Upgrading everyday security Commpact Instrukcja Użytkownika Pobierz pdf (Strona 28)

Install NSX Edge

You can install NSX Edge as a services gateway or as a logical router.

NSX Edge Services Gateway

The services gateway gives you access to all NSX Edge services such as firewall, NAT, DHCP, VPN, load

balancing, and high availability. You can install multiple NSX Edge services gateway virtual appliances in a

datacenter. Each NSX Edge virtual appliance can have a total of ten uplink and internal network interfaces.

The internal interfaces connect to secured port groups and act as the gateway for all protected virtual

machines in the port group. The subnet assigned to the internal interface can be a publicly routed IP space

or a NATed/routed RFC 1918 private space. Firewall rules and other NSX Edge services are enforced on

traffic between network interfaces.

Uplink interfaces of NSX Edge connect to uplink port groups that have access to a shared corporate network

or a service that provides access layer networking. Multiple external IP addresses can be configured for load

balancer, site-to-site VPN, and NAT services.

Logical Router

The NSX Edge logical router provides East-West distributed routing with tenant IP address space and data

path isolation. Virtual machines or workloads that reside on the same host on different subnets can

communicate with one another without having to traverse a traditional routing interface.

A logical router can have eight uplink interfaces and up to a thousand internal interfaces.

Install an NSX Edge Services Gateway

You can install multiple NSX Edge services gateway virtual appliances in a data center. Each NSX Edge

virtual appliance can have a total of ten uplink and internal network interfaces. The internal interfaces

connect to secured port groups and act as the gateway for all protected virtual machines in the port group.

The subnet assigned to the internal interface can be a publicly routed IP space or a NATed/routed RFC 1918

private space. Firewall rules and other NSX Edge services are enforced on traffic between interfaces.

Uplink interfaces of NSX Edge connect to uplink port groups that have access to a shared corporate network

or a service that provides access layer networking.

Multiple external IP addresses can be configured for load balancer, site-to-site VPN, and NAT services.

Overlapping IP addresses are not allowed for internal interfaces, and overlapping subnets are not allowed

for internal and uplink interfaces.

Open the Add Edge Wizard

Open the Add Edge wizard to install and configure an NSX Edge instance.

Procedure

1 Log in to the vSphere Web Client.

2 Click Networking & Security and then click NSX Edges.

Click the Add (

) icon.

4 In the Add Edge Gateway wizard, select Edge Services Gateway .

5 Select Enable High Availability to enable and configure high availability (HA).

NSX Installation and Upgrade Guide

28 VMware, Inc.

1 2 ... 23 24 25 26 27 28 29 30 31 32 33 ... 57 58

Brak uwag

Upgrading everyday security Commpact Instrukcja Użytkownika Strona 28