.

FortiGate 200D

QuickStart Guide
 .

Register for Support

Register your Fortinet product to receive:
• Technical Support
• New product features
• Protection from new threats

Vous devez enregistrer le produit pour recevoir:

• Support technique
• Nouvelles fonctionnalitées du produit
• Protection contre de nouvelles menaces

La reistrazione ti permette di usufruire di:

• Supporto Tecnico
• Nuove funzionalita
• Proteezione dalle ultime minaccce

Debe registrar el producto para recibir:

• Apoyo técnico
• Nuevas funcionalidades del producto
• Protección contra ataques

登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート • 新機能の追加 • 新しい脅威への防御

April 01, 2014

01-501-190856-20140401

Copyright© 2014 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,

FortiCare® and FortiGuard®, and certain other marks are registered
trademarks of Fortinet, Inc., and other Fortinet names herein may also be
registered and/or common law trademarks of Fortinet. All other product
or company names may be trademarks of their respective owners.
Performance and other metrics contained herein were attained in internal
lab tests under ideal conditions, and actual performance and other results
may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any
binding commitment by Fortinet, and Fortinet disclaims all warranties,
whether express or implied, except to the extent Fortinet enters a
binding written contract, signed by Fortinet’s General Counsel, with a

http://forti.net/support
such binding written contract shall be binding on Fortinet. For absolute Toll free: 1 866 648 4638
clarity, any such warranty will be limited to performance in the same ideal
conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any
covenants, representations,and guarantees pursuant hereto, whether
Phone: 1 408 486 7899
express or implied. Fortinet reserves the right to change, modify, transfer,
or otherwise revise this publication without notice, and the most current
Fax: 1 408 235 7737
version of the publication shall be applicable.
Email: register@fortinet.com
 . .

Box Includes Before You Begin

Write down details that you may need from your network administrator or ISP.

WAN 1 1 3 5 7 9 11 13 15 DMZ 1

CONSOLE
FortiGate 200D
STATUS
ALARM
HA
POWER
USB MGMT MGMT USB WAN 2 2 4 6 8 10 12 14 16 DMZ 2

FortiGate 200D 2 Rack-Mount Brackets

DSL PPPoE
Username Password

Cable Modem DHCP

It is normal to not require a hostname but your ISP may require it.
FortiGate 200D

Hostname
QuickStart Guide
FortiOS 5.0.6 | 1U Models

The FortiGate Cookbook QuickStart Guide

T1/E1, Static broadband, Cable, or DSL with a

static IP
IP Address Subnet Mask

USB Cable Ethernet Cable

Default Gateway Primary/Secondary DNS

Power Cable Console Cable

QuickStart Guide Video

4 Rubber Feet 8 Bracket Screws
http://forti.net/vqsg

2 3
 . .

1 Basic Connections 2 FortiGate Setup Options

A Web Browser B OS X
Setup Wizard (p.5) With FortiExplorer (p.6)
Internet

WAN Port
C Terminal Emulation D
With console cable (p.7) FortiExplorer App
Power Connection

A Web Browser with Ethernet cable

Connect your device to a power outlet and an Internet connection. This is usually a
modem, but could also be another device on your network.

https://

LAN Port

Web-based Manager

1. Connect the Ethernet cable.

2. Visit 192.168.1.99 in your web browser.
3. Login using username “admin” and no password.
4. Click “Wizard” in the top right corner.
5. and save your settings.
6. Register your device from the dashboard page.

4 5
 . .

B Windows/OS X with USB C Terminal Emulation with Console Cable

To Connect to the CLI

1. Connect the FortiGate unit console port to the management computer using a
console cable.
2. Start a terminal emulation program on the management computer. Select the COM
port and use the following settings:

Baud Rate: 9600

USB MGMT
Data bits: 8
Parity: None
Stop bits: 1
Flow Control: None

3. Press Enter on your keyboard to connect to the CLI.

4. Login using username “admin” and no password. You can now proceed with
FortiGate unit.

1. Download FortiExplorer from http://forti.net/fexp.

Microsoft Windows Install Mac OS X Install

2. Connect the USB cable and launch 2. Double-Click the and

FortiExplorer if it does not appear drag the FortiExplorer icon to the
automatically. Applications folder.
3. Connect the USB cable.
4. Click the FortiExplorer icon to launch
the application.

