FORTIGATEHQIP简单操作文档.

FORTIGATE HQIP简单操作文档
Fortigate-100A 3.00,build0474,061228 技术部王俊2007-12-7
目的：飞塔防火墙出现问题时用于设备硬件状态的一种手段
前期准备：首先下载思科TFTP服务器模拟器地址：/soft/33433.htm 然后去/fortinet/aht/ 去下载做HQIP所需的文件注：文件后缀名*.img HQIP文件要放到TFTP服务器的根目录下
那么现在可以正式开始了
第一步：打开TFTP服务器
图-1
标题栏的地址是192.168.1.96 这个地址是本机的地方即：把基本模拟成TFTP服务器这个地址要是192.168.1.0网段即和FORTIGA TE的内网口地址一个网段，先把它晾这里。

第二步：打开超级终端
开始----程序---附件---通讯—超级终端
图-2这里的名字可以随便填
图-3 这里选COM 1口
图-4
这里点以下还原为默认值
图-5
随后就正式进入超级终端界面了
这是可以帮FORTIGA TE通电了~通电后出现以下界面
图-6 通电后不停按空格键（其实是按任意键）
然后选个G\F\B\C\Q\H
这里我们做的是HQIP所以选择G
图-7 第一个选项输入TFTP标题栏的地址
第二个选项输入FORTIGA TE内网口地址
第三个文件是之前准备好的HQIP文件
然后按回车
TFTP服务器中会有进度显示
图-8
一直到成功！
图-9
超级终端会让你选择D\B\R选择R
在选择R的同时用交叉线把所有接口一对一连起来以FORTIGATE 100A为例
FortiGate-100A: INTERNAL
+-----------+
[4] [3] [2] [1] [DMZ2] [DMZ1] [WAN2] [WAN1]
+ + + + + + + +
| | | +----+ | | |
| | +---------------+ | |
| +--------------------------+ |
+-------------------------------------+
/fortinet/aht/飞塔网站上有各个型号的不同接法供参考
一直到出现这个界面
============== Fortinet Hardware Quick Inspection Report ==================
BIOS Integrity Check: PASS
PCI Device Check: PASS
System Configuration Verification: PASS
Memory Test: PASS
CPU Test: PASS
CPU/MEM Performance Test: PASS
USB Test: FAIL
FortiASIC Device Test: PASS
IDE Test: PASS
Network Controller Test: PASS
============== Fortinet Hardware Quick Inspection FAILED ==================
USB Test requires loopback cables.
Failure on this test may be caused by bad cable or poor connection.
Check wirings before taking further actions.
这里可以根据分析结果来判断设备问题~
下面是一份完整的飞塔60 HQIP记录
FGT60 (11:24-04.25.2005)
Ver:04000000
Serial number:FGT-603907503437
RAM activation
Total RAM: 128MB
Enabling cache...Done.
Scanning PCI bus...Done.
Allocating PCI resources...Done.
Enabling PCI resources...Done.
Zeroing IRQ settings...Done.
Verifying PIRQ tables...Done.
Boot up, boot device capacity: 30MB.
Press any key to display configuration menu...
.
[G]: Get firmware image from TFTP server.
[F]: Format boot device.
[Q]: Quit menu and continue to boot with default firmware.
[H]: Display this list of options
Enter G,F,Q,or H:
Enter G,F,Q,or H:
Enter TFTP server address [192.168.1.168]: 192.168.1.96 Enter local address [192.168.1.188]: 192.168.1.99
Enter firmware image file name [image.out]: FG-60-HQIP.img MAC:00:09:0f:17:57:d8
###
Total 3876448 bytes data downloaded.
Verifying the integrity of the firmware image.
Total 28000kB unzipped.
Save as Default firmware/Run image without saving:[D/R]? ...........................
Reading boot image 1970152 bytes.
Initializing firewall...
Initializing eth0, MAC:00:09:0F:17:5
Initializing eth1, MAC:00:09:0F:17:57:DA
Initializing eth2, MAC:00:09:0F:17:57:D9
Initializing eth3, MAC:00:09:0F:17:57:D8
4 interface(s) initialized.
NETwork Burn-in Test(netbt) device loaded.
Test program loading(61,Build044,May 4 2005 15:50:22) ...
Starting test 61......
Test Begin at Thu Oct 25 01:33:53 2007
Model Name: [FGT-60]
Unit BIOS Version: [04000000]
Unit Fortinet SN: [FGT-603907503437]
Unit OEM SN: [FGT-603907503437]
Unit First MAC: [00090f1757d8]
BIOS Integrity Check PASS.
