Fortinet FortiGate-5000 manual FortiController-5208 system

Page 73

FortiController-5208 system

FortiController-5208 system

You can create a FortiGate-5005-DIST high-throughput multi-threat network security system using one or two FortiController-5208 boards and multiple FortiGate-5005 boards in a FortiGate-5050 or FortiGate-5140 chassis.

AFortiGate-5020 chassis cannot be used to create a FortiGate-5005-DIST system. Functionally, one or two FortiController-5208 boards using the processing power of multiple FortiGate-5005 boards function much like a single FortiGate unit, but with far greater capacity.

In a FortiGate-5005-DIST configuration, the FortiGate-5005FA2 boards are used only for their processing power. The FortiController-5208 assigns tasks to each FortiGate-5005FA2 board and provides all external connections to the network. Given this division of labor, the FortiController-5208 board is also called the I/O board and the FortiGate-5005FA2 boards are also called the worker boards.

The FortiController-5208 board provides two 10 gigabit interfaces and four

1 gigabit interfaces for network traffic. The FortiController-5208 front panel also contains an additional four 1-gigabit interfaces for inter-chassis HA and future use. Optionally, you can double the number of available of network interfaces by adding a second FortiController-5208.

Once initial set-up is complete, all subsequent administration and configuration of the FortiController-5208 boards and FortiGate-5005 boards is done through the primary FortiController-5208 board.

The FortiGate-5005 boards are administered as a single unit, and therefore configured identically. All traffic is distributed to the FortiGate boards using the backplane interfaces so no front panel connections are required for the FortiGate boards.

The FortiController-5208 board includes the following features:

Two 10 gigabit interfaces that can accept fiber or copper 10 gigabit Small Form factor Pluggable (XFP) fiber or copper transceivers.

Eight 1 gigabit front panel network interfaces that can accept Small Form factor Pluggable (SFP) fiber or copper transceivers. Four of these interfaces are for data, two for inter-chassis high-availability (HA) connections, and two for future use.

One fabric and two base backplane gigabit interfaces.

Two RJ-45 RS-232 serial console management connections.

An RJ-45 Ethernet management connection.

Mounting hardware

LED status indicators

Before you can connect any FortiController-5208 front panel interfaces, you must insert the XFP or SFP transceivers into the FortiController-5208 front panel cage slots.

This chapter includes the following information about the FortiController-5208 board:

Front panel LEDs and connectors

Backplane gigabit interfaces

Installing XFP and SFP transceivers

FortiGate-5000 Series Introduction

 

01-30000-83466-20090108

73

Image 73
Contents FortiGate-5000 Series Product updates, technical support, and FortiGuard servicesTrademarks Contents FortiGate-5020 chassis FortiGate-5050 chassisFortiGate-5001A security system FortiGate-RTM-XB2 systemFortiSwitch-5003 system FortiSwitch-5003A systemFortiGate-5001SX security system FortiGate-5005-DIST security systemContents FortiGate-5000 Series Introduction Revision history IntroductionRevision History FortiGate-5050-R chassis on FortiGate-5050 chassis on About the FortiGate-5000 series chassisAbout About the FortiGate-5000 series boardsFortiGate-5001FA2 security system FortiGate-RTM-XB2 moduleA FortiGate-5050 or FortiGate-5140 chassis Communication betweenFortiGate-5000 Series Introduction Customer service and technical support About Data Center DC powerFortinet documentation Register your Fortinet product FortiGate-5140-R chassis Slot FortiGate-5140 chassis front panelSlot numbers FortiGate-5140 chassis back panelPhysical description of the FortiGate-5140 chassis FortiGate-5140 chassis FortiGate-5140 chassis back panel RTN 21 x 19 x 16.8 in .3 x 48.3 x 42.7 cm FortiGate-5050-R chassis FortiGate-5050 front panel Power LEDFortiGate-5050 chassis back panel FortiGate-5050 back panelPhysical description of the FortiGate-5050 chassis FortiGate-5050 chassis physical description DimensionsFortiGate-5050 chassis FortiGate-5050 chassis Weight Physical description of the FortiGate-5050 chassis FortiGate-5020 front panel FortiGate-5020 chassisPower dissipation FortiGate-5020 physical description DimensionsFortiGate-5020 back panel Physical description of the FortiGate-5020 chassisFortiGate-5001A security system FortiGate-5001A-DW front panel Front panel LEDs and connectorsLists and describes the FortiGate-5001A LEDs LEDsLists and describes the FortiGate-5001A connectors ConnectorsBase backplane communication Fabric backplane communicationFortiGate-RTM-XB2 AMC modulesFortiGate-ASM-FB4 FortiGate-RTM-XB2 system FortiGate-RTM-XB2 power LED From the FortiGate-RTM-XB2 font panel includes a power LEDState Description Power Front panel LEDFortiGate-5005FA2 front panel FortiGate-5005FA2 security systemACT Lists and describes the FortiGate-5005FA2 board LEDsLink StatusAccelerated packet forwarding and policy enforcement Lists and describes the FortiGate-5005FA2 connectorsFortiGate-5005-DIST security system Base backplane gigabit communicationFA2 interfaces and active-active HA performance FortiGate-5001FA2-LENC front panel FortiGate-5001FA2-LENC security systemFortiGate-5001FA2-LENC board LEDs Lists and describes the FortiGate-5001FA2-LENC board LEDsPWR STAState Description Link Lists and describes the FortiGate-5001FA2-LENC connectorsBase backplane gigabit communication FortiGate-5001SX front panel FortiGate-5001SX security systemFortiGate-5001SX LEDs Lists and describes the FortiGate-5001SX board LEDsBase backplane gigabit interfaces Lists and describes the FortiGate-5001SX connectorsBase backplane gigabit interfaces FortiSwitch-5003A system FortiSwitch-5003A front panel MGMT, B1 Lists and describes the FortiSwitch-5003A front panel LEDsSH1 Base channel interfacesBase 10G Fabric channel interfacesCLI Front panel connectors FortiSwitch-5003A configurationsBase and fabric gigabit switching within a chassis FortiSwitch-5003A base channel 1 HA heartbeat communication Fabric 10-gigabit switching within a chassisBasic link aggregation configuration Layer-2 link aggregation and redundancy configurationsFortiSwitch-5003 system CLK ZREAbout the ZRE network activity LEDs ResetEXT FLT INT FLTETH0 Base backplane communicationsZRE0 ZRE1Base backplane communications Base backplane communications FortiGate-5005-DIST security system Basic FortiGate security system configurationExample basic FortiGate-5005-DIST security system FortiController-5208 I/O boardsFortiGate-5005FA2 worker boards FortiGate-5005-DIST security system chassis Where FortiGate-5005-DIST interface namesFortiGate-5005-DIST interface names FortiController-5208 system FortiController-5208 board LEDs Lists and describes the FortiController-5208 board LEDsPayload Operation DataManagement ControlD15, D16 Backplane gigabit interfacesC15, C16 COM1, COM2