FortiExplorer Setup Wizard

1. Follow prompts or click “Register” to register your device with FortiCare.

2. Click “Setup Wizard”.
3. Login using username “admin” and no password.
4. Follow Setup Wizard steps.
5. Click to complete the setup of your device.

Get started by typing “?” for a list of available commands.

Begin typing a command and type “?” for a list of available ways to complete.
For example

For a detailed guide visit http://forti.net/cli.

6 7
 . .

D iOS with Apple to USB cable

USB Port

http://forti.net/fexp-ios
FortiExplorer App

1. Download the iOS FortiExplorer App to your device from http://forti.net/fexp-ios.

2. Use your Apple to USB cable to connect to the USB port.
3. Launch the FortiExplorer App and select the device model.
4. Login using username “admin” and no password.

8 9
 . .

Installation
5. Finger tighten four rack-mount screws to attach the unit to the rack.
3 6. Verify that the spacing around the FortiGate unit conforms to requirements and
that the unit is level, then tighten the rack-mount screws with an appropriate
The FortiGate unit screwdriver.
inch rack unit with the provided rack-mount brackets and screws. 7. Using the provided power cable, plug the cable into the rear of the unit, and
then into a grounded electrical outlet or a separate power source such as an
Please read the Cautions and Warnings section prior to installing your device. uninterruptible power supply (UPS) or a power distribution unit (PDU).

To install the FortiGate unit into a rack

Caution:
Electrostatic
1. Ensure that the FortiGate unit is placed on a stable
discharge (ESD) 1. Ensure that the surface onto which the FortiGate unit to be installed is clean, level,
surface prior to rack-mount installation.
can damage and stable and that there is at least 1.5 inches (3.8cm) of clearance on all sides to
2. Attach the provided rack-mount brackets to the sides of
your Fortinet
the unit using the provided screws.
equipment. 2. Attach the provided rubber feet to the bottom of the FortiGate unit.
3. Place the unit in the designated location.
Do not place 4. Verify that the spacing around the FortiGate unit conforms to requirements and
heavy objects on that the unit is level.
the unit.

To avoid personal
injury or damage
to the unit, it is
recommended
that two or more
people install the
unit into the rack. 3. Position the FortiGate unit in the rack. Ensure there is

Note: If the unit

has a redundant 1.5in
1.5in
power supply,
each power
cable should be
connected to a
different power
source. In this 5. Using the provided power cable, plug the cable into the rear of the unit, and
way, if one power then into a grounded electrical outlet or a separate power source such as an
source fails, the uninterruptible power supply (UPS) or a power distribution unit (PDU).
other may still be
operational and
the unit will not
lose power.

4. Line up the rack-mount bracket holes to the holes on the

rack and ensure that the FortiGate unit is level.

10 11
 . .

5. Press the transceiver cage socket with

SFP Transceivers your thumb.
6. Verify that the transceiver is latched correctly by
Caution: Do not
force the SFP
grasping the sides of the transceiver and trying to pull it transceivers into
out without lowering the extraction lever. the cage slots. If
SFP Cage Sockets the transceiver
Caution: SFP If the transceiver cannot be removed, it is installed and
Transmit Optical Bore
transceivers are latched correctly. does not easily
static sensitive If the transceiver can be removed, reinsert it and press slide in and click
devices. Use harder with your thumb. into place, it may
an ESD wrist If necessary, repeat this process until the transceiver is not be aligned
strap or similar securely latched into the cage socket. correctly or may
grounding device be upside down.
when handling Receive Optical Bore If this happens,
transceivers.
To remove the SFP transceivers remove the SFP
Extraction Lever Socket Latch transceiver,
1. Ensure that you are properly grounded. realign it or rotate
Do not install
2. If applicable, disconnect the from the it and slide it in
or remove SFP To install the SFP transceivers transceiver connector and install a clean dust plug in again.
transceivers while
the transceiver’s optical bores.
1. Ensure that you are properly grounded. 3. Pull the extraction lever out and down to eject the
are still attached. Note: Follow
2. Remove the caps from the SFP cage sockets on the transceiver
This can cause front panel of the unit. screwdriver or other optic handling
damage to the 3. Position the SFP transceiver in front of the cage socket similar tool to open the lever. procedures when
cables, cable opening and ensure that the transceiver is correctly
connectors, installing and
oriented. When the transceiver is correctly oriented, the
and the optical removing
extraction lever will be level with the socket latch.
interfaces. It may SFP transceivers
Note: SFP cage socket orientation may vary. Ensure that
also prevent the to ensure the
the SFP transceiver module is correctly oriented each
transceiver from devices remain
time that you are inserting a transceiver.
latching correctly clean and are not
4. Hold the sides of the SFP transceiver and slide it into
into the socket damaged.
the cage socket until it clicks into place.
connector.

