We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

How to enable Azure Accelerated Networking

  • Last updated on

If the size of the virtual machine meets the requirements of Azure Accelerated Networking, you can enable it on existing devices. To deploy a CloudGen Firewall with Accelerated Networking initially enabled, see How to Deploy a CloudGen Firewall from the Microsoft Azure Marketplace.

Before You Begin

  • Verify that your virtual machine size matches the requirements for Azure Accelerated Networking.

Azure Accelerated Networking creates, for each existing interface, a second interface for Accelerated Networking (one for the hv_netvsc driver, and one for Mellanox). Use only every second interface in boxnet (e.g., eth0, eth2, eth4). On devices with DHCP enabled, eth0 is replaced with the DHCP interface. On DHCP-enabled devices, as well, use only every second interface (e.g., eth0, eth2, eth4).

Step 1. (Optional) Enable Azure Accelerated Networking

This step is necessary only if you did not deploy a CloudGen Firewall from the marketplace with initially enabled Azure Accelerated Networking.

On existing devices, Azure Accelerated Networking can be enabled only through the CLI.

  1. Go to the Azure portal: https://portal.azure.com.
  2. Shut down the CloudGen Firewall virtual machine. If the machine was created in an availability set, all machines in this set must be shut down.
  3. Open Azure CloudShell.
    cloudshell.png
  4. In the CloudShell, select PowerShell from the drop-down menu.
    powershell.png
  5. Enter the following commands. Replace your network interface card and resource group name:

    az network nic update --name <name_of_NIC> --resource-group <resource_group_name> --accelerated-networking true

    enable_an.png

  6. Press Enter to run the command.
  7. Open the network interface Properties to verify that it operates with Accelerated Networking.
    an_true_properties.png

Step 2. Modify the Interfaces

Azure Accelerated Networking creates, for each existing interface, a second interface for Accelerated Networking (one for the hv_netvsc driver, and one for Mellanox). Use only every second interface in boxnet (e.g., eth0, eth2, eth4). On devices with DHCP enabled, eth0 is replaced with the DHCP interface. On DHCP-enabled devices, as well, use only every second interface (e.g., eth0, eth2, eth4).

For every NIC added in Azure, the boxnet dynnet driver must be configured to create 2 interfaces.

  1. Go to the Azure portal: https://portal.azure.com.
  2. Start the CloudGen Firewall virtual machine.
  3. Open Barracuda Firewall Admin and log into the CloudGen Firewall.
  4. Go to CONFIGURATION > Configuration Tree > Box > Network.
  5. Click Lock.
  6. In the left menu, select Interfaces.
  7. In the Network Interface Cards list, double-click the 10dynmod card.
  8. Set the Number of Interfaces to 2.

    If your Barracuda CloudGen Firewall operates with more than one network interface card on Microsoft Azure, enter a multiple of two for the Number of Interfaces. For example, if 2 network interfaces are configured in Azure, configure 4 network interfaces as Number of Interfaces.

  9. Click OK.

  10. Click Send Changes and Activate.
  11. Go to CONTROL > Box > Network.
  12. Click Activate new network configuration and click Failsafe.

 

 

Last updated on