среда, 15 ноября 2017 г.

Как включить прямое управление точкой доступа FortiAP, когда она подключена к Fortigate

Решение простое, нужно включить эту функцию в настройках WTP профиля подключения (FortiAP Profiles):

config wireless-controller wtp-profile
    edit "FAP221C-default"
         set allowaccess telnet
    end

в качестве опций доступны Telnet, SSH, HTTP, HTTPS

четверг, 2 ноября 2017 г.

четверг, 19 октября 2017 г.

How to extend disk space in FortiAnalyzer VM

If running out of disk space on FortiAnalyzer VM running firmware version 5, these are the steps to extend the disk space.
1- Make sure that LVM service is running. Run the following command:
execute lvm info
The command output should provide a list of available disks:
FAZVM # execute lvm info
  disk01  In use          20.0(GB)
  disk02  Not present
  disk03  Not present
  disk04  Not present
  disk05  Not present
  disk06  Not present
  disk07  Not present
  disk08  Not present
From the output we can see that there is only one disk with a 20GB capacity.
If there is no output, then LVM has not started yet, run the following command:
execute lvm start
2 -  Stop the FortiAnalyzer VM and add a new disk to the Virtual Machine, for this example we are adding a 10GB disk
3 - After adding the new disk on the VM settings and booting up the FortiAnalyzer, run the command "get system status"
FAZVM # get sys status
Platform Type                   : FAZVM
Platform Full Name              : FortiAnalyzer-VM
.....
Disk Usage                      : Free 17.45GB, Total 19.68GB
.......
The system still recognizes only 20GB of capacity, it has not yet added the new disk.
Run command "execute lvm info", it now displays that a second 10GB disk is available but not in use:
FAZVM # exec lvm info
  disk01  In use          20.0(GB)
  disk02  Not in use      10.0(GB)
  disk03  Not present
  disk04  Not present
  disk05  Not present
  disk06  Not present
  disk07  Not present
  disk08  Not present
4 - If you run the "execute lvm extend" with no arguments, will provide the list of disks available to extend
FAZVM # exec lvm extend
Disk(s) currently not in use:
  disk02      10.0(GB)
More than one disk can be included at a time
FAZVM # exec lvm extend
extend [arg ...]    Argument list (0 to 7).
5 - Include the new disk, this command requires to reboot the FortiAnalyzer
FAZVM # exec lvm extend disk02
This operation will need to reboot the system.
Do you want to continue? (y/n)
6 - After reboot, the new disk has been included:
FAZVM # exec lvm info
  disk01  In use          20.0(GB)
  disk02  In use          10.0(GB)
  disk03  Not present
  disk04  Not present
  disk05  Not present
  disk06  Not present
  disk07  Not present
  disk08  Not present
FAZVM # get sys status
Platform Type                   : FAZVM
Platform Full Name              : FortiAnalyzer-VM
Version                         : v5.0-build0266 131108 (GA Patch 5)
....
Disk Usage                      : Free 27.29GB, Total 29.52GB
....


http://kb.fortinet.com/kb/documentLink.do?externalID=FD34953

воскресенье, 24 сентября 2017 г.

Разные Fortigate - get hardware status

FGT-80D # get hardware status 
Model name: FortiGate-80D
ASIC version: not available
CPU: Intel(R) Atom(TM) CPU N2600 @ 1.60GHz
Number of CPUs: 4
RAM: 1958 MB
Compact Flash: 980 MB /dev/sdb
Hard disk: 15272 MB /dev/sda
USB Flash: not available
Network Card chipset: RealTek RTL-8168 Gigabit Ethernet driver 8.038.00 (rev.)
FortiGate 92D:
get hardware status 
Model name: FortiGate-92D
ASIC version: not available
CPU: Intel(R) Atom(TM) CPU D525   @ 1.80GHz
Number of CPUs: 4
RAM: 1974 MB
Compact Flash: 15331 MB /dev/sda
Hard disk: 15272 MB /dev/sda
USB Flash: not available
Network Card chipset: Fortinet 92D Ethernet driver (rev.)
Network Card chipset: Intel(R) Gigabit Ethernet Network Driver (rev.0003)

Model name: FortiGate-90D ASIC version: FPGA ASIC SRAM: 64M CPU: FortiSOC2 Number of CPUs: 1 RAM: 1838 MB Compact Flash: 1907 MB /dev/sdb Hard disk: 30533 MB /dev/sda USB Flash: not available

Model name: FortiGate-500D
ASIC version: CP8
ASIC SRAM: 64M
CPU: Intel(R) Xeon(R) CPU E3-1225 V2 @ 3.20GHz
Number of CPUs: 4
RAM: 7962 MB
Compact Flash: 15331 MB /dev/sda
Hard disk: 114473 MB /dev/sdb
USB Flash: not available
Network Card chipset: Intel(R) Gigabit Ethernet Network Driver (rev.0003)
Network Card chipset: FortiASIC NP6 Adapter (rev.)

