Fortinet Fortigate-5000 series, Manual

Page 1: ...FortiGate 5144C Chassis Guide FortiGate 5000 Series...

Page 2: ...t fortinet com FORTINET TRAINING CERTIFICATION PROGRAM https www fortinet com support and training training html NSE INSTITUTE https training fortinet com FORTIGUARD CENTER https fortiguard com END US...

Page 3: ...boards and RTM modules 23 Installing FortiController or FortiSwitch boards 24 Power connection and configuration 25 FortiGate 5144C chassis power level requirements 25 Connecting the FortiGate 5144C c...

Page 4: ...P address and default gateway 43 Sensor types 44 CLI command Reference 44 activate deactivate 44 alarm 45 board 46 clia 47 exit quit 47 fans 47 fru 48 fruinfo 48 getlanconfig 49 getthreshold threshold...

Page 5: ...tices cautions and warnings 89 Federal Communication Commission FCC USA 89 Industry Canada Equipment Standard for Digital Equipment ICES Canada 89 Voluntary Control Council for Interference VCCI Japan...

Page 6: ...Change log Fortinet Technologies Inc Change log Date Change description April 13 2020 New version FortiGate 5144C Chassis Guide 6...

Page 7: ...ortiGate 5144C fabric and base backplane switching and to support FGCP clustering l Two FortiController 5103B boards can be installed in slots 1 and 2 to create an SLBC for FortiGate 5001D or older wo...

Page 8: ...14 FortiGate 5001D boards slots 3 5 7 9 11 and 13 FortiController 5903C boards slots 1 and 2 ESD socket Slot numbers Fan Tray 1 front Fan Tray 2 front Primary Shelf Manager Secondary Shelf Manager Ai...

Page 9: ...e covered by RTM air baffle slot covers The back panel includes the FortiGate 5144C chassis ground connector that must be connected to ground Example FortiGate 5144C chassis back panel Chassis ground...

Page 10: ...RJ 45 RS 232 console cable l One RJ 45 Ethernet cable l Rack mount template labeled metal strips showing how to line up cage nuts with rack holes when installing the chassis l 5 spare nuts and washer...

Page 11: ...3 919 FortiSwitch 5003B Front Panel 8 x 10 Gbps Fabric 10 Gbps Backplane switching FGCP HA and extended load balancing ELBC Max 180 Ave 150 614 FortiController 5103B Front Panel 8 x 10 Gbps or 8 x 1 G...

Page 12: ...sical description of the FortiGate 5144C chassis The FortiGate 5144C chassis is a 14U chassis that can be installed in a standard 19 inch rack The following table describes the physical characteristic...

Page 13: ...ch other and if the active shelf manager stops communicating for example because it has failed or is restarting the backup shelf manager becomes the active shelf manager When the failed or restarting...

Page 14: ...panel Ethernet interface ETH0 or to the B1 or B2 interface of a hub or switch board installed in chassis slot 1 or 2 If your chassis has two shelf managers one in the primary shelf manager slot and o...

Page 15: ...SH1 of one chassis slot and ETH1 connects to SH2 of the other chassis slot Shelf Manager Ethernet cross connections and connections to chassis slots Changing the shelf manager switch configuration to...

Page 16: ...e front panel Ethernet interface Entering these commands except for get_EEPROM_config reboots the shelf manager If your chassis has two shelf managers if you enter one of these commands to change the...

Page 17: ...chassis MINOR Minor Alarm Amber Minor alarm detected in chassis POWER OK Green Input power to the chassis is within limits FortiGate 5144Cshelf manager Buttons Button Description H S Hot Swap Start th...

Page 18: ...up and running the shelf manager reduces cooling fan speeds to maintain an optimum temperature in the chassis If shelf managers are not installed or not operating correctly the FortiGate 5144C chassi...

Page 19: ...rm connector pin assignment Pin Descrption 1 MinorReset 2 MinorReset 3 MajorReset 4 MajorReset 5 CriticalAlarm NO 6 Critical Alarm NC 7 Critical Alarm COM 8 Minor Alarm NO 9 Minor Alarm NCT 10 Minor A...

