Description
Apress Getting Started with NSX-T Logical Routing and Switching The Basic Principles of Building Software-Defined 2021 Edition by Iwan Hoogendoorn
This primer on NSX-T helps you understand the capabilities and features of NSX-T, how to configure and manage NSX-T, and integrate NSX-T with other software. The book is the first in a series that will teach you the basics of NSX-T, which is an update of VMware's original software-defined networking (SDN) architecture aimed at making networks agile and flexible.You will become familiar with VMware's software-defined data center (SDDC) ecosystem and how NSX-T fits in. You will understand NSX-T components such as NSX-T Manager, NSX-T Edge Transport Nodes, and NSX-T Host Transport Nodes. And you will learn how to install and configure network services such as East/West and North/South routing capabilities, layer two switching, VRF, EVPN, multicast, and layer two bridging.The book provides best practices on how to configure routing and switching features, and teaches you how to get the required visibility of not only your NSX-T platform but also your NSX-T-enabled network infrastructure. The book explains security, advanced network features, and multi-site capabilities and demonstrates how network and security services can be offered across multiple on-premise locations with a single pane of glass for networking and security policy management. The interface with public cloud services is discussed and the book explains NSX-T operation in an on-premise private cloud and positioning and integrating NSX-T on a public cloud (off premises).What You Will Learn Understand how NSX-T fits in the VMware SDDC ecosystemKnow what NSX-T is, its components, and the terminology usedInstall NSX-TConfigure NSX-T network servicesManage the NSX-T networkWho This Book Is ForVirtualization administrators, system integrators, and network administrators Table of contents : - * Chapter 1o Title: NSX-T and the VMware SDDC ecosystemo Chapter Goal: Provide information on the SDDC and what the position is of NSX-T.o Number of Pages: 5o Subtopics:The VMware's SDDC ecosystemComputeStorageSoftware Defined Networking* Chapter 2o Title: An Introduction to NSX-To Chapter Goal: Provide information on the product, the problem that can be solved and use-cases that can be satisfied.o Number of Pages: 10 o Subtopics:NSX-T ComponentsNSX-T Use Cases* Chapter 3o Title: The NSX-T installation on a vSphere environmento Chapter Goal: Explain the components of NSX-T and how these are deployed including the prerequisites.o Number of Pages: 20o Subtopics:NSX-T Installation Planning & PrerequisitesNSX-T Manager InstallationEdge Transport Installation (VM)Edge Transport Installation (BM)Host Transport Node Installation (ESXi)* Chapter 4o Title: Tier-0 Gatewayso Chapter Goal: Configure North/South Routing using the T0 Gateway with different kind of features. o Number of Pages: 20 o Subtopics:Deploy a T0 GatewayConfigure RoutingConfigure MulticastIPv6 RoutingT0 High AvailabilityVRF DeploymentEVPN Deployment* Chapter 5o Title: Tier-1 Gatewayso Chapter Goal: Create and Configure T1 Gateways.o Number of Pages: 5o Subtopics:Deploy a T0 GatewayConfigure Routing* Chapter 6o Title: Segmentso Chapter Goal: Create and Configure L2 Segments with various service capabilities.o Number of Pages: 10o Subtopics:Attach segmentsDHCP & DHCP Static BindsL2 BridgingAdd a Metadata Proxy Server* Chapter 7o Title: Host Switcheso Chapter Goal: Explanation on the interrogability with the vSphere Distributed Switch and the defense between the N-VDS.o Number of Pages: 5o Subtopics:NSX-T with the vSphere Distributed SwitchNSX-T N-VDSEnhanced Networking StackChapter 8o Title: Virtual Private Network (VPN) o Chapter Goal: Know the differ types of VPN and how to configure and monitor them.o Number of Pages: 10 o Subtopics:IPSEC (L3 VPN)L2 VPNConfiguration of VPN* L3* L4Monitoring of VPN sessions* Chapter 9o Title: Network Address Translation (NAT) o Chapter Goal: Know the difference between SNAT and DNAT and explanation on how to configure NAT.o Number of Pages: 5o Subtopics:SNATDNATConfigure NAT Services* Chapter 10o Title: Load Balancing (LB) o Chapter Goal: Discuss Load Balancing capabilities and configuration.o Number of Pages: 10o Subtopics:Load Balancing ConceptsDistributed Load BalancerSetting up the Load Balancer Components* Chapter 11o Title: IP Address Management (IPAM) o Chapter Goal: DNS and DHCP IP address Management using the internal NSX-T Tools.o Number of Pages: 5o Subtopics:DNS ZoneDNS Forwarding ZoneDHCP ProfileIP Address PoolIP Address Block* Chapter 12o Title: Network Settings o Chapter Goal: Getting to know the Network setting that can be configured to finetune your network services.o Number of Pages: 10o Subtopics:MulticastVNI PoolsGateway SettingsGateway QoS ProfileBFD ProfileIP Discovery ProfilesMAC Discovery Profiles* Chapter 13o Title: Security o Chapter Goal: The theory about the Security Services offered by NSX-T followed by the deployment's details and steps with proper verification.o Number of Pages: 35o Subtopics:Identity based FirewallLayer-7 Context ProfilesGateway FirewallsDistributed FirewallDistributed IDSEast/West Third-party service insertionNorth/South Third-party service insertionSecurity ProfilesTime-Based Firewall PolicyNetwork Introspection SettingsEnd-Point ProtectionBare Metal Server Security* Chapter 14o Title: Multi-Site o Chapter Goal: Design Principles regarding Multi Site routingo Number of Pages: 30o Subtopics:Multi-Site CapabilitiesNSX-T Federation overviewNetworking with FederationSecurity with FederationBackup & Restore with Federation* Chapter 15o Title: System Operations o Chapter Goal: Monitoring of the NSX-T Fabric using different VMware related tools.o Number of Pages: 15o Subtopics:Monitoring / Events and AlarmsLoggingvRealize Log insight integrationvRealize Operations integrationOther Operation Tools Integration* Chapter 16o Title: Network Operations o Chapter Goal: Tools to verify the Routing and Routing performance.o Number of Pages: 10o Subtopics:Network MonitoringLoggingvRealize Network insight integrationIPFIXNetwork Performance Testing using IPERF Tools* Chapter 17o Title: Authentication and Authorization o Chapter Goal: Information on how to integrate NSX-T with an external LDAP server and create user (groups) with different roles and rights (RBAC).o Number of Pages: 5o Subtopics:vIDM Integration & LDAP IntegrationLDAP only integrationRBAC* Chapter 18o Title: Public Cloud Integrationo Chapter Goal: NSX-T is also used in all major Public Clouds. This chapter gives you an overview on what is deployed there and how NSX-T can be consumed in these Public Clouds.o Number of Pages: 10o Subtopics:Forwarding PoliciesVMC on AWSAzure VMware Solution (AVS)Google Cloud VMware Engine* Chapter 19o Title: Automationo Chapter Goal: Get familiar on the out-of-the-box automation capabilities and vRO extensibility.o Number of Pages: 20 o Subtopics:vCloud Director* Allowing Tenants to Create / Use NSX-T Related automated network and security Services vRealize Automation / vRealize Orchestration* Allowing Tenants to Create / Use NSX-T Related automated network and security Services NSX-T API Capabilities