Table of Contents
Advertisement
Quick Links
Advertisement
Table of Contents
Related Manuals for Fortinet FPM-7620F
Summary of Contents for Fortinet FPM-7620F
- Page 1 FPM-7620F Processing Module Guide FortiGate-7000F Series...
- Page 2 FORTINET DOCUMENT LIBRARY https://docs.fortinet.com FORTINET VIDEO GUIDE https://video.fortinet.com FORTINET BLOG https://blog.fortinet.com CUSTOMER SERVICE & SUPPORT https://support.fortinet.com FORTINET TRAINING & CERTIFICATION PROGRAM https://www.fortinet.com/support-and-training/training.html NSE INSTITUTE https://training.fortinet.com FORTIGUARD CENTER https://fortiguard.com/ END USER LICENSE AGREEMENT https://www.fortinet.com/doc/legal/EULA.pdf FEEDBACK Email: techdoc@fortinet.com April 8, 2021 FPM-7620F Processing Module Guide...
-
Page 3: Table Of Contents
Physical Description Front Panel LEDs Turning the module on and off NMI switch NP7 network processors - offloading data traffic Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors) Hardware installation Installing QSFP28 and SFP28 transceivers To install t ransceivers FortiGate-7121F cable bracket kit FPM-7620F mounting hardware Inserting a FPM-7620F module into a chassis Shutting down and removing a FPM-7620F board from a chassis Troubleshooting FPM-7620F does not startup FPM-7620F status LED is flashing during system operation Cautions and warnings Environmental specifications Safety Regulatory notices Federal Communication Commission (FCC) – USA Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada European Conformity (CE) - EU Voluntary Control Council for Interference (VCCI) – Japan Product Safety Electrical Appliance & Material (PSE) – Japan Bureau of Standards Metrology and Inspection (BSMI) – Taiwan China FPM-7620F Processing Module Guide Fortinet Technologies Inc. -
Page 4: Change Log
Change log Fortinet Technologies Inc. Change log Date Change description April 8, 2021 Removed information about the console port, which is not supported. Added the average power consumption. March 30, 2021 Minor fixes. March 16, 2021 Initial release. FPM-7620F Processing Module Guide... -
Page 5: Fpm-7620F Processing Module
Slider Slider interface Button Module Module Secure 1 and 2 Lever Lever Screw 100/40GigE fabric channel Secure QSFP28 data network Screw Button interfaces FPM-7620F mounting hardware Use the module levers, power sliders, and secure screws to insert, secure and remove the module from the chassis. Module levers Carefully slide the module all of the way into the chassis slot and fully close the module levers to seat the module into the chassis slot and to connect the module to the chassis backplane connectors. When both module levers are fully closed, the power sliders can be lowered to their bottom position, locking the module levers and turning on power to the module. FPM-7620F Processing Module Guide Fortinet Technologies Inc. -
Page 6: Power Sliders
Move the power sliders to the top position to unlock the module levers and turn the module power switch off. Gently push the power sliders down to make sure they are in their bottom position. If the module LEDs do not light the module is not receiving power. If this happens check the power sliders to make sure they are in their bottom position. Secure screws Fully tighten the secure screws to lock the module in the chassis providing a secure and reliable connection with the backplane. Loosen the secure screws before ejecting the module from the chassis. Front panel interfaces You connect the FPM-7620F to your 100Gbps networks using the 1 and 2 front panel Q SFP28 fabric channel interfaces. You can also connect the FPM-7620F to your 25Gbps n etworks using the front panel 3 to 10 SFP28 fabric channel interfaces. You can create link aggregation groups (LAGs) that can include data interfaces from multiple FIMs and FPMs in the same chassis. Connector Type Speed Protocol Description 1 and 2 QSFP28 100Gbps Ethernet Two front panel 100GigE QSFP28 fabric channel data interfaces that can be connected 40Gbps to 100Gbps data networks to distribute sessions to the FPMs in chassis slots 3 and up. These interfaces can also operate as 40GigE QSFP+ interfaces. FPM-7620F Processing Module Guide... -
Page 7: Physical Description
Operating Temperature 32 to 104°F (0 to 40°C) Storage Temperature -13 to 158°F (-25 to 70°C) Relative Humidity 20 to 90% (Non-condensing) Power consumption Max: 716W; Average: 675W Max Current Heat Dissipation 2577KJ/h (2442BTU/h) Front Panel LEDs State Description STATUS The FPM-7620F is powered off. Green The FPM-7620F is powered on and operating normally. Flashing The FPM-7620F is starting up. Green ALARM Major alarm. Amber Minor alarm No alarms POWER Green The FPM-7620F is powered on and operating normally. FPM-7620F Processing Module Guide... -
