Equalizer Quick Start Guide

Transcription

1 Equalizer Quick Start Guide Equalizer is the premier Load Balancing appliance that is easy to set up and administer. To get Equalizer onto your network and into operation, follow these steps. Step 1: Initial Setup and Login Follow these steps to setup and login. 1. Carefully remove Equalizer, the power cord, and the serial cable from the product packaging. Place Equalizer in its intended location, either in a standard 19-inch equipment rack or on a flat, stable surface. 2. Using the supplied serial cable, connect a serial terminal or a workstation running terminal emulator software to the Serial port on the front panel. Make sure that the terminal is set to: baud, 8 data bits, no parity, one stop bit, VT100 emulation, and ignore hang-ups (if supported). 3. Connect Equalizer to an appropriate power source using the supplied power cord, and turn on the rear panel power switch. As the system boots, a series of diagnostic messages are displayed on the console, after which the login prompt. 4. Log in to the Command Line Interface (CLI) using the default administrative login (touch) and password (touch): Username: touch Password: ***** 5. At the CLI prompt, change the default login password by entering this command and following the prompts displayed: eqcli > user touch password

2 Step 2: Connecting to Your Network Create a VLAN and subnet over which you can log into Equalizer. 1. To create a VLAN, enter a command like the following: eqcli > vlan vlname vid vlan_id eqcli > vlan vlname vid vlan_id Replace vlname with the VLAN name and vlan_id with the VLAN ID number (1-4094). If you are using untagged VLANs (common in many sites), the VLAN ID can be any number not used on another VLAN. If you are using tagged VLANs, check with your network Administrator for the correct VLAN ID to specify. 2. Add a subnet to the VLAN you just created. Enter a subnet IP address, which is Equalizer s address on this network. It must be an IPv4 or IPv6 address in CIDR (Classless Inter-Domain Routing) format (e.g., /21). eqcli > vlan vlname subnet subnetname ip cidr In the command above,vlname is the VLAN name from the previous step, subnetname is the name of the subnet, cidr is the CIDR-format IP address, 3. Configure HTTP and SSH services, so that you can log in to the Graphical User Interface (GUI) and Command Line Interface (CLI) on the subnet. eqcli > vlan vlname subnet netname services http,ssh 4. Configure routing on the VLAN, which includes a default route and a gateway. In the example below, 0/0 is the default route. In this scenario, all packets are to be sent via this route to a gateway. The gateway is an unadorned IP address (e.g., ). eqcli > vlan vlname subnet netname route 0/0 gw Additional parameters can also be specified if special source or destination routes are needed. Refer to the webhelp if you need more help setting up your initial VLAN and subnet: go to move your mouse over the Support link near the top of the screen, and choose Manuals from the drop down list.

3 5. Associate an interface instance with the VLAN. Here we assume that you are using the port labelled 1 on the front panel. Enter one of the following commands, depending on whether the VLAN you created above is untagged or tagged (ask your network administrator if you are unsure): eqcli > vlan vlname ifi ge01 type untagged eqcli > vlan vlname ifi ge01 type tagged 6. Connect the port or ports you configured on the VLAN to the network using a standard Ethernet cable with RJ-45 connectors. You should now be able to use the ping command from a workstation on the same subnet to reach the subnet IP address configured above. Step 3: Set Global Parameters Follow these steps to set the system hostname, date and time, and DNS: 1. Log into the GUI to perform additional configuration. On a workstation that is on the same subnet that you configured above, or on a network that can route to and from the subnet you configured above, open a web browser and enter Equalizer s IP address into the browser s address bar. At the GUI login screen, enter the touch user name and the password that you assigned earlier, and click Login. The Welcome screen for the Equalizer GUI appears on the right pane. 2. Select the System configuration tab in the left pane. 3. Click on the arrow (u) beside Global to expand the branch and select Parameters to display the Global Parameters screen on the right pane: Set the system Hostname to a name that is unique on your network. Optionally set up to three Domain Name Servers. Click Commit. 4. Click on the arrow (u) beside Maintenance to expand the branch and select Date & Time to display the Data & Time display on the right pane. In the Set Timezone field, locate your time zone in the drop-down box and click Commit.

