Fortinet black logo

OCI Administration Guide

Using Terraform to deploy a single FortiGate-VM

Copy Link
Copy Doc ID 72c23609-8675-11eb-9995-00505692583a:295655
Download PDF

Using Terraform to deploy a single FortiGate-VM

You can deploy FortiGate-VM using Terraform. In this example, OCI is a Terraform provider, and FortiGate is a Terraform consumer. For details about Terraform, see What is Terraform.

Before using Terraform to deploy a FortiGate-VM, ensure to meet the following prerequisites:

  1. See Getting Started.
  2. Prepare a PEM key file for the user to authenticate themselves with the OCI platform.
  3. Upload the FortiGate-VM image to OCI where you plan to deploy the FortiGate-VM. See To obtain the deployment image file and place it in your bucket:.

The following lists the steps for deploying a FortiGate-VM using Terraform:

  1. Prepare Terraform deployment files. There is a sample set of Terraform files available on GitHub. Clone or download the files in the Single-VM-BareMinimum-BYOL directory. This creates a new VCN.
  2. Select your OS with the Terraform applications. See Terraform Downloads.
  3. Edit the Terraform variables and config files to suit your environment:
    1. Change the OCI variables in the terraform.tfvars file. You must know the OCIDs of your tenant, compartment, user, and AD. If using Windows, you do not need to specify the C: drive in paths.
    2. Change the resource names in the block.tf, compute.tf, network.tf, and variables.tf files. You can modify resources including the following:
      1. FortiGate-VM hostname
      2. VCN name
      3. Network interface, subnet, volume names
      4. Security list settings. Ensure you open port 443 to allow access to the FortiGate-VM.
      5. Disk size for the second drive. By default, this is 50 GB.
      6. Network CIDRs
  4. Run Terraform:
    1. Run terraform.exe init to initialize the Terraform environment.

    2. Run terraform.exe plan.

      Check the output for newly creating resources. You can add "-out" and an output file to check the output in the file.

    3. Run terraform.exe apply.

      At the Enter a value prompt, enter yes to continue. Wait about ten minutes for the command to end.

  5. In the OCI console, go to the newly created resources. The FortiGate-VM instances and VCN have been created.

  6. Connect to the FortiGate-VMs. See Accessing the FortiGate-VM.

Using Terraform to deploy a single FortiGate-VM

You can deploy FortiGate-VM using Terraform. In this example, OCI is a Terraform provider, and FortiGate is a Terraform consumer. For details about Terraform, see What is Terraform.

Before using Terraform to deploy a FortiGate-VM, ensure to meet the following prerequisites:

  1. See Getting Started.
  2. Prepare a PEM key file for the user to authenticate themselves with the OCI platform.
  3. Upload the FortiGate-VM image to OCI where you plan to deploy the FortiGate-VM. See To obtain the deployment image file and place it in your bucket:.

The following lists the steps for deploying a FortiGate-VM using Terraform:

  1. Prepare Terraform deployment files. There is a sample set of Terraform files available on GitHub. Clone or download the files in the Single-VM-BareMinimum-BYOL directory. This creates a new VCN.
  2. Select your OS with the Terraform applications. See Terraform Downloads.
  3. Edit the Terraform variables and config files to suit your environment:
    1. Change the OCI variables in the terraform.tfvars file. You must know the OCIDs of your tenant, compartment, user, and AD. If using Windows, you do not need to specify the C: drive in paths.
    2. Change the resource names in the block.tf, compute.tf, network.tf, and variables.tf files. You can modify resources including the following:
      1. FortiGate-VM hostname
      2. VCN name
      3. Network interface, subnet, volume names
      4. Security list settings. Ensure you open port 443 to allow access to the FortiGate-VM.
      5. Disk size for the second drive. By default, this is 50 GB.
      6. Network CIDRs
  4. Run Terraform:
    1. Run terraform.exe init to initialize the Terraform environment.

    2. Run terraform.exe plan.

      Check the output for newly creating resources. You can add "-out" and an output file to check the output in the file.

    3. Run terraform.exe apply.

      At the Enter a value prompt, enter yes to continue. Wait about ten minutes for the command to end.

  5. In the OCI console, go to the newly created resources. The FortiGate-VM instances and VCN have been created.

  6. Connect to the FortiGate-VMs. See Accessing the FortiGate-VM.