1、HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333FORTIGATE HQIP簡單操作文檔Fortigate-100A 3.00,build0474,061228 技術部 王俊2007-12-7目的：飛塔防火墻出現問題時用于設備硬件狀態的一種手段前期準備：首先下載思科 TFTP 服務器模擬器 地址：http:/ 然后去 http:/ HQIP 所需的文件 注：文件后綴名*.img*.imgHQIPHQIP 文件要放到 TFTPTFTP 服務器的根目錄下那么現在可以正式開始

2、了第一步：打開 TFTP 服務器圖-1標題欄的地址是 6 這個地址是本機的地方即：把基本模擬成 TFTP 服務器 這個地址要是 網段 即和 FORTIGATE 的內網口地址一個網段，先把它晾這里。第二步：打開超級終端 開始程序-附件-通訊一超級終端HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333圖-2這里的名字可以隨便填圖-3這里選 COM 1 口HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號

3、 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333圖-4這里點以下還原為默認值圖-5隨后就正式進入超級終端界面了這是可以幫 FORTIGATE 通電了通電后出現以下界面HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333圖-6通電后不停按空格鍵(其實是按任意鍵)然后選個 GFBCQH這里我們做的是 HQIP 所以選擇 G圖-7第一個選項輸入 TFTP 標題欄的地址第二個選項輸入 FORTIGATE 內網口地址Enabling c

4、ache.Done. Scanning PCIbusDone,R1locating PCI resources.Done. EnablingPCI resources.Done. Zeroing IRQsettrngs.Done.Verifying PIRO tables.Done. Disabling localAPIC.Done.Boot uphboat device capacity: 61HB. Pressresources,resources.any key to display configuration menu.:Fl:Bl：Cl：Q;Hl:Get firmware image

5、 from TFTP server.Forinat boat device.Boot with backup firwware and set as default. Configuration andinformation.Quit menu and continue to boot with default firmware.Display thislist of options.EntorG,F；B,C*Q-orH:bn ter GJ(B,C*0-orH：EnterGfF；B.CtQ.orH：VESSS a：D5：37目就曲血9600 B+HSCROLL；CNUMH:EnterHUAGA

6、I上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333第三個文件是之前準備好的HQIP 文件HUAGAI上海華蓋科技發展有限公司江場三路 153 號 5 層(ZIP:200436)傳真:(021)56036333然后按回車TFTP 服務器中會有進度顯示思科TFTPJR務器J9KT臨1.9 DAlftpcervcr- C X圖-8一直到成功!Verifying PIRQ tables.Done.Disabling local APIC.Done.Boot uphbool device c

7、apaciiy: 61MB.Press anv key to display configuration meniL .Gl: Get firmware iMeige from TFTP server.Fli Format boot device.Bli Boot with backup firmware and set as default.Cl: ConfiguratLOHand information.Q：Quit nenu and continue to boot with default firmware. fl: Display this list of options.Enter

8、 GhT,B,CHQ,or H:Enter TFTP server address 681: 192.168.1 96Enter local address 192.168 1.1881: 9Enter firinware inaeje file rifime image .out 1 : FG-100A. imgMAC:0efl90r308E12斛 ItTotal tQ10B3i bytes data daunloaded-Verifying the integrity of ihe firmware ihiage.Total 2806kB unz

9、ipped.Saye as l)fault firmware/Backup firmware/Run image without saving:fD/B/Rl?)148 0:07:54目動檢血960DB+HSCROLLCAPSNUM圖-9超級終端會讓你選擇DBR 選擇 R在選擇 R 的同時用交叉線把所有接口一對一連起來以 FORTIGATE 100A 為例V*NUHUAGAI上海華蓋科技發展有限公司江場三路 153 號 5 層(ZIP:200436)傳真:(021)56036333地址：上海市北工業園區電話:(021)56775656HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江

10、場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333FortiGate-100A: INTERNAL+- +4 3 21 DMZ2 DMZ1 WAN2 WAN1+ + + + + + + +| | | +-+ | | | | +- + | | +-+ |+- +http:/emea.forti net. net/forti net/aht/ 飛塔網站上有各個型號的不同接法供參考一直到出現這個界面= Fort inet Hardware Quick In spect ion Report =BIOS In tegrity Check:

