Installing the PA 100 VM in VMware
Workstation 9.x
Johan Loos
johan@accessdenied.be
Version 1.0
Installing the PA 100 VM in VMware Workstation 9.x 2
Introduction
The PA 100-VM is a virtual firewall delivered as a VMware OVF. This is a way to package and
distribute virtual machines. This file contains all the files needed to run your file into a virtual
environment.
I’m not running a VMware ESXi in my environment, but I have a VMware workstation 9.x on
Windows 7 64-bit. When you buy a virtual instance of the firewall, you receive the
authorization codes from your reseller. When you import the files into VMware workstation,
two cores are reserved, 4 GB of RAM and two network adapters.
PA-VM
2
CPU
4 GBNIC 3 40 GB
VMware Workstation
NIC2NIC 1
The first network adapter is used for management, the second network adapter is used as
ethernet1/1 and the third network adapter is used as ethernet1/2. Additional network
adapters can be added and are used as Ethernet interfaces by the firewall. It is important
that these network adapters support vmxnet3. The can be verified in the virtual machine
configuration file (.vmx). The following steps describe how to install the VM and configure
your management access.
Installing the PA 100 VM in VMware Workstation 9.x 3
Obtaining the bits task list
Logon into the portal page on Palo Alto Networks
Register your device
Download and extract the source package
Import your VM firewall into VMware workstation
Configuring the management interface
Register your firewall
Update your device
Clone a licensed device
Managing the device
Logon into the portal page on Palo Alto Networks
Login with your username and password that you’ve used during registration
Register the device
Under Manage Devices, select My VM-Series Auth-Codes
Click on Add VM-Series Auth-Code
In the Auth Code text box, type the Authentication Code that you’ve received from
your reseller
Download and extract the source package
Click on Download link to download the package
After downloading the source package, the file phoenix-5.0.zip file is available
Extract this zip file to a temporary location
Installing the PA 100 VM in VMware Workstation 9.x 4
Import your VM firewall into VMware workstation
Start VMware Workstation
From the Menu, select File, Open and browse to your temporary location
Type a name for your virtual machine (PAN100VM), specify a storage location and
click Import
After you’ve imported the virtual machine, you can add additional network
adapter to your virtual firewall. In my configuration, I’ve added an additional
network adapter as you can see in following figure
Installing the PA 100 VM in VMware Workstation 9.x 5
After adding additional network adapters, be sure that these network adapters
are configured using vmxnet3. Browse to the location of your virtual firewall and
open the Virtual Machine Configuration file (PANVM100.vmx) as you can see in
the following figure:
The network adapters are configured as follow:
Configure the Management interface
Launch VMware Workstation and start the virtual machine PANVM100
Installing the PA 100 VM in VMware Workstation 9.x 6
Logon into your VM
After login, type Configure and press Enter
In Edit configuration mode, configure the management interface as in following figure
Type Commit
Register your firewall
Logon to the Palo Alto website
Under Manage Devices, select VM-Series Auth-Codes
Select Register VM, type the UUID and CPUID. These values can be found in the Web
UI | Dashboard | General Information and click on Register
After adding the above information click on Activate
Installing the PA 100 VM in VMware Workstation 9.x 7
Type the Authorization Code and click Activate
After successful activation, the following information is available
Download the PA-VM license file and import this file into your PA VM under Device |
Licenses | Upload
The management interface contact the updates server and download the updates
Upgrade your device
The device can be upgraded via a file or via the web UI.
Clone a licensed device
Two identifiers are used for each instance of the VM firewall. The Universally Unique ID
(UUID) and the CPU ID. The UUID is dedicated to each virtual machine and the CPU ID is not
unique since it belongs to the host CPU.
When you clone the VM, the UUID will change and the license is not valid anymore. The
reason is that the license is bound to the UUID/serial number of the firewall. You cannot run
two virtual machines with the same UUID.
Managing the device
Your firewall can be managed via a web browser. Configure a client computer within the
same address range as the management interface. Open a web browser and login into the
management UI.
本文档为【在vmware虚拟机中安装Paloalto下一代防火墙NGFW(英文)】,请使用软件OFFICE或WPS软件打开。作品中的文字与图均可以修改和编辑,
图片更改请在作品中右键图片并更换,文字修改请直接点击文字进行修改,也可以新增和删除文档中的内容。
该文档来自用户分享,如有侵权行为请发邮件ishare@vip.sina.com联系网站客服,我们会及时删除。
[版权声明] 本站所有资料为用户分享产生,若发现您的权利被侵害,请联系客服邮件isharekefu@iask.cn,我们尽快处理。
本作品所展示的图片、画像、字体、音乐的版权可能需版权方额外授权,请谨慎使用。
网站提供的党政主题相关内容(国旗、国徽、党徽..)目的在于配合国家政策宣传,仅限个人学习分享使用,禁止用于任何广告和商用目的。