VMware NSX Cookbook电子书

Title Page

Copyright and Credits

VMware NSX Cookbook

Packt Upsell

Why subscribe?

PacktPub.com

Foreword

Contributors

About the authors

About the reviewer

Packt is searching for authors like you

Preface

Who this book is for

What this book covers

To get the most out of this book

Download the example code files

Download the color images

Conventions used

Sections

Getting ready

How to do it...

How it works...

There's more...

See also

Get in touch

Reviews

Getting Started with VMware NSX for vSphere

Introduction

Choosing the right VMware NSX for vSphere edition

Getting ready

How to do it...

There's more...

VMware NSX editions

Evaluating VMware NSX

Support and Subscription (SnS)

VMware vRealize Log Insight for NSX

VMware NSX Monitoring Tools

See also

Selecting ESXi hosts and network adapters

VXLAN Offload

Receive Side Scaling

Downloading NSX for vSphere

Getting ready

How to do it...

Checking the Product Interoperability Matrix

Downloading media via the VMware downloads website

Downloading media via the VMware Software Manager

See also

Deploying the NSX Manager virtual appliance

Getting ready

How to do it...

Replacing the NSX Manager certificate

Certificate Signing Request

How to do it...

PKCS#12 certificate

How to do it...

Registering vCenter server with NSX Manager

Getting ready

How to do it...

Registering the NSX Manager with the vCenter server

Registering the NSX Manager with the PSC

How it works...

There's more...

Applying the NSX license

Getting ready

How to do it...

Deploying the NSX Controller Cluster

Getting ready

How to do it...

Configuring an NSX IP pool

NSX Controller Cluster deployment

DRS Anti-Affinity Rules

Configuring DRS Anti-Affinity Rules via PowerCLI

There's more...

Separate vCenter environment

Controller password parameters

Preparing a vSphere cluster for NSX

Getting ready

How to do it...

How it works...

Enabling NSX in a brownfield environment

Validating NSX VIB installation

Distributed Firewall communication

Controller communication

Getting ready

How to do it...

Manually checking VIB installation

Checking NSX component communication

Configuring VMware NSX Logical Switch Networks

Introduction

VMware NSX Logical Switch and VXLAN

VMware NSX Transport Zone

VMware NSX Replication Modes

VMware NSX Controller Disconnected Operation Mode

Configuring VXLAN Networking

Getting ready

IP address for VTEP VMkernel

Using DHCP for an IP pool

VDS teaming options for NSX

Single VTEP with LACP

Multi-VTEP with Route Based on Originating Port ID

How to do it...

Configuring VXLAN Networking

Validating VXLAN and VTEP configuration

How it works...

Testing VXLAN VTEP VMkernel

There's more...

See also

Configuring a VXLAN Segment ID

Getting ready

How to do it...

How it works...

There's more...

See also

Creating a NSX Transport Zone

Getting ready

How to do it...

How it works...

There's more...

Creating a NSX Logical Switch

Getting ready

How to do it...

How it works...

See also

Connecting a Virtual Machine to an NSX Logical Switch

Getting ready

How to do it...

How it works...

See also

Testing an NSX Logical Switch

Getting ready

How to do it...

Ping

Broadcast

How it works...

There's more...

See also

Enabling the Controller Disconnected Operation Mode on a Transport Zone

Getting ready

How to do it...

How it works...

Configuring VMware NSX Logical Routing

Introduction

Configuring the Distributed Logical Router

Getting ready

How to do it...

How it works...

There's more...

DLR CVM hardware requirements

HA interface

Configuring the Distributed Logical Router for dynamic routing

Getting ready

How to do it...

How it works...

There's more...

Route redistribution

Forwarding versus protocol address

Graceful restart

Deploying and configuring the NSX ESG in HA mode

Getting ready

How to do it...

How it works...

There's more...

Understanding and configuring the NSX ESG for routing

Getting ready

How to do it...

How it works...

There's more...

Configuring VMware NSX Layer 2 Bridging

Introduction

Software-Based Gateway Layer 2 Bridging

Bridging and Routing

Hardware VTEP Gateway

Configuring Software-Based Gateway Layer 2 Bridging

Getting ready

How to do it...

Configuring bridging

Verifying Bridging Configuration

How it works...

There's more...

Selecting a hardware VTEP gateway

Getting ready

How to do it...

There's more...

See also

Integrating Hardware VTEP Gateway with VMware NSX

Getting ready

How to do it...

Configuring the Replication Cluster

Connecting a Hardware VTEP Gateway to an NSX Controller

Adding a Hardware VTEP Gateway to NSX

How it works...

See also

Extending VMware NSX Logical Switch to Hardware VTEP Gateway

Getting ready

How to do it...

