This recipe is part of the process of deploying FortiGate for OCI. Note OCI is only supported by FortiOS 5.4.8. See below for the rest of the recipes in this process:
- Create a virtual cloud network and public-facing subnets
- Create a security list
- Create a route table for the internal network
- Create internal network subnet
- Obtain the deployment image file and place it in your bucket
- Import the image
- Launch the FortiGate instance
- Attach a storage to FortiGate (required)
- Access the FortiGate
- Create the second vNIC
- Configure the second vNIC on the FortiGate
- Change the protected network’s default route
- [Connectivity test] Configure FortiGate firewall policies and virtual IPs
- Click Launch Instance.
- In the NAME field, enter the desired name to identify the instance by.
- In the AVAILABILITY DOMAIN field, select the desired domain.
- Under IMAGE SOURCE, select CUSTOM IMAGE.
- Under SHAPE TYPE, select VIRTUAL MACHINE.
- In the SHAPE FIELD, select one of the following supported instance shapes. Other instance shapes are not supported:
- VM.Standard1.1
- VM.Standard1.2
- VM.Standard1.4
- VM.Standard1.8
- VM.Standard1.16
- In the VIRTUAL CLOUD NETWORK field, select a network to launch the instance.
- In the SUBNET field, select a subnet on the Internet-facing side of the network.
- In the PRIVATE IP ADDRESS field, specify a static IP address within the selected subnet.
- Ensure Assign public IP address is selected so you can access the FortiGate over the Internet. This can be disabled once everything has been configured as desired.
- In the HOSTNAME field, enter the desired name.
- Click Launch Instance. Wait until the PROVISIONING… status changes to RUNNING. You can also check the FortiGate’s public IP address in this screen once it becomes available.
At this stage, FortiGate deployment is not complete. You must also add a storage volume and attach it to the FortiGate instance. Otherwise, the instance does not boot properly. You must also add another virtual network interface and attach it to the FortiGate instance so it can sit between two subnets.
The post Launch the FortiGate instance appeared first on Fortinet Cookbook.