Deploy the VM-Series Firewall

Log in to NSX-T Manager.
Select
Advanced Networking & Security
Partner Services
Catalog
.
Select the
Registered Service
that matches the service definition to be deployed.
Select the VM-Series firewall image from the drop-down in the Registered Service entry.

Click
Deploy
under the registered service for the service definition you want to use to launch the firewall.
Click
Proceed
.
Enter the Partner Service details. This information tells NSX-T Manager which Partner Service and logical router to use when deploying the VM-Series firewall.
Enter a descriptive

Instance Name

for your VM-Series firewall.

NSX-T Manager prepopulates the

Partner Service

field. Selecting a Partner Service populates the

Deployment Specification

field.

Click the

Logical Router

field and select a tier-0 or tier-1 router. NSX-T Manager attaches the VM-Series firewall to the selected router and redirects traffic passing through that router to the VM-Series firewall for inspection. You must select a router with no service insertion attached.

Click

Next

.


Configure resource and storage settings.
Select a

Compute Manager

. The compute manager is the vCenter server managing your datacenter.

Select a

Cluster

. You can deploy the VM-Series firewall on any cluster that does not include any Edge Transport Nodes.

(

Optional

) Select the Resource Pool if you have created any on vCenter server.

Select a

Datastore

.



Select the

Deployment Mode

for your VM-Series firewall—Standalone or High Availability.

Set the

Failure Policy

to Allow or Block. The failure policy defines how NSX-T Manager handles traffic that is directed to the VM-Series firewall if the firewall becomes unavailable.

Enter the

IP Address,

Gateway

,

Subnet Mask

, and

Network ID

for the VM-Series firewall management port.

If you are deploying the VM-Series firewall in HA mode, repeat the previous step for secondary firewall instance.

Click

Next

.


Click on the
Deployment Template
field and select a deployment template. Choosing a deployment template automatically populates the template properties.
Do not edit the Template Property settings
.

Click
Finish
to deploy the VM-Series firewall.