EMAIL SUPPORT

dclessons@dclessons.com

LOCATION

US

LAB NSX Logical Switching Configuration

LAB NSX Logical Switching Configuration

Task:

  • Confirm so that host configuration are ready so that they are ready to install logical switch and confirm logical network preparation.
  • Create a new logical switch and attach the logical switch to the NSX Edge Services Gateway.
  • Add VMs to the logical switch and Test connectivity between VMs.

Topology:

Confirm the configuration readiness of the hosts.

Login to Vcenter WEB client and Click Home | Networking & Security.

  • Click on Installation and Upgrade tab and Click on Host Preparation.
  • To view the information about NSX state of host in cluster t you can select Select a cluster from the list RegionA01-COMP01

Here you will find the following Hypervisor level kernel modules for Port Security, VXLAN, and Distributed Firewall and Distributed Routing component are properly installed on the host in each cluster.

In the host list you should scroll it right and Click VIEW DETAILS to view information about that host's VTEP kernel port and IP address.

Following steps are requited for VXLAN configuration:

  • Configure VXLAN Tunnel End Point (VTEP) on each host.
  • You should Configure Segment ID range to create a pool of logical networks. With Repletion mode (Unicast / Multicast / Hybrid)
  • Configure the Transport Zone to define the span of the logical network.

The hosts have been configured with VXLAN Tunnel End Point (VTEP) interfaces and it uses 192.168.130.0/24 subnet for the VTEP pool.

VIEW SEGMENT ID CONFIGURATION

  • Click on Logical Network Settings.
  • Note the Segment ID Pool assigned to the environment which we have provided on LAB 1. As soon as any new logical switches are created in NSX, the next unused Segment ID is allocated and assigned.

GENERAL FAQ

Before creating a logical switch, you must verify host preparation status in vCenter under Networking & Security → Installation and Upgrade → Host Preparation.

Ensure that:

• VXLAN kernel module is installed

• Distributed Firewall module is installed

• Port Security module is installed

• Distributed Routing components are properly configured

• VTEP interfaces are created with valid IP addresses

• Hosts are part of the correct cluster and transport zone

These checks ensure the environment is ready for NSX logical switching.

VTEP (VXLAN Tunnel Endpoint) is responsible for encapsulating and decapsulating Layer-2 traffic over the Layer-3 IP network.

Each ESXi host is configured with a VTEP interface (for example, using subnet 192.168.130.0/24 in this lab). This allows virtual machines on different hosts to communicate over the overlay network using VXLAN encapsulation.

Without VTEP configuration, logical switching cannot function.

A Segment ID Pool contains a range of unique VXLAN Network Identifiers (VNIs) used for logical networks.

When a new logical switch is created, NSX automatically assigns the next available Segment ID from the configured pool. This automation simplifies logical network creation and prevents manual VNI conflicts.

A Transport Zone defines the scope or boundary of a logical switch.

Only hosts that belong to the same Transport Zone can participate in the same logical network. If a host is not part of the Transport Zone, it cannot communicate over that logical switch.

Proper Transport Zone configuration ensures logical network consistency across selected clusters.

Connecting a Logical Switch to an NSX Edge Services Gateway enables north-south connectivity.

This allows traffic to move between:

• Logical networks and external networks

• Different routed networks

The Edge Services Gateway provides routing, NAT, firewall, and other network services required for external communication.

After attaching virtual machines to the logical switch, basic connectivity tests such as ping should be performed.

If VMs are connected to the same logical switch, Layer-2 communication should work successfully.

If connectivity fails, verify:

• VTEP configuration

• Transport Zone membership

• Segment ID allocation

• Logical switch attachment to the correct hosts

• Edge Gateway configuration (if routing is involved)

Comment

    You are will be the first.

LEAVE A COMMENT

Please login here to comment.