Fortinet 3000B Manuel utilisateur

FortiWAN 3000B

QuickStart Guide

• Technical Support

• New product features

• Protection from new threats

Vous devez enregistrer le produit pour recevoir:

• Support technique

• Nouvelles fonctionnalitées du produit

• Protection contre de nouvelles menaces

La reistrazione ti permette di usufruire di:

• Supporto Tecnico

• Nuove funzionalita

• Proteezione dalle ultime minaccce

Debe registrar el producto para recibir:

• Apoyo técnico

• Nuevas funcionalidades del producto

• Protección contra ataques

登録のお願い

本日、フォーティネット製品の登録をしてください。

登録すると次のメリットがあります。

テクニカルサポート • 新機能の追加 • 新しい脅威への防御

请马上注册

您的飞塔产品

您在注册以后才能得到技术支持、新产品特点信息、最新威胁防护

https://support.fortinet.com

Toll free: 1 866 648 4638

Fax: 1 408 235 7737

Email: [email protected]

July 29, 2019

01-520-25047220190729

and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., in

the U.S. and other jurisdictions, and other Fortinet names herein may also be registered

and/or common law trademarks of Fortinet. All other product or company names may

be trademarks of their respective owners. Performance and other metrics contained

herein were attained in internal lab tests under ideal conditions, and actual performance

and other results may vary. Network variables, different network environments and

other conditions may affect performance results. Nothing herein represents any binding

commitment by Fortinet, and Fortinet disclaims all warranties, whether express or

implied, except to the extent Fortinet enters a binding written contract, signed by

Fortinet’s General Counsel, with a purchaser that expressly warrants that the identiﬁed

product will perform according to certain expressly-identiﬁed performance metrics and,

in such event, only the speciﬁc performance metrics expressly identiﬁed in such binding

written contract shall be binding on Fortinet. For absolute clarity, any such warranty

will be limited to performance in the same ideal conditions as in Fortinet’s internal lab

tests. In no event does Fortinet make any commitment related to future deliverables,

features or development, and circumstances may change such that any forward-

looking statements herein are not accurate. Fortinet disclaims in full any covenants,

representations, and guarantees pursuant hereto, whether express or implied. Fortinet

reserves the right to change, modify, transfer, or otherwise revise this publication without

notice, and the most current version of the publication shall be applicable.

2017

Before You Begin

Write down details that you may need from your network administrator or ISP.

DSL PPPoE

Username Password

Cable Modem DHCP

It is normal to not require a hostname, but your ISP may require it.

Hostname

Static IP address

IP Address Subnet Mask

Default Gateway Primary/Secondary DNS

Box Includes

5 Rubber Feet

FortiWAN 3000B

QuickStart Guide

Quick Start Guide

2 Power Cables Console Cable

2 Rack-Mount Brackets 8 Front Screws 28 Side Screws

2 Sliding Rail Handles 10 Front Screws 6 Side Screws

2 Sliding Rails 20 Front Screws

Ethernet Cable

66 7

Power Connection

WAN Port

Internet

Basic Connections

FortiWAN is an edge device that typically connects an internal local area network

(LAN) with an external wide area network (WAN) or the Internet. Basic conﬁguration on

the FortiWAN is required for deploying it in your network. The conﬁguration includes

assigning IP addresses and default gateways for both LAN and WAN. Trafﬁc will not be

transferred through FortiWAN until the conﬁguration is complete.

FortiWAN provides a Web-based manager (Web UI) and a command line interface

(CLI). It requires connecting a computer to the LAN port of FortiWAN to access its

Web UI. FortiWAN has default physical network interfaces, of which Port 1 ~ Port 10

are the WAN ports, Port 11 is the LAN port and Port 12 is the DMZ port. Default port

assignments can be changed via the Web UI or CLI.

Connect your device to a power outlet and an Internet connection. This is usually a

modem, but could also be another device on your network.

For the further deployment instructions, please refer to FortiWAN Handbook. Here is a

typical and basic network topology for FortiWAN.

