Forticontroller-5208 Module - Fortinet FortiController FortiController-5208 System Manual

FortiController-5208 module

FortiController-5208 module
FortiController-5208 System Guide
01-30000-0376-20070615
You can create a FortiGate-5005-DIST high-throughput multi-threat network
security system using one or two FortiController-5208 modules and multiple
FortiGate-5005 modules in a FortiGate-5050 or FortiGate-5140 chassis.
A FortiGate-5020 chassis cannot be used to create a FortiGate-5005-DIST
system. Functionally, one or two FortiController-5208 modules using the
processing power of multiple FortiGate-5005 modules function much like a single
FortiGate unit, but with far greater capacity.
In a FortiGate-5005-DIST configuration, the FortiGate-5005FA2 modules are used
only for their processing power. The FortiController-5208 assigns tasks to each
FortiGate-5005FA2 module and provides all external connections to the network.
Given this division of labor, the FortiController-5208 module is also called the
I/O module and the FortiGate-5005FA2 modules are also called the worker
modules.
The FortiController-5208 module provides two 10 gigabit interfaces and four
1 gigabit interfaces for network traffic. The FortiController-5208 front panel also
contains an additional four 1-gigabit interfaces for inter-chassis HA and future
use. Optionally, you can double the number of available of network interfaces by
adding a second FortiController-5208.
Once initial set-up is complete, all subsequent administration and configuration of
the FortiController-5208 modules and FortiGate-5005 modules is done through
the primary FortiController-5208 module.
The FortiGate-5005 modules are administered as a single unit, and therefore
configured identically. All traffic is distributed to the FortiGate modules using the
backplane interfaces so no front panel connections are required for the FortiGate
modules.
The FortiController-5208 module includes the following features:
• Two 10 gigabit interfaces that can accept fiber or copper 10 gigabit Small Form
factor Pluggable (XFP) fiber or copper transceivers.
• Eight 1 gigabit front panel network interfaces that can accept Small Form
factor Pluggable (SFP) fiber or copper transceivers. Four of these interfaces
are for data, two for inter-chassis high-availability (HA) connections, and two
for future use.
• One fabric and two base backplane gigabit interfaces.
• Two RJ-45 RS-232 serial console management connections.
• An RJ-45 Ethernet management connection.
• Mounting hardware
• LED status indicators
Before you can connect any FortiController-5208 front panel interfaces, you must
insert the XFP or SFP transceivers into the FortiController-5208 front panel cage
slots.
This chapter includes the following information about the FortiController-5208
module:
• Front panel LEDs and connectors
• Backplane gigabit interfaces
• Installing XFP and SFP transceivers
5