Fortinet black logo

AWS Administration Guide

Creating a DNI

Creating a DNI

Note

OpsHub does not support DNI creation. Only the Snowballedge CLI supports DNI creation.

Following is an example of creating a DNI and attaching it to a running FortiGate-VM Snowball Edge instance.

To obtain the physical interface ID:

Use snowballedge describe-device to copy and use the physical interface ID as needed. This example uses the physical interface ID:

snowballedge describe-device
{
  "DeviceId" : "JIDbxxxxxxx-2xxx-4xxx-axxx-dxxxxxxxxxxx",
  "UnlockStatus" : {
    "State" : "UNLOCKED"
  },
  "ActiveNetworkInterface" : {
    "IpAddress" : "10.xxx.xxx.54"
  },
"PhysicalNetworkInterfaces" : [ {
    "PhysicalNetworkInterfaceId" : "s.ni-8bb5317c4fbba1682",
    "PhysicalConnectorType" : "QSFP",
    "IpAddressAssignment" : "STATIC",
    "IpAddress" : "0.0.0.0",
    "Netmask" : "0.0.0.0",
    "DefaultGateway" : "10.250.0.254",
    "MacAddress" : "00:8c:fa:ed:b8:00"
  }, {
    "PhysicalNetworkInterfaceId" : "s.ni-654321",
    "PhysicalConnectorType" : "SFP_PLUS",
    "IpAddressAssignment" : "STATIC",
    "IpAddress" : "10.250.0.54",
    "Netmask" : "255.255.255.0",
    "DefaultGateway" : "10.250.0.254",
    "MacAddress" : "00:8c:fa:ed:b8:01"
  }, {
    "PhysicalNetworkInterfaceId" : "s.ni-88686f9a4654fc2c1",
    "PhysicalConnectorType" : "RJ45",
    "IpAddressAssignment" : "STATIC",
    "IpAddress" : "10.120.100.10",
    "Netmask" : "255.255.255.0",
    "DefaultGateway" : "10.250.0.254",
    "MacAddress" : "00:8c:fa:ed:b7:ff"
  } ]
To create and attach the DNI:

The following shows the format for the command for creating and attaching the DNI:

snowballedge create-direct-network-interface --instance-id <FortiGate-VM on Snowball Edge instance ID> --physical-network-interface-id <Snowball Edge physical interface ID>

If the instance ID is s.i-123456 and the physical network interface ID is s.ni-654321, the command is as follows:

snowballedge create-direct-network-interface --instance-id s.i-123456 --physical-network-interface-id s.ni-654321

The following shows an example of successful output for DNI creation around the SFP+ and attachment to the FortiGate-VM:

{
  "DirectNetworkInterface" : {
    "DirectNetworkInterfaceArn" : "arn:aws:snowball-device:::interface/s.ni-77777777777",
    "PhysicalNetworkInterfaceId" : "s.ni-654321",
    "InstanceId" : "s.i-123456",
    "Driver" : "mlx5_core",
    "MacAddress" : "06:13:48:48:8f:3e"
  }
}
To create and associate the VNI:

Generally, the VNI is created and associated with the instance at the time of instance creation. However, if the VNI was not created and associated with the instance at the time of instance creation, you must create it and associate it with the instance.

snowballedge create-virtual-network-interface --ip-address-assignment DHCP --physical-network-interface-id s.ni-654321

aws ec2 associate-address --public-ip <DHCP/Static IP address> --instance-id s.i-123456 --endpoint http://Snowball_device_physical_local_ipaddress:8008

For information about VNIs, see Understanding Virtual Network Interfaces on AWS Snowball Edge.

Creating a DNI

Note

OpsHub does not support DNI creation. Only the Snowballedge CLI supports DNI creation.

Following is an example of creating a DNI and attaching it to a running FortiGate-VM Snowball Edge instance.

To obtain the physical interface ID:

Use snowballedge describe-device to copy and use the physical interface ID as needed. This example uses the physical interface ID:

snowballedge describe-device
{
  "DeviceId" : "JIDbxxxxxxx-2xxx-4xxx-axxx-dxxxxxxxxxxx",
  "UnlockStatus" : {
    "State" : "UNLOCKED"
  },
  "ActiveNetworkInterface" : {
    "IpAddress" : "10.xxx.xxx.54"
  },
"PhysicalNetworkInterfaces" : [ {
    "PhysicalNetworkInterfaceId" : "s.ni-8bb5317c4fbba1682",
    "PhysicalConnectorType" : "QSFP",
    "IpAddressAssignment" : "STATIC",
    "IpAddress" : "0.0.0.0",
    "Netmask" : "0.0.0.0",
    "DefaultGateway" : "10.250.0.254",
    "MacAddress" : "00:8c:fa:ed:b8:00"
  }, {
    "PhysicalNetworkInterfaceId" : "s.ni-654321",
    "PhysicalConnectorType" : "SFP_PLUS",
    "IpAddressAssignment" : "STATIC",
    "IpAddress" : "10.250.0.54",
    "Netmask" : "255.255.255.0",
    "DefaultGateway" : "10.250.0.254",
    "MacAddress" : "00:8c:fa:ed:b8:01"
  }, {
    "PhysicalNetworkInterfaceId" : "s.ni-88686f9a4654fc2c1",
    "PhysicalConnectorType" : "RJ45",
    "IpAddressAssignment" : "STATIC",
    "IpAddress" : "10.120.100.10",
    "Netmask" : "255.255.255.0",
    "DefaultGateway" : "10.250.0.254",
    "MacAddress" : "00:8c:fa:ed:b7:ff"
  } ]
To create and attach the DNI:

The following shows the format for the command for creating and attaching the DNI:

snowballedge create-direct-network-interface --instance-id <FortiGate-VM on Snowball Edge instance ID> --physical-network-interface-id <Snowball Edge physical interface ID>

If the instance ID is s.i-123456 and the physical network interface ID is s.ni-654321, the command is as follows:

snowballedge create-direct-network-interface --instance-id s.i-123456 --physical-network-interface-id s.ni-654321

The following shows an example of successful output for DNI creation around the SFP+ and attachment to the FortiGate-VM:

{
  "DirectNetworkInterface" : {
    "DirectNetworkInterfaceArn" : "arn:aws:snowball-device:::interface/s.ni-77777777777",
    "PhysicalNetworkInterfaceId" : "s.ni-654321",
    "InstanceId" : "s.i-123456",
    "Driver" : "mlx5_core",
    "MacAddress" : "06:13:48:48:8f:3e"
  }
}
To create and associate the VNI:

Generally, the VNI is created and associated with the instance at the time of instance creation. However, if the VNI was not created and associated with the instance at the time of instance creation, you must create it and associate it with the instance.

snowballedge create-virtual-network-interface --ip-address-assignment DHCP --physical-network-interface-id s.ni-654321

aws ec2 associate-address --public-ip <DHCP/Static IP address> --instance-id s.i-123456 --endpoint http://Snowball_device_physical_local_ipaddress:8008

For information about VNIs, see Understanding Virtual Network Interfaces on AWS Snowball Edge.