Fortinet FortiGate-FortiWiFi Operator's Manual

Fortinet FortiGate-FortiWiFi Operator's Manual

3g4g lte modem
Table of Contents

Advertisement

FortiGate-FortiWiFi - 3G4G LTE Modem Operator's
Manual
Version 5.0

Advertisement

Table of Contents
loading

Summary of Contents for Fortinet FortiGate-FortiWiFi

  • Page 1 FortiGate-FortiWiFi - 3G4G LTE Modem Operator's Manual Version 5.0...
  • Page 2 FORTINET VIDEO GUIDE https://video.fortinet.com FORTINET BLOG https://blog.fortinet.com CUSTOMER SERVICE & SUPPORT https://support.fortinet.com FORTINET TRAINING & CERTIFICATION PROGRAM https://www.fortinet.com/support-and-training/training.html NSE INSTITUTE https://training.fortinet.com FORTIGUARD CENTER https://fortiguard.com/ END USER LICENSE AGREEMENT https://www.fortinet.com/doc/legal/EULA.pdf FEEDBACK techdoc@fortinet.com Email: April 19, 2021 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual...
  • Page 3: Table Of Contents

    FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 4 Get modem ID Get ICCID Get firmware preference Recover firmware preference Set internal USB configuration Get stored images Get MSISDN Check SIM card state Check RF band information Get RF band capacity FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 5 LTE hardware integrity LTE modem firmware carrier match Wireless profile, APN configuration FortiGate hardware integrity FortiOS software integrity Enable Verizon 3G/4G service Activate Verizon SIM card Activate Verizon static IP SIM card FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 6: Introduction

    USB modem running the PPP protocol in the external USB port. This Manual is based on FortiOS 6.0.6 GA release for FortiGate 30E GBL, unless further acknowledged. It is prepared for technical staff of Fortinet Inc. and customers of FortiGate 30E and FortiWiFi 30E devices with the integrated 3G/4G LTE modem.
  • Page 7: Fortigate/Fortiwifi Variant Lte Feature Matrix

    Dual SIM card SIM card auto- switching Dual SIM LED Billing data Wireless profile configuration Data usage tracking SIM PLMN code lock This Manual is written based on FortiGate-30E-3G4G-GBL. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 8: 4G/3G Handover

    SIM card inserted. Carrier modem firmware selection You are also able to manually select a modem firmware to be used instead of letting FortiOS do it automatically. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 9: Gps

    APN. This feature comes in handy for those who would like to join a private network or connect with different credential information. Data usage tracking FortiOS keeps track of LTE data usage. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 10: Sim Plmn Code Lock

    SIM PLMN code lock FortiOS allows you to set a SIM PLMN code lock which only allows SIM cards with certain PLMN code prefix in its IMSI code for connection. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 11: Installation

    E: Ad=02(O) Atr=02(Bulk) MxPS=1024 Ivl=0ms I:* If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=qcserial E: Ad=85(I) Atr=03(Int.) MxPS= 10 Ivl=32ms E: Ad=84(I) Atr=02(Bulk) MxPS=1024 Ivl=0ms E: Ad=03(O) Atr=02(Bulk) MxPS=1024 Ivl= FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 12 If the device is at a location without good GPS signal reception, the location information can’t be retrieved. The internal GPS daemon, if enabled, polls NMEA messages from the port continuously. With the GPS daemon disabled, you can FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 13: Check Modem Status

    ”. If the modem is working properly with the default configuration and recognized by FortiOS, the following information should show up: LTE Modem detailed information: Modem detected: Yes Manufacturer: Sierra Wireless, Incorporated FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 14 If the value is less than -90 dB, there is a signal problem in most cases, and you must check antenna connection or open the device to inspect the antenna connection to the modem chip. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 15: Use Lte Service

    SIM card carrier, if auto-sim configuration is enabled (default). Once the device is connected, use “ diagnose test application lted 5 ” to show LTE service information: FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 16 Note that the system mode has changed from WCDMA to LTE. A few LTE protocol parameters indicated the modem is now connected to an LTE network and receive full services. Additionally, more signal parameters such as SINR, RSRP and RSRQ are now available for diagnosis. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 17: Configuration

