Fortinet Document Library

Version:


Table of Contents

6.2.0
Copy Link
External

Creating fabric connectors for VMWare ESXi

You can use FortiManager to create SDN fabric connectors for VMWare ESXi, and then install the fabric connectors to FortiGates.

The fabric connectors in FortiManager define the type of connector and include information for FortiGate to communicate with and authenticate with the products. In some cases FortiGate units must communicate with products through the Fortinet SDN Connector, and in other cases FortiGate units communicate directly with the products.

FortiGate works with Fortinet SDN Connector to communicate with VMWare ESXi.

For more information about Fortinet SDN Connector, see the Fortinet Document Library.

note icon

You cannot import a policy package for Fortinet SDN Connector from FortiGate to FortiManager.

Following is an overview of how to create fabric connectors for VMWare ESXi by using FortiManager:

  1. Create a fabric connector object for VMWare ESXi. See Creating Fabric Connector objects for VMWare ESXi .
  2. Create dynamic firewall address objects. See Configuring dynamic firewall addresses for fabric connectors.

    You cannot import address names from VMWare ESXi to FortiManager.

  3. In the policy package in which you will be creating the new policy, create an IPv4 policy and include the firewall address objects for VMWare ESXi. See Creating IP policies.
  4. Install the policy package to FortiGate. See Installing policy packages.

    FortiGate communicates with VMWare ESXi to dynamically populate the firewall address objects with IP addresses.

Creating fabric connectors for VMWare ESXi

You can use FortiManager to create SDN fabric connectors for VMWare ESXi, and then install the fabric connectors to FortiGates.

The fabric connectors in FortiManager define the type of connector and include information for FortiGate to communicate with and authenticate with the products. In some cases FortiGate units must communicate with products through the Fortinet SDN Connector, and in other cases FortiGate units communicate directly with the products.

FortiGate works with Fortinet SDN Connector to communicate with VMWare ESXi.

For more information about Fortinet SDN Connector, see the Fortinet Document Library.

note icon

You cannot import a policy package for Fortinet SDN Connector from FortiGate to FortiManager.

Following is an overview of how to create fabric connectors for VMWare ESXi by using FortiManager:

  1. Create a fabric connector object for VMWare ESXi. See Creating Fabric Connector objects for VMWare ESXi .
  2. Create dynamic firewall address objects. See Configuring dynamic firewall addresses for fabric connectors.

    You cannot import address names from VMWare ESXi to FortiManager.

  3. In the policy package in which you will be creating the new policy, create an IPv4 policy and include the firewall address objects for VMWare ESXi. See Creating IP policies.
  4. Install the policy package to FortiGate. See Installing policy packages.

    FortiGate communicates with VMWare ESXi to dynamically populate the firewall address objects with IP addresses.