Completing the prerequisites
Before deploying the Azure Resource Manager (ARM) template, complete the following prerequisites:
Creating a service principal
To create a service principal:
- Log in to your Azure account.
- Create a service principal. Note the following items as you need them to deploy the Function App:
Item
Description
Relevant FortiOS parameter
Tenant ID
You can find this item in Azure Active Directory > Properties > Directory ID. A hybrid licensing deployment does not require this item.
Tenant ID
Application ID
You can find this item in Azure Active Directory > App registrations > (your app).
Service Principal App ID. This is the Application ID for the Registered app used as the Function App API request service principal.
Application secret
Only appears once. You cannot retrieve the application secret.
Service Principal App Secret. This is the password (Authentication key) for the Registered app used as the Function App API request service principal.
Obtaining vWAN details
Obtain the following details about the vWAN service:
- vWAN name
- Resource group name
Creating the Remote_sites.txt file
The Remote_sites.txt file serves as the input for Azure functions. The file contains information about all sites that want to connect to vWAN. You will store the file in a storage blob. You must include the following information in the file:
- Site name (Azure uses this as an identifier)
- FortiGate public IP address
- Internal networks behind the FortiGate that need access to the vWAN
- BGP ASN and peering IP address to use
- VDOM
- Login credentials
The following is an example of the content of a Remote_Sites.txt file:
1) Tempe 51.140.67.103 10.0.11.0/24,10.0.15.0/24 azureadmin Password!234 root 169.254.24.24 7224
2) Folsom 40.115.47.140 172.31.1.0/24 azureadmin Password!234 root 169.254.24.25 7225