Book Image

VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha
Book Image

VMware NSX Cookbook

By: Bayu Wibowo, Tony Sangha

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Foreword
Contributors
Preface
Index

Excluding Virtual Machines from DFW Protection


As explained in the introduction, the DFW feature is activated as soon as the host preparation is completed and all virtual machines that are part of the cluster are enforced by the DFW. This is also important when you are planning to change the any any allow default rule to any any deny, as this may inadvertently block access to the vCenter server.

In this recipe, we will learn how to exclude virtual machines from distributed firewall protection, so that no policy enforcement will be applied to any of the vNICs on those virtual machines.

Getting ready

Make sure you have Security Administrator or Enterprise Administrator access to NSX.

How to do it...

Follow these steps to exclude a VM from the DFW:

  1. From the vSphere web client, navigate to Home | Networking & Security | Networking & Security Inventory | NSX Managers.
  2. Select the NSX manager's IP address and in the center pane, choose the Manage | Exclusion List tab. Then click the plus sign...