Page 2
FORTINET VIDEO GUIDE https://video.fortinet.com FORTINET BLOG https://blog.fortinet.com CUSTOMER SERVICE & SUPPORT https://support.fortinet.com FORTINET TRAINING & CERTIFICATION PROGRAM https://www.fortinet.com/support-and-training/training.html NSE INSTITUTE https://training.fortinet.com FORTIGUARD CENTER https://fortiguard.com/ END USER LICENSE AGREEMENT https://www.fortinet.com/doc/legal/EULA.pdf FEEDBACK techdoc@fortinet.com Email: April 19, 2021 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual...
FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 4
Get modem ID Get ICCID Get firmware preference Recover firmware preference Set internal USB configuration Get stored images Get MSISDN Check SIM card state Check RF band information Get RF band capacity FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
USB modem running the PPP protocol in the external USB port. This Manual is based on FortiOS 6.0.6 GA release for FortiGate 30E GBL, unless further acknowledged. It is prepared for technical staff of Fortinet Inc. and customers of FortiGate 30E and FortiWiFi 30E devices with the integrated 3G/4G LTE modem.
Dual SIM card SIM card auto- switching Dual SIM LED Billing data Wireless profile configuration Data usage tracking SIM PLMN code lock This Manual is written based on FortiGate-30E-3G4G-GBL. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
SIM card inserted. Carrier modem firmware selection You are also able to manually select a modem firmware to be used instead of letting FortiOS do it automatically. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
APN. This feature comes in handy for those who would like to join a private network or connect with different credential information. Data usage tracking FortiOS keeps track of LTE data usage. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
SIM PLMN code lock FortiOS allows you to set a SIM PLMN code lock which only allows SIM cards with certain PLMN code prefix in its IMSI code for connection. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 12
If the device is at a location without good GPS signal reception, the location information can’t be retrieved. The internal GPS daemon, if enabled, polls NMEA messages from the port continuously. With the GPS daemon disabled, you can FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
”. If the modem is working properly with the default configuration and recognized by FortiOS, the following information should show up: LTE Modem detailed information: Modem detected: Yes Manufacturer: Sierra Wireless, Incorporated FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 14
If the value is less than -90 dB, there is a signal problem in most cases, and you must check antenna connection or open the device to inspect the antenna connection to the modem chip. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
SIM card carrier, if auto-sim configuration is enabled (default). Once the device is connected, use “ diagnose test application lted 5 ” to show LTE service information: FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 16
Note that the system mode has changed from WCDMA to LTE. A few LTE protocol parameters indicated the modem is now connected to an LTE network and receive full services. Additionally, more signal parameters such as SINR, RSRP and RSRQ are now available for diagnosis. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Note: By default, the FortiGate 30E GUI opens to the Dashboard>Status page after you log in. 5. Check the status of the modem interface by selecting Network>Interfaces, as shown in the following illustration. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
1. Use the serial cable (included in your product package) to connect the serial port of your computer to the console port of your FortiGate 30E. 2. Start a serial console terminal program from your computer, and set the port to: FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 19
FortiGate 30E comes with a default firewall policy that allows all traffic from internal ports to the wwan interface. Make sure the policy is in place before moving on to the next step. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
When it connects to a unwanted network, it will receive no service. Having a clearly defined profile table can prevent this issue. Assuming that you have a SIM card which can be used for either public network “pn” or private network “prn”, and FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Enable/disable USB LTE/WIMAX device. extra-init Extra initialization string for USB LTE/WIMAX devices. manual-handover Enable/disable manual handover from 3G to LTE network. force-wireless-profile Force to use wireless profile index (1 - 16), 0 if FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
LTE signal comes back to normal, the modem will switch back to the LTE network. This process is called a handover. Handover is supposed to happen automatically, but the modem may fail to do so in some cases. The manual-handover command is used to resolve this issue. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Whether you use PAP or CHAP authentication, it is OK to set the option to both because the modem knows which algorithm to use. Once an authentication type is chosen, the hidden username and password options appear, as illustrated below. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
As discussed earlier, modems expose some USB serial interfaces, and the FortiOS enumerates them as /dev/ttyusbX FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
It can be used as a reminder of how much data you can use in a month. In the future, we can generate an alarm to notify the users that their data limit is approaching. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Hence, it is quite common to see the modem disconnected or undetected shortly after a new SIM card is inserted, if auto-sim is selected. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
A bug related to this option will render the unit unable to establish an LTE connection in FortiOS 6.2.4 , 6.2.5 and 6.4.2. This issue will be fixed in later FOS releases. A temporary workaround is to disable this option. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
The system default is set as unlock, i.e., the passcode is set as empty, and you can set your own passcode. To lock again, simply unset the sim-lock-passcode configuration and the other two options will be hidden again. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 30
Configuration If you have forgotten your set passcode, you can either do a factory reset or contact Fortinet for your admin passcode. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
In most cases, the error state happens because of loose SIM card contact with the card slot. It can be fixed with a good-quality SIM card adapter. diagnose sys lte-modem signal-info LTE Modem signal information: WCDMA: RSSI: ECIO: LTE: FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 33
The following chart shows the quality evaluations for modem LTE signal strength. You can use the diagnose test application 5 command to get a more comprehensive modem signal strength dump. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
