Deploy cluster on Azure with GWLB using an Azure resource manager template

This task creates a clustered deployment of Firewall Threat Defense Virtual instances on Azure using Gateway Load Balancer (GWLB) through Azure Resource Manager templates.

Deploy the Virtual Machine Scale Set for Azure GWLB using the customized Azure Resource Manager (ARM) template. The templates mentioned in the steps below are available on GitHub.

Procedure

Step 1

Prepare the template.

Clone the GitHub repository to your local folder. See https://github.com/CiscoDevNet/cisco-ftdv/tree/master/cluster/azure.
Modify azure_ftdv_gwlb_cluster.json and azure_ftdv_gwlb_cluster_parameters.json with the required parameters.

Step 2

Step 3

Create a Resource Group.

In the Basics tab, choose the Subscription and Resource Group from the drop-down lists.
Choose the required Region.

Step 4

Create a virtual network with three subnets: Management, Data, and Cluster Control Link (CCL).

Create the virtual network.
1. In the Basics tab, choose the Subscription and Resource Group from the drop-down lists.
2. Choose the required Region. Click Next: IP addresses.
In the IP Addresses tab, click Add subnet and add the following subnets – Management, Data, and Cluster Control Link.
Add the subnets.

Step 5

Deploy the custom template.

Click Create > Template deployment (deploy using custom templates).
Click Build your own template in the editor.
Click Load File, and upload azure_ftdv_gwlb_cluster.json.
Click Save.

Step 6

Configure the Instance details.

Enter the required values and then click Review + create.
Click Create after the validation is passed.
After the instance is running, verify the cluster deployment by logging into any one of the nodes and entering the show cluster info command.

Show cluster info

Step 7

In the Azure Portal, click the Function app to register the cluster with the Cloud-Delivered Firewall Management Center.

Note	If you do not want to use the Function app, you can alternatively register the control node to the Cloud-Delivered Firewall Management Center directly by using Add > Device (not Add > Cluster). The rest of the cluster nodes will register automatically.

Step 8

Create FTPS Credentials by clicking Deployment Center > FTPS credentials > User scope > Configure Username and Password, and then click Save.

Step 9

Upload the Cluster_Function.zip file to the Function app by executing the following curl command in the local terminal.

curl -X POST -u username --data-binary @"Cluster_Function.zip" https:// Function_App_Name.scm.azurewebsites.net/api/zipdeploy

Note	The curl command might take few minutes (~2 to 3 minutes) to complete command execution.

The function will be uploaded to the Function app. The function will start, and you can see the logs in the storage account's outqueue. The device registration with the Management Center will be initiated.