Add a Service Chain

A service chain is a grouping of services set in logical sequence. When traffic is redirected to the service chain, it moves through each service in the order you configure.
  1. Select
    Security
    Network Introspection Settings
    Service Chains
    Add Chain
    .
  2. Enter a descriptive
    Name
    and
    Description
    (
    optional
    ) for your service chain.
  3. Select the
    Service Segment
    that you applied when you deployed the VM-Series firewall.
  4. Set the forward path. The service chain is a logical sequence of service profiles, so traffic moves through the services in the order you specify as the forward path.
    1. Select
      Set Forward Path
      Add Profile in Sequence
      .
    2. Select a service profile. The service column is populated automatically based on the service profile you select.
    3. Click
      Add
      .
    4. (
      Optional
      ) If you have other partner service profiles in your NSX-T environment, click
      Add Profile in Sequence
      to add them to this service chain.
      You can select only one service profile per service definition.
    5. Click
      Save
      when you have finished adding service profiles.
      nsxt-ew-set-forward-path-3.0.png
  5. In the Reverse Path column, check
    Inverse Forward
    Path
    for return traffic to move through the service chain in reverse order.
  6. (
    Optional
    ) If other partner service profiles are selected, set a reverse path.
    You must select the same VM-Series service profile set in the Forward Path.
    1. Select
      Set Reverse Path
      Add Profile in Sequence
      .
    2. Select a service profile. The service column is populated automatically based on the service profile you select.
    3. Click
      Add
      .
    4. (
      Optional
      ) If you have other, service profiles in your NSX-T environment, click
      Add Profile in Sequence
      to add them to this service chain.
    5. Click
      Save
      when you have finished adding service profiles.
  7. Set the
    Failure Policy
    Allow
    or
    Block
    . This defines the action NSX-T takes if a service profile fails.
  8. Click
    Save
    .

Recommended For You