: Provision the VM-Series Firewall on a Hyper-V host with PowerShell
Focus
Focus

Provision the VM-Series Firewall on a Hyper-V host with PowerShell

Table of Contents

Provision the VM-Series Firewall on a Hyper-V host with PowerShell

Use these instructions to deploy the VM-Series firewall on Hyper-V using PowerShell.
  1. Download the VHDX file.
    Register your VM-Series firewall and obtain the VHDX file.
    1. Go to https://www.paloaltonetworks.com/services/support.
    2. Filter by PAN-OS for VM-Series Base Images and download the VHDX file. For example, PA-VM-HPV-7.1.0.vhdx.
  2. Set up any vSwitch(es) that you will need.
    Create a vSwitch by using the following commands. Give the vSwitch a name and choose the switch type.
    > New-VMSwitch -Name <"switch-name"> -SwitchType <switch-type>
  3. Install the VM-Series firewall.
    1. Create the new virtual machine and set the memory based on the VM-Series System Requirements of your VM-Series model.
      > NEW-VM -Name <vm-name> -MemoryStartupBytes 4GB -VHDPath <file-path-to-vhdx> 
    2. Set processor count based on the VM-Series System Requirements of your VM-Series model.
      > SET-VMProcessor –VMName <vm-name> –Count 2 
  4. Connect at least one network adapter for the management interface on the firewall.
    Connect the default network adapter created during VM creation to management vSwitch.
    > connect-VMNetworkAdapter -vmname <vm-name> -Name <"network-adapter-name"> -SwitchName <"management-vswitch">
  5. (Optional) Enable MAC address spoofing on Hyper-V if you are not using Layer 3 with hypervisor assigned MAC address.
    > Set-VMNetworkAdapter -vmname <vm-name> -Name <"network-adapter-name"> -MacAddressSpoofing On
  6. Power on the firewall.
    For example:
    > Start-VM -vmname <vm-name>