Fortinet black logo

AWS Administration Guide

(Connectivity test) Adding an EC2 instance to test automatic population

Copy Link
Copy Doc ID 9e3b59dc-ba0b-11e9-a989-00505692583a:657165
Download PDF

(Connectivity test) Adding an EC2 instance to test automatic population

  1. Assume you want to boot up another instance with an IP address of 10.0.2.113, which is currently stopped. In the AWS management portal, start the instance.
  2. Verify that the instance is running.
  3. At this point, running show again shows the SDN Connector has automatically populated and added the 10.0.2.113 instance.

    Therefore, administrators do not need to add this instance to the Address manually. When a firewall policy is applied to this Address, 10.0.2.113 is automatically covered. The filtering condition can be set using multiple entries with AND ("&") or OR ("|"). When both ANDand OR are used, ANDis interpreted before OR. Check the syntax by entering set filter ?.

    For example, you can enter subnetID=subnet-fb2506a0 & tag.Name=abc123. In this case, an IP address of the instance that matches both the subnet ID and the tag "Name" shows up. Note wildcards are not allowed in values.

(Connectivity test) Adding an EC2 instance to test automatic population

  1. Assume you want to boot up another instance with an IP address of 10.0.2.113, which is currently stopped. In the AWS management portal, start the instance.
  2. Verify that the instance is running.
  3. At this point, running show again shows the SDN Connector has automatically populated and added the 10.0.2.113 instance.

    Therefore, administrators do not need to add this instance to the Address manually. When a firewall policy is applied to this Address, 10.0.2.113 is automatically covered. The filtering condition can be set using multiple entries with AND ("&") or OR ("|"). When both ANDand OR are used, ANDis interpreted before OR. Check the syntax by entering set filter ?.

    For example, you can enter subnetID=subnet-fb2506a0 & tag.Name=abc123. In this case, an IP address of the instance that matches both the subnet ID and the tag "Name" shows up. Note wildcards are not allowed in values.