FORTIGATEHQIP简单操作文档

1、 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 FORTIGATE HQIP简单操作文档 Fortigate-100A 3.00,build0474,061228 技术部 王俊 2007-12-7 目的：飞塔防火墙出现问题时用于设备硬件状态的一种手段 前期准备：首先下载思科TFTP服务器模拟器 地址： http:/ 然后去http:/ 去下载做HQIP所需的文件 注：文件后缀名*.img HQIP文件要放到TFTP服务器的根目录下 那么现在可以正式开始了 第一步：打开TFTP服

2、务器 图-1 标题栏的地址是6 这个地址是本机的地方 即：把基本模拟成TFTP服务器 这个地址要是网段 即和FORTIGATE的内网口地址一个网段，先把它晾这里。 第二步：打开超级终端 开始-程序-附件-通讯超级终端 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 图-2 这里的名字可以随便填 图-3 这里选COM 1口 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56

3、775656 传真:(021)56036333 图-4 这里点以下还原为默认值 图-5 随后就正式进入超级终端界面了 这是可以帮FORTIGATE通电了通电后出现以下界面 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 图-6 通电后不停按空格键（其实是按任意键） 然后选个GFBCQH 这里我们做的是HQIP所以选择 G 图-7 第一个选项输入TFTP标题栏的地址 第二个选项输入FORTIGATE内网口地址 第三个文件是之前准备好的HQIP文件 上海华盖科技发展有限公司 地址：上

4、海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 然后按回车 TFTP服务器中会有进度显示 图-8 一直到成功！ 图-9 超级终端会让你选择DBR选择R 在选择R的同时用交叉线把所有接口一对一连起来 以FORTIGATE 100A为例 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 FortiGate-100A: INTERNAL +-+ 4 3 2 1 DMZ2 DMZ1 WAN2 WAN1 + +

5、 + + + + + + | | | +-+ | | | | | +-+ | | | +-+ | +-+ http:/ 飞塔网站上有各个型号的不同接法供参考 一直到出现这个界面 = Fortinet Hardware Quick Inspection Report = BIOS Integrity Check: PASS PCI Device Check: PASS System Configuration Verification: PASS Memory Test: PASS CPU Test: PASS CPU/MEM Performance Test: PASS USB Test: F

6、AIL FortiASIC Device Test: PASS IDE Test: PASS Network Controller Test: PASS = Fortinet Hardware Quick Inspection FAILED = USB Test requires loopback cables. Failure on this test may be caused by bad cable or poor connection. Check wirings before taking further actions. 这里可以根据分析结果来判断设备问题 下面是一份完整的 飞塔

7、60 HQIP记录 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 FGT60 (11:24-04.25.2005) Ver:04000000 Serial number:FGT-603907503437 RAM activation Total RAM: 128MB Enabling cache.Done. Scanning PCI bus.Done. Allocating PCI resources.Done. Enabling PCI resources.Done. Zer

8、oing IRQ settings.Done. Verifying PIRQ tables.Done. Boot up, boot device capacity: 30MB. Press any key to display configuration menu. . G: Get firmware image from TFTP server. F: Format boot device. Q: Quit menu and continue to boot with default firmware. H: Display this list of options Enter G,F,Q,

9、or H: Enter G,F,Q,or H: Enter TFTP server address 68: 6 Enter local address 88: 9 Enter firmware image file name image.out: FG-60-HQIP.img MAC:00:09:0f:17:57:d8 # Total 3876448 bytes data downloaded. Verifying the integrity of the firmware image. Total 280

10、00kB unzipped. Save as Default firmware/Run image without saving:D/R? . Reading boot image 1970152 bytes. Initializing firewall. Initializing eth0, MAC:00:09:0F:17:5 Initializing eth1, MAC:00:09:0F:17:57:DA Initializing eth2, MAC:00:09:0F:17:57:D9 Initializing eth3, MAC:00:09:0F:17:57:D8 4 interface

11、(s) initialized. NETwork Burn-in Test(netbt) device loaded. Test program loading(61,Build044,May 4 2005 15:50:22) . 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 Starting test 61. Test Begin at Thu Oct 25 01:33:53 2007 Model Name: FGT-60 Unit BIOS Version: 0400000

12、0 Unit Fortinet SN: FGT-603907503437 Unit OEM SN: FGT-603907503437 Unit First MAC: 00090f1757d8 BIOS Integrity Check PASS. Checking PCI devices. Looking for 0 x06011106(VT8601 Apollo ProMedia) at 00:00.00 .Found. Looking for 0 x86011106(VT8601 Apollo ProMedia AGP) at 00:01.00 .Found. Looking for 0 x

13、400115BC(FortiASIC CP2) at 00:0D.00 . No device 0 x400115BC(FortiASIC CP2) found at 00:0D.00(0 x400510CA). PCI devices check failed. Gathering system information. Gathering system information OK! Verify system configuartion Verify system configuartion PASS 1. System information model name : VIA Samu

14、el 2 CPU number : 1 CPU MHz : 400 CPU MIPS : 799 Compact Flash : 32MB CompactFlash Card size : 30 MB Compact Flash : 32MB CompactFlash Card size : 30 MB Total Memory : 125188 KB Total 4 net port(s) found. internal(eth3) macaddress: 00:09:0F:17:57:D8 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话

15、:(021)56775656 传真:(021)56036333 dmz(eth2) macaddress: 00:09:0F:17:57:D9 wan1(eth1) macaddress: 00:09:0F:17:57:DA wan2(eth0) macaddress: 00:09:0F:17:57:DB 2. Memory test Free memory is 88060KB. pagesize=4096, pagesizemask=FFFFF000 Detecting memory(117MB). Done, 63MB will be tested STRESS-MEM- 1.Stuck

16、 Address. STRESS-MEM- 1.Stuck Address PASSED. STRESS-MEM- 2.Random value. STRESS-MEM- 2.Random value PASSED. STRESS-MEM- 3.XOR comparison. STRESS-MEM- 3.XOR comparison PASSED. STRESS-MEM- 4.SUB comparison. STRESS-MEM- 4.SUB comparison PASSED. STRESS-MEM- 5.MUL comparison. STRESS-MEM- 5.MUL compariso

17、n PASSED. STRESS-MEM- 6.DIV comparison. STRESS-MEM- 6.DIV comparison PASSED. STRESS-MEM- 7.OR comparison. STRESS-MEM- 7.OR comparison PASSED. STRESS-MEM- 8.AND comparison. STRESS-MEM- 8.AND comparison PASSED. STRESS-MEM- 9.Sequential Increment. STRESS-MEM- 9.Sequential Increment PASSED. STRESS-MEM-

18、Round 0 completed in 53 seconds (0 errors). Release memory done. 3. CPU test OK ! Free memory is 87960KB. 4. Stream test vvvvvvvvvv Function Rate (MB/s) RMS time Min time Max time Copy: 96.6554 0.3311 0.3311 0.3312 Scale: 147.0623 0.2177 0.2176 0.2183 Add: 154.6935 0.3103 0.3103 0.3103 Triad: 132.06

19、55 0.3635 0.3 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 5. Test ASIC DES Encrypt and Decrypt. Open device /dev/fpga0 error:No such device 6. Test Compact Flash and Harddisk. Compact Flash(/dev/hda) Model:32MB CompactFlash Card Size:32112640(bytes) Testing writ

20、e/read to compact flash(/dev/hda): vvvvvvv Read/write test PASS. Write/Read Rate: 1.35MBPS/ 4.17MBPS 7. Test USB ports. Testing device /dev/ttyusb0 . :FAILED in open device(No such device). Testing device /dev/ttyusb1 . :FAILED in open device(No such device). 8. Test Network interface controller. Wi

21、re the network ports as follow for NIC loopback test. INTERNAL +-+ 4 3 2 1 DMZ WAN1 WAN2 V + + + + + + | | +-+ | | | +-+ | +-+ Initializing eth0, MAC:00:09:0F:17:57:DB Initializing eth1, MAC:00:09:0F:17:57:DA Initializing eth2, MAC:00:09:0F:17:57:D9 Initializing eth3, MAC:00:09:0F:17:57: 4 interface

22、(s) initialized. Network traffic test between internal and dmz. Try to start netbt device. Interface eth3 pair: me 00:09:0F:17:57:D8 he 00:09:0F:17:57:D9 Interface eth2 pair: me 00:09:0F:17:57:D9 he 00:09:0F:17:57:D8 Total 2 pairs configurated. NETBT device started. - Interface | packets | bytes |dr

23、opped|errors|pks/sec| M bps eth2.tx: 154596 9275760 0 eth2.rx: 154596 9275760 0 0 15459 9 0 eth3.tx: 154596 9275760 0 0 15459 9 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 eth3.rx: 154596 9275760 0 0 15459 9 0 - Interface | packets | bytes |dropped|errors|pks/se

24、c| M bps eth2.tx: 136496 16925440 0 0 13649 15 eth2.rx: 136496 16925440 0 0 13649 15 0 eth3.tx: 136496 16925440 0 0 13649 15 eth3.rx: 136496 16925440 0 0 13649 15 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth2.tx: 112159 28263940 0 0 11215 23 eth2.rx: 112159 28263940 0 0 11215 2

25、3 0 eth3.tx: 112159 28263940 0 0 11215 23 eth3.rx: 112159 28263940 0 0 11215 23 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth2.tx: 79733 40504108 0 0 7973 33 eth2.rx: 79733 40504108 0 0 7973 33 0 eth3.tx: 79733 40504108 0 0 7973 33 eth3.rx: 79733 40504108 0 0 7973 33 0 - Interfa

