Hello, in this detailed guide i will show you how to add Fortigate to GNS3, how to do basic network configuration for the machines, and how to access FortiGate through CLI (Command-Line) and web.
Requirements
------------------------------------------------------
• GNS3 (V 2.0.3) & GNS3 VM (Or above)
• Download FortiGate appliance from Here
• Download FortiGate 5.6 Image from Here
Fortigate Vm Software Downloads
- Download Fortigate Vm Software Windows. By: Fortinet has a growing list of, and a prolific ecosystem of resellers, technology partners and customers. This ecosystem needs complete, fully featured Fortinet FortiGate environments for - demos, PoCs and testing. Public clouds - AWS or Google are ideal for these transient workloads, but.
- FortiGate-VM virtual appliance designed for all supported platforms - 1 x vCPU core, (up to) 2 GB RAM and Extreme DB NOT supported FG-VM01 List Price: $3,675.00. Our Price: $2,933.00. Savings: $742.00.
• Download Tiny Linux Firefox Appliance from Here
Fortinet FortiGate is ranked 1st in Firewalls with 44 reviews while Fortinet FortiGate-VM is ranked 13th in Firewalls with 20 reviews. Fortinet FortiGate is rated 8.6, while Fortinet FortiGate-VM is rated 8.0. The top reviewer of Fortinet FortiGate writes 'Don't underestimate FortiAnalyzer.
• Download Tiny Linux Firefox Image from Here
------------------------------------------------------
Fortinet Fortigate Vm
Import Appliances & Images
Start a new blank project, click File > Import Appliance, then choose the FortiGate appliance file (.gns3a)
Click Next, then choose 'Run the appliance on the GNS3 VM(recommended)' option, after GNS3 verify the VM requirements to run the appliance, click Next.
Click on Refresh, a list of all the required FortiGate files will appear like the following
In your case all the files will be missing. For this guide i will be using FortiGate 5.6.1.
Under FortiGate 5.6.1 on the list, click on FGT_VM64_KVM-v5-build1484....., then import, then choose the file extracted from the FortiGate Image.
Note: In order for FortiGate to operate, it needs an empty harddisk
The harddisk can be created using linux tool called 'qemu-img' using the following command:
or you can download the file from Here .
To import the harddisk into GNS click on empty30G.qcow2 under FortiGate 5.6.1 on the list, then import and choose the harddisk file.
After adding the two files they will be ready to install, click on Next, then choose /usr/bin/qemu-system-x86_64 (v2.5.0) for Qemu binary, then click Next, Next, Finish.
FortiGate will appear on Security Devices Tab
To import Tiny Linux Firefox, Click File >>> Import Appliance >>> Choose the Tiny Linux Firefox Appliance file >>> Click Next >>> Under Firefox 31.1.1~2 click on linux-tinycore-linux-6.4...... then import >>> choose the Tiny Linux Firefox image file >>> Click Next >>> choose /usr/bin/qemu-system-i386 (v2.5.0) for Qemu binary >>> Click Next, Next, Finish.
Firefox will appear in the End Devices tab.
Network Topology & Configuration
For this guide i will configure a very basic network topology.
FortiGate Configuration
Right-Click on FortiGate, then click on Console to access the CLI. The username is 'admin' and blank password.
To set IP on port 1 run the following commands.
Tiny Linux Firefox Configuration
Right-Click then choose console, a GUI will appear.
open a terminal and run 'ifconfig' to check for network interfaces. in my case i will configure interface 'eth0'. Run the following commands to set an IP.
To open Fortigate through web, click on Firefox and type your default gateway IP in the URL bar. Enter username 'admin' and empty password
Finally, the portal will open and you should see the following
I hope that this will help you in configuring FortiGate inside GNS3.
This documentation assumes that before deploying the FortiGate-VM virtual appliance on the Hyper-V virtual platform, you have addressed the following requirements:
Virtual Environment
The Hyper-V software is installed on a physical server with sufficient resources to support the FortiGate-VM and all other VMs that will be deployed on the platform.
If the FortiGate-VM will be configured to operate in transparent mode, or will be included in a FortiGate Clustering Protocol (FGCP) High Availability (HA) cluster, ensure that any virtual switches have been configured to support the operation of the FortiGate-VM before you create the FortiGate-VM.
Management software
If you plan to use the GUI to manage the Hyper-V server remotely, Ensure that the management software is installed on a computer with network access to the Hyper-V server.
Options for remote management of Microsoft Hyper-V include:
Connectivity
An Internet connection is required for the FortiGate-VM to contact FortiGuard to validate its license. If the FortiGate-VM is in a closed environment, it must be able to connect to a FortiManager to validate the FortiGate-VM license. See Validating the FortiGate-VM license with FortiManager.