Learn how to deploy the VM-Series firewall on VMware
After completing the configuration on Panorama,
perform the following procedure to launch the VM-Series firewall
in your NSX-T Data Center.
When deploying the VM-Series firewall
on NSX-T in high availability, both firewalls are deployed to the
same Device Group and Template Stack.
Log in to NSX-T Manager.
Select your service definition from the
Enter a descriptive
Service Deployment Name
your VM-Series firewall.
Select a tier-0 or tier-1 router under
. NSX-T Manager attaches the VM-Series firewall
to the selected router and redirects traffic passing through that
router to the VM-Series firewall for inspection. You must select
a router with no service insertion attached.
compute manager is the vCenter server managing your datacenter.
. You can deploy
the VM-Series firewall on any cluster that does not include any
Edge Transport Nodes.
Configure your network settings.
Primary Interface Network
Primary Interface IP
Primary Gateway Address
Primary Subnet Mask
NSX-T Manager prepopulates the
on the Partner Service you selected.
or Block. The failure policy defines how NSX-T Manager handles traffic
that is directed to the VM-Series firewall if the firewall becomes
your VM-Series firewall—Standalone or High Availability. If you
have an edge node cluster and select High Availability, NSX-T Manager
will deploy an additional VM-Series firewall on the standby edge
node in addition to the firewall deployed on the active edge node.