Deploying a Service Gateway virtual appliance with Nutanix AHV

Procedure

1. Go to Workflow and Automation → Service Gateway Management.
2. Click Download Virtual Appliance.
   The Service Gateway Virtual Appliance panel appears.
3. Select Nutanix AHV (QCOW2).
4. Click Download Disk Image to download a QCOW2 file.

   Tip Copy the registration token for later steps. The registration token will expire within 24 hours if not used.

5. Upload the disk image to the Nutanix AHV cluster.
   1. In your Nutanix Prism Web console, choose Home → Settings in the upper left corner.

      

   2. Click Image Configuration and click Upload Image.

      

   3. Specify the name of the image.

      

   4. Select DISK from the Image Type drop-down list.

      

   5. Select the container where you want to store your image.

      

   6. Select Upload a file. Locate the downloaded QCOW2 file from your directory and click Open.

      

   7. Click Save. Wait until the image is completely uploaded.
      It takes about 5 to 7 minutes to complete uploading the disk image.

      

6. Create a virtual machine.
   1. Navigate to the VM section from Settings and click Create VM.
   2. In the General Configuration area, specify the name and description of your virtual machine.

      

   3. In the Compute Details area, specify the desired configurations.
      • vCPU: 1
      • Number Of Cores Per vCPU: 8
      • Memory: 12 GB

      

   4. In the Boot Configuration area, keep the default Legacy BIOS for Boot Configuration.
   5. In the Disks area, click Add New Disk. For Operation, select Clone from Image Service. Select SCSI for Bus Type, and select the uploaded QCOW2 image for Image. Click Add to save the settings.

      

      

   6. In the Network Adapters (NIC) area, click Add New NIC. Select the appropriate network subnet and click Add to save the settings.

      

      

   7. Review the settings and click Save.
   8. Right-click your virtual machine and click Power on to start the virtual machine.

      

7. On the Service Gateway virtual appliance, log on to the Command Line Interface (CLI) with the default credentials.
   User name: admin

   Password: V1SG@2021
8. Change your password.
9. Type enable and press the ENTER key to enable administrative commands. Provide your password when asked.
   The command prompt changes from > to #.
10. Configure the required network settings using the following CLISH commands.
    Configure network primary ipv4.static <interface> <ip_cidr> <gateway> <dns1> [dns2] [cni]

    Configure static IPv4 network settings for the primary network interface

    <interface>: Name of the network interface (for example, eth0)

    <ip_cidr>: IPv4 address of the network interface in CIDR notation

    <gateway>: Gateway router address

    <dns1>: Primary DNS server address

    [dns2]: Secondary DNS server address

    [cni]: Internal network address pool (IP address ending in .0.0)
11. To register the Service Gateway virtual appliance to Trend Vision One, use an SSH tool, such as the latest version of PuTTY, and using an account with administrator privileges, type the following command.
    register <registration_token>

    You can obtain the token from the same screen you download the virtual appliance on Trend Vision One (step 3).

    Important The virtual appliance only supports UTC time. Ensure your hypervisor is correctly configured.

    Note If your environment uses a local Network Time Protocol (NTP) server, make sure the NTP server synchronizes with the local time for successful registration. Trend Micro recommends using an SSH client to easily copy and paste the registration token.

12. Use the CLI to configure other settings, if required.
    For more information on available commands, see Service Gateway CLI commands.

    For details on setting up a virtual appliance with two network cards, see Service Gateway Virtual Appliance dual network card configuration.