click the  and

drag the FortiExplorer icon to the

Applications folder.

3. Connect the USB cable.

4. Click the FortiExplorer icon to launch

the application.

FortiExplorer Setup Wizard

1. Follow prompts or click “Register” to register your device with FortiCare.

2. Click “Setup Wizard”.

3. Login using username “admin” and no password.

4. Follow Setup Wizard steps.

5. Click to complete the setup of your device.

1. Download FortiExplorer from http://forti.net/fexp.

USB MGMT

Terminal Emulation with Console Cable

To Connect to the CLI

1. Connect the FortiGate unit console port to the management computer using a

console cable.

2. Start a terminal emulation program on the management computer. Select the COM

port and use the following settings:

Baud Rate: 9600

Data bits: 8

Parity: None

Stop bits: 1

Flow Control: None

3. Press Enter on your keyboard to connect to the CLI.

4. Login using username “admin” and no password. You can now proceed with

FortiGate unit.

Get started by typing “?” for a list of available commands.

Begin typing a command and type “?” for a list of available ways to complete.

For example 

For a detailed guide visit http://forti.net/cli.

8 9

http://forti.net/fexp-ios

USB Port

FortiExplorer App

1. Download the iOS FortiExplorer App to your device from http://forti.net/fexp-ios.

2. Use your Apple to USB cable to connect to the USB port.

3. Launch the FortiExplorer App and select the device model.

4. Login using username “admin” and no password.



iOS with Apple to USB cable

10 11

Installation

To install the FortiGate unit into a rack

1. Ensure that the FortiGate unit is placed on a stable

surface prior to rack-mount installation.

2. Attach the provided rack-mount brackets to the sides of

the unit using the provided screws.

3. Position the FortiGate unit in the rack. Ensure there is





4. Line up the rack-mount bracket holes to the holes on the

rack and ensure that the FortiGate unit is level.

Caution:

Electrostatic

discharge (ESD)

can damage

your Fortinet

equipment.

Do not place

heavy objects on

the unit.

To avoid personal

injury or damage

to the unit, it is

recommended

that two or more

people install the

unit into the rack.

Note: If the unit

has a redundant

power supply,

each power

cable should be

connected to a

different power

source. In this

way, if one power

source fails, the

other may still be

operational and

the unit will not

lose power.

5. Finger tighten four rack-mount screws to attach the unit to the rack.

6. Verify that the spacing around the FortiGate unit conforms to requirements and

that the unit is level, then tighten the rack-mount screws with an appropriate

screwdriver.

7. Using the provided power cable, plug the cable into the rear of the unit, and

then into a grounded electrical outlet or a separate power source such as an

uninterruptible power supply (UPS) or a power distribution unit (PDU).



1. Ensure that the surface onto which the FortiGate unit to be installed is clean, level,

and stable and that there is at least 1.5 inches (3.8cm) of clearance on all sides to



2. Attach the provided rubber feet to the bottom of the FortiGate unit.

3. Place the unit in the designated location.

4. Verify that the spacing around the FortiGate unit conforms to requirements and

that the unit is level.

5. Using the provided power cable, plug the cable into the rear of the unit, and

then into a grounded electrical outlet or a separate power source such as an

uninterruptible power supply (UPS) or a power distribution unit (PDU).

The FortiGate unit 

inch rack unit with the provided rack-mount brackets and screws.

Please read the Cautions and Warnings section prior to installing your device.

1.5in 1.5in

12 13

4. Hold the sides of the transceiver and carefully pull it

away from the cage socket.

5. Replace the cap on the SFP cage socket and place the

removed SFP transceiver into an antistatic bag.

Caution: SFP

transceivers are

static sensitive

devices. Use

an ESD wrist

strap or similar

grounding device

when handling

transceivers.

Do not install

or remove SFP

transceivers while



are still attached.

This can cause

damage to the

cables, cable

connectors,

and the optical

interfaces. It may

also prevent the

transceiver from

latching correctly

into the socket

connector.

Note: Installing

and removing

SFP transceivers

can shorten their

useful life. Do not

install or remove

transceivers more

than is necessary.

SFP Cage Sockets

Socket Latch

Transmit Optical Bore

Extraction Lever

Receive Optical Bore

To install the SFP transceivers

1. Ensure that you are properly grounded.

2. Remove the caps from the SFP cage sockets on the

front panel of the unit.

3. Position the SFP transceiver in front of the cage socket

opening and ensure that the transceiver is correctly

oriented. When the transceiver is correctly oriented, the

extraction lever will be level with the socket latch.

Note: SFP cage socket orientation may vary. Ensure that

the SFP transceiver module is correctly oriented each

time that you are inserting a transceiver.

