Fortinet FortiGate-7030E Manual de lista de piezas

FortiGate-7030E System Guide

FortiGate-7000E Series

FORTINET DOCUMENT LIBRARY

https://docs.fortinet.com

FORTINET VIDEO GUIDE

https://video.fortinet.com

FORTINET BLOG

https://blog.fortinet.com

CUSTOMER SERVICE & SUPPORT

https://support.fortinet.com

FORTINET TRAINING & CERTIFICATION PROGRAM

https://www.fortinet.com/support-and-training/training.html

NSE INSTITUTE

https://training.fortinet.com

FORTIGUARD CENTER

https://fortiguard.com/

END USER LICENSE AGREEMENT

https://www.fortinet.com/doc/legal/EULA.pdf

FEEDBACK

Email: techdoc@fortinet.com

April 13, 2020

FortiGate-7030E 6.2.3 System Guide

01-623-417498-20200413

TABLEOFCONTENTS

Change log 5

FortiGate-7030E chassis 6

FortiGate-7030E front panel 6

FIM modules 7

FPM-7620E 7

FortiGate-7030E back panel 7

Registering your FortiGate-7030E 8

FortiGate-7030E chassis schematic 8

Chassis hardware information 9

Shipping components 9

Optional accessories and replacement parts 10

Physical description of the FortiGate-7030E chassis 10

Cooling fans, cooling air flow, and minimum clearance 11

Cooling air flow and required minimum air flow clearance 12

Optional air filters 13

AC PSUs and supplying AC power to the chassis 13

Hot Swapping an AC PSU 14

DC PSUs and supplying DC power to the chassis 14

Crimping guidelines 16

Connecting a FortiGate-7030E PSU to DC power 16

Hot Swapping a DC PSU 17

Connecting the FortiGate-7030E chassis to ground 17

Turning on FortiGate-7030E chassis power 18

FortiGate-7030E hardware assembly and rack mounting 19

Installing optional accessories 19

Front mounting brackets 19

Left and right cable management brackets 19

Front cable management bracket (FortiGate-7030E-QSFP28 only) 20

Power cord clamps 20

Mounting the FortiGate-7030E chassis in a four-post rack 21

Mounting the FortiGate-7030E chassis in a two-post rack 21

Air flow 22

Inserting FIM and FPM modules 22

Getting started with FortiGate-7000 24

Multi VDOM mode 24

Confirming startup status 25

Setting up management connections 26

Adding a password to the admin administrator account 26

Changing data interface network settings 27

Resetting to factory defaults 27

Restarting the FortiGate-7030E 27

FortiGate-7030E System Guide 3

Fortinet Technologies Inc.

Managing individual FortiGate-7000 FIMs and FPMs 28

Special management port numbers 28

HA mode special management port numbers 29

Managing individual FIMs and FPMs from the CLI 29

Connecting to individual FIM and FPM CLIs of the secondary FortiGate-7000 in an

HAconfiguration 30

Firmware upgrades 31

Firmware upgrade basics 31

Verifying that a firmware upgrade is successful 31

Upgrading the firmware running on individual FIMs or FPMs 32

Upgrading FIM firmware 32

Upgrading FPM firmware 33

Installing FIM firmware from the BIOSafter a reboot 34

Installing FPM firmware from the BIOSafter a reboot 36

Synchronizing FIMs and FPMs after upgrading the primary FIM firmware from the BIOS 38

FortiGate-7030E System Management Module 39

System Management Module failure 40

System Management Module LEDs 40

About SMM alarm levels 42

Using the console ports 42

Connecting to the FortiOS CLI of the FIM module in slot 1 43

Connecting to the SMC SDI CLI of the FPMmodule in slot 3 44

Changing the SMM admin account password 44

Connecting to the SMM using an IPMItool 45

FortiGate-7030E chassis slots IPMB addresses 45

Rebooting a chassis module from the SMC SDI CLI 45

Comlog 46

System event log (SEL) 47

Sensor data record (SDR) 47

Common SMM CLI operations 48

Cautions and warnings 52

Environmental specifications 52

Safety 53

Regulatory notices 55

Federal Communication Commission (FCC) – USA 55

Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada 55

European Conformity (CE) - EU 55

Voluntary Control Council for Interference (VCCI) – Japan 56

Product Safety Electrical Appliance & Material (PSE) – Japan 56

Bureau of Standards Metrology and Inspection (BSMI) – Taiwan 56

China 56

FortiGate-7030E System Guide 4

Change log Fortinet Technologies Inc.