4. Hold the sides of the transceiver and carefully pull it

Note: Installing
away from the cage socket.
and removing
SFP transceivers
can shorten their
useful life. Do not
install or remove
transceivers more
than is necessary.

5. Replace the cap on the SFP cage socket and place the
removed SFP transceiver into an antistatic bag.

12 13
 . .

Device Guide

Status
Green: Normal
Flashing green: Booting up
Red: Major alarm
Alarm
Not in Use
HA
Green: Operating in an HA cluster SFP Ports
Off: Disabled Green: Active
Logo Power Flashing green: Transmitting & receiving data
Green: On Green: On Off: No link established
Off Off

WAN 1 1 3 5 7 9 11 13 15 DMZ 1

CONSOLE
FortiGate 200D
STATUS
ALARM
HA
POWER
USB MGMT MGMT USB WAN 2 2 4 6 8 10 12 14 16 DMZ 2

Ethernet Ports Link/Activity

Green: Connected
Flashing green: Transmitting & receiving data
Off: No link established
Ethernet Ports Speed
Green: Connected at 1Gbps
Amber: Connected at 100Mbps
Off: Connected at 10Mbps or not in use

14 15
 . .

Device Guide
USB MGMT (USB mini-B)
USB client port for management

Console (RJ-45)
Optional connection to the management computer. Provides
access to the CLI
DMZ 1 & 2 (SFP)
USB (USB-A) 1 Gbps/auto small form-factor pluggable transceiver
USB server port for USB key, modem, or management functions ports for connection to a DMZ network/device

WAN 1 1 3 5 7 9 11 13 15 DMZ 1

CONSOLE
FortiGate 200D
STATUS
ALARM
HA
POWER
USB MGMT MGMT USB WAN 2 2 4 6 8 10 12 14 16 DMZ 2

WAN 1 & 2 (RJ-45) LAN Ports 1 - 16 (RJ-45)

Internet Gigabit Ethernet Internet connection Switched Gigabit Ethernet ports for connection to your
MGMT (RJ-45) network and the Internet
Client port for management.
Default IP address 192.168.1.99

+12V=@12.5A
AC INPUT
100-240V
50-60Hz
3A MAX
DC INPUT FOR REMOTE POWER
SUPPLY SPECIFIED IN MANUAL

RPS Power
Optional connection to a remote 100-240V AC, 50-60Hz, 3A MAX
power supply (FRPS-100).
12V @ 12.5A

16 17
 . .

Cautions and Warnings

Operating Temperature

Température ambiante élevée — Si cet appareil est installé dans un cabinet fermé, la température ambiante du cabinet peut être supérieure à la
This separate protective earthing terminal must be permanently connected to earth with a green with yellow stripe conductor minimum size # 14 AWG

Ventilation

Circuit overloading

Surtension

Reliable earthing

Mise à la terre

Interference
Interférence

Safety

Mechanical loading – To avoid personal injury or damage to the appliance, Fortinet recommends that 2 or more people together install the appliance

Installation

Moving parts
Pièces mobiles

この装置は、クラスＡ情報技術装置です。この装置を 家庭環境で使用すると電波妨害を引き起こすことが
あります。この場合には使用者が適切な対策を講ずるよう要求されることがあります。
ＶＣＣＩ−Ａ

Choc électrique / feu

China

Battery

Batterie

Grounding

Mise à la terre

Alimentation par Ethernet

 .

The FortiGate Cookbook

Advanced installation and setup, networking, security policies

Authentication, Logging and reporting.

http://forti.net/cookbook

FortiGate System Administration Guide

management, tightening security, and best practices.

http://forti.net/systemadmin

your device using the command line.

http://forti.net/cli

FortiOS Handbook

http://forti.net/handbook

Training Services
Course descriptions, availability, schedules, and location of
training programs in your area.
http://forti.net/training

Fortinet.com