End-of-Life (EoL)

Provision the VM-Series Firewall on a Hyper-V host with Hyper-V Manager

Use these instructions to deploy the VM-Series firewall on Hyper-V using Hyper-V Manager.
  1. Download the VHDX file.
    Register your VM-Series firewall and obtain the VHDX file.
    1. Filter by
      PAN-OS for VM-Series Base Images
      and download the VHDX file. For example, PA-VM-HPV-7.1.0.vhdx.
  2. Set up any vSwitch(es) that you will need.
    To create a vSwitch:
    1. From Hyper-V Manager, select the host and select
      Virtual Switch Manager
      to open the Virtual Switch Manager window.
    2. Under
      Create virtual switch
      , select the type of vSwitch (external, internal, or private) to create and click
      Create Virtual Switch
  3. Install the firewall.
    1. On the Hyper-V Manager, select the host and select
      Virtual Machine.
      Configure the following settings in the New Virtual Machine Wizard:
      1. Choose a
        for the VM-Series firewall. The VM-Series firewall stores the VHDX file at the specified location.
      2. Choose
        Generation 1
        . This is the default option and the only version supported.
      3. For
        Startup Memory
        , assign the memory based on the VM-Series System Requirements of your VM-Series model.
        Do not enable dynamic memory; the VM-Series firewall requires static memory allocation.
      4. Configure
        . Select an external vSwitch to connect the management interface on the firewall.
      5. To connect the
        Virtual Hard Disk
        , select
        Use an existing virtual hard disk
        and browse to the VHDX file you downloaded earlier.
      6. Review the summary and click
    2. Assign virtual CPUs to the firewall.
      1. Select the VM you created and navigate to
      2. Select
        and enter the minimum number of CPUs based on the VM-Series System Requirements of your VM-Series model..
      3. Click
  4. Connect at least one network adapter for the dataplane interface on the firewall.
    1. Select
      Add Hardware
      and select the
      Hardware type
      for your network adapter.
      Legacy Network Adapter and SR-IOV are not supported. If selected, the VM-Series firewall will boot into maintenance mode.
    2. Click
  5. (
    ) Enable MAC address spoofing on Hyper-V if you are not using Layer 3 with hypervisor assigned MAC address.
    1. Double click the dataplane virtual network adapter and click
      Advanced Settings
    2. Click the
      Enable MAC address spoofing
      check box and click
  6. Power on the firewall.
    Select the firewall from the list of
    Virtual Machines
    and navigate to
    to power on the firewall.

Recommended For You