Provision the VM-Series Firewall on the SDX Server
Access the SDX server.
Launch the web browser and connect to the SDX server.
Create the VM-Series firewall.
Allocate the total number of data interfaces that
you might require on the VM-Series firewall during initial deployment.
Adding or removing interfaces to the VM-Series firewall after initial
deployment will cause the data interfaces (Eth 1/1 and Eth 1/2)
on the VM-Series firewall to re-map to the adapters on the SDX server.
Each data interface sequentially maps to the adapter with the lowest
numerical value, and can therefore cause a configuration mismatch
on the firewall.
Palo Alto VM-Series
Enter a name for the VM-Series firewall.
Select the .xva image that you uploaded earlier. This
image is required to provision the firewall.
Allocate the memory, additional disk space, and the
virtual CPUs for the VM-Series firewall. To verify resource allocation
recommendations, see VM-Series
on SDX System Requirements.
Select the network interfaces:
Use the management interfaces 0/1 or 0/2 and assign
an IP address, netmask, and gateway IP address.
needed, you can use a data interface on the SDX server for managing
Select the data interfaces that
will be used for handling traffic to and from the firewall.
you plan to deploy the interfaces as Layer 2 or virtual wire interfaces,
select the Allow L2 Mode option so that the firewall can receive
and forward packets for MAC addresses other than its own MAC address.
Review the summary and click
begin the installation process. It takes 5-8 minutes to provision
the firewall. When completed, use the management IP address to launch
the web interface of the firewall.