Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 16 Next »

https://www.juniper.net/documentation/en_US/vsrx/topics/task/multi-task/security-vsrx-with-kvm-installing.html


1- Download the qcow2 file from juniper website ( VM HDD image)

2- Create an VM ( with virt-manager ) and use the qcow2 HDD + add at list 2 interfaces

3- Modify the xml file of the VM




  1. Download the vSRX QCOW2 image from the Juniper software download site.

  https://www.juniper.net/support/downloads/?p=vsrx#sw


or 

( fron the cmd of the KVM hypervisor )     wget + the link below



2- Create an VM ( with virt-manager ) and use the qcow2 HDD + add at list 2 interfaces

type: Redhat 7
Set RAM to 4096 MB and
set CPUs to 2
Network:  br0 ( mgt) and virbr0 ( for data )

/home/me/Downloads/juniper/qcow2files/vsrxremote-vmdisk-17.3R1.10.qcow2
or
/home/me/Downloads/juniper/qcow2files/vsrxhub-vmdisk-17.3R1.10.qcow2


See next page:     /etc/libvirt/qemu/vsrxremote.xml

     <feature policy='force' name='vmx'/>
     <feature policy='disable' name='invtsc'/>




It take very look time to boot-up ( could use:  virsh start vsrxremote --console )





vSRX Basic Config:

set system root-authentication plain-text-password 


set system host-name vsrxhub
set system name-server 8.8.8.8
set system services ssh root-login allow
set interfaces fxp0 unit 0 family inet address 192.168.0.62/24
set routing-options static route 0.0.0.0/0 next-hop 192.168.0.1
set interfaces ge-0/0/0.0 family inet address 1.2.0.62/24
set security zones security-zone untrust
set security zones security-zone untrust interfaces ge-0/0/0
set security zones security-zone untrust host-inbound-traffic system-services ping
commit and-quit





  • No labels