VMware NSX Network Essentials电子书

VMware NSX Network Essentials

VMware NSX Network Essentials

Credits

Foreword

About the Author

About the Reviewer

www.PacktPub.com

Why subscribe?

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the color images of this book

Errata

Piracy

Questions

1. Introduction to Network Virtualization

The traditional network model

The three pillars of a Software Defined Data Center

Introducing the NSX-V network virtualization platform

The power of server virtualization and network virtualization

How to leverage NSX

VMware NSX features

Summary

2. NSX Architecture

Introducing network planes

NSX vSphere components

The management plane

The control plane

Three-node controller clusters

Controller roles

The data plane

Overlay networks

The VLAN packet

A VXLAN overview

The VXLAN frame

The inner Ethernet frame

The life of a VXLAN packet

Summary

3. NSX Manager Installation and Configuration

NSX Manager requirements

NSX Manager installation

Understanding the key configuration details

Target - Management and Edge cluster

Network mapping

NSX Manager virtual appliance management

Register vCenter Server with NSX Manager

Register SSO with NSX Manager

NSX Manager deployment consideration

The communication path

Network and port requirements

User roles and permissions

Controller requirements

The procedure for controller IP pool creation

NSX Controller design consideration

Communication path

Network and port requirements

Controller deployment consideration

The NSX data plane

The host preparation procedure

Summary

4. NSX Virtual Networks and Logical Router

NSX logical switches

Logical network prerequisites

Host preparation

Segment ID (VNI) pool

Steps to configure the VNI pool

Transport zone

Configuring a global transport zone

Creating logical switches

Understanding replication modes

Unicast mode packet walk

Design decisions for unicast mode VXLAN

Multicast mode packet walk

Design decisions for multicast mode VXLAN

Hybrid mode packet walk

Design decisions for hybrid mode VXLAN

Connecting virtual machines to logical switches

Testing connectivity

The Distributed Logical Router

Deploying a Distributed Logical Router

Procedure for deploying a logical router

Understanding logical interfaces

Logical router deployment considerations

Layer 2 bridges

Deploying an L2 bridge

Design considerations for the L2 bridge

Summary

5. NSX Edge Services

Introducing Edge services

Introducing Edge form factor

Introducing OSP, BGP, and ISIS

Exploring Open Shortest Path First

Understanding basic OSPF terminology

Updating a topology database

Exploring Intermediate System to Intermediate System

Exploring Border Gateway Protocol

Deploying an NSX Edge gateway

Configuring OSPF on NSX Edge

Configuring OSPF routing on Distributed Logical Router

NSX routing design decisions

NSX Edge NAT

NSX Edge logical load balancer

Server pools

Virtual server

Application profile

Design considerations while load balancing

Generating a certificate

Setting up a load balancer

Setting global options

Creating an application profile

Creating a service monitor

Creating a server pool

Creating a virtual server

Virtual Private Network

SSL VPN

Configure SSL VPN server settings

Adding ID pool

Private network

IPsec VPN

L2 VPN

Prerequisites

Design decisions while configuring VPN

DHCP relay

Summary

6. NSX Security Features

NSX Distributed Firewall

Security groups

Security policies

Creating a service group

Creating a security policy

Testing firewall rules

Understanding identity-based firewall rules

Procedure for AD registration

NSX flow monitoring

NSX SpoofGuard

Procedure for SpoofGuard configuration

Distributed Firewall takeaways

Summary

7. NSX Cross vCenter

Understanding NSX cross vCenter Server

Components of NSX cross vCenter Server

Universal Synchronisation Service

Universal segment ID

Universal transport zone

Cross vCenter universal logical switch creation

Adding virtual machines to universal logical switches

Cross vCenter Server Universal Logical Routers

Network choke points

Summary

8. NSX Troubleshooting

NSX Manager installation and registration issues

Troubleshooting NSX Manager

Collecting NSX Manager logs via GUI

Collecting NSX Manager logs via CLI

VMware Installation Bundle

EAM log location

Control plane and data plane log collection

Understanding the physical topology

NSX Controller log collection

Collecting NSX Controller logs using CLI steps

Collecting Edge and Distributed Logical Router logs through the web client

NSX user world agents

netcpa

Vsfwd

Vsfwd log location and collection process

Collecting centralized logs from NSX Manager

VXLAN troubleshooting

Packet capturing and analysis

Lab environment details

VNIC packet capturing for egress traffic

NSX upgrade checklist and planning order

The future of NSX

Summary

References