Fortinet FortiGate-5060 Chassis Manual

FAN TRAY

1

2

3

4

5

6

FAN TRAY

1

2

3

4

5

6

FILTER TOP

12

5060SAP

SERIAL

1

SERIAL

2

RESET

ALARM

10/100

link/Act

ETH0

Service

RESET

STATUS

Hot Swap

link/Act

ETH0 ETH1

10/100

5000SM

SM1 SAP SM2 FortiGate 5060

1

FortiGate-5060

Chassis Guide

A detailed guide to the FortiGate-5060 chassis. This FortiGate-5060 Chassis Guide describes FortiGate-5060 hardware

features, and how to install the FortiGate-5060 chassis.

The most recent versions of this and all FortiGate-5000 series documents are available from the FortiGate-5000 page of

the Fortinet Technical Documentation web site (http://docs.fortinet.com).

Visit http://support.fortinet.com to register your FortiGate-5060 chassis. By registering you can receive product updates,

technical support, and FortiGuard services.

FortiGate-5060 Chassis Guide

01-400-129494-20110912

Warnings and cautions

FortiGate-5060

01-400-129494-20110912 2

http://docs.fortinet.com/ • Feedback

Warnings and cautions

Only trained and qualified personnel should be allowed to install or maintain

FortiGate-5000 series equipment. Read and comply with all warnings, cautions and

notices in this document.

• Turning off all power switches may not turn off all power to the FortiGate-5000 series

equipment. Some circuitry in the FortiGate-5000 series equipment may continue to

operate even though all power switches are off.

• FortiGate-5000 equipment must be protected by a readily accessible disconnect

device or circuit breaker that can be used for product power down emergencies.

• Many FortiGate-5000 components are hot swappable and can be installed or removed

while the power is on. But some of the procedures in this document may require power

to be turned off and completely disconnected. Follow all instructions in the procedures

in this document that describe disconnecting FortiGate-5000 series equipment from

power sources, telecommunications links and networks before installing, or removing

FortiGate-5000 series components, or performing other maintenance tasks. Failure to

follow the instructions in this document can result in personal injury or equipment

damage.

• Install FortiGate-5000 series chassis at the lower positions of a rack to avoid making

the rack top-heavy and unstable.

• Do not insert metal objects or tools into open chassis slots.

• Electrostatic discharge (ESD) can damage FortiGate-5000 series equipment. Only

perform the procedures described in this document from an ESD workstation. If no

such station is available, you can provide some ESD protection by wearing an

anti-static wrist strap and attaching it to an available ESD connector such as the ESD

sockets provided on FortiGate-5000 series chassis.

• Make sure all FortiGate-5000 series components have reliable grounding. Fortinet

recommends direct connections to the building ground.

• If you install a FortiGate-5000 series component in a closed or multi-unit rack

assembly, the operating ambient temperature of the rack environment may be greater

than room ambient. Make sure the operating ambient temperature does not exceed

Fortinet’s maximum rated ambient temperature.

• Installing FortiGate-5000 series equipment in a rack should be such that the amount of

airflow required for safe operation of the equipment is not compromised.

• FortiGate-5000 series chassis should be installed by a qualified electrician.

• FortiGate-5000 series equipment shall be installed and connected to an electrical

supply source in accordance with the applicable codes and regulations for the location

in which it is installed. Particular attention shall be paid to use of correct wire type and

size to comply with the applicable codes and regulations for the installation / location.

Connection of the supply wiring to the terminal block on the equipment may be

accomplished using Listed wire compression lugs, for example, Pressure Terminal

Connector made by Ideal Industries Inc. or equivalent which is suitable for AWG-10.

Particular attention shall be given to use of the appropriate compression tool specified

by the compression lug manufacturer, if one is specified.

• This product is only intended for use in a Restricted Access Location.

CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used

Batteries According to the Instructions.

Caution: You should be aware of the following cautions and warnings before installing

FortiGate-5000 series hardware

FortiGate-5060 Chassis Guide

01-400-129494-20110912 3

http://docs.fortinet.com/ • Feedback

Contents

Warnings and cautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

FortiGate-5060 chassis 7

FortiGate-5060 front panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

FortiGate-5060 chassis back panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Physical description of the FortiGate-5060 chassis . . . . . . . . . . . . . . . . . . 10

FortiGate-5060 shelf managers . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Using the shelf manager CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Shelf Manager fan and power control . . . . . . . . . . . . . . . . . . . . . . . 12

FortiGate-5060 shelf alarm panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Shelf alarm panel telco alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Air filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Cooling fan trays . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Power connection and configuration 17

About data center DC power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Connecting the FortiGate-5060 chassis to DC power and data center ground. . . . . 17

Connecting a FortiGate-5060 PEM to DC power . . . . . . . . . . . . . . . . . . . . 18

Connecting the FortiGate-5060 chassis to data center ground. . . . . . . . . . . . . 19

Connecting the FortiGate-5060 chassis to AC power using a FortiGate

power converter shelf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Turning on FortiGate-5060 chassis power . . . . . . . . . . . . . . . . . . . . . . . 20

