Checking the prerequisites
To deploy and configure the FortiGate-VM as an A-P HA solution, you need the following items:
- OCI account to operate in OCI compute portal
- Availability to accommodate required OCI resources
- See Service Limits.
- VCN with eight subnets located in two different ADs for management, external, internal, and heartbeat purposes.
- Three public IP addresses
- All IP addresses must be static, not DHCP.
- Two FortiGate-VM instances
- Two valid FortiGate-VM BYOL licenses. See Licensing
- The following summarizes minimum sufficient IAM roles for this deployment:
- Allow dynamic-group <group_name> to read compartments in tenancy
- Allow dynamic-group <group_name> to read instances in tenancy
- Allow dynamic-group <group_name> to read vnic-attachments in tenancy
- Allow dynamic-group <group_name> to read subnets in tenancy
- Allow dynamic-group <group_name> to manage private-ips in tenancy
- Allow dynamic-group <group_name> to manage public-ips in tenancy
- Allow dynamic-group <group_name> to manage route-tables in tenancy
- To define simpler roles, use the following:
- Allow dynamic-group <group_name> to read compartments in tenancy
- Allow dynamic-group <group_name> to read instances in tenancy
- Allow dynamic-group <group_name> to manage virtual-network-family in tenancy
|
Actual role configurations may differ depending on your environments. Check with your company's public cloud administrators for more details. |