Setup Options

Web Browser

Setup Wizard ( p.7 )

ATerminal Emulation

With console cable ( p.9 )

Web-based Manager

1. Using the Ethernet cable, connect LAN port (Port 11) of the appliance to your

computer.

2. Switch on FortiWAN. It will emit 3 beeps, indicating the system is initialized and

activated. Meanwhile, the LAN port LED blinks, indicating a proper connection.

3. By default, the LAN IP address is 192.168.0.1. Conﬁgure your computer to match

the appliance’s default LAN subnet. For example, on Windows 7, click the Start

(Windows logo) menu to open it, and then click Control Panel. Click Network and

Sharing Center, Local Area Connection, and then the Properties button. Select

Internet Protocol Version 4 (TCP/IPv4), then click its Properties button. Select Use

the following IP address, then change your computer’s settings to:

IP address: 192.168.0.2 (or 192.168.0.X)

Subnet mask: 255.255.255.0

LAN Port

https://

Web Browser with Ethernet cable

Automated Local Conﬁguration

If you are installing your FortiWAN via Automated Local Conﬁguration (zero touch

provisioning), please equip it with Internet access by connecting Port 1 to a DHCP

network (such as the local LAN of your VAR partner or your installation site if a network

already exists there). Then FortiWAN will automatically connect to the Fortinet Call-Home

Server and download the predeﬁned conﬁguration ﬁle. Note that Automated Local

Conﬁguration process requires storing predeﬁned conﬁguration ﬁles on the Fortinet Call-

Home server via FortiWAN Manager (V4.5.0 or later) in advance. For more details about

the instructions, please refer to FortiWAN Handbook and FortiWAN Manager Handbook.

88 9

4. To connect to FortiWAN’s Web UI, start a web browser and go to

https://192.168.0.1 (Remember to include the “s” in https://).

5. Log into Web UI with the default username “admin” (case sensitive) and leave the

password blank.

Note:

1. Make sure the proxy settings of the web browser are disabled. For example,

open Internet Explorer and select “Internet Option” on “Tools” menu. Click the

“Connection” tab, “LAN settings” and open “Local Area Network Settings” dialog

box, then disable “Proxy server”.

2. It is strongly recommended that you reset the password the ﬁrst time you log into

Web UI, and take good care of it (See FortiWAN Handbook).

3. Requires: Microsoft Internet Explorer 6, Mozilla Firefox 2.0, or Google Chrome 2.0 or

newer.

To connect to the CLI

1. Using the console cable, connect the appliance’s console port to your terminal server

or computer. On your computer or terminal server, start the terminal emulator.

2. Start a terminal emulation program on the management computer, select the

COMport, and use the following settings:

Bits per second: 9600

Data bits: 8

Parity: None

Stop bits: 1

Flow Control: None

3. Press Enter on your keyboard to connect to the CLI.

4. Login with the default username “admin” (case sensitive) and leave the password

blank.

5. Note: FortiWAN CLI has limited functionality and cannot fully conigure the system.

Normal conﬁguration changes should be done via the WebUI. Get started by typing

“Help” for a list of available commands.

Terminal Emulation with Console

Cable

Console Port

Serial Port

1010 11

Installation

FortiWAN appliances should be installed in a restricted access location such as a locked

data center to ensure their physical security, which is fundamental to your network

security. Either place the FortWAN appliance on a ﬂat surface, or mount it in any

standard 19 inch (48.3 cm) rack with the rack-mount brackets. In a rack, a FortiWAN

3000B occupies 2U (3.5 inches/8.9 cm).

To install the unit into a rack

Use the screws provided to fasten the rack-mount brackets (ﬂanges facing

outwards) to the front of each side of the appliance. Use the rest screws to

install the appliance into the rack (towards the notches in the rack).

To install the unit with sliding rails

1. Install the inner rails to the chassis:

Release and detach the inner member from the slide. Align the screw holes

of the rail and the mounting holes of the chassis and then use the screws to

fasten the inner rail to the chassis.