Checking PCI devices...
Looking for [0x06011106](VT8601 [Apollo ProMedia]) at 00:00.00 ...Found. Looking for [0x86011106](VT8601 [Apollo ProMedia AGP]) at 00:01.00 ...Found. Looking for [0x400115BC](FortiASIC CP2) at 00:0D.00 ...
No device [0x400115BC](FortiASIC CP2) found at 00:0D.00(0x400510CA). PCI devices check failed.
Gathering system information......
Gathering system information OK!
Verify system configuartion
Verify system configuartion PASS
1. System information
model name : VIA Samuel 2
CPU number : 1
CPU MHz : 400
CPU MIPS : 799
Compact Flash : 32MB CompactFlash Card
size : 30 MB
Compact Flash : 32MB CompactFlash Card
size : 30 MB
Total Memory : 125188 KB
Total 4 net port(s) found.
internal(eth3) macaddress: 00:09:0F:17:57:D8
dmz(eth2) macaddress: 00:09:0F:17:57:D9
wan1(eth1) macaddress: 00:09:0F:17:57:DA
wan2(eth0) macaddress: 00:09:0F:17:57:DB
2. Memory test
Free memory is 88060KB.
pagesize=4096, pagesizemask=FFFFF000
Detecting memory(117MB)... [Done, 63MB will be tested]
STRESS->MEM-> 1.Stuck Address...
STRESS->MEM-> 1.Stuck Address PASSED.
STRESS->MEM-> 2.Random value...
STRESS->MEM-> 2.Random value PASSED.
STRESS->MEM-> 3.XOR comparison...
STRESS->MEM-> 3.XOR comparison PASSED.
STRESS->MEM-> 4.SUB comparison...
STRESS->MEM-> 4.SUB comparison PASSED.
STRESS->MEM-> 5.MUL comparison...
STRESS->MEM-> 5.MUL comparison PASSED.
STRESS->MEM-> 6.DIV comparison...
STRESS->MEM-> 6.DIV comparison PASSED.
STRESS->MEM-> 7.OR comparison...
STRESS->MEM-> 7.OR comparison PASSED.
STRESS->MEM-> 8.AND comparison...
STRESS->MEM-> 8.AND comparison PASSED.
STRESS->MEM-> 9.Sequential Increment...
STRESS->MEM-> 9.Sequential Increment PASSED.
STRESS->MEM-> Round 0 completed in 53 seconds (0 errors).
Release memory done.
3. CPU test OK !
Free memory is 87960KB.
4. Stream test
vvvvvvvvvv
Function Rate (MB/s) RMS time Min time Max time
Copy: 96.6554 0.3311 0.3311 0.3312
Scale: 147.0623 0.2177 0.2176 0.2183
Add: 154.6935 0.3103 0.3103 0.3103
Triad: 132.0655 0.3635 0.3
5. Test ASIC DES Encrypt and Decrypt.
Open device /dev/fpga0 error:No such device
6. Test Compact Flash and Harddisk.
Compact Flash(/dev/hda) Model:32MB CompactFlash Card
Size:32112640(bytes)
Testing write/read to compact flash(/dev/hda):
vvvvvvv
Read/write test PASS. Write/Read Rate: 1.35MBPS/ 4.17MBPS
7. Test USB ports.
Testing device /dev/ttyusb0 ...
:FAILED in open device(No such device).
Testing device /dev/ttyusb1 ...
:FAILED in open device(No such device).
8. Test Network interface controller.
Wire the network ports as follow for NIC loopback test.
INTERNAL
+-----------+
[4] [3] [2] [1] [DMZ] [W AN1] [W AN2]
V + + + + + +
| | +----+ | |
| +---------------+ |
+--------------------------+
Initializing eth0, MAC:00:09:0F:17:57:DB
Initializing eth1, MAC:00:09:0F:17:57:DA
Initializing eth2, MAC:00:09:0F:17:57:D9
Initializing eth3, MAC:00:09:0F:17:57:
4 interface(s) initialized.
Network traffic test between internal and dmz...
Try to start netbt device...
Interface eth3 pair: [me 00:09:0F:17:57:D8] <3>[he 00:09:0F:17:57:D9] Interface eth2 pair: [me 00:09:0F:17:57:D9] <3>[he 00:09:0F:17:57:D8]
Total 2 pairs configurated.
