vSRX Deployment Guide for VMware - Juniper Networks .VMware ContrailCloud Deployment Microsoft Azure

download vSRX Deployment Guide for VMware - Juniper Networks .VMware ContrailCloud Deployment Microsoft Azure

of 108

  • date post

    04-May-2019
  • Category

    Documents

  • view

    212
  • download

    0

Embed Size (px)

Transcript of vSRX Deployment Guide for VMware - Juniper Networks .VMware ContrailCloud Deployment Microsoft Azure

vSRX Deployment Guide for VMware

Modified: 2019-03-13

Copyright 2019, Juniper Networks, Inc.

Juniper Networks, Inc.1133 InnovationWaySunnyvale, California 94089USA408-745-2000www.juniper.net

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United Statesand other countries. All other trademarks, service marks, registeredmarks, or registered service marks are the property of their respectiveowners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,transfer, or otherwise revise this publication without notice.

vSRX Deployment Guide for VMwareCopyright 2019 Juniper Networks, Inc. All rights reserved.

The information in this document is current as of the date on the title page.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through theyear 2038. However, the NTP application is known to have some difficulty in the year 2036.

ENDUSER LICENSE AGREEMENT

The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networkssoftware. Use of such software is subject to the terms and conditions of the End User License Agreement (EULA) posted athttps://support.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions ofthat EULA.

Copyright 2019, Juniper Networks, Inc.ii

https://support.juniper.net/support/eula/

Table of Contents

About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii

Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv

Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv

Creating a Service Request with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

Chapter 1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Understanding vSRX with VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

vSRX Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

vSRX Benefits and Use Cases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

vSRX on VMWare ESXi deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

vSRX Scale Up Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

vSRX for Telecommunications and Mobile Cloud Deployment on

VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Requirements for vSRX on VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Software Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Hardware Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Best Practices for Improving vSRX Performance . . . . . . . . . . . . . . . . . . . . . . . 25

NUMA Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

PCI NIC-to-VM Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Interface Mapping for vSRX on VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

vSRX Default Settings on VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Junos OS Features Supported on vSRX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

SRX Series Features Supported on vSRX . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

SRX Series Features Not Supported on vSRX . . . . . . . . . . . . . . . . . . . . . . . . . 29

Chapter 2 Installing vSRX in VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Installing vSRX with VMware vSphere Web Client . . . . . . . . . . . . . . . . . . . . . . . . . 37

Loading an Initial Configuration on a vSRX with VMware . . . . . . . . . . . . . . . . . . . 40

Creating a vSRX Bootstrap ISO Image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

Uploading an ISO Image to a VMWare Datastore . . . . . . . . . . . . . . . . . . . . . . 43

Provisioning vSRX with an ISO Bootstrap Image on VMWare . . . . . . . . . . . . 44

Validating the vSRX .ova File for VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

iiiCopyright 2019, Juniper Networks, Inc.

Chapter 3 vSRX VM Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Adding vSRX Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Adding SR-IOV Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

Adding VMXNET 3 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Upgrading a Multicore vSRX with VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Power Down vSRX VM with VMware vSphere Web Client . . . . . . . . . . . . . . . 52

Upgrading a Multicore vSRX with VMware vSphereWeb Client . . . . . . . . . . . 52

Optimizing Performance of vSRX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Chapter 4 Configuring and Managing vSRX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

vSRX Configuration and Management Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Understanding the Junos OS CLI and Junos Scripts . . . . . . . . . . . . . . . . . . . . 55

Understanding the J-Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Understanding Junos Space Security Director . . . . . . . . . . . . . . . . . . . . . . . . 56

Configuring vSRX Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Configuring vSRX Using the J-Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

Accessing the J-Web Interface and Configuring vSRX . . . . . . . . . . . . . . . . . . 58

Applying the Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Adding vSRX Feature Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Managing Security Policies for Virtual Machines Using Junos Space Security

Director . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Chapter 5 Configuring vSRX Chassis Clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Configuring a vSRX Chassis Cluster in Junos OS . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Chassis Cluster Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Enabling Chassis Cluster Formation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Chassis Cluster Quick Setup with J-Web . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Manually Configuring a Chassis Cluster with J-Web . . . . . . . . . . . . . . . . . . . . 66

vSRX Cluster Staging and Provisioning for VMware . . . . . . . . . . . . . . . . . . . . . . . . 71

Deploying the VMs and Additional Network Interfaces . . . . . . . . . . . . . . . . . . 71

Creating the Control Link Connection Using VMware . . . . . . . . . . . . . . . . . . . 72

Creating the Fabric Link Connection Using VMware . . . . . . . . . . . . . . . . . . . . 75

Creating the Data Interfaces Using VMware . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Prestaging the Configuration from the Console . . . . . . . . . . . . . . . . . . . . . . . . 78

Connecting and Installing the Staging Configuration . . . . . . . . . . . . . . . . . . . 79

Deploying vSRX Chassis Cluster Nodes Across Different ESXi Hosts Using

dvSwitch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

Chapter 6 vSRX Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

vSRX Feature Licenses Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

vSRX License Procurement and Renewal . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

vSRX Evaluation License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Product Evaluation License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

Advanced Security Features Evaluation License . . . . . . . . . . . . . . . . . . . 85

License Types . . . . . . . . . . . . . . . . . . . .