Configuring the FortiGates

To configure the FortiGates:

1. Edit the SDN connector on each FortiGate-VM to add the protocol forwarding rule configuration:

   config system sdn-connector
       edit "gcp_conn"
           config forwarding-rule
               edit "doc-pf-rule"
                   set target "doc-pf-primary-instance"
               next
           end
       next
   end
   

2. For the secondary FortiGate-VM, specify the secondary target instance for the forwarding rule configuration:

   config system sdn-connector
       edit "gcp_conn"
           config forwarding-rule
               edit "doc-pf-rule"
                   set target "doc-pf-secondary-instance"
               next
           end
       next
   end
   

The example configuration is not a full SDN configuration and only illustrates the changes needed to support protocol forwarding.