Page 8: Turning The Module On And Off
Flashing Network traffic on this interface. green No Link MGMT Solid Indicates this interface is connected with the correct cable and the attached Link/Act green network device has power. Blinking Indicates network traffic on this interface. green No Link Green Connection at 1Gbps. MGMT Amber Connection at 100Mbps. Speed Connection at 10Mbps. Turning the module on and off You can use the front panel power button to turn the module power on or off. If the module is powered on, press the power switch to turn it off. If the module is turned off and installed in a chassis slot, press the power button to turn it on. NMI switch When working with Fortinet Support to troubleshoot problems with the FPM-7620F you can use the front panel non- maskable interrupt (NMI) switch to assist with troubleshooting. Pressing this switch causes the software to dump registers/backtraces to the console. After the data is dumped the module reboots. While the module is rebooting, traffic is temporarily blocked. The module should restart normally and traffic can resume once the module is up and running. FPM-7620F Processing Module Guide... -
Page 9: Np7 Network Processors - Offloading Data Traffic
Chassis Base Backplane Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors) The FPM-7620F includes eight CP9 processors that provide the following performance enhancements: Flow-based inspection (IPS, application control etc.) pattern matching acceleration with over 10Gbps throughput IPS pre-scan IPS signature correlation Full match processors High performance VPN bulk data engine IPsec and SSL/TLS protocol processor DES/3DES/AES128/192/256 in accordance with FIPS46-3/FIPS81/FIPS197 MD5/SHA-1/SHA256/384/512-96/128/192/256 with RFC1321 and FIPS180 HMAC in accordance with RFC2104/2403/2404 and FIPS198 ESN mode GCM support for NSA "Suite B" (RFC6379/RFC6460) including GCM-128/256; GMAC-128/256 FPM-7620F Processing Module Guide... - Page 10 FPM-7620F processing module Fortinet Technologies Inc. Key Exchange Processor that supports high performance IKE and RSA computation Public key exponentiation engine with hardware CRT support Primary checking for RSA key generation Handshake accelerator with automatic key material generation True Random Number generator Elliptic Curve support for NSA "Suite B" Sub public key engine (PKCE) to support up to 4096 bit operation directly (4k for DH and 8k for RSA with CRT) DLP fingerprint support TTTD (Two-Thresholds-Two-Divisors) content chunking Two thresholds and two divisors are configurable FPM-7620F Processing Module Guide...
-
Page 11: Hardware Installation
Hardware installation This chapter describes installing a FPM-7620F processing module into a FortiGate-7000 chassis. Installing QSFP28 and SFP28 transceivers You must install Q SFP28 transceivers into the FPM-7620F front panel 1 and 2 fabric channel interfaces before connecting them to 100Gbps n etworks. Y ou can install the transceivers before or after inserting the FPM-7620F module into a chassis. You must install S FP28 transceivers into the FPM-7620F front panel 3 to 10 fabric channel interfaces b efore connecting them to 25Gbps n etworks. Y ou can install the transceivers before or after inserting the FPM-7620F module into a chassis. Access to interfaces 6, 8, and 10 is restricted by the module lever. To make it easier to remove transceivers, Fortinet recommends using transceivers with extended pull tabs. Another option could be to use a cable extraction tool to assist in removing these transceivers. To install transceivers To complete this procedure, you need: A FPM-7620F Transceivers to install An electrostatic discharge (ESD) preventive wrist s trap with connection cord FPM-7620Fs must be protected from static discharge and physical shock. Only handle or work ... -
Page 12: Fortigate-7121F Cable Bracket Kit
