Learning VMware NSX - Ranjit Singh Thakurratan - E-Book

Learning VMware NSX E-Book

Ranjit Singh Thakurratan

0,0
34,79 €

-100%
Sammeln Sie Punkte in unserem Gutscheinprogramm und kaufen Sie E-Books und Hörbücher mit bis zu 100% Rabatt.

Mehr erfahren.
Beschreibung

Virtualize your network with this step-by-step configuration guide to installing, configuring, and managing VMware NSX

About This Book

  • Understand VMware NSX's foundational components and architecture and discover best practices to help you manage VMware NSX
  • Learn about the important aspects of VMware NSX 6.2 including installation, managing, monitoring, and configuring
  • Learn to manage VMware NSX using best practices to elevate your skills in deploying VMware NSX in your environment

Who This Book Is For

This book is for those who want to learn to install, manage, and configure the VMware NSX Network Virtualization platform. If you want to explore, understand, or deploy VMware NSX in your environment, this book is for you. Also, this book can assist you to prepare for VMware NSX certification. Knowledge of basic networking concepts and VMware components such as vCenter and vSphere is required.

What You Will Learn

  • Explore the foundational components of VMware NSX
  • Install and configure NSX manager and its components using best practices
  • Deploy and configure VXLAN-enabled logical switches
  • Secure your environment using Distributed Firewall and Data Security
  • Configure third-party services in NSX
  • Manage, configure, and deploy edge gateway services
  • Understand software-defined networks

In Detail

VMware NSX is the network virtualization and security platform that emerged from VMware. It is a platform for the software-defined data center. This software networking platform allows complex networking topologies to be deployed programmatically in seconds. SDNs allow ease of deployment, management, and automation in deploying and maintaining new networks while reducing and in some cases completely eliminating the need to deploy traditional networks.

In Learning VMware NSX, you will see some of these features of SDN and explore VMware NSX, starting with network virtualization. We'll then walk you through the components of NSX and provide step-by-step instructions to help you install and configure NSX. We also cover all the functional services of NSX, edge services gateway, service composer, and data security. In addition, we'll teach you to integrate partner solutions with NSX. Finally, we show you how to manage your NSX deployment and monitor NSX.

Style and approach

This is an easy-to-follow guide with tested configuration steps to get you up and running quickly. This book covers the nitty-gritty of installing, configuring, managing, and monitoring VMware NSX.

Sie lesen das E-Book in den Legimi-Apps auf:

Android
iOS
von Legimi
zertifizierten E-Readern

Seitenzahl: 168

Veröffentlichungsjahr: 2016

Bewertungen
0,0
0
0
0
0
0
Mehr Informationen
Mehr Informationen
Legimi prüft nicht, ob Rezensionen von Nutzern stammen, die den betreffenden Titel tatsächlich gekauft oder gelesen/gehört haben. Wir entfernen aber gefälschte Rezensionen.



Table of Contents

Learning VMware NSX
Credits
About the Author
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers, and more
Why subscribe?
Free access for Packt account holders
Instant updates on new Packt books
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Downloading the example code
Errata
Piracy
Questions
1. An Introduction to Network Virtualization
An introduction to Network Virtualization
The concepts of Network Virtualization
An introduction to the NSX-V network virtualization platform
NSX features and services
NSX configuration maximums
Summary
2. NSX Core Components
An introduction to the NSX core components
NSX Manager
NSX Controller clusters
VXLAN architecture overview
A sample packet flow
Transport zones
NSX Edge Services Gateway
Distributed firewall
Cross-vCenter NSX
Summary
3. NSX Installation and Configuration
Preparing your environment
Downloading and deploying NSX Manager
An overview of the NSX Manager interface
Configuring the NSX Manager
Managing NSX using the vSphere web client
Deploying the control plane
Deploying the data plane
Summary
4. NSX Functional Services
Primary and secondary NSX Managers
Transport Zones
Logical switching
L2 bridges
Deploying an NSX Edge logical router
The Edge services gateway
The logical firewall
Summary
5. Edge Services Gateway
DNS and DHCP services
DHCP service
DNS service
Routing
Configuring Edge Services Gateway OSPF
Configuring OSPF on a logical distributed router
Configuring BGP
Configuring the IS-IS protocol
Route redistribution configuration
Logical Edge load balancers
Virtual Private Networks
SSL VPN-Plus
SSL VPN-Plus network access mode
SSL VPN-Plus web access mode
IPSEC VPN
L2 VPN
More Edge services and configurations
Adding a sub interface
Force-Syncing NSX Edge with NSX Manager
Configuring remote syslog servers
Redeploying an NSX Edge
Summary
6. Data Security
Service Composer
Security groups
Security policies
Mapping security groups and security policies
Data security
Network extensibility
Summary
7. Monitoring
Activity Monitoring
Virtual machine activity report
Flow Monitoring
Traceflow
Summary
8. Managing NSX
NSX Manager settings
Date and time
Syslog server
DNS servers
Technical support logs
SSL certificates
Backup and restore
NSX Manager backup
NSX Manager domain registration
Controller cluster operations
Summary
9. Conclusion
Index

