Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Upload the vSRX Virtual Firewall Image

Contrail integrates with OpenStack for public, private, or hybrid cloud orchestration. You can install the vSRX Virtual Firewall image and use this installed image to provide security services in a service chain with Contrail.

Before installing vSRX Virtual Firewall, ensure that you have installed either Contrail and, optionally, OpenStack Glance.

You can upload the vSRX Virtual Firewall image with either Horizon, the OpenStack GUI dashboard, or Glance, the OpenStack CLI-based image services project.

Note:

To upgrade an existing vSRX Virtual Firewall instance, see Migration, Upgrade, and Downgrade in the vSRX Virtual Firewall Release Notes.

Upload the vSRX Virtual Firewall Image with OpenStack Horizon

To upload a vSRX Virtual Firewall image with Horizon:

  1. From the Horizon GUI, select your project, and select Compute>Images. The list of existing images appears, as shown in Figure 1.
    Figure 1: OpenStack ImagesOpenStack Images
  2. Click Create Image. The Create Image dialog box appears, as shown in Figure 2.
    Figure 2: Create an ImageCreate an Image
  3. Enter a name for the vSRX Virtual Firewall image, and enter the image location.
  4. Select QCOW2- QEMU Emulator from the Format list.
  5. Enter the appropriate value in the Minimum Disk (GB) box for your configuration. The minimum required for vSRX Virtual Firewall is 20 GB.
  6. Enter the appropriate value in the Minimum RAM (MB) box. The minimium required for vSRX Virtual Firewall is 4096 MB.
  7. Select Public.
  8. Click Create Image. OpenStack uploads the image to the image service. The image appears on the Images tab.
Note:

The default vSRX Virtual Firewall VM login ID is root with no password. By default, vSRX Virtual Firewall is assigned a DHCP-based IP address if a DHCP server is available on the network.

Upload the vSRX Virtual Firewall Image with the OpenStack Glance CLI

To upload a vSRX Virtual Firewall image with the Glance CLI:

  1. Log in to the appropriate OpenStack compute node.
  2. Use wget to download the vSRX Virtual Firewall image to the compute node.
  3. Use glance image-create to add the image to the image service with a base configuration for disk, format, and memory requirements. Use glance help image-create for complete details on this command-line tool.

    For example, the following command adds the vSRX Virtual Firewall QCOW2 image to the image service with 20 GB disk space and 4096 MB of RAM:

    glance image-create --name='vSRXimage' --is-public=true --container-format=bare --disk-format=qcow2 --min-disk=20 --min-ram=4096 --file=media-srx-ffp-vsrx-vmdisk-15.1X49-D120.qcow2

    Note:

    vSRX Virtual Firewall requires at least 20 GB of disk space and 4096 MB of RAM.

Note:

The default vSRX Virtual Firewall VM login ID is root with no password. By default, vSRX Virtual Firewall is assigned a DHCP-based IP address if a DHCP server is available on the network.

Related Documentation