FortiGate-5060 hardware procedures 23

Mounting the FortiGate-5060 chassis . . . . . . . . . . . . . . . . . . . . . . . . . 23

Air flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Inserting 5000 series boards and RTM modules into a FortiGate-5060 chassis . . . . 23

Using FortiSwitch-5003A boards for backplane communication . . . . . . . . . . . . 24

Contents

FortiGate-5060 Chassis Guide

401-400-129494-20110912

http://docs.fortinet.com/ • Feedback

Using the shelf manager CLI 27

Connecting to the shelf manager CLI using a serial port . . . . . . . . . . . . . . . . 27

Connecting to the shelf manager CLI . . . . . . . . . . . . . . . . . . . . . . . 28

Changing the shelf manager root account password . . . . . . . . . . . . . . . 28

The shelf manager command line interface agent (CLIA) . . . . . . . . . . . . . 29

Using CLIA interactive mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

IPMB addresses, logical and physical slot numbers, and FRU ids . . . . . . . . . . . 30

Basic shelf manager CLI Commands. . . . . . . . . . . . . . . . . . . . . . . . . . 31

Change IP address of the primary Shelf Manager . . . . . . . . . . . . . . . . . 31

Display the shelf manager firmware version . . . . . . . . . . . . . . . . . . . . 31

List all FRUs in the chassis. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

List all sensors on a FRU. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

List only sensors that are outside of established thresholds . . . . . . . . . . . . 31

Display sensor data for a FRU . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Display the FRU information for a FRU . . . . . . . . . . . . . . . . . . . . . . 31

Change the speed for a fan tray . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Display the contents of the system event log (sel) . . . . . . . . . . . . . . . . . 31

Clear the system event log (sel) . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Changing the shelf manager IP address and default gateway . . . . . . . . . . . . . 32

Sensor types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

activate/deactivate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Clearing alarms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Setting alarm output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Viewing information about a board . . . . . . . . . . . . . . . . . . . . . . . . . 35

clia . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

exit/quit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

fans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

fru . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Display information for all FRUs . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Display information for a specific FRU . . . . . . . . . . . . . . . . . . . . . . . 38

fruinfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

getlanconfig. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Displaying all configuration parameters for a channel . . . . . . . . . . . . . . . 40

Displaying specific parameters for a channel . . . . . . . . . . . . . . . . . . . 41

getthreshold/threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Display threshold sensor values for a physical slot . . . . . . . . . . . . . . . . 42

Display threshold sensor values for a specific sensor . . . . . . . . . . . . . . . 45

Contents

FortiGate-5060 Chassis Guide

01-400-129494-20110912 5

http://docs.fortinet.com/ • Feedback

help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Displaying more information about a command . . . . . . . . . . . . . . . . . . 48

minfanlevel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

sel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

sensor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

sensordata . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

setthreshold. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

shmstatus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

showunhealthy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

switchover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

terminate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Display all user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Adding a user account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Deleting user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Disabling and enabling user accounts . . . . . . . . . . . . . . . . . . . . . . . 57

Changing a user account user name. . . . . . . . . . . . . . . . . . . . . . . . 57

Changing a user account password . . . . . . . . . . . . . . . . . . . . . . . . 58

version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

Generating SNMP traps for system events. . . . . . . . . . . . . . . . . . . . . . . 58

SNMP trap details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Removing and inserting a fan tray . . . . . . . . . . . . . . . . . . . . . . . . . 64

Using the chassis system event log (SEL) . . . . . . . . . . . . . . . . . . . . . . . 64

Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Chassis Design Background . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Alarm LEDs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Reading the System Event Log (SEL) . . . . . . . . . . . . . . . . . . . . . . . 66

Clearing SEL logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Example IPMC log output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Example FRU log output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Example sensor log output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Sample sections of SEL Output . . . . . . . . . . . . . . . . . . . . . . . . . . 77

For more information 79

Training . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Fortinet Tools and Documentation CD . . . . . . . . . . . . . . . . . . . . . . . 79

Fortinet Knowledge Base . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Comments on Fortinet technical documentation . . . . . . . . . . . . . . . . . 79

Customer service and technical support . . . . . . . . . . . . . . . . . . . . . . . . 79

Contents

FortiGate-5060 Chassis Guide

601-400-129494-20110912

http://docs.fortinet.com/ • Feedback

FortiGate-5060 Chassis Guide

01-400-129494-20110912 7

http://docs.fortinet.com/ • Feedback

FortiGate-5060 chassis

You can install up to six FortiGate-5000 series boards in the six slots of the FortiGate-5060

ATCA chassis. The FortiGate-5060 is a 5U 19-inch rackmount ATCA chassis that contains

two redundant hot swappable DC power entry Modules (PEMs) connect to -48 VDC Data

Center DC power. The FortiGate-5060 chassis also includes two hot swappable cooling

fan trays and a front replaceable air filter. If all six slots contain FortiGate-5001B boards,

the FortiGate-5060 chassis provides a total of 48 FortiGate 10-gigabit ethernet interfaces.

