close

keyboard_arrow_left

Table of Contents Expand all

play_arrow vSRX Virtual Firewall Deployment for KVM
- play_arrow Overview
  - Understand vSRX Virtual Firewall with KVM
  - Requirements for vSRX Virtual Firewall on KVM
- play_arrow Install vSRX Virtual Firewall in KVM
- play_arrow vSRX Virtual Firewall VM Management with KVM
- play_arrow Configure vSRX Virtual Firewall Chassis Clusters on KVM
play_arrow vSRX Virtual Firewall Deployment for VMware
- play_arrow Overview
  - Understand vSRX Virtual Firewall with VMware
  - Requirements for vSRX Virtual Firewall on VMware
- play_arrow Install vSRX Virtual Firewall in VMware
- play_arrow vSRX Virtual Firewall VM Management with VMware
- play_arrow Configure vSRX Virtual Firewall Chassis Clusters in VMware
play_arrow vSRX Virtual Firewall Deployment for Microsoft Hyper-V
- play_arrow Overview
  - Understand vSRX Virtual Firewall with Microsoft Hyper-V
  - Requirements for vSRX Virtual Firewall on Microsoft Hyper-V
- play_arrow Install vSRX Virtual Firewall in Microsoft Hyper-V
- play_arrow vSRX Virtual Firewall VM Management with Microsoft Hyper-V
- play_arrow Configure vSRX Virtual Firewall Chassis Clusters
  - vSRX Virtual Firewall Cluster Staging and Provisioning in Hyper-V
  - Configure a vSRX Virtual Firewall Chassis Cluster in Junos OS
play_arrow vSRX Virtual Firewall Deployment for Contrail
- play_arrow Overview of vSRX Virtual Firewall Service Chains in Contrail
- play_arrow Install vSRX Virtual Firewall in Contrail
- play_arrow vSRX Virtual Firewall VM Management with Contrail
play_arrow vSRX Virtual Firewall Deployment for Nutanix
- play_arrow Overview
  - Understand vSRX Virtual Firewall Deployment with Nutanix
  - Requirements for vSRX Virtual Firewall on Nutanix
- play_arrow Install vSRX Virtual Firewall in Nutanix
  - Launch and Deploy vSRX Virtual Firewall in Nutanix AHV Cluster
  - Upgrade the Junos OS for vSRX Virtual Firewall Software Release
play_arrow vSRX Virtual Firewall Deployment for AWS
play_arrow vSRX Virtual Firewall Deployment for Microsoft Azure
- play_arrow Overview
  - Understand vSRX Virtual Firewall with Microsoft Azure Cloud
  - Requirements for vSRX Virtual Firewall on Microsoft Azure
- play_arrow Deploy vSRX Virtual Firewall from the Azure Portal
- play_arrow Deploy vSRX Virtual Firewall from the Azure CLI
  - Before You Deploy vSRX Virtual Firewall Using the Azure CLI
  - Deploy vSRX Virtual Firewall from the Azure CLI
- play_arrow Configure and Manage vSRX Virtual Firewall for Microsoft Azure
- play_arrow Configure Azure Features on vSRX Virtual Firewall and Use Cases
play_arrow vSRX Virtual Firewall Deployment for Google Cloud Platform
- play_arrow Overview
  - Understand vSRX Virtual Firewall Deployment with Google Cloud
  - Requirements for vSRX Virtual Firewall on Google Cloud Platform
- play_arrow Install vSRX Virtual Firewall in Google Cloud
play_arrow vSRX Virtual Firewall Deployment for IBM Cloud
- play_arrow Overview
- play_arrow Installing and Configuring vSRX Virtual Firewall in IBM
- play_arrow Managing vSRX Virtual Firewall in IBM Cloud
  - vSRX Virtual Firewall Configuration and Management Tools
  - Managing Security Policies for Virtual Machines Using Junos Space Security Director
- play_arrow Monitoring and Troubleshooting
  - Technical Support
play_arrow vSRX Virtual Firewall Deployment for OCI
- play_arrow Overview
  - Understanding vSRX Virtual Firewall Deployment in Oracle Cloud Infrastructure
  - Requirements for vSRX Virtual Firewall on Oracle Cloud Infrastructure
- play_arrow Installing vSRX Virtual Firewall in OCI
  - vSRX Virtual Firewall Deployment in Oracle Cloud Infrastructure
  - Upgrade the Junos OS for vSRX Virtual Firewall Software Release
- play_arrow vSRX Virtual Firewall Licensing
  - Licenses for vSRX Virtual Firewall

list Table of Contents

English

Requirements for vSRX Virtual Firewall on Nutanix

date_range 27-May-23

arrow_backward

arrow_forward

These topics provide an overview of requirements for deploying a vSRX Virtual Firewall 3.0 instance on Nutanix.

System Requirements for Nutanix

This topic provides the system requirement details.

#system-requirements-for-nutanix__d21562e42
Interface Mapping for vSRX Virtual Firewall 3.0 on Nutanix
vSRX Virtual Firewall 3.0 Default Settings on Nutanix
Best Practices for Improving vSRX Virtual Firewall 3.0 Performance

Table 1 lists the system requirements for a vSRX Virtual Firewall 3.0 instance deployed on Nutanix.

Table 1: System Requirements for vSRX Virtual Firewall 3.0
Component	Specification and Details
Hypervisor support	AHV 5.9
Memory	4 GB
Disk space	16 GB
vCPUs	2
vNICs	Up to 8
vNIC type	Virtio

Interface Mapping for vSRX Virtual Firewall 3.0 on Nutanix

Table 2 shows the vSRX Virtual Firewall 3.0 and Nutanix interface names. The first network interface is used for the out-of-band management (fxp0) for vSRX Virtual Firewall 3.0.

Table 2: vSRX Virtual Firewall 3.0 and Nutanix Interface Names
InterfaceNumber	vSRX Virtual Firewall 3.0 Interface	Nutanix Interface
1	fxp0	eth0
2	ge-0/0/0	eth1
3	ge-0/0/1	eth2
4	ge-0/0/2	eth3
5	ge-0/0/3	eth4
6	ge-0/0/4	eth5
7	ge-0/0/5	eth6
8	ge-0/0/6	eth7

We recommend putting revenue interfaces in routing instances as a best practice to avoid asymmetric traffic/routing, because fxp0 is part of the default (inet.0) table by default. With fxp0 as part of the default routing table, there might be two default routes needed: one for the fxp0 interface for external management access, and the other for the revenue interfaces for traffic access. Putting the revenue interfaces in a separate routing instance avoids this situation of two default routes in a single routing instance.

Note:

Ensure that interfaces belonging to the same security zone are in the same routing instance. See KB Article - Interface must be in the same routing instance as the other interfaces in the zone.

vSRX Virtual Firewall 3.0 Default Settings on Nutanix

vSRX Virtual Firewall 3.0 requires the following basic configuration settings:

Interfaces must be assigned IP addresses.
Interfaces must be bound to zones.
Policies must be configured between zones to permit or deny traffic.

Table 3 lists the factory-default settings for security policies on the vSRX Virtual Firewall 3.0.

Table 3: Factory-Default Settings for Security Policies
Source Zone	Destination Zone	Policy Action
trust	untrust	permit
trust	trust	permit

CAUTION:

Do not use the load factory-default command on a vSRX Virtual Firewall 3.0 Nutanix instance. The factory-default configuration removes the Nutanix preconfiguration. If you must revert to factory default, ensure that you manually reconfigure Nutanix preconfiguration statements before you commit the configuration; otherwise, you will lose access to the vSRX Virtual Firewall 3.0 instance. See Configure vSRX Using the CLI for Nutanix preconfiguration details.

Best Practices for Improving vSRX Virtual Firewall 3.0 Performance

Refer the following deployment practices to improve vSRX Virtual Firewall 3.0 performance:

Disable the source/destination check for all vSRX Virtual Firewall 3.0 interfaces.
Limit public key access permissions to 400 for key pairs.
Ensure that there are no contradictions between Nutanix security groups and your vSRX Virtual Firewall 3.0 configuration.
Use vSRX Virtual Firewall 3.0 NAT to protect your instances from direct Internet traffic.

Reference Requirements

Requirements for vSRX Virtual Firewall 3.0 with different types of Hypervisors are:

Requirements for vSRX on VMware—See Requirements for vSRX on VMware
Requirements for vSRX on KVM-Based Hypervisor—See Requirements for vSRX on KVM
Requirements for vSRX with Hype-V-Based Hypervisor—See Requirements for vSRX on Microsoft Hyper-V

arrow_backward PREVIOUS Understand vSRX Virtual Firewall Deployment with Nutanix

NEXT arrow_forward Launch and Deploy vSRX Virtual Firewall in Nutanix AHV Cluster

vSRX Virtual Firewall Deployment Guide for Private and Public Cloud Platforms

ON THIS PAGE