Learning VMware NSX

Learning VMware NSX

Copyright © 2016 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: January 2016

Production reference: 1220116

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-78588-688-1

www.packtpub.com

Credits

Author

Ranjit Singh Thakurratan

Reviewers

Jonathan Frappier

Anthony Spiteri

Commissioning Editor

Veena Pagare

Acquisition Editor

Meeta Rajani

Content Development Editor

Priyanka Mehta

Technical Editor

Menza Mathew

Copy Editor

Kausambhi Majumdar

Project Coordinator

Izzat Contractor

Proofreader

Safis Editing

Indexer

Tejal Daruwale Soni

Production Coordinator

Aparna Bhagat

Cover Work

Aparna Bhagat

About the Author

Ranjit Singh Thakurratan (RJ) is a VMware vExpert (2014 and 2015) and works as a VMware cloud solutions architect, specializing in architecting Enterprise cloud solutions. He works for Rackspace—the #1 managed cloud company and home of Fanatical Support—which is based out of San Antonio, Texas.

RJ holds a master's degree in information technology—infrastructure assurance, an engineering degree in computer science, and has over ten years of hands-on IT experience. He has presented at numerous VMUG UserCon conferences held at Boston, Washington DC, New York, Denver, and Dallas. He also runs a technology blog, www.rjapproves.com, and can be reached via his Twitter handle—@RJAPPROVES. Apart from technology, RJ is also interested in astrophysics, animal welfare, and open source projects.

One of his favorite quotes is:

 

"The greatness of a nation and its moral progress can be judged by the way its animals are treated."

  --Mahatma Gandhi

I would like to thank my parents, Jagat Singh and Thakur Sindhu Kumari, for making me the man I am today, and my brother, Manjit Singh, for being supportive all along. Lastly, to my lovely dog, Shyla Singh, who loves selflessly and has kept me on the move.

About the Reviewers

Jonathan Frappier is a technology professional focused on working with organizations to understand business operations and requirements and then design, transform, and support technology solutions and teams that leverage modern trends in virtualization, cloud computing, DevOps, and social enterprise collaboration.

He works on a wide range of technology, from firewalls and switches to Windows, Active Directory, Exchange, VMware vSphere, storage, backups, disaster recovery, and support custom-developed software, in both large and small companies where technology is heavily relied upon.

I would like to thank my parents and grandparents, my wife and daughter, and the amazing virtualization community for everything you do every day—without you, opportunities like this would not exist.

Anthony Spiteri has been working as a hosting and cloud professional since 2002, and in that time, he has been privileged to work at some of the leading service providers in Australia. Anthony has developed a true passion for his work and has worked on products and services that deliver high quality results through leading edge technologies. As a lead architect at ZettaGrid, he has helped push the boundaries of virtualization and cloud by leading product development and looking into doing great things with a great technology.

As a VMware vExpert and vChampion, Anthony has been able to build on his community work by delivering talks and presentations at various events locally and overseas. He runs the Virtualization is Life! blog at http://anthonyspiteri.net, and he is a contributor to Planet V12n, OneCloud Road, and AussievMafia. He has gained high levels of technical praise for his posts and comments on all things hosting- and cloud-related.

www.PacktPub.com

Support files, eBooks, discount offers, and more

For support files and downloads related to your book, please visit www.PacktPub.com.

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at <[email protected]> for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

https://www2.packtpub.com/books/subscription/packtlib

Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library. Here, you can search, access, and read Packt's entire library of books.

Why subscribe?

Fully searchable across every book published by PacktCopy and paste, print, and bookmark contentOn demand and accessible via a web browser

Free access for Packt account holders

If you have an account with Packt at www.PacktPub.com, you can use this to access PacktLib today and view 9 entirely free books. Simply use your login credentials for immediate access.

Instant updates on new Packt books

Get notified! Find out when new books are published by following @PacktEnterprise on Twitter or the Packt Enterprise Facebook page.

Preface

Networking is the most critical component of any IT architecture. Architects always want to lay the right foundations of networks and solve networking issues before the computation and storage is looked at. This is why I have always felt the need to have a better understanding of networking and how things work.

