Hi,
Migration to VMware NSX-T Data Center (NSX-T) is top of mind for customers who are on NSX for vSphere (NSX-V). Broadly speaking, there are two main methods to migrate from NSX for vSphere to NSX-T Data Center: In Parallel Migration and In Place Migration.
Example: Partial Migration
Let us say that your organization wants to migrate only the
NSX-v Distributed Firewall configuration to protect the flow of east-west traffic in the newly deployed
NSX-T Data Center. To achieve this goal, use the following high-level migration workflow:
- Deploy the new NSX-T Data Center environment on a separate hardware.
Compute clusters for NSX-v and NSX-T Data Center environments must be different because both cannot coexist on the same hosts. Management and Edge Clusters might be shared with both environments.
- Create the NSX-T network topology and configure the necessary network services.
- Configure an NSX-T Edge bridge to extend the Logical Switch in NSX-v to an overlay segment in NSX-T.
- Use the migration coordinator to migrate the Distributed Firewall configuration.
- Switch the default gateway to the NSX-T Data Center environment.
- Use NSX-T Edge bridge and vSphere vMotion to migrate workload VMs to the overlay segment in NSX-T.
- Migrate the Security Tags to the workload VMs in NSX-T.
Important:When you use the lift and shift approach to migrate the DFW configuration from NSX-v to NSX-T, you must run the DFW-only migration mode of the migration coordinator only once. After the DFW configuration is migrated to NSX-T, you must not update the DFW configuration in your NSX-v environment and run the DFW-only migration mode again. Running the DFW-only migration mode multiple times is not recommended.
Please refer to the below link.
Migrating Distributed Firewall Configuration
