Fortigate Image For Gns3

Download and install Fortigate firewall image in GNS3. How to setup and deploy 'FortiOS.qcow2' in appliance GNS3. And you can do fortigate firewall training. GNS3 may be a free emulation tool, but it does not come with binary images for appliance such as that of Cisco, Palo Alto, Fortinet. Due to licensing restrictions, you or your organization needs to have a service contract agreement with the vendor. GNS3 Marketplace. One of the first place to check is the GNS3 Marketplace where you can search. FortiGate-VM08 FG-VM08, FG-VM08V FortiGate-VM ‘virtual appliance’. No VDOM by default for FG-VM08V model. FortiGate-VM16 FG-VM16, FG-VM16V FortiGate-VM ‘virtual appliance’. No VDOM by default for FG-VM016V model. FortiGate-VM32 FG-VM32, FG-VM32V FortiGate-VM ‘virtual appliance’. In the images directory we will need to find the exact software image or file that GNS3 was looking for. So you can just press 'ctrl + F' and type in the name 'FGTVM64GVM-v6-build0076-FORTINET' you should find a zip file with the name in it which you can download by clicking on the 'HTTPS' hyperlink once the file is downloaded you can extract it inside your downloads directory. Devices like Cisco (Routers, Switches, ASA, Nexus, ISE etc.), Checkpoint Firewall, Fortigate Firewall, Juniper Firewall & Router, various Windows & Linux Virtual Machines. I have also show how you can connect the devices to internet on GNS3, capture packets through Wireshark, troubleshooting techniques.

This post will guide you to download and deploy Fortinet Fortigate Image to EVE-NG Network Emulator. In this guide, I am using Windows 10 and EVE-NG in VmWare Player already configured and working properly. All the procedures are done in GUI, except for fix permission part.
Before we start, make sure you have all the requirements needed in the process below:
  • Working EVE-NG Network Emulator
  • Fortinet support account (It is free to register one)
  • WinSCP
  • SSH Client (Windows CMD with OpenSSH / PuTTY, etc)
Already have all the requirements? Let's start:

How to Download and Deploy Fortigate to EVE-NG Lab

  • Open your browser and go to Fortinet Support Site
  • Login or Register, it is free!!!
Login or Register, it is free!!!
Fortigate Image For Gns3
  • Navigate to 'Download > VM Images'
  • Select Product 'Fortigate' and Platform 'KVM'
  • Click New Deployment 'Download' button
Free Download Fortigate KVM image from Fortinet Support
  • Just wait until the download finish and move to deployment
  • Extract the downloaded Fortigate KVM image, you will have fortios.qcow2 file
  • Run your EVE-NG (if it is not already running)
  • Open WinSCP and browse your EVE-NG server (see the picture below)
Deploy Fortigate KVM image to EVE-NG Lab
  • Using WinSCP, on the right pane (EVE-NG server), browse to /opt/unetlab/addons/qemu
  • Create New Folder with the folder name must start with fortinet-, for example fortinet-FGT-v6-build1637 (Ref: EVE-NG Qemu image naming)
Create New Folder with the folder name must be fortinet-
  • Open the newly created folder and upload fortios.qcow2 to the folder
  • Rename fortios.qcow2 to virtioa.qcow2
Rename fortios.qcow2 to virtioa.qcow2 by right click
Next, fix permission using ssh client
This example is using Command Prompt from Windows 10 with OpenSSH enabled. This is the only CLI command you have to do.
  • Open CMD from Windows 10 ('Windows+r' type 'cmd' and enter)
  • Connect to your EVE-NG server using ssh command, for example:
  • Enter root password, default is 'eve'
  • Run this command to fix permission on EVE-NG server:
Next, fix permission using ssh client
All the procedures are done, now we can go to EVE-NG Lab from browser and add Fortigate node to your EVE-NG Lab
Add Fortigate node to your EVE-NG Lab
Default username for Fortigate device is admin without password, you will be force to create a password for admin at first boot.
The video for Download and Deploy Fortigate to EVE-NG Labis not ready yet, please subscribe to my YouTube Channel to get notified when the video is uploaded. Thank you.

Hello all, first i would like to thank the community for their interest in my first article about running FortiGate (FortiOS 5.6) in GNS3.

As per the many requests that i got for running FortGate with FortiOS 6 inside GNS3, this article will be about deploying FortiGate (FortiOS 6.2.3 which is currently the latest version) in GNS3. So let's get started!!

Requirements

For

---------------------------

  • Download GNS3 2.2.5 from Here
  • Download FortiGate appliance from Here
  • Download FortiGate 6.2.3 Image from Here
  • Deploy any VM that have a browser, in my case i deployed CentOS 7 with GUI on VMware and added it to GNS3.

---------------------------

Import Appliances & Images Older versions of garageband.

Fortigate Iso Image Download For Gns3

Start a new blank project, click File > Import Appliance, then choose the FortiGate appliance file (.gns3a)

Choose 'Run the appliance on the GNS3 VM(recommended)' option, then choose the Qemu settings and click Next. GNS3 will verify the VM requirements to run the appliance and a list of FortiGate versions should appears.

Under FortiGate 6.2.3 on the list, click on FGT_VM64_KVM-v6-build1010..., then import, then choose the file extracted from the FortiGate Image.

Fortigate Download

Note: In order for FortiGate to operate, it needs an empty harddisk

The harddisk can be created using linux tool called 'qemu-img' using the following command:

or you can download the file from Here .

To import the harddisk into GNS click on empty30G.qcow2 under FortiGate 6.2.3 on the list, then import and choose the harddisk file.

After importing the two files, FortiGate version 6.2.3 on list will indicate the status of 'Ready to install', make sure to click on the version number before clicking on next, otherwise you might get errors.


Appliance Deployment

After the installation is done, create a simple topology like the below.

Fortigate Image Download

New FortiGate VMs are configured to have DHCP enabled by default. in order to check the current IP of the FortiGate, open the console, set a new password, and type the below commands:

Then check for the 'IP' and 'allowaccess' parameters.

Fortigate Image For Gns3

In my case the IP is '192.168.101.129' and allow access is the protocols highlighted in green.

The final step is to open a browser and login to FortiGate.

Gns3 Sonicwall

and that's it, pretty simple!! let me know in case you have any comments or questions.

Gns3 Missing Files

Also let me know if you are interested in having FortiManager, FortiAnalyzer, FortiMail, FortiWeb, Forti.. in GNS3 in order to create articles for them.