Fortinet 5003 Manual Do Utilizador
FortiGate-5050 fabric backplane communication
Fabric gigabit switching within a chassis
FortiSwitch-5003A and 5003 Fabric and Base Backplane Communications Guide
01-30000-85717-20081205
01-30000-85717-20081205
49
For the FortiGate-5001A boards to use the fabric channel 2 for data
communication you must show backplane interfaces on the FortiGate-5001A
web-based manager and then configure firewall polices and routing for the fabric2
interfaces.
communication you must show backplane interfaces on the FortiGate-5001A
web-based manager and then configure firewall polices and routing for the fabric2
interfaces.
If the data traffic contains VLAN-tagged packets, you must add the VLAN tags to
the FortiSwitch-5003A interfaces that will handle the VLAN-tagged traffic. For
example, to allow VLAN tag 34 on slot 5 from the FortiSwitch-5003A CLI enter:
the FortiSwitch-5003A interfaces that will handle the VLAN-tagged traffic. For
example, to allow VLAN tag 34 on slot 5 from the FortiSwitch-5003A CLI enter:
config switch fabric-channel interface
edit "slot-5"
set allowed-vlans 1,34
end
.
shows a FortiGate-5050 chassis with FortiSwitch-5003A boards in
hub/switch slots 1 and 2 and FortiGate-5001A boards in slots 3, 4, and 5. In this
configuration the FortiSwitch-5003A boards are operating as layer-2 switches for
fabric channels 1 and 2 and the FortiGate-5001A boards are operating as typical
standalone FortiGate units. The FortiGate-5001A boards can use fabric channels
1 and 2 for data communication among the FortiGate boards.
configuration the FortiSwitch-5003A boards are operating as layer-2 switches for
fabric channels 1 and 2 and the FortiGate-5001A boards are operating as typical
standalone FortiGate units. The FortiGate-5001A boards can use fabric channels
1 and 2 for data communication among the FortiGate boards.
The chassis can be connected to the network using any of the FortiGate-5001A
front panel interfaces. You can also connect FortiSwitch-5003A front panel fabric
interfaces to the network. You can also install FortiGate AMC modules in the
FortiGate-5001A boards and connect the network to the AMC front panel
interfaces. The AMC modules and the network connections are not shown in
front panel interfaces. You can also connect FortiSwitch-5003A front panel fabric
interfaces to the network. You can also install FortiGate AMC modules in the
FortiGate-5001A boards and connect the network to the AMC front panel
interfaces. The AMC modules and the network connections are not shown in
Figure 17: FortiGate-5050 fabric channel 1 and 2 data communication
For the FortiGate-5001A boards to use the fabric channels 1 and 2 for data
communication you must show backplane interfaces on the FortiGate-5001A
web-based manager and then configure firewall polices and routing for the fabric1
and fabric2 interfaces.
communication you must show backplane interfaces on the FortiGate-5001A
web-based manager and then configure firewall polices and routing for the fabric1
and fabric2 interfaces.
1
2
2
3
4
5
SMC
1
SMC
POWER
5050SAP
SERIAL
1
SERIAL
2
ALARM
10/100
link/Act
ETH0 Service
RESET
ST
ATUS
Hot Swap
link/Act
ETH0
ETH1
10/100
5000SM
10/100
link/Act
ETH0 Service
RESET
ST
ATUS
Hot Swap
link/Act
ETH0
ETH1
10/100
5000SM
Fabric channel 2
data communication
data communication
Fabric channel 1
data communication