Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents

Manage the vSRX Virtual Firewall Instance on KVM

date_range 27-May-23

Each vSRX Virtual Firewall instance is an independent VM that you can power on, pause, or shut down. You can manage the vSRX Virtual Firewall VM with multiple tools, including virt-manager and virsh.

Power On the vSRX Virtual Firewall Instance with virt-manager

To power on the vSRX Virtual Firewall instance with virt-manager:

  1. Launch virt-manager.
  2. Check the vSRX Virtual Firewall instance you want to power on.
  3. From the icon bar, select the power on arrow. The vSRX Virtual Firewall VM starts. You can connect to the management console to watch the boot-up sequence.
    Note:

    After the boot starts, you need to select View>Text Consoles>Serial 1 in virt-manager to connect to the vSRX Virtual Firewall console.

Power On the vSRX Virtual Firewall Instance with virsh

To power on the vSRX Virtual Firewall instance with virsh:

Use the virsh start command on the host OS to start a vSRX Virtual Firewall VM.

content_copy zoom_out_map
user@host# virsh start vSRX-kvm-2
content_copy zoom_out_map
Domain vSRX-kvm-2 started

Pause the vSRX Virtual Firewall Instance with virt-manager

To pause the vSRX Virtual Firewall instance with virt-manager:

  1. Launch virt-manager.
  2. Check the vSRX Virtual Firewall instance you want to pause.
  3. From the icon bar, select the power on pause icon. The vSRX Virtual Firewall VM pauses.

Pause the vSRX Virtual Firewall Instance with virsh

To pause the vSRX Virtual Firewall instance with virsh:

Use the virsh suspend command on the host OS to pause a vSRX Virtual Firewall VM.

content_copy zoom_out_map
user@host# virsh suspend vSRX-kvm-2
content_copy zoom_out_map
Domain vSRX-kvm-2 suspended

Rebooting the vSRX Virtual Firewall Instance with virt-manager

To reboot the vSRX Virtual Firewall instance with virt-manager:

  1. Launch virt-manager.
  2. Check the vSRX Virtual Firewall instance you want to reboot.
  3. Select Open to open a console window to the vSRX Virtual Firewall instance.
  4. From the vSRX Virtual Firewall console, reboot the vSRX Virtual Firewall instance.

    vsrx# request system reboot.

    vSRX Virtual Firewall reboots both Junos OS and the vSRX Virtual Firewall guest VM.

Reboot the vSRX Virtual Firewall Instance with virsh

To reboot the vSRX Virtual Firewall VM with virsh:

  1. Use the virsh console command on the host OS to connect to the vSRX Virtual Firewall VM.
  2. On the vSRX Virtual Firewall console, use the request system reboot command to reboot Junos OS and the vSRX Virtual Firewall VM.
content_copy zoom_out_map
user@host# virsh console vSRX-kvm-2
content_copy zoom_out_map
Connected to domain vSRX-kvm-2
content_copy zoom_out_map
vsrx# request system reboot

Power Off the vSRX Virtual Firewall Instance with virt-manager

To power off the vSRX Virtual Firewall instance with virt-manager:

  1. Launch virt-manager.
  2. Check the vSRX Virtual Firewall instance you want to power off.
  3. Select Open to open a console window to the vSRX Virtual Firewall instance.
  4. From the vSRX Virtual Firewall console, power off the vSRX Virtual Firewall instance.
    content_copy zoom_out_map
    vsrx> request system power-off
    

    vSRX Virtual Firewall powers off both Junos OS and the guest VM.

Power Off the vSRX Virtual Firewall Instance with virsh

To power off the vSRX Virtual Firewall instance with virsh:

  1. Use the virsh console command on the host OS to connect to the vSRX Virtual Firewall VM.
  2. On the vSRX Virtual Firewall console, use the request system power-off command to power off Junos OS and the vSRX Virtual Firewall VM.
content_copy zoom_out_map
user@host# virsh console vSRX-kvm-2
content_copy zoom_out_map
Connected to domain vSRX-kvm-2
content_copy zoom_out_map
vsrx# request system power-off

Shutdown the vSRX Virtual Firewall Instance with virt-manager

In situations where you want to edit and modify the vSRX Virtual Firewall VM XML file, you need to completely shut down vSRX Virtual Firewall and the associated VM.

To gracefully shutdown the vSRX Virtual Firewall instance with virt-manager:

  1. Launch virt-manager.
  2. Check the vSRX Virtual Firewall instance you want to power off.
  3. Select Open to open a console window to the vSRX Virtual Firewall instance.
  4. From the vSRX Virtual Firewall console, reboot the vSRX Virtual Firewall instance.

    vsrx# request system power-off.

  5. From virt-manager, select Shut Down to completely shutdown the VM so you can edit the XML file.
Note:

Do not use Force Reset or Force Off on any active VM as it may create file corruptions.

Shutdown the vSRX Virtual Firewall Instance with virsh

In situations where you want to modify the vSRX Virtual Firewall VM XML file, you need to completely shut down vSRX Virtual Firewall and the associated VM.

To gracefully shutdown the vSRX Virtual Firewall instance with virsh:

  1. Use the virsh console command on the host OS to connect to the vSRX Virtual Firewall VM.
  2. On the vSRX Virtual Firewall console, use the request system power-off command to power off Junos OS and the vSRX Virtual Firewall VM.
  3. On the host OS, use the virsh shutdown command to shut down the VM after vSRX Virtual Firewall has powered off.
content_copy zoom_out_map
user@host# virsh console vSRX-kvm-2
content_copy zoom_out_map
Connected to domain vSRX-kvm-2
content_copy zoom_out_map
vsrx# request system power-off
user@host# virsh shutdown vSRX-kvm-2
Note:

Do not use the virsh destroy command on any active VM as it may create file corruptions.

Remove the vSRX Virtual Firewall Instance with virsh

In situations where you want to completely remove the vSRX Virtual Firewall instance, you need to destroy the vSRX Virtual Firewall VM and undefine the associated XML file.

To completely remove the vSRX Virtual Firewall instance with virsh:

  1. On the host OS, use the virsh destroy command to destroy the vSRX Virtual Firewall VM.
  2. On the host OS, use the virsh undefine command to undefine the vSRX Virtual Firewall XML file.
content_copy zoom_out_map
user@host# virsh destroy vSRX-kvm-2
user@host# virsh undefine vSRX-kvm-2
footer-navigation