Book Image

VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha
Book Image

VMware NSX Cookbook

By: Bayu Wibowo, Tony Sangha

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Foreword
Contributors
Preface
Index

Understanding and configuring the NSX ESG for routing


In this recipe, we will configure the already-deployed ESG for routing to the Distributed Logical Router and upstream physical router. We will use the network topology depicted in the introduction to serve as a reference point for the routing design.

We'll use the BGP to route to the DLR. Routing to the upstream physical router is already set, as all packets will use the ESG default gateway IP address. The physical router is expected to have a single summary router to the ESG uplink interface for the network prefix of 172.16.32.0/22.

Getting ready

To deploy the NSX ESG, the following prerequisites must be met:

  • The user must have an NSX enterprise administrator or NSX administrator role
  • The NSX controllers must be deployed and available
  • A router ID must be reserved; typically the transit logical switch IP address is sufficient
  • The DLR has been deployed and configured for BGP
  • The upstream network router is configured with a static summary route...