You can also install FortiSwitch-5003B boards in FortiGate-5060 chassis slots 1 and 2 to

provide base backplane communications using the dual star base backplane interface.

Base backplane communications can be used for HA heartbeat communications and for

data communications.

FortiSwitch-5003B boards can also provide fabric backplane communication using the

FortiGate-5060 fabric backplane channels. The fabric backplane is a triple replicated

3-channel full mesh 10-gigabit switch fabric.

For both base and fabric backplane communications you can install a single

FortiSwitch-5003B board in slot 1. You can add a second FortiSwitch-5003B board to

slot 2 for redundancy.

Some of the boards installed in a FortiGate-5060 chassis can be operating in a FortiGate

HA cluster and some can be operating as standalone FortiGate units. You can also

operate multiple HA clusters and standalone FortiGate units in a single FortiGate-5060

chassis. You can also use FortiSwitch-5003B boards to operate HA clusters consisting of

FortiGate-5000 series boards installed in multiple FortiGate-5000 chassis. You can also

use FortiSwitch-5003B boards for data communication between chassis and for Enhanced

Load Balancing Cluster (ELBC) configurations. You can also install FortiSwitch-5203B

boards in slots 1 and 2, add FortiGate-5001B boards to slots 3 and up and operate the

FortiGate-5060 chassis in HA over chassis mode.

The FortiGate-5060 chassis also includes six rear transition module (RTM) slots. The

FortiGate-5060 chassis supports 10-gigabit fabric channel communication if you have

installed FortiGate-5001A boards with FortiGate-RTM-XB2 or FortiGate-RTM-XD2

modules and one or two FortiSwitch-5003A or FortiSwitch-5003B boards.

The FortiGate-5060 chassis requires -48VDC Data Center DC power. If DC power is not

available you can install a FortiGate power converter shelf and power supplies (purchased

separately).

This chapter describes the FortiGate-5060 chassis and includes the following sections:

•FortiGate-5060 front panel

•FortiGate-5060 chassis back panel

•Physical description of the FortiGate-5060 chassis

•FortiGate-5060 shelf managers

•FortiGate-5060 shelf alarm panel

•Air filter

•Cooling fan trays

FortiGate-5060 front panel FortiGate-5060 chassis

FortiGate-5060 Chassis Guide

801-400-129494-20110912

http://docs.fortinet.com/ • Feedback

FortiGate-5060 front panel

Figure 1 shows the front of a FortiGate-5060 chassis. Two FortiSwitch-5003B boards are

installed in slots 1 and 2. Four FortiGate-5001B boards are installed in slots 3, 4, 5, and 6.

The FortiGate-5060 primary Shelf Manager and the Shelf Alarm Panel (SAP) are also

visible. The factory installed shelf alarm panel displays alarms, provides a telco alarm

interface, and also provides serial connections to the shelf managers. The factory installed

primary shelf manager provides power allocation, cooling, alarms, and shelf status for the

FortiGate-5060 chassis. You can also install a secondary shelf manager as a backup for

the primary shelf manager. For more information about these components, see

“FortiGate-5060 shelf alarm panel” on page 12 and “FortiGate-5060 shelf managers” on

page 10.

Figure 1: FortiGate-5060 front panel with FortiGate-5001B and FortiSwitch-5003B boards

installed

Also visible on the front of the FortiGate-5060 chassis:

• The location of the two hot-swappable FortiGate-5060 cooling fan trays.

• The location of the front-replaceable air filter.

• The Electrostatic discharge (ESD) socket, used for connecting an ESD wrist band

when working with the chassis.

FAN TRAY

1

2

3

4

5

6

FAN TRAY

1

2

3

4

5

6

FILTER TOP

12

5060SAP

SERIAL

1

SERIAL

2

RESET

ALARM

10/100

link/Act

ETH0

Service

RESET

STATUS

Hot Swap

link/Act

ETH0 ETH1

10/100

5000SM

SM1 SAP SM2

FortiGate 5060

1

Hot-swappable

cooling fan tray 2

Front-replacable

air filter

Hot-swappable

cooling fan tray 1

FortiGate-5001B

boards, slots 3,

4, 5, and 6

FortiSwitch-5003B

boards

slots 1 and 2

Primary

Shelf Manager

(SM 1)

Secondary

Shelf Manager

(SM 2) Slot Cover

Shelf Alarm

Panel (SAP)

ESD socket

Caution: Do not operate the FortiGate-5060 chassis with open slots on the front panel. For

optimum cooling performance and safety, the chassis slots must contain a FortiGate-5000

series board or an air baffle slot filler. For the same reason, both cooling fan trays and the

air filter should be installed while operating the chassis. As well both PEMs must be

installed in the back of the chassis.

