Course Overview

This five-day, comprehensive, fast-paced training course presents VMware NSX® as a part of the software-defined data center. You will learn how to use logical switching in NSX to virtualize your switching environment. The course also details logical routing to enable you to dynamically route between different virtual environments. You will also learn how to use gateway services, firewall configurations, and security services to help secure and optimize your NSX environment.

Course Objectives

By the end of the course, you should be able to meet the following objectives:

• Configure and deploy NSX components for management and control
• Describes basic NSX layer 2 networking
• Configure, deploy, and use logical switch networks
• Configure and deploy NSX distributed router appliances to establish east-west connectivity
• Configure and deploy VMware NSX® Edge™ services gateway appliances to establish north-south connectivity
• Configure NSX L2 bridging
• Configure and use all main features of the NSX Edge services gateway
• Configure NSX Edge firewall rules to restrict network traffic
• Configure NSX distributed firewall rules to restrict network traffic
• Configure Service Composer policies
• Configure an identity-aware firewall
• Describe NSX data security
• Use the cross-vCenter NSX feature

Target Audience

• Experienced system or network administrators

Course Modules

1 Course Introduction
• Introductions and course logistics
• Review course objectives

2 Introduction to vSphere Networking
• Describes VMware vSphere® networking components
• Describes vSphere standard switches
• Describes vSphere distributed switches

3 Introduction to NSX
• Describes the benefits of NSX
• Identify NSX key use cases

4 NSX Architecture
• Describe the NSX architecture
• Describes the cloud management, management, control, and data plans of NSX
• Identify the component interactions
• Describes the VMware NSX® Controller™ cluster and its functions
• Explain the NSX Controller workload distribution

5 NSX Infrastructure Preparation
• Explain the steps required for an NSX installation
• Describe what is involved in planning an NSX deployment
• Describe the NSX Controller cluster and deployment
• Describes NSX Controller cluster high availability and load distribution
• Explain how to deploy and configure the NSX Controller cluster
• Explain the workflow involved in host preparation

6 NSX Logical Switch Networks
• Explain transport zones, VXLANs, and VXLAN tunnel end points (VTEPs)
• Describes the procedure for preparing the infrastructure for virtual networking
• Describes the configuration of vSphere distributed switches for VXLAN
• Identify the components involved in NSX logical switching
• Define VLANs for VXLAN

7 NSX Logical Routing
• Explain the east-west and north-south routing concepts
• Defines the NSX distributed logical router
• Explain the logical router, interfaces, and interface addresses
• Describes the management and control plane interaction
• Describes logical router deployment models and two-tier routing for east-west traffic
• Explain the common topologies of an NSX Edge services gateway

8 Advanced NSX Logical Routing
• Describes how routers connect remote networks
• Explain route redistribution methods
• Describes less-than-or-equal (LE) and greater-than-or-equal (GE) configurations
• Describes routing event notification enhancements
• Configure equal-cost multipath (ECMP) routing
• Describes high availability for NSX Edge service gateways

9 NSX L2 Bridging
• Explain L2 bridging use cases
• Describes software and hardware L2 bridging between VXLAN and VLANs
• Discuss L2 bridging packet flows

10 NSX Edge Services
• Describe the NSX Edge Services
• Explain how Network Address Translation (NAT) works
• Explain NAT64
• Explain the function of load balancing
• Explain one-armed and inline load-balancing architectures
• Explain the DHCP and DNS services for NSX Edge

11 NSX Edge VPN Services
• Describe the NSX Edge VPN services
• Describe the VPN use cases
• Configure a L2 VPN on an NSX Edge instance
• Configure an NSX Edge instance for IPsec VPN services
• Explain NSX Edge SSL VPN-Plus services
• Configure NSX Edge SSL VPN-Plus server settings

12 NSX Security Services
• Describes the policy enforcement of the distributed firewall
• Describes virtualization context-awareness
• Explain custom network and security containers
• Describes the architecture of an NSX Edge firewall
• Explain DHCP snooping
• Explain ARP snooping

13 NSX Advanced Security Services
• Describe NSX SpoofGuard
• Identify how tags enable dynamic security service chains
• Explain Service Composer groups, policies, and tags
• Describes the Identity Firewall architecture
• Explain Application Rule Manager
• Explain how to create a monitoring session

14 NSX Introspection Services
• Describes the types of introspection services
• Describes the installation and configuration of Guest and Network Introspection
• Summarize Guest and Network Introspection alarms, events, and audit messages

15 Cross-vCenter NSX
• Describes cross-vCenter features and use cases
• Identify VMware NSX® Manager™ roles and NSX Controller cluster placement
• Deploy universal logical networks
• Explain the design considerations for cross-vCenter NSX