Provision the VM-Series Firewall on a Hyper-V host with Hyper-V Manager

Use these instructions to deploy the VM-Series firewall on Hyper-V using Hyper-V Manager.
  1. Download the VHDX file.
    Register your VM-Series firewall and obtain the VHDX file.
    1. Filter by
      PAN-OS for VM-Series Base Images
      and download the VHDX file. For example, PA-VM-HPV-7.1.0.vhdx.
  2. Set up any vSwitch(es) that you will need.
    To create a vSwitch:
    1. From Hyper-V Manager, select the host and select
      Action
      Virtual Switch Manager
      to open the Virtual Switch Manager window.
    2. Under
      Create virtual switch
      , select the type of vSwitch (external, internal, or private) to create and click
      Create Virtual Switch
      .
  3. Install the firewall.
    1. On the Hyper-V Manager, select the host and select
      Action
      New
      Virtual Machine.
      Configure the following settings in the New Virtual Machine Wizard:
      1. Choose a
        Name
        and
        Location
        for the VM-Series firewall. The VM-Series firewall stores the VHDX file at the specified location.
      2. Choose
        Generation 1
        . This is the default option and the only version supported.
      3. For
        Startup Memory
        , assign the memory based on the VM-Series System Requirements of your VM-Series model.
        Do not enable dynamic memory; the VM-Series firewall requires static memory allocation.
      4. Configure
        Networking
        . Select an external vSwitch to connect the management interface on the firewall.
      5. To connect the
        Virtual Hard Disk
        , select
        Use an existing virtual hard disk
        and browse to the VHDX file you downloaded earlier.
      6. Review the summary and click
        Finish
        .
    2. Assign virtual CPUs to the firewall.
      1. Select the VM you created and navigate to
        Action
        Settings
        .
      2. Select
        Processor
        and enter the minimum number of CPUs based on the VM-Series System Requirements of your VM-Series model..
      3. Click
        OK
        .
  4. Connect at least one network adapter for the dataplane interface on the firewall.
    1. Select
      Settings
      Hardware
      Add Hardware
      and select the
      Hardware type
      for your network adapter.
      Legacy Network Adapter and SR-IOV are not supported. If selected, the VM-Series firewall will boot into maintenance mode.
    2. Click
      OK
      .
  5. (
    Optional
    ) Enable MAC address spoofing on Hyper-V if you are not using Layer 3 with hypervisor assigned MAC address.
    1. Double click the dataplane virtual network adapter and click
      Advanced Settings
      .
    2. Click the
      Enable MAC address spoofing
      check box and click
      Apply
      .
  6. Power on the firewall.
    Select the firewall from the list of
    Virtual Machines
    and navigate to
    Action
    Start
    to power on the firewall.

Recommended For You