    Note: By default, the FortiGate 30E GUI opens to the Dashboard>Status page after you log in. 5. Check the status of the modem interface by selecting Network>Interfaces, as shown in the following illustration. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 18: Configure The Modem From Fortigate Console

    1. Use the serial cable (included in your product package) to connect the serial port of your computer to the console port of your FortiGate 30E. 2. Start a serial console terminal program from your computer, and set the port to: FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 19 FortiGate 30E comes with a default firewall policy that allows all traffic from internal ports to the wwan interface. Make sure the policy is in place before moving on to the next step. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 20: Create Wireless Profiles

    When it connects to a unwanted network, it will receive no service. Having a clearly defined profile table can prevent this issue. Assuming that you have a SIM card which can be used for either public network “pn” or private network “prn”, and FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 21: Configure The Lte Modem

    Enable/disable USB LTE/WIMAX device. extra-init Extra initialization string for USB LTE/WIMAX devices. manual-handover Enable/disable manual handover from 3G to LTE network. force-wireless-profile Force to use wireless profile index (1 - 16), 0 if FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 22: Set Status

    LTE signal comes back to normal, the modem will switch back to the LTE network. This process is called a handover. Handover is supposed to happen automatically, but the modem may fail to do so in some cases. The manual-handover command is used to resolve this issue. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 23: Set Apn

    Whether you use PAP or CHAP authentication, it is OK to set the option to both because the modem knows which algorithm to use. Once an authentication type is chosen, the hidden username and password options appear, as illustrated below. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 24: Set Network-Type

    As discussed earlier, modems expose some USB serial interfaces, and the FortiOS enumerates them as /dev/ttyusbX FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 25: Set Auto-Connect

    APN. set gps-service FortiWiFi-40F-3G4G (lte-modem) # set gps-service enable Enable GPS daemon. disable Disable GPS daemon FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 26: Set Data-Usage-Tracking

    It can be used as a reminder of how much data you can use in a month. In the future, we can generate an alarm to notify the users that their data limit is approaching. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 27: Set Gps-Port

    Hence, it is quite common to see the modem disconnected or undetected shortly after a new SIM card is inserted, if auto-sim is selected. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 28: Set Allow-Modify-Wireless-Profile-Table

    A bug related to this option will render the unit unable to establish an LTE connection in FortiOS 6.2.4 , 6.2.5 and 6.4.2. This issue will be fixed in later FOS releases. A temporary workaround is to disable this option. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 29: Set Sim-Slot

    The system default is set as unlock, i.e., the passcode is set as empty, and you can set your own passcode. To lock again, simply unset the sim-lock-passcode configuration and the other two options will be hidden again. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 30 Configuration If you have forgotten your set passcode, you can either do a factory reset or contact Fortinet for your admin passcode. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 31: Diagnose Sys Lte-Modem

    FortiWiFi-40F-3G4G # dia sys lte-modem modem-details LTE Modem detailed information: Modem detected: Manufacturer: Sierra Wireless, Incorporated Model: EM7565 Revision: SWI9X50C_01.07.02.00 6c91bc jenkins 2018/06/13 23:08:16 MSISDN: 16692240893 ESN: IMEI: 353533100752164 MEID: Hardware revision: 10001 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 32: Diagnose Sys Lte-Modem Sim-Info

    In most cases, the error state happens because of loose SIM card contact with the card slot. It can be fixed with a good-quality SIM card adapter. diagnose sys lte-modem signal-info LTE Modem signal information: WCDMA: RSSI: ECIO: LTE: FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 33 The following chart shows the quality evaluations for modem LTE signal strength. You can use the diagnose test application 5 command to get a more comprehensive modem signal strength dump. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 34: Diagnose Sys Lte-Modem Data-Session-Info

    RAW IP, the MTU on the Ethernet interface must be changed to the same as the one on the wireless front end. Otherwise, it will not work. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 35: Diagnose Sys Lte-Modem Gps-Info

    Estimated LTE Modem data usage in this billing cycle: Bytes in: Bytes out: The Console only displays bytes in/out for the current billing cycle. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 36: Execute Lte-Modem

    LTE modem. FortiWiFi-40F-3G4G # exec lte-modem power-off Are you sure you want to power off the LTE modem? Do you want to continue? (y/n) FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 37: Execute Lte-Modem Power-On