Page 20: ...ews Cooling fans cooling air flow and minimum clearance The FortiGate 5144C chassis contains four hot swappable cooling fans fan 1 to fan 4 installed in the fan cabinet at the top of the chassis Two f...

Page 21: ...is enough clearance for effective cooling air flow The following diagram shows the cooling air flow through the chassis and the locations of the air filter and cooling fans Make sure the cooling air i...

Page 22: ...chassis can be mounted in a 4 post rack using the rack mount brackets in the standard front mounting position as they are installed the chassis when it is shipped If you choose to mount the chassis in...

Page 23: ...rtiSwitch 5000 series boards into the front of the FortiGate 5144C chassis and RTM modules into the back of the chassis Arrange the boards and modules in slots as required for your configuration Forti...

Page 24: ...ntation supplied with the board or module Installing FortiController or FortiSwitch boards FortiController and FortiSwitch boards are always installed in chassis in slots 1 or 2 to provide fabric and...

Page 25: ...ould only be used to connect the FortiGate 5144C PEMs to a FortiGate 5053B power convertor shelf if purchased with your FortiGate 5144C chassis The double hole lugs to be connected to the FortiGate 51...

Page 26: ...undant power you can also connect the PEMs in Feed B to a 48VDC 60VDC power source Each PEM includes a Reverse Voltage LED that lights if you have reversed the polarity when connecting power FortiGate...

Page 27: ...e system power to remove a PEM You can add remove or replace a second PEM without interrupting FortiGate 5144C operation Crimping guidelines To connect the PEMs to data center power you should use 8 A...

Page 28: ...Voltage LEDs Terminal Cover Terminal Cover Fuse LEDs channels 5 to 8 Active OOS and H S LEDs FortiGate 5144C PEM LEDs LED State Description ACTIVE Solid Green Normal operation OOS Out of Service Off N...

Page 29: ...que of more than 3 8 Nm 33 62 lbf in 6 Connect red RTN power wires from your location s RTN terminal to the connectors on the PEMs labeled using double hole lugs Install each double hole lug verticall...

Page 30: ...helf and PSU 5000B power supplies If DC power is not available at your location you can use the FortiGate 5053B 1U 19 inch rack mount power supply shelf with PSU 5000B hot swappable power supplies to...

Page 31: ...de 2725W of DC power and a fully populated FortiGate 5053B power supply shelf can provide up to 10 9KW of DC power and 8175W of DC power with 3 1 redundancy with an output voltage of 54 VDC l When con...

Page 32: ...require one FortiGate 5053B power supply shelf connected to power feed A PEM 1 and PEM 2 The power supply shelf would include three PSU 5000B units and produce a total of 8175W You can add a fourth p...

Page 33: ...elf 4 Connect four black 48V power wires to the connectors labeled NEG on the back of the FortiGate 5053B power supply shelf using the double hole lug Install each double hole lug either horizontally...

Page 34: ...AC connectors 1 and 2 to AC power If your power supply shelf contains four power supplies connect all four AC in connectors to AC power Connecting Feed A PEM1 and PEM2 or Feed B PEM3 and PEM4 a Forti...

Page 35: ...chassis power If you are using a power supply shelf connect the power supply shelf to AC power and verify that it is operating correctly If you are using local DC power turn on the power to the chassi...

Page 36: ...lligent management controllers of the shelf with boards and with the Shelf Manager itself The CLI is an IPMI based set of commands The Intelligent Platform Management Interface specification IPMI spec...

Page 37: ...e prompt Connecting to the shelf manager CLI from an Ethernet network You can connect to the shelf manager CLI by connecting the shelf manager front panel front panel Ethernet interface to a network I...

Page 38: ...elf manager root account password becomes lost you can reset the password to its factory default using the password_reset U Boot variable Setting this variable to y and rebooting the shelf manager rem...

