Cisco Secure Firewall Management Center Virtual Getting Started Guide

PDF

Deploy the Firewall Management Center Virtual

Updated: February 5, 2026

Overview

Learn how to deploy Firewall Management Center Virtual on OpenStack by using sample Heat templates to automate network and instance creation, upload images to Glance, and configure flavors, security groups, and floating IP addresses.

Cisco provides sample heat templates for deploying the Firewall Management Center Virtual. Steps for creating the OpenStack infrastructure resources are combined in a heat template ( deploy_os_infra.yaml) file to create networks, subnets, and router interfaces. At a high-level, the Firewall Management Center Virtual deployment steps are categorized into the following sections.

  • Upload the Firewall Management Center Virtual qcow2 image to the OpenStack Glance service.

  • Create the network infrastructure.

    • Network

    • Subnet

    • Router interface

  • Create the Firewall Management Center Virtual instance.

    • Flavor

    • Security Groups

    • Floating IP

    • Instance

You can deploy the Firewall Management Center Virtual on OpenStack using the following steps.

Upload the Firewall Management Center Virtual Image to OpenStack

Copy the Firewall Management Center Virtual qcow2 image to the OpenStack controller node, and then upload the image to the OpenStack Glance service.

Before you begin

Procedure

1.

Copy the qcow2 image file to the OpenStack controller node.
2.

Upload the Firewall Management Center Virtual image to the OpenStack Glance service.

root@ucs-os-controller:$ openstack image create <fmcv_image> --public --disk-
format qcow2 --container-format bare --file ./<fmcv_qcow2_file>
3.

Verify if the Firewall Management Center Virtual image upload is successful.

root@ucs-os-controller:$ openstack image list

Example:

root@ucs-os-controller:$ openstack image list
+--------------------------------------+-------------------+---------+
| ID                                   | Name              | Status |+
| b957b5f9-ed1b-4975-b226-4cddf5887991 | fmcv-7-0-image    | active |+
The uploaded image and its status is displayed.

What to do next

Create the network infrastructure using the deploy_os_infra.yaml template.

Create the Network Infrastructure for the OpenStack and the Firewall Management Center Virtual

Deploy the OpenStack infrastructure heat template to create the network infrastructure.

Before you begin

Heat template files are required to create the network infrastructure and the required components for the Firewall Management Center Virtual, such as flavor, networks, subnets, router interfaces, and security group rules:

  • env.yaml ― Defines the resources created to support the Firewall Management Center Virtual on the compute node, such as the image name, interfaces, and IP addresses.

  • deploy_os_infra.yaml ― Defines the environment for the Firewall Management Center Virtual, such as the network and subnets.

Templates for your Firewall Management Center Virtual version are available from the GitHub repository at FMCv OpenStack heat template.

Note that Cisco-provided templates are provided as open source examples, and are not covered within the regular Cisco TAC support scope. Check GitHub regularly for updates and ReadMe instructions.

Procedure

1.

Deploy the infrastructure heat template file.

root@ucs-os-controller:$ openstack stack create <stack-name> -e <environment files name> -t <deployment file name>

Example:

root@ucs-os-controller:$ openstack stack create infra-stack -e env.yaml -t deploy_os_infra.yaml
2.

Verify if the infrastructure stack is created successfully.

root@ucs-os-controller:$ openstackstack list

Example:

root@ucs-os-controller:$ openstack stack list
+--------------------------------------+-------------+----------------------------------+-----------------+
| ID                                   | Stack Name  | Project                          | Stack Status    |
+--------------------------------------+-------------+----------------------------------+-----------------+
| b30d5875-ce3a-4258-a841-bf2d09275929 | infra-stack | 13206e49b48740fdafca83796c6f4ad5 | CREATE_COMPLETE |
+--------------------------------------+-------------+----------------------------------+-----------------+

What to do next

Create the Firewall Management Center Virtual instance on OpenStack.

Create the Firewall Management Center Virtual Instance on OpenStack

Use the sample heat template to deploy the Firewall Management Center Virtual on OpenStack.

Before you begin

A heat template is required to deploy the Firewall Management Center Virtual on OpenStack:

  • deploy_fmcv.yaml

Templates for your Firewall Management Center Virtual version are available from the GitHub repository at FMCv OpenStack heat template.

Note that Cisco-provided templates are provided as open source examples, and are not covered within the regular Cisco TAC support scope. Check GitHub regularly for updates and ReadMe instructions.

Procedure

1.

Deploy the Firewall Management Center Virtual heat template file (deploy_fmcv.yaml) to create the Firewall Management Center Virtual instance.

root@ucs-os-controller:$ openstack stack create fmcv-stack -e env.yaml-t deploy_fmcv.yaml

Example:

+---------------------+-----------------------------+
| Field               | Value                                |
+---------------------+--------------------------------------+
| id                  | 96c8c126-107b-4733-8f6c-eb15a637219f |
| stack_name          | fmcv-stack                           |
| description         | FMCv template                        |
| updated_time        | None                                 |
| stack_status        | CREATE_IN_PROGRESS                   |
| stack_status_reason | Stack CREATE started                 |
+---------------------+--------------------------------------+
2.

Verify that your Firewall Management Center Virtual stack is created successfully.

root@ucs-os-controller:$ openstack stack list

Example:

+--------------------------------------+-------------+----------------------------------+--------+
| ID                                   | Stack Name  | Project                          | Stack Status    | 
+--------------------------------------+-------------+----------------------------------+-----------------+
| 14624af1-e5fa-4096-bd86-c453bc2928ae | fmcv-stack  | 13206e49b48740fdafca83796c6f4ad5 | CREATE_COMPLETE |
| 198336cb-1186-45ab-858f-15ccd3b909c8 | infra-stack | 13206e49b48740fdafca83796c6f4ad5 | CREATE_COMPLETE |
+--------------------------------------+-------------+----------------------------------+-----------------+