Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Since asa1kv works with n1kv and this is available only for Vmware HV, guest networks with asa1kv will only be supported on Vmware only.

VNMC setup (external to CS)

VNMC appliance needs to be setup externally and then registered with CS using admin API.

ASA setup (external to CS)

ASA1000v appliance is needs ot be setup externally and then registered with CS using admin API. Typically admin will create a pool of ASA1000v appliances and register them with CS.

Following inputs to be provided for setting up ASA:

  • ESX host
  • Standalone/HA mode
  • Port profiles for mgmt. and ha n/w interfaces (pre-created on n1kv switch, can be same or different)
  • Port profiles for inside/outside n/w interfaces (pre-created on n1kv switch, updated appropriately while implementing guest n/w)
  • Mgmt. IP for ASA, specify g/w such that VNMC IP is reachable
  • Admin password
  • VNMC IP and other parameters

Inside port profile configuration on Nexus1000v

  • in_port_profile
    port-profile type vethernet %asa-in-port-profile%
    vmware port-group
    switchport mode access
    no shutdown
    state enabled

Outside port profile configuration on Nexus1000v

  • out_port_profile
    port-profile type vethernet %asa-out-port-profile%
    vmware port-group
    switchport mode access
    switchport access vlan %vlanid-of-outside%
    no shutdown
    state enabled

After the ASA instance is powered on the VNMC needs to be registered from ASA console

...