4 5. Do one of the following: If Equalizer can connect to the Internet and you defined at least one DNS server above, you can configure the Network Time Protocol (NTP). In the Automatically Set Date and Time field, type the name of an NTP Server into the text box and turn on the Enable NTP Synchronization check box. Click Commit. Otherwise, set the date and time manually by modifying the contents of the Date field. Click Commit. Step 4: Register Equalizer While you can continue to configure Equalizer without registering it, all load balancing functionality is disabled until you do so. Take a moment now to register your product at the Fortinet Customer Service and Support web site at Before you can register, you will need: 1. Access to a new or existing Support Account. Information on how to create and manage a support account is provided in the Fortinet Support Portal User Guide. If your organization already has an account, obtain the user name and password information from your local account administrator to log in. 2. The serial number of the unit you want to register. You can find this information using either the CLI or the GUI after powering up your appliance: a. To use the CLI, log in to the CLI (over the serial console or, if networking is configured, using SSH over an appropriately configured subnet) and enter the following CLI command: eqcli > version Record the System Serial Number from the command output. b. If networking is configured and the GUI has been enabled on a subnet., you can also get the serial number from the System Information widget on the GUI dashboard. The Dashboard appears automatically when you log into the GUI.

5 Once you have obtained both the login credentials of a support account and the System Serial Number of the unit to register, do the following: 1. Log in to using the login credentials obtained above. 2. Follow the instructions provided in the Registration Frequently Asked Questions under the heading How do I register a Fortinet device? to register your. When requested, enter the System Serial Number you obtained above into the appropriate form. Once registration is completed, the appliance serial number and other information will appear in the FortiCare Registration area. 3. Your system is now registered. If your system can connect to the internet, you can now update the support information displayed in the CLI and GUI by doing one of the following: a. In the CLI, enter the following to update the support information on your unit: eqcli > forticare registration View the updated Support information (including Last refresh date, Support end, and ) by entering: eqcli > version b. In the GUI, select the System configuration tab on the left navigational pane and then click on Global > Dashboard. The System Information widget on the right pane will indicate the Support information (including Last refresh date, Support end, and ). Click on the Refresh button to update the registration information. Note - The registration information does not update automatically in either the CLI or the GUI; you must use either the CLI forticare registration command or the Refresh button in the Dashboard s System Information widget to update.

6 Step 5: Create Additional VLANs and Subnets You can add additional VLANs and subnets to your system on any unused ports, and on the port or ports you configured in Step 1. Note that a port can host multiple tagged VLANs, but can only host one untagged VLAN. 1. Select the System configuration tab in the left pane and click on the arrow (u) beside VLANs to expand the branch that lists existing VLANs. 2. To add a new VLAN, right-click on the VLANs label and choose Add VLAN from the popup menu. 3. To add a new subnet to an existing VLAN, right-click on the name of the VLAN and choose Add Subnet from the popup menu. For help with the currently open tab or dialog, press F1 or select Help > Context Help from the top right of the Interface screen. This will activate a Webhelp page specific to your currently opened dialog. Step 6. Create a Cluster A cluster is essentially a group of servers (a server pool ) that can be accessed through a single IP address. It is the Internet-visible front end of the service provided by the servers in the server pool. Client requests to a cluster IP address are routed by Equalizer to the appropriate real server, based on the load balancing policy set on the server pool. To create a working cluster, follow these general steps: 1. Select the Load Balance configuration tab in the left pane. 2. Create one or more servers by right-clicking the Servers label in the left pane and choosing Add Server from the popup menu. 3. Create a server pool by right-clicking the Server Pools label in the left pane and choosing Add Server Pool from the popup menu. 4. Add the servers created in Step 2 to the server pool created in Step 3, by dragging and dropping each server into the server pool in the left pane. 5. Create a cluster by right-clicking the Clusters label in the left pane and choosing Add Cluster from the popup menu. 6. On the cluster s Settings screen, choose the server pool you created in Step 2 from the Server Pool selection box and click Commit. Your cluster is now ready to serve client requests.

7 For help setting up Equalizer, refer to support.fortinet.com. For telephone support in the US and Canada, call International customers, call (+1) Copyright 2014 Coyote Point Systems, a subsidiary of Fortinet, Inc. All Rights Reserved.

8