Manage the vSRX Virtual Firewall Instance on KVM
Each vSRX Virtual Firewall instance is an independent VM that you can power on, pause, or shut down. You can manage the vSRX Virtual Firewall
VM with multiple tools, including virt-manager and virsh.
Power On the vSRX Virtual Firewall Instance with virt-manager
To power on the vSRX Virtual Firewall instance with virt-manager:
Power On the vSRX Virtual Firewall Instance with virsh
To power on the vSRX Virtual Firewall instance with virsh:
Use the virsh start command on the host OS to start a vSRX Virtual Firewall VM.
user@host# virsh start vSRX-kvm-2
Domain vSRX-kvm-2 started
Pause the vSRX Virtual Firewall Instance with virt-manager
To pause the vSRX Virtual Firewall instance with virt-manager:
- Launch
virt-manager. - Check the vSRX Virtual Firewall instance you want to pause.
- From the icon bar, select the power on pause icon. The vSRX Virtual Firewall VM pauses.
Pause the vSRX Virtual Firewall Instance with virsh
To pause the vSRX Virtual Firewall instance with virsh:
Use the virsh suspend command on the host OS to pause
a vSRX Virtual Firewall VM.
user@host# virsh suspend vSRX-kvm-2
Domain vSRX-kvm-2 suspended
Rebooting the vSRX Virtual Firewall Instance with virt-manager
To reboot the vSRX Virtual Firewall instance with virt-manager:
Reboot the vSRX Virtual Firewall Instance with virsh
To reboot the vSRX Virtual Firewall VM with virsh:
- Use the
virsh consolecommand on the host OS to connect to the vSRX Virtual Firewall VM. - On the vSRX Virtual Firewall console, use the
request system rebootcommand to reboot Junos OS and the vSRX Virtual Firewall VM.
user@host# virsh console vSRX-kvm-2
Connected to domain vSRX-kvm-2
vsrx# request system reboot
Power Off the vSRX Virtual Firewall Instance with virt-manager
To power off the vSRX Virtual Firewall instance with virt-manager:
Power Off the vSRX Virtual Firewall Instance with virsh
To power off the vSRX Virtual Firewall instance with virsh:
- Use the
virsh consolecommand on the host OS to connect to the vSRX Virtual Firewall VM. - On the vSRX Virtual Firewall console, use the
request system power-offcommand to power off Junos OS and the vSRX Virtual Firewall VM.
user@host# virsh console vSRX-kvm-2
Connected to domain vSRX-kvm-2
vsrx# request system power-off
Shutdown the vSRX Virtual Firewall Instance with virt-manager
In situations where you want to edit and modify the vSRX Virtual Firewall VM XML file, you need to completely shut down vSRX Virtual Firewall and the associated VM.
To gracefully shutdown the vSRX Virtual Firewall instance with virt-manager:
Do not use Force Reset or Force Off on any active VM as it may create file corruptions.
Shutdown the vSRX Virtual Firewall Instance with virsh
In situations where you want to modify the vSRX Virtual Firewall VM XML file, you need to completely shut down vSRX Virtual Firewall and the associated VM.
To gracefully shutdown the vSRX Virtual Firewall instance with virsh:
- Use the
virsh consolecommand on the host OS to connect to the vSRX Virtual Firewall VM. - On the vSRX Virtual Firewall console, use the
request system power-offcommand to power off Junos OS and the vSRX Virtual Firewall VM. - On the host OS, use the
virsh shutdowncommand to shut down the VM after vSRX Virtual Firewall has powered off.
user@host# virsh console vSRX-kvm-2
Connected to domain vSRX-kvm-2
vsrx# request system power-off user@host# virsh shutdown vSRX-kvm-2
Do not use the virsh destroy command on any
active VM as it may create file corruptions.
Remove the vSRX Virtual Firewall Instance with virsh
In situations where you want to completely remove the vSRX Virtual Firewall instance, you need to destroy the vSRX Virtual Firewall VM and undefine the associated XML file.
To completely remove the vSRX Virtual Firewall instance with virsh:
- On the host OS, use the
virsh destroycommand to destroy the vSRX Virtual Firewall VM. - On the host OS, use the
virsh undefinecommand to undefine the vSRX Virtual Firewall XML file.
user@host# virsh destroy vSRX-kvm-2 user@host# virsh undefine vSRX-kvm-2