VM-Series
Deployment
Guide
33
Set Up a VM-Series Firewall on the Citrix SDX Server
Secure North-South Traffic with the VM-Series Firewall
Set up the VM-Series Firewall to Process North-South Traffic Using L3 interfaces
Step 1
Install the VM-Series Firewall on the
SDX Server
.
When provisioning the VM-Series firewall on the SDX server, you
must ensure that you select the data interface accurately so that the
firewall can access the server(s).
Step 2
Configure the data interface on the
firewall.
1.
Select
Network > Virtual Router
and then select the
default
link to open the Virtual Router dialog and
Add
the interface to
the virtual router.
2.
(Required only if the USIP option is enabled on the NetScaler
VPX) On the
Static Routes
tab on the virtual router, select the
interface and add the NetScaler SNIP (192.68.1.1 in this
example) as the
Next Hop
. The static route defined here will be
used to route traffic from the firewall to the NetScaler VPX.
3.
Select
Network > Interfaces> Ethernet
and then select the
interface you want to configure.
4.
Select the
Interface Type
. Although your choice here depends
on your network topology, this example uses
Layer3
.
5.
On the
Config
tab, in the
Virtual Router
drop-down, select
default
.
6.
Select
New Zone
from the
Security Zone
drop-down. In the
Zone dialog, define a
Name
for new zone, for example default,
and then click
OK
.
7.
Select the
IPv4 or IPv6
tab, click
Add
in the IP section, and enter
two IP addresses and network mask to the interface—one for
each subnet that is being serviced. For example, 192.168.1.2 and
192.168.2.1.
8.
(Optional) To enable you to ping or SSH in to the interface,
select
Advanced > Other Info
, expand the
Management Profile
drop-down, and select
New Management Profile
. Enter a
Name
for the profile, select
Ping
and
SSH
and then click
OK
.
9.
To save the interface configuration, click
OK
.
10.
Click
Commit
to save your changes to the firewall.
