Connecting to the FortiGate-VM
To connect to the FortiGate-VM, you need your login credentials, the FortiGate-VM's EIP, SSH client, and an FTP server.
The default username is admin and the default password is the instance ID.
- You can find the public IP address in the EC2 management console. Select Instances and look at the Public IP field in the lower pane.
- Each public IP address in China should obtain an ICP license. Otherwise it cannot be visited by ports 80, 443, and 8080. You cannot initially access the FortiGate-VM web GUI via the default HTTPS port. You can access the FortiGate-VM via SSH, then upload a BYOL license to the FortiGate-VM via FTP or TFTP. After activating the FortiGate-VM, you can modify the default admin HTTPS port to any port, such as 8443. Then you can go to the FortiGate-VM via https://<FortiGate-VM EIP>:8443.
The default password is the instance ID as seen below.
- Set up an FTP/TFTP server and ensure the FortiGate can log onto and download a BYOL license from it.
- On the FortiGate, use one of the following CLI commands to restore the VM license.
exec restore vmlicense tftp <license file name> <IP address>
exec restore vmlicense ftp <license name (path) on the remote server> <ftp server address>[:ftp port]
If the license installation is successful, the FortiGate-VM reboots automatically. After it restarts, log in.
- Change the default port to any port, such as 8443. Do not use ports 443, 8080, or 80.
- You will now see the FortiGate-VM dashboard. Depending on your license type, the information in the license widget on the dashboard may vary.
- Select Network > Interfaces, and edit the interfaces, if required. If the IP address or subnet mask is missing for port 1 or port 2, configure these values.