Page 39: ...er_supply N valid in 2 x systems only fan_tray N PwrReorder addr1 fru_id1 before after addr2 fru_id2 Using CLIA interactive mode You can also enter clia without parameters to enter interactive mode In...

Page 40: ...with an ID of FRU 0 However if a FortiGate 5001A board is installed in a slot with an AMC module this slot has two FRUs FRU 0 and FRU 1 For example a FortiGate 5001A board with an AMC module is instal...

Page 41: ...C ATCA logical slot 13 9A 4D ATCA logical slot 14 9C 4E Change IP address of the primary Shelf Manager The default IP address of the primary shelf manager is 192 168 0 2 Use the following command to c...

Page 42: ...sensor t Display sensor data for a FRU clia sensordata IPMB_address sensor_number Display the FRU information for a FRU clia fruinfo IPMB_address FRU_id Change the speed for a fan tray clia setfanlev...

Page 43: ...Port Number 0x026f Secondary RMCP Port Number 0x0298 BMC generated ARP Control 0x02 Enable BMC generated ARP Response Gratuitous ARP Interval 2 0 seconds Default Gateway Address 192 168 0 1 Default G...

Page 44: ...sor types and monitored entities are represented using numeric codes in hexadecimal defined in the IPMI specification Example of sensor type l 01 for temperature sensor l 02 for voltage sensor l C0 FF...

Page 45: ...conf file contains the following lines ALLOW_CLEARING_CRITICAL_ALARM This parameter of boolean type enables the ability to clear the critical alarm condition without the alarm cutoff button Default i...

Page 46: ...ddressable using the IPMB address FRU device ID pair Viewing information about a board Enter the following command to view information about a particular board for example the board in physical slot 1...

Page 47: ...mode fans clia fans v IPMB_address FRU_device_ID Display information about the specified fan FRU If FRU_device_ID is omitted the command displays information about all fan FRUs controlled by the IPM...

Page 48: ...or a specific FRU Enter this command with an IPMB address that refers to a physical slot to display information similar to that displayed by the clia board command see board on page 46 For example to...

Page 49: ...on for a configuration parameter The following table lists some commonly used parameter_names and parameter_ numbers Displaying all configuration parameters for a channel If you do not include a param...

Page 50: ...Mask 255 255 255 0 The following command displays the default gateway IP address associated with channel 1 clia getlanconfig 1 dft_gw_ip Pigeon Point Shelf Manager Command Line Interpreter Default Gat...

Page 51: ...1 754200 Volts 90 LUN 0 Sensor 6 5 0V Type Threshold 0x01 Voltage 0x02 Lower Non Critical Threshold Raw Data 0xbe Processed data 4 655000 Volts Lower Critical Threshold Raw Data 0xb8 Processed data 4...

Page 52: ...e Threshold Raw Data 0x6c Processed data 1 058400 Volts Upper Non Critical Threshold Raw Data 0x80 Processed data 1 254400 Volts Upper Critical Threshold Raw Data 0x85 Processed data 1 303400 Volts Up...

Page 53: ...ds clia help Pigeon Point Shelf Manager Command Line Interpreter Command Line Interface command set Parameters are case insensitive In general IPMB address is hexadecimal ALWAYS All other numbers may...

Page 54: ...arameter number parameter name getlanconfig channel number parameter number parameter name getpefconfig parameter name parameter number set selector getsensoreventenable addr lun sensor_id sensor name...

Page 55: ...ssertion mask event_data b1 b2 b3 event_data_no_offset b1 b2 b3 setsensoreventenable addr lun sensor_id sensor name global assertion_events deassertion_events setsolconf a Displaying more information...

Page 56: ...the contents of the SEL on the specified IPM Controller at IPMB address 20h by default The optional record count indicates how many records from the record number starting entry in the SEL are displa...

Page 57: ...ate a problem last hex number is not 0x88 for the IPMB link sensor F1 on slot 9 and 10 The problem has cleared quickly because the last two lines show last hex number is 0x88 0x0219 Event at Aug 6 10...

Page 58: ...ollowing information is displayed for each sensor l IPMB address of the owning IPM controller l Sensor number sensor name device ID string from the SDR and the LUN by which the sensor can be accessed...

Page 59: ...qualification and the target controller exposes sensor 3 on LUN 1 and another sensor 3 on LUN 3 the command is applied to the sensor 3 on LUN 1 This command can also be issued on the backup Shelf Mana...

Page 60: ...agement Control Protocol RMCP interface and state of the backup Shelf Manager if the Shelf Manager being queried is the active one The command output includes a Ready For Operation flag that shows Yes...

Page 61: ...nclude force to force the switchover without any negotiation The backup shelf manager immediately becomes the active shelf manager and the active shelf manager reboots and starts up as the backup shel...

Page 62: ...l user_name is a user name truncated to the 16 characters without notice l channel_access_flags is the first byte of the SetUserInfo commands only bits 4 5 6 are meaningful l bit 6 enables IPMI messa...

Page 63: ...xample enter the following command to disable user account 34 clia user enable 34 0 Changing a user account user name Use the following command syntax to change a user account user name clia user name...

Page 64: ...configure the shelf manager to send SNMP traps when a component of a chassis or a board in a chassis fails or encounters a problem for example a temperature sensor exceeds its range This section descr...

Page 65: ...can create multiple alert policies and configure multiple destinations for each policy This section describes how to create one alert policy called alert policy number 5 The alert policy number is us...

Page 66: ...use the following command to set the community name to MyCommunity clia setlanconfig 1 16 MyCommunity 3 You can enter the following command to confirm that the community name has been changed clia ge...

Page 67: ...selecting particluar events In this example they are all set to 0 which means they have no effect Add filter entry 1 for the FortiSwitch board in logical slot 1 The filter entry uses filter configurat...

Page 68: ...n Process Last State Change Cause Normal State Change 0x0 Device ID String PEMA1 Enter the following command to deactivate this PEM clia deactivate 20 7 Enter the following command to display the syst...

Page 69: ...ternet 192 168 181 66 192 168 181 66 generic trap enterpriseSpecific 6 specific trap 15757062 time stamp 1975765011 variable bindings 1 item Item name 1 3 6 1 4 1 3183 1 1 1 SNMPv2 SMI enterprises 318...

Page 70: ...4 state changes and 4 SNMP traps sent Setting up SNMP polling for the shelf manager To allow an SNMP manager to poll monitor the shelf manager you need to change the community strings in the shelf man...

Page 71: ...ents and this section describes how to read and interpret the SEL Before you begin Before going further in this section you should log into your active shelf manager and enter the following commands T...

Page 72: ...ay 0 IPMC 10 Sensor 7 l RPM of fan 2 of 2 in Fan Tray 2 IPMC 10 Sensor 14 l Physical presence of Fan Tray 2 IPMC 20 Sensor 14 l Chassis center exhaust temperature IPMC 20 sensor 120 l Slot 1 FG 5005FA...

Page 73: ...oing wrong but also when they return to normal In this case asserted is the key point meaning that the sensor has observed that the device has gone outside the bounds or thresholds that have been set...

Page 74: ...e M7 Communication Lost Previous M4 Active Last State Change Cause Unknown 0xf 88 Entity 0xa0 0x60 Maximum FRU device ID 0x00 Hot Swap State M7 Communication Lost Previous M4 Active Last State Change...

Page 75: ...ause Normal State Change 0x0 Device ID String ShelfFRU1 20 FRU 2 Entity 0xf2 0x61 Hot Swap State M4 Active Previous M3 Activation In Process Last State Change Cause Normal State Change 0x0 Device ID S...

Page 76: ...Cause Normal State Change 0x0 Device ID String PEMB2 Example sensor log output clia sensordata Pigeon Point Shelf Manager Command Line Interpreter 10 LUN 0 Sensor 0 FRU 0 HOT_SWAP Type Discrete 0x6f H...