Repeat the above steps for the other rails on the same side (two inner rails

need to be installed on each side). Likewise, attach the inner rails to the

other side of the appliance. Attach the rack-mount brackets (short) to the

front of each side of the appliance.

1212 13

1.5in 1.5in

To install the unit on a ﬂat surface

Ensure that the surface where the appliance would be placed onto is ﬂat,

stable, and clean and spaced for adequate airﬂow. Attach the rubber feet

provided to the bottom of the appliance and place it on the speciﬁed location.

2. Attach the outer rail bracket to the posts of the rack:

Install the outer rail by attaching the rail bracket to the posts of the

rack. Use two countersink screws and washers or the original rack

manufacturer’s bracket screws. Do not completely tighten the screws; leave

them loose so that the middle rail can slide for adjustment.

Extend and adjust the rear bracket to meet the appropriate depth of the

rack and install it to the rack post ﬁrmly with rack bracket screws.

Repeat the above steps to install the other rail to the rack.

3. Install the appliance to the rack:

Verify the ball bearing retainer is locked forward. Install the system half-way

into the slide rail.

Slide the release tab and push the system into the rack.

1414 15

SFP Transceivers

Caution: SFP

transceivers are

static sensitive

devices. Use

an ESD wrist

strap or similar

grounding device

when handling

transceivers.

Do not install

or remove SFP

transceivers while

ﬁber-optic cables

are still attached.

This can cause

damage to the

cables, cable

connectors,

and the optical

interfaces. It may

also prevent the

transceiver from

latching correctly

into the socket

connector.

Note: Installing

and removing

SFP transceivers

can shorten their

useful life. Do not

install or remove

transceivers more

than is necessary.

To install the SFP transceivers

1. Ensure that you are properly grounded.

2. Remove the caps from the SFP cage sockets on the front

panel of the unit.

3. Position the SFP transceiver in front of the cage socket

opening and ensure that the transceiver is correctly

oriented. When the transceiver is correctly oriented, the

extraction lever will be level with the socket latch. Note:

SFP cage socket orientation may vary. Ensure that the SFP

transceiver module is correctly oriented each time that you

are inserting a transceiver.

4. Hold the sides of the SFP transceiver and slide it into the

cage socket until it clicks into place.

Caution: Do not

force the SFP

transceivers into

the cage slots.

If the transceiver

does not easily

slide in and click

into place, it may

not be aligned

correctly or may

be upside down.

If this happens,

remove the SFP

transceiver, realign

it or rotate it and

slide it in again.

Note: Follow

proper ﬁberoptic

handling

procedures when

installing and

removing

SFP transceivers

to ensure the

devices remain

clean and are not

damaged.

5. Press the transceiver ﬁrmly into the cage socket with your

thumb.

6. Verify that the transceiver is latched correctly by grasping

the sides of the transceiver and trying to pull it out without

lowering the extraction lever.

If the transceiver cannot be removed, it is installed and

latched correctly.

If the transceiver can be removed, reinsert it and press

harder with your thumb.

If necessary, repeat this process until the transceiver is

securely latched into the cage socket.

To remove the SFP transceivers

1. Ensure that you are properly grounded.

2. If applicable, disconnect the ﬁber-optic cable from the

transceiver connector and install a clean dust plug in the

transceiver’s optical bores.

3. Pull the extraction lever out and down to eject the

transceiver. If you are unable to use your ﬁnger to open the

lever, use a small ﬂat-head screwdriver or other similar tool

to open the lever.

4. Hold the sides of the transceiver and carefully pull it away

from the cage socket.

5. Replace the cap on the SFP cage socket and place the

removed SFP transceiver into an antistatic bag.

