Overview
- VMware NSX-T Data Center 3.2
Prerequisites
- Good understanding of TCP/IP services and protocols
- Knowledge and working experience of computer networking, including switching and routing technologies (L2-L3) and L2-L7 firewall
- Knowledge and working experience with VMware vSphere® environments
- Knowledge and working experience with Kubernetes or vSphere with VMware Tanzu™ environments
Delegates will learn how to
- Describe the architecture and main components of NSX-T Data Center
- Explain the features and benefits of NSX-T Data Center
- Deploy the NSX Management cluster and VMware NSX® Edge™ nodes
- Prepare VMware ESXi™ and KVM hosts to participate in NSX-T Data Center networking
- Create and configure segments for layer 2 forwarding
- Create and configure Tier-0 and Tier-1 gateways for logical routing
- Use distributed and gateway firewall policies to filter east-west and north-south traffic in NSX-T Data Center
- Configure Advanced Threat Prevention features
- Configure network services on NSX Edge nodes
- Use VMware Identity Manager and LDAP to manage users and access
- Explain the use cases, importance, and architecture of Federation
Outline
- Introductions and course logistics
- Course objectives
- Introduce the VMware Virtual Cloud Network vision
- Discuss NSX-T Data Center solutions, use cases, and benefits
- Explain NSX-T Data Center architecture and components
- Describe the VMware NSXTM product portfolio and features
- Explain the management, control, data, and consumption planes and function
- Describe NSX Management Cluster
- Deploy VMware NSXTM ManagerTM nodes on VMware ESXi and KVM hypervisors
- Navigate through the NSX Manager UI
- Explain data-plane components such as
- N-VDS/VDS, transport nodes, transport zones, profiles, and more
- Perform transport node preparation and establish the data center infrastructure
- Verify transport node status and connectivity
- Introduce key components and terminology in logical switching
- Describe the function and types of L2 segments
- Explain tunneling and the GENEVE encapsulation
- Configure logical segments and attach hosts using NSX Manager UI
- Describe the function and types of segment profiles
- Create segment profiles and apply them to segments and ports
- Explain the function of MAC, ARP, and TEP tables used in packet forwarding
- Demonstrate L2 unicast packet flow
- Explain ARP suppression and BUM traffic handling
- Describe the logical routing function and use cases
- Introduce the two-tier routing architecture, topologies, and components
- Explain the Tier-0 and Tier-1 Gateway functions
- Describe the logical router components: Service Router and Distributed Router
- Discuss the architecture and function of NSX Edge nodes
- Discuss deployment options of NSX Edge nodes
- Configure NSX Edge nodes and create NSX Edge clusters
- Configure Tier-0 and Tier-1 Gateways
- Examine the single-tier and multitier packet flow
- Configure static routing and dynamic routing, including BGP and OSPF
- Enable ECMP on Tier-0 Gateway
- Describe NSX Edge HA, failure detection, and failback modes
- Configure VRF Lite
- Describe the function of logical bridging
- Discuss the logical bridging use cases
- Compare routing and bridging solutions
- Explain the components of logical bridging
- Create bridge clusters and bridge profiles
- Describe NSX segmentation
- Identify the steps to enforce Zero-Trust with NSX segmentation
- Describe the Distributed Firewall architecture, components, and function
- Configure Distributed Firewall sections and rules
- Configure the Distributed Firewall on VDS
- Describe the Gateway Firewall architecture, components, and function
- Configure Gateway Firewall sections and rules
- Explain NSX IDS/IPS and its use cases
- Configure NSX IDS/IPS
- Deploy the NSX Application Platform
- Identify the components and architecture of NSX Malware Prevention
- Configure NSX Malware Prevention for east-west and north-south traffic
- Describe the use cases and architecture of NSX Intelligence
- Identify the components and architecture of VMware NSX® Network Detection and Response™
- Use NSX Network Detection and Response to analyze network traffic events.
- Describe NSX-T Data Center services
- Explain and configure Network Address Translation (NAT)
- Explain and configure DNS and DHCP services
- Describe VMware NSX® Advanced Load Balancer™ architecture, components, topologies, and use cases.
- Configure NSX Advanced Load Balancer
- Discuss the IPSec VPN and L2 VPN function and use cases
- Configure IPSec VPN and L2 VPN using the NSX Manager UI
- Describe the function and benefits of VMware Identity Manager™ in NSX-T Data Center
- Integrate VMware Identity Manager with NSX-T Data Center
- Integrate LDAP with NSX-T Data Center
- Identify the various types of users, authentication policies, and permissions
- Use role-based access control to restrict user access
- Introduce the NSX-T Data Center Federation key concepts, terminology, and use-cases.
- Explain the onboarding process of NSX-T Data Center Federation
- Describe the NSX-T Data Center Federation switching and routing functions.
- Describe the NSX-T Data Center Federation security concepts.
Frequently asked questions
See all of our FAQsHow can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting (more details in the link below) to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
Learn more about our Virtual Classrooms.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course. When you book a QA online learning course you will receive immediate access to it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
Learn more about QA’s online courses.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.