26、ce | packets | bytes |dropped|errors|pks/sec| M bps eth2.tx: 49612 50603728 0 0 4961 40 eth2.rx: 49612 50603728 0 0 4961 40 0 eth3.tx: 49612 50603728 0 0 4961 40 eth3.rx: 49612 50603728 0 0 4961 40 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth2.tx: 35982 54476254 0 0 3598 43 eth

27、2.rx: 35982 54476254 0 0 3598 43 0 eth3.tx: 35982 54476254 0 0 3598 43 eth3.rx: 35982 54476254 0 0 3598 43 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth2.tx: 155166 9311414 0 0 15516 9 eth2.rx: 155145 9310154 0 0 15514 9 0 eth3.tx: 155166 9311414 0 0 15516 9 eth3.rx: 155166 9311

28、414 0 0 15516 9 0 Stop netbt device. PASSED Network traffic test between internal and wan1. Try to start netbt device. Interface eth3 pair: me 00:09:0F:17:57:D8 he 00:09:0F:17:57:DA Interface eth1 pair: me 00:09:0F:17:57:DA he 00:09:0F:17:57:D8 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021

29、)56775656 传真:(021)56036333 Total 2 pairs configurated. NETBT device started. - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth1.tx: 153289 9197340 0 0 15328 9 eth1.rx: 153289 9197340 0 0 15328 9 0 eth3.tx: 153289 9197340 0 0 15328 9 eth3.rx: 153289 9197340 0 0 15328 9 0 - Interface |

30、packets | bytes |dropped|errors|pks/sec| M bps eth1.tx: 134640 16695296 0 0 13464 15 eth1.rx: 134640 16695296 0 0 13464 15 0 eth3.tx: 134640 16695296 0 0 13464 15 eth3.rx: 134640 16695296 0 0 13464 15 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth1.tx: 111890 28196152 0 0 11189 2

31、3 eth1.rx: 111890 28196152 0 0 11189 23 0 eth3.tx: 111890 28196152 0 0 11189 23 eth3.rx: 111890 28196152 0 0 11189 23 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth1.tx: 80420 40853104 0 0 8042 33 eth1.rx: 80420 40853104 0 0 8042 33 0 eth3.tx: 80420 40853104 0 0 8042 33 eth3.rx:

32、80420 40853104 0 0 8042 33 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth1.tx: 49572 50562928 0 0 4957 40 eth1.rx: 49572 50562928 0 0 4957 40 0 eth3.tx: 49572 50562928 0 0 4957 40 eth3.rx: 49572 50562928 0 0 4957 40 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps e

33、th1.tx: 35921 54383900 0 0 3592 43 eth1.rx: 35921 54383900 0 0 3592 43 0 eth3.tx: 35921 54383900 0 0 3592 43 eth3.rx: 35921 54383900 0 0 3592 43 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth1.tx: 153751 9226514 0 0 15375 9 eth1.rx: 153751 9226514 0 0 15375 9 0 eth3.tx: 153751 92

34、26514 0 0 15375 9 eth3.rx: 153751 9226514 0 0 15375 9 0 上海华盖科技发展有限公司 地址：上海市北工业园区 江场三路153号5层(ZIP:200436) 电话:(021)56775656 传真:(021)56036333 Stop netbt device. PASSED Network traffic test between internal and wan2. Try to start netbt device. Interface eth3 pair: me 00:09:0F:17:57:D8 he 00:09:0F:17:57:D

35、B Interface eth0 pair: me 00:09:0F:17:57:DB he 00:09:0F:17:57:D8 Total 2 pairs configurated. NETBT device started. - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth0.tx: 152193 9131580 0 0 15219 9 eth0.rx: 152193 9131580 0 0 15219 9 0 eth3.tx: 152193 9131580 0 0 15219 9 eth3.rx: 15219

36、3 9131580 0 0 15219 9 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth0.tx: 135133 16756428 0 0 13513 15 eth0.rx: 135133 16756428 0 0 13513 15 0 eth3.tx: 135133 16756428 0 0 13513 15 eth3.rx: 135133 16756428 0 0 13513 15 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bp

37、s eth0.tx: 111220 28027312 0 0 11122 23 eth0.rx: 111220 28027312 0 0 11122 23 0 eth3.tx: 111220 28027312 0 0 11122 23 eth3.rx: 111220 28027312 0 0 11122 23 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth0.tx: 76606 38915592 0 0 7660 32 eth0.rx: 76606 38915592 0 0 7660 32 0 eth3.tx: 76606 38915592 0 0 7660 32 eth3.rx: 76606 38915592 0 0 7660 32 0 - Interface | packets | bytes |dropped|errors|pks/sec| M bps eth0.tx: 49520 50509888 0 0 4952 40 eth0.rx: 49520 50509888 0 0 4952 40 0 eth3.tx: 49520 50509888 0 0 4952 40 et