The allowed addrress pairs can be used to replace port-security disabled. This is the port security disable parameter you can find in scripts and templates. When used as a forwarding/NAT device Fortigate/Fortios need to get a port in promiscuous mode.

Use floating ips in that case script will add the floating ips to your VMs.

To access your environment use a jump host or network access to your management network.

* You can set export FGT_IMAGE_NAME='myname' to change the image name. If you don't have an image of fortigate already on Openstack, the script will take fortios.qcow2 in the running folder Please read it for details and to find the openstack commands related to fortigate. It is provided as an example to understand the integration point between Openstack and Fortigate. This script is imdepotent, verbose by default and contain all the specific openstack command to deploy and connect aįortigate. With fortios.qcow2 and fgt-userdata.txt ready simply run: $. In that case simply copy fos-user-data.txt like this: $ cp fos-user-data.txt fgt-userdata.txt In that case simply copy confg.txt like this: $ cp config.txt fgt-userdata.txtĪssume you license file is called FGT.licĭo $ write-mime-multipart -o fgt-userdata.txt config.txt FGT.lic That can be pass and Fortinet licenses file can be large. Sending the license as a file is supported by Fortigate meanwhile some openstack environment limit the size of the file

In order to use minipoc-deploy.sh you MUST create a fgt-userdata.txtįortigate user_data is in the Fortinet cli style and license file can be passed in a multi-mime part file. fortigate or fortios unziped image file is fortios.qcow2 Cloud-init A first port called mgmt instead of port1 No license file but a Fortimanager acting as metering

You can upload fortios.qcow2 to Openstack Glance (images) or check the following example openstack image create -disk-format qcow2 -container-format bare 'fortigate' -file fortios.qcow2įortios is a Fortigate (same functionnality) using metering for license (cloud native). If using minipoc-deploy.sh you can skip this part. Fortios for metering contact your Fortinet rep. Get the image tagged for KVM from unzip and put theįortios.qcow2 file in this directory. The official documentation for Fortigate fortios is available here: This doc refers to fortigate or fortios folders in the project.

Cookbook fortigate