VCP6-NV Study Notes-Section 5: Configure VMware NSX Virtual Networks – Part 2

Dynamic routing provides the necessary forwarding information between layer 2 broadcast domains, thereby allowing you to decrease layer 2 broadcast domains and improve network efficiency and scale

Source: http://pubs.vmware.com/NSX-6/topic/com.vmware.ICbase/PDF/nsx_6_admin.pdf

Install NSX Edge

Source: http://pubs.vmware.com/NSX-6/topic/com.vmware.ICbase/PDF/nsx_6_install.pdf

Understand how to connect/disconnect a logical switch from a logical router

Understand and describe the different types of router interfaces

Source: http://pubs.vmware.com/NSX-6/topic/com.vmware.ICbase/PDF/nsx_6_admin.pdf

Determine NSX components needed to build out topologies with logical routers

Source: http://pubs.vmware.com/NSX-6/topic/com.vmware.ICbase/PDF/nsx_6_admin.pdf

Understand how to add and configure a new logical router

Determine use case for and configure a management interface

See above

Determine use case for and configure High Availability for a logical router

See above

Configure routing protocols

• Static Route
  • Click Networking and Security and then click NSX Edge
  • Double-click NSX Edge
  • Click the Manage tab and then click the Routing tab
  • Select Stati routes from the left panel
  • Click the Add icon
  • Type a description for the static route
  • Select the interface on which to add a stati route
  • type the network CIDR notation
  • type IP address of the Next hop
  • For MTU, edit the max transmission value for the data packets if required and click OK
• OSPF
  • OSPF routing policies provide a dynamic process of traffic load balancing between routes of equal cost.
  • An OSPF network is divided into routing areas to optimize traffic. An area is a logical collection of OSPF networks, routers, and links that have the same area identification
  • Prerequisite: Router ID must be specified
  • Procedure
    • Doble click NSX Edge and Click routing then OSPF
    • For Edge gw -> Click Enable
    • For logical router
      • click Edito at the top right corner
      • Click Enable OSPF
      • in Forwarding Address type an IP address used by route datapath module in the hosts to forward
      • In protocol Address type a unique IP address with the same subnet as the Forwarding Address.
    • In Area Definitions click Add icon
    • Type an Area ID (it supports an area ID in the form of an IP address or decimal number)
    • Select Stub in the Type field
    • Select the type of Authentication.
      • None
      • password
      • MD5
    • In Area to interface mapping, click the Add icon to map the interface that belongs to the OSPF area
    • Select the interface you want to map and the OSPF area that you want to map it to.
    • Hello Interval displays the default interval between hello packets are sent on the interface. (Edit the default if required)
    • Dead interval displays. the interval during which at least one hello packer must be received from a neighbor before declare down
    • Priority displays the default priority of the interface
    • Cost of an interface displays the default overhead required to send packets across that interface.
    • Click OK and then Publish Changes
• BGP
  • Border Gateway Protocol (BGP) makes core routing decisions. It includes a table of IP networks or prefixes which designate network reachability among autonomous systems.
  • Procedure
    • Double-click an NSX Edge
    • Click Routing and then click BGP
    • Click Edit
    • In the Edit BGP Configuration dialog box, click Enable BGP.
    • Type the router ID in Local AS. Type the Local AS. This is advertised when BGP peers with routers in other autonomous systems (AS). The path of ASs that a route traverses is used as one metric when selecting the best path to a destination.
    • Click Save.
    • In Neighbors, click the Add icon.
    • Type the IP address of the neighbor.
    • Type the remote AS.
    • Edit the default weight for the neighbor connection if required.
    • Hold Down Timer displays interval (180 seconds) after not receiving a keep alive message that the software declares a peer dead. Edit if required.
    • Keep Alive Timer displays the default frequency (60 seconds) with which the software sends keep alive messages to its peer. Edit if required.
    • If authentication is required, type the authentication password. Each segment sent on the connection between the neighbors is verified. MD5 authentication must be configured with the same password on both BGP neighbors, otherwise, the connection between them will not be made.
    • To specify route filtering from a neighbor, click the Add icon in the BGP Filters area.
    • Select the direction to indicate whether you are filtering traffic to or from the neighbor.
    • Select the action to indicate whether you are allowing or denying traffic.
    • Type the network in CIDR format that you want to filter to/from the neighbor.
    • Type the IP prefixes that are to be filtered and click OK. and click Publish Changes.
• IS-IS
  • Intermediate System to Intermediate System (IS-IS) is a routing protocol designed to move information by determining the best route for datagrams through a packet-switched network.
  • Procedure:
    • Log in to the vSphere Web Client.
    • Click Networking & Security and then click NSX Edges.
    • Double-click an NSX Edge.
    • Click Routing and then click IS-IS.
    • Click Edit and then click Enable IS-IS.
    • Type the System ID and select the IS-IS type.
      • Level 1 is intra-area, Level 2 is inter-area, and Level 1-2 is both.
      • Level 2 routers are inter-area routers that can only form relationships with other Level 2 routers.
      • Routing information is exchanged between Level 1 routers and other Level 1 routers, and Level 2 routers only exchange information with other Level 2 routers.
      • Level 1-2 routers exchange information with both levels and are used to connect the inter-area routers with the intra-area routers.
    • Type the Domain Password and Area Password. The area password is inserted and checked for Level 1 link state packets, and the domain password for Level 2 link state packets.
    • Define the IS-IS areas.
      • Click the Add icon in Areas.
      • Type up to three area IP addresses.
      • Click Save.
    • Configure interface mapping.
      • Click the Add icon in Interface Mapping.
      • Choose the Circuit Type to indicate whether you are configuring the interface for Level-1, Level-2, or Level-1-2 adjacency.
      • Hello Interval displays the default interval in milliseconds between hello packets that are sent on the interface. Edit the default value if required.
      • Hello Multiplier displays the default number of IS-IS hello packets a neighbor must miss before it is declared down. Edit the default value if required.
      • LSP Interval displays the time delay in milliseconds between successive IS-IS link-state packet (LSP) transmissions. Edit the default value if required.
      • Metric displays default metric for the interface. This is used to calculate the cost from each interface via the links in the network to other destinations. Edit the default value if required.
      • Priority displays the priority of the interface. The interface with the highest priority becomes the designated router. Edit the default value if required.
      • In Mesh Group, type the number identifying the mesh group to which this interface belongs. Edit the default value if required.
      • Type the authentication password for the interface and click OK. Edit the default value if required.
    • Click Publish Changes.

Configure default gateway

Determine if cross-protocol route sharing is needed for a given NSX implementation

Understand how to configure administrative distances for routing

Understand configuration differences between iBGP and eBGP

When BGP runs between two peers in the same autonomous system (AS), it is referred to as Internal BGP (iBGP or Interior Border Gateway Protocol). When it runs between different autonomous systems, it is called External BGP (eBGP or Exterior Border Gateway Protocol). Routers on the boundary of one AS exchanging information with another AS are called border or edge routers or simply eBGP peers and are typically connected directly, while iBGP peers can be interconnected through other intermediate routers.

Source: https://en.wikipedia.org/wiki/Border_Gateway_Protocol

Understand and configure route redistribution