Upgrading everyday security Commpact Uživatelský manuál

NSX Installation and Upgrade GuideNSX 6.0 for vSphereThis document supports the version of each product listed andsupports all subsequent versions unt

NSX ManagerThe NSX Manager is the centralized network management component of NSX, and is installed as a virtualappliance on any ESX™ host in your vCe

NSX Edge ServicesDynamic RoutingProvides the necessary forwarding information between layer 2 broadcastdomains, thereby allowing you to decrease layer

Distributed FirewallNSX Distributed Firewall is a hypervisor kernel-embedded firewall that provides visibility and control forvirtualized workloads an

Preparing for Installation 2This section describes the system requirements for NSX as well as the ports that must be open.This chapter includes the fo

nVMware ESX 5.0 or later for each servernVMware ToolsFor vShield Endpoint and NSX Data Security, you must upgrade your virtual machines to hardwarever

Installing the NSX Manager 3The NSX Manager is the centralized management component of NSX, and runs as a virtual appliance on anESX host.VMware recom

The NSX Manager virtual machine installation includes VMware Tools. Do not attempt to upgrade or installVMware Tools on the NSX Manager.PrerequisitesY

g Click DNS and type the IP addresses for DNS servers and domain search list.h Click Services Configuration and type the NTP server lis for the NSX Ma

What to do nextLogin to the vSphere Web Client and click the Networking & Security tab. You can now install andconfigure NSX components.VMware rec

Installing NSX Components 4After the NSX Manager is installed, you can obtain licenses to activate the NSX Endpoint, NSX Edge, andNSX Data Security co

NSX Installation and Upgrade Guide2 VMware, Inc.You can find the most up-to-date technical documentation on the VMware Web site at:http://www.vmware

7 Click OK.What to do nextObtain and install an NSX for vSphere license within the evaluation period.Install Network Virtualization ComponentsAs the d

nManaged IP address is set for each vCenter server in the vCenter Server Runtime Settings. See vCenterServer and Host Management.nDHCP is available on

What to do nextDeploy two additional controllers to ensure a greater level of resiliency. Three is the recommended numberby VMware. During this period

5 Type the Maximum Transmission Units (MTU) for the virtual distributed switch.MTU is the maximum amount of data that can be transmitted in one packet

Table 4‑1. Teaming Policy table (Continued)Teaming ModeMultiple VTEPsCreated vDS VersionLACPv2 No 5.5Source MAC (MAC Hash) Yes 5.5NOTE LBT mode is

View and Edit a Transport ZoneYou can view the logical networks in a selected transport zone, the clusters in, and the control plane modefor that tran

Expand a Transport ZoneYou can add clusters to a transport zone, which stretches all existing transport zones to become available onthe newly added cl

Contract a Transport ZoneYou can remove clusters from a transport zone. Existing transport zones may be shrunk to accommodate thecontracted scope.Proc

Install NSX EdgeYou can install NSX Edge as a services gateway or as a logical router.NSX Edge Services GatewayThe services gateway gives you access t

6 Type a name for the NSX Edge virtual machine.This name appears in your vCenter inventory. The name should be unique across all Edges within asingle

ContentsAbout this Book 5 1Overview of NSX 7NSX Capabilities 8NSX Components 9 2Preparing for Installation 13System Requirements for NSX 13Ports Requi

4In NSX Edge Appliances, click the Add ( ) icon to add an appliance.If you had selected Enable HA on the Name and Description page, you can add two ap

7 Type the MAC address for the interface. If HA is enabled, type two management IP addresses in CIDRformat.NOTE Heartbeats of the two NSX Edge HA vi

4 If you selected Enable HA on the Name & Description page, complete the Configure HA parameterssection.NSX Edge replicates the configuration of t

Open the Add Edge Wizard Page for Logical RouterOpen the Add Edge wizard to install and configure a logical router instance.PrerequisitesYou must have

Procedure1 On the Deployment Configuration page, select the datacenter where you want to place the NSX Edgevirtual machine.2In NSX Edge Appliances, cl

c Select the appropriate virtual wire or port group.d Click OK.9 Select the connectivity status for the interface.10In Configure Subnets, click the Ad

