Fortinet FortiBridge Administration Guide: Installation, Configuration, and Monitoring

Page 85

Index

monitor FortiGate unit 11

mounting instructions 20

N

name 71 new version

FortiBridge firmware 31 normal mode 10, 11

monitoring the FortiGate unit 11 probe 11

resuming from bypass mode 43 switching to 14

switching to bypass mode 14 traffic flow 11

ntpserver 66

ntpsync {disable enable} 66

O

operating procedures 35

operating modes switching between 44

operating principles 9 output {standard more} 61

P

package contents FortiBridge-1000 19 FortiBridge-1000F 20

password 52, 59 adding 27

ping 77

enabling ping probes 38 probe 12

probe_list 55 POP3

probe 13 pop3

probe_list 55 port 54

power failure FortiBridge 14

primary 62 probe 11

action on failure 37

and FortiGate firewall policies 12 configuring 36

configuring FortiGate unit 38 configuring FTP probe 39 configuring probe settings 37 default settings 37 dynamic IP pattern 37 enabling 38

enabling ping probes 38 enabling probes 38 fail open 37

FortiGate hardware failure 13 FortiGate session list 40 FortiGate software failure 13

FortiBridge Version 3.0 Administration Guide

FortiGate unit serial number 37 FTP 12

HTTP 12 IMAP 13, 39 interval 13 ping 12 POP3 13 settings 37 SMTP 13, 39 threshold 13 verifying 39

viewing probe configuration 39 probe interval

tuning 40 probe list

FTP 39

IMAP 39 ping 38 SMTP 39

probe probe_list 55 probe setting 56 probe_interval 55

R

reboot 78

installing firmware 33 recover

from a FortiGate failure 43 reset

factory default configuration 30 restore 79

restoring configuration 44

revert

FortiBridge unit firmware 32 route

adding static routes 28

S

secondary 62 send alertmail 37 serial number

FortiGate 37 probe setting 37

server 52, 54 setting up

FortiBridge units 19 settings

configuring probe settings 37

SMTP probe 13 probe list 39

smtp probe_list 55

SNMP

adding communities 43 community 42 configuring 42

trap 37 traps 42 v1 42

09-30000-0163-20061109

85

Image 85
Contents M i n i s t r a t i o n G u i d e Regulatory compliance TrademarksContents Using the CLI Configuration and operating proceduresConfig CLI commands Index Execute CLI commandsPage About this document About FortiBridgeFortinet documentation Customer service and technical supportFortinet tools and documentation CD Fortinet Knowledge CenterExample FortiBridge application FortiBridge operating principlesConnecting the FortiBridge-1000 copper gigabit ethernet Connecting the FortiBridge unitConnecting the FortiBridge-1000F fiber gigabit ethernet Normal mode operationHow the FortiBridge unit monitors the FortiGate unit Probes and FortiGate firewall policies Normal mode operationEnabling probes to detect FortiGate software failure Enabling probes to detect FortiGate hardware failureProbe interval and probe threshold FortiBridge power failure Bypass mode operationExample FortiGate HA cluster FortiBridge application Example configuration with other FortiGate interfaces Example configuration with other FortiGate interfaces Example configuration with other FortiGate interfaces FortiBridge unit basic information FortiBridge-1000 Package contentsMounting instructions FortiBridge-1000F Package contentsLED indicators Technical specificationsFactory default configuration ConnectorsConnecting and turning on the FortiBridge-1000 unit Connecting and turning on the FortiBridge unitTo connect and turn on the FortiBridge-1000 unit Connecting and turning on the FortiBridge-1000F unitTo connect and turn on the FortiBridge-1000F unit Connecting to the FortiBridge console Connecting to the command line interface CLIFortiBridge-1000 login To connect to the FortiBridge console for the first timeConnecting to the FortiBridge CLI using Telnet Completing the basic FortiBridge configurationTo connect to the CLI using Telnet Welcome FortiBridge-1000 #To add an administrator password Adding an administrator passwordChanging the management IP address To change the management IP addressAdding static routes Changing DNS server IP addressesTo change DNS server IP addresses To add static routesAdding administrator accounts Allowing management access to the EXT 1 interfaceChanging the system time and date Installing FortiBridge unit firmware Resetting to the factory default configurationTo reset to factory defaults from the FortiBridge CLI Execute restore image namestr tftpip To upgrade to a new firmware versionExecute restore image FBG1000-v10-build010-FORTINET.out Upgrading to a new firmware versionTo revert to a previous firmware version Reverting to a previous firmware versionTo install firmware from a system reboot Installing firmware from a system rebootHit any key to stop autoboot Enter Tftp server addressGet system status Enter firmware image file image.outExample network settings Configuration and operating proceduresConfiguring FortiBridge probes Configuring FortiBridge probesTo configure probe settings Probe settingsConfig probe probelist ping set status enable End To enable and configure FortiBridge probesEnabling probes Verifying that probes are functioning Config probe probelist Imap set status enable EndTo verify that probes are functioning Go to System Status SessionTuning the failure threshold and probe interval Configuring FortiBridge alertsConfig alertemail setting set server mail.myorg.com End To configure alert emailFortiBridge alert email FortiBridge syslogConfig log syslogd setting set server End To configure FortiBridge syslogFortiBridge Snmp To add and enable an Snmp community Recovering from a FortiGate failureConfig system snmp community edit Set name snmp1 End To resume normal operation from bypass modeBacking up and restoring the FortiBridge configuration Manually switching between FortiBridge operating modesExecute switch-mode To back up the FortiBridge configurationBacking up and restoring the FortiBridge configuration Backing up and restoring the FortiBridge configuration Setting administrative access for SSH or Telnet Connecting to the FortiBridge CLI using SSH or TelnetTo use the CLI to configure SSH or Telnet access CLI basicsConnecting to the FortiBridge CLI using SSH Other access methodsSet allowaccess ping telnet ssh Get system interface namestrTo connect to the CLI using SSH Connecting to the FortiBridge CLI using SSH or Telnet Config CLI commands Command syntax pattern Alertemail settingExamples Related Commands Example Log syslogd settingGet probe probelist Probe probelist ping http ftp pop3 smtp imapGet probe probelist http Show probe probelistSyslog Probe settingRw w System accprofileGet system accprofile policyprofile Get system accprofileShow system accprofile Password passwordstr System adminGet system admin newadmin Get system adminShow system admin System console Config system console set EndGet system console Show system consoleGet system dns System dnsShow system dns Get system status Failbypass System failcloseSystem failclose Minutesinteger System globalShow system global Get system globalGet system interface internal System interface internal externalShow system interface internal System manageip Config system manageip Set ip 192.168.2.80 255.255.255.0 endDistanceinteger System routeSystem snmp community Config hostsShow system snmp community Get system snmp communityExecute CLI commands Command syntax BackupExecute backup config filenamestr tftp-serveripv4 Execute backup config fbdg.cfgExecute date datestr datestr has the form mm/dd/yyyy, where DateExecute date 09/17/2004 Execute factoryreset FactoryresetExecute ping addressipv4 host-namestr PingExecute reboot RebootExecute restore config backupconfig RestoreSwitch-mode Execute time timestr TimeTime Index 09-30000-0163-20061109 Snmp SSH