NETBT device started.
------------------------------------------------------------------------------
Interface | packets | bytes |dropped|errors|pks/sec| M bps
< 64> eth2.tx: 154596 9275760 0
< 64> eth2.rx: 154596 9275760 0 0 15459 9 0 < 64> eth3.tx: 154596 9275760 0 0 15459 9
上海华盖科技发展有限公司
地址：上海市北工业园区 江场三路153号5层(ZIP:200436)
电话:(021)56775656 传真:(021)56036333
< 64> eth3.rx: 154596 9275760 0 0 15459 9 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 128> eth2.tx: 136496 16925440 0 0 13649 15 < 128> eth2.rx: 136496 16925440 0 0 13649 15 0 < 128> eth3.tx: 136496 16925440 0 0 13649 15 < 128> eth3.rx: 136496 16925440 0 0 13649 15 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 256> eth2.tx: 112159 28263940 0 0 11215 23 < 256> eth2.rx: 112159 28263940 0 0 11215 23 0 < 256> eth3.tx: 112159 28263940 0 0 11215 23 < 256> eth3.rx: 112159 28263940 0 0 11215 23 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 512> eth2.tx: 79733 40504108 0 0 7973 33 < 512> eth2.rx: 79733 40504108 0 0 7973 33 0 < 512> eth3.tx: 79733 40504108 0 0 7973 33 < 512> eth3.rx: 79733 40504108 0 0 7973 33 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps <1024> eth2.tx: 49612 50603728 0 0 4961 40 <1024> eth2.rx: 49612 50603728 0 0 4961 40 0 <1024> eth3.tx: 49612 50603728 0 0 4961 40 <1024> eth3.rx: 49612 50603728 0 0 4961 40 0 ---------------------------------------------------------------------------- Interface | packets | bytes |dropped|errors|pks/sec| M bps <1518> eth2.tx: 35982 54476254 0 0 3598 43 <1518> eth2.rx: 35982 54476254 0 0 3598 43 0 <1518> eth3.tx: 35982 54476254 0 0 3598 43 <1518> eth3.rx: 35982 54476254 0 0 3598 43 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 64> eth2.tx: 155166 9311414 0 0 15516 9 < 64> eth2.rx: 155145 9310154 0 0 15514 9 0 < 64> eth3.tx: 155166 9311414 0 0 15516 9 < 64> eth3.rx: 155166 9311414 0 0 15516 9 0 Stop netbt device. PASSED
Network traffic test between internal and wan1... Try to start netbt device...
Interface eth3 pair: [me 00:09:0F:17:57:D8] <3>[he 00:09:0F:17:57:DA] Interface eth1 pair: [me 00:09:0F:17:57:DA] <3>[he 00:09:0F:17:57:D8]
上海华盖科技发展有限公司
地址：上海市北工业园区 江场三路153号5层(ZIP:200436)
电话:(021)56775656 传真:(021)56036333
Total 2 pairs configurated. NETBT device started.
------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 64> eth1.tx: 153289 9197340 0 0 15328 9 < 64> eth1.rx: 153289 9197340 0 0 15328 9 0 < 64> eth3.tx: 153289 9197340 0 0 15328 9 < 64> eth3.rx: 153289 9197340 0 0 15328 9 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 128> eth1.tx: 134640 16695296 0 0 13464 15 < 128> eth1.rx: 134640 16695296 0 0 13464 15 0 < 128> eth3.tx: 134640 16695296 0 0 13464 15 < 128> eth3.rx: 134640 16695296 0 0 13464 15 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 256> eth1.tx: 111890 28196152 0 0 11189 23 < 256> eth1.rx: 111890 28196152 0 0 11189 23 0 < 256> eth3.tx: 111890 28196152 0 0 11189 23 < 256> eth3.rx: 111890 28196152 0 0 11189 23 0 ---------------------------------------------------------------------------- Interface | packets | bytes |dropped|errors|pks/sec| M bps < 512> eth1.tx: 80420 40853104 0 0 8042 33 < 512> eth1.rx: 80420 40853104 0 0 8042 33 0 < 512> eth3.tx: 80420 40853104 0 0 8042 33 < 512> eth3.rx: 80420 40853104 0 0 8042 33 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps <1024> eth1.tx: 49572 50562928 0 0 4957 40 <1024> eth1.rx: 49572 50562928 0 0 4957 40 0 <1024> eth3.tx: 49572 50562928 0 0 4957 40 <1024> eth3.rx: 49572 50562928 0 0 4957 40 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps <1518> eth1.tx: 35921 54383900 0 0 3592 43 <1518> eth1.rx: 35921 54383900 0 0 3592 43 0 <1518> eth3.tx: 35921 54383900 0 0 3592 43 <1518> eth3.rx: 35921 54383900 0 0 3592 43 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 64> eth1.tx: 153751 9226514 0 0 15375 9 < 64> eth1.rx: 153751 9226514 0 0 15375 9 0 < 64> eth3.tx: 153751 9226514 0 0 15375 9 < 64> eth3.rx: 153751 9226514 0 0 15375 9 0
上海华盖科技发展有限公司
地址：上海市北工业园区 江场三路153号5层(ZIP:200436)
电话:(021)56775656 传真:(021)56036333
Stop netbt device. PASSED
Network traffic test between internal and wan2... Try to start netbt device...
