Choose a Bootstrap Method

You can bootstrap the firewall with a or a .
A
basic
configuration is a minimal configuration that enables you to launch, license, and register the VM-Series firewall, and connect with Panorama, if applicable. To do this you enter configuration parameters as key-value pairs.
A
complete
configuration includes everything you need to fully configure the firewall at boot up. This includes the basic configuration ( init-cfg.txt), content updates, and software versions. A complete configuration can include both init-cfg.txt and bootstrap.xml files.
See the VM-Series firewall bootstrap workflow to compare the workflow for the basic and complete configurations.

Basic Configuration

A basic configuration includes the initial configuration and licenses. You can use the bootstrap package to pass the key-value pairs for the initial configuration, or you can enter the bootstrap parameters key-value pairs as user data.
If you do not use Panorama, you can use the initial configuration to bootstrap the firewall, then log in and complete the configuration manually. If you use Panorama, your initial configuration must include bootstrap parameters for the IP addresses for your Panorama servers and the VM Auth Key so the bootstrapped firewall can register with Panorama and complete the full configuration.

Add a Basic Configuration to the Bootstrap Package

The initial configuration is a minimal configuration that enables you to launch, license, and register the VM-Series firewall, and connect with Panorama, if applicable. You deliver the configuration (init-cfg.txt) in the bootstrap package.

Enter a Basic Configuration as User Data (AWS, Azure, or GCP)

When you deploy the VM-Series firewall from the AWS, Azure, or GCP user interface, you can enter the configuration parameters as user data during the launch/deployment process.If you have sufficient permissions to deploy a firewall from your cloud account, and access Panorama (if you are using it), you can skip creating a bootstrap package, creating configuration files, and other bootstrap tasks related to cloud storage (a storage bucket, IAM roles, or service accounts that grant external access to storage).
Configuration parameters include the values in init-cfg.txt File Components, and two additional values only available as user data:
  • authcodes
    —The authcode use to register the VM-Series firewall. For example,
    authcodes=I7115398
    .
  • mgmt-interface-swap
    —Used to swap the management interface when the VM-Series firewall is behind a load balancer in an AWS or GCP deployment. For example,
    mgmt-interface-swap=enable
    .
You can enter configuration parameters as key-value pairs directly into the AWS or GCP user interface. You can also define the configuration from text file or a cloud-native template, such as an AWS Cloud Formation template, Azure ARM template, a GCP YAML file, or a Terraform template.
Each cloud has a different term for user data, and uses different separators between bootstrap parameters.
  • AWS User Data
    —semicolon, or newline (\n). If a parameter has more than one option, separate options with a comma. For example:
    type=static; ip-address=10.*.*.19; default-gateway=10.*.*.1; netmask=255.255.255.0; op-command-modes=mgmt-interface-swap,jumbo-frame; vm-series-auto-registration-pin-id=abcdefgh1234****; vm-series-auto-registration-pin-value=zyxwvut-0987****
    type=dhcp-client op-command-modes=mgmt-interface-swap,jumbo-frame vm-series-auto-registration-pin-id=abcdefgh1234**** vm-series-auto-registration-pin-value=zyxwvut-0987****
  • Azure Custom Data
    —semicolon. If a parameter has more than one option, separate options with a comma. For example:
    type=static; ip-address=10.*.*.19; default-gateway=10.*.*.1; netmask=255.255.255.0; op-command-modes=mgmt-interface-swap,jumbo-frame; vm-series-auto-registration-pin-id=abcdefgh1234****; vm-series-auto-registration-pin-value=zyxwvut-0987****
  • GCP Custom Metadata
    —In a file, such as a YAML file or Terraform template, use a newline (\n) for each parameter, and if a parameter has multiple options, use commas to separate them. For example:
    type=dhcp-client op-command-modes=mgmt-interface-swap,jumbo-frame vm-series-auto-registration-pin-id=abcdefgh1234**** vm-series-auto-registration-pin-value=zyxwvut-0987****

Complete Configuration

A complete configuration ensures the firewall is fully configured on boot up. The bootstrap.xml file includes the initial configuration, licenses, software, content, and a version of the VM-Series plugin. You can create
bootstrap.xml
manually or you can export an existing configuration, as described in Create the bootstrap.xml File.

Recommended For You