background image

www.fortinet.com

FortiController-5208   System Guide

01-30000-0376-20070615

PAYLOAD OPERATION

STATUS

IPM

X 1

X 2

1/2

3/4

D15/D16

C15/C16

1

2

3

4

5

6

7

8

9

10

11

12

D

13

14

15

16

D

1

2

3

4

5

6

7

8

9

10

11

12

C

13

14

15

16

C

10/100/1000 MBPS ETHERNET ACTIVITY

DATA

CONTROL

1

2

3

4

MANAGEMENT

COM 1

COM 2

X 1

X 2

FortiController-5208

S y s t e m   G u i d e

A detailed guide to the FortiController-5208 module. This document describes the module LEDs and connectors, 
describes how to install the module in a FortiGate-5000 series chassis, and contains a brief troubleshooting section 
to help you diagnose and fix problems with the module.

The most recent versions of this and all FortiGate-5000 series documents are available from the 

FortiGate-5000

 

page of the 

Fortinet Technical Documentation

 web site (

http://docs.forticare.com

).

Visit 

http://support.fortinet.com

 to register your FortiController-5208 system. By registering you can receive product 

updates, technical support, and FortiGuard services.

Summary of Contents for FortiController FortiController-5208

Page 1: ... module This document describes the module LEDs and connectors describes how to install the module in a FortiGate 5000 series chassis and contains a brief troubleshooting section to help you diagnose and fix problems with the module The most recent versions of this and all FortiGate 5000 series documents are available from the FortiGate 5000 page of the Fortinet Technical Documentation web site ht...

Page 2: ...5208 modules at a static free workstation Always wear a grounded electrostatic discharge ESD preventive wrist or ankle strap when handling FortiController 5208 modules Do not carry the FortiController 5208 module by holding the extraction levers When inserting or removing the FortiController 5208 module from a chassis slot handle the module by the front panel The extraction levers are designed for...

Page 3: ...ntents FortiController 5208 System Guide 01 30000 0376 20070615 3 Contents About this guide 2 FortiController 5208 module 5 Hardware installation 9 FortiController 5208 Firmware 17 For more information 27 ...

Page 4: ...FortiController 5208 System Guide 4 01 30000 0376 20070615 Contents ...

Page 5: ...ble of network interfaces by adding a second FortiController 5208 Once initial set up is complete all subsequent administration and configuration of the FortiController 5208 modules and FortiGate 5005 modules is done through the primary FortiController 5208 module The FortiGate 5005 modules are administered as a single unit and therefore configured identically All traffic is distributed to the For...

Page 6: ...6 7 8 9 10 11 12 D 13 14 15 16 D 1 2 3 4 5 6 7 8 9 10 11 12 C 13 14 15 16 C 10 100 1000 MBPS ETHERNET ACTIVITY DATA CONTROL 1 2 3 4 MANAGEMENT COM 1 COM 2 X 1 X 2 SFP Gigabit Fiber or Copper 1 3 4 2 Management RJ 45 Serial Extraction Lever IPM Status X1 X2 XFP 10 Gigabit Fiber or Copper Payload Operation Link Traffic Extraction Lever Mounting Knot Mounting Knot Link Traffic D15 D16 C15 C16 Managem...

Page 7: ...ne connection 1 2 3 4 Green The correct cable is connected to the gigabit SFP interface Flashing Network activity at the gigabit SFP interface IPM Blue The FortiController 5208 is ready to be hot swapped removed from the chassis If the IPM light is blue and no other LEDs are lit the FortiController 5208 module has lost power See Inserting a FortiController 5208 module into a chassis on page 10 for...

Page 8: ...e required for connections between the installed modules Once the FortiController 5208 module is configured as the primary and the FortiGate 5005FA2 modules are configured to use the LDB firmware all communication between the installed modules is automatic and requires no configuration 1 2 3 4 LC SFP 1000 Mbps Ethernet Four 1 gigabit SFP interfaces that can accept fiber or copper transceivers Thes...

Page 9: ...e cage sockets numbered D15 D16 and 1 to 4 You can install the transceivers before or after inserting the FortiController 5208 module into a FortiGate chassis You can install the following types of XFP transceivers for connectors X1 and X2 XFP fiber transceivers XFP fiber transceivers You can install the following types of SFP transceivers for connectors 1 to 8 SFP fiber transceivers SFP 1000Base ...

Page 10: ...ly tightened for the FortiController 5208 module to receive power and operate normally If the FortiController 5208 module is not receiving power the IPM LED glows solid blue and all other LEDs remain off It is important to carefully seat the FortiController 5208 module all the way into the chassis to not use too much force on the extraction levers and to make sure that the extraction levers are pr...

Page 11: ...ble The procedure for inserting the FortiController 5208 module into a FortiGate 5000 series chassis slot is the same whether or not the FortiGate 5000 series chassis is powered on or not To insert a FortiController 5208 module into a FortiGate 5000 series chassis To complete this procedure you need A FortiController 5208 module A FortiGate 5140 or FortiGate 5050 chassis with an empty slot 1 for t...

Page 12: ...ance while sliding the module in the module could be aligned incorrectly Pull the module back out and try inserting it again 6 Slide the module in until the alignment pins are inserted half way into their sockets in the chassis 7 Turn both extraction levers to their fully closed positions The extraction levers should hook into the sides of the chassis slot Closing the extraction levers draws the F...

