How to Deploy a CloudGen Firewall Vx on KVM

Last updated on 2020-12-21 04:16:06

The KVM version of the Barracuda CloudGen Firewall Vx is available as a pre-built image for your KVM hypervisor.

Before deploying the Barracuda CloudGen Firewall Vx unit, verify that the host system meets the minimum storage requirements and review the resource recommendations for the production system.

Before You Begin

For information on the sizing of your CPU, disk, and RAM, see Virtual Systems (Vx).
Download and install a VNC viewer.
Configure the virtual network on the KVM host server.
Download the KVM image for the Barracuda CloudGen Firewall Vx from the Barracuda Download Portal.

Step 1. Import and Start the Barracuda CloudGen Firewall Vx VM

Execute the install script to deploy the image and use virsh to define and start the virtual machine.

Log into the KVM host server with root permissions.
Copy the Barracuda CloudGen Firewall Vx KVM install file KVM host server (e.g., install.GWAY-5.4.4-071-VFxxx.kvm.sh).

Make the file executable.

chmod +x install.GWAY-5.4.4-071-VFxxx.kvm.sh

Start the install script.
```
./install.GWAY-5.4.4-071-VFxxx.kvm.sh
```
(optional) Enter the name and path you want the image file deployed to. Press Enter to use the default value.
(optional) Enter the path for the configuration file. Press Enter to use the default value.
Choose non-sparse deployment for production deployments, sparse for testing purposes.
Enter the domain name for the deployment. Press Enter to accept the default value suggested.
Enter the MAC for virtual network interface. Press Enter to accept the default value suggested.
Your license is bound to this MAC address. Changing the MAC address will result in an invalid license.
(optional) Depending on the network configuration of your KVM host, you must adapt the network settings in the XML configuration file. Per default the configuration file is stored in /etc/libvirt/qemu.
Connect to the virtual console.
```
virsh --connect qemu:///system
```

Import the configuration file.

define /etc/libvirt/qemu/GWAY-5.4.4-071-VFxxx-pv

Start the virtual machine.
```
start GWAY-5.4.4-071-VFxxx-pv
```

The virtual Barracuda CloudGen Firewall Vx is now running on the KVM hypervisor.

Step 2. Configure the Barracuda CloudGen Firewall Vx on First Boot

Connect to the console of the VM to enter the minimal network configuration.

Use a VNC client to connect to the IP address of the KVM host server. A console appears and displays the screen output of the Barracuda CloudGen Firewall Vx that is running on the KVM server. For a basic network configuration, the Active Recovery Technology (ART) menu launches.
Select Basic Configuration, enter the following network settings, and then press F3 to save your changes:
- Hostname – A hostname for your Barracuda CloudGen Firewall Vx unit.
- Management IP – The internal IP address for your Barracuda CloudGen Firewall Vx unit. This IP address must be reachable from your PC (e.g., 192.168.200.200).
- Netmask – The subnet mask (e.g., 255.255.255.0).
- Default Gateway – The IP address of the next hop device that serves as an access point to another network (e.g., 192.168.200.1).
Press F3 to save the configuration.
Select Reboot. The Barracuda CloudGen Firewall Vx restarts with the new network configuration.

Next Step

After you deploy the Barracuda CloudGen Firewall Vx unit, continue with Get Started and optionally Best Practice - Performance Tuning on KVM Hypervisors.