Fortinet FortiGate Series Administration Guide

Configuring AMC modules System Status
FortiGate Version 4.0 MR1 Administration Guide
134 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
4 Power up the FortiGate unit.
As long as the slot that you have inserted the FortiGate-ADM-FB8 module into is set to
auto the FortiGate unit should automatically find the module when it powers up.
5 Add the name of the FortiGate-ADM-FB8 module to the FortiGate configuration.
config system amc
set dw1 adm-fb8
end
Auto-bypass and recovery for AMC bridge module
The FortiGate-ASM-CX4 and FortiGate-ASM-FX2 modules provide fail open protection for
interface pairs of FortiGate units operating in Transparent mode and that have a single-
width AMC slot. The FortiGate-ASM-CX4 or FortiGate-ASM-FX2 module bridges
FortiGate interfaces, monitors the interfaces for traffic failures, and operate as pass-
through devices if the interfaces or the entire FortiGate unit fails or for some reason
cannot pass traffic between the interfaces. If a failure occurs, traffic bypasses the
FortiGate unit and passes through the FortiGate-ASM-CX4 or FortiGate-ASM-FX2 module
to make sure that the network can continue processing traffic after a FortiGate failure.
This section describes how to configure a FortiGate unit to use a FortiGate-ASM-CX4 or
FortiGate-ASM-FX2 module to bridge FortiGate interfaces. The FortiGate unit must
operate in Transparent mode and the FortiGate-ASM-CX4 and FortiGate-ASM-FX2
modules are not compatible with FortiGate HA.
The FortiGate-ASM-CX4 and FortiGate-ASM-FX2 modules include a bypass watchdoc
that continually verifies that traffic is flowing through the bridged FortiGate interfaces. If
traffic stops flowing, for example if the FortiGate unit fails, and if the bypass watchdog
detects this, the bridge module switches to bypass mode to ensure the flow of traffic on
the network.
In bypass mode all traffic flows between interfaces on the FortiGate-ASM-CX4 and
FortiGate-ASM-FX2 modules and not through the FortiGate unit. You can configure a
recovery watchdog to verify that the bridged FortiGate interfaces cannot process traffic. If
you fix the problem or the problem fixes itself, the recovery watchdog automatically
detects that traffic can resume and switches the module back to normal operation by
turning off bypass mode.
To configure a FortiGate unit to operate with a FortiGate-ASM-CX4 or
FortiGate-ASM-FX2 module
1 Switch the FortiGate unit to operate in Transparent mode.
config system settings
set opmode transparent
set manageip <management_IPv4> <netmask_ipv4>
set gateway <gateway_ipv4>
end
After a short pause the FortiGate unit is operating in Transparent mode.
2 Enter the following command to verify that the slot that you will insert the
FortiGate-ASM-CX4 or FortiGate-ASM-FX2 module into is set to auto.
This command lists the AMC slots and the settings for each one. Example command
output for a FortiGate-620B with an empty AMC slot:
get system amc
sw1 : auto
3 Power down the FortiGate unit.

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount