vempati73
Contributor
Contributor

Connectivity between Two Transport Zones in NSX

Jump to solution

hi

I have a doubt on Connectivity between Two transport Zones in NSX. As per Transport Zones in VMware documentation

1. There is a 1:1 relation between Logical SWitch and Transport Zones

2. A logical switch cannot be part of Two Transport Zones

3. We cannot attach a DLR or ESG to two transport Zones

4. To acheive Security Isolation, We should map the VM's to a seperate Transport zone so that Other VM's part of other transport zones does not visibility of these VM's.

My understanding we can Interpret a transport zone as a Tenant and achieve a Isoloation. In case if I want to have communication between Vm's in two transport zones how do we achieve. Can some one explain or point me to VMWare documentation on routing between TRansport zones.

regards

vempati 

0 Kudos
1 Solution

Accepted Solutions
Beingnsxpaddy
Enthusiast
Enthusiast

Your understanding is correct as transport zones can not have common DLR, so in order to route traffic between TZ you need to have a ESG in place, which can route traffic from one TZ to another. Its same as two different companies/tenants.

Regards Pradhuman VCIX-NV, VCAP-NV, vExpert, VCP2X-DCVNV If my Answer resolved your query don't forget to mark it as "Correct Answer".

View solution in original post

0 Kudos
6 Replies
Beingnsxpaddy
Enthusiast
Enthusiast

dear vempati73​,  By any chance did you look at this article.

A Multi-Tenant Topology in VMware NSX - ipcraft.net

Regards Pradhuman VCIX-NV, VCAP-NV, vExpert, VCP2X-DCVNV If my Answer resolved your query don't forget to mark it as "Correct Answer".
0 Kudos

Hello,

Kindly check the following URLs which more explain the TZ concept:

Please consider marking this answer "CORRECT" or "Helpful" if you think your question have been answered correctly.

Cheers,

VCIX6-NV|VCP-NV|VCP-DC|

@KakHassan

linkedin.com/in/hassanalkak


Cheers,
vExpert2020-2019||vExpert-NSX2020||VCIX6-NV||VCAP-NV-DCV||VCP-NV-DC-CMA||CCNA-R&S
Twitter: @KakHassan
LinkedIn: linkedin.com/in/hassanalkak
0 Kudos
vempati73
Contributor
Contributor

hi

Thanks for sharing the link, yes i came across the link while googling for the answer.

To achieve Communication between transport zones, assuming TZ as Tenant,  configure a ESG and enable routing between the Tenant ESG.

hope my understanding correct

regards

vempati chalapathy

0 Kudos
vempati73
Contributor
Contributor

hi

Thanks for reply, I gone through the links, Answer i am looking was not addressed in the link.

regards

vempati chalapathy

0 Kudos
Beingnsxpaddy
Enthusiast
Enthusiast

Your understanding is correct as transport zones can not have common DLR, so in order to route traffic between TZ you need to have a ESG in place, which can route traffic from one TZ to another. Its same as two different companies/tenants.

Regards Pradhuman VCIX-NV, VCAP-NV, vExpert, VCP2X-DCVNV If my Answer resolved your query don't forget to mark it as "Correct Answer".
0 Kudos

100% Smiley Wink

Please consider marking this answer "CORRECT" or "Helpful" if you think your question have been answered correctly.

Cheers,

VCIX6-NV|VCP-NV|VCP-DC|

@KakHassan

linkedin.com/in/hassanalkak


Cheers,
vExpert2020-2019||vExpert-NSX2020||VCIX6-NV||VCAP-NV-DCV||VCP-NV-DC-CMA||CCNA-R&S
Twitter: @KakHassan
LinkedIn: linkedin.com/in/hassanalkak