Fortinet Document Library

Version:


Table of Contents

Azure Cookbook

Resources

Upgrade Path Tool

Azure Cookbook

6.4.0
Download PDF
Copy Link

Completing the prerequisites

Before deploying the Azure Resource Manager (ARM) template, complete the following prerequisites:

Creating a service principal

To create a service principal:
  1. Log in to your Azure account.
  2. Create a service principal. Note the following items as you need them to deploy the Function App:

    Item

    Description

    Relevant FortiOS parameter

    Tenant ID

    You can find this item in Azure Active Directory > Properties > Directory ID. A hybrid licensing deployment does not require this item.

    Tenant ID

    Application ID

    You can find this item in Azure Active Directory > App registrations > (your app).

    Rest App ID

    Application secret

    Only appears once. You cannot retrieve the application secret.

    Rest App Secret

    For details on the FortiOS parameters, see Configurable variables.

Obtaining vWAN details

Obtain the following details about the vWAN service:

  • vWAN name
  • Resource group name

Creating the Remote_sites.txt file

The Remote_sites.txt file serves as the input for Azure functions. The file contains information about all sites that want to connect to vWAN. You will store the file in a storage blob. You must include the following information in the file:

  • Site name (Azure uses this as an identifier)
  • FortiGate public IP address
  • Internal networks behind the FortiGate that need access to the vWAN
  • BGP ASN and peering IP address to use
  • VDOM
  • Login credentials

The following is an example of the content of a Remote_Sites.txt file:

1) Tempe 51.140.67.103 10.0.11.0/24,10.0.15.0/24 azureadmin Password!234 root 169.254.24.24 7224

2) Folsom 40.115.47.140 172.31.1.0/24 azureadmin Password!234 root 169.254.24.25 7225

Resources

Completing the prerequisites

Before deploying the Azure Resource Manager (ARM) template, complete the following prerequisites:

Creating a service principal

To create a service principal:
  1. Log in to your Azure account.
  2. Create a service principal. Note the following items as you need them to deploy the Function App:

    Item

    Description

    Relevant FortiOS parameter

    Tenant ID

    You can find this item in Azure Active Directory > Properties > Directory ID. A hybrid licensing deployment does not require this item.

    Tenant ID

    Application ID

    You can find this item in Azure Active Directory > App registrations > (your app).

    Rest App ID

    Application secret

    Only appears once. You cannot retrieve the application secret.

    Rest App Secret

    For details on the FortiOS parameters, see Configurable variables.

Obtaining vWAN details

Obtain the following details about the vWAN service:

  • vWAN name
  • Resource group name

Creating the Remote_sites.txt file

The Remote_sites.txt file serves as the input for Azure functions. The file contains information about all sites that want to connect to vWAN. You will store the file in a storage blob. You must include the following information in the file:

  • Site name (Azure uses this as an identifier)
  • FortiGate public IP address
  • Internal networks behind the FortiGate that need access to the vWAN
  • BGP ASN and peering IP address to use
  • VDOM
  • Login credentials

The following is an example of the content of a Remote_Sites.txt file:

1) Tempe 51.140.67.103 10.0.11.0/24,10.0.15.0/24 azureadmin Password!234 root 169.254.24.24 7224

2) Folsom 40.115.47.140 172.31.1.0/24 azureadmin Password!234 root 169.254.24.25 7225