Book Image

VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha
Book Image

VMware NSX Cookbook

By: Bayu Wibowo, Tony Sangha

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Foreword
Contributors
Preface
Index

Configuring a VXLAN Segment ID


In this recipe, we will configure a VXLAN segment ID. In a physical network with VLAN, a ID or VLAN ID is required for each VLAN segment. Similar to VLAN, VXLAN requires an ID for each VXLAN segment that will be used by NSX logical switches. The VXLAN segments are identified by a 24-bit VXLAN network identifier (VNI) or segment ID in VMware NSX. In this example, we will configure a segment ID range of 10,000-15,000 with an optional multicast IP address range of 239.1.0.1-239.1.63.254.

Getting ready

VMware NSX VNIs (segment IDs) are between 5,000-167,772,15. As per vSphere maximum configurations, the maximum static/dynamic port groups per vCenter is 10,000; therefore, up to 10,000 VNIs per NSX Manager will be sufficient; for example 10,000–19,999. If you are planning to use the hybrid or multicast replication mode, a multicast address range must be specified and you can start from 239.0.1.0/24.

How to do it...

The following steps will show you how to configure the...