FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kajlasunil
Staff
Staff
Article Id 242132
Description

This article describes how to add a FortiGate VM to the GNS3.

Scope FortiGate v6.0, 6.2, 6.4 ,7.0, 7.2, 7.4, 7.6.
Solution
  1. To download any Fortinet firmware, create an account with Fortinet and use that account to also activate the Permanent Evaluation License described on this link: Permanent trial mode for FortiGate-VM | FortiGate / FortiOS 7.6.0 | Fortinet Document Library.

  2. Go to Support -> VM images, select the platform in the drop-down menu, select KVM and down the firmware image to work on.

 

kajlasunil_0-1672932586931.png

 

  1. Now go to the GNS3 marketplace page and select appliances: https://gns3.com/marketplace/appliances

    Choose FortiGate and download the file with the extension qcow2.

     

    kajlasunil_1-1672932586935.png

     

     

  2. Once the firmware and the qcow2 file are obtained, open the GNS3 console and wait for it to connect to the GNS3 VM. GNS3 Server can also be used, but GNS3 VM is recommended to better support virtualization of VM images.

     

    kajlasunil_2-1672932586937.png

     

     

  3. Now, all is set to add the FortiGate into the GNS3 workstation.

     

Proceed with the following steps to add the FortiGate:

 

Select 'Browse all appliances' and select new template.

Select 'Install an appliance' from the GNS3 server and select 'Next':

                

kajlasunil_3-1672932586939.png

 

Expand the firewall under appliance name, select FortiGate, and press install. The various version from GNS3 directories will be then visible.

If the FortiOS version is not listed, it is possible to create a new version.

 

Lates version might not be listed because GNS3 needs to update its repositories.
Select Create a new version to create version-number that will correspond to the downloaded image from Fortinet Portal.

 

                                     GNS3-List.png

 

The latest FortiOS version listed on GNS3 version 2.2.49, is FortiOS 7.4.4, but version 7.6.0 will be imported.

 

                                     GNS3-Version1.png

 

Rename image filename as per filename that was downloaded from Fortinet Support Portal.

                                                            GNS3-Version2.png

 

As soon as the image is installed on the server, it will be possible to view it on the left panel where all devices are listed..

 

kajlasunil_6-1672932586950.png

 

Other Fortinet devices can be added the same way. By doing a simple search for Fortinet products on New Template wizard, it will display results of what devices are currently supported by GNS3 by default, without further workarounds.

 

                         GNS3-Forti.png

 

All is set to create a basic topology with a FortiGate and other devices if needed, and connect to one of VMs from the local system.

 

For that, it is necessary to drag the FortiGate or FortiManager, or both of them at the same time.

In GNS3 go to File ->New Blank Project and create a basic topology as shown below and start the machine

 

                   GNS3-Final.png
                                                      

Connect to the FortiGate console and assign the IP to the connected interface.

In this topology, the VM Nat-ed IP is in 192.168.82.x/24 subnet.

IP will be assigned to port1 from the above subnet range i.e., 192.168.82.2.

 

kajlasunil_8-1672932586954.png

 

Once the IP address has been assigned, it is now possible to access the FortiGate GUI from the local browser window.

The IP to access the GUI will be the port1 IP.

 

kajlasunil_9-1672932586956.png