FortiGate-5060 chassis FortiGate-5060 chassis back panel

FortiGate-5060 Chassis Guide

01-400-129494-20110912 9

http://docs.fortinet.com/ • Feedback

FortiGate-5060 chassis back panel

Figure 2 shows the back of a FortiGate-5060 chassis. The FortiGate-5060 chassis back

panel includes two redundant -48V to - 60 VDC power entry modules (PEMs) labelled

PEM A and PEM B. Fortinet ships the FortiGate-5060 chassis with PEM A and B installed.

The PEMs provide redundant DC power connections for the FortiGate-5060 chassis and

distribute DC power to the chassis slots and to the fan trays.

If you require redundant power you should connect both PEMs to DC power. If redundant

power is not required, you can connect PEM A or PEM B. Each PEM includes two power

terminals, one for connecting to -48V/-60 VDC and one for connecting to RTN. Use two-

hole lugs to connect the power terminals to DC power. Figure 2 shows the wiring required

to connect PEM B to a DC power source.

Figure 2: FortiGate-5060 chassis back panel (shows PEM B connected to DC power source)

The back panel includes the FortiGate-5060 chassis ground connector which must be

connected to Data Center ground. The FortiGate-5060 chassis also includes an ESD

socket on the back panel.

For detailed information about connecting power to the FortiGate-5060 chassis, see

“Connecting the FortiGate-5060 chassis to DC power and data center ground” on page 17

or “Connecting the FortiGate-5060 chassis to AC power using a FortiGate power

converter shelf” on page 20.

The back panel also contains 6 RTM slots numbered to correspond to the front panel

slots. The RTM slots are available for FortiGate-5000 RTM modules such as the

FortiGate-RTM-XB2 module or the FortiGate-RTM-XD2 module. When the

FortiGate-5060 chassis is shipped, these slots are covered by RTM air baffle slot covers.

RTM Air Baffle slot covers

ESD

socket

Chassis

Ground

Connector

(green)

PEM APEM B

PEM

RTN

Branch 1 Branch 2

-48/-60 V

PEM

RTN

Branch 1 Branch 2

-48/-60 V

Power

Entry Module

(PEM) B

Power

Entry Module

(PEM) A

-48V/-60 VDC

nom (black)

(lower)

RTN

(red)

(upper)

Physical description of the FortiGate-5060 chassis FortiGate-5060 chassis

FortiGate-5060 Chassis Guide

10 01-400-129494-20110912

http://docs.fortinet.com/ • Feedback

Physical description of the FortiGate-5060 chassis

The FortiGate-5060 chassis is a 5U chassis that can be installed in a standard 19-inch

rack. Table 1 describes the physical characteristics of the FortiGate-5060 chassis.

FortiGate-5060 shelf managers

The FortiGate-5060 chassis includes one or two redundant hot-swappable shelf

managers, located in the dedicated shelf manager slots near the top of the FortiGate-5060

front panel. The primary shelf manager is installed on the left (SM 1) the secondary shelf

manager (if present) is installed on the right (SM 2). The secondary shelf manager is

optional.

The shelf managers support redundant operation with automatic switchover. If both shelf

managers are operating normally, one acts as the active shelf manager and the other as

the standby. Usually the primary shelf manager would be the active shelf manager and the

secondary shelf manager would be the standby shelf manager. The shelf managers

monitor each other and either can trigger a switchover if necessary. The active shelf

manager performs all shelf manager functions. If the active shelf manager fails or is

removed, the standby shelf manager takes over all shelf manager functions.

The FortiGate-5060 shelf managers control chassis power allocation, monitor chassis

operating parameters, monitor and control chassis cooling, and can signal alarms if the

chassis encounters problems. All FortiGate-5000 modules installed in the chassis

communicate with the shelf managers.

Table 1: FortiGate-5060 chassis physical description

Dimensions 8.75 x 17 x 18.9 in. (22.2 x 43.2 x 48cm) (H x W x D) The

depth is from the fan tray handles on the front panel to the

connectors on the PEMs on the back panel.)

Shipping weight completely

assembled

with packaging

65.7 lb. (30 kg)

Chassis weight completely

assembled with shelf manager

and air baffles (5 front and 6

RTM)

50.7 lb. (23 kg)

Torque Rating 1.2 N m to 1.5 N m

Operating environment Temperature (long term): 41 to 104°F (+5 to 40°C)

Temperature (short term): 23 to 131°F (-5 to 45°C)

Relative humidity: 5 to 85% (Non-condensing)

Power consumption Maximum: 350 W (Power consumed by an empty chassis with

two fan trays, 2 shelf managers, one shelf alarm panel and 2

PEMs installed and operating with the fans running at full

speed.)

Power input 2x redundant -40.5 VDC to -60 VDC, 45 A total per PEM

Overcurrent Protection 30 A Fused Switches on PEMs

Cooling Capacity Front Boards: 300 W per board

RTM: 30 W per module

Protected Earth Test EN60950-1, test current 25 A, resistance <100mOhm

Hipot Test EN60950-1, 1000 V

FortiGate-5060 chassis FortiGate-5060 shelf managers

FortiGate-5060 Chassis Guide

01-400-129494-20110912 11

http://docs.fortinet.com/ • Feedback

The FortiGate-5060 shelf managers are factory installed. In most cases users do not have

to install or configure the shelf managers.