11、PASSPCI Device Check:PASSSystem Con figuration Verificatio n:PASSMemory Test:PASSCPU Test:PASSCPU/MEM Performa nee Test:PASSUSB Test:FAILFortiASIC Device Test:PASSIDE Test:PASSNetwork Con troller Test:PASS= Fort inet Hardware Quick In spect ion FAILED =USB Test requires loopback cables.Failure on th

12、is test may be caused by bad cable or poor connection.Check wiri ngs before tak ing further actions.這里可以根據分析結果來判斷設備問題下面是一份完整的飛塔 60 HQIP 記錄FGT60 (11:24-04.25.2005)HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333Ver:04000000Serial number:FGT-603907503437RAM activ

13、atio nTotal RAM: 128MBEn abli ng cache.D one.Scanning PCI bus.D one.Allocat ing PCI resources.。one.En abli ng PCI resources.D one.Zeroing IRQ sett in gs.D one.Verifying PIRQ tables.Done.Boot up, boot device capacity: 30MB.Press any key to display configuration menu.G:Get firmware image from TFTP ser

14、ver.F:Format boot device.Q:Quit menu and continue to boot with default firmware.H:Display this list of opti onsEnter G,F,Q,or H:En ter G,F,Q,or H:En ter TFTP server address 68: 6En ter local address 88: 9En ter firmware image file n ame image.out: FG-60-HQ

15、IP.imgMAC:00:09:0f:17:57:d8#Total 3876448 bytes data downl oaded.Verify ing the in tegrity of the firmware image.Total 28000kB un zipped.Save as Default firmware/R un image without sav in g:D/R?Reading boot image 1970152 bytes.Initializing firewall.In itializi ngeth0,MAC:00:09:0F:17:5In itializi nge

16、th1,MAC:00:09:0F:17:57:DAIn itializi ngeth2, MAC:00:09:0F:17:57:D9In itializi ngeth3, MAC:00:09:0F:17:57:D84 in terface(s) in itialized.NETwork Burn-i n Test( netbt) device loaded.Test program loadi ng(61,Build044,May 4 2005 15:50:22) .HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)5

17、6775656傳真:(021)56036333Starting test 61.Test Begin at Thu Oct 25 01:33:53 2007FGT-6004000000FGT-603907503437FGT-60390750343700090f1757d8BIOS In tegrity Check PASS.Check ing PCI devices.Looking for 0 x06011106(VT8601 Apollo ProMedia) at 00:00.00 .Found.Looki ng for 0 x86011106(VT8601 Apollo ProMedia

18、AGP) at 00:01.00 .Fou nd.Looking for 0 x400115BC(FortiASIC CP2) at 00:0D.00 .No device 0 x400115BC(FortiASIC CP2) fou nd at 00:0D.00(0 x400510CA).PCI devices check failed.Gatheri ng system information.Gatheri ng system in formatio n OK!Verify system con figuarti onVerify system con figuarti on PASS1

19、. System in formatio nmodel n ame:VIA Samuel 2CPU number:1CPU MHz:400CPU MIPS:799Compact Flash:32MB CompactFlash Cardsize:30 MBCompact Flash:32MB CompactFlash Cardsize:30 MBTotal Memory:125188 KBTotal 4 net port(s) found.Model Name:Unit BIOS Version:Un it Forti net SN:Un it OEM SN:Un it First MAC:HU

20、AGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333intern al(eth3) macaddress:00:09:0F:17:57:D8HUAGAI上海華蓋科技發展有限公司江場三路 153 號 5 層(ZIP:200436)傳真:(021)56036333dmz(eth2) macaddress:wan 1(eth1) macaddress:wan 2(eth0) macaddress:2. Memory testFree memory is 88060KB.pagesiz