    FortiWiFi-40F-3G4G # exec lte-modem wireless-profile list Type Name PDP_Type Authen Username broadband Profile Type: 0 ==> QMI_WDS_PROFILE_TYPE_3GPP 1 ==> QMI_WDS_PROFILE_TYPE_3GPP2 * ==> Default 3GPP profile, # ==> Default 3GPP2 profile Profile PDP type: FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 38: Execute Lte-Modem Wireless-Profile Create

    0 - IPV4 1 - PPP 2 - IPV6 3 - IPV4V6 FortiWiFi-40F-3G4G # exec lte-modem wireless-profile create profile1 0 3 <name> Wireless profile APN name 0 to 32 characters. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 39: Execute Lte-Modem Wireless-Profile Modify

    Wireless profile PDP type. 0 - IPV4 1 - PPP 2 - IPV6 3 – IPV4V6 FortiWiFi-40F-3G4G # exec lte-modem wireless-profile list Type Name PDP_Type Authen Username broadband profile1 YOU_APN_2 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 40: Execute Lte-Modem Wireless-Profile Delete

    The following example shows the deletion of the profile with "id 5" that we created earlier. FortiWiFi-40F-3G4G # exec lte-modem wireless-profile delete 2 Profile with id 2 deleted! FortiWiFi-40F-3G4G # exec lte-modem wireless-profile list Type Name PDP_Type Authen Username broadband FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 41: Upgrade Modem Firmware

    The following commands are used for upgrading the firmware of the internal LTE modem, which are discussed in great Firmware Upgrade Guide detail in the execute lte-modem get-modem-firmware execute lte-modem get-pri-firmware execute lte-modem start-upgrade FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 42: Diagnostic Test Commands

    IMEI: 353533100752164 IMEI SV: 7 FSN: UF002271450310 +GCAP: +CGSM Show data session connection status diag test app lted 2 command shows the data session connection status of the internal LTE modem. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 43: Connect And Disconnect The Modem

    SCC1 RxD RSSI: -66 SCC1 RxD RSRP: -86 SCC2 RxM RSSI: -87 SCC2 RxM RSRP: -110 SCC2 RxD RSSI: -86 SCC2 RxD RSRP: -113 Tx Power: -- TAC: 8b3f (35647) RSRQ (dB): -14.1 Cell ID: 0a38ed09 (171502857) FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 44: Show Ip Address Of The Modem

    FortiWiFi-40F-3G4G # dia test app lted 7 at+cgcontrdp +CGCONTRDP: 1,5,broadband,10.53.79.115,,172.26.38.1, Show SIM card status diag test app lted 8 command returns SIM card status information. FortiWiFi-40F-3G4G # dia test app lted 8 at$qcsimstat? $QCSIMSTAT: 0,SIM INIT COMPLETED FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 45: Internal Debugging Commands

    FortiWiFi-40F-3G4G # dia test app lted 14 Image information from the modem: Modem image count ==> 2 Image type ==> 0 Modem firmware version ==> 00.00.00.00 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 46: Recover Firmware Preference

    The following output shows all the modem images and carrier profiles stored in the modem. FortiWiFi-40F-3G4G # dia test app lted 17 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 47 A unique ID identifies the carrier. Each carrier is identified with a unique ID. The carrier abbreviation in a build ID is just for easy identification. If a carrier-specific image and PRI profile cannot be found, the generic firmware can be used FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 48: Get Msisdn

    21 command lists all the RF bands which the modem can use. Band Capability[0] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_2100 Band Capability[1] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_PCS_1900 Band Capability[2] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_1700_US Band Capability[3] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_850_US Band Capability[4] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_800 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 49: Get Gps Satellite Information

    LTE Band Capability[1] ==> QMI_DMS_LTE_BAND_CAPABILITY_EUTRAN_2 LTE Band Capability[2] ==> QMI_DMS_LTE_BAND_CAPABILITY_EUTRAN_3 LTE Band Capability[3] ==> QMI_DMS_LTE_BAND_CAPABILITY_EUTRAN_4 LTE Band Capability[4] ==> QMI_DMS_LTE_BAND_CAPABILITY_EUTRAN_5 Get GPS satellite information diag test app lted 22 command returns GPS satellite information. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 50: Mibs