Each shelf manager has two ethernet interfaces (ETH 0 and ETH 1). You can connect to

ETH 0 from the shelf manager front panel. ETH 1 connects to the FortiGate-5060

backplane.

The shelf managers detect alarm conditions and communicate alarm signals to the

FortiGate-5060 shelf alarm panel. The shelf alarm panel also contains serial interfaces for

connecting to the shelf manager’s console ports.

The shelf managers are hot swappable. You can remove a shelf manager by opening the

extraction lever until the hot swap LED starts blinking. When the hot swap LED turns solid

blue you can remove the shelf manager from the FortiGate-5060 chassis.

Figure 3: FortiGate-5060 shelf manager front panel

Using the shelf manager CLI

You can use the shelf manager command line interface (CLI) to communicate with the

intelligent management controllers of the chassis, with boards in the chassis, and with the

shelf manager itself. The CLI is an IPMI-based set of commands that can be accessed

directly or through a higher-level management application or a script. Using the CLI, you

can access information about the current state of the chassis including current board

population, current sensor values, threshold settings, recent events, and overall chassis

health.

To get started using the shelf manager CLI, see “Using the shelf manager CLI” on

page 27.

Table 2: FortiGate-5060 shelf manager LEDs

LED State Description

ETH 0

ETH 1

10/100 Yellow The Ethernet interface is connected at 100 Mbps.

link/Act Green Blinking LED indicates network traffic.

Off No link.

STATUS Green This shelf manager is operating normally as the active shelf

manager. Usually the primary shelf manager operates as the

active shelf manager.

Red This shelf manager is operating normally as the backup shelf

manager. Usually the secondary shelf manager operates as the

standby shelf manager.

HOT SWAP Off The shelf manager is not ready to be removed.

Blue The shelf manager is ready to be removed.

Long blink The shelf manager is starting up after being inserted into the

chassis.

Short blink The shelf manager is shutting down in preparation for being

removed from the chassis.

10/100

link/Act

ETH0

Service

RESET

STATUS

Hot Swap

link/Act

ETH0 ETH1

10/100

5000SM

Retention

Screw

ETH 0 and 1 network

activity LEDs

ETH0

10/100/1000

base-T Ethernet

Status

LEDs

Handle

Reset

Button

Hot Swap

LED

FortiGate-5060 shelf alarm panel FortiGate-5060 chassis

FortiGate-5060 Chassis Guide

12 01-400-129494-20110912

http://docs.fortinet.com/ • Feedback

Shelf Manager fan and power control

The FortiGate-5060 shelf managers monitor the internal temperature of the

FortiGate-5060 chassis and adjust the operating speed of the FortiGate-5060 chassis

cooling fans as required.

When the chassis is first powered on all cooling fans run at full speed. Once the shelf

manager is up and running, the shelf manager reduces cooling fan speeds to maintain an

optimum temperature in the chassis. If shelf managers are not installed or not operating

correctly the FortiGate-5060 chassis cooling fans always operate at full speed.

FortiGate-5060 shelf alarm panel

The FortiGate-5060 shelf alarm panel (SAP), located at the top of the FortiGate-5060 front

panel, provides LED indicators of FortiGate-5060 alarms, a telco alarm connector, an

alarm LED reset button, and console access to the FortiGate-5060 shelf managers. The

LED alarm indicators include critical, major, and minor alarms as well as three user

defined alarms.

The alarm LED reset button (RESET) on the shelf alarm panel activates the Alarm Cutoff

(ACO) state. When ACO is activated, the active alarm LEDs blink and all of the alarm

relays are deactivated.

Figure 4: FortiGate-5060 shelf alarm panel front panel

5000SAP

SERIAL

1

SERIAL

2

RESET

ALARM

Retention

Screw

Telco Alarm

Interface

Alarm

LED Reset

Button

Minor Alarm (MIN) (Amber)

Major Alarm (MAJ) (Red)

Critical Alarm (CRT) (Red)

User 3 Alarm (Amber)

User 2 Alarm (Amber)

User 1 Alarm (Amber)

SERIAL 1 (Primary

Shelf Manager)

SERIAL 2 (Secondary

Shelf Manager)

FortiGate-5060 chassis FortiGate-5060 shelf alarm panel

FortiGate-5060 Chassis Guide

01-400-129494-20110912 13

http://docs.fortinet.com/ • Feedback

Figure 5 shows the connections between the primary and secondary shelf managers and

the shelf alarm panel.

Table 3: FortiGate-5060 shelf alarm panel LEDs

LED State Description

CRT

(critical)

Off Normal operation.

Red Indicates a critical alarm.

Blinking

Red

Alarm cutoff (ACO) activated by pressing the alarm LED reset button.

MAJ (major) Off Normal operation.

Red Indicates a major alarm.

Blinking

Red

Alarm cutoff (ACO) activated by pressing the alarm LED reset button.

MIN (minor) Off Normal operation.

