Book Image

VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha
Book Image

VMware NSX Cookbook

By: Bayu Wibowo, Tony Sangha

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Foreword
Contributors
Preface
Index

Configuring Software-Based Gateway Layer 2 Bridging


In this recipe, we will configure software-based layer 2 bridge to extend a logical switch to a VLAN. In this example we will bridge a logical switch called DB-Tier to VLAN 103 which is presented as a dvPortGroup VLAN103 on a vDS, as shown in the following diagram:

Getting ready

To configure software-based layer 2 bridging, the following prerequisites need to be met:

  • NSX Manager must be installed.
  • NSX Controllers must be installed.
  • VXLAN must be configured.
  • The logical switch must be created, in this example DB-Tier.

Note

At the time of writing, bridging to the universal logical switch on Cross-vCenter NSX deployment is not supported.

  • NSX DLR must be deployed. For step-by-step instructions on how to deploy an NSX DLR, see Chapter 3, Configuring VMware NSX Logical Routing.
  • NSX DLR control VM must be deployed.
  • dvPortGroup for VLAN bridging must be provisioned on vSphere cluster where NSX DLR control VM resides. In this example, the dvPortGroup is Bridged...