Fortinet Version 3.0 manual Connecting and turning on the FortiBridge unit

Page 23

 

 

Setting up FortiBridge units

Connecting and turning on the FortiBridge unit

Connecting and turning on the FortiBridge unit

In most cases, you can connect the FortiBridge unit without making any configuration changes to your network or your FortiGate unit. All that is required is to move and reconnect network cables.

Note: The default FortiBridge management IP address is 192.168.1.99. If this IP address conflicts with an IP address on your network, you can use the procedure “Changing the management IP address” on page 27 to change this IP address.

Right out of the box you can connect, power on, and configure the FortiBridge unit without interrupting network traffic (except for the interruption required to move and re-connect network cables). When connected and powered on, the FortiBridge unit operates in Normal mode. Probes are not configured. The FortiBridge unit does not provide fail open protection until probes are configured.

Connecting and turning on the FortiBridge-1000 unit

Note: This procedure describes how to connect a FortiBridge-1000 unit to provide fail open protection for network traffic passing between FortiGate unit internal and external interfaces. If the FortiBridge-1000 unit provides fail open protection for traffic between different FortiGate interfaces, you can use the same procedure but substitute FortiGate interface names as required.

The FortiBridge-1000 unit contains 4 auto-sensing 10/100/1000 Ethernet interfaces that connect to the internal and external networks and to the FortiGate interfaces that were connected to these networks. Use the following steps to connect a FortiBridge-1000 unit to the network as shown in Figure 11.

Figure 11: Connecting the FortiBridge-1000 unit

Power cable connects to power supply

Optional RJ-45 serial cable connects to management computer

TO FORTIGATE

DC+5V

 

 

 

 

 

PWR

CONSOLE

EXT 2

INT 2

EXT 1

INT 1

Ethernet connection to FortiGate External interface

Ethernet connection to Internal network

Ethernet connection to FortiGate Internal interface

Ethernet connection to External network

Internal network

INT 1

Switch

INT 2

EXT 1

Internet

EXT 2

Switch Router

Internal

External

(Transparent mode)

Note: Normally, you would use straight-through ethernet cables to connect the FortiBridge-1000 unit to the FortiGate unit and to your networks. However, for some connections you may need a crossover ethernet cable (for example, for compatibility with network devices that do not support Auto MDI/MDIX).

FortiBridge Version 3.0 Administration Guide

23

09-30000-0163-20061109

Page 22 Page 24
Image 23
Page 22 Page 24
Contents M i n i s t r a t i o n G u i d e Regulatory compliance TrademarksContents Config CLI commands Configuration and operating proceduresUsing the CLI Index Execute CLI commandsPage About this document About FortiBridgeFortinet Knowledge Center Customer service and technical supportFortinet documentation Fortinet tools and documentation CDExample FortiBridge application FortiBridge operating principlesConnecting the FortiBridge-1000 copper gigabit ethernet Connecting the FortiBridge unitHow the FortiBridge unit monitors the FortiGate unit Normal mode operationConnecting the FortiBridge-1000F fiber gigabit ethernet Probes and FortiGate firewall policies Normal mode operationProbe interval and probe threshold Enabling probes to detect FortiGate hardware failureEnabling probes to detect FortiGate software failure FortiBridge power failure Bypass mode operationExample FortiGate HA cluster FortiBridge application Example configuration with other FortiGate interfaces Example configuration with other FortiGate interfaces Example configuration with other FortiGate interfaces FortiBridge unit basic information FortiBridge-1000 Package contentsMounting instructions FortiBridge-1000F Package contentsLED indicators Technical specificationsFactory default configuration ConnectorsConnecting and turning on the FortiBridge-1000 unit Connecting and turning on the FortiBridge unitTo connect and turn on the FortiBridge-1000F unit Connecting and turning on the FortiBridge-1000F unitTo connect and turn on the FortiBridge-1000 unit To connect to the FortiBridge console for the first time Connecting to the command line interface CLIConnecting to the FortiBridge console FortiBridge-1000 loginWelcome FortiBridge-1000 # Completing the basic FortiBridge configurationConnecting to the FortiBridge CLI using Telnet To connect to the CLI using TelnetTo change the management IP address Adding an administrator passwordTo add an administrator password Changing the management IP addressTo add static routes Changing DNS server IP addressesAdding static routes To change DNS server IP addressesChanging the system time and date Allowing management access to the EXT 1 interfaceAdding administrator accounts To reset to factory defaults from the FortiBridge CLI Resetting to the factory default configurationInstalling FortiBridge unit firmware Upgrading to a new firmware version To upgrade to a new firmware versionExecute restore image namestr tftpip Execute restore image FBG1000-v10-build010-FORTINET.outTo revert to a previous firmware version Reverting to a previous firmware versionEnter Tftp server address Installing firmware from a system rebootTo install firmware from a system reboot Hit any key to stop autobootGet system status Enter firmware image file image.outExample network settings Configuration and operating proceduresConfiguring FortiBridge probes Configuring FortiBridge probesTo configure probe settings Probe settingsEnabling probes To enable and configure FortiBridge probesConfig probe probelist ping set status enable End Go to System Status Session Config probe probelist Imap set status enable EndVerifying that probes are functioning To verify that probes are functioningTuning the failure threshold and probe interval Configuring FortiBridge alertsFortiBridge syslog To configure alert emailConfig alertemail setting set server mail.myorg.com End FortiBridge alert emailFortiBridge Snmp To configure FortiBridge syslogConfig log syslogd setting set server End To resume normal operation from bypass mode Recovering from a FortiGate failureTo add and enable an Snmp community Config system snmp community edit Set name snmp1 EndTo back up the FortiBridge configuration Manually switching between FortiBridge operating modesBacking up and restoring the FortiBridge configuration Execute switch-modeBacking up and restoring the FortiBridge configuration Backing up and restoring the FortiBridge configuration CLI basics Connecting to the FortiBridge CLI using SSH or TelnetSetting administrative access for SSH or Telnet To use the CLI to configure SSH or Telnet accessGet system interface namestr Other access methodsConnecting to the FortiBridge CLI using SSH Set allowaccess ping telnet sshTo connect to the CLI using SSH Connecting to the FortiBridge CLI using SSH or Telnet Config CLI commands Examples Alertemail settingCommand syntax pattern Related Commands Example Log syslogd settingShow probe probelist Probe probelist ping http ftp pop3 smtp imapGet probe probelist Get probe probelist httpSyslog Probe settingRw w System accprofileShow system accprofile Get system accprofileGet system accprofile policyprofile Password passwordstr System adminShow system admin Get system adminGet system admin newadmin Show system console Config system console set EndSystem console Get system consoleShow system dns System dnsGet system dns Get system status Failbypass System failcloseSystem failclose Minutesinteger System globalShow system global Get system globalShow system interface internal System interface internal externalGet system interface internal System manageip Config system manageip Set ip 192.168.2.80 255.255.255.0 endDistanceinteger System routeSystem snmp community Config hostsShow system snmp community Get system snmp communityExecute CLI commands Execute backup config fbdg.cfg BackupCommand syntax Execute backup config filenamestr tftp-serveripv4Execute date 09/17/2004 DateExecute date datestr datestr has the form mm/dd/yyyy, where Execute factoryreset FactoryresetExecute ping addressipv4 host-namestr PingExecute reboot RebootExecute restore config backupconfig RestoreSwitch-mode Execute time timestr TimeTime Index 09-30000-0163-20061109 Snmp SSH
Top Page Image Contents