Book Image

VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha
Book Image

VMware NSX Cookbook

By: Bayu Wibowo, Tony Sangha

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Foreword
Contributors
Preface
Index

Configuring IP Discovery for Virtual Machines


As explained in the introduction, NSX DFW uses VMware Tools to retrieve a virtual machine IP address and enforces firewall rules on the virtual machine. However, in some cases virtual machines may not have VMware Tools installed and running. To avoid the DFW dependency on VMware Tools, NSX 6.2.0 introduced two new mechanisms to discover a virtual machine's IP address that can be configured on a vSphere cluster-level basis:

  • DHCP snooping: Tracks IPv4 and IPv6 DHCP protocol messages
  • ARP snooping: Tracks ARP messages from the guest virtual machines

The NSX Manager can use either of these mechanisms to discover the IP address and apply firewall rules to a virtual machine. In this recipe, we will enable ARP snooping for virtual machine IP discovery.

Getting ready

Make sure you have Security Administrator or Enterprise Administrator access to NSX.

How to do it...

Follow these steps to change IP detection type settings on a vSphere cluster:

  1. From the vSphere...