Today we’re beginning a new series on route filtering in NSX. Before we dive into our first topic (‘IP Prefix Lists for Route Filtering’), let’s take a look at “route filtering” and how it’s utilized within NSX. Route Filtering Route filtering is a mechanism to alter the routes that are learned or advertised via aContinueContinue reading “NSX Route Filtering – Part One: IP Prefix Lists for Route Filtering”
Category Archives: Uncategorized
NSX-T Bridging 101 – Part Nine: A deeper discussion on Promiscuous Mode
Way back in part three of this series, we discussed the methods available for delivering frames to an NSX bridge when using a VSS/VDS. Out of these methods, the use of ‘Promiscuous mode’ on a distributed port group (DVPG) for bridging is pretty common, and it’s understandable why: it’s a simple checkbox in the configurationContinueContinue reading “NSX-T Bridging 101 – Part Nine: A deeper discussion on Promiscuous Mode”
Stateful vs Stateless Firewalls – A Review
In our previous post, we took a broad look at the NAT services available in NSX; in particular, we noted which NAT services are ‘stateful’ or ‘stateless’ (that is, identifying which NAT services utilize a ‘state’ table). As NAT rules in NSX are functionally firewall rules, we wanted to review how stateful and stateless firewallsContinueContinue reading “Stateful vs Stateless Firewalls – A Review”
NAT in NSX – Introduction
When it comes to utilizing Network Address Translation (NAT) in NSX, configuring NAT can seem both overly simple and extremely complex. In this series, we want to provide an overall look at NAT within NSX by narrowing the scope of conversation to relatively specific use cases in order to better inform on how the solutionContinueContinue reading “NAT in NSX – Introduction”
NSX-T L3 VPNs: VPNs and the effect of NAT
In this final part of our VPN series, we’ll discuss building a VPN over the Internet. More specifically, we will address the impact of Network Address Translation (NAT) on VPN traffic. Quick Review In our prior posts, we built Policy Based, Static Route Based, and Dynamic Route Based VPNs. Let’s take a look below atContinueContinue reading “NSX-T L3 VPNs: VPNs and the effect of NAT”
NSX-T L3 VPNs: Route Based VPNs – Dynamic Routing
In our previous post, we created a route based VPN utilizing static routes on a Tier-1 (T1) Service Router (SR). Today, we will demonstrate how to utilize route-based VPNs via Dynamic Routing. Dynamic Routing and VPNs In the introduction to our VPN series, we provided a flowchart identifying where a given type of VPN (eitherContinueContinue reading “NSX-T L3 VPNs: Route Based VPNs – Dynamic Routing”