dynamicsupermicro

FortinetandVyattaDEPLOYMENTGUIDE2Deploymentguide|FortinetandVyattaFortinetandVyattaOverview3DeploymentPrerequisites3ArchitectureOverview3Figure1:Topology3PartnerConfiguration4HardwareInstallation4Figure2:VyattaDashboard4Figure3:VyattaVirtualization5FortinetConfiguration5Figure4:VyattaVirtualizationConsoleAccess5Summary6AccesstoVyattaDemo6HowtoGetHelp63DeploymentPrerequisitesTheFortinetandBrocadeVyattadeploymentrequiresthefollowing:1.
VyattaOS2.
Supermicrox86-BasedHardware3.
FortiGateKVMFirewallOverviewTheBrocade5600vRouter(formerlyVyatta5600vRouter)providesasolutionforNetworkFunctionsVirtualization(NFV).
Itofferseasyscalability,abroadsetofcapabilities,andreliability.
Inaddition,itutilizesIntelDataPlaneDevelopmentKit(DPDK)todeliverhigherperformance,anditcanbeinstalledonhypervisorsandanyx86-basedsystem.
Together,FortinetandBrocadedeliveranindustry-leadingsecurityandnetworksolution.
FortiGatevirtualfirewallproductsenablecustomerstodeploybranchofficeservices.
CustomerscandeployVirtualCPEcombinedwithindustry-leadingFortiGatesecurity.
TheBrocadeVyattaNetworkOSwithFortinetnetworksecurityappliancesandsubscriptionservicesprovidesbroad,integrated,andhigh-performanceprotectionagainstdynamicsecuritythreatswhilesimplifyingtheITsecurityinfrastructure.
Fortinetoffersaflexible,end-to-endsolutionthatincorporateswirelessandwiredaccess,security,authentication,switching,andmanagementinaneasilymanagedsystemthatallowssystem-widepolicyenforcement.
ArchitectureOverviewThefollowingdiagramillustratesthevariousservicesandcomponentsthatarepartoftheFortinetVyattaintegration.
TheBrocadeVyattaNetworkOSforvCPEcanbeinstalledonaslimSupermicroMini-ITXchassiswithIntelAtomprocessorC2758runningFortinetFortiGateNext-GenerationFirewallasaguestservice.
TheBrocade5600vRoutersupportsfoundationnetworkingservicesincludingrouting,firewall,VirtualPrivateNetworking(VPN),QualityofService(QoS),andNetworkAddressTranslation(NAT)withhigh-performanceandefficientBrocadevPlanetechnology.
TheVyattavPlanearchitectureconsistsofthefollowingmaincomponents:1.
hvvolplaneservicessuchasBGP,DHCP,OSPF,RIP,andSNMP.
2.
Controllerdaemon—providesthedataplaneinterfacetotheLinuxkernelandCLI,andmanagesthedataplane.
DataPlane:Forwardstrafficbetweenportsandpasseslocaltraffictothecontroller.
Thedataplaneconsistsofthefollowingcomponents:1.
Dataplanedaemon—providespacketforwarding,QoS,andfirewallservices.
2.
UserspaceI/Odrivers—providenetworkinterface.
LinuxKernel:Hoststhedataplaneandotheruserspaceprocesses.
TheFortiGateFirewallvirtualappliancerunsasVNFstoprovidenext-generationsecurityprotection.
Figure1:Topology.
4Deploymentguide|FortinetandVyattaPartnerConfigurationHardwareInstallationFortheintegration,Brocadeprovideduswiththeirhardware,aSupermicroSYS-E300-8DIntelXeonD-1518mini-pc.
YouinstallthesystemfromVyattaLiveCD,whichyoucreatebeforeinstallation.
TheinstallationprocessusesLiveCDasthesourceimage,formatsthedevice,installsthesystem,andthedeviceisrebootedafterinstallation.
Figure2belowshowsthedashboardofVyattaOS.
Figure2:VyattaDashboard.
TointegrateFortiGate,wecreateavirtualizationinstanceunderthevirtualizationtab.
ConfigureremoteaccesstotheconsoleusingVNCandassignaportnumber,theninstalltheFortiGateKVMimageusingtheconsole.
5Deploymentguide|FortinetandVyattaFortinetConfigurationLogintotheconsoleusingtheVNCviewer,andyoushouldbeabletoinstallandlogintotheFortiGateconsole,asshownbelowinFigure4:Figure3:VyattaVirtualization.
Figure4:VyattaVirtualizationConsoleAccess.
YoucanVNCtoaccesstheconsole.
June26,201911:19PMD:\Fortinet\DeploymentGuide\Vyatta\DG-FortinetandVyattaDeploymentguide|FortinetandVyatta91828-A-0-ENTheVyattahardwaretopologyisshownbelow.
Physicalinterfacedp01isconnectedtothemanagementinterface,dp02isconnectedtotheWANlink,andinterfacedp03istheLANinterface.
ConfiguretheIPaddressontheFortiGateandconnecttheportstothenetwork.
RefertotheFortiGateAdministrationGuide.
SummaryAccesstoVyattaDemoThisdemoispartoftheEntLabportal.
ContacttheTechnicalMarketingGrouptoaccessthesetup.
HowtoGetHelpFortinet:ThisdemoispartoftheEntLabportal.
ContacttheTechnicalMarketingGrouptoaccessthesetup.
nnhttp://docs.
fortinet.
com/d/fortiweb-5.
6-administration-guidennhttps://fuse.
fortinet.
com/p/do/sd/sid=2298&fid=3538&req=directnntmg@fortinet.
comFortinet:nnhttp://www.
brocade.
com/en/products-services/software-networking/network-functions-virtualization/5600-vrouter.
htmlnnhttp://www.
brocade.
com/en/products-services/software-networking/network-functions-virtualization/vrouter.
html