Create Nutanix fabric connectors
You can create Nutanix fabric connectors in FortiManager, and then import address names from Nutanix to automatically create dynamic objects that you can use in policies. When you install the policies to one or more FortiGate units, FortiGate uses the information to communicate with Nutanix and dynamically populate the objects with IP addresses.
When you create a fabric connector for Nutanix, you are specifying how FortiGate can communicate with Nutanix.
Requirements:
- FortiManager version 7.0 ADOM or later
- FortiGate is managed by FortiManager.
- The managed FortiGate unit is configured to work with Nutanix.
To create a Nutanix fabric connector:
- Go to Fabric View > Fabric > External Connectors, and click Create New. The Create New Fabric Connector wizard is displayed.
- Under Private SDN, select Nutanix. The Nutanix screen is displayed.
- Configure the following options, and then click OK.
Type
Displays Nutanix.
Name
Enter a name for the connector. Status
Toggle On to enable the fabric connector object. Toggle OFF to disable the fabric connector object.
Update Interval(s)
Specify how often in seconds that the dynamic firewall objects should be updated.
IP
Type the IP address for Nutanix.
Port
Select Use Default or Specify and enter the desired port.
Username
Enter the Nutanix account username.
Password
Enter your Nutanix account password.
Advanced Options
Click to expand and see advanced options.
- Click OK to save the connector.
To complete the fabric connector setup:
- Import address names or manually create the dynamic firewall address for the SDN connector. See Importing address names to fabric connectors and Configuring dynamic firewall addresses for fabric connectors.
- In the policy package in which you will be creating the new policy, create a firewall policy and include the dynamic firewall address objects for the SDN connector. See Create a new firewall policy.
- Install the policy package to FortiGate. See Install a policy package.
FortiGate communicates with the SDN to dynamically populate the firewall address objects with IP addresses.