1616 17

Device Guide

POWER

Green: The appliance is receiving power

Off: The appliance is off

STATUS

Reserved for future use

HDD

Amber: The HDD is data processing

Off: The HDD is idle

SFP+ Ports Activity

Flashing Amber: Port is transmitting and receiving data

Off: No network activity

SFP+ Ports Speed

Green: Port is connected at 1Gbps or 10 Gbps

Off: No link detected

Ethernet Ports Link/Activity

Amber: Link detected

Flashing Amber: Port is transmitting and receiving data

Off: No link detected

Ethernet Ports Speed

Amber: Port is connected at 1Gbps

Green: Port is connected at 100Mbps

Off: Port is connected at 10Mbps or is not in use

SFP Ports Activity

Flashing Amber: Port is transmitting and receiving data

Off: No network activity

SFP Ports Speed

Amber: Port is connected at 1Gbps

Off: No link detected

Power supply status

Green: Power supply is operating normally

1818 19

Device Guide

Console (RJ-45)

RS-232 serial for connection to

management computer

USB Port 1 - 2 (USB-A)

USB 2.0 reserved for future use

HA Port (RJ-45)

Gigabit Ethernet for connection to the peer unit

(FortiWAN 3000B) for high availability deployment

Ethernet Ports 5 - 12 (RJ-45)

Gigabit Ethernet ports for connection to your

network and the Internet

By default, Ports 5 ~ 10 are for connections to

WAN (or the Internet), Port 11 is for connection to

LAN and Port 12 is for connection to DMZ

Redundant Power Connections

120 – 240 V AC, 9 – 4 A, 50/60Hz

Power Switch on/off

SFP+ Ports 1 - 4

10 Gigabit Ethernet ports for connection to your

network and the Internet

By default, Ports 1 ~ 4 are for connections to WAN

(or the Internet)

SFP+ Ports 13 - 16

10 Gigabit Ethernet ports for connection to your

network and the Internet

SFP Ports 17 - 24

Gigabit Ethernet ports for connection to your

network and the Internet

Power Supply Alarm on/off

Autres manuels pour 3000B

Table des matières

Autres manuels Fortinet Matériel réseau

Fortinet

Fortinet FortiGate 2600F-DC Manuel utilisateur

Fortinet

Fortinet FortiAnalyzer 400C Manuel utilisateur

Fortinet

Fortinet FortiGate 100F Series Manuel utilisateur

Fortinet

Fortinet FortiDB FortiDB-2000B Manuel utilisateur

Fortinet

Fortinet FortiMail-100 Manuel utilisateur

Fortinet

Fortinet FortiGate-7000F Series Manuel de la liste des pièces

Fortinet

Fortinet FortiWAN 1000E Manuel utilisateur

Fortinet

Fortinet FortiWAN 1000B Manuel utilisateur

Fortinet

Fortinet FortiGate 3000F Series Manuel utilisateur

Fortinet

Fortinet FortiGate ASM-S08 Manuel utilisateur

Fortinet

Fortinet FortiOS 3.0 Mode d’emploi

Fortinet

Fortinet FortiLog-100 Manuel utilisateur

Fortinet

Fortinet FortiGate 30D Manuel utilisateur

Fortinet

Fortinet FortiWiFi 20C-ADSL-A Manuel utilisateur

Fortinet

Fortinet FortiManager 200D Manuel utilisateur

Fortinet

Fortinet FortiGate FortiGate-ASM-FB4 Mode d’emploi

Fortinet

Fortinet FortiSwitch 1024E Series Manuel utilisateur

Fortinet

Fortinet FortiAnalyzer 3700G Manuel utilisateur

Fortinet

Fortinet FortiMail 3000F Manuel utilisateur

Fortinet

Fortinet FortiAuthenticator 3000F Manuel utilisateur

Fortinet

Fortinet FortiGate-5000 Manuel de référence

Fortinet

Fortinet FortiMail-5001A Manuel utilisateur

Fortinet

Fortinet FortiDDoS 3000F Manuel utilisateur

Fortinet

Fortinet FortiRecorder 7.0.0 Mode d’emploi

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur