Direct Traffic to the VM-Series Firewall

Log in to NSX-T Manager.
Select
Advanced Networking & Security
Partner Services
Service Instances
.
Select your service instance and click
Traffic Redirection
.
Click the first default redirection rule.
Click
Add Section
and select
Add Section Above
from the drop-down.
Enter a descriptive
Section Name
.
Click
OK
.
Select your newly created section.
Click
Add Rule
.
If your NSX-T environment has Edge Nodes in active-standby HA, you must create a redirect rule for each Edge Node. NSX-T does not automatically apply a redirect rule to the standby node in the event of a failover.
Click on the
Name
field and enter a descriptive name for the rule.

By default, the source is set to Any. Complete the following steps to specify a different source.
Click on the edit button ( ) in the source column and click

Edit Rule Source/Extended Source

.

To specify container objects, click

Container Objects

.

Select an
Object Type
from the drop-down.
Select the an
Available Objects
.
Move the select objects to the Selected Objects column.

To specify IP Addresses, click

IP Addresses

.

Click
Add
.
Enter an IP address or IP address range.

Click

OK

.


By default, the destination is set to Any. Complete the following steps to specify a different destination.
Click on the edit button ( ) in the destination column and click

Edit Rule Destination

.

To specify container objects, click

Container Objects

.

Select an
Object Type
from the drop-down.
Select the an
Available Objects
.
Move the select objects to the Selected Objects column.

To specify IP Addresses, click

IP Addresses

.

Click
Add
.
Enter an IP address or IP address range.

Click

OK

.


By default, Any service is redirected to the firewall. Complete the following steps to specify certain services and protocols.
Click on the edit button ( ) in the destination column and click

Edit Rule Service

.

To specify container objects, click

Service/Service Groups

.

Select any
Available Objects
.
Move the select objects to the Selected Objects column.

To specify IP Addresses, click Raw Port-Protocols.

Click
Add
.
Select a
Type of Service
from the drop-down.
Select a
Protocol
from the drop-down.
Depending on the type of service and protocol you choose, there might be additional information required. Complete any additional fields.
Click
OK
.

Click

OK

.


Click the
Applied To
field and select the router to which the VM-Series firewall is attached from the drop-down.

Select
Redirect
from the
Action
drop-down to send traffic to your VM-Series firewall.

Enable
the rule.

Click
Publish
. NSX-T Manager publishes the redirection rule you just created and automatically creates a reflexive rule for return traffic. The reflexive rule does not appear in the NSX-T Manager web interface.
If return traffic is not directed to the VM-Series firewall, manually configure a traffic redirection rule for return traffic.