You do not need to configure 10.0.22.0/24 on FGT1 but on FGT2. If you do not have any workload in zone-B internal-B subnet. Configure this route will let FGT2 send traffic back to web-a in ZoneA directly via port2. Web-a server in zone-A will talk to FGT2 in zone B. This is needed after the switchover happens. On FGT2, configure a static route to 10.0.12.0/24 with exit port2 is required. The interface IP address has to match ENI IP addresses and the port number should match the ENI numbers.Ĭonfigure the default route for both Fortigate you can get the gateway IP address from port1 DHCP setup. Basically you will have to configure the interface address and routing table. You can configure Fortigate by following the cookbook. Please note that the license may take up to 30 minutes to be active, so be patient for license to become active. Then, you will be asked to import the license file you previously downloaded from. You will be asked to input the default password (which is instanceid) and asked to change the password. After rebooting, you will be able to login into FGT1 and FGT2. Upload your license file (FGVM1VTM20000859.lic), which was downloaded from.
By default, HTTPS port 443 is accessible. Change your password by following the instructions. Configure FortigateĪfter starting the instance, log in via EIP1 IP address to FGT1, and EIP2 IP address to FGT2. In this 3-part article series, we will show you in detail the steps for deploying and configuring Fortinet FortiGate (FGT) A-P High Availability (HA) on Alibaba Cloud between availability zones (AZ).
Get Fortinet FortiGate on Alibaba Cloud by visiting our Marketplace:įortinet FortiGate (PAYG) Next-Generation Firewall (4 vCPUs)įortinet FortiGate (PAYG) Next-Generation Firewall (8 vCPUs)
0 kommentar(er)
