fortigate-aws-tgwconnect-ha-dualaz-terraform

Introduction

Mon, 01 Jan 0001 00:00:00 +0000

Welcome The purpose of this site is to provide a quick start guide for using Infrastructure as Code (IaC) templates located in the repo fortigate-aws-tgwconnect-ha-dualaz-terraform. Reference the prerequisites and deployment sections on this site to get started. For detailed documentation on FGCP in AWS, walk through of a post deployment failover, and additional use cases, please reference CSE Team FGCP in AWS.

Prerequisites

Mon, 01 Jan 0001 00:00:00 +0000

Before attempting to create a stack with the templates, a few prerequisites should be checked to ensure a successful deployment: An AMI subscription must be active for the FortiGate license type being used in the template. Intel BYOL Marketplace Listing Intel PAYG Marketplace Listing ARM BYOL Marketplace Listing ARM PAYG Marketplace Listing The solution requires 3 EIPs to be created so ensure the AWS region being used has available capacity. Reference AWS Documentation for more information on EC2 resource limits and how to request increases.

Deployment

Mon, 01 Jan 0001 00:00:00 +0000

Once the prerequisites have been satisfied proceed with the deployment steps below. Clone this repo with the command below. git clone https://github.com/FortinetCloudCSE/fortigate-aws-tgwconnect-ha-dualaz-terraform.git Change directories and modify the terraform.tfvars file with your credentials and deployment information. Note In the terraform.tfvars file, the comments explain what inputs are expected for the variables. For further details on a given variable or to see all possible variables, reference the variables.tf file. cd fortigate-aws-tgwconnect-ha-dualaz-terraform/terraform nano terraform.tfvars When ready to deploy, use the commands below to run through the deployment. terraform init terraform validate terraform apply --auto-approve When the deployment is complete, you will see login information for the FortiGates like so. Apply complete! Resources: 68 added, 0 changed, 0 destroyed. Outputs: fgt_login_info = <