Network virtualization technology allowed me to have a behind-the-scenes, hands-on look at how networking works and the concepts that made it happen. The ability to deploy virtual appliances such as switches, load balancers, and routers and examine their functionality was very appealing. The pace at which I learned network virtualization (NSX) gave me the confidence to grow in a field in which I thought I lacked significant knowledge. Through my journey, I understood that network virtualization not only made me think like a network engineer, but also made me apply networking concepts very creatively to a virtualized environment, and this made it all the more appealing. What was complex before, now became extremely simple.

In 2015, I went about giving presentations at multiple VMUG UserCon sessions all around the country. My presentation was on Getting started with VMware NSX - Basics and Best Practices. Here, my aim was not to talk about what NSX can do but to talk about how easy it was to get started with NSX and also to squash some common misconceptions about it. I wasn't sure whether this was a topic worth talking about and wasn't expecting a large crowd. (My time slot to present was right after lunch, which wasn't very encouraging.)

Soon, I was proved wrong. In each and every city where I gave my presentations, all of my sessions had a full audience. People were eager to know how to get started with NSX and in fact, preferred this presentation to any of the other VMware NSX presentations happening at the same conference. I was able to quickly identify the huge knowledge gap and the plethora of common misconceptions about NSX and network virtualization, in general. I also observed that many of the attendees were network administrators with an interest in network virtualization.

This feedback from the tech community gave me a desire to write a book that covers the basics and teaches how to get started with NSX. I want to connect to the day-to-day administrator and the network engineer who is wondering how all the dots connect, and this is something I am passionate about. The book explains the basics and covers the deployment of the various features of network virtualization in simple and clear language and with screenshots that allow you to visualize the workflow as you read. I did have to work around a page restriction set by the publisher, so I focused on the most commonly used or sought-after features in the book even though I covered all of the NSX features and functionality. The audience feedback from various conferences helped me greatly.

I hope you enjoy working with this book and that it helps you to learn to use and understand NSX and network virtualization.

What this book covers

Chapter 1, An Introduction to Network Virtualization, gets you started with an introduction to network virtualization and an overview of its concepts. You will briefly learn about some of NSX's features and capabilities. We also have a NSX limits table to help you understand NSX's capabilities.

Chapter 2, NSX Core Components, talks about all the different components of NSX and how they all work together. You will also learn about VXLAN architecture that is the backbone of overlay or virtual networking. We will also briefly talk about transport zones that define the scope of a virtual network. You will learn about NSX Edge services and the distributed firewall as well.

Chapter 3, NSX Installation and Configuration, is where we will start deploying and configuring NSX. We will go over the installation process step by step and then configure our NSX deployment with a vCenter server. You will learn how to manage NSX using the vSphere web client and build your control and data planes.

Chapter 4, NSX Functional Services, discusses the deployment and configuration of different NSX services, such as logical switching, L2 bridging, and Edge gateway services. We will go over the configuration of transport zones and logical switching step by step. This will be an interesting chapter, where you will also learn the deployment of Edge appliances and set up L2 bridging, which allows you to extend a layer 2 network into NSX.

Chapter 5, Edge Services Gateway, discusses the NSX Edge gateway, which offers a lot of features and capabilities. We will go deeper into the services offered by the Edge gateway and look at how to deploy and configure them. We will look at how to configure routing and load balancing. You will also spend some time learning to set up DHCP and DNS services.

Chapter 6, Data Security, discusses one of the most important capabilities of NSX, its security, and also discusses the different NSX security offerings. We will discuss and learn how to set up security groups and configure them by mapping a security group to a specific policy. You will also learn briefly about the network extensibility feature of NSX.

Chapter 7, Monitoring, looks at how to enable monitoring for our environment using NSX. Activity monitoring is one of the features of NSX that is a boon for network and system administrators. You will learn how to configure it along with generating a virtual machine activity report. You will also learn about flow monitoring and Traceflow, which can simulate and allow you to test the network.

Chapter 8, Managing NSX, talks about NSX administrative tasks such as backup and restore and NSX Manager settings. We will revisit NSX Manager and explore all the different settings that can be set. We will look at setting up syslog, time, and DNS settings. We will also look at taking controller snapshots as well. We will also have a look at the setup of our NSX Manager with CA signed certificates along with configuring NSX with a domain.

Chapter 9, Conclusion, is the concluding chapter that includes important information and links

What you need for this book

Although you can dive right into this book, I recommend setting up a modest home lab of three servers running VMware's ESXi and vCenter. You are also encouraged to spend some time exploring the hands on labs offered for free by VMware. The specific NSX labs that will help you greatly are HOL-SDC-1603 and HOL-SDC-1625. These labs will help you get started with NSX without having to worry about the intricacies of having to set it up.