21、e=4096, pagesizemask=FFFFF000Detecti ng memory(117MB).Do ne, 63MB will be testedSTRESS-MEM- 1.Stuck Address.STRESS-MEM- 1.Stuck Address PASSED.STRESS-MEM- 2.Ra ndom value.STRESS-MEM- 2.Ra ndom value PASSED.STRESS-MEM- 3.XOR compariso n.STRESS-MEM- 3.XOR comparis on PASSED.STRESS-MEM- 4.SUB compariso

22、 n.STRESS-MEM- 4.SUB comparis on PASSED.STRESS-MEM- 5.MUL compariso n.STRESS-MEM- 5.MUL comparis on PASSED.STRESS-MEM- 6.DIV compariso n.STRESS-MEM- 6.DIV comparis on PASSED.STRESS-MEM- 7.OR compariso n.STRESS-MEM- 7.OR comparis on PASSED.STRESS-MEM- 8.AND compariso n.STRESS-MEM- 8.AND comparis on P

23、ASSED.STRESS-MEM- 9.Seque ntial In creme nt.STRESS-MEM- 9.Seque ntial In creme nt PASSED.STRESS-MEM- Rou nd0 completed in 53 seco nds (0 errors).Release memory done.3. CPU test OK !Free memory is 87960KB.4. Stream testvvvvvvvvvvFunctionRate (MB/s)RMS timeMin timeMax timeCopy:96.65540.33110.33110.331

24、2Scale:147.06230.21770.21760.2183Add:154.69350.31030.31030.3103Triad:132.06550.36350.3地址：上海市北工業園區電話:(021)5677565600:09:0F:17:57:D900:09:0F:17:57:DA00:09:0F:17:57:DBHUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)560363335. Test ASIC DES En crypt and Decrypt.Open device

25、 /dev/fpgaO error:No such device6. Test Compact Flash and Harddisk.Compact Flash(/dev/hda) Model:32MB CompactFlash CardSize:32112640(bytes)Testi ng write/read to compact flash(/dev/hda):vvvvvvvRead/write test PASS. Write/Read Rate:1.35MBPS/ 4.17MBPS7. Test USB ports.Testi ng device /dev/ttyusbO .:FA

26、ILED in ope n device(No such device).Testi ng device /dev/ttyusb1 .:FAILED in ope n device(No such device).8. Test Network in terface con troller.Wire the n etwork ports as follow for NIC loopback test.INTERNAL+- +4 3 2 1 DMZ W AN1 W AN2V +| |+-+| | +-+ |+-+In itializi ngeth0,MAC:00:09:0F:17:57:DBIn

27、 itializi ngeth1,MAC:00:09:0F:17:57:DAIn itializi ngeth2,MAC:00:09:0F:17:57:D9In itializi ngeth3,MAC:00:09:0F:17:57:4 in terface(s) in itialized.Network traffic test betwee n in ternal and dmz.Try to start n etbt device.In terface eth3 pair: me 00:09:0F:17:57:D8he 00:09:0F:17:57:D9In terface eth2 pa

28、ir: me 00:09:0F:17:57:D9he 00:09:0F:17:57:D8Total 2 pairs con figurated.NETBT device started.In terface |packets |bytes|dropped|errors|pks/sec|M bps eth2.tx:15459692757600 eth2.rx:1545969275760001545990 eth3.tx:154596927576000154599HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775

29、656傳真:(021)56036333 eth3.rx:1545969275760001545990In terface |packets |bytes|dropped|errors|pks/sec|M bps eth2.tx:13649616925440001364915 eth2.rx:136496169254400013649150 eth3.tx:13649616925440001364915 eth3.rx:136496169254400013649150In terface |packets |bytes|dropped|errors|pks/sec|M bps eth2.tx:1

30、1215928263940001121523 eth2.rx:112159282639400011215230 eth3.tx:11215928263940001121523 eth3.rx:112159282639400011215230In terface |packets |bytes|dropped|errors|pks/sec|M bps eth2.tx:797334050410800797333 eth2.rx:7973340504108007973330 eth3.tx:797334050410800797333 eth3.rx:7973340504108007973330In

