Configuring reverse service on the gateway

We configure the reverse service on the gateway for a reverse connection to the FortiPAM server (control plane).

Reverse service can only be configured via the CLI console.

To configure a reverse service on a FortiPAM gateway:

1. In the CLI console, enter the following commands:

    config secret server
     edit "pam_gcp159"
      set status enable
      set address "34.95.41.159" #same as the one on the interface in Service Interface in Configuring the reverse service on FortiPAM
      set port 8443 #same as the one on Port configured in Configuring the reverse service on FortiPAM
      set health-check-interval 60
      set set ssl-max-version tls-1.3
      set client-cert "fortipam_gw4.pem"
      set ca "CA_Cert_1"
     next
    end

To configure reverse service on a FortiGate gateway:

1. In the CLI console, enter the following commands:

    config ztna traffic-forward-proxy-reverse-service 
     config remote-servers
      edit "gcp159"
       set address "34.95.41.159" #same as the one on the interface in Service Interface in Configuring the reverse service on FortiPAM
       set port 8443 #same as the one on Port configured in Configuring the reverse service on FortiPAM
       set certificate "fortipam_gw5"
       set trusted-server-ca "CA_Cert_1"
      next
     end
    end