Install vShield EndpointInstalling vShield Endpoint installs a new vib and a service virtual machine on each host in the cluster.vShield Endpoint is r

11 In IP assignment, select one of the following:Select ToDHCPAssign an IP address to the NSX Endpoint service virtual machine throughDynamic Host Con

2 In the Setup Type wizard, select one of the following options:nComplete.nCustom.nFrom the VMware Device Drivers list, select VMCI Driver, then selec

12 Monitor the deployment till the Installation Status column displays Successful.13 If the Installation Status column displays Failed, click the icon

7Upgrade NSX 6.0 to NSX 6.0.x 51Upgrade NSX Manager from version 6.0 to 6.0.x 51Update Clusters 52Upgrade NSX Edge from 6.0 to 6.0.x 52 8Uninstalling

NSX Installation and Upgrade Guide40 VMware, Inc.

Extensibility (Integrate PartnerSolutions with NSX) 5VMware partners can integrate their solutions with the VMware NSX platform.After partners design

Procedure1 Log in to the vSphere Web Client.2 Click Networking & Security and then click Service Definitions.3Click the New Service Definition ()

Install a Partner ServiceIf the partner solution includes a host-resident virtual appliance, you can install the service after you registerthe solutio

What to do nextYou can now consume the partner service through NSX UI or NSX API. See NSX Administration Guide.NSX Installation and Upgrade Guide44

Upgrade vShield 5.5 to NSX 6.0.x 6To upgrade to NSX 6.0.x, you must first upgrade the NSX Manager, and then upgrade the other componentsin the order i

Procedure1 Download the NSX upgrade bundle to a location to which vShield Manager can browse. The name ofthe upgrade bundle file is something like VMw

3 Click the Host Preparation tab.All clusters in your infrastructure are displayed.If you had Virtual Wires in your 5.5 environment, the Installation

Upgrade to NSX FirewallYou can upgrade to NSX Firewall only from vShield App version 5.5. If you have a prior version of vShieldApp in your infrastruc

Procedure1 After you update all the clusters in your infrastructure while upgrading to NSX logical switches (orinstalling network virtualization compo

About this BookThis manual, the NSX Installation and Upgrade Guide, describes how to install and upgrade theVMware®NSX™ system by using the vSphere We

nIf there are applications or applicationGroups used in the rule, these grouping objects areduplicated by adding the sourcePort to them. Because of th

Upgrade NSX 6.0 to NSX 6.0.x 7This section describes the upgrade procedure from NSX 6.0 to NSX 6.0.x. You must upgrade components inthe order in which

Update ClustersAfter upgrading NSX Manager to version 6.0.x, you must update the appropriate clusters in yourenvironment. During this process, each ho

Uninstalling NSX Components 8This chapter details the steps required to uninstall NSX components from your vCenter inventory.This chapter includes the

Uninstall a vShield Endpoint ModuleUninstalling a vShield Endpoint module removes Endpoint from a cluster. You must perform these steps inthe followin

Troubleshooting Installation Issues 9This section describes installation issues.This chapter includes the following topics:n“Unable to Configure Looku

NSX Installation and Upgrade Guide56 VMware, Inc.

IndexCclient requirements 13Ddefault gateway, configuring IP address 31GGUI, logging in 17Iinstallpartner appliance 43vShield Endpoint 36installa

NSX Installation and Upgrade Guide58 VMware, Inc.

VMware Consulting Services provides offerings to help you assess, plan,build, and manage your virtual environment. To access information abouteducatio

Overview of NSX 1VMware NSX® is a software networking and security virtualization platform that delivers the operationalmodel of a virtual machine for

This chapter includes the following topics:n“NSX Capabilities,” on page 8n“NSX Components,” on page 9NSX CapabilitiesNSX offers a variety of logical n

Logical Load BalancerThe NSX Edge load balancer enables network traffic to follow multiple paths to a specific destination. Itdistributes incoming ser