Forticontroller-5208 System - Fortinet FortiGate-5000 Introduction Manual

FortiController-5208 system

FortiController-5208 system
FortiGate-5000 Series Introduction
01-30000-83466-20090108
You can create a FortiGate-5005-DIST high-throughput multi-threat network
security system using one or two FortiController-5208 boards and multiple
FortiGate-5005 boards in a FortiGate-5050 or FortiGate-5140 chassis.
A FortiGate-5020 chassis cannot be used to create a FortiGate-5005-DIST
system. Functionally, one or two FortiController-5208 boards using the processing
power of multiple FortiGate-5005 boards function much like a single FortiGate
unit, but with far greater capacity.
In a FortiGate-5005-DIST configuration, the FortiGate-5005FA2 boards are used
only for their processing power. The FortiController-5208 assigns tasks to each
FortiGate-5005FA2 board and provides all external connections to the network.
Given this division of labor, the FortiController-5208 board is also called the
I/O board and the FortiGate-5005FA2 boards are also called the worker boards.
The FortiController-5208 board provides two 10 gigabit interfaces and four
1 gigabit interfaces for network traffic. The FortiController-5208 front panel also
contains an additional four 1-gigabit interfaces for inter-chassis HA and future
use. Optionally, you can double the number of available of network interfaces by
adding a second FortiController-5208.
Once initial set-up is complete, all subsequent administration and configuration of
the FortiController-5208 boards and FortiGate-5005 boards is done through the
primary FortiController-5208 board.
The FortiGate-5005 boards are administered as a single unit, and therefore
configured identically. All traffic is distributed to the FortiGate boards using the
backplane interfaces so no front panel connections are required for the FortiGate
boards.
The FortiController-5208 board includes the following features:
• Two 10 gigabit interfaces that can accept fiber or copper 10 gigabit Small Form
factor Pluggable (XFP) fiber or copper transceivers.
• Eight 1 gigabit front panel network interfaces that can accept Small Form
factor Pluggable (SFP) fiber or copper transceivers. Four of these interfaces
are for data, two for inter-chassis high-availability (HA) connections, and two
for future use.
• One fabric and two base backplane gigabit interfaces.
• Two RJ-45 RS-232 serial console management connections.
• An RJ-45 Ethernet management connection.
• Mounting hardware
• LED status indicators
Before you can connect any FortiController-5208 front panel interfaces, you must
insert the XFP or SFP transceivers into the FortiController-5208 front panel cage
slots.
This chapter includes the following information about the FortiController-5208
board:
• Front panel LEDs and connectors
• Backplane gigabit interfaces
• Installing XFP and SFP transceivers
73