Page 13: ...ssis slot Removing a FortiController 5208 module from a chassis The following procedure describes how to correctly use the FortiController 5208 mounting components shown in Figure 2 to remove a FortiController 5208 module from a FortiGate 5140 or FortiGate 5050 chassis slot To remove a FortiController 5208 module from a FortiGate 5000 series chassis FortiController 5208 modules are hot swappable T...

Page 14: ...of the FortiController 5208 module front panel 4 Unlock the left and right extraction levers by squeezing the extraction lever locks 5 Open the left and right extraction levers to their fully open positions Opening the extraction levers slides the module a short distance out of the slot disconnecting the module from the chassis backplane The IPM LED turns solid blue All other LEDs turn off 6 Pull ...

Page 15: ...insert a FortiController 5208 module the module attempts to communicate with the shelf manager If the FortiController 5208 module cannot communicate with the shelf manager the module will not start up If a shelf manager is installed make sure it is functioning normally the Status LED is green and all other LEDs are off If the shelf manager is not functioning normally you can try removing it from t...

Page 16: ...FortiController 5208 System Guide 16 01 30000 0376 20070615 Troubleshooting Hardware installation ...

Page 17: ...08 to a new firmware version Use the web based manager or CLI procedure to upgrade to a new firmware version or to a more recent build of the same firmware version Upgrading the firmware using the web based manager Use the following procedures to upgrade the primary FortiController 5208 module to a new firmware version A secondary FortiController 5208 module can only be upgraded using the CLI proc...

Page 18: ... is the IP address of the TFTP server For example if the firmware image file name is image out and the IP address of the TFTP server is 192 168 1 168 enter execute restore image io image out 192 168 1 168 The FortiController 5208 module responds with the message This operation will replace the current firmware version Do you want to continue y n 6 Type y The FortiController 5208 module uploads the...

Page 19: ...ger 8 Go to System Status and check the Firmware Version to confirm the firmware is successfully installed 9 Restore your configuration Reverting to a previous firmware version using the CLI This procedure reverts the FortiController 5208 module to its factory default configuration Before beginning this procedure it is recommended that you back up the FortiController 5208 module system configurati...

Page 20: ...e After the file uploads a message similar to the following is displayed Get image from tftp server OK Check image OK This operation will downgrade the current firmware version Do you want to continue y n 7 Type y The FortiController 5208 module reverts to the old firmware version resets the configuration to factory defaults and restarts This process takes a few minutes 8 Reconnect to the CLI 9 To...

Page 21: ... 5208 module can connect to the TFTP server use the following command to ping the computer running the TFTP server For example if the IP address of the TFTP server is 192 168 1 168 execute ping 192 168 1 168 6 Enter the following command to restart the FortiController 5208 module execute reboot The FortiController 5208 module responds with the following message This operation will reboot the syste...

Page 22: ...message appears Enter TFTP server address 192 168 1 168 13 Type the address of the TFTP server and press Enter The following message appears Enter Local Address 192 168 1 188 14 Type an IP address the FortiController 5208 module can use to connect to the TFTP server The IP address can be any IP address that is valid for the network the interface is connected to Make sure you do not enter the IP ad...

Page 23: ...successfully you can install it permanently using the procedure Upgrading the FortiController 5208 to a new firmware version on page 17 Use this procedure to test a new firmware image before installing it To use this procedure you must connect to the CLI using the FortiGate console port and a RJ 45 to DB 9 serial cable This procedure temporarily installs a new firmware image using your current con...

Page 24: ...menu and continue to boot with default firmware H Display this list of options Enter G F B I Q or H 8 Type I and the Configuration and information menu is displayed S Set serial port baudrate will take effect on next boot T Set image download port C Set DHCP enable will take effect on next boot D Set bootup debug message display will take effect on next boot I Display hardware information Q Quit t...

Page 25: ... network The following message appears Enter File Name image out 15 Enter the firmware image filename and press Enter The TFTP server uploads the firmware image file to the FortiController 5208 module and messages similar to the following are displayed Save as Default firmware Backup firmware Run image without saving D B R 16 Type R The FortiGate image is installed to system memory and the FortiCo...

Page 26: ...FortiController 5208 System Guide 26 01 30000 0376 20070615 Testing a new firmware image before installing it FortiController 5208 Firmware ...

Page 27: ... from the Fortinet Knowledge Center The knowledge center contains troubleshooting and how to articles FAQs technical notes and more Visit the Fortinet Knowledge Center at http kc forticare com Comments on Fortinet technical documentation Please send information about any errors or omissions in this document or any Fortinet technical documentation to techdoc fortinet com Customer service and techni...

Page 28: ...mic Threat Prevention System DTPS APSecure FortiASIC FortiBIOS FortiBridge FortiClient FortiGate FortiGate Unified Threat Management System FortiGuard FortiGuard Antispam FortiGuard Antivirus FortiGuard Intrusion FortiGuard Web FortiLog FortiAnalyzer FortiManager Fortinet FortiOS FortiPartner FortiProtect FortiReporter FortiResponse FortiShield FortiVoIP and FortiWiFi are trademarks of Fortinet In...

Reviews: