FortiAnalyzer-100C QuickStart Guide - S

LED
Power
Status
Port1, Port2, Port3*
State
Description
Green
The unit is on.
Off
The unit is off.
Flashing Green
The unit is starting up.
QuickStart Guide
FortiAnalyzer-100C
Green
The unit is running normally.
Green
The correct cable is in use and the connected
equipment has power.
Flashing green
Network activity at this interface.
Off
No link established.
Alarm
Off
Not in use.
HDD
Flashing green
The internal hard drive is in use.
FortiAnalyzer 100C
POWER STATUS
ALARM
PORT1 PORT2 PORT3
HDD
*Port 3 LED is always green independant of the state.
Visit these links for more information and documentation for your Fortinet product.
•
•
•
•
© Copyright 2009 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trademarks
of their respective holders.
Regulatory Compliance
FCC Class B Part 15 CSA/CUS
22 July 2009
Technical Documentation - http://docs.fortinet.com
Knowledge Center - http://kb.fortinet.com
Technical Support - http://support.fortinet.com
Training Services - http://campus.training.fortinet.com
05-40001-101293-20090722
Package Contents
Interface
Type
Console
RJ-45
Speed
PORT1 and PORT2
RJ-45
10/100/1000 Base-T
PORT3
RJ-45
10/100 Base-T
USB
USB
Protocol
Description
Ethernet
Connection to the management computer. Provides access to the command line interface (CLI).
Ethernet
Connection to the network.
Ethernet
Connection to the network. The speed cannot be changed.
USB
Two optional connections for the USB key, modem, or backup operation.
QuickStart Guide
FortiGate-30B
FortiAnalyzer 100C
FortiAnalyzer 100C
POWER STATUS
POWER STATUS
ALARM
PORT1 PORT2 PORT3
HDD
ALARM
PORT1 PORT2 PORT3
HDD
REGISTER
Tools and Documenation
Copyright 2009 Fortinet Incorporated. All rights reserved.
Trademarks
Power Status
LED LED
DC+12V CONSOLE
USB
Power
USB
Connection
Ground
Cable Tie
RJ-45 Serial
mounting
Connection
hole
Hard disk
drive LED
Interface
Status LEDs
PORT3
PORT2
Rack-Mount
Brackets
4 Rubber feet
Cable Tie
PORT1
AC Power Cable
Straight-through
RJ-45 to
Ethernet cable DB-9 Serial Cable
Power Supply (12V)
PORT1
PORT3
PORT2
Connecting
Connect the following to the FortiAnalyzer unit. Ensure the FortiAnalyzer unit is placed on a stable surface.
•
•
•
•
•
•
•
Connect the RJ-45 to DB-9 serial cable into the Console port on the unit. Insert the other end into the management computer.
Insert the ethernet cable into WAN1. Insert the other end to the router connected to the Internet, or to the modem.
Connect the AC power cable to the Power Supply shipped with this product.
Connect the AC power cable to a surge protected power bar or power supply.
Insert the pointed end of the cable tie into the hole in the rear panel of the chassis to anchor the cable tie to the chassis.
Loop the loose end around the adapter cable and insert the loose end into the locking latch.
Pull the loose end to adjust the tightness of the loop around the adapter cable to prevent cable from being accidentally pulled out the unit.
DC+12V CONSOLE
Power cable
connects to
power supply
USB
Serial cable
connects to serial
port on management computer
PORT3
PORT2
PORT1
Straight-through
Ethernet cable
connects to Internet
Configuration Tools
Web-based manager
Command Line Interface (CLI)
The FortiAnalyzer web-based manager is an easy to use management tool.
Use it to configure the administrator password, the interface and default gateway addresses,
and the DNS server addresses, add devices for log collection and configure reports.
The CLI is a full-featured management tool. Use it to configure the administrator password,
the interface addresses, the default gateway address, and the DNS server addresses. To
configure advanced settings, see the Tools and Documentation CD-ROM.
Requirements:
• An Ethernet connection between the FortiAnalyzer unit and management computer.
• A web browser such as FireFox or Internet Explorer on the management computer.
Requirements:
• The RJ-45 to DB-9 serial connection between the FortiAnalyzer unit and the
management computer.
• A terminal emulation application (HyperTerminal for Windows) on the management
computer.
Collecting Information
Port 1
Factory default settings
IP:
____ . ____ . ____ . ____
Netmask:
____ . ____ . ____ . ____
Administrator Account
Management Access:
Port 2
IP:
____ . ____ . ____ . ____
Netmask:
____ . ____ . ____ . ____
Port 1
Management Access:
Port 3
IP:
____ . ____ . ____ . ____
Netmask:
____ . ____ . ____ . ____
Port 2
Management Access:
Port 3
User name:
admin
Password:
(none)
IP:
192.168.1.99
Netmask:
255.255.255.0
Management Access:
ping, https, http, ssh
IP:
192.168.2.99
Netmask:
255.255.255.0
Management Access:
ping, https, http, ssh
IP:
192.168.3.99
Netmask:
255.255.255.0
Management Access:
ping, https, http, ssh
To reset the FortiAnalyzer unit to the factory defaults, in the CLI type the command
execute factory reset
Configuring
Web-based Manager
Command Line Interface
Use the following procedure to connect to the web-based manager for the first time.
Configuration changes made with the web-based manager are effective immediately without
resetting the FortiAnalyzer unit or interrupting service.
The FortiAnalyzer unit has serial port. Use the null modem cable to connect it to your management computer.
To connect to the web-based manager
1. Connect the Port 1 interface of the FortiAnalyzer unit to Ethernet port of the management computer.
Use a cross-over Ethernet cable to connect the devices directly. Use straight-through
Ethernet cables to connect the devices through a hub or switch.
2. Configure the management computer to be on the same subnet as the FortiAnalyzer
Port 1 interface.
To do this, change the IP address of the management computer to 192.168.1.2 and the
netmask to 255.255.255.0.
3. To access the FortiAnalyzer web-based manager, in your browser, go to
https://192.168.1.99 (remember to include the “s” in https://).
4. Type admin in the Name field and select Login.
After connecting to the Web-based manager, you can configure the FortiAnalyzer unit IP
address, DNS server IP address, and default gateway to connect the FortiAnalyzer unit to the
network.
To configure interfaces
1.
2.
3.
4.
Go to System > Network > Interface.
Select the edit icon for each interface to configure.
Set the IP address and netmask for the interface.
Select OK.
To configure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > DNS, enter the Primary and Secondary DNS IP addresses
select Apply.
To configure a Default Gateway
1. Go to System > Network > Routing and select Create New.
2. Set Gateway to the Default Gateway IP address and select OK.
To connect to the FortiAnalyzer unit
1. Use a RJ-45 to DB-9 cable to connect the FortiAnalyzer serial port to the management
computer serial port.
2. Start a terminal emulation program (such as HyperTerminal) on the management computer. Use these settings: Baud Rate 9600, Data bits 8, Parity None, Stop bits 1, Flow
Control None.
3. At the login: prompt, type admin and press Enter twice.
(The login prompt is preceded by the server default host name.)
After connecting to the CLI, you can configure the FortiAnalyzer unit IP address, DNS server
IP address, and default gateway to connect the FortiAnalyzer unit to the network.
To configure the FortiAnalyzer unit using the CLI
1. Set the IP address and netmask of the Port1 interface.
config system interface
edit port1
set ip <intf_ip>/<netmask_ip>
end
2. Configure the primary and secondary DNS server IP addresses.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
3. Configure the default gateway.
config system route
edit 1
set device <interface>
set dst <destination_ip>
set gateway <gateway_ip>
end
Adding an administration password
Shutting down the FortiAnalyzer unit
By default, the admin user does not have a password. To restrict access to the FortiAnalyzer
unit management account, add password for the admin user account.
When powering off the FortiAnalyzer unit, always shut down the unit using the following procedures before disconnecting the power supply. Not following this procedure can increase
the risk of damaging the FortiAnalyzer hard disk.
To add the admin user account password
1.
2.
3.
4.
5.
Go to System > Admin.
For the admin user, select the Change Password icon.
Enter a new password in the New Password box.
Reenter the password to Confirm Password box.
Select OK.
To power off the FortiAnalyzer unit
1. Go to System > Dashboard.
2. In the System Operation list, select Shut Down.
3. Once the indicates the shut down procedure has completed, disconnect the
FortiAnalyzer unit from the power source.
Shutting down the FortiAnalyzer unit using the CLI
Enter the following command at the prompt:
execute shutdown
Training Services
Fortinet Training Services provides classes that orient you quickly to your new equipment, and certifications to verify your knowledge level. Fortinet provides a variety of training programs to serve the needs of our customers and partners world-wide.
To learn about the training services that Fortinet provides, visit the Fortinet Training Services web site at http://campus.training.fortinet.com.
Download PDF
Similar pages