How it works...

There's more...

See also

Configuring VMware NSX Edge Services Gateway

Introduction

Configuring a DNS relay

Getting ready

How to do it...

There's more...

Configuring a DHCP server

Getting ready

How to do it...

There's more...

Configuring an Edge Firewall

Getting ready

How to do it...

There's more...

Configuring Network Address Translation

Getting ready

How to do it...

Configuring an SNAT rule

Configure a DNAT rule

How it works...

There's more...

Configuring Load Balancing

Getting ready

How to do it...

Deploying an NSX Edge Load Balancer

Configuring an NSX Edge Load Balancer

Verifying the NSX edge load balancer configuration

How it works...

There's more...

Configuring IPSEC VPN

Getting ready

How to do it...

How it works...

Configuring SSL VPN

Getting ready

How to do it...

How it works...

There's more...

Configuring High Availability

Getting ready

How to do it...

How it works...

Configuring VMware NSX Distributed Firewall (DFW) and SpoofGuard

Introduction

DFW Topology and Policy

See also

Verifying NSX DFW component status

Getting ready

How to do it...

Verifying Firewall Installation Status

Verifying vShield Stateful Firewall (vsfwd) Status and Connection

How it works...

See also

Configuring IP Discovery for Virtual Machines

Getting ready

How to do it...

How it works...

Verifying the Learnt IP address

Working with SpoofGuard

Getting ready

How to do it...

How it works...

There's more...

Excluding Virtual Machines from DFW Protection

Getting ready

How to do it...

How it works...

There's more...

Configuring DFW Session Timeout

Getting ready

How to do it...

How it works...

Creating Security Policy Rules from the Firewall Table Menu

Getting ready

How to do it...

Creating Firewall Sections

Creating Firewall Rules

How it works...

DFW Rule ID and Logs

DFW Saved Configurations

See also

Creating Security Policy Rules from the Service Composer menu

Getting ready

How to do it...

Creating a Security Group using Static Inclusion

Creating a Security Group using Dynamic Membership

Creating a Security Group using Security Tag as the Dynamic Membership Criteria

Creating a Security Policy

How it works...

Verifying DFW rules

Getting ready

How to do it...

Using NSX Manager central CLI

Using ESXi Host CLI

Leveraging the DFW Applied To field

Getting ready

How to do it...

Changing Firewall Default Applied To settings from the Firewall Table Menu

Changing Service Composer Firewall Default Applied To Settings

There's more...

See also

Deploying Network or Guest Introspection Services

Getting ready

How to do it...

Registering Service Definition

Deploying the Service VM

Installing VMware Tools for Guest Introspection

How it works...

Blocking Non-IP Layer 2 Traffic

There's more...

See also

Configuring the Identity Firewall

Getting ready

How to do it...

Registering a Microsoft Active Directory Domain with NSX Manager

Creating Security Rules using Active Directory Objects

How it works...

There's more...

Configuring Cross-vCenter NSX

Introduction

Configuring Primary and Secondary NSX Manager(s)

Getting ready

How to do it...

How it works...

There's more...

Enhanced Linked Mode

NSX Manager roles

Universal Synchronization Service Management and Troubleshooting

Creating a Universal Transport Zone and adding a vSphere cluster to the Universal Transport Zone

Getting ready

How to do it...

How it works...

Creating a Universal Logical Switch

Getting ready

How to do it...

How it works...

Creating a Universal Logical Router

Getting ready

How to do it...

How it works...

There's more...

See also

Deployment models

Local Egress

Adding a VM to a Universal Logical Switch

Getting ready

How to do it...

How it works...

Understanding and configuring the Universal Distributed Firewall

Getting ready

How to do it...

Creating Universal IPSets

Adding a web-tier-to-web-tier Universal Firewall Rule and Universal Section

Adding a web-tier-to-app-tier Universal Firewall Rule

Adding a app-tier-to-db-tier Universal Firewall Rule

How it works...

There's more...

Backing up and Restoring VMware NSX Components

Introduction

Backing up NSX Manager

Getting ready

How to do it...

How it works...

There's more...

See also

Restoring NSX Manager

Getting ready

How to do it...

Restoring NSX Controller Nodes

Getting ready

How to do it...

There's more...

See also

Restoring a Logical Switch Backing Port Group

Getting ready

How to do it...

How it works...

Restoring NSX Edge

Getting ready

How to do it...

How it works...

There's more...

Exporting NSX DFW Rules configuration from the Firewall Menu

Getting ready

How to do it...

There's more...

Restoring NSX DFW Rules configuration from the Firewall Menu

Getting ready

How to do it...

How it works...

