Configure the VTEP source interface

Configure the VTEP source interface to enable network virtualization functionality on the device.

You can configure one VTEP source interface per Firewall Threat Defense Virtual device. The VTEP is defined as a Network Virtualization Endpoint (NVE).

Procedure

Step 1

Choose Devices > Device Management.

Step 2

Click Edit (edit icon) next to the device on which you want to configure Geneve.

Step 3

Click VTEP.

Step 4

Check Enable NVE.

Step 5

Click Add VTEP.

  1. For the Encapsulation Type, choose Geneve.

  2. Enter the value for the Encapsulation port within the specified range.

    We do not recommend changing the Geneve port; AWS requires a port of 6081.

  3. Select the VTEP Source Interface.

    You can select from the list of available physical interfaces present on the device. If the source interface MTU is less than 1806 bytes, then the Cloud-Delivered Firewall Management Center automatically raises the MTU to 1806 bytes.

  4. Click OK.

Step 6

Click Save.

Step 7

Configure the routed interface parameters. See Configure Routed Mode Interfaces.