Amber Indicates a minor alarm.

Blinking

Amber

Alarm cutoff (ACO) activated by pressing the alarm LED reset button.

USER3

USER2

USER1

Off Normal operation

Amber Indicates a user-definable alarm.

Blinking

Amber

Alarm cutoff (ACO) activated by pressing the alarm LED reset button.

Table 4: FortiGate-5060 shelf alarm panel connectors

Connector Type Speed Protocol Description

SERIAL 1 RJ-45 9600 bps,

8/N/1

RS-232

serial

Serial connection to the primary shelf manager

command line interface.

SERIAL 2 RJ-45 9600 bps,

8/N/1

RS-232

serial

Serial connection to the secondary shelf

manager command line interface.

ALARM micro

DB-15

male

N/A Telco

Form-c

The external dry relay Telco alarm interface

(48VDC) provides Telco form-c relay

connections for minor, major and critical power

faults. The cable required to connect to the

alarm interface is not supplied by Fortinet.

FortiGate-5060 shelf alarm panel FortiGate-5060 chassis

FortiGate-5060 Chassis Guide

14 01-400-129494-20110912

http://docs.fortinet.com/ • Feedback

Figure 5: Connections between the shelf managers and the shelf alarm panel

Shelf alarm panel telco alarms

The shelf alarm panel telco alarm interface relay circuits are capable of carrying 60 VDC

or 1 A with a max. rating of 30 VA. The shelf alarm panel accepts timed pulse inputs for

clearing minor and major alarm states. Reset is accomplished by asserting a voltage

differential from 3.3 V to 48 V for between 200 and 300 ms. The acceptance voltage range

is from 0 to 48 VDC continuous (handles up to 60 VDC at a 50% duty cycle). The current

drawn by a reset input does not exceed 12 mA.

The alarm LED reset button activates the alarm cutoff (ACO) state for major, minor, and

user-defined alarms. You cannot reset critical alarms with the alarm LED reset button.

When the ACO state is activated, active alarm LEDs blink and all of the alarm relays are

deactivated. The alarm reset button activates the ACO state but does not clear the alarm

completely.

Figure 6: The telco alarm connector (DB-15 male)

5000SAP

SERIAL

1

SERIAL

2

RESET

ALARM

Primary Shelf Manager (Right)

I²C-Switch

PCA9545

Buffer

LTC4300

ShMM-500

el

b

a

n

E

y

l

nO-retsaM

sub-C²I

e

cafretnIelos

noClaireS

Secondary Shelf Manager (Left)

I²C-Switch

PCA9545

elbanE

ylnO-re

tsaM

sub-

C²I

e

c

a

f

re

tn

Ielo

s

n

o

Clai

r

e

S

Buffer

LTC4300

ShMM-500

0HC

3HC

0HC

3HC

1

915

8

FortiGate-5060 chassis Air filter

FortiGate-5060 Chassis Guide

01-400-129494-20110912 15

http://docs.fortinet.com/ • Feedback

Air filter

The FortiGate-5060 chassis includes a front replaceable air filter. The filter provides 80%

dust arrestance and meets the requirements of the Telcordia Technologies Generic

Requirements GR-78-CORE specification. The filter must be installed for the

FortiGate-5060 chassis to operate normally. If the air filter is not locked into place the air

filter presence switch causes an alarm.

Air filters should be inspected regularly. If dirty or damaged, the filter should be disposed

of and replaced.

The air filter can be removed using the air filter handle on the front of the FortiGate-5060

chassis. To install a new filter, push the new filter into the guide rails at each side of the

shelf until the filter locks into place.

Table 5: Telco alarm connector pin assignment

Pin Name Description

1 AMIR+ MinorReset+

2 AMIR- MinorReset-

3 AMAR+ MajorReset+

4 AMAR- MajorReset-

5 ACNO CriticalAlarm - NO

6 ACNC CriticalAlarm - NC

7 ACCOM CriticalAlarm - COM

8 AMINO MinorAlarm -NO

9 AMINC MinorAlarm - NC

10 AMINCOM MinorAlarm - COM

11 AMANO MajorAlarm - NO

12 AMANC MajorAlarm - NC

13 AMACOM MajorAlarm - COM

14 APRCO PwrAlarm - NO

15 APRCOM PwrAlarm - COM

Shield Shelf-GND Shelf Ground

Cooling fan trays FortiGate-5060 chassis

FortiGate-5060 Chassis Guide

16 01-400-129494-20110912

http://docs.fortinet.com/ • Feedback

Cooling fan trays

The FortiGate-5060 chassis contains two identical hot-swappable cooling fan trays

installed on the left and right sides of the chassis. The chassis can run indefinitely with

only one fan tray operating. The fans move air in the right side of the chassis and out the

left side.

You can remove a fan tray by pressing the hot swap button on the fan tray front panel.

When the Hot Swap LED is solid blue unlock the latch and pull the fan tray out using the

extraction handle.