Hardware installation Fortinet Technologies Inc. FortiGate-7121F cable bracket kit The FortiGate-7121F chassis includes an optional cable bracket kit that you can install to help manage the network cables connected to FIMs and FPMs installed in the chassis. FPM-7620F mounting hardware To install a FPM-7620F you slide the module into a hub/switch slot in the front of an FortiGate-7000 series chassis (either 3 to 12) and then use the mounting hardware, described in FPM-7620F mounting hardware on page 5, to lock the module into place in the slot. When locked into place and positioned correctly, the module front panel is flush with the chassis front panel and connected to the chassis backplane. To position the module correctly you must use the mounting hardware shown below for the right of the FPM-7620F front panel. The mounting hardware on the left o f the front panel is the same but reversed. The FPM-7620F mounting hardware aligns the module in the chassis slot and is used to insert and eject the module from the slot. On some FPM modules there may be very little clearance between the front panel interfaces and the module lever on the right side of the FPM-7620F. In fact, you may have to remove network connectors from some front panel interfaces to open the module lever. In most cases you should remove all network connectors from the front panel before opening the module levers to remove an FIM module from a chassis slot. FPM-7620F Processing Module Guide... -
Page 13: Inserting A Fpm-7620F Module Into A Chassis
Power Slider Secure Screw Secure Screw Module Lever Open Closed (to open move the power slider up about 2 mm) The FPM-7620F module levers align the module in the chassis slot and insert and eject the module from the slot. The power sliders activate micro switches that turn on or turn off power to the module. When both sliders are raised, the module cannot receive power. When the sliders are fully closed, t he module can receive power if it is fully inserted into a chassis slot. Inserting a FPM-7620F module into a chassis This procedure describes how to insert a FPM-7620F module into slot 3 or up of a FortiGate-7000 chassis. The procedure includes photographs to illustrate the procedure steps. The photos were taken in one of Fortinet's hardware labs using a generic module and FortiGate-7000 chassis. FPM-7620F Processing Module Guide... - Page 14 FPM-7620F modules are hot swappable. This procedure is the same whether or not the chassis is powered on. Do not carry the FPM-7620F module by holding the module levers or secure screws. When inserting or removing the FPM-7620F from a chassis slot, handle the module by the front panel. The levers are not designed for carrying the module. If the levers become bent or damaged, the FPM-7620F may not align correctly in the chassis slot. To complete this procedure, you need the following equipment and tools: a FPM-7620F a FortiGate-7000 chassis with an empty s lot an electrostatic discharge (ESD) preventive wrist strap with connection cord a Phillips screwdriver FPM-7620Fs must be protected from static discharge and physical shock. Only handle or work with FPM-7620Fs at a static-free workstation. Always wear a grounded electrostatic discharge (ESD) preventive wrist strap when handling FPM-7620Fs. Attach the ESD wrist strap to your wrist and to an ESD socket or to a bare metal surface on the chassis or frame. ( An ESD wrist strap is not visible in the photographs below because they were taken in an ESD safe lab environment.) 1. Remove the FPM-7620F module from its packaging. The module levers are closed when you first remove a new module from its packaging. Module backplane connectors may be covered by a backplane connector protection label and plastic cover. Before inserting the module into the chassis slot, remove the label and cover and check the backplane connectors to make sure they are clean and undamaged. FPM-7620F Processing Module Guide...
- Page 15 Slide in slowly Stop position Module levers Module levers 3. Unlock the left and right module levers by pushing the power sliders up until the levers pop open. Before sliding the final portion of the module into the chassis fully open both levers by pushing the power sliders up. Fully open both levers to avoid damaging the lever mechanism. Damaging the levers can prevent the module from connecting to power. Power slider Power slider Levers pop open FPM-7620F Processing Module Guide...
- Page 16 4. Continue pushing the module into the slot until the levers engage with the sides of the chassis slot. Insert the module by applying moderate force to the front faceplate (not the levers) to slide the module into the slot. The module should glide smoothly. If you encounter any resistance, the module could be aligned incorrectly. Pull the module back out and try inserting it again. Module alignment pin inserted into chassis Apply moderate force to push the module slowly into the slot. Stop Position Levers engage with chassis FPM-7620F Processing Module Guide...
