topic Panorama in NSX deployment not showing interfaces within the template in General Topics

Panorama in NSX deployment not showing interfaces within the template

Carracido — Tue, 11 Jun 2019 20:01:06 GMT

Hello community!

I have an issue you maybe can help me with:

I´m deploying PAN-VM firewall on NSX and noticed that the template where I added the VM doesn´t have interfaces.

The VM is connected to the Panorama and the template is in sync, I push a new zone and this creates a new vwire pair of sub-interfaces on the VM as it should be but in Panorama if I go to Interfaces tab within the template there are no interfaces at all, not even the default vwire pair ethernet1/1 and ethernet1/2. Is this normal behavior?

Thank you in advance,

Marcos.

Re: Panorama in NSX deployment not showing interfaces within the template

reaper — Wed, 12 Jun 2019 18:46:04 GMT

Hi Marcos you can add the interfaces where you want to push templates to manually

Re: Panorama in NSX deployment not showing interfaces within the template

Carracido — Wed, 26 Jun 2019 09:50:42 GMT

Hi Reaper,

Thank you for the answer.

The problem is that I want to add a netflow profile on the VM firewall´s virtual wire subinterfaces. Please consider the following:

" Use template stacks to configure the settings that are required for the VMSeries firewalls to operate on the network and associate; the configuration is defined using the Device
and Network tabs on Panorama. And each template stack with zones used in your NSX configuration on
Panorama must be associated with a service definition; at a minimum, you must create a zone within the
template stack so that the NSX Manager can redirect traffic to the VM-Series firewall.
Each virtual wire zone belonging to the NSX-related template becomes available as a service profile on
the Service Composer on the NSX Manager. When you create NSX-related zone on Panorama, Panorama
pushes the zone as a part of the template stack configuration to the firewall, and the firewall automatically
creates a pair of virtual wire subinterfaces, for example ethernet1/1.3 and ethernet 1/2.3, to isolate traffic
for a tenant or sub-tenant. On the firewall, you can then Create Security Groups and Steering Rules to
secure traffic that arrives on the virtual wire subinterface pair that maps to the zone "

So I´d like to add a netflow profile to those ethernet1/1.3 and ethernet1/2.3 on the VM firewall. Is this possible to achieve from the Panorama?

Thank you,

Marcos.