RAW IP, the MTU on the Ethernet interface must be changed to the same as the one on the wireless front end. Otherwise, it will not work. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Estimated LTE Modem data usage in this billing cycle: Bytes in: Bytes out: The Console only displays bytes in/out for the current billing cycle. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
LTE modem. FortiWiFi-40F-3G4G # exec lte-modem power-off Are you sure you want to power off the LTE modem? Do you want to continue? (y/n) FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
The following example shows the deletion of the profile with "id 5" that we created earlier. FortiWiFi-40F-3G4G # exec lte-modem wireless-profile delete 2 Profile with id 2 deleted! FortiWiFi-40F-3G4G # exec lte-modem wireless-profile list Type Name PDP_Type Authen Username broadband FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
The following commands are used for upgrading the firmware of the internal LTE modem, which are discussed in great Firmware Upgrade Guide detail in the execute lte-modem get-modem-firmware execute lte-modem get-pri-firmware execute lte-modem start-upgrade FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
IMEI: 353533100752164 IMEI SV: 7 FSN: UF002271450310 +GCAP: +CGSM Show data session connection status diag test app lted 2 command shows the data session connection status of the internal LTE modem. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
FortiWiFi-40F-3G4G # dia test app lted 14 Image information from the modem: Modem image count ==> 2 Image type ==> 0 Modem firmware version ==> 00.00.00.00 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
The following output shows all the modem images and carrier profiles stored in the modem. FortiWiFi-40F-3G4G # dia test app lted 17 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 47
A unique ID identifies the carrier. Each carrier is identified with a unique ID. The carrier abbreviation in a build ID is just for easy identification. If a carrier-specific image and PRI profile cannot be found, the generic firmware can be used FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
21 command lists all the RF bands which the modem can use. Band Capability[0] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_2100 Band Capability[1] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_PCS_1900 Band Capability[2] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_1700_US Band Capability[3] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_850_US Band Capability[4] ==> QMI_DMS_BAND_CAPABILITY_WCDMA_800 FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Drill down to MIB entries on page 56 Download MIB files FortiGate has two MIB files: FortiGate MIB file and Fortinet Core MIB file. It requires to use the common Fortinet Core MIB (FORTINET-CORE-MIB.mib) for SNMP monitoring. The following procedures show how to download the MIB files from the FortiGate GUI.
3. Specify the address of the SNMP hosts, and set Host Type to Accept queries and send traps . 4. Make the other desired selections. 5. Click OK. The following illustrations show the configuration of an SNMP community named "lte". FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
MIBs Allow SNMP access Assume that you use the WAN interface to access MIB information, you must ensure that SNMP is enabled on that interface. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
The following example shows the configuration and use of the iReasoning MIB browser. Make sure that the information you enter in the MIB browser matches that on the SNMP agent (FortiGate). Fro more information, see Configure a MIB browser on page FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
The SNMP version used by the SNMP agent. Browse for internal LTE modem MIB entries The following image shows the path used to browse for MIB information about the internal LTE modem in the FortiGate. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
MIBs Drill down to MIB entries The following image shows the information you'll see when drilling down to a MIB entry. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Modem manual handover happened Modem IP address changed Modem Bearer technology changed The syslog is only available for the internal LTE modem. Following is an example of syslog for the internal LTE modem. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
2. Use the cat /dev/ttyusb0 > /tmp/<DM log file> command to redirect the output to a file. 3. When finished, use Ctrl+C to end debugging and transfer the DM log file to a computer. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Page 59
Syslog When you believe that a problem might be modem-related, you should capture the DM log and send to the vendor, which is Sierra Wireless in this case. for diagnostics. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
LTE configuration but gets interrupted. This leaves a lock to the interface in the daemon. As s result, any future operation to the interface would be denied. Workaround: Reboot the unit. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Carrier-provided SIM cards unable to establish LTE connection Some customers may find their units unable to establish an LTE connection with Fortinet-supported SIM cards from their carrier. This is because currently FGT-3G4G units are preloaded with LTE modem firmware for the following carrier (this information can be obtained using “diagnose test app lted 17”...
Be sure to verify SIM card validity with a computer before using it on FortiGate. You must also make sure the inserted SIM card has good contact with the SIM card slot and no QMI_UIM_CARD_STATE_ERROR message occurs with the diagnose sys lte-modem sim-info command. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
UE. An EPS bearer has been established. MME knows the current location of the UE with the accuracy of a cell. EEM- UE is not attached to any LTE network. MME does know FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
This step is very critical as most of connection issues are actually caused by inappropriate wireless profile settings. Be sure to follow wireless profile configuration and APN setting section to avoid any mistakes. FortiGate hardware integrity Make sure there is no hardware defect on the FortiGate device. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Connection troubleshooting FortiOS software integrity Double-check that there is no abnormal behavior in FortiOS and no anomaly in the system log or in diagnostic information. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
“Mobile Broadband”. SIM cards come in different sizes. Make sure that you are using a Micro SIM card. 2. On the bottom of the Fortinet device (production units only), locate the IMEI number of the modem. 3. Open the SIM card slot cover, and insert your SIM card into the SIM card slot in the modem.
Page 67
Note: DO NOT POWER OFF THE ROUTER OR UNPLUG THE AER MODEM. 7. Wait until the Internal 3G/4G LED has turned solid green on the FortiGate, indicating completion of modem activation.. FortiGate-FortiWiFi 5.0 3G4G LTE Modem Operator's Manual Fortinet Technologies Inc.
Need help?
Do you have a question about the FortiGate-FortiWiFi and is the answer not in the manual?
Questions and answers