Regarding NSX-T Edges

[Cloudistan]

Hi,

Is it possible to get a policy for the NSX-T edge (that is not a logical router)? can I define a rule on it?

Why is the button on: Advanced Networking & Security->Security->Edge Firewall is disabled?

Thanks,

Gil

[mauricioamorim]

Do you want to create firewall rules on a T1 or a T0 router? Have you looked at Add or Delete a Firewall Rule to a Logical Router ?

[Cloudistan]

No, I want to create firewall rules on an edge that is a fabric node, not a logical router.

I NSX-V it was possible, is it possible in NSX-T also?

[mauricioamorim]

NSX-V architecture is different and it is usually better if you don't try to think NSX-T in the way V was. In V the Edge is a router-VM and on T it is a VM that can host one or more logical routers. So it makes no sense having a firewall on the Edge itself if the router is an entity hosted inside it. What are you trying to accomplish?

[Cloudistan]

OK, Thank you for the response.