Exporting NSX Security Policy from the Service Composer Menu

Getting ready

How to do it...

Restoring NSX Security Policy from the Service Composer Menu

Getting ready

How to do it...

Managing User Accounts in VMware NSX

Introduction

NSX Manager virtual appliance user account

Creating a service user account for vCenter server registration

Getting ready

How to do it...

Creating a user account

Adding an SSO user account as an SSO administrator

Registering NSX Manager registration with the vCenter server

How it works...

There's more...

Granting access to NSX

Getting ready

How to do it...

Assigning a vCenter role to a user account

Assigning an NSX role to a user account

How it works...

Creating and Managing CLI user accounts in NSX manager

Getting ready

How to do it...

Entering configuration mode in the NSX Manager CLI

Creating a CLI user account in the NSX Manager CLI

Granting REST API access to a CLI user account

Changing the enable password and CLI user account password

Verifying and saving configuration in the NSX Manager CLI

Clearing a VTY session

How it works...

There's more...

See also

Upgrading VMware NSX

Introduction

Preparing for VMware NSX upgrade

Getting ready

How to do it...

Checking the VMware Product Interoperability Matrices

Checking the VMware NSX upgrade path

Checking for Third-Party Integrations Compatibility

Reviewing VMware NSX for vSphere Release Notes and Upgrade Documents

Reviewing deprecated and discontinued features

Downloading VMware NSX upgrade bundles

There's more...

Verifying VMware NSX working state

Getting ready

How to do it...

Verifying NSX Manager virtual appliance working state

Verifying NSX components working state

Verifying vSphere components

There's more...

Upgrading VMware NSX Manager

Getting ready

How to do it...

There's more...

Upgrading NSX controller node

Getting ready

How to do it...

How it works...

Upgrading VMware NSX Host Clusters

Getting ready

How to do it...

How it works...

There's more...

Upgrading VMware NSX Edge

Getting ready

How to do it...

How it works...

Upgrading Network and Security Service Deployments

Getting ready

How to do it...

There's more...

Managing and Monitoring VMware NSX Platform

Introduction

NSX Logs

NSX Manager

vCenter Server

ESXi host

NSX Edge Gateway VM

Monitoring tools

Flow Monitoring

Application Rule Manager

Endpoint Monitoring

vRealize Log Insight for NSX

vRealize Network Insight

Monitoring NSX using NSX Dashboard

Getting ready

How to do it...

How it works...

There's more...

Configuring the NSX Components Syslog

Getting ready

How to do it...

Configuring the NSX Manager syslog

Configuring the NSX Controller Node Syslog

Configuring the NSX Edge Log

How it works...

There's more...

Configuring and viewing the NSX Distributed Firewall Log

Getting ready

How to do it...

Configuring the NSX DFW logs

Viewing the NSX DFW log from the ESXi host console

How it works...

Configuring vRealize Log Insight for NSX

Getting ready

How to do it...

Installing VMware NSX for the vSphere Content Pack

Navigating the NSX Content Pack Dashboards

Filtering DFW rules from the interactive analytics menu

How it works...

Enabling NSX Flow Monitoring

Getting ready

How to do it...

Enabling Flow Monitoring collection

Enabling and exporting Flow Monitoring collection

How it works...

Using Application Rule Manager

Getting ready

How to do it...

How it works...

There's more...

Using NSX Endpoint Monitoring

Getting ready

How to do it...

Verifying the prerequisites for endpoint monitoring

Starting endpoint monitoring data collection

How it works...

Leveraging the VMware NSX REST API for Management and Automation

Introduction

vCenter-Managed Object Reference ID (MoRef ID)

Using the REST API with the Postman REST client

Getting ready

How to do it...

Requesting the HTTP GET REST API via Postman

Requesting the HTTP POST REST API via Postman

How it works...

Using the REST API with cURL

Getting ready

How to do it...

Requesting the HTTP GET REST API via cURL

Requesting the HTTP POST REST API via cURL

How it works...

Generating a cURL script from Postman

There's more...

Using the REST API with PowerShell

Getting ready

How to do it...

Requesting the HTTP GET REST API via PowerShell

Requesting the HTTP POST REST API via PowerShell

How it works...

There's more...

Using the REST API with Python

Getting ready

How to do it...

Requesting the HTTP GET REST API via Python

Requesting the HTTP POST REST API via Python

How it works...

There's more...

Using the vRealize Orchestrator plugin for NSX

Getting ready

How to do it...

Checking the VMware Product Interoperability Matrices

Downloading the vRO plugin for NSX

Installing the vRO plugin for NSX

Running an NSX-vRO workflow

How it works...

There's more...

See also

Other Books You May Enjoy

Leave a review - let other readers know what you think