- Page 17 Fortinet Technologies Inc. 5. Close both levers by pushing them into contact with the module front panel. Closing the levers draws the module into the chassis slot and connects the module rear connectors to the chassis backplane. The design of the levers leaves gaps to compensate for tolerances. So even when the levers are fully closed, the module may not be fully into position and in contact with the chassis backplane. Small gap between the module and the chassis when levers are closed. Rotate to close Levers closed FPM-7620F Processing Module Guide...
- Page 18 6. Tighten both secure screws to close the gap between the module and the chassis. Begin by engaging the secure screws into the chassis tapped hole by hand and roughly tighten them. Then use a Phillips screwdriver to fully tighten the two secure screws. Do not use a power screwdriver, because the high torque and speed can damage the chassis or screw thread. After tightening both secure screws, the module is fully seated in the chassis slot and the module connectors are fully in contact with the chassis backplane. Tighten by hand After tightening both secure screws, the module is fully engaged with the chassis. Fully tighten with a screwdriver FPM-7620F Processing Module Guide...
-
Page 19: Shutting Down And Removing A Fpm-7620F Board From A Chassis
8. If the chassis is powered on, check the modle LEDs to verify that the module is operating correctly Normal operation state Status Green Alarm Power Green Shutting down and removing a FPM-7620F board from a chassis This procedure describes how to shut down and remove a FPM-7620F module from FortiGate-7000 chassis. The procedure includes photographs to illustrate the procedure steps. The photos were taken in one of Fortinet's hardware labs using a generic module and FortiGate-7000 chassis. FPM-7620Fs are hot swappable. This procedure i s the same whether or not the chassis is powered on. FPM-7620F Processing Module Guide... - Page 20 FPM-7620Fs must be protected from static discharge and physical shock. Only handle or work with FPM-7620Fs at a static-free workstation. Always wear a grounded electrostatic discharge (ESD) preventive wrist strap when handling FPM-7620Fs. ( An ESD wrist strap is not visible in the photographs below because they were taken in an ESD safe lab environment.) 1. Shut down the module operating system properly. To avoid potential hardware problems, always shut down the module operating system properly before removing the module from a chassis slot or before powering down the chassis. To shutdown the module, connect to the module GUI and select Shutdown from the administrator menu. Or, from the module CLI, enter the execute shutdown command. 2. Disconnect all cables from the module, including all network cables and USB cables or keys. FPM-7620F Processing Module Guide...
- Page 21 Fortinet Technologies Inc. 3. Use a Phillips screwdriver to loosen both secure screws and then fully loosen them by hand. Fully loosen the secure screws, otherwise the levers may be damaged when used to eject the module from the chassis slot. Do not use a power screwdriver, because the high torque and speed can damage the chassis or screw thread. Use a Phillips screwdriver to loosen both screws. Fully loosen both screws by hand. FPM-7620F Processing Module Guide...
- Page 22 Hardware installation Fortinet Technologies Inc. 4. Unlock the left and right levers by pushing the power sliders up until the levers pop open. Push the power sliders up to fully open both levers. If the chassis is powered on, this step turns off the module’s power. Power slider Power slider Levers pop open FPM-7620F Processing Module Guide...
- Page 23 Hardware installation Fortinet Technologies Inc. 5. Use moderate force to fully open the levers and eject the module from the chassis. Module ejects Rotate to open Module ejected Levers opened FPM-7620F Processing Module Guide...
