Fortinet FortiGate-6000F Series, System Manual

Page 1: ...FortiGate 6000F System Guide FortiGate 6000F Series...

Page 2: ...fortinet com FORTINET TRAINING CERTIFICATION PROGRAM https www fortinet com support and training training html NSE INSTITUTE https training fortinet com FORTIGUARD CENTER https fortiguard com END USE...

Page 3: ...PSUs to low line AC power 19 AC PSU LED states 19 Connecting FortiGate 6000F PSUs to AC power 20 Hot swapping an AC PSU 20 Connecting the FortiGate 6000F to ground 20 FortiGate 6000F hardware assembl...

Page 4: ...individual FPC 38 Installing firmware from the BIOS after a reboot 39 Synchronizing the FPCs with the management board 41 Cautions and warnings 43 Environmental specifications 43 Safety 44 Regulatory...

Page 5: ...ecting generation 1 or 2 FortiGate 6000F PSUs to low line AC power on page 19 describes FortiGate 6000F generation 1 AC PSUs September 2 2020 More information about FPC failure with power loss added t...

Page 6: ...ocessor Cards FPCs that contain NP6 and CP9 security processors The management board handles management tasks separating management tasks from data processing tasks that are handled by the FPCs The Fo...

Page 7: ...P out of band management interface MGMT3 l One RJ 45 RS 232 serial console connection l One USB connector Interface groups and changing data interface speeds Depending on the networks that you want to...

Page 8: ...arm One or more analog sensors excluding PSUs has surpassed a major or critical CR threshold Any sensor including sensors on PSUs has generated an alert Sensor alert criteria is defined per sensor For...

Page 9: ...and the attached network device has power Flashing Green Network activity at the interface Off No link is established MGMT3 Right LED Not used HA1 HA2 Link Activity Green This interface is connected a...

Page 10: ...nsceiver For out of band management or system administration HA1 HA2 SFP 1 10Gbps Ethernet 1 10GigE connection using SFP or SFP transceivers For HA heartbeat and synchronization 1GigE not recommended...

Page 11: ...connect to the management board MBD CLI of the FortiGate 6000F You can also press Ctrl T to switch between the management board CLI and the CLIs of each of the FPCs in your FortiGate 6000F the new de...

Page 12: ...hoot problems with your FortiGate 6000F you can use the front panel non maskable interrupt NMI switch to assist with troubleshooting Pressing this switch causes the software to dump management board r...

Page 13: ...anagement functions such as administrator logins configuration and session synchronization SNMP and other monitoring HA heartbeat communication and remote and if supported local disk logging Separatin...

Page 14: ...ace over the HA1 and HA2 interfaces Administrator logins SNMP monitoring remote logging to one or more FortiAnalyzers or syslog servers and other management functions use the MGMT1 MGMT2 and MGMT3 int...

Page 15: ...J 45 Ethernet cable l Two FG TRAN SFP SR transceivers Optional accessories and replacement parts The following optional accessories can be ordered separately SKU Description FG 6000F FAN FortiGate 600...

Page 16: ...When connected to high line AC power generation 2 FortiGate 6000F models provide 1 1 PSU redundancy When connected to high line AC power each PSU provides 2000W which is enough power to run the entir...

Page 17: ...FortiGate 6000F AC power supply units PSUs The FortiGate 6000F back panel includes three hot swappable redundant AC PSUs PSU1 PSU2 and PSU3 Two generations of FortiGate 6000F models have been release...

Page 18: ...power If you connect a generation 2 FortiGate 6000F to high line AC power each PSU provides 2000W AC which is all the power required by the FortiGate 6000F Only two PSUs PSU1 and PSU2 each connected t...

Page 19: ...he FPC with the highest slot number until only four FPCs are running Usually this results in the FPCs in slots 1 to 4 running if there is only one PSU connected If one of the FPCs in slot 1 to 4 has p...

Page 20: ...ng traffic as long as one PSU remains connected to power at all times 1 Attach an ESD wrist strap to your wrist and to an ESD socket or to a bare metal surface on the chassis or frame 2 Turn off the p...

Page 21: ...1 Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal surface on the FortiGate 6000F 2 Make sure that the FortiGate 6000F and ground wire are not energized 3 Connect the g...

Page 22: ...ended that two or more people install the FortiGate 6000F into the rack Do not place heavy objects on the appliance Ensure there is enough room around the appliance to allow for sufficient air flow Co...

Page 23: ...the rails and fully slid into the rack the FortiGate 6000F locks into place You can press the system release buttons that project out of the front of the rack to unlock the rails and slide the FortiGa...

Page 24: ...For example on a lifting device in front of the rack that it will be installed into 2 Remove the right rail assembly from the packaging and begin sliding the right inner rail out of it 3 Unlock the ri...

Page 25: ...it to lock the pins in place 4 Pull out the bracket on the back of the right outer rail to adjust its position until it matches up with the back post of the rack 5 Verify that the rail is level then p...

Page 26: ...l the lock out tabs on the inner rails click into the front of the middle rails Keep the rails aligned and apply even pressure to both sides of the FortiGate 6000F while doing this 6 Slide the release...

Page 27: ...ed to it 2 Remove the four rack screws to allow the FortiGate 6000F to slide out of the rack 3 Squeeze the system release buttons on the front of both inner rails at the same time to release the Forti...

Page 28: ...level Installing QSFP28 SFP28 SFP and SFP transceivers You must install QSFP28 or QSFP transceivers into the 25 to 28 interfaces before connecting them to 100Gbps or 40Gbps networks You must install S...

Page 29: ...preventive wrist strap when handling FortiGate 6000Fs Handling the transceivers by holding the release latch can damage the connector Do not force transceivers into their cage slots If the transceiver...

Page 30: ...necting MGMT1 or MGMT2 to your network and browsing to https 192 168 1 99 or https 192 168 2 99 l Log in to the management board CLI by connecting MGMT1 or MGMT2 to your network and using an SSH clien...

Page 31: ...with in_sync 0 that FPC is not synchronized The following example just shows a few output lines diagnose sys confsync status grep in_sy FPC6KF3E17900200 Slave uptime 5385 45 priority 119 slot_id 2 1...

Page 32: ...me set ip ip address netmask end Adding a password to the admin administrator account For security purposes one of the first things you should do is add a password to the admin account Depending on yo...

Page 33: ...the FortiGate 6000 connect to the management board CLI and enter the execute reboot command After you enter this command the management board and all of the FPCs restart To restart an individual FPC...

Page 34: ...agement port numbers you can set slbc mgmt intf to an interface that is not connected to a network does not have a valid IP address or has management or administrative access disabled For example if t...

Page 35: ...e The System Information dashboard widget also shows the host name and serial number The CLI prompt also shows slot address in the format hostname slot address Logging in to different FPCs allows you...

Page 36: ...For example from the management board CLI use the following command to log in to the console of the FPC in slot 3 execute system console server connect 3 Authenticate to log in to the console and use...

Page 37: ...FPC slot numbers start at 1 When connected to the CLI of a FPC you can view information about the status or configuration of the FPC restart the FPC or perform other operations You should not change t...

Page 38: ...stem Some firmware upgrades may take longer depending on factors such as the size of the configuration and whether an upgrade of the DP3 processor is included Before beginning a firmware upgrade Forti...

Page 39: ...FortiGate 6301F devices The field in_sync 1 indicates that the configuration of the FPC is synchronized FPC6KFT018901327 Slave uptime 615368 33 priority 19 slot_id 1 1 idx 1 flag 0x4 in_sync 1 F6KF31...

Page 40: ...management board CLI 6 To restart the management board enter the execute reboot command 7 When the management board starts up follow the boot process in the terminal session and press any key when pro...

Page 41: ...ve uptime 57 40 priority 23 slot_id 1 5 idx 2 flag 0x4 in_sync 0 FPC6KFT018901346 Slave uptime 58 44 priority 21 slot_id 1 3 idx 3 flag 0x4 in_sync 0 FPC6KFT018901372 Slave uptime 58 48 priority 20 sl...

Page 42: ...x4 in_sync 1 F6KF31T018900143 Master uptime 3837 25 priority 1 slot_id 1 0 idx 0 flag 0x0 in_sync 1 F6KF31T018900143 Master uptime 3837 25 priority 1 slot_id 1 0 idx 0 flag 0x0 in_sync 1 FPC6KFT018901...

Page 43: ...ment M canique Montage de l quipement dans le rack doit tre telle qu une situation dangereuse n est pas li un chargement m canique in gal Circuit Overloading Consideration should be given to the conne...

Page 44: ...ez pas les batteries au feu Ils peuvent exploser Jetez les piles usag es conform ment aux r glementations locales IMPORTANT Suisse l annexe 4 10 de SR814 013 s appliquent aux batteries CAUTION There i...

Page 45: ...a terre de la prise This product has a separate protective earthing terminal provided on the back of the product in addition to the grounding terminal of the attachment plug This separate protective e...

Page 46: ...ause harmful interference in which case the user will be required to correct the interference at his own expense WARNING Any changes or modifications to this product not expressly approved by the part...

Page 47: ...fety Electrical Appliance Material PSE Japan PSE Bureau of Standards Metrology and Inspection BSMI Taiwan The presence conditions of the restricted substance BSMI RoHS table are available at the link...

Page 48: ...inet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warrants that the identified product will perform according to certain expressly identified...