Fortinet black logo

AliCloud Administration Guide

Requirements

Copy Link
Copy Doc ID 277ff5c4-41cb-11e9-94bf-00505692583a:907897
Download PDF

Requirements

Installing and configuring FortiGate Autoscale for AliCloud requires knowledge of the following:

  • Configuring a FortiGate using the CLI
  • AliCloud services
  • Terraform

It is expected that FortiGate Autoscale for AliCloud will be deployed by DevOps engineers or advanced system administrators who are familiar with the above.

RAM account permissions

The solution can be deployed with an administrator account. As an administrator account has full permission to all resources under your AliCloud account, you may wish to create a separate Resource Access Management (RAM) account with the following minimum required permissions:

  • AliyunVPCFullAccess
  • AliyunEIPFullAccess
  • AliyunOSSFullAccess
  • AliyunECSFullAccess
  • AliyunSLBFullAccess
  • AliyunOTSFullAccess
  • AliyunESSFullAccess
  • AliyunFCFullAccess
  • AliyunRAMFullAccess
  • AliyunBSSOrderAccess

Region requirements

To deploy a FortiGate Auto Scaling cluster in AliCloud the region must support the following:

  • TableStore
  • OSS
  • Function Compute
  • Auto Scaling
  • NAT Gateway

Supported regions

The following regions contain all of the necessary services to run FortiGate Autoscale for AliCloud:

Acronym

Expansion

Asia Pacific NE 1 (Tokyo)

m-6weakry8j13jxmjlmi4o

Asia Pacific SE 2 (Sydney)

m-p0wb4dw13d6qc1sndaj6

Asia Pacific SOU 1 (Mumbai)

m-a2dbkrpr8wsobn9ygddc

EU Central 1 (Frankfurt)

m-gw8cizn7dguyeikpgozb

US East 1 (Virginia)

m-0xif6xxwhjlqhoaqjrr6

US West 1 (Silicon Valley)

m-rj91iqplyxdp7crb0gvj

Requirements

Installing and configuring FortiGate Autoscale for AliCloud requires knowledge of the following:

  • Configuring a FortiGate using the CLI
  • AliCloud services
  • Terraform

It is expected that FortiGate Autoscale for AliCloud will be deployed by DevOps engineers or advanced system administrators who are familiar with the above.

RAM account permissions

The solution can be deployed with an administrator account. As an administrator account has full permission to all resources under your AliCloud account, you may wish to create a separate Resource Access Management (RAM) account with the following minimum required permissions:

  • AliyunVPCFullAccess
  • AliyunEIPFullAccess
  • AliyunOSSFullAccess
  • AliyunECSFullAccess
  • AliyunSLBFullAccess
  • AliyunOTSFullAccess
  • AliyunESSFullAccess
  • AliyunFCFullAccess
  • AliyunRAMFullAccess
  • AliyunBSSOrderAccess

Region requirements

To deploy a FortiGate Auto Scaling cluster in AliCloud the region must support the following:

  • TableStore
  • OSS
  • Function Compute
  • Auto Scaling
  • NAT Gateway

Supported regions

The following regions contain all of the necessary services to run FortiGate Autoscale for AliCloud:

Acronym

Expansion

Asia Pacific NE 1 (Tokyo)

m-6weakry8j13jxmjlmi4o

Asia Pacific SE 2 (Sydney)

m-p0wb4dw13d6qc1sndaj6

Asia Pacific SOU 1 (Mumbai)

m-a2dbkrpr8wsobn9ygddc

EU Central 1 (Frankfurt)

m-gw8cizn7dguyeikpgozb

US East 1 (Virginia)

m-0xif6xxwhjlqhoaqjrr6

US West 1 (Silicon Valley)

m-rj91iqplyxdp7crb0gvj