4. Hold the sides of the SFP transceiver and slide it into

the cage socket until it clicks into place.

SFP Transceivers Caution: Do not

force the SFP

transceivers into

the cage slots. If

the transceiver

does not easily

slide in and click

into place, it may

not be aligned

correctly or may

be upside down.

If this happens,

remove the SFP

transceiver,

realign it or rotate

it and slide it in

again.

Note: Follow



optic handling

procedures when

installing and

removing

SFP transceivers

to ensure the

devices remain

clean and are not

damaged.

5. Press the transceiver  cage socket with

your thumb.

6. Verify that the transceiver is latched correctly by

grasping the sides of the transceiver and trying to pull it

out without lowering the extraction lever.

If the transceiver cannot be removed, it is installed and

latched correctly.

If the transceiver can be removed, reinsert it and press

harder with your thumb.

If necessary, repeat this process until the transceiver is

securely latched into the cage socket.

To remove the SFP transceivers

1. Ensure that you are properly grounded.

2. If applicable, disconnect the  from the

transceiver connector and install a clean dust plug in

the transceiver’s optical bores.

3. Pull the extraction lever out and down to eject the

transceiver

screwdriver or other

similar tool to open the lever.

14 15

Device Guide

Status

Green: Normal

Flashing green: Booting up

Red: Major alarm

Alarm

Not in Use

Green: Operating in an HA cluster

Off: Disabled

Power

Green: On

Off

Ethernet Ports Link/Activity

Green: Connected

Flashing green: Transmitting & receiving data

Off: No link established

Ethernet Ports Speed

Green: Connected at 1Gbps

Amber: Connected at 100Mbps

Off: Connected at 10Mbps or not in use

SFP Ports

Green: Active

Flashing green: Transmitting & receiving data

Off: No link established

Logo

Green: On

Off

STATUS

POWER

ALARM

USB MGMT MGMT USB

CONSOLE

WAN 1

WAN 2

DMZ 1

DMZ 2

FortiGate 240D

16 17

Console (RJ-45)

Optional connection to the management computer.

Provides access to the CLI

USB (USB-A)

USB server port for USB key, modem, or

management functions

USB MGMT (USB mini-B)

USB client port for management

WAN 1 & 2 (RJ-45)

Gigabit Ethernet Internet connection

DMZ 1 & 2 (SFP)

1 Gbps/auto small form-factor pluggable transceiver

ports for connection to a DMZ network/device

Internet LAN Ports 1 - 40 (RJ-45)

Switched Gigabit Ethernet ports for connection to your

network and the Internet

MGMT (RJ-45)

Client port for management.

Default IP address 192.168.1.99

RPS

Optional connection to a remote

power supply (FRPS-100).

12V @ 12.5A

Power

100-240V AC, 50-60Hz, 3A MAX

STATUS

POWER

ALARM

USB MGMT MGMT USB

CONSOLE

WAN 1

WAN 2

DMZ 1

DMZ 2

FortiGate 240D

AC INPUT

100-240V

50-60Hz

3A MAX

DC INPUT FOR REMOTE POWER

SUPPLY SPECIFIED IN MANUAL

[email protected]

Device Guide

Tabla de contenidos

Otros manuales de Cortafuegos de Fortinet

Fortinet

Fortinet FortiGate FortiGate-400 Manual de usuario

Fortinet

Fortinet FortiGate-100 Manual de instrucciones

Fortinet

Fortinet FortiGate FortiGate-60M Manual de usuario

Fortinet

Fortinet Fortigate-5000 series Manual de instrucciones

Fortinet

Fortinet FortiGate-3016B Manual de usuario

Fortinet

Fortinet FortiGate-100 Manual de usuario

Fortinet

Fortinet FortiGate-200A Manual de usuario

Fortinet

Fortinet FortiAnalyzer-2000B Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-5001A Guía del usuario

Fortinet

Fortinet FortiGate FortiGate-310B Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-3810A Manual de usuario

Fortinet

Fortinet FortiGate-50A Manual de usuario

Fortinet

Fortinet FortiGate-200 Manual de usuario

Fortinet

Fortinet FortiWiFi 60CX-ADSL-A Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-30B Manual de usuario

Fortinet

Fortinet FortiManager-3000B Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-5001SX Guía del usuario

Fortinet

Fortinet FortiGate 3000 Manual de instrucciones

Fortinet

Fortinet FortiGate 3000 Manual de usuario

Fortinet

Fortinet FortiMail-4000A Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-100A Manual de instrucciones

Fortinet

Fortinet FortiGate 60C-SFP Manual de usuario

Fortinet

Fortinet FortiManager 400C Manual de usuario

Fortinet

Fortinet FortiManager-3000 Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Cisco

Cisco S190 Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Cisco

Cisco 3110 Manual

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario