ddesmidt Tracker

Re: NSX Multisite 101 ToI

ddesmidt — Wed, 03 May 2023 02:10:14 GMT

Question1:

You configure interfaces on your T0. And for each interface you explicitly tell on which Edge Node that T0-interface is.

Then based on that configuration, all the Edge Nodes with an interface will have that T0.

And if you have configured the T0 in A/A; then all those Edge Nodes will participate to N/S via ECMP.

Question2:

No there is no ability to do "Local-Egress" with NSX Multisite Design, as you can see in the "NSX Multi-Location Design Guide" - chapter 3.3.2.3 (Google it to find that document).

NSX Anti-Malware Detection and Presentation (101 and 301 levels)

ddesmidt — Wed, 08 Nov 2023 10:31:14 GMT

Two NSX Anti-Malware Presentations:

101 level for a quick NSX Malware Detection and Prevention presentation
- what's new in NSX 4.0.1.1
- what it is
- how it works
- and its reporting capabilities

301 level for deeper NSX Malware Detection and Prevention presentation
- with the same points as 101, plus
- packet walk of Gateway and Distributed Malware Detection and Prevention
- reporting
- requirements / limitations / scale
- high-availability
- malware file DB population
- installation
- upgrade
- troubleshooting

NSX Malware Detection and Prevention demo is also available here.

Note: Those ToI may be updated in the future so always check you have the latest version.

101 ToI version is 1.1 (for NSX 4.1) done on 09/19/2023.

301 ToI version is 1.4 (for NSX 4.1) done on 11/07/2023.

Older NSX-T releases are also attached if needed.

NSX-T Malware Detection and Prevention Demo

ddesmidt — Tue, 31 May 2022 18:51:28 GMT

One Malware Detection and Prevention demo is proposed here.

NSX-T Malware Detection and Prevention presentation is also available here.

Enjoy the demo.

Dimitri

NSX Physical Server ToI

ddesmidt — Tue, 31 Oct 2023 16:08:41 GMT

Two NSX Physical Server Presentations:

101 level for a quick NSX Physical Server presentation
- topologies with Physical Servers
- NSX services supported with Physical Servers

301 level for deeper NSXPhysical Server presentation
- with the same points as 101, plus
- detailed supported topologies
- preparation and installation
- troubleshooting

Note: This document may be updated in the future so always check you have the latest version.

NSX-T 4.0-4.1:

The latest physical server 101 ToI version for NSX 4.0-4.1 release is 1.0 done on 03/15/2023

The latest physical server 301 ToI version for NSX 4.0-4.1 release is 1.5 done on 10/30/2023.

Updated version 1.1 03/08/2023 = Updated deck with NSX 4.1 enhancement (support on all Linux of topology VLAN bond mode 1 with bond configured in Linux).

Updated version 1.3 04/14/2023 = update on licenses (NSXROBO licenses doesn't support Physical Server).

Updated version 1.4 08/18/2023 = update on NSX Intelligence support and no SE Linux support.

Updated version 1.5 10/10/2023 = update on 4?1?2 new topology supported

NSX-T 3.2:

The latest physical server encyclopedia version for NSX-T 3.2 release is 1.6 done on 04/14/2023.

Updated version 1.1 04/11/2022 = clarification of DFW services supported slide 10.

Updated version 1.2 05/25/2022 = clarification of the different topologies supported.

Updated version 1.3 06/10/2022 = clarification/correction of the different topologies supported.

Updated version 1.5 12/08/2022 = update on pNICs support. Now all pNICs are supported (in case of Overlay on Windows, the pNIC driver must support jumbo packets though).

Updated version 1.6 04/14/2023 = update on licenses (NSX ROBO licenses doesn't support Physical Server).

Updated version 1.7 08/18/2023 = update on NSX Intelligence support and SELinux not supported.

Re: NSX-T 3.1 Multi-Location Design Guide (Federation + Multisite)

ddesmidt — Wed, 26 Jan 2022 18:28:44 GMT

@jeffersonc47

The NSX-T 3.2 brings some enhancement in Multi-Location:

Multisite + Network Introspection / Endpoint Protection
Federation + LM Network Introspection / LM Endpoint Protection
GM Sync VM Tag
AD/LDAP support in GM

I expect the NSX-T Multi-Location Design Guide for NSX-T 3.2 to be available end of this week

Re: NSX-T 3.1 Multi-Location Design Guide (Federation + Multisite)

ddesmidt — Wed, 26 Jan 2022 18:26:26 GMT

@MaciekMac

After the "deactivate cluster, you have to redeploy new NSX-T Mgr VMs to rebuild a cluster of 3 VMs Managers.

Re: NSX-T Mulltilocation Design Guide Clarification

ddesmidt — Tue, 06 Jul 2021 11:33:51 GMT

Your understanding is correct

North-South:

Green segments go to public (internet) via T0 on Location-C, Blue segments go to public (internet) via T0 that resides on Location-A

And this wherever location the Blue or Green VMs are.

East-West:

The router attached to the Segment is distributed.

So for instance

The Location-B_VM_Blue_TopSegment talking to the Location-B_VM_Blue_BottomSegment will have its L3 traffic in Location-B only
The Location-A_VM_Green_TopSegment talking to the Location-B_VM_Green_BottomSegment will have its L3 traffic between Location-A and Location-B (not Location-C)

Re: NSX-T 3.1 Multi-Location Design Guide (Federation + Multisite)

ddesmidt — Tue, 08 Jun 2021 15:36:48 GMT

@CyberNils Can you try again?