Change log

Date Change description

April 13, 2020 Updated console cable descriptions to reflect that the FortiGate-7030 is now shipped

with USB to RJ-45 RS-232 console cables. Other minor changes.

March 20, 2020 Renamed management module to System Management Module (SMM). Corrections

to Connecting to the SMM using an IPMItool on page 45.

February 24, 2020 Corrections to the 4-post and 2-post rack mount diagrams.

February 21, 2020 Added DC terminal rings and information about included DC cables. See Optional

accessories and replacement parts on page 10 and DC PSUs and supplying DC power

to the chassis on page 14.

October 29, 2019 Misc changes.

October 23, 2019 New version of this document with fixes and changes throughout.

FortiGate-7030E System Guide 5

FortiGate-7030E chassis

The FortiGate-7030E is a 6U 19-inch rackmount 3-slot chassis with a 80Gbps fabric and 1Gbps base backplane

management and synch communication among the chassis slots. Power is provided to the chassis using three hot

swappable 2+1 redundant 100-240 VAC, 50-60 Hz power supply units (PSUs). You can also optionally add a fourth PSU.

The FortiGate-7030E can also be equipped with DC PSUs allowing you to connect the chassis to -48V DC power.

FortiGate-7030E front panel

The FortiGate-7030E chassis is managed by a single System Management Module (SMM) that includes an Ethernet

connection as well as two switchable console ports that provide console connections to the modules in the chassis slots.

The SMM controls chassis cooling and power management and provides an interface for managing the modules

installed in the chassis. The standard configuration of the FortiGate-7030E includes one FIM (interface) module in

chassis slot 1 and two FPM (processing) modules in chassis slots 3 and 4. The front panel also includes a sealed blank

panel. Breaking the seal or removing the panel voids your warranty. Two versions of the FortiGate-7030E are available:

lFortiGate-7030E QSFP28 and includes one FIM-7920E and two FPM-7620Es

lFortiGate-7030E SFP10G and includes one FIM-7901E and two FPM-7620Es

FortiGate-7030E front panel (FortiGate-7030E-SFP10G model)

ESD

socket

FPM-7620E

slot 3

FPM-7620E

slot 4

FIM-7901E

slot 1

Blank panel

(do not

remove)

System Management Module

FortiGate-7030E 6.2.3 System Guide 6

Fortinet Technologies Inc.

FortiGate-7030E chassis Fortinet Technologies Inc.

Do not operate the FortiGate-7030E chassis with open slots on the front or back panel. For

optimum cooling performance and safety, each chassis slot must contain an FIM or FPM or

an FIM or FPM blank panel (also called a dummy card). For the same reason, all cooling fan

trays, power supplies or power supply slot covers must be installed while the chassis is

operating.

FIM modules

FIM modules are hot swappable interface modules that provide data and management interfaces, base backplane

switching and fabric backplane session-aware load balancing for the chassis. The FIM modules include an integrated

switch fabric and DP2 processors to load balance millions of data sessions over the chassis fabric backplane to FPM

processor modules. The following FIM modules are available for the FortiGate-7030E:

lThe FIM-7901E includes thirty-two front panel 10GigE SFP+ fabric channel interfaces (A1 to A32). These interfaces

are connected to 10Gbps networks. These interfaces can also be configured to operate as Gigabit Ethernet

interfaces using SFP transceivers.

lThe FIM-7920E includes four front panel 100GigE QSFP28 fabric channel interfaces (C1 to C4). These interfaces

can be connected to 100Gbps networks. Using a 100GBASE-SR4 QSFP28 or 40GBASE-SR4 QSFP+ transceiver,

each QSFP28 interface can also be split into four 10GBASE-SR interfaces and connected to 10Gbps networks.