Each cooling fan tray contains six radial fans for cooling the boards and modules installed

in the FortiGate-5060 chassis. Fan speeds are monitored by a tachometer signal sent

from the cooling fan trays to the shelf manager. The shelf manager regulates the fan

speed by adjusting the DC voltage supplied to the fan trays.

Figure 7: Cooling fan tray front panel

Table 6: FortiGate-5060 fan tray LEDs and controls

LED/Control Description

OK (operate)

LED

Green when the fan tray is powered and operating normally.

Alarm LED Normally off. Turns red when there is a problem with the fan tray.

HS (hot swap)

LED

Normally off. Blinking blue indicates that the fan tray is entering the hot

swap mode. Solid blue indicates that the fan tray is in hot swap mode and

can be removed from the chassis.

HS (hot

swap) button

Press the HS button to enter hot swap mode. When the HS LED becomes

solid blue you can remove the fan tray from the chassis.

FAN TRAY

1

2

3

4

5

6

Hot swap

button

Hot swap LED

Alarm LED

OK LED

Latch

FortiGate-5060 Chassis Guide

01-400-129494-20110912 17

http://docs.fortinet.com/ • Feedback

Power connection and configuration

This chapter describes how to connect DC power to a FortiGate-5060 chassis.

If main DC power supplied by the data center in which the FortiGate-5060 chassis is to be

installed is not available, you can use a FortiGate power converter shelf to convert AC to

DC to supply DC power to the FortiGate-5060 chassis.

This chapter describes:

•About data center DC power

•Connecting the FortiGate-5060 chassis to DC power and data center ground

•Connecting a FortiGate-5060 PEM to DC power

•Connecting the FortiGate-5060 chassis to data center ground

•Connecting the FortiGate-5060 chassis to AC power using a FortiGate power

converter shelf

•Turning on FortiGate-5060 chassis power

About data center DC power

The FortiGate-5060 chassis is designed to be installed in a data center or similar location

that has available -48VDC power fed from a 30A listed circuit breaker (also called battery

power or main DC power). Fortinet expects that most FortiGate-5060 customers will be

installing their chassis in a data center or similar location that is already equipped with a

-48VDC power system fed from a 30A listed circuit breaker that provides power to existing

networking or telecom equipment. The FortiGate-5060 chassis is designed to be

connected directly to this DC power system.

In this document, data center DC power refers to a -48VDC power system that is already

available at the location at which the FortiGate-5060 chassis is being installed.

Connecting the FortiGate-5060 chassis to DC power and data

center ground

Connect the FortiGate-5060 chassis to r DC power using the redundant -48V to - 60 VDC

power entry modules (PEMs) on the FortiGate-5060 back panel labelled PEM A and

PEM B. The specified voltage range of the PEMs is -40.5 VDC to -60 VDC. The chassis

ships with both PEM A and B installed. The PEMs provide redundant DC power

connections for the FortiGate-5060 chassis and distribute DC power to the chassis slots

and to the fan trays.

Each FortiGate-5060 PEM includes two connectors for two power terminals that connect

power to different power zones in the FortiGate-5060 chassis. In the PEM, each power

terminal is protected by a 30A fused switch. The power zones are connected together and

should be connected to a single -48VDC power source with a 30A listed circuit breaker.

Each power zone supplies power to different FortiGate-5060 slots and cooling fan trays.

You should always connect both power zones.

Connecting a FortiGate-5060 PEM to DC power Power connection and configuration

FortiGate-5060 Chassis Guide

18 01-400-129494-20110912

http://docs.fortinet.com/ • Feedback

To connect the FortiGate-5060 PEMs to data center DC power you must use power

connectors that comply with the local electrical wiring code and the requirements of the

facility in which you are installing the FortiGate-5060 chassis.

Fortinet supplies two 3-ft. power cables with AWG-10 stranded wires and ring terminals:

Black for -48VDC and red for RTN. These cables should only be used to connect the

FortiGate-5060 PEMs to a FortiGate power convertor shelf if purchased with your

FortiGate-5060 chassis. If the power cable length needs to be longer than 3 ft., higher

gauge wires should be used.

Green AWG-6 wires are recommended for ground connections (not supplied with the

chassis).

If you are connecting both PEMs the -48VDC and RTN terminals on PEM A and PEM B

must be wired symmetrically. This means that the connections must be the same to both

PEMs.

FortiGate-5060 PEMs are hot-swappable, which means you can remove and replace a

defective PEM while the system is operating (assuming that the FortiGate-5060 system

has both PEMs connected for redundancy). It is not necessary to notify the software or

reset the system power. You can add, remove, or replace a second PEM without

interrupting FortiGate-5060 operation.

Connecting a FortiGate-5060 PEM to DC power

The following procedure describes how to connect power to PEM A. You can repeat this

procedure to connect PEM B.

Figure 8: Connecting a FortiGate-5060 PEM to DC power

DC Power Source

-48VDC

connector

RTN (positive)

red to power

source RTN

DC Power Source

RTN connector

PEM

RTN

Branch 1 Branch 2

-48/-60 V

-48V/-60 VDC

black to power

source -48VDC

Hot swap button

Hot swap LED

Power Switches

Alarm LED

OK LED

Power connection and configuration Connecting the FortiGate-5060 chassis to data center ground

FortiGate-5060 Chassis Guide

01-400-129494-20110912 19

http://docs.fortinet.com/ • Feedback

You need the following tools and equipment to connect a FortiGate-5060 PEM to data

center DC power:

• A hex socket wrench is recommended for loosening and tightening the nuts on the

PEM power terminals.

• An electrostatic discharge (ESD) preventive wrist strap with connection cord.

• Two black AWG-10 stranded wires labelled -48V with attached Listed closed loop

single hole lugs with insulating boot suitable for minimum 10AWG copper wire, such as

3M model MH10-14RX.

• Two red AWG-10 stranded wires labelled RTN with attached Listed closed loop single

hole lugs with insulating boot suitable for minimum 10AWG copper wire, such as 3M

model MH10-14RX.

To connect a FortiGate-5060 PEM to data center DC power

1Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal

surface on the chassis or frame.

2Turn off both power switches on the PEM.

3Remove the clear plastic cover from the PEM power connectors.

4Connect the DC power wires (see Figure 8):

• Connect two black -48V power wires from the DC power source to the connectors

on the FortiGate-5060 PEM labeled -48V/-60 V (the lower connectors on the PEM).

• Connect two red RTN return wires from data center RTN to the connectors on the

FortiGate-5060 PEM labeled RTN (the upper connectors on the PEM).

5Make sure the power wires are secured using tie wraps if required.

6If required, label the black wire -48V.

7If required, label the red wire RTN.

8Turn on the PEM switches.

Connecting the FortiGate-5060 chassis to data center ground

The FortiGate-5060 chassis includes a ground terminal on the lower left side of the

FortiGate-5060 back panel (see Figure 2 on page 9). The Shelf ground terminal provides

two threads (M6) with a 15.88 mm (5/8“) spacing between thread centers to connect a

two-hole lug. This connector must be connected to data center ground.

You need the following tools and equipment to connect the FortiGate-5060 chassis to

ground:

Table 7: FortiGate-5060 PEM LEDs and controls

LED/Control Description

HS (hot swap)

LED

Normally off. Blinking blue indicates that the PEM is entering the hot swap

mode. Solid Blue indicates that the PEM is in hot swap mode and can be

removed from the chassis.

Alarm LED Normally off. Turns red when there is a problem with the power source, or if

one or more of the 8 PEM fuses are blown or missing.

OK (operate)

LED

Green when the PEM is powered and operating normally.

HS (hot

swap) button

Press the HS button to enter hot swap mode. When the HS LED becomes

solid blue you can remove the PEM from the chassis.

Connecting the FortiGate-5060 chassis to AC power using a FortiGate power converter shelf Power connection and configuration

FortiGate-5060 Chassis Guide

20 01-400-129494-20110912

http://docs.fortinet.com/ • Feedback

• A number 2 Phillips screwdriver.

• An electrostatic discharge (ESD) preventive wrist strap with connection cord.

• One green AWG-6 stranded wire with M6 two-hole terminal lug with 45° angle tongue

with a 15.88 mm (5/8“) spacing between hole centers.

Figure 9: Connecting a FortiGate-5060 chassis to data center ground

To connect the FortiGate-5060 chassis to data center ground

1Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal

surface on the chassis or frame.

2Connect the green ground wire from the data center ground to the ground connector on

the FortiGate-5060 chassis (see Figure 9).

3Secure the ground wire to the chassis.

4Optionally label the wire GND.

Connecting the FortiGate-5060 chassis to AC power using a

FortiGate power converter shelf

If data center DC power is not available, you can use a Fortinet-supplied power converter

shelf with hot swappable power supplies to convert AC power to DC power. FortiGate

power converter shelves and power supplies are not supplied with the FortiGate-5060

chassis and must be purchased separately.

As already mentioned, the FortiGate-5060 chassis ships with two 3-ft. power cables with

AWG-10 stranded wires and ring terminals: Black for -48VDC and red for RTN. These

cables should only be used to connect the FortiGate-5060 PEMs to a FortiGate power

convertor shelf if purchased with your FortiGate-5060 chassis. If the power cable length

needs to be longer than 3 ft., higher gauge wires should be used.

Turning on FortiGate-5060 chassis power

If you are using a power converter shelf, connect the power convertor shelf to AC power

and verify that it is operating correctly.

If you are using data center DC power, turn own the power to the chassis according to the

requirements of your data center DC power system.

Once the FortiGate-5060 chassis is connected to DC power you can turn on power to the

chassis by turning on the switches on the PEMs (see Figure 8 on page 18 for location of

the switches on each PEM).

Data Center

ground

connector

(Central office

ground system)

Chassis

Ground

Connector

(green)

FortiGate-5060

Ground

Connector

(green)

Page is loading ...

Fortinet FortiGate-5060 Chassis Manual

Fortinet FortiGate-5060 Chassis Manual

Related papers

Other documents