Re: NSX-T 3.1 Multi-Location Design Guide (Federation + Multisite)

ddesmidt — Mon, 07 Jun 2021 20:20:16 GMT

@kermic

You are correct about the SRM / vSphere Replication comment. I just fixed it in the lasted Design Guide.

And about your asynchronous replication question, you're also correct. It's supported since NSX-T 3.0.2 (https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-F3A0A27E-88C0-4A64-8754-33CED93985D3.html).

Thanks,

Dimitri

Re: NSX-T LB Encyclopedia

ddesmidt — Thu, 25 Feb 2021 15:49:38 GMT

@delsaadany

There is indeed only 1 ppt here under attachment (the NSX-T LB Encyclopedia).

Note: I mention on that page also another great document (NSX-T LB ToI) for people's information.

Re: NSX-T 3.1 Multi-Location Design Guide (Federation + Multisite)

ddesmidt — Tue, 19 Jan 2021 17:43:26 GMT

Yes "deactivate cluster" is also supported in NSX-T 2.x releases.

Re: New published document with attachment can't be downloaded after 12 hours

ddesmidt — Wed, 18 Nov 2020 16:40:16 GMT

It's indeed OK now.

It took more than 6 hours.

Not sure why...

New published document with attachment can't be downloaded after 12 hours

ddesmidt — Wed, 18 Nov 2020 01:50:07 GMT

https://communities.vmware.com/t5/VMware-NSX-Documents/NSX-T-3-1-Multi-Location-Design-Guide-Federation-Multisite/ta-p/2810327

Both have "(Virus scan in progress ...)"

NSX Federation 101 ToI

ddesmidt — Mon, 30 Oct 2023 20:18:17 GMT

This deck offers a nice presentation of what is NSX Federation and how it works.

A very similar deck was used at VMworld 2020 session VCNC1178D here and watching is a nice option as it gives "voice over" the deck.

Federation demos are also available here.

Note1:

This ToI may be updated in the future so always check you have the latest version.

. NSX 4.0-4.1 Federation 101 ToI version is 1.0 done on 10/30/2023.

. NSX-T 3.2 Federation 101 ToI version is 1.1 done on 08/26/2022.

Note2:

For deeper information, we also offer the "NSX Federation Multi-Location Design Guide (Federation + Multisite)" here.

NSX-T Multi-Location Design Guide (Federation + Multisite)

ddesmidt — Tue, 22 Aug 2023 22:39:01 GMT

NSX-T offers two technical solutions for Multi-Locations On-Prem Data Centers:

NSX-T Federation
NSX-T Multisite

This NSX-T Multi-Location Design Guide offers guidance and best practices for Network & Security services in your On-Prem locations.

FYI there is also some other nice documents on this use case:

NSX-T Federation Presentation (ppt deck here with a link to demos)
NSX-T Multisite Presentation (ppt deck here with embedded demos)

Note: This document may be updated in the future so always check you have the latest version.

The Design Guide version for NSX-T 4.1 release is 1.4 done on 08/22/2023.

The Design Guide version for NSX-T 4.0 release is 1.10 done on 08/22/2023.

The Design Guide version for NSX-T 3.2 release is 1.19 done on 08/22/2023.

The Design Guide version for NSX-T 3.1 release is 1.31 done on 06/21/2023.

Max size of attachment

ddesmidt — Mon, 16 Nov 2020 18:54:41 GMT

In the past it was possible to add large attachments (see https://communities.vmware.com/t5/VMware-NSX-Documents/Federation-Demos/ta-p/2778973).

It looks like today we are limited to 38MB.

Can we get rid of that limitation, as ToI with demos will most likely be above that (200MB would be perfect)?

Dimitri

Re: How to delete an obsolete document?

ddesmidt — Sat, 14 Nov 2020 02:06:59 GMT

Are you saying it's NOT possible for the document creator to delete/purge a published document?

And so the procedure is to ask you via a HELP question under "Technical Community Resources and Help Discussions"?

If that's the case, can you also delete/purge the following:

Thanks,

Dimitri

How to delete an obsolete document?

ddesmidt — Fri, 13 Nov 2020 18:45:32 GMT

That page is now obsolete:https://communities.vmware.com/t5/VMware-NSX-Documents/NSX-T-2-4-Load-Balancing-ToI/ta-p/2790512

A new one has been created instead: https://communities.vmware.com/t5/VMware-NSX-Documents/NSX-T-LB-ToI/ta-p/2782732

How to delete an obsolete document?

Dimitri

Re: How to Publish a new Document?

ddesmidt — Wed, 11 Nov 2020 01:52:11 GMT

Should I understand you don't know either how to create a Document on VMware Community?

If no, when do you expect to know so you can teach me?

If yes, can you teach me?

Thanks,

Dimitri

How to Publish a new Document?

ddesmidt — Tue, 10 Nov 2020 20:16:57 GMT

Since the VMware Community platform refresh, under "VMware NSX Documents" (https://communities.vmware.com/t5/VMware-NSX-Documents/tkb-p/4002), I can't figure out how to publish a new document?

What is the workflow for such thing?

Thanks,

Dimitri