Fortinet Document Library

Version:


Table of Contents

New Features

6.2.0
Download PDF
Copy Link

OCI SDN connector  6.2.1

Oracle Cloud Infrastructure (OCI) SDN connector configuration is updated to change the format of the Server region field to text, and to add a new Server region type field to identify commercial or government regions.

To configure an OCI SDN connector in the CLI:
  1. Configure sn SDN connector:
    config system sdn-connector
        edit "oci1"
            set status enable
            set type oci
            set tenant-id "ocid1.tenancy.oc1..aaaaaaaambr3uzztoyhweohbzqqdo775h7d3t54zpmzkp4b2cf35vs55cxxx"
            set user-id "ocid1.user.oc1..aaaaaaaaq2lfspeo3uetzbzpiv2pqvzzevozccnys347stwssvizqlatfxxx"
            set compartment-id "ocid1.compartment.oc1..aaaaaaaaelxxdjazqo7nzczpgypyiqcgkmytjry6nfq5345vw7eavpwnmxxx"
            set oci-region "us-ashburn-1"
            set oci-region-type commercial
            set oci-cert "cert-sha2"
            set update-interval 30
        next
    end
  2. Create a dynamic firewall address for the SDN connector with a supported filter:
    config firewall address
        edit "oci-address-1"
            set uuid 0b4a496e-8974-51e9-e223-fee75c935fb7
            set type dynamic
            set sdn "oci1"
            set filter "CompartmentName=DevelopmentEngineering"
        next
    end
To configure an OCI SDN connector in the CLI:
  1. Go to Security Fabric > Fabric Connectors and click Create New.
  2. In the Public SDN section, select Oracle Cloud Infrastructure (OCI).
  3. Configuration the connector as needed.

  4. Click OK.
  5. Go to Policy & Objects > Addresses and click Create New > Address.
  6. Configure the address as needed, selecting the OCI connector in the SDN Connector field.

  7. Click OK.
To confirm that dynamic firewall addresses are resolved by the SDN connector:
  1. In the CLI, check that the addresses are listed:
    config firewall address
        edit "oci-address-1"
            set uuid 0b4a496e-8974-51e9-e223-fee75c935fb7
            set type dynamic
            set sdn "oci1"
            set filter "CompartmentName=DevelopmentEngineering"
            config list
                edit "10.0.0.11"
                next
                edit "10.0.0.118"
                next
                ...
                next
            end
        next
    end
  2. In the GUI, go to Policy & Objects > Addresses and hover the cursor over the address name.

OCI SDN connector  6.2.1

Oracle Cloud Infrastructure (OCI) SDN connector configuration is updated to change the format of the Server region field to text, and to add a new Server region type field to identify commercial or government regions.

To configure an OCI SDN connector in the CLI:
  1. Configure sn SDN connector:
    config system sdn-connector
        edit "oci1"
            set status enable
            set type oci
            set tenant-id "ocid1.tenancy.oc1..aaaaaaaambr3uzztoyhweohbzqqdo775h7d3t54zpmzkp4b2cf35vs55cxxx"
            set user-id "ocid1.user.oc1..aaaaaaaaq2lfspeo3uetzbzpiv2pqvzzevozccnys347stwssvizqlatfxxx"
            set compartment-id "ocid1.compartment.oc1..aaaaaaaaelxxdjazqo7nzczpgypyiqcgkmytjry6nfq5345vw7eavpwnmxxx"
            set oci-region "us-ashburn-1"
            set oci-region-type commercial
            set oci-cert "cert-sha2"
            set update-interval 30
        next
    end
  2. Create a dynamic firewall address for the SDN connector with a supported filter:
    config firewall address
        edit "oci-address-1"
            set uuid 0b4a496e-8974-51e9-e223-fee75c935fb7
            set type dynamic
            set sdn "oci1"
            set filter "CompartmentName=DevelopmentEngineering"
        next
    end
To configure an OCI SDN connector in the CLI:
  1. Go to Security Fabric > Fabric Connectors and click Create New.
  2. In the Public SDN section, select Oracle Cloud Infrastructure (OCI).
  3. Configuration the connector as needed.

  4. Click OK.
  5. Go to Policy & Objects > Addresses and click Create New > Address.
  6. Configure the address as needed, selecting the OCI connector in the SDN Connector field.

  7. Click OK.
To confirm that dynamic firewall addresses are resolved by the SDN connector:
  1. In the CLI, check that the addresses are listed:
    config firewall address
        edit "oci-address-1"
            set uuid 0b4a496e-8974-51e9-e223-fee75c935fb7
            set type dynamic
            set sdn "oci1"
            set filter "CompartmentName=DevelopmentEngineering"
            config list
                edit "10.0.0.11"
                next
                edit "10.0.0.118"
                next
                ...
                next
            end
        next
    end
  2. In the GUI, go to Policy & Objects > Addresses and hover the cursor over the address name.