VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha

5 (4)

Buy this Book

VMware NSX Cookbook

5 (4)

By: Bayu Wibowo, Tony Sangha

Buy this Book

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.

Preface

Who this book is for

What this book covers

To get the most out of this book

Sections

Get in touch

Free Chapter

Getting Started with VMware NSX for vSphere

Introduction

Choosing the right VMware NSX for vSphere edition

Selecting ESXi hosts and network adapters

Downloading NSX for vSphere

Deploying the NSX Manager virtual appliance

Replacing the NSX Manager certificate

Registering vCenter server with NSX Manager

Applying the NSX license

Deploying the NSX Controller Cluster

Preparing a vSphere cluster for NSX

Validating NSX VIB installation

Configuring VMware NSX Logical Switch Networks

Introduction

Configuring VXLAN Networking

Configuring a VXLAN Segment ID

Creating a NSX Transport Zone

Creating a NSX Logical Switch

Connecting a Virtual Machine to an NSX Logical Switch

Testing an NSX Logical Switch

Enabling the Controller Disconnected Operation Mode on a Transport Zone

Configuring VMware NSX Logical Routing

Introduction

Configuring the Distributed Logical Router

Configuring the Distributed Logical Router for dynamic routing

Deploying and configuring the NSX ESG in HA mode

Understanding and configuring the NSX ESG for routing

Configuring VMware NSX Layer 2 Bridging

Introduction

Configuring Software-Based Gateway Layer 2 Bridging

Selecting a hardware VTEP gateway

Integrating Hardware VTEP Gateway with VMware NSX

Extending VMware NSX Logical Switch to Hardware VTEP Gateway

Configuring VMware NSX Edge Services Gateway

Introduction

Configuring a DNS relay

Configuring a DHCP server

Configuring an Edge Firewall

Configuring Network Address Translation

Configuring Load Balancing

Configuring IPSEC VPN

Configuring SSL VPN

Configuring High Availability

Configuring VMware NSX Distributed Firewall (DFW) and SpoofGuard

Introduction

Verifying NSX DFW component status

Configuring IP Discovery for Virtual Machines

Working with SpoofGuard

Excluding Virtual Machines from DFW Protection

Configuring DFW Session Timeout

Creating Security Policy Rules from the Firewall Table Menu

Creating Security Policy Rules from the Service Composer menu

Verifying DFW rules

Leveraging the DFW Applied To field

Deploying Network or Guest Introspection Services

Configuring the Identity Firewall

Configuring Cross-vCenter NSX

Introduction

Configuring Primary and Secondary NSX Manager(s)

Creating a Universal Transport Zone and adding a vSphere cluster to the Universal Transport Zone

Creating a Universal Logical Switch

Creating a Universal Logical Router

Adding a VM to a Universal Logical Switch

Understanding and configuring the Universal Distributed Firewall

Backing up and Restoring VMware NSX Components

Introduction

Backing up NSX Manager

Restoring NSX Manager

Restoring NSX Controller Nodes

Restoring a Logical Switch Backing Port Group

Restoring NSX Edge

Exporting NSX DFW Rules configuration from the Firewall Menu

Restoring NSX DFW Rules configuration from the Firewall Menu

Exporting NSX Security Policy from the Service Composer Menu

Restoring NSX Security Policy from the Service Composer Menu

Managing User Accounts in VMware NSX

Introduction

Creating a service user account for vCenter server registration

Granting access to NSX

Creating and Managing CLI user accounts in NSX manager

Upgrading VMware NSX

Introduction

Preparing for VMware NSX upgrade

Verifying VMware NSX working state

Upgrading VMware NSX Manager

Upgrading NSX controller node

Upgrading VMware NSX Host Clusters

Upgrading VMware NSX Edge

Upgrading Network and Security Service Deployments

Managing and Monitoring VMware NSX Platform

Introduction

Monitoring NSX using NSX Dashboard

Configuring the NSX Components Syslog

Configuring and viewing the NSX Distributed Firewall Log

Configuring vRealize Log Insight for NSX

Enabling NSX Flow Monitoring

Using Application Rule Manager

Using NSX Endpoint Monitoring

Leveraging the VMware NSX REST API for Management and Automation

Introduction

Using the REST API with the Postman REST client

Using the REST API with cURL

Using the REST API with PowerShell

Using the REST API with Python

Using the vRealize Orchestrator plugin for NSX

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

5 (4)

5 star

100%

4 star

3 star

2 star

1 star

Introduction

VMware NSX has a northbound REST API that is publicly accessible and documented. The NSX REST API runs on top of NSX Manager and is based on REST concepts. The other NSX APIs are EPSec, API, and NetX for high-touch partners that are accessible via the VMware developer program. There are a few NSX operations that cannot be performed through GUI and are only accessible via the REST API. This NSX REST API can be consumed directly or indirectly from:

Cloud Management Tools, such as VMware, vRealize Automation, VMware vCloud Director, and OpenStack
DevOps, configuration management, and orchestration tools, such as VMware vRealize Orchestrator, Ansible, Puppet, and Chef
Programming languages, such as Python, Ruby, and Powershell, or a CLI tool, such as cURL: