Fortinet FortiGate-5000 manual FortiGate-5005-DIST security system

Page 67

 

 

 

The FortiGate-5005-DIST security system

Basic FortiGate security system configuration

The FortiGate-5005-DIST security system

The FortiGate-5005-DIST security system is very similar to a single FortiGate unit, but with much higher capacity and with support for failover protection and scalability. The FortiGate-5005-DIST security system consists of a FortiGate-5050 or FortiGate-5140 chassis with one or two Input/Output or I/O boards (FortiController-5208 boards) and one or more worker boards (FortiGate-5005FA2 boards running in DIST mode). The I/O boards provide 10-gigabit and 1-gigabit network connections and distribute traffic to the worker boards. The worker boards provide FortiGate security system functions including firewall, VPN, IPS, antivirus, antispam, and so on.

The following topics are included in this section:

Basic FortiGate security system configuration

FortiController-5208 I/O boards

FortiGate-5005FA2 worker boards

FortiGate-5005-DIST security system chassis

FortiGate-5005-DIST interface names

Basic FortiGate security system configuration

A basic FortiGate security system consists of a single FortiController-5208 board and four FortiGate-5005 boards installed in a FortiGate-5050 or FortiGate-5140 chassis (see Figure 29 on page 68). This system can be installed in NAT/Route mode between the Internet and a private network. In this configuration, the FortiGate-5005-DIST security system can provide FortiGate services to 10 gigabit traffic passing between the private network and the Internet.

FortiGate-5000 Series Introduction

 

01-30000-83466-20090108

67

Image 67
Contents FortiGate-5000 Series Product updates, technical support, and FortiGuard servicesTrademarks Contents FortiGate-RTM-XB2 system FortiGate-5050 chassisFortiGate-5020 chassis FortiGate-5001A security systemFortiGate-5005-DIST security system FortiSwitch-5003A systemFortiSwitch-5003 system FortiGate-5001SX security systemContents FortiGate-5000 Series Introduction Revision history IntroductionRevision History FortiGate-5050-R chassis on FortiGate-5050 chassis on About the FortiGate-5000 series chassisAbout About the FortiGate-5000 series boardsFortiGate-5001FA2 security system FortiGate-RTM-XB2 moduleA FortiGate-5050 or FortiGate-5140 chassis Communication betweenFortiGate-5000 Series Introduction Customer service and technical support About Data Center DC powerFortinet documentation Register your Fortinet product FortiGate-5140-R chassis Slot FortiGate-5140 chassis front panelSlot numbers FortiGate-5140 chassis back panelPhysical description of the FortiGate-5140 chassis FortiGate-5140 chassis FortiGate-5140 chassis back panel RTN 21 x 19 x 16.8 in .3 x 48.3 x 42.7 cm FortiGate-5050-R chassis FortiGate-5050 front panel Power LEDFortiGate-5050 chassis back panel FortiGate-5050 back panelPhysical description of the FortiGate-5050 chassis FortiGate-5050 chassis physical description DimensionsFortiGate-5050 chassis FortiGate-5050 chassis Weight Physical description of the FortiGate-5050 chassis FortiGate-5020 front panel FortiGate-5020 chassisPhysical description of the FortiGate-5020 chassis FortiGate-5020 physical description DimensionsPower dissipation FortiGate-5020 back panelFortiGate-5001A security system FortiGate-5001A-DW front panel Front panel LEDs and connectorsLists and describes the FortiGate-5001A LEDs LEDsFabric backplane communication ConnectorsLists and describes the FortiGate-5001A connectors Base backplane communicationFortiGate-RTM-XB2 AMC modulesFortiGate-ASM-FB4 FortiGate-RTM-XB2 system Front panel LED From the FortiGate-RTM-XB2 font panel includes a power LEDFortiGate-RTM-XB2 power LED State Description PowerFortiGate-5005FA2 front panel FortiGate-5005FA2 security systemStatus Lists and describes the FortiGate-5005FA2 board LEDsACT LinkAccelerated packet forwarding and policy enforcement Lists and describes the FortiGate-5005FA2 connectorsFortiGate-5005-DIST security system Base backplane gigabit communicationFA2 interfaces and active-active HA performance FortiGate-5001FA2-LENC front panel FortiGate-5001FA2-LENC security systemSTA Lists and describes the FortiGate-5001FA2-LENC board LEDsFortiGate-5001FA2-LENC board LEDs PWRState Description Link Lists and describes the FortiGate-5001FA2-LENC connectorsBase backplane gigabit communication FortiGate-5001SX front panel FortiGate-5001SX security systemFortiGate-5001SX LEDs Lists and describes the FortiGate-5001SX board LEDsBase backplane gigabit interfaces Lists and describes the FortiGate-5001SX connectorsBase backplane gigabit interfaces FortiSwitch-5003A system FortiSwitch-5003A front panel MGMT, B1 Lists and describes the FortiSwitch-5003A front panel LEDsSH1 Base channel interfacesBase 10G Fabric channel interfacesCLI Front panel connectors FortiSwitch-5003A configurationsBase and fabric gigabit switching within a chassis FortiSwitch-5003A base channel 1 HA heartbeat communication Fabric 10-gigabit switching within a chassisBasic link aggregation configuration Layer-2 link aggregation and redundancy configurationsFortiSwitch-5003 system CLK ZREINT FLT ResetAbout the ZRE network activity LEDs EXT FLTZRE1 Base backplane communicationsETH0 ZRE0Base backplane communications Base backplane communications FortiGate-5005-DIST security system Basic FortiGate security system configurationExample basic FortiGate-5005-DIST security system FortiController-5208 I/O boardsFortiGate-5005FA2 worker boards FortiGate-5005-DIST security system chassis Where FortiGate-5005-DIST interface namesFortiGate-5005-DIST interface names FortiController-5208 system Data Lists and describes the FortiController-5208 board LEDsFortiController-5208 board LEDs Payload OperationManagement ControlCOM1, COM2 Backplane gigabit interfacesD15, D16 C15, C16