Completing the prerequisites
Before deploying the Azure Resource Manager (ARM) template, complete the following prerequisites:
Creating a service principal
- Log in to your Azure account.
- Create a service principal. Note the following items as you need them to deploy the Function App:
Relevant FortiOS parameter
You can find this item in Azure Active Directory > Properties > Directory ID. A hybrid licensing deployment does not require this item.
You can find this item in Azure Active Directory > App registrations > (your app).
Rest App ID
Only appears once. You cannot retrieve the application secret.
Rest App Secret
For details on the FortiOS parameters, see Configurable variables.
Obtaining vWAN details
Obtain the following details about the vWAN service:
- vWAN name
- Resource group name
Creating the Remote_sites.txt file
The Remote_sites.txt file serves as the input for Azure functions. The file contains information about all sites that want to connect to vWAN. You will store the file in a storage blob. You must include the following information in the file:
- Site name (Azure uses this as an identifier)
- FortiGate public IP address
- Internal networks behind the FortiGate that need access to the vWAN
- BGP ASN and peering IP address to use
- Login credentials
The following is an example of the content of a Remote_Sites.txt file:
1) Tempe 220.127.116.11 10.0.11.0/24,10.0.15.0/24 azureadmin Password!234 root 169.254.24.24 7224
2) Folsom 18.104.22.168 172.31.1.0/24 azureadmin Password!234 root 169.254.24.25 7225