Model name: FortiGate-200D
ASIC version: CP8
ASIC SRAM: 64M
CPU: Intel(R) Celeron(R) CPU G540 @ 2.50GHz
Number of CPUs: 2
RAM: 3955 MB
Compact Flash: 15331 MB /dev/sda
Hard disk: not available
USB Flash: not available
Network Card chipset: Intel(R) PRO/1000 Network Connection (rev.0000)

Model name: FortiWiFi-50E
ASIC version: not available
CPU: ARMv7
Number of CPUs: 2
RAM: 2021 MB
MTD Flash: 128 MB /dev/mtd
Hard disk: not available
USB Flash: not available
Network Card chipset: Marvell NETA Gigabit Ethernet driver 00000010 (rev.)
WiFi Chipset: Atheros 
WiFi firmware version: 0.9.17.1

FG1000D# get hardware status 
Model name: FortiGate-1000D
ASIC version: CP8
ASIC SRAM: 64M
CPU: Intel(R) Xeon(R) CPU E3-1275 v3 @ 3.50GHz
Number of CPUs: 8
RAM: 15979 MB
Compact Flash: 3840 MB /dev/sda
Hard disk: 114473 MB /dev/sdb
USB Flash: not available
Network Card chipset: Intel(R) PRO/1000 Network Connection (rev.0000)
Network Card chipset: FortiASIC NP6 Adapter (rev.)

Model name: Fortigate-1500D
ASIC version: CP8
SRAM: 64M
CPU: Intel(R) Xeon(R) CPU E5-1650 0 @ 3.20GHz
Number of CPUs: 12
RAM: 15978 MB
Compact Flash: 30653 MB /dev/sda
Hard disk: 114473 MB /dev/sdb
USB Flash: not available

Model name: FortiWiFi-92D
ASIC version: not available
CPU: Intel(R) Atom(TM) CPU D525 @ 1.80GHz
Number of CPUs: 4
RAM: 1971 MB
Compact Flash: 15331 MB /dev/sda
Hard disk: 15272 MB /dev/sda
USB Flash: not available
Network Card chipset: Intel(R) Gigabit Ethernet Network Driver (rev.0003)
WiFi Chipset: Atheros AR9300
WiFi firmware version: 0.9.17.1
Model name: FortiGate-30D
ASIC version: CP0
ASIC SRAM: 64M
CPU: FortiSOC2
Number of CPUs: 1
RAM: 936 MB
Compact Flash: 3879 MB /dev/sda
Hard disk: not available
USB Flash: not available

Model name: Fortigate-60
ASIC version: CP5
SRAM: 64M
CPU: VIA Samuel 2
RAM: 123 MB<==128MB
Compact Flash: 30 MB /dev/hda<==32MB
USB Flash: not available
Network Card chipset: VIA VT6105M Rhine-III (rev.0x96)
Network Card chipset: VIA VT6102 Rhine-II (rev.0x51)

Model name: Fortigate-200A
ASIC version: CP5
SRAM: 64M
CPU: Intel(R) Celeron(TM) CPU 400MHz
RAM: 503 MB<==512MB
Compact Flash: 61 MB /dev/hda<==64MB
Hard disk: not available
USB Flash: not available
Network Card chipset: RealTek RTL8139 Fast Ethernet (rev.0x10)
Network Card chipset: VIA VT6102 Rhine-II (rev.0x74)

Model name: Fortigate-300A 
ASIC version: CP5 
SRAM: 64M 
CPU: Intel(R) Celeron(R) CPU 2.00GHz 
RAM: 503 MB<==512MB 
Compact Flash: 122 MB /dev/hdc 
Hard disk: not available 
USB Flash: not available 
Network Card chipset: Intel(R) PRO/100 M Desktop Adapter (rev.0x0010) 
Network Card chipset: Intel(R) PRO/1000 Network Connection (rev.0004)

Model name: Fortigate-400A
ASIC version: CP5
SRAM: 64M
CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz
RAM: 503 MB<==512MB
Compact Flash: 61 MB /dev/hdc<==64MB
Hard disk: not available
USB Flash: not available
Network Card chipset: Intel(R) PRO/100 M Desktop Adapter (rev.0x0010)
Network Card chipset: Intel(R) PRO/1000 Network Connection (rev.0004)

Model name: Fortigate-60B
ASIC version: CP6
ASIC SRAM: 64M
CPU: VIA Samuel 2
RAM: 248 MB
MTD Flash: 64 MB /dev/mtd
Hard disk: not available
USB Flash: not available
Built-in modem: Yes