Book Image

VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha
Book Image

VMware NSX Cookbook

By: Bayu Wibowo, Tony Sangha

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Foreword
Contributors
Preface
Index

Adding a VM to a Universal Logical Switch


In this recipe, we will attach four virtual machines; two of those VMs are attached to the web tier universal logical switch and are distributed across two sites. The remaining two tiers, app and DB VMs, are attached to their respective universal logical switches. The following diagram depicts the overall topology and VM placement:

Getting ready

To add virtual machines to universal logical switches, the following prerequisites must be satisfied:

  • User with NSX Enterprise Administrator or NSX Administrator role
  • NSX Managers in both vCenter domains must be deployed and configured for Cross-vCenter NSX
  • Controller cluster in the primary site is deployed and accessible
  • Unicast control plane replication will be used
  • ESXi hosts in either site can communicate with one another from their VTEP interfaces and the 1600-byte MTU has been set on the physical infrastructure
  • Universal Transport Zone and corresponding segment ID is configured and available
  • Universal Logical...