Fortinet Document Library

Version:

Version:


Table of Contents

FortiGate-7000F Handbook

Download PDF
Copy Link

FortiGate-7000F overview

A FortiGate-7000F product consists of a FortiGate-7000F series chassis (for example, the FortiGate-7121F) with FortiGate-7000F modules installed in the chassis slots. A FortiGate-7121F chassis comes with two interface modules (FIMs) to be installed in slots 1 and 2 to provide data network connections and NP7-accelerated session-aware load balancing for up to 10 processor modules (FPMs) to be installed in slots 3 to 12. The processor FPMs include NP7 processors to offload data processing from the CPU, CP9 processors to accelerate resource intensive security processes, and additional data network interfaces.

FortiGate-7000F products are sold and licensed as packages that include the chassis as well as the modules to be included in the chassis. When you receive your FortiGate-7000F series product the chassis has to be installed in a rack and the FIMs and FPMs installed in the chassis. FIMs always go in slots 1 and 2 and FPMs in slots 3 and up.

As an administrator, you can connect to the FortiGate-7000F GUI or CLI by connecting to the IP address of one of the MGMT interfaces. By default, the MGMT1 interface IP address of the FIM in slot 1 is 192.168.1.99. The FortiOS firmware running on each FIM and FPM has the same version and configuration. You make configuration changes from the FIM in slot 1 and these changes are synchronized to the other FIM and all FPMs.

You can upgrade FortiGate-7000F firmware by logging into a MGMT interface and performing a firmware upgrade as you would for any FortiGate. During the upgrade process the firmware of all of the FIMs and FPMs in the chassis upgrades in one step. Firmware upgrades should be done during a quiet time because traffic will briefly be interrupted during the upgrade process.

FortiGate-7000F systems typically consist of two FortiGate-7000F chassis operating as an FGCP active-passive cluster. Similar to a typical FortiGate cluster, you can manage the cluster by logging into a MGMT interface. The cluster logs you into the MGMT interface of the primary FortiGate-7000F in the cluster. You upgrade the firmware of an operating cluster in the same way as a standalone FortiGate-7000F chassis. If you have uninterruptible-upgrade enabled, the cluster updates the firmware in both chassis without interrupting data traffic.

Licenses, device registration, and support

A FortiGate-7000F product is made up of a FortiGate-7000F series chassis, one or two FIMs and two to ten FPMs. The entire package is licensed and configured as a single product under the FortiGate-7000F chassis serial number. When you receive a new FortiGate-7000F product you register it on https://support.fortinet.com using the chassis serial number. Use the chassis serial number when requesting support from Fortinet for the product.

All Fortinet licensing, including FortiCare Support, IPS, AntiVirus, Web Filtering, Mobile Malware, FortiClient, FortiCloud, and additional virtual domains (VDOM) is for the entire FortiGate-7000F product and not for individual components.

If an individual component, such as a single interface or processor fails you can RMA and replace just that component.

FortiGate-7000F overview

A FortiGate-7000F product consists of a FortiGate-7000F series chassis (for example, the FortiGate-7121F) with FortiGate-7000F modules installed in the chassis slots. A FortiGate-7121F chassis comes with two interface modules (FIMs) to be installed in slots 1 and 2 to provide data network connections and NP7-accelerated session-aware load balancing for up to 10 processor modules (FPMs) to be installed in slots 3 to 12. The processor FPMs include NP7 processors to offload data processing from the CPU, CP9 processors to accelerate resource intensive security processes, and additional data network interfaces.

FortiGate-7000F products are sold and licensed as packages that include the chassis as well as the modules to be included in the chassis. When you receive your FortiGate-7000F series product the chassis has to be installed in a rack and the FIMs and FPMs installed in the chassis. FIMs always go in slots 1 and 2 and FPMs in slots 3 and up.

As an administrator, you can connect to the FortiGate-7000F GUI or CLI by connecting to the IP address of one of the MGMT interfaces. By default, the MGMT1 interface IP address of the FIM in slot 1 is 192.168.1.99. The FortiOS firmware running on each FIM and FPM has the same version and configuration. You make configuration changes from the FIM in slot 1 and these changes are synchronized to the other FIM and all FPMs.

You can upgrade FortiGate-7000F firmware by logging into a MGMT interface and performing a firmware upgrade as you would for any FortiGate. During the upgrade process the firmware of all of the FIMs and FPMs in the chassis upgrades in one step. Firmware upgrades should be done during a quiet time because traffic will briefly be interrupted during the upgrade process.

FortiGate-7000F systems typically consist of two FortiGate-7000F chassis operating as an FGCP active-passive cluster. Similar to a typical FortiGate cluster, you can manage the cluster by logging into a MGMT interface. The cluster logs you into the MGMT interface of the primary FortiGate-7000F in the cluster. You upgrade the firmware of an operating cluster in the same way as a standalone FortiGate-7000F chassis. If you have uninterruptible-upgrade enabled, the cluster updates the firmware in both chassis without interrupting data traffic.

Licenses, device registration, and support

A FortiGate-7000F product is made up of a FortiGate-7000F series chassis, one or two FIMs and two to ten FPMs. The entire package is licensed and configured as a single product under the FortiGate-7000F chassis serial number. When you receive a new FortiGate-7000F product you register it on https://support.fortinet.com using the chassis serial number. Use the chassis serial number when requesting support from Fortinet for the product.

All Fortinet licensing, including FortiCare Support, IPS, AntiVirus, Web Filtering, Mobile Malware, FortiClient, FortiCloud, and additional virtual domains (VDOM) is for the entire FortiGate-7000F product and not for individual components.

If an individual component, such as a single interface or processor fails you can RMA and replace just that component.