We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see https://campus.barracuda.com/doc/71862301/ for further information on our EoS policy.

How to Configure Virtual Servers

  • Last updated on

To manage networking and services on the Barracuda NG Firewall, you can use the virtual server S1 that is already present on the unit. To extend firewalling and networking capabilities, introduce additional servers with IP addresses that can be adapted and used by networks and services created under them. If a Barracuda NG Firewall system hosting virtual servers is running in a high availability (HA) cluster, the virtual servers are also present on the HA unit. If the primary unit fails, the virtual server, IP addresses, and all services are taken over instantly by the secondary unit.

In this article:

Before you Begin

Verify that direct routes exist on the box layer for the network the virtual server IPs are in. If you are using a HA cluster, the routes must be configured on both units.

Create a Virtual Server on a Standalone Barracuda NG Firewall

  1. Right-click on Virtual Servers in (Configuration Tree > Box > Virtual Servers).
  2. Select Create Server. The Create Server windows opens.
  3. Configure the following settings:
    • Server Name – Enter a unique name up to six characters long for the virtual server. 
    • Product Type – Select the model of your Barracuda NG Firewall. The product type of the virtual server and the NG Firewall the virtual server is running on must match.
    • Active Box – Select This-Box.
    • Backup Box (optional) – Select Other-Box if you are using a high availability cluster, or No-Backup if you are using a standalone Barracuda NG Firewall.
    • Encryption Level – Select Full Featured Encryption unless you are running in demo mode or are located in an export-restricted country.      
    • First-IP – Enter the first IP address for the virtual server.
    • Reply to Ping – Select yes for the virtual server to answer ICMP pings on the first IP address.
    • Second-IP (optional) – Enter the second IP address for the virtual server.
    • Reply to Ping – Select yes for the virtual server to answer ICMP pings on the second IP address.
    • Additional IP (optional) – Enter as many additional IP addresses as needed.
  4. Click Next 
  5. (optional) Configure monitoring settings for the virtual server. For more information, see Virtual Server Monitoring.
  6. Click Next.
  7. (optional) Enter custom command-line scripts that are executed when the virtual server is started or stopped. For more information, see Command-Line Interface
  8. Click Finish.
  9. Click Activate.

Create a Virtual Server on a Barracuda Control Center

Create a virtual server in a cluster on the Barracuda NG Control Center. The virtual server can be used for every managed NG Firewall of the same product type in the cluster.

  1. Right-click on Virtual Servers in your Cluster. (Multi-Range > your range > your cluster > Virtual Servers) and select Create Server. The Create Server windows opens.
  2. Configure the following settings:
    • Server Name – Enter a unique name up to six characters long for the virtual server. 
    • Product Type – Select the model of your Barracuda NG Firewall. The product type of the virtual server and the NG Firewall the virtual server is running on must match.
    • Encryption Level – Select Full Featured Encryption unless you are running in demo mode or are located in an export-restricted country.      
    • Primary Box – Select the NG Firewall the  virtual server runs on. The box must be in the same cluster as the virtual server.   
    • Secondary Box (optional) – Select the secondary NG Firewall   
    • First-IP – Enter the first IP address for the virtual server.
    • Reply to Ping – Select yes for the virtual server to answer ICMP pings on the first IP address.
    • Second-IP (optional) – Enter the second IP address for the virtual server.
    • Reply to Ping – Select yes for the virtual server to answer ICMP pings on the second IP address.
    • Additional IP (optional) – Enter as many additional IP addresses as needed.
  3. Click Next.
    • (optional) Create or import the Server Private Key
    • (optional) Import the Server Certificate.
  4. Click Next. 
  5. (optional) If you are planning to use GTI, add the local networks for the VPN tunnels. For more information, see CC VPN GTI Editor.
  6. Click Next.
  7. (optional) Configure monitoring settings for the virtual server. For more information, see Virtual Server Monitoring.
  8. Click Next.
  9. (optional) Enter custom command-line scripts that are executed when the virtual server is started or stopped. For more information, see Command-Line Interface
  10. Click Finish.
  11. Click Activate.

Deleting a Virtual Server

If you delete a virtual server, all of its assigned services are also deleted. Before changing server and service settings, back up your system configuration. For more information, see Backups and Recovery.

  1. Right-click on the virtual server you want to delete and click Lock.
  2. Right-click on the virtual server and click Remove Server.
  3. Click Yes. The virtual server and all its services are now marked with a red "x".
  4. Click Activate.

Moving/Copying Virtual Servers (NG Control Center only)

You can move or copy virtual servers on the NG Control Center between different clusters. It is not possible to create a copy of a virtual server in the same cluster it is currently in. The clusters must use at least the same release version. For example, you cannot move a 6.0 virtual server to a 5.2 cluster.

  1. Right-click on the virtual server you want to move or copy and click Lock.
  2. Right-click on the virtual server and click Move Server or Copy Server.
  3. Select the destination in the Range/cluster tree.
  4. Enter the new name of the virtual server.
  5. Click OK.
  6. Click Activate.
Last updated on