FPM-7620E

The FPM-7620E is a hot swappable processor module that provides FortiOS firewalling and security services. FPMs in

the chassis function as workers, processing sessions load balanced to them by the FIMs. FPMs include multiple NP6

network processors and CP9 content processors to accelerate traffic.

FortiGate-7030E back panel

The FortiGate-7030E chassis back panel provides access to three hot swappable cooling fan trays and three hot

swappable AC or DC PSUs. A fourth slot is available for including a fourth power supply for additional redundancy. At

least two PSUs (PWR1 and PWR2) must be connected to power. PWR4 is a backup power supply. You can add a fourth

power supply to PWR3 to provide a second backup power supply. The back panel includes the FortiGate-7030E chassis

ground connector that must be connected to ground.

FortiGate-7030E 6.2.3 System Guide 7

FortiGate-7030E chassis Fortinet Technologies Inc.

FortiGate-7030E back panel

Fan Tray 1Fan Tray 2Fan Tray 3

Power

Supply 1

Power

Supply 2

Power

Supply 4

Power

Supply 3

(empty)

AC Rating

Label

AC Rating

Label

Chassis

Ground

Connector

Registering your FortiGate-7030E

FortiGate-7000 series products are registered according to the chassis serial number. You need to register your chassis

to receive Fortinet customer services such as product updates and customer support. You must also register your

product for FortiGuard services. Register your product by visiting https://support.fortinet.com. To register, enter your

contact information and the serial numbers of the Fortinet products that you or your organization have purchased.

FortiGate-7030E chassis schematic

The FortiGate-7030E chassis schematic below shows the communication channels between chassis components

including the System Management Module (MGMT), the FIM (called FIM1) and the FPMs (FPM3 and FPM4).

FortiGate-7030E 6.2.3 System Guide 8

FortiGate-7030E chassis Fortinet Technologies Inc.

IPMB

SERIAL

IPMB

SERIAL

IPMB

SERIAL

IPMB

SERIAL

80G

NP6

CP9

NP6

CP9

SMC SDI

ISF

DP2

MGMT IPMB 0x20

FPM

FIM

FPM

FPM3 IPMB 0x86

FPM4 IPMB 0x88

FIM1 IPMB 0x82

SMC SDI

PMB 0x88

SMC SDI

Data

Interfaces

MGMT

1-4 M1 M2

Fabric Backplane

Base Backplane

The SMM (MGMT), with Intelligent Platform Management Bus (IPMB) address 0x20) communicates with all modules in

the chassis over the base backplane. Each module, including the SMM includes a Shelf Management Controller (SMC).

These SMCs support IPMB communication between the SMM and the FIM and FPMs for storing and sharing sensor

data that the SMM uses to control chassis cooling and power distribution. The base backplane also supports serial

communications to allow console access from the SMM to all modules, and 1Gbps Ethernet communication for

management and heartbeat communication betweenmodules.

FIM1 (IPMB address 0x82) is the FIM in slot 1. The interfaces of this module connect the chassis to data networks and

can be used for Ethernet management access to chassis components. The FIM includes DP2 processors that distribute

sessions over the Integrated Switch Fabric (ISF) to the NP6 processors in the FPMs. Data sessions are communicated

to the FPMs over the 80Gbps chassis fabric backplane.

FPM3 and FPM4 (IPMB addresses 0x86 and 0x88) are the FPM processor modules in slots 3 and 4. These worker

modules process sessions distributed to them by the FIM. FPMs include NP6 processors to offload sessions from the

FPM CPU and CP9 processors that accelerate content processing.

