dennisjohnson10
Contributor
Contributor

ESG and DLR

Hi,

Hopefully, this is a simple question but im have some issues with routing outside of my DLR. 

My DLR with 3 Logical Switches work fine for routing. This DLR is then uplinked to a Logical Switch called "Uplink" which is then connected to the ESG. The uplink is connected with 192.168.0.2/24 and 192.168.0.3/24 just to make it simple. I can access everything internal to the DLR from the DLR and everything from the ESG external to the ESG. However, something between the DLR "uplink" and ESG does not communicate. Maybe my routes are wrong, maybe the logical switch is not what I need.

Any ideas? 

Thanks.

0 Kudos
6 Replies
MohamadAlhousse
Enthusiast
Enthusiast

Hi dennisjohnson104

Are using static routing or dynamic routing configuration between DLR and ESG ?

Regards,

Please consider marking this answer "correct" or "helpful" if you think your question have been answered correctly. Cheers, @vExpertConsult www.vexpertconsultancy.com VCIX-DCV 2018 | VCIX-NV 2019 | VCAP7-CMA Design | vSAN Specialist | vExpert ** | vExpert NSX | vExpert vSAN
0 Kudos
dennisjohnson10
Contributor
Contributor

Static, really basic. I have df gw set on ESG to point to external hardware router and the basic static routes to point each direction. 
0 Kudos
MohamadAlhousse
Enthusiast
Enthusiast

Did you add a default route to the ESG on the DLR as well ? This is needed to tell the internal logical switches that their gateway to go to outside is the ESG.

Example: "0.0.0.0/0 via ESG internal interface IP address"

You need a static route from outside (physical router or firewall) to point to your internal IP address ranges of the logical switches via the ESG.

Example: 10.10.10.0/24 via ESG uplink interface IP address"

Regards,

Please consider marking this answer "correct" or "helpful" if you think your question have been answered correctly. Cheers, @vExpertConsult www.vexpertconsultancy.com VCIX-DCV 2018 | VCIX-NV 2019 | VCAP7-CMA Design | vSAN Specialist | vExpert ** | vExpert NSX | vExpert vSAN
0 Kudos
dennisjohnson10
Contributor
Contributor

"Example: "0.0.0.0/0 via ESG internal interface IP address" I think this is it. Let me check and ill update you. 

0 Kudos
dennisjohnson10
Contributor
Contributor

That was it, thanks. 
0 Kudos
MohamadAlhousse
Enthusiast
Enthusiast

You welcome dear,

Glad to help you.

Please mark the answer as correct to close this discussion.

Thank you,

Please consider marking this answer "correct" or "helpful" if you think your question have been answered correctly. Cheers, @vExpertConsult www.vexpertconsultancy.com VCIX-DCV 2018 | VCIX-NV 2019 | VCAP7-CMA Design | vSAN Specialist | vExpert ** | vExpert NSX | vExpert vSAN
0 Kudos