Interface eth3 pair: [me 00:09:0F:17:57:D8] <3>[he 00:09:0F:17:57:DB] Interface eth0 pair: [me 00:09:0F:17:57:DB] <3>[he 00:09:0F:17:57:D8] Total 2 pairs configurated. NETBT device started.
-------------------------------------------------
Interface | packets | bytes |dropped|errors|pks/sec| M bps < 64> eth0.tx: 152193 9131580 0 0 15219 9 < 64> eth0.rx: 152193 9131580 0 0 15219 9 0 < 64> eth3.tx: 152193 9131580 0 0 15219 9 < 64> eth3.rx: 152193 9131580 0 0 15219 9 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 128> eth0.tx: 135133 16756428 0 0 13513 15 < 128> eth0.rx: 135133 16756428 0 0 13513 15 0 < 128> eth3.tx: 135133 16756428 0 0 13513 15 < 128> eth3.rx: 135133 16756428 0 0 13513 15 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 256> eth0.tx: 111220 28027312 0 0 11122 23 < 256> eth0.rx: 111220 28027312 0 0 11122 23 0 < 256> eth3.tx: 111220 28027312 0 0 11122 23 < 256> eth3.rx: 111220 28027312 0 0 11122 23 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 512> eth0.tx: 76606 38915592 0 0 7660 32 < 512> eth0.rx: 76606 38915592 0 0 7660 32 0 < 512> eth3.tx: 76606 38915592 0 0 7660 32 < 512> eth3.rx: 76606 38915592 0 0 7660 32 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps <1024> eth0.tx: 49520 50509888 0 0 4952 40 <1024> eth0.rx: 49520 50509888 0 0 4952 40 0 <1024> eth3.tx: 49520 50509888 0 0 4952 40 <1024> eth3.rx: 49520 50509888 0 0 4952 40 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps <1518> eth0.tx: 35976 54467170 0 0 3597 43 <1518> eth0.rx: 35976 54467170 0 0 3597 43 0 <1518> eth3.tx: 35976 54467170 0 0 3597 43
上海华盖科技发展有限公司
地址：上海市北工业园区 江场三路153号5层(ZIP:200436)
电话:(021)56775656 传真:(021)56036333
<1518> eth3.rx: 35976 54467170 0 0 3597 43 0 ------------------------------------------------------------------------------ Interface | packets | bytes |dropped|errors|pks/sec| M bps < 64> eth0.tx: 152806 9169814 0 0 15280 9 < 64> eth0.rx: 152806 9169814 0 0 15280 9 0 < 64> eth3.tx: 152806 9169814 0 0 15280 9 < 64> eth3.rx: 152806 9169814 0 0 15280 9 0 Stop netbt device. PASSED
Network traffic test between inter
Network traffic test between internal and wan1: PASSED Network traffic test between internal and wan2: PASSED
Test End at Thu Oct 25 01:39:22 2007 Elapsed Time: 329 Seconds(5m29s).
============== Fortinet Hardware Quick Inspection Report ==================
BIOS Integrity Check: PASS PCI Device Check: FAIL System Configuration Verification: PASS
Memory Test: PASS CPU Test: PASS CPU/MEM Performance Test: PASS USB Test: FAIL FortiASIC Device Test: FAIL IDE Test: PASS Network Controller Test: PASS
============== Fortinet Hardware Quick Inspection FAILED ==================
USB Test requires loopback cables.
Failure on this test may be caused by bad cable or poor connection. Check wirings before taking further actions.。