Chassis hardware information

This section introduces FortiGate-7030E hardware components and accessories including power requirements and

FIMand FPM modules that can be installed in the chassis.

Shipping components

The FortiGate-7030E chassis ships pre-assembled with the following components:

lThe 6U FortiGate-7030E chassis

lOne FIM module

lTwo FPM modules

FortiGate-7030E 6.2.3 System Guide 9

FortiGate-7030E chassis Fortinet Technologies Inc.

lOne System Management Module (SMM) in the front of the chassis. (The SMM is not field replacable. If it fails,

you must RMA the chassis. The chassis will continue to operate without a functioning SMM.)

lThree Power Supply Units (PSUs) installed in the back of the chassis

lThree cooling fan trays installed in the back of the chassis

lOne protective front panel installed in the chassis to protect internal chassis components. This panel must be

removed before installing FIM and FPM modules.

lThree power cords with C15 power connectors

lFour power cord management clamps

lOne set of 4-post rack mounting components

lOne set of 2-post rack mounting components

lOne pair of cable management side brackets

lTwo front mounting brackets

lTwenty M4x6 flat-head screws

lTen M4x8 large head pan-head screws

lSix rubber feet

lTwo USB to RJ-45 RS-232 console cables

lOne RJ-45 Ethernet cable

Optional accessories and replacement parts

The following optional accessories can be ordered separately:

SKU Description

FG-7030E-FAN FortiGate-7030E fan tray.

FG-7030E-PS-AC 1500W AC power supply units (PSUs) for the FortiGate-7030E.

FG-7030E-CHASSIS FortiGate-7030E chassis including 1x SMM, 3x fan trays, and 3x AC PSUs.

You can also order the following:

lAdditional FIM and FPM modules

lTransceivers

lDC PSUs (Each PSU ships with a set of two 8 AWG DC power cables and six extra DC terminal rings. The cables

are 3 meters (9.84 ft.) long. You can use the DC terminal rings to make custom DC cables.)

lAir Filter kit

lFPM and FIM single slot cover trays to be installed in empty chassis slots

Physical description of the FortiGate-7030E chassis

The FortiGate-7030E chassis is a 6U chassis that can be installed in a standard 19-inch rack. The following table

describes the physical characteristics of the FortiGate-7030E chassis.

Dimensions (H x W x D) 10.4 x 17.3 x 25.6 in (264 x 440 x 650 mm)

Chassis weight completely assembled with

FIM and FPM modules installed

134.3 lbs (61 kg)

FortiGate-7030E 6.2.3 System Guide 10

Tabla de contenidos

Otros manuales de Cortafuegos de Fortinet

Fortinet

Fortinet FortiGate-7060E Manual de lista de piezas

Fortinet

Fortinet FortiGate-100 Manual de usuario

Fortinet

Fortinet FortiGate 310B-LENC Manual de usuario

Fortinet

Fortinet FortiGate 500D Manual del propietario

Fortinet

Fortinet FortiGate 300 Manual de usuario

Fortinet

Fortinet FortiWeb 1000F Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-4000 Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-60B Manual de usuario

Fortinet

Fortinet FortiGate 50B-LENC Manual de usuario

Fortinet

Fortinet FortiGate 240D Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-ADM-XB2 Manual de usuario

Fortinet

Fortinet FortiGate 50A Manual del operador

Fortinet

Fortinet FortiGate-3016B Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-100A Manual de usuario

Fortinet

Fortinet FortiGate 5001A-DW Manual de usuario

Fortinet

Fortinet FortiGate-3016B Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-300A Manual de usuario

Fortinet

Fortinet FortiGate 5050 Manual de usuario

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

Fortinet

Fortinet FortiMail-2000A Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-30B Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-3600 Manual de usuario

Fortinet

Fortinet FortiAnalyzer-4000A Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-500 Manual de instrucciones

Manuales populares de Cortafuegos de otras marcas

Cisco

Cisco S190 Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Cisco

Cisco 3110 Manual

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario