advanced_deployment

VM-Series Advanced Deployment for GCP Qwiklab

advanced_deployment

VM-Series Advanced Deployment for GCP Qwiklabs

2 x VM-Series / Public LB / Internal LB / 2 x Spoke VPCs

Terraform creates 2 VM-Series firewalls that secure ingress/egress traffic from spoke VPCs. The spoke VPCs are connected (via VPC Peering) to the VM-Series trust VPC. All TCP/UDP traffic originating from the spokes is routed to internal load balancers in the trust VPC.

Please see the Deployment Guide for more information.

Prerequistes

Valid GCP Account with existing project
Access to GCP Cloud Terminal or to a machine with a Terraform 12 installation

How to Deploy

1. Setup & Download Build

In your project, open GCP Cloud Terminal and run the following.

$ gcloud services enable compute.googleapis.com
$ ssh-keygen -f ~/.ssh/gcp-demo -t rsa -C gcp-demo
$ git clone https://github.com/wwce/terraform; cd terraform/gcp/adv_peering_2fw_2spoke_common

2. Edit terraform.tfvars

Open terraform.tfvars and edit variables (lines 1-4) to match your Project ID, SSH Key (from step 1), and VM-Series type.

$ vi terraform.tfvars

3. Deploy Build

$ terraform init
$ terraform apply

How to Destroy

Run the following to destroy the build and remove the SSH key created in step 1.

$ terraform destroy
$ rm ~/.ssh/gcp-demo*

Support Policy

The guide in this directory and accompanied files are released under an as-is, best effort, support policy. These scripts should be seen as community supported and Palo Alto Networks will contribute our expertise as and when possible. We do not provide technical support or help in using or troubleshooting the components of the project through our normal support options such as Palo Alto Networks support teams, or ASC (Authorized Support Centers) partners and backline support options. The underlying product used (the VM-Series firewall) by the scripts or templates are still supported, but the support is only for the product functionality and not for help in deploying or using the template or script itself. Unless explicitly tagged, all projects or work posted in our GitHub repository (at https://github.com/PaloAltoNetworks) or sites other than our official Downloads page on https://support.paloaltonetworks.com are provided under the best effort policy.