-
Page 24: Troubleshooting
6. Hold the levers to slide the module part way out of the chassis slot. Then grasp the module by the sides and carefully slide it out of the slot. Troubleshooting This section describes some common troubleshooting topics: FPM-7620F does not startup Positioning of FPM-7620F mounting hardware and a few other causes may prevent a FPM-7620F from starting up correctly. Power sliders and module levers not fully closed If the power sliders or module levers are damaged or positioned incorrectly, the FPM-7620F may not start up. Make sure ... -
Page 25: Fpm-7620F Status Led Is Flashing During System Operation
Hardware installation Fortinet Technologies Inc. FPM-7620F status LED is flashing during system operation Normally, the FPM-7620F Status LED is off when the FPM-7620F is operating normally. If this LED starts flashing while the module is operating, a fault condition may exist. At the same time the FPM-7620F may stop processing traffic. To resolve the problem you can try removing and reinserting the FPM-7620F in the chassis slot. Reloading the firmware may also help. If this does not solve the problem there may have been a hardware failure or other problem. Contact Fortinet Technical Support for assistance. FPM-7620F Processing Module Guide... -
Page 26: Cautions And Warnings
Surtension – Il convient de prendre l’ensemble des précautions nécessaires lors du branchement de l’équipement au circuit d’alimentation et être particulièrement attentif aux effets de la suralimentation sur le dispositif assurant une protection contre les courts-circuits et le câblage. Ainsi, il est recommandé de tenir compte du numéro d’identification de l’équipement. Reliable Earthing – Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit (e.g. use of power strips). Fiabilité de la mise à la terre – Fiabilité de la mise à la terre de l'équipement monté en rack doit être maintenue. Une attention particulière devrait être accordée aux connexions d'alimentation autres que les connexions directes au circuit de dérivation (par exemple de l'utilisation de bandes de puissance). Equipment must be used only with UL Listed ITE or Equivalent. L'équipement doit être utilisé uniquement avec UL ITE ou équivalent. Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude) FPM-7620F Processing Module Guide... -
Page 27: Safety
本電 池如 果更 換不 正確 會有爆 炸的 危險 請依 製造 商說明書 處理 用過 之電 池 CAUTION: There is a danger of explosion if a battery is incorrect replaced. Replace only with the same or equivalent type. Dispose batteries of according to the manufacturer’s instructions. Disposing a battery into fire, a hot oven, mechanically crushing, or cutting it can result in an explosion. Leaving a battery in an extremely hot environment can result in leakage of flammable liquid, gas, or an explosion. If a battery is subjected to extremely low air pressure, it may result in leakage of flammable liquid, gas, or an explosion. WARNUNG: Lithium-Batterie Achtung: Explosionsgefahr bei fehlerhafter Batteriewechsel. Ersetzen Sie nur den gleichen oder gleichwertigen Typ. Batterien gemäß den Anweisungen des Herstellers entsorgen. Beseitigung einer BATTERIE in Feuer oder einen heißen Ofen oder mechanisches Zerkleinern oder Schneiden einer BATTERIE, die zu einer EXPLOSION führen kann Verlassen einer BATTERIE in einer extrem hohen Umgebungstemperatur, die zu einer EXPLOSION oder zum Austreten von brennbarer Flüssigkeit oder Gas führen kann Eine BATTERIE, die einem extrem niedrigen Luftdruck ausgesetzt ist, der zu einer EXPLOSION oder zum Austreten von brennbarer Flüssigkeit oder Gas führen kann. Caution: Slide/rail mounted equipment is not to be used as a shelf or a work space. Attention: Un équipement monté sur bâti ne doit pas être utilisé sur une étagère ou dans un espace de travail. Laser Class 1 optical transceiver shall be used only L'émetteur-récepteur optique de classe 1 laser doit être utilisé uniquement Fiber optic transceiver must be rated 3.3V, 22mA max, Laser Class 1, UL certified component. Le transceiver optique doit avoir les valeurs nominales de 3.3 V, maximum 22 mA, Laser Class 1, homologué UL FPM-7620F Processing Module Guide... -
Page 28: Regulatory Notices
FCC Rules. T hese limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. T his equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. O peration of this equipment in a residential area is likely to cause harmful interference, in which case the user will be required to correct the interference at his own expense. WARNING: Any changes or modifications to this product not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada CAN ICES-3 (A) / NMB-3 (A) This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications. Cet appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la classe A prescrites dans le Règlement sur le brouillage radioélectrique édicte par le ministère des Communications du Canada. European Conformity (CE) - EU This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. FPM-7620F Processing Module Guide... -
Page 29: Voluntary Control Council For Interference (Vcci) - Japan
地址 ： 台 北市 內湖 區行 愛路 176號2樓 電話 ： (02) 27961666 China 此为 A级产 品， 在 生活 环境 中， 该 产品 可能 会造 成无 线电干 扰 。 这种 情况下 ， 可 能需 要用户 对其 采取 切实 可行 的 措施 。 FPM-7620F Processing Module Guide... - Page 30 Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate.