Objective 1.5 –Explain VMware NSX Integration with Third-Party Products and Services

Knowledge

• Describe integration with third-party hypervisors
  • Openvswitch used for integration with KVM/Xen
  • Doesn’t have in-kernel mode modules
• Describe integration with third-party cloud automation
  • Uses a RESTful API to integrate with cloud automation
• Describe integration with third-party services
  
  • Registered automatically or manually to NSX Manager
  • Service Definitions may need to be created
  • May need to deploy partner virtual appliance
  • Network services
    • L2 Gateway, Load Balancing
  • Security services
    • Firewall, Anti-virus, IDS/IPS
• Describe integration with third-party hardware
  • Newer F5 can participate as part of the transport zone by interacting with the NSX API
  • Network Interface Cards (NICs)
    • Ensure consistent mapping of uplinks on the vDS to the network fabric
  • Terminating overlay networks
    • Overlay network terminated by VTEP or Edge
    • To support VTEP in physical switch, it must support the Open VSwitch Database (OSVDB)
• Manually register a third-party service with NSX
  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click Service Definitions.
  • Click the New Service Definition [+] icon.
  • Type a name and version for the service that you are inserting.
  • Select the service manager and type a description for the service. Your service manager manages your services in the NSX environment.
  • Select the deployment mechanism for the solution.
  • Add the required attributes by clicking the New Attribute [+] icon.
  • Click Next and select the service categories within which you want to add the solution.
  • Click Next.
  • The Configure Service Manager page is displayed only if you selected New Service Manager in step 5.
  • On the Configure service manager page, configure the service manager for the service you are adding.
    • Type a name and description for the service manager.
    • In Administrative URL, type the URL of the solution provider’s service manager.
    • In Base API URL, type the URL of the web site where the service manager’s REST APIs are available and the thumbprint of the service manager.
    • In Credentials, type the username and password for logging in to the service manager.
    • In Vendor Details, type the solution provider’s ID and name.
    • Click Next.
  • On the Add service configuration page, click the New Service Definition [+] icon to add one or more service configurations.
  • Click Next.
  • On the Add profile configuration page, add one or more service profiles.
    • Type the configuration ID, name, and description for the profile.
    • Add one or more attributes by clicking the New Attribute [+] icon.
    • Click OK.
    • On the Add profile configuration page, click Next.
  • Select the required transports and click Next.
  • Review settings and click Finish.
• Install a third-party service with NSX
  • Click Networking & Security and then click Installation.
  • Click the Service Deployments tab and click the New Service Deployment [+] icon.
  • In the Deploy Network and Security Services dialog box, select the appropriate solution(s).
    In Specify schedule (at the bottom of the dialog box), select Deploy now to deploy the solution immediately or select a deployment date and time.
  • Click Next.
  • Select the datacenter and cluster(s) where you want to deploy the solution and click Next.
  • On the Select storage page, select the datastore on which to add the solution service virtual machines storage or select Specified on host. The selected datastore must be available on all hosts in the selected cluster. If you selected Specified on host, the datastore for the ESX host must be specified in the AgentVM Settings of the host before it is added to the cluster. See vSphere API/SDK Documentation.
  • Click Next.
  • On the Configure management network page, select the distributed virtual port group to host the management interface. This port group must be able to reach the NSX Manager’s port group. If the network is set to Specified on host, the network to be used must be specified in the Agent VM Settings > Network property of each host in the cluster. See vSphere API/SDK Documentation. When you add a host(s) to the cluster, the Agent VM Settings > Network property for the host must be set before it is added to the cluster. The selected port group must be available on all hosts in the selected cluster.
  • In IP assignment, select one of the following: DHCP, An IP Pool
  • Click Next and then click Finish on the Ready to complete page.
  • Monitor the deployment till the Installation Status displays Successful. If the status displays Failed, click the icon next to Failed and take action to resolve the error.

Tools

• NSX Administration Guide
• Next Generation Security with VMware NSX and Palo Alto Networks VM-Series white paper
• Deploying VMware NSX with Cisco UCS and Nexus 7000