AWS China SDN Connector

AWS中国区SDN Connector​

Fortigate使用AWS SDN connector自动更新AWS的动态地址,包括将AWSExamples of attributes map toFortiOSThe dynamic address block,FortigateAdjust strategy according to the dynamic resource group control object.​

Fortigate支持AWS多个SDN connector连接方式,​

1. Based on the access key authenticationSDN connector ,支持非AWS外部Fortigate连接​
2. 基于IAM role SDN connector,仅支持AWS平台上的Fortigate-vm​
3. AWS Kubernets SDN connector​
4. GuardDuty 威胁源connector​

一、Based on the access key authentication SDN connector ​

Based on the access key authenticationSDN connector 是与AWSOne of the docking platform of the configuration way,On the edge of the enterprise network or base it on the cloud platformFortigateMay be read authorization connection inAWSService resources.​

1创建访问密钥​

在AWS管理平台IAM服务,For the user to create access key​

IAM>访问管理>用户>安全证书>创建访问密钥​

Download to visit close,包含访问密钥IDAnd the private access key​

2在Fortigate上创建SDN connector​

Security fabric > 外部连接器>新建>AWS网络服务​

填入密钥ID和私有访问密钥,Name can be filledAWS任意区域​

中国宁夏区：cn-northwest-1​

中国北京区：cn-north-1​

VPC IdDon't fill asked for authorization to remember allVPC,单填一个VPC只访问一个VPC资源​

SDN connector 连接成功​

3 Create dynamic address block​

Can be created based on the architecture、标签、实例类型、自定义TAG Attributes such as creating dynamic address block,SDNAddress type select private,Are to obtain the address of the firm and private address,Address type is public,Get the address for the binding of elasticIP.​