You can get to "hands on labs" by going to http://labs.hol.vmware.com and searching for the two labs I mentioned earlier.

Who this book is for

This book is for those who want to learn how to install, manage, and configure the VMware NSX Network Virtualization platform. If you want to explore, understand, or deploy VMware NSX in your environment, this book is for you. Also, this book can assist you in preparing for VMware NSX certification. Knowledge of the basic networking concepts and VMware components such as vCenter and vSphere is required.

Conventions

In this book, you will find a number of text styles that distinguish between different kinds of information. Here are some examples of these styles and an explanation of their meaning.

Code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles are shown as follows: "We can include other contexts through the use of the include directive."

A block of code is set as follows:

[root@host:~] esxcli software vib list | grepesx esx-vsip6.0.0-0.0.2732470 VMware VMwareCertified 2015-05-29 esx-vxlan6.0.0-0.0.2732470 VMware VMwareCertified 2015-05-29

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

[root@host:~] esxcli software vib list | grepesx esx-vsip6.0.0-0.0.2732470 VMware VMwareCertified 2015-05-29 esx-vxlan6.0.0-0.0.2732470 VMware VMwareCertified 2015-05-29

New terms and important words are shown in bold. Words that you see on the screen, for example, in menus or dialog boxes, appear in the text like this: "Click on Change in the Syslog servers row."

Note

Warnings or important notes appear in a box like this.

Tip

Tips and tricks appear like this.

Reader feedback

Feedback from our readers is always welcome. Let us know what you think about this book—what you liked or disliked. Reader feedback is important for us as it helps us develop titles that you will really get the most out of.

To send us general feedback, simply e-mail <[email protected]>, and mention the book's title in the subject of your message.

If there is a topic that you have expertise in and you are interested in either writing or contributing to a book, see our author guide at www.packtpub.com/authors.

Customer support

Now that you are the proud owner of a Packt book, we have a number of things to help you to get the most from your purchase.

Downloading the example code

You can download the example code files from your account at http://www.packtpub.com for all the Packt Publishing books you have purchased. If you purchased this book elsewhere, you can visit http://www.packtpub.com/support and register to have the files e-mailed directly to you.

Errata

Although we have taken every care to ensure the accuracy of our content, mistakes do happen. If you find a mistake in one of our books—maybe a mistake in the text or the code—we would be grateful if you could report this to us. By doing so, you can save other readers from frustration and help us improve subsequent versions of this book. If you find any errata, please report them by visiting http://www.packtpub.com/submit-errata, selecting your book, clicking on the Errata Submission Form link, and entering the details of your errata. Once your errata are verified, your submission will be accepted and the errata will be uploaded to our website or added to any list of existing errata under the Errata section of that title.

To view the previously submitted errata, go to https://www.packtpub.com/books/content/support and enter the name of the book in the search field. The required information will appear under the Errata section.

Piracy

Piracy of copyrighted material on the Internet is an ongoing problem across all media. At Packt, we take the protection of our copyright and licenses very seriously. If you come across any illegal copies of our works in any form on the Internet, please provide us with the location address or website name immediately so that we can pursue a remedy.

Please contact us at <[email protected]> with a link to the suspected pirated material.

We appreciate your help in protecting our authors and our ability to bring you valuable content.

Questions

If you have a problem with any aspect of this book, you can contact us at <[email protected]>, and we will do our best to address the problem.

Chapter 1. An Introduction to Network Virtualization

This chapter begins with a brief introduction to Network Virtualization followed by an overview of its concepts. We then introduce VMware's NSX-V Network Virtualization solution that allows you to deploy and manage your own software-defined networking stack. We will go over all the features and services of NSX followed by its configuration maximums. By the end of this chapter, you will have a thorough understanding of the concepts of Network Virtualization and NSX-V as a Network Virtualization solution.

In this chapter, we will cover the following:

An introduction to Network VirtualizationThe concepts of Network VirtualizationAn introduction to the NSX-V Network virtualization platformNSX features and servicesNSX configuration maximums

An introduction to Network Virtualization

Today's datacenter demands have undergone a paradigm shift from what they were a decade ago. As the cloud consumption model is being rapidly adopted across the industry, the need for on-demand provisioning of compute, storage, and networking resources is greater than ever. One of the biggest contributing factors to enable the cloud consumption model isServer virtualization. Server virtualization has enabled fast consumption of compute resources along with add-on functionality and services. Snapshots, clones, and templates are all now easier than ever with Server virtualization.