Deploy the VM-Series Firewall in a Multi-NSX-V Manager Environment

Whether you are deploying a single NSX-V Manager or a multi-NSX-V Manager environment, set up the connection between an NSX-V Manager and Panorama before you continue on to set up the next NSX-V Manager with Panorama.
  1. Install the VMware NSX-V Plugin version 2.0 as it allows you to connect up to 16 NSX-V Managers. This version of the plugin allows you to add more than one Service Manager to your VM-Series firewall for NSX-V configuration on Panorama.
  2. Create Template(s) and Device Group(s) on Panorama. Device groups and template stacks push the security policy and network settings to the VM-Series firewalls in each ESXi cluster.
    When configuring policy rules and objects, verify that you have selected the correct device group.
    multi-nsx-device-group-selection.png
    When configuring network and device settings, verify that you have selected the correct template stack.
    multi-nsx-template-selection.png
  3. Create the Service Definitions on Panorama and attach them to the service manager. Each service definition can reference one device group and one template stack. Panorama supports up to 32 service definitions across all service managers.
    multi-nsx-service-definitions.png
  4. Configure dynamic address groups or security groups and redirect traffic to the VM-Series firewall.
    Verify that you have selected the correct device group so the right steering rules are sent to the corresponding NSX-V Manager.
  5. Deploy the Palo Alto Networks NGFW Service on each ESXi cluster by using the relevant service definitions.
    multi-nsx-install-vmseries-fw.png
  6. Repeat this process for each NSX-V Manager.
    1. Select
      Panorama
      VMware NSX-V
      Service Managers
      and click
      Add
      .

Related Documentation