Archives July 2024

Step 1: Prepare Proxmox Nodes

1. Update and Upgrade Proxmox VE on all nodes:

apt update && apt full-upgrade -y

2. Ensure that all nodes have the same version of Proxmox VE:

pveversion

Step 2: Set Up the Proxmox Cluster

1. Create a new cluster on the first node:
   • pvecm create my-cluster
2. Add the other nodes to the cluster:
   • pvecm add <IP_of_first_node>
3. Verify the cluster status:
   • pvecm status

Step 3: Install Ceph on Proxmox Nodes

1. Install Ceph packages on all nodes:

install ceph ceph-mgr -y

Step 4: Create the Ceph Cluster

1. Initialize the Ceph cluster on the first node:
   • pveceph init --network <cluster_network>
2. Create the manager daemon on the first node:
   • pveceph createmgr

Step 5: Add OSDs (Object Storage Daemons)

1. Prepare disks on each node for Ceph OSDs:
   • pveceph createosd /dev/sdX
2. Repeat the process for each node and disk.

Step 6: Create Ceph Pools

1. Create a Ceph pool for VM storage:
   • pveceph pool create mypool 128

Step 7: Configure Proxmox to Use Ceph Storage

1. Add the Ceph storage to Proxmox:
   • Navigate to Datacenter > Storage > Add > RBD.
   • Enter the required details like ID, Pool, and Monitor hosts.
   • Save the configuration.

Step 8: Enable HA (High Availability)

1. Configure HA on Proxmox:
   • Navigate to Datacenter > HA.
   • Add resources (VMs or containers) to the HA manager.
   • Configure the HA policy and set desired node priorities.

Step 9: Testing High Availability

1. Simulate node failure: Power off one of the nodes and observe how the VMs or containers are automatically migrated to other nodes.

Step 10: Monitoring and Maintenance

1. Use the Proxmox and Ceph dashboards to monitor the health of your cluster.
2. Regularly update all nodes to ensure stability and security.

Optional: Additional Ceph Configuration

1. Add Ceph Monitors for redundancy:bashKodu kopyalapveceph createmon
2. Add more Ceph MDS (Metadata Servers) if using CephFS:bashKodu kopyalapveceph createmds
3. Tune Ceph settings for performance and reliability based on your specific needs.

By following these steps, you will have a robust Proxmox VE and Ceph high availability setup, ensuring that your VMs and containers remain highly available even in the event of hardware failures.

1. Downloading Free FortiGate VM

Fortinet offers a free version of FortiGate VM for various hypervisors including VMware, Hyper-V, KVM, and more. Follow these steps to download it:

1. Visit the Fortinet Support Portal:
   • Go to Fortinet Support.
   • Log in or create a new account if you don’t have one.
2. Download the FortiGate VM:
   • Navigate to the “Download” section.
   • Select “VM Images” and choose the appropriate hypervisor (e.g., VMware ESXi, Microsoft Hyper-V, etc.).
   • Download the FortiGate VM package.

2. Deploying FortiGate VM on Your Hypervisor

The deployment process may vary slightly depending on your hypervisor. Below are steps for VMware ESXi:

1. Deploy OVF Template:
   • Open your VMware vSphere Client.
   • Right-click on your desired host or cluster and select “Deploy OVF Template.”
   • Follow the wizard, selecting the downloaded FortiGate VM OVF file.
   • Configure the VM settings (name, datastore, network mapping, etc.).
   • Finish the deployment process.
2. Power On the VM:
   • Once the deployment is complete, power on the FortiGate VM.

3. Initial Configuration

1. Access the FortiGate Console:
   • Use the vSphere Client to open the console of the FortiGate VM.
   • The initial login credentials are usually admin for the username and a blank password.
2. Set the Password:
   • You will be prompted to set a new password for the admin user.
3. Configure the Management Interface:
   • Assign an IP address to the management interface.
   • Example commands:

config system interface
edit port1
set ip 192.168.1.99/24
set allowaccess http https ping ssh
next
end

1. Access the Web Interface:
   • Open a web browser and navigate to https://<management-ip>.
   • Log in with the admin credentials.

4. Basic Setup via Web Interface

1. System Settings:
   • Navigate to System > Settings.
   • Set the hostname, time zone, and DNS servers.
2. Network Configuration:
   • Configure additional interfaces if needed under Network > Interfaces.
   • Create VLANs, set up DHCP, etc.
3. Security Policies:
   • Define security policies to control traffic flow under Policy & Objects > IPv4 Policy.
   • Set source and destination interfaces, addresses, and services.
4. Enable Features:
   • Enable and configure additional features like IPS, Antivirus, Web Filtering, etc., under Security Profiles.

5. Connecting to the Internet

1. WAN Interface Configuration:
   • Configure the WAN interface with the appropriate settings (static IP, DHCP, PPPoE, etc.).
2. Routing:
   • Set up a default route under Network > Static Routes pointing to the WAN gateway.
3. NAT Configuration:
   • Configure NAT settings under Policy & Objects > NAT.

6. Licensing

• The free version of FortiGate VM comes with limited features. For full functionality, you may need to purchase a license and activate it under System > FortiGuard.