Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation

Solutions

Featured solutions AI Campus and branch Data center WAN Security Service provider Cloud operator Industries
Campus and Branch

Welcome to the NOW Way to Wi-Fi

Take your networking performance to new heights with a modern, cloud-native, AI-Native architecture. Only Juniper can help you unleash the full potential of Wi-Fi 7 with our AI-Native platform for innovation.
Prepare for liftoff
Business intelligence analyst dashboard on virtual screen. Big data Graphs Charts.

AI Data Center Networking

Juniper’s AI data center solution is a quick way to deploy high performing AI training and inference networks that are the most flexible to design and easiest to manage with limited IT resources.
Find out more
Enterprise AI-Native Networking

Enterprise AI‑Native Routing

Juniper's Ai-Native routing solution delivers robust 400GbE and 800GbE capabilities for unmatched performance, reliability, and sustainability at scale.
Explore enterprise routing
Zero trust security

Ops4AI Lab

Visit our lab in Sunnyvale, CA and see our AI data center solution for yourself. You can try out your own model’s functionality and performance, too.
Visit the lab
Enterprise AI-Native Networking

Enterprise AI‑Native Routing

Juniper's Ai-Native routing solution delivers robust 400GbE and 800GbE capabilities for unmatched performance, reliability, and sustainability at scale.
Explore enterprise routing
Higher Education

Shaping Student Experiences: The NOW Way to Build Higher Education Networks

Join Juniper Networks CIO Sharon Mandell and a virtual summit of C-level IT leaders from prestigious institutions as they discuss ongoing efforts to support digital transformation.
Register to attend
Hand on tablet with healthcare overlay of graphics

Security in healthcare

In this IDC Spotlight report, discover how AI networking can automate and strengthen a healthcare ecosystem to defeat criminals and prevent loss. 
Gain insights into ecosystem security
Retail

The Future of In-Store Technologies

Join us for an enlightening webinar with Kevin McCartan, Senior IT Service Delivery Engineer at Musgrave; retail guru Jack Stratten of Insider Trends; and Christian Gilby, Director of Product Marketing at Juniper Networks, as they discuss the future of in-store technologies.
Reserve my spot

Products

Wireless access Wired access SD-WAN / SASE Routing and switching Security Mist AI™ Management software Network operating system Blueprint for AI-Native Acceleration Optics
  • Operations
ACX7020 router

Juniper ACX7020 Cloud Metro Access Router

Legacy networks simply cannot meet the demands of today’s rapidly evolving metro landscape. Unlock a new generation of highly scalable architectures and automated operations with the Juniper ACX7020. 
Learn more
EX4000 Ethernet Switch

Next-gen AI-Native EX4000 line of switches

Lack of AI innovation from your current networking vendor slowing you down? Embrace Juniper’s cloud-native, AI-Native access switches that support every level and layer, across nearly every deployment.
Discover how
The Q and AI text with an image of Bob Friday and Kedar Dhuru.

The Q&AI Podcast

Delivering practical solutions and enriching discussions, this podcast series is a vital resource for those seeking an in-depth exploration of AI's transformative potential.
Catch the latest episode

Services

Services
Services AI Care

Juniper AI Care Services Revolutionize Your Service Experience

Our industry-first AI-Native services couple AIOps with our deep expertise across the full network life cycle. You can move from reactive response to proactive insight and action.
Explore AI Care Services
Services AI Data Center

Juniper AI Data Center Deployment Services Optimize Your AI Model Runs

We use our expertise and validated designs to help design, deploy, validate and tune networks, including GPUs and storage, to get the most from your AI infrastructure operation.
Learn about AI Data Center Deployment Services

Partners

Partners

Support and Documentation

Support and Documentation

Learn

About Juniper Training Events The Feed Resources Technology learning topics Thought leadership and insights
Audience raising hands up while businessman is speaking in training at the office.

Juniper certification and training news

See the latest
Ringing of the bell

All global events

See the latest
AI-native-now

AI-Native NOW event series

Register now
Juniper's Christina Hendrix at the head of a conference table. With the text "The NOW Way to Network" overlayed, with "NOW" emphasizing the "O" in green color.

The NOW Way to Network

Watch the video series
AI Native Now

Executive insights

Dive deep with leading experts and thought leaders on all the topics that matter most to your business, from AI to network security to driving rapid, relevant transformation for your business.
Learn more
A keynote speaker giving a presentation at a conference. There are dozens of people sitting around them. The presentation is displayed via projector on all the walls in the room.

Leadership voices

Juniper Networks’ leaders operate on the front lines of creating the network of the future. Take a look around to see what’s on their minds.
Watch now
Bob Friday and Jessica Garrison speaking

Bob Friday Talks

Join Bob as he ventures into all the knowns -- and -- unknowns -- of AI.
Catch the latest episode
Documentation
Menu
License Guide
Quick Starts
Validated Designs
Home Documentation vSRX vSRX Virtual Firewall Deployment Guide for Private and Public Cloud Platforms vSRX Virtual Firewall Deployment for VMware vSRX Virtual Firewall VM Management with VMware

vSRX Virtual Firewall Deployment Guide for Private and Public Cloud Platforms

keyboard_arrow_up
close
keyboard_arrow_left
vSRX Virtual Firewall Deployment Guide for Private and Public Cloud Platforms
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
ON THIS PAGE
keyboard_arrow_right

Automate the Initialization of vSRX Virtual Firewall 3.0 Instances on VMware Hypervisor using VMware Tools

date_range 11-Jul-23
arrow_backward
arrow_forward

Overview

Open VM Tools is a set of services and modules that enhances the performance and user experience of vSRX Virtual Firewall. With this service, several features in VMware products are enabled for better management and easy user interactions with the guest OS. It includes kernel modules for enhancing the performance of virtual machines running Linux or other VMware–supported Unix–like guest operating systems. vSRX Virtual Firewall 3.0 supports VMware tools starting from Junos OS Release 20.2R1.

