User Tools

Site Tools


paloaltonetworks:vmseries:aws_gwlb

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
paloaltonetworks:vmseries:aws_gwlb [2022/11/24 13:26] bstaffordpaloaltonetworks:vmseries:aws_gwlb [2023/01/16 13:45] (current) – [Routing] bstafford
Line 10: Line 10:
 AWS CLI command to get AMI for PAN-OS 10.1.7 in region eu-west-1.  AWS CLI command to get AMI for PAN-OS 10.1.7 in region eu-west-1. 
 <code>aws ec2 describe-images --filters "Name=product-code,Values=6njl1pau431dv1qxipg63mvah" Name=name,Values=PA-VM-AWS*10.1.7*  --region eu-west-1 --output json</code> <code>aws ec2 describe-images --filters "Name=product-code,Values=6njl1pau431dv1qxipg63mvah" Name=name,Values=PA-VM-AWS*10.1.7*  --region eu-west-1 --output json</code>
 +Or, even better
 +<code>aws ec2 describe-images --filters "Name=product-code,Values=6njl1pau431dv1qxipg63mvah" Name=name,Values=PA-VM-AWS*10.1.7*  --region eu-west-1 --output json | grep ImageId | awk -F "\"" '{print $4}'</code>
 +because --query Images.ImageId didn't work.
  
 Values specifies BND1, BND2 or BYOL Values specifies BND1, BND2 or BYOL
Line 15: Line 18:
   * BND2 = hd44w1chf26uv4p52cdynb2o   * BND2 = hd44w1chf26uv4p52cdynb2o
   * BYOL = 6njl1pau431dv1qxipg63mvah   * BYOL = 6njl1pau431dv1qxipg63mvah
-  + 
 +===== VM AUTH PIN ===== 
 +<code>vm-series-auto-registration-pin-id= 
 +vm-series-auto-registration-pin-value=</code>
 c5.12xlarge is more expensive but has 48vCPU and 96GB RAM. c5.12xlarge is more expensive but has 48vCPU and 96GB RAM.
 <code>request system system-mode panorama</code> <code>request system system-mode panorama</code>
Line 76: Line 82:
     * Create propergation with the security VPC     * Create propergation with the security VPC
     * Create association for the spoke VPCs     * Create association for the spoke VPCs
 +    * Create static default route pointing at security VPC
  
 Edit 'spokes' TGW route table and create static route 0.0.0.0/0 pointing at the security attachment Edit 'spokes' TGW route table and create static route 0.0.0.0/0 pointing at the security attachment
paloaltonetworks/vmseries/aws_gwlb.1669296416.txt.gz · Last modified: by bstafford