• 69

[v6.0.1, v5.6.5, v5.4.9] FortiOS Cook & Research

Fortigate 預設的ALL內容

相愛難胖亦難 wrote:
Fortigate...(恕刪)

這個service物件沒有問題..
你內對外有做任何PBR嗎?
這幾條,但都不是針對Web Server那網段


我明天接一台筆電試試上不了網的IP好了,也許是Web Server主機問題,忘了這樣測看

確認是IP因不知名原因上不去,因換了電腦設同一IP一樣上不了
最近測試兩台Fg設備發現升級到 v5.2.5 後都無法透過ssh 登入設備,不知道有人有一樣的情況嗎?
FortiOS v5.2.6 is available NOW...
More bugs fixed, and more stable...
這個是仿照FV或FM v5.4的登入介面來更改SSL-VPN操作介面..
不過沒辦法全抄..
由於他有另外引用bootstrap之類的模組..
所以我只能抄的大概像而已...


<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>
SSL-VPN User Portal
</title>
<meta http-equiv="Pragma" content="no-cache">
<meta http-equiv="cache-control" content="no-cache">
<meta http-equiv="cache-control" content="must-revalidate">
<style type="text/css">
html, body {
height: 100%;
}

body {
padding: 0;
margin: 0;
background-color: #3077B7;
}

form {
margin: 0;
}

#err_str, #err_val {
color: red;
font-weight: normal;
}

.div-container {
height: 100%;
display: table;
margin-left: auto;
margin-right: auto;
width: 970px;
}

.div-sign-in-wrapper {
display: table-cell;
vertical-align: middle;
}

.div-jumbotron {
margin: 0 auto;
padding: 48px 0;
padding-left: 60px;
padding-right: 60px;
max-width: 380px;
background-color: white;
border-radius: 6px;
}

.div-sign-in-title {
text-align: center;
color: #52ACFE;
font-size: 30px;
font-weight: bold;
}

.input-group {
max-width: 220px;
margin: 20px auto;
}

.tbl-sign-in {
border-collapse: collapse;
margin: 20px auto;
}

.tbl-sign-in td {
padding-top: 10px;
padding-bottom: 10px;
}

.login {
margin: auto;
width: 100%;
background-color: #52ACFE;
border: none;
font-weight: bold;
font-size: 16px;
color: white;
padding: 6px 12px;
border-radius: 4px;
cursor: pointer;
}
.login:hover {
background-color: #3077B7;
}
input[type=text], input[type=password] {
padding: 6px 12px;
}
</style>

</head>
<body class="main">




SSL-VPN User Portal

<form action="%%SSL_ACT%%" method="%%SSL_METHOD%%" name="f" autocomplete="off">

%%SSL_LOGIN%%





<input type="button" class="login" onclick="try_login()" value="Login" />

%%SSL_HIDDEN%%
</form>



</body>

</html>
FortiWiFi-50E (12:47-08.13.2015)
Ver:05000011
CPU(00): 1600MHz
Total RAM: 2GB
Initializing boot device...
Initializing MAC... egiga1
Please wait for OS to boot, or press any key to display configuration menu......
Booting OS...
Reading boot image... 4151296 bytes.
Initializing firewall...

Get hardware status
Model name: FortiWiFi-50E
ASIC version: not available
CPU: ARMv7
Number of CPUs: 2
RAM: 2021 MB
MTD Flash: 128 MB /dev/mtd
Hard disk: not available
USB Flash: not available
Network Card chipset: Marvell NETA Gigabit Ethernet driver 00000010 (rev.)
WiFi Chipset: Atheros
WiFi firmware version: 0.9.17.1

get hard cpu
Processor : ARMv7 Processor rev 1 (v7l)
processor : 0
BogoMIPS : 3188.32
processor : 1
BogoMIPS : 3195.69
Features : swp half thumb fastmult vfp edsp neon vfpv3 tls
CPU implementer : 0x41
CPU architecture: 7
CPU variant : 0x4
CPU part : 0xc09
CPU revision : 1
Hardware : Marvell Armada 380/385/388 (Device Tree)
Revision : 0000
Serial : 0000000000000000
vxr wrote:
FortiWiFi...(恕刪)

查這台規格有點強大(以售價來說)
沒ASIC加速的ARM也能這麼快?
kouyoumin wrote:
查這台規格有點強大...(恕刪)

從前代的ARMADA 370的技術文件來看..
這似乎著重在SoC能提供多少的ASIC..
雖然他已經沒有原廠提供的FortIASIC加速器支持...
但是Marvell提供了某種ASIC加速設計..
從Fortinet提供的吞吐量資訊..
貌似存在了這些加速器機能...
換句話說, 他至少不會像FortiSoC2提供的機能那麼糟糕....
ARMADA 3xx的用途應該是在NAS之類的裝置上, 像是380系列在Synology DS216就用上了...
Two Ethernet Networking Controllers and MACs
• Supports 10/100/1000/2500 Mbps
• Supported interfaces include: RGMII, MII, GMII, and SGMII
• Per queue and per port egress rate shaping
• Supports long frames (up to 10 KB)
TCP/IP and UDP/IP acceleration on both receive and transmit==>> IPv6未知...

Cryptographic engine
• Hardware implementation of the IPsec encryption and authentication protocols to boost packet processing speed
• Implements AES, DES, and 3DES encryption algorithms
• Implements SHA1, SHA2, and MD5 authentication algorithms
• Supports storage de-duplication acceleration

Two DMA/Storage Acceleration Engines
• Two channels per engine
• RAID parity calculation on up to eight source blocks
• iSCSI CRC-32 calculation
• Memory initialization

Fortinet不給? ok, 但是Marvell給了...
從Marvell搭配的solution來看..
他可以串接從Prestera DX Switch晶片來提供超高速的L2/L3吞吐量..
但是Fortinet會給?...想太多了, 不會...XD
  • 69
內文搜尋
X
評分
評分
複製連結
請輸入您要前往的頁數(1 ~ 69)
Mobile01提醒您
您目前瀏覽的是行動版網頁
是否切換到電腦版網頁呢?