Fortinet Document Library

Version:


Table of Contents

FortiGate-VM on OpenStack

Use Case: Automatically Updating Dynamic Addresses Using Fabric Connector

Resources

Upgrade Path Tool
6.0.0
Download PDF
Copy Link

Preparing for deployment

This document assumes that before deploying the FortiGate-VM virtual appliance on the OpenStack virtual platform, you have addressed the following requirements:

Virtual Environment

The OpenStack software is installed on a physical server with sufficient resources to support the FortiGate-VM and all other virtual machines that will be deployed on the platform.

If the FortiGate-VM virtual machine will be configured to operate in transparent mode, ensure that the OpenStack environment includes virtual switches configured to support the operation of the FortiGate-VM before you create the FortiGate-VM virtual machine.

If you will be setting up multiple FortiGate-VMs in a FortiGate Clustering Protocol (FGCP) High Availability (HA) cluster:

  • Make sure to purchase identical FGT-VM64-KVM or FOS-VM64-KVM licenses
  • Be prepared to set up a dedicated network in the OpenStack environment for the HA heartbeat, see Verifying HA cluster status

Management software

The VMware management software, OpenStack Horizon, is installed on a computer with network access to the OpenStack server.

Connectivity

An Internet connection is required for the FortiGate-VM to contact FortiGuard to validate its license. If the FortiGate-VM is in a closed environment, it must be able to connect to a FortiManager to validate the FortiGate-VM license. See "Validating the FortiGate-VM license with FortiManager".

Resources

Preparing for deployment

This document assumes that before deploying the FortiGate-VM virtual appliance on the OpenStack virtual platform, you have addressed the following requirements:

Virtual Environment

The OpenStack software is installed on a physical server with sufficient resources to support the FortiGate-VM and all other virtual machines that will be deployed on the platform.

If the FortiGate-VM virtual machine will be configured to operate in transparent mode, ensure that the OpenStack environment includes virtual switches configured to support the operation of the FortiGate-VM before you create the FortiGate-VM virtual machine.

If you will be setting up multiple FortiGate-VMs in a FortiGate Clustering Protocol (FGCP) High Availability (HA) cluster:

  • Make sure to purchase identical FGT-VM64-KVM or FOS-VM64-KVM licenses
  • Be prepared to set up a dedicated network in the OpenStack environment for the HA heartbeat, see Verifying HA cluster status

Management software

The VMware management software, OpenStack Horizon, is installed on a computer with network access to the OpenStack server.

Connectivity

An Internet connection is required for the FortiGate-VM to contact FortiGuard to validate its license. If the FortiGate-VM is in a closed environment, it must be able to connect to a FortiManager to validate the FortiGate-VM license. See "Validating the FortiGate-VM license with FortiManager".