Fortinet Version 3.0 manual

www.fortinet.com

FortiBridge

Version 3.0

Administration Guide

Contents

Main ! Contents FortiBridge operating principles ...................................................... 9 Setting up FortiBridge units............................................................ 19 Configuration and operating procedures...................................... 35 config CLI commands ..................................................................... 51 execute CLI commands................................................................... 73 Page Introduction About FortiBridge About this document Fortinet documentation Fortinet tools and documentation CD Fortinet Knowledge Center Comments on Fortinet technical documentation Customer service and technical support FortiBridge operating principles Example FortiBridge application Connecting the FortiBridge unit Connecting the FortiBridge-1000 (copper gigabit ethernet) Connecting the FortiBridge-1000F (fiber gigabit ethernet) Normal mode operation How the FortiBridge unit monitors the FortiGate unit Probes and FortiGate firewall policies Enabling probes to detect FortiGate hardware failure Enabling probes to detect FortiGate software failure Probe interval and probe threshold Bypass mode operation FortiBridge power failure Example FortiGate HA cluster FortiBridge application Connecting the FortiBridge-1000 (copper gigabit ethernet) Connecting the FortiBridge-1000F (fiber gigabit ethernet) Example configuration with other FortiGate interfaces Page Page Setting up FortiBridge units FortiBridge unit basic information FortiBridge-1000 Package contents FortiBridge Version 3.0 Administration Guide 20 09-30000-0163-20061109 FortiBridge-1000F Package contents Figure 10:FortiBridge- 1000 F package contents Mounting instructions Front Back Technical specifications LED indicators Connectors Factory default configuration Connecting and turning on the FortiBridge unit Connecting and turning on the FortiBridge-1000 unit Connecting and turning on the FortiBridge-1000F unit Connecting to the command line interface (CLI) Connecting to the FortiBridge console Connecting to the FortiBridge CLI using Telnet Completing the basic FortiBridge configuration Adding an administrator password Changing the management IP address Changing DNS server IP addresses Adding static routes Allowing management access to the EXT 1 interface Changing the system time and date Adding administrator accounts Resetting to the factory default configuration Installing FortiBridge unit firmware Upgrading to a new firmware version Reverting to a previous firmware version Installing firmware from a system reboot Page Configuration and operating procedures Example network settings Tabl e 9 lists the internal network configuration. Tabl e 10 lists the basic FortiBridge unit configuration settings. Configuring FortiBridge probes Probe settings Enabling probes Verifying that probes are functioning Tuning the failure threshold and probe interval Configuring FortiBridge alerts FortiBridge alert email FortiBridge syslog FortiBridge SNMP Recovering from a FortiGate failure Manually switching between FortiBridge operating modes Backing up and restoring the FortiBridge configuration Page Page Using the CLI CLI basics Connecting to the FortiBridge CLI using SSH or Telnet Setting administrative access for SSH or Telnet Other access methods Connecting to the FortiBridge CLI using SSH Page Page config CLI commands alertemail setting Examples Page log syslogd setting probe probe_list {ping | http | ftp | pop3 | smtp | imap} probe setting system accprofile Page system admin Page system console system dns get system status system fail_close Use this command to configure the fail close feature. fail_bypass config system fail_close set <keyword> <variable> config system fail_close unset <keyword> Page system global config system global set <keyword> <variable> config system global unset <keyword> get system global show system global Page system interface {internal | external} system manageip system route system snmp community config hosts Page execute CLI commands backup date factoryreset ! ping Page restore Page time Page Index A B C D F G H I L N O P R S T U V