VMware Tools includes these components:

  • VMware Tools Service

  • VMware device Drivers

  • VMware user process

  • VMware Tools Control Panel

vSRX Virtual Firewall 3.0 runs on FreeBSD 11.x and later. FreeBSD 12 supports VMware open-vm-tools-10.3.0.

The VMware tools (binaries and libraries) are packaged into the vSRX Virtual Firewall image file and allow VM instances to query information from hypervisor and then set or use such information. by the VM instance itself.

During VM instance booting time, the boot-up script will look for Open Virtualization Format (OVF) settings or the machine ID setting. If the OVF settings are enabled, then the related VM CLI configurations are configured and the VM instance will use this CLI configuration when the VM instance is first powered on. We support autoconfiguration of hostname, IP address, gateway, DHCP, and DHCP server.

Benefits of VMware Tools for Autoconfiguration

  • Execute VMware-provided or user configured scripts in guest OS during various power operations.

  • Collect network, disk, and memory usage information from the guest periodically.

  • Generate heartbeat from guests to hosts to determine guests' availability.

  • Enable Time synchronization between a host and guest

  • Allows File transfer between a host and guest

  • Provides improved memory management and network performance

  • Supports general mechanisms and protocols for communication between host and guests and from guest to guest

  • Allows you to customize guest operating systems immediately after powering on virtual machines.

Provision VMware Tools for Autoconfiguration

There are 3 methods to make VMware tools support setting key-value are:

  • Set the VM options of parameter machine ID for each key.

  • Set vApp options of OVF property for each key.

  • Edit the *.ova package file to add the property for each key.

Use one of the methods to set the key-value.

If you want to change any VM parameters, use the VMware GUI. When VMWare hypervisor powers on the VM instance, open VMTool source code provides the functionality for the VM instance to query parameters from the hypervisor.

To set the VM options of parameter machine ID for settings keys:

  1. On the VMware ESXi vCenter server, access the VM on vSphere Web client (FLEX or HTML5), go to Edit Virtual Machine Setting ->VM Options->Advanced, and then on the Configuration Parameters tab, click Edit Configuration.
  2. On the Configuration Parameters page, add a new parameter with Name and Value for each key.
    Note:

    For fxp0 IP address configuration, you can configure a key-value pair with a set of IP address or gateway, a set of DHCP address or DHCP server, or both.

    When dhcp=yes, and both IP address and dhcp-server is configured, then dhcp-server takes higher prority.

    When dhcp=no, or dhcp is not configured, then even if both IP address and dhcp-server are set, then IP address takes higher prority.

    Figure 1: OVF Property Settings OVF Property Settings

    Example: OVF Setting

    • hostname: vSRX3.0-VMTOOL-Test

    • ipaddr=10.159.16.221/22

    • gateway= 10.159.16.2

    • dhcp-server = 10.159.16.1

    • dhcp=yes

    Note:

    When deploy the VM with OVF setting, if you want to manually enter and provide the key-values at VMWare GUI, then providing one of IP address and dhcp server is enough.

    But, for packaging OVF settings, providing all five key-vlaue pairs is better as you don’t need to enter the five keys, and only need to modify the value.

    Check the vSRX Virtual Firewall 3.0 login prompt for root ID without password and check the loaded configuration for the following:

    • set system host-name vSRX3.0-VMTool-Test

    • set interfaces fxp0 unit 0 family inet dhcp server-address 10.159.16.1

  3. Add the parameter by selecting Add and then click OK.
  4. Verify the configurations by validating the configurations on the instance, verify the configuration of fxp0 and default routes using the show interfaces terse fxp0 command, or by checking the log files at /var/log/setup_config.log. Log files at /var/log/setup_config.log provide you the debugging messages, any syntax error, IP validation, the CLI configuration, and so on.

To set the vApp options of OVF property for each key:

  1. On the VMware ESXi vCenter server, access the VM on vSphere Web client (FLEX), go to Edit Virtual Machine Setting ->vApp Options->OVF setting, and under OVF environment transparent tab , select VMWare Tools.

  2. Go to Edit Virtual Machine Setting->vApp Options->Properties and edit each key value.

  3. To verify the configuration login and power-on for the first time as root and without password, verify the fxp0 and DHCP bindings or check the log files at /var/log/vmware_ovf.info and /var/log/setup_config.log.

To edit the OVF package file instructions:

  1. Untar the *.ova. in the *.ova file. There are three files: *.ovf,*.mf, and *.vmdk.

  2. Edit the *.ovf file to add some property for each key value under the production section.

  3. To verify the configuration, deploy the vSRX Virtual Firewall 3.0 from vCenter server Web client and check the properties set for each key value or check the log files at /var/log/vmware_ovf.info and /var/log/setup_config.log.

arrow_backward PREVIOUS Upgrade a Multicore vSRX Virtual Firewall with VMware
NEXT arrow_forward vSRX Virtual Firewall Cluster Staging and Provisioning for VMware
footer-navigation

© 1999 - 2025 Juniper Networks, Inc. All rights reserved.

Scroll to top