31、terface |packets |bytes|dropped|errors|pks/sec|M bps eth2.tx:496125060372800496140 eth2.rx:4961250603728004961400 eth3.tx:496125060372800496140 eth3.rx:4961250603728004961400In terface |packets |bytes|dropped|errors|pks/sec|M bps eth2.tx:359825447625400359843 eth2.rx:3598254476254003598430 eth3.tx:3

32、59825447625400359843 eth3.rx:3598254476254003598430In terface |packets |bytes|dropped|errors|pks/sec|M bps eth2.tx:155166931141400155169 eth2.rx:1551459310154001551490 eth3.tx:155166931141400155169 eth3.rx:1551669311414001551690Stop n etbtdevice.PASSEDNetwork traffic test between internal and wan 1T

33、ry to start n etbt device.In terface eth3 pair: me 00:09:0F:17:57:D8In terface eth1 pair: me 00:09:0F:17:57:DAhe 00:09:0F:17:57:DAhe 00:09:0F:17:57:D8HUAGAI上海華蓋科技發展有限公司地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333Total 2 pairs con figurated.NETBT device started.In terface|pac

34、kets |bytes|dropped|errors|pks/sec| M bps eth1.tx:153289919734000153289 eth1.rx:1532899197340001532890 eth3.tx:153289919734000153289 eth3.rx:1532899197340001532890In terface|packets |bytes|dropped|errors|pks/sec| M bps eth1.tx:13464016695296001346415 eth1.rx:134640166952960013464150 eth3.tx:13464016

35、695296001346415 eth3.rx:134640166952960013464150In terface|packets |bytes|dropped|errors|pks/sec| M bps eth1.tx:11189028196152001118923 eth1.rx:111890281961520011189230 eth3.tx:11189028196152001118923 eth3.rx:111890281961520011189230In terface|packets |bytes|dropped|errors|pks/sec| M bps eth1.tx:804

36、204085310400804233 eth1.rx:8042040853104008042330 eth3.tx:804204085310400804233 eth3.rx:8042040853104008042330In terface|packets |bytes|dropped|errors|pks/sec| M bps eth1.tx:495725056292800495740 eth1.rx:4957250562928004957400 eth3.tx:495725056292800495740 eth3.rx:4957250562928004957400In terface|pa

37、ckets |bytes|dropped|errors|pks/sec| M bps eth1.tx:359215438390000359243 eth1.rx:3592154383900003592430 eth3.tx:359215438390000359243 eth3.rx:3592154383900003592430In terface|packets |bytes|dropped|errors|pks/sec| M bps eth1.tx:153751922651400153759 eth1.rx:1537519226514001537590 eth3.tx/p>

38、1400153759 eth3.rx:1537519226514001537590地址：上海市北工業園區江場三路 153 號 5 層(ZIP:200436)電話:(021)56775656傳真:(021)56036333HUAGAI上海華蓋科技發展有限公司Stop n etbt device.PASSEDNetwork traffic test betwee n in ternal and wan 2Try to start n etbt device.In terface eth3 pair: me 00:09:0F:17:57:D8he 00:09:0F:17:57:DBIn terfac

39、e eth0 pair: me 00:09:0F:17:57:DBhe 00:09:0F:17:57:D8Total 2 pairs con figurated.NETBT device started.In terface |packets |bytes|dropped|errors|pks/sec| M bps ethO.tx:152193913158000152199 ethO.rx:1521939131580001521990 eth3.tx:152193913158000152199 eth3.rx:1521939131580001521990In terface |packets

40、|bytes|dropped|errors|pks/sec| M bps ethO.tx:13513316756428001351315 eth0.rx:135133167564280013513150 eth3.tx:13513316756428001351315 eth3.rx:135133167564280013513150In terface |packets |bytes|dropped|errors|pks/sec| M bps eth0.tx:11122028027312001112223 eth0.rx:111220280273120011122230 eth3.tx:11122028027312001112223 eth3.rx:111220280273120011122230In terface |packets |bytes|dropped|errors|pks/sec| M bps eth0.tx:766063891559200766032 eth0.rx:7660638915592007660320 eth3.tx:766063891559200766032 eth3.rx:7