Fortinet 5003 Benutzerhandbuch

Seite von 128
FortiSwitch-5003A and 5003   Fabric and Base Backplane Communications Guide
52
01-30000-85717-20081205
Fabric gigabit switching to the network
FortiGate-5050 fabric backplane communication
If the data traffic contains VLAN-tagged packets, you must add the VLAN tags to 
the FortiSwitch-5003A interfaces that will handle the VLAN-tagged traffic. For 
example, to allow VLAN tags 201 to 210 on slots 3, 4, and 5 and the F1 front panel 
interface, from the FortiSwitch-5003A CLI enter:
config switch fabric-channel interface
edit "slot-3"
set allowed-vlans 1,201-210
next
edit "slot-4"
set allowed-vlans 1,201-210
next
edit "slot-5"
set allowed-vlans 1,201-210
next
edit "f1"
set allowed-vlans 1,201-210
end
Fabric gigabit switching to the network
You can use the FortiSwitch-5003A fabric front panel interfaces to connect the 
fabric channel of a chassis to your network. Most often you would do this for data 
communication between the network and a fabric channel. For a simple 10-gigabit 
connection from your network to a fabric channel you can connect your network 
directly to a FortiSwitch-5003A fabric channel front panel interface. This 
connection provides data communication to the fabric1 or fabric2 interfaces of the 
FortiGate-5000 boards installed in the chassis.
 shows a FortiGate-5050 chassis containing two FortiSwitch-5003A 
boards and three FortiGate-5001A boards. The chassis is connected to internal 
and an external networks using FortiSwitch-5003A front panel fabric interfaces:
• The internal network is connected to fabric channel 2 using the F7 front panel 
interface of the FortiSwitch-5003A board in hub/switch slot 2
• The external network is connected to fabric channel 1 using the F1 front panel 
interface of the FortiSwitch-5003A board in hub/switch slot 1
In this configuration the FortiSwitch-5003A boards are operating as layer-2 
switches and the FortiGate-5001A boards are operating as standalone FortiGate 
units.
The chassis can also be connected to the network using any of the FortiGate front 
panel interfaces. You can also install FortiGate AMC modules in the 
FortiGate-5001A boards and connect networks to the AMC front panel interfaces. 
The AMC modules and network connections to the AMC modules and FortiGate 
boards are not shown in