Page 77: ...FRU 0 10 LUN 0 Sensor 237 I2C Switch Ch4 i Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0xf0 96 FRU 0 10 LUN 0 Sensor 240 Shelf BP ID Type Discrete 0x6f OEM reserved 0xd6 Belongs to enti...

Page 78: ...HOT_SWAP Type Discrete 0x6f Hot Swap 0xf0 Belongs to entity 0x15 98 FRU 9 20 LUN 0 Sensor 11 FRU 10 HOT_SWAP Type Discrete 0x6f Hot Swap 0xf0 Belongs to entity 0x15 99 FRU 10 20 LUN 0 Sensor 12 IPMB...

Page 79: ...IPMB Link 0xf1 Belongs to entity 0xf0 1 FRU 0 20 LUN 0 Sensor 25 IPMB LINK 2 Type Discrete 0x6f IPMB Link 0xf1 Belongs to entity 0xf0 1 FRU 0 20 LUN 0 Sensor 26 IPMB LINK 15 Type Discrete 0x6f IPMB L...

Page 80: ...1 Feed1 Fuse P Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 LUN 1 Sensor 145 FT1 Feed2 Fuse P Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 L...

Page 81: ...e 0x6f Entity Presence 0x25 Belongs to entity 0x15 96 FRU 7 20 LUN 1 Sensor 163 FT3 Feed2 Power Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 98 FRU 5 20 LUN 0 Sensor 163 PEM A1 FuseF...

Page 82: ...pe Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 99 FRU 6 20 LUN 1 Sensor 174 FT4 Feed1 Fuse P Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 99 FRU 6 20 LUN 1 Sensor 175 F...

Page 83: ...Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x15 97 FRU 8 20 LUN 0 Sensor 199 PEM A2 Presence Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x15 97 FRU 8 20 LUN 0 Sensor 200 PEM...

Page 84: ...crete 0x6f Entity Presence 0x25 Belongs to entity 0x15 99 FRU 10 20 LUN 1 Sensor 221 PEM A1 Presence Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0xf0 1 FRU 0 20 LUN 0 Sensor 222 PEM B2 F...

Page 85: ...e Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x15 99 FRU 10 20 LUN 0 Sensor 232 PEM B2 Rev In5_8 Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x15 99 FRU 10 20 LUN 1 Sensor 232...

Page 86: ...pe Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 LUN 0 Sensor 242 FAN3 RPM Type Threshold 0x01 Fan 0x04 Belongs to entity 0x1e 98 FRU 5 20 LUN 3 Sensor 242 FT3 INIT Type Discre...

Page 87: ...e Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 LUN 3 Sensor 248 FT3 COMM LOST Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 98 FRU 5 20 LUN 1 Sensor 249 FT2 C...

Page 88: ...0x6f asserted HotSwap FRU 0 M3 M4 Cause 0x0 Fan 2 in middle Fan Tray is spinning slower than required 0x018D Event at Jan 1 00 02 15 1970 from 0x10 0 0 sensor 0x04 10 event 0x1 asserted Upper Critica...

Page 89: ...cations Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense WARNING Any cha...

Page 90: ...temp rature ambiante maximale du fabricant Tma Air flow For rack installation make sure that the amount of air flow required for safe operation of the equipment is not compromised For free standing in...

Page 91: ...eur de la baie doit tre effectu e de fa on viter toute situation dangereuse li e une installation non conforme Ne placez pas d objets lourds sur l appareil celui ci n tant pas con u pour soutenir un p...

Page 92: ...WG Seul un technicien qualifi est autoris effectuer le raccordement Caution Double pole neutral fusing Attention fusion bipolaire neutre Turning off all power switches may not turn off all power to th...

Page 93: ...r 5000 Series Boards including Shelf Manager of the equipment or subassembly is suitable for connection to intrabuilding or unexposed wiring or cabling only The intrabuilding port s of the equipment o...

Page 94: ...inet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warrants that the identified product will perform according to certain expressly identified...