Technical Tip: How to authorize FortiOS-VM (FOSVM) to FortiMeter

[jasonhong]

Description	This article describes how to authorize FortiOS-VM (FOSVM) to FortiMeter.
Scope	FortiMeter, FortiManager.
Solution	FortiMeter allows users to view the volume and consumption of traffic that is used for FortiOS-VMs. Metered VMs require that users have a FortiMeter license and have linked that license with a FortiManager. To understand how FortiMeter works, refer to the below link: FortiMeter For the purpose of this demonstration, the goal will be to provision a FOS-VM instance and register it to the FortiMeter/FortiManager instance. Upon instantiation, a FOS-VM is provided with a permanent Serial Number. The FOS-VM license status is 'Valid', and is set with a 'FortiMeter grace period' value of 1 hour. FOS-VM (global) # get system status Version: FortiOS-VM64-KVM v7.0.5,build0304,220208 (GA)             <-----FOS-VM … Serial-Number: FOSVM1MC5T-***** … License Status: Valid … FOS-VM (global) # diag hard sysinfo vm full UUID:    ca6635439f6e430c84feda1d4cc1f858 Fortimeter grace period:3600 seconds <----- FortiMeter grace period set to 1 hour. Once FOSVM instantiation is completed, start to register it to the FortiManager instance by entering the FortiManager IP under Fabric Connector.   If the FOS-VM does not or cannot register to a FortiManager instance before the grace period timer elapses, then the license status becomes 'Invalid' and the FOS-VM ceases functioning: FOS-VM (global) # get system status Version: FortiOS-VM64-KVM v7.0.5,build0304,220208 (GA)             <-----FOS-VM … Serial-Number: FOSVM1MC5T-***** … License Status: Invalid … FOS-VM (global) # diag hard sysinfo vm full UUID:    ca6635439f6e430c84feda1d4cc1f858 Fortimeter grace period: 0 seconds <----- FortiMeter grace period goes to 0. Once the FOSVM is added to FortiManager (promoted), it can then be managed by the FortiMeter module. For the FOS-VM to become fully operational, it has to be authorized by FortiMeter. This can be done by editing the FOS-VM into FortiMeter and authorizing it to start processing traffic by assigning a license and possibly UTM services to it. Typical output of the 'get system status' and 'diag hardware sysinfo full' command output once a FOSVM has been authorized by FortiMeter. The FortiMeter grace period is set to 1296000 seconds which corresponds to 15 days. FOS-VM (global) # get system status Version: FortiOS-VM64-KVM v7.0.5,build0304,220208 (GA)             <-----FOS-VM … Serial-Number: FOSVM1MC5T-***** … License Status: Valid … FOS-VM (global) # diag hard sysinfo vm full UUID:    ca6635439f6e430c84feda1d4cc1f858 Fortimeter grace period: 12960000 seconds <-----FortiMeter grace period set to 15 days. Note: Fortinet has stopped production orders for FortiOS-VM (FortiMeter). The product life cycle details for FortiOS-VM (FortiMeter) is as below.