VCP6-NV Study Notes – Intro and Exam Topics

This is the beginning of my study notes, written in preparation of VPC6-NV exam. The requirements to attend this exam are the followings:

  • If you’re new candidate you must attend (and pass) vSphere 6.x Foundation Exam (VCP6-DCV)
  • You hold a Cisco certification such as CCNA Data Center, CCNA Routing & Switching, CCNP Data Center, CCNP Routing & Switching, CCIE Data Center, CCIE Routing & Switching
  • You hold a VCP-5 or VCP6-DCV

My mobile lab

To test some NSX components I‘m using my PC with 16GB RAM and VMware Workstation. This lab is composed by the following virtual machines:

  • 1 Firewall pfSense (for external communications)
  • 1 ESXi 6.5 (14GB RAM min)
  • 1 vCenter 6.5 (reduced memory)
  • 1 NSX Manager (reduced to 2 vCPU and 4GB RAM
  • 2 test VMs (Ubuntu 16.x) (only 1GB each)

and 3 networks:

  • 1 Bridged connection connected to the FW that simply simulate the external network
  • 2 Host only connection for management and Transport zone

The NSX Manager installation through VMware Workstation is not the same as in vSphere environment: it requires the following tricks in order to make it works:

  1. Extract the ova into a directory and edit the ovf file through your preferred editor
  2. Modify the parameters reduscing the memory (in MB) and processors to 2 vCPU and 4GB RAM
  3. Delete cert file (more corrected action should the re-creation with openssl; too much for lab purpose)
  4. Using PowerShell issue the following command:  Get-FileHash .\VMware-NSX-Manager-6.3.5-7119875.ovf -Algorithm SHA1 and copy and paste the hash string into Manifest file (VMware-NSX-Manager-6.3.X-XXXXX.mf)
  5. After import, skipping the wizard, change the virtual nic settings into correct lan segment (in my case there’s a host-only network created for vCenter, ESXi and NSX Manager communication)
  6. After boot-up is complete, logon into NSX manager using VMware Workstation console (credentials are admin/default) and type the following commands
    1. enable with “default” as password
    2. setup and configure network as you want
    3. after setup complete type y to reboot the virtual appliance
  7. Login into web interface (credentials are admin/default)
  8. Optionally change the password from cli using command here:
    1. enable and type configure terminal
    2. then cli password <your_password_here>
    3. write memory then exit

Now you’re ready to configure vCenter and SSO connections following the official documentation here: https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.3/com.vmware.nsx.install.doc/GUID-D18A11DF-3D85-4B80-8713-D611648D43F4.html

Hands on lab

I think that the best to evaluate the NSX environment is using a preconfigured lab that best shows quite all NSX features and in a guided way. Just register HOL and check the following labs:

  • HOL-1803-01-NET – VMware NSX – Getting Started
  • HOL-1803-02-NET – VMware NSX – Distributed Firewall and Micro-Segmentation
  • HOL-1803-03-NET – VMware NSX – Operations and Visibility
  • HOL-1823-01-NET – Palo Alto Networks VM-Series on NSX – Next-Gen Security for your SDDC (Just an example with 3rd party integration)
  • HOL-1824-01-NET – Check Point vSEC and NSX – Advanced SDDC Security (another example with 3rd party integration)
  • HOL-1825-01-NET – VMware NSX – Advanced Consumption
  • HOL-1825-02-NET – VMWare NSX and SRM – Active-Standby Solution

Just check here: http://labs.hol.vmware.com/HOL/catalogs/catalog/877

Blueprint Sections

Based on my study process this section will be update frequently. Stay tuned!

  1. Understand VMware NSX Technology and Architecture
    1. Compare and Contrast the Benefits of a VMware NSX Implementation
    2. Understand VMware NSX Architecture
    3. Differentiate Physical and Virtual Network Technologies
    4. Understand VMware NSX Integration with Third-Party Products and Services
    5. Understand VMware NSX Integration with vRealize Automation (vRA)
  2. Understand VMware NSX Physical Infrastructure Requirements
    1. Compare and Contrast the Benefits of Running VMware NSX on Physical Network Fabrics Fabrics
    2. Determine Physical Infrastructure Requirements for a VMware NSX Implementation
  3. Configure and Manage vSphere Networking
    1. Configure and Manage vSphere Distributed Switches (vDS)
    2. Configure and Manage vDS Policies
  4. Install and Upgrade VMware NSX
    1. Configure Environment for Network Virtualization
    2. Deploy VMware NSX Components
    3. Upgrade Existing vCNS/NSX Implementation
    4. Expand Transport Zone to Include New Cluster(s)
  5. Configure VMware NSX Virtual Networks
    1. Create and Administer Logical Switches
    2. Configure VXLAN
    3. Configure and Manage Layer 2 Bridging
    4. Configure and Manage Logical Routers
  6. Configure and Manage NSX Network Services
    1. Configure and Manage Logical Load Balancing
    2. Configure and Manage Logical Virtual Private Networks (VPN)
    3. Configure and Manage DHCP/DNS/NAT
    4. Configure and Manage Edge Services High Availability
  7. Configure and Administer Network Security
    1. Configure and Administer Logical Firewall Services
    2. Configure Distributed Firewall Services
    3. Configure and Manage Service Composer
  8. Deploy a Cross-vCenter NSX Environment
    1. Differentiate single and Cross-vCenter NSX deployments
    2. Determine Cross-vCenter Requirements and Configurations
  9. Perform Operations Tasks in a VMware NSX Environment
    1. Configure Roles, Permissions, and Scope
    2. Understand NSX Automation
    3. Monitor a VMware NSX Implementation
    4. Perform Auditing and Compliance
    5. Administer Logging
    6. Backup and Recover Configurations
  10. Troubleshoot a VMware Network Virtualization Implementation
    1. Compare and Contrast Tools Available for Troubleshooting
    2. Troubleshoot Common NSX Installation/Configuration Issues
    3. Troubleshoot Common NSX Component Issues
    4. Troubleshoot Common Connectivity Issues
    5. Troubleshoot Common vSphere Networking Issues

Disclaimer

This guide is based on official documentation but this doesn’t substitute the official doc. In all cases I’ll not post question/answer or give the opportunity to share confidential data about this exam.

Salva

Salva