Browsed by
Category: NSX-T

Migrate NSX for vSphere to NSX-T

Migrate NSX for vSphere to NSX-T

As you might know, I use a test/demo environment from my employer. In this environment, I can demo the VMware SDDC products for customers or colleagues. Since the start of the environment approx. four years ago, I had a demo around NSX for vSphere, but as you know, the product has been announced to go end of support in 2022 and there will be no more development on it. Also, VMware and my company (PQR) advise customers who start on…

Read More Read More

Remove first NSX-T Manager from the cluster, manually

Remove first NSX-T Manager from the cluster, manually

I need to remove my first NSX-T Manager that I deployed in my test-environment. With other managers, you get the (easy) ability to do so from the GUI: But not for the one that was deployed as the first one in the cluster: (the option is missing). But it is still possible to do this. We need to manually detach the manager from the cluster, which can be done from one of the other managers. We log in to one…

Read More Read More

Upgrade of NSX-T with VCF: “Disk Space requirements not met”: Failed upgrade

Upgrade of NSX-T with VCF: “Disk Space requirements not met”: Failed upgrade

A short post on (part of) the upgrade of NSX-T from within VCF, since this is not the first time I ran into this. It is most likely related to the fact that I run a nested ESXi environment, but someone else might run into the same issue. The biggest problem occurs when upgrading NSX-T as part of the VCF upgrade process. What happens when upgrading NSX-T manually is that you run a PreCheck. This will tell you if everything…

Read More Read More

Upgrade NSX-T to version 2.5

Upgrade NSX-T to version 2.5

In this blog, I will be documenting the upgrade process of NSX-T to version 2.5. The first step in the upgrade process is to make sure that all versions of other components that I am running are compatible with version 2.5. To find this out, I use: https://www.vmware.com/resources/compatibility/sim/interop_matrix.php#interop&175=&2= This will show me the versions that are compatible. Below vCenter and NSX-T: and the same table is available for ESXi and NSX-T: With the same result, which was to be expected…

Read More Read More

Micro-segmentation with NSX-T (part 2: Methodology in action)

Micro-segmentation with NSX-T (part 2: Methodology in action)

Now that we have learned the theory in Microsegmentation with NSX-T (part 1: methodology), we can look at the application of this methodology in practice. Methodology in action So after all this, let’s see a little bit of this methodology in action. First of all, it is important to know which traffic is flowing in the environment. An excellent tool to help in this respect, would be vRealize Network Insight, but not every organization is able to use this, so…

Read More Read More

Microsegmentation with NSX-T (part 1: methodology)

Microsegmentation with NSX-T (part 1: methodology)

After a number of blogs on network-virtualization, I thought it was time to start writing some blogs on another of the major three use cases: Security, through micro-segmentation. In my line of work most organizations where I implement NSX (first V and now T) are primarily interested in the security aspects of the product. In my presentations on NSX I usually use two pictures to show what security is like in most traditional environments. It looks something like this: (for…

Read More Read More

Distributed Multi-Tier Routing in NSX-T

Distributed Multi-Tier Routing in NSX-T

I learned something today, which in hindsight is obvious. Hopefully this helps someone that runs into the same “strange” (but not so strange) behavior. I created the following topology today, to prepare for some NSX-T demo I am giving tomorrow: What I (among other stuff) wanted to show, was that routing between Test-Segments “D” and “E” and “A”, “B” and “C”, is completely distributed. So when VM’s from the different segments live on the same host, no physical hops are…

Read More Read More

Integrating NSX-T with Active Directory for RBAC (through VMware Identity Manager)

Integrating NSX-T with Active Directory for RBAC (through VMware Identity Manager)

So after using NSX-T for a while, with the built-in admin account, it is time to look into using RBAC for some granular control over who is allowed to do what, within NSX. So with NSX-T it isn’t as straight forward as it was in NSX-V. Integrating logins with AD requires a bit more work. With NSX-T it becomes necessary to work with the VMware Identity Manager. When looking at the ever-important Interoperability Matrix, we can see that the following version…

Read More Read More

Resetting expired admin password on NSX-T

Resetting expired admin password on NSX-T

So apparently it has been 90 days since the deployment of NSX-T and therefor, time for the admin password to expire ;): Unfortunately, this doesn’t give you the opportunity to login and then change the password (a feature I would really appreciate), but a reset is necessary. In the online documentation (https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/administration/GUID-8816B842-2EC4-40A8-A618-F68DB29FABD2.html) the reset is done through a reboot into single user mode of one of the appliances and reset the password. However, in the online documentation one of the…

Read More Read More

NSX-T: Missing locale data for the locale “XX”.

NSX-T: Missing locale data for the locale “XX”.

So, as you may know, I am from the Netherlands (or Holland, although technically I am not, but that is a different discussion ;)). So within my lab-environment I sometimes use Dutch as the language-setting, for instance within Firefox, the browser I use(d) to configure NSX-T. But this issue also occurs in Chrome. Within IE (although I only used that to test if it was affected by this ;)), the page doesn’t load at all. When I try to open…

Read More Read More