Creating a VXC to an MVE Integrated with Palo Alto VM-Series Firewall

This topic describes how to connect a Virtual Cross Connect (VXC) to Megaport Virtual Edge (MVE) integrated with Palo Alto next-generation firewall (NGFW).

With MVE configured, you can create VXCs to connect to services on the Megaport network without the need for any physical infrastructure. A VXC is essentially a private point-to-point Ethernet connection between an A-End (your MVE) and a B-End (one of the destination types).

A VXC is mapped with a VLAN ID on each end.

You can order VXCs to reach any destination in the Megaport network. You can connect up to 25 VXCs on a single MVE.

To create a VXC

1. In the Megaport ONE Portal, choose Networking > Services.

2. Select the Palo Alto MVE you want to use.
   If you haven’t already created an MVE, see Creating a VM-Series MVE.

3. Click Actions and select Add Connection.
   
   The New Connection screen displays the MVE name and A-End details.

4. Select the Cloud VXC connection type and select a cloud destination:

   • Cloud Provider – Provision a dedicated interconnect to a public cloud service provider. After selecting Cloud VXC, select a provider. Some providers require a service key.

     For specific CSP configuration details:

     • AWS Direct Connect – See Creating MVE Connections to AWS.
     • Azure Express Route – See Creating MVE Connections to Azure using ExpressRoute.
     • Google Cloud – See Creating MVE Connections to Google.
     • Other cloud connections – See Creating MVE Connections to Any Endpoint.

Connecting MVE to MVE

In the Megaport ONE Portal, you can create a VXC (interconnect connectivity) between MVEs at two or more Megaport locations. The VXC links the SD-WAN branch locations connected to these edge MVEs via the Megaport fabric, without traversing the public internet for the MVE to MVE connectivity. For specific configuration details, see Connecting MVEs Integrated with Palo Alto VM-Series.

Deleting a VXC

You can delete a VXC directly from the Megaport ONE Portal.
Deleting an MVE automatically deletes all of its associated VXCs, including the Transit VXC(s). For details on deleting an MVE, see Terminating an MVE.

To delete a VXC

1. In the Megaport ONE Portal, choose Networking > Services.

2. Click the gear icon next to the VXC you want to terminate.

3. Select Delete Service.
   
   The Terminate Services window appears. Early termination charges are shown here, if applicable.
   

4. Type DELETE in all caps and click Delete to confirm.
   The VXC is deleted from the Megaport network.

---

Last update: 2023-10-11