Fortinet FortiGate-5000 Network Card User Manual


 
FortiGate-5000 Series Introduction
68 01-30000-83466-20090108
FortiController-5208 I/O boards The FortiGate-5005-DIST security system
Figure 29: Example basic FortiGate-5005-DIST security system
FortiController-5208 I/O boards
Data flows into and out of the FortiGate-5005-DIST system through the I/O
boards. The I/O boards are FortiController-5208 boards installed in chassis slots 1
and 2 in a FortiGate-5050 or FortiGate-5140 chassis. The I/O board installed in
slot 1 is configured as the primary I/O board. The optional I/O board installed in
slot 2 becomes the secondary I/O board. A FortiGate-5005-DIST system can
include one or two I/O boards.
As the I/O board, the FortiController-5208 provides all FortiGate-5005-DIST
network connections. The FortiController-5208 board provides two 10 gigabit
interfaces and four 1 gigabit interfaces for network traffic. The FortiController-5208
front panel also contains four 1 gigabit interfaces. Two of these interfaces support
inter-chassis HA and two are for future use. Adding a second FortiController-5208
board doubles the number of FortiGate-5005-DIST network interfaces.
Figure 30: FortiController-5208 front panel
1
2
2
3
4
5
SMC
1
SMC
POWER
5050SAP
SERIAL
1
SERIAL
2
ALARM
10/100
link/Act
ETH0
Service
RESET
STATUS
Hot Swap
link/Act
ETH0
ETH1
10/100
5000SM
10/100
link/Act
ETH0
Service
RESET
STATUS
Hot Swap
link/Act
ETH0
ETH1
10/100
5000SM
PAYLOAD OPERATION
STATUS
IPM
X 1
X 2
1/2 3/4 D15/D16 C15/C16
1
2
3
4
5
6
7
8
9
10
11
12
D
13
14
15
16
D
1
2
3
4
5
6
7
8
9
10
11
12
C
13
14
15
16
C
10/100/1000 MBPS ETHERNET ACTIVITY
DATA CONTROL
1
2
3
4
MANAGEMENT
COM 1 COM 2
X 1 X 2
CONSOLE
ACT
ACT
LINK
LINK
FABRIC
BASE
USB USB
3 412 56
78
OOS ACC STATUS
IPM
CONSOLE
ACT
ACT
LINK
LINK
FABRIC
BASE
USB USB
3 412 56
78
OOS ACC STATUS
IPM
CONSOLE
ACT
ACT
LINK
LINK
FABRIC
BASE
USB USB
3 412 56
78
OOS ACC STATUS
IPM
CONSOLE
ACT
ACT
LINK
LINK
FABRIC
BASE
USB USB
3 412 56
78
OOS ACC STATUS
IPM
NAT mode policies
controlling 10G traffic
between internal and
external networks.
X2 (port1_X2)
204.23.1.5
X1 (port1_X1)
192.168.1.99
Management
interface (mng)
FortiGate-5005-DIST
security system in
NAT/Route mode
Internet
Internal
network
PAYLOAD OPERATION
STATUS
IPM
X 1
X 2
1/2 3/4 D15/D16 C15/C16
1
2
3
4
5
6
7
8
9
10
11
12
D
13
14
15
16
D
1
2
3
4
5
6
7
8
9
10
11
12
C
13
14
15
16
C
10/100/1000 MBPS ETHERNET ACTIVITY
DATA CONTROL
1
2
3
4
MANAGEMENT
COM 1 COM 2
X 1 X 2
SFP Gigabit
Fiber or Copper
1
3
42
Management
RJ-45 Serial
Extraction
Lever
IPM
Status
X1 X2 XFP 10 Gigabit
Fiber or Copper
Payload
Operation
Link/
Traffic
Extraction
Lever
Mounting
Knot
Mounting
Knot
Link/Traffic
D15
D16
C15
C16
Management
RJ-45 Ethernet