    Drill down to MIB entries on page 56 Download MIB files FortiGate has two MIB files: FortiGate MIB file and Fortinet Core MIB file. It requires to use the common Fortinet Core MIB (FORTINET-CORE-MIB.mib) for SNMP monitoring. The following procedures show how to download the MIB files from the FortiGate GUI.
  • Page 51: Create Snmp Community

    3. Specify the address of the SNMP hosts, and set Host Type to Accept queries and send traps . 4. Make the other desired selections. 5. Click OK. The following illustrations show the configuration of an SNMP community named "lte". FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 52: Allow Snmp Access

    MIBs Allow SNMP access Assume that you use the WAN interface to access MIB information, you must ensure that SNMP is enabled on that interface. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 53: Configure A Mib Browser

    The following example shows the configuration and use of the iReasoning MIB browser. Make sure that the information you enter in the MIB browser matches that on the SNMP agent (FortiGate). Fro more information, see Configure a MIB browser on page FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 54: Browse For Internal Lte Modem Mib Entries

    The SNMP version used by the SNMP agent. Browse for internal LTE modem MIB entries The following image shows the path used to browse for MIB information about the internal LTE modem in the FortiGate. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 55 MIBs FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 56: Drill Down To Mib Entries

    MIBs Drill down to MIB entries The following image shows the information you'll see when drilling down to a MIB entry. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 57: Syslog

    Modem manual handover happened Modem IP address changed Modem Bearer technology changed The syslog is only available for the internal LTE modem. Following is an example of syslog for the internal LTE modem. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 58: Lte Modem Daemon Debugging

    2. Use the cat /dev/ttyusb0 > /tmp/<DM log file> command to redirect the output to a file. 3. When finished, use Ctrl+C to end debugging and transfer the DM log file to a computer. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 59 Syslog When you believe that a problem might be modem-related, you should capture the DM log and send to the vendor, which is Sierra Wireless in this case. for diagnostics. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 60: Connection Troubleshooting

    LTE configuration but gets interrupted. This leaves a lock to the interface in the daemon. As s result, any future operation to the interface would be denied. Workaround: Reboot the unit. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 61: Unable To Establish Lte Connection After Upgrading To Fos 6.2.5

    Carrier-provided SIM cards unable to establish LTE connection Some customers may find their units unable to establish an LTE connection with Fortinet-supported SIM cards from their carrier. This is because currently FGT-3G4G units are preloaded with LTE modem firmware for the following carrier (this information can be obtained using “diagnose test app lted 17”...
  • Page 62: Lte Data Connectivity And Connection Stability

    Be sure to verify SIM card validity with a computer before using it on FortiGate. You must also make sure the inserted SIM card has good contact with the SIM card slot and no QMI_UIM_CARD_STATE_ERROR message occurs with the diagnose sys lte-modem sim-info command. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 63: Device Registration

    UE. An EPS bearer has been established. MME knows the current location of the UE with the accuracy of a cell. EEM- UE is not attached to any LTE network. MME does know FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 64: Lte Modem Signal Reception

    This step is very critical as most of connection issues are actually caused by inappropriate wireless profile settings. Be sure to follow wireless profile configuration and APN setting section to avoid any mistakes. FortiGate hardware integrity Make sure there is no hardware defect on the FortiGate device. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 65: Fortios Software Integrity

    Connection troubleshooting FortiOS software integrity Double-check that there is no abnormal behavior in FortiOS and no anomaly in the system log or in diagnostic information. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 66: Enable Verizon 3G/4G Service

    “Mobile Broadband”. SIM cards come in different sizes. Make sure that you are using a Micro SIM card. 2. On the bottom of the Fortinet device (production units only), locate the IMEI number of the modem. 3. Open the SIM card slot cover, and insert your SIM card into the SIM card slot in the modem.
  • Page 67 Note: DO NOT POWER OFF THE ROUTER OR UNPLUG THE AER MODEM. 7. Wait until the Internal 3G/4G LED has turned solid green on the FortiGate, indicating completion of modem activation.. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 68 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
  • Page 69 Copyright© 2021 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners.

Table of Contents