Fortinet black logo

OpenStack Administration Guide

Preparing for deployment

Copy Link
Copy Doc ID e842eb6e-694a-11ea-9384-00505692583a:5421
Download PDF

Preparing for deployment

This guide assumes that before deploying the FortiGate-VM virtual appliance on the OpenStack virtual platform, you have addressed the following requirements:

Virtual environment

The OpenStack software is installed on a physical server with sufficient resources to support the FortiGate-VM and all other VMs that will be deployed on the platform.

If the FortiGate-VM will be configured to operate in transparent mode, ensure that the OpenStack environment includes virtual switches configured to support the operation of the FortiGate-VM before you create the FortiGate-VM.

If you will be setting up multiple FortiGate-VMs in a FortiGate Clustering Protocol (FGCP) high availability (HA) cluster:

  • Ensure that you purchase identical FGT-VM64-KVM or FOS-VM64-KVM licenses
  • Be prepared to set up a dedicated network in the OpenStack environment for the HA heartbeat, see Verifying HA cluster status.

Management software

The VMware management software, OpenStack Horizon, is installed on a computer with network access to the OpenStack server.

Connectivity

An Internet connection is required for the FortiGate-VM to contact FortiGuard to validate its license. If the FortiGate-VM is in a closed environment, it must be able to connect to a FortiManager to validate the FortiGate-VM license.

Preparing for deployment

This guide assumes that before deploying the FortiGate-VM virtual appliance on the OpenStack virtual platform, you have addressed the following requirements:

Virtual environment

The OpenStack software is installed on a physical server with sufficient resources to support the FortiGate-VM and all other VMs that will be deployed on the platform.

If the FortiGate-VM will be configured to operate in transparent mode, ensure that the OpenStack environment includes virtual switches configured to support the operation of the FortiGate-VM before you create the FortiGate-VM.

If you will be setting up multiple FortiGate-VMs in a FortiGate Clustering Protocol (FGCP) high availability (HA) cluster:

  • Ensure that you purchase identical FGT-VM64-KVM or FOS-VM64-KVM licenses
  • Be prepared to set up a dedicated network in the OpenStack environment for the HA heartbeat, see Verifying HA cluster status.

Management software

The VMware management software, OpenStack Horizon, is installed on a computer with network access to the OpenStack server.

Connectivity

An Internet connection is required for the FortiGate-VM to contact FortiGuard to validate its license. If the FortiGate-VM is in a closed environment, it must be able to connect to a FortiManager to validate the FortiGate-VM license.