x
/
fuel-plugin-fortinet
Code Issues Proposed changes
fuel-plugin-fortinet/doc/source/guide.rst

3.4 KiB
Raw Blame History

User Guide

Plugin configuration

  1. Create a new environment with the Fuel UI wizard. At the moment only the Ubuntu distribution is supported.

    Create a liberty OpenStack environment

    Select qemu-kvm as hypervisor

    Select VLAN segmentation for tenant network

    Select the desired storage backends and additional services.

  2. Add nodes to the environment and assign roles.

  3. Modify networking configurations.

    Modify public/storage/management network settings in default network group.

    Modify ml2 vlan related configuration.

    Modify floating IP pool.

  4. Configure FortiGate Connector settings. Click on Other on navigation bar and scroll down to "Fuel plugin to deploy FortiGate ML2 plugin on OpenStack". Click on the checkbox for the Fortinet fuel plugin and change related settings.

    Modify FortiGate related settings.

  5. Click Save Settings at the bottom of the page to save the configuration parameters.

  6. Switch to the Nodes tab and assign different networks to the interfaces.

    image

    image

  7. Select the Networks tab, scroll to the bottom, and Verify Networks.

  8. Then finally, Deploy Changes.

Plugin Install Verification

Once the deployment is finished, the Dashboard tab will display the "Success" notification, stating that the plugin is deployed and a link with name HTTP will be displayed.

A screenshot of the Dashboard Success notification

Click on HTTP and it will lead you to OpenStack dashboard.

The link to the OpenStack Horizon dashboard.

When Neutron service starts, it will use the FortiGate Connector to initialize the FortiGate and create a VDOM called osvdmext. You can log onto FortiGate to check whether the VDOM has been created.

Auto created VDOM osvdmext.

Using FortiGate Connector

For instructions on using the FortiGate Connector, please refer to the official admin guide on Fortinet support site. The operations are transparent to the OpenStack users and the FortiGate connector will configure the FortiGate via RestFul API when networks, subnets, routers and firewalls are created on OpenStack.