Cisco Cisco Prime Network Services Controller 3.0 Installation Guide
Task 9—Importing Service Images
To instantiate a service device from an image, you must first import the service image.
After the image is imported, Prime Network Services Controller automatically places the zipped files in the correct locations and
populates the Service Images table.
populates the Service Images table.
Procedure
Step 1
Choose Resource Management > Resources > Service Devices > Images.
Step 2
Click Import Service Image.
Step 3
In the Import Service Image dialog box:
a) Enter a name and description for the image you are importing.
b) Select the service image type: ASA 1000V or VSG.
c) Enter a version to assign to the image.
d) In the Import area, provide the following information, then click OK:
b) Select the service image type: ASA 1000V or VSG.
c) Enter a version to assign to the image.
d) In the Import area, provide the following information, then click OK:
• Protocol to use for the import operations: FTP, SCP, or SFTP.
• Hostname or IP address of the remote host to which you downloaded the images.
• Account username for the remote host.
• Account password for the remote host.
• Absolute image path and filename, starting with a slash, such as /mnt/nexus-1000v.VSG2.1.1.ova.
Task 10—Adding a Compute Firewall
You can add a compute firewall and assign it to a VSG, thereby placing the VSG in service. A wizard walks you through the
configuration process, which includes assigning a VSG, assigning profiles, and configuring interfaces.
configuration process, which includes assigning a VSG, assigning profiles, and configuring interfaces.
When you add a new compute firewall, the firewall data IP address can be the same as the data IP address of an existing compute
firewall in Prime Network Services Controller as long as the firewalls have different organizational paths. That is, as long as the
firewalls do not reside in the same organization, including parent and child organizations.
firewall in Prime Network Services Controller as long as the firewalls have different organizational paths. That is, as long as the
firewalls do not reside in the same organization, including parent and child organizations.
Users with infrastructure-admin and tenant-admin roles can work with service VMs as follows:
• Users with the infrastructure-admin role can instantiate and delete service VMs.
• Users with the tenant-admin role can view service VM details, but cannot instantiate or delete service VMs.
We recommend that you add the compute firewall at the tenant level or below, and not at the root level.
Note
Before You Begin
To place a VSG in service, at least one of the following must exist:
28