NSX-T Part2 – Simple Configuration Run-through

In my first NSX-T blog post “NSX-T Part1 – Simple Installation Run-through” you can read about how easy it is to install the base components of NSX-T. The next step is obviously to configure everything so we can benefit from it. So let’s get started!

1. Create Transport Zones

First of all, we need to configure the Transport Zone. A Transport Zone defines the potential reach of Transport Nodes (Hypervisor Hosts or NSX Edges). Transport Nodes in the same Transport Zone can communicate which each other. There are two different types of Transport Zones, Overlay, and VLAN. Hypervisor Hosts can only participate in one Transport Zone whilst NSX Edges can have multiple Transport Zones, e.g. an Overlay Transport Zone to facilitate the encapsulated communication between Transport Nodes and a VLAN based Transport Zone to connect the uplink to the outside world.

screen-shot-2018-07-17-at-22-08-43.png

In this scenario, we create two Transport Zones, one for the Overlay communication and another one for the VLAN based uplink to the outside world. By the way, I am using “Standard” N-VDS Mode. The ENS mode, also known as “Enhanced Datapath” uses DPDK techniques and provides better performance for latency-sensitive applications such as NFV workloads.

Screen Shot 2018-07-17 at 22.45.05

2. Create an IP-Pool

Next step is to create an IP-Pool for Transport Nodes (Tunnel Endpoints, also known as vTEPs) participating in the Overlay Transport Zone. In my example, this is a simple class c network “192.168.50.100 – 192.168.50.150”.

Screen Shot 2018-07-16 at 20.27.33

3. Uplink Profiles

To configure the Transport Nodes with the right uplink configuration, we need to create an Uplink Profile. The Uplink Profile specifies the Teaming Policy, Transport VLAN, MTU size and uplink configuration. It allows you to easily configure network adapters consistently across multiple Hosts and Edges.

Screen Shot 2018-07-17 at 22.59.15

We need to create a second Uplink Profile for the Edge VMs. The profile for the Edge VMs can only have one active and no standby uplink according to the NSX-T documentation. Which makes perfect sense as the failover will be handled on the ESXi host level and not on the VM level. In my case, I don’t have to specify a VLAN ID as the Edge VM will be connected to a vSphere Port Group that is already VLAN tagged.

Screenshot 2019-02-12 at 16.58.14

4. Configure Host Transport Nodes

After we have prepared the IP-Pool and the Uplink Profile, we can create our first Transport Node under “Fabric/Nodes/Transport Nodes”. We need to specify a name as well as the ESXi host that will be configured as a Transport Node. Further down, we need to select the Transport Zone in which the node will participate.

Screenshot 2019-02-11 at 15.08.14.png

On the N-VDS tab, we need to create a new Node Switch. The N-VDS Name will be selectable from the dropdown menu for further Transport Node creations, but as this is the first Node, we need to specify a name for the switch.

Screenshot 2019-02-11 at 17.16.55.png

Select the Uplink Profile we have created in step 3 and select “Use IP Pool” from the dropdown for “IP Assignment”. As the IP Pool, specify the pool we have created during step 2. Make sure that you select the right physical nic from the dropdown to connect to the N-VDS. If you are not sure, compare the MAC address with the MAC address of the free adapter in the vSphere Client.

Screenshot 2019-02-11 at 17.17.18

Screenshot 2019-02-14 at 10.01.10.png

If everything looks good, click the “ADD” button to create the Transport Node.

Repeat the steps for all ESXi Hosts in the cluster or use the “CONFIGURE CLUSTER” option to configure and create Transport Nodes for all Hosts in one go. The end result should look similar to this.

Screenshot 2019-02-11 at 17.26.49

In the vSphere Client, you should see that the physical NICs of the ESXi Hosts got assigned to the N-VDS switch of NSX-T.

Screenshot 2019-02-14 at 10.02.22.png

5. Configure Edge Transport Nodes

As a next step, we need to create and configure the Edge Transport Node. This is another difference between NSX-v and NSX-T. The NSX-T Edge VMs are part of the Overlay and therefore tunnel endpoints just like the ESXi Hosts. Additionally, they are connected to VLAN based port groups to establish connections between the NSX-T logical networks and the outside world. Specify a name and select the Edge VM from the dropdown. Make sure, that you select both Transport Zones, that we have created earlier.

Screenshot 2019-02-12 at 18.10.44.png

On the N-VDS tab, we need to specify two Edge Switches, one per Transport Zone. The first one is the one for the Overlay. We should be able to select the Switch name from the dropdown menu, as we have used it for the Host Transport Nodes before.

Screenshot 2019-02-14 at 09.51.33.png

Specify the Uplink Profile we have created for the Edge earlier, select “Use IP Pool” for IP Assignment and chose the “TE-IP-Pool” we have created for the Tunnel Endpoints. Under Virtual NICs, select the interface that is connected to the “NSX Tunnel vSphere Port Group”. Yes, you heard right, as mentioned before, the NSX-T Edge VM is part of the Overlay and therefore it needs to have access to the tunnel network. Which essentially means, you need to have a vSphere Port Group, with access to the tunnel network, specified on each ESXi host that could possibly host the Edge VM.

Screenshot 2019-02-13 at 16.52.17.png

If you are not sure which interface to select, check the MAC address within the vSphere Client.

Screenshot 2019-02-14 at 10.06.16.png

Screenshot 2019-02-14 at 10.07.43.png

Now we need to create a second N-VDS for the communication with the outside world, which will be used for the VLAN based Transport Zone that we have selected already. Click “+ADD N-VDS” and enter a name for the new Edge Switch.

Screenshot 2019-02-14 at 09.53.07.png

In this case, we can use the same Edge Uplink Profile that we used for before but we don’t specify an IP Assignment as this is no tunnel endpoint. Again, make sure you select the right interface under Virtual NICs and press “SAVE”.

Screenshot 2019-02-13 at 16.55.43.png

6. Create Edge Cluster

The last step is to create an Edge Cluster. Even though I just have one Edge VM in my homelab, we still need to create an Edge Cluster to make any use of it. Important note! This is not a VMware recommended implementation, due to availability reasons you should have 2 Edge VMs in your NSX-T Edge Cluster.

Start creating the Edge Cluster under “Fabric/Nodes/Edge Clusters”. Specify a name for the cluster and leave the default Edge Cluster Profile as it is. Screenshot 2019-02-14 at 10.31.02.png

Choose “Edge Node” as member type and select the available Edge Node. Click “ADD” to create the Edge Cluster.

Screenshot 2019-02-14 at 10.31.25.png

Done, we have successfully configured the necessary NSX-T components. Now we can start creating Logical Switches, Routers etc… I hope this blog post helped you to get through the basic configuration of the NSX-T components. Additional sources can be found here.

Sources

 

Posted in NSX

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s