Book Image

VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha
Book Image

VMware NSX Cookbook

By: Bayu Wibowo, Tony Sangha

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Foreword
Contributors
Preface
Index

Configuring SSL VPN


SSL VPN is a solution to allow remote users to connect to networks located behind an ESG, which could be networks created in NSX or traditional networks on your physical infrastructure. This solution is analogous to other remote VPN connections in the industry, and is another powerful function of the ESG.

SSL VPN is configured on the ESG as another service and supports multiple authentication options, such as the following:

  • Active Directory
  • LDAP
  • Local
  • Radius
  • RSA

In addition to supporting multiple authentication sources, the VPN client also supports the following operating systems:

  • Windows XP and above
  • macOS Tiger, Leopard, Snow Leopard, Mountain Lion, Maverick, and Yosemite
  • Linux—the TCL-TK package is required for the user interface

Note

Support for operating systems may change between major and minor updates to NSX; therefore, it is recommended to check the release notes for the latest information.

In this recipe, we will configure an ESG for SSL VPN to allow access to the web servers...