About FortiBridge, About this document | Fortinet Version 3.0


Introduction	About FortiBridge

Introduction

This chapter introduces you to the FortiBridge-1000 and FortiBridge-1000F products that provide fail open protection for FortiGate Antivirus Firewalls operating in transparent mode. Fail open protection keeps network traffic flowing in the event of a FortiGate unit failure. This chapter contains the following topics:

•About FortiBridge

•About this document

•Fortinet documentation

•Customer service and technical support

About FortiBridge

The FortiBridge products are a solution for enterprise organizations to provide fail open protection for FortiGate units deployed inline in transparent mode. The FortiBridge products use multiple probe protocols to detect failures in the FortiGate unit. FortiBridge zero power fail open technology means that the FortiBridge unit also fails open if a power failure occurs.

Figure 1: FortiBridge unit

INT 1				EXT 1
								BYPASS MODE


								MODE FACTORY RESET
								MODE FACTORY RESET
PWR			FortiGate					NORMAL
PWR								NORMAL
INT 2				EXT 2

A FortiBridge unit functions as a pass-through device when a FortiGate unit or FortiGate HA cluster operating in transparent mode fails or loses power. The FortiBridge unit bypasses the FortiGate unit to make sure that the network can continue processing traffic. The FortiBridge unit is not a firewall or antivirus device. FortiGate services are not applied when the FortiBridge unit bypasses traffic.

About this document

This document describes how to install, configure and maintain the

FortiBridge-1000 and the FortiBridge-1000F products.

This document contains the following chapters:

•FortiBridge operating principles contains general information about how FortiBridge units work.

•Setting up FortiBridge units contains hardware reference and general installation procedures for FortiBridge units.

•Configuration and operating procedures contains procedures for connecting and configuring FortiBridge units.

FortiBridge Version 3.0 Administration Guide	7
09-30000-0163-20061109

Image 7

Fortinet Version 3.0 manual About FortiBridge, About this document

Contents

M i n i s t r a t i o n G u i d e Regulatory compliance Trademarks Contents Using the CLI Configuration and operating proceduresConfig CLI commands Index Execute CLI commandsPage About this document About FortiBridge Fortinet Knowledge Center Customer service and technical supportFortinet documentation Fortinet tools and documentation CD Example FortiBridge application FortiBridge operating principles Connecting the FortiBridge-1000 copper gigabit ethernet Connecting the FortiBridge unit Connecting the FortiBridge-1000F fiber gigabit ethernet Normal mode operationHow the FortiBridge unit monitors the FortiGate unit Probes and FortiGate firewall policies Normal mode operation Enabling probes to detect FortiGate software failure Enabling probes to detect FortiGate hardware failureProbe interval and probe threshold FortiBridge power failure Bypass mode operation Example FortiGate HA cluster FortiBridge application Example configuration with other FortiGate interfaces Example configuration with other FortiGate interfaces Example configuration with other FortiGate interfaces FortiBridge unit basic information FortiBridge-1000 Package contents Mounting instructions FortiBridge-1000F Package contents LED indicators Technical specifications Factory default configuration Connectors Connecting and turning on the FortiBridge-1000 unit Connecting and turning on the FortiBridge unit To connect and turn on the FortiBridge-1000 unit Connecting and turning on the FortiBridge-1000F unitTo connect and turn on the FortiBridge-1000F unit To connect to the FortiBridge console for the first time Connecting to the command line interface CLIConnecting to the FortiBridge console FortiBridge-1000 login Welcome FortiBridge-1000 # Completing the basic FortiBridge configurationConnecting to the FortiBridge CLI using Telnet To connect to the CLI using Telnet To change the management IP address Adding an administrator passwordTo add an administrator password Changing the management IP address To add static routes Changing DNS server IP addressesAdding static routes To change DNS server IP addresses Adding administrator accounts Allowing management access to the EXT 1 interfaceChanging the system time and date Installing FortiBridge unit firmware Resetting to the factory default configurationTo reset to factory defaults from the FortiBridge CLI Upgrading to a new firmware version To upgrade to a new firmware versionExecute restore image namestr tftpip Execute restore image FBG1000-v10-build010-FORTINET.out To revert to a previous firmware version Reverting to a previous firmware version Enter Tftp server address Installing firmware from a system rebootTo install firmware from a system reboot Hit any key to stop autoboot Get system status Enter firmware image file image.out Example network settings Configuration and operating procedures Configuring FortiBridge probes Configuring FortiBridge probes To configure probe settings Probe settings Config probe probelist ping set status enable End To enable and configure FortiBridge probesEnabling probes Go to System Status Session Config probe probelist Imap set status enable EndVerifying that probes are functioning To verify that probes are functioning Tuning the failure threshold and probe interval Configuring FortiBridge alerts FortiBridge syslog To configure alert emailConfig alertemail setting set server mail.myorg.com End FortiBridge alert email Config log syslogd setting set server End To configure FortiBridge syslogFortiBridge Snmp To resume normal operation from bypass mode Recovering from a FortiGate failureTo add and enable an Snmp community Config system snmp community edit Set name snmp1 End To back up the FortiBridge configuration Manually switching between FortiBridge operating modesBacking up and restoring the FortiBridge configuration Execute switch-mode Backing up and restoring the FortiBridge configuration Backing up and restoring the FortiBridge configuration CLI basics Connecting to the FortiBridge CLI using SSH or TelnetSetting administrative access for SSH or Telnet To use the CLI to configure SSH or Telnet access Get system interface namestr Other access methodsConnecting to the FortiBridge CLI using SSH Set allowaccess ping telnet ssh To connect to the CLI using SSH Connecting to the FortiBridge CLI using SSH or Telnet Config CLI commands Command syntax pattern Alertemail settingExamples Related Commands Example Log syslogd setting Show probe probelist Probe probelist ping http ftp pop3 smtp imapGet probe probelist Get probe probelist http Syslog Probe setting Rw w System accprofile Get system accprofile policyprofile Get system accprofileShow system accprofile Password passwordstr System admin Get system admin newadmin Get system adminShow system admin Show system console Config system console set EndSystem console Get system console Get system dns System dnsShow system dns Get system status Failbypass System failclose System failclose Minutesinteger System global Show system global Get system global Get system interface internal System interface internal externalShow system interface internal System manageip Config system manageip Set ip 192.168.2.80 255.255.255.0 end Distanceinteger System route System snmp community Config hosts Show system snmp community Get system snmp community Execute CLI commands Execute backup config fbdg.cfg BackupCommand syntax Execute backup config filenamestr tftp-serveripv4 Execute date datestr datestr has the form mm/dd/yyyy, where DateExecute date 09/17/2004 Execute factoryreset Factoryreset Execute ping addressipv4 host-namestr Ping Execute reboot Reboot Execute restore config backupconfig Restore Switch-mode Execute time timestr Time Time Index 09-30000-0163-20061109 Snmp SSH