Deploy NFV value-added security services

This section uses the Web interface of a next-generation firewall as an example. The deployment method for other components is similar. You can deploy NFV value-added security components only at the egress of a data center. To deploy an application control gateway and a next-generation firewall separately, first deploy the next-generation firewall.

 

Restrictions and guidelines

If the management network address of a NFV value-added security component is in a different subnet from the management PC, configure a static route to connect the two subnets when you configure component parameters. If you do not do so, the login page of the security component cannot be accessed.

Procedure

1. On the top navigation bar, click Network Services.

2. From the left navigation pane, select VDC Topology.

Figure-1 Virtual data center topology

 

3. Click and drag the target NFV value-added security component icon to the egress of a data center. For information about the icons, see "Concepts."

Figure-2 Deploying a component at the data center egress

 

4. Configure component parameters. For more information, see "Parameters."

Figure-3 Configuring component parameters

 

5. Click Deploy.

Figure-4 Deploying the component

 

Parameters

• Name: Specify the component name.

• Site: Specify the built-in site of the component.

• Network Mode: Select the network mode. Options include:

• Basic Mode—Disables DPDK.

• Advanced Mode—Enables DPDK.

• Physical Host: Select the physical host to deploy the component VM. The list displays available physical hosts filtered by the system based on the network mode, vs-gateway vSwitch settings, and component package.

• Image: Select the component package file.

• Management Network: Specify the IP address and gateway address of the component VM. Users can access this address to manage the component.

• Static Routes: Configure static routes for the management network to be reachable.

• Subnet—Specify the subnet in which the management PC resides.

• Mask—Specify the mask.

• Next Hop—Specify the gateway address of the component VM management network.

• Service Network: Specify service network VLANs and vSwitches. You can add 1 to 11 service networks.