Page History

...

The interface is fairly simple to use. Typically you will only use the "Compute" tab, from where you will launch and destroy instances. 

In this wiki, Rapid Access Cloud dashboard refers to the Horizon interface.

Flavors and Images

Within the Rapid Access Cloud, there is a selection of Flavors and Images that can be accessed:

...

Launching a VFS Instance

The Horizon dashboard Rapid Access Cloud dashboard is the primary means of maintaining a VFS instance. With your Rapid Access account in place (see here to create an account) and the backend work completed by the Cybera VFS team, the steps below show how to launch a VFS instance from the Horizon dashboard.

1. Log onto Horizon via Rapid Access Cloud dashboard via https://cloud.cybera.ca
   
   
2. In the very top left corner of the page, next to the Rapid Access Cloud logo, ensure the proper project is selected
   
   
   
3. On the side, click on “Compute”, and then “Instances” under it.
   
   
4. Click on the “Launch Instance” button to start making a VFS instance. You will see the following menu
   
   
   

5. Give the instance a name, and choose the appropriate flavor. Depending on the virtual firewall of your choice, the corresponding flavor should be chosen for the instance. See the table below to identify the right flavor for your virtual firewall:
   
   

   Palo Alto Firewall	Flavor	Fortigate Firewall	Flavor
   VM-100	f1.small	VM-02	f2.small
   VM-300	f1.medium	VM-04	f2.medium
   VM-500	f1.large	VM-08	f2.large

   
   

   
   In the example above, the name test03-vfs has been given to the instance, and the flavor (f1.medium) indicates it is a Palo Alto instance.
   
   

6. Click on ‘Select source’ and select “Boot from image”. 
   
   
   
   
7. Then select the appropriate image (panos-production in the example below):
   
   
   
8. Check your options after you’ve picked what you wanted:
   
   
   
9. Under “Networking*” tab, select only "default":
   
   
   
10. Under “Network Ports” tab, check both trust0_port and untrust0_port:
    
    
    
11. Then click on "Launch" in the bottom right of the window, and wait. This process could take a few minutes, then after completion, the following menu should appear:
    
    
    
12. At this point your VFS instance is ready. You can then use a VPN to connect to it and then either SSH using the default management IP, or open a web browser and add “https://<default IP> and then hit enter. See the Access and Maintenance of Your Virtual Firewall section.
    
    
13. (Optional) If a configuration needs to be uploaded from a backup, make sure the ports on the newly launched firewall and in the backup configuration match, otherwise the backup configuration should be edited based on new port assignments on the new firewall
    
    

    1. take Take note of the trust0 and untrust0 MAC addresses from the cloud side, using RAC portal (horizon) as shown in the example below

       
       
       
       

    2. find Find out which ports on the new firewall have the MAC addresses discovered in (a)
       1. panos
          1. Web GUI
             
             

          2. Command line (using horizon instance console or ssh to instance)

             Code Block
             admin@PA-VM> show interface all total configured hardware interfaces: 2 name id speed/duplex/state mac address -------------------------------------------------------------------------------- ethernet1/1 16 10000/full/up fa:16:3e:77:d2:98 ethernet1/2 17 10000/full/up fa:16:3e:d2:2a:f3

             
             

       2. fortios
          1. Web GUI
          2. Command line (using horizon instance console or ssh to instance)
             
             
             
    3. Cross check if the panos/fortios ports match with those in the backup configuration
       1. if the ports are similar, no further action is required, the backup configuration can be uploaded to the new firewall
       2. if ports are different, edit the backup configuration according to the new port assignment; then the configuration can be uploaded to the new firewall

Important Information regarding your VFS instance

...

Deleting a VFS Instance

The Horizon dashboard Rapid Access Cloud dashboard can be used to delete a firewall instance, in case a given firewall needs to be re-launched or recreated: One scenario where this might be required is a  failover event, see for instance the Failover section.

...