Deploy the ASAv Using KVM
Hotplug a Network Interface
• You remove the failover interface from the active ASAv in the hypervisor.
• Next, you immediately remove the corresponding interface from the standby ASAv in the hypervisor.
Limitations and Restrictions
• Hotplug interface provisioning is limited to Virtio virtual NICs.
• The maximum number of interfaces supported is 10. You will receive an error message if you attempt to add more than 10 interfaces.
• You cannot open the interface card (media_ethernet/port/id/10).
• Hotplug interface provisioning requires ACPI. Do not include the
--noacpi flag in your virt-install script.
Hotplug a Network Interface
You can use the virsh command line to add and remove interfaces in the KVM hypervisor.
Step 1
Step 2
Step 3
Open a virsh command line session:
Example:
[root@asav-kvmterm ~]# virsh
Welcome to virsh, the virtualization interactive terminal.
Type: ‘help’ for help with commands
‘quit’ to quit
Use the attach-interface command to add an interface.
attach-interface { --domain domain --type type --source source --model model --mac mac --live }
The --domain can be specified as a short integer, a name, or a full UUID. The --type parameter can be either network to indicate a physical network device or bridge to indicate a bridge to a device. The --source parameter indicates the type of connection. The --model parameter indicates the virtial NIC type. The --mac parameter specifies the MAC address of the network interface. The --live parameter indicates that the command affects the running domain.
Note See the official virsh documentation for the complete description of available options.
Example: virsh # attach-interface --domain asav-network --type bridge --source br_hpi --model virtio --mac
52:55:04:4b:59:2f --live
Note Use the interface configuration mode on the ASAv to configure and enable the interface for transmitting and receiving traffic; see the Basic Interface Configuration chapter of the Cisco ASA Series General Operations
CLI Configuration Guide for more information.
Use the detach-interface command to remove an interface.
detach-interface { --domain domain --type type --mac mac --live }
Note See the official virsh documentation for the complete description of available options.
Example:
Cisco Adaptive Security Virtual Appliance (ASAv) Getting Started Guide, 9.15
53
