Objective 6.3 – Configure and Manage DHCP/DNS/NAT

Knowledge

• Add/Edit a DHCP IP pool
  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click NSX Edges.
  • Double-click an NSX Edge.
  • Click the Manage tab and then click the DHCP tab.
  • Click the Add “+” icon (or select the pool and click Edit)
  • Configure the pool.
    • Auto Configure
      DNS Select to use the DNS service configuration for the DHCP binding.
    • Lease never expires
      Select to bind the address to the MAC address of the virtual machine forever. If you select this, Lease Time is disabled.
    • Start IP
      Type the starting IP address for the pool.
    • End IP
      Type the ending IP address for the pool.
    • Domain Name
      Type the domain name of the DNS server. This is optional.
    • Primary Name Server
      If you did not select Auto Configure DNS, type the Primary Nameserver for the DNS service. You must enter the IP address of a DNS server for hostname-to-IP address resolution. This is optional.
    • Secondary Name Server
      If you did not select Auto Configure DNS, type the Secondary Nameserver for the DNS service. You must enter the IP address of a DNS server for hostname-to-IP address resolution. This is optional.
    • Default Gateway
      Type the default gateway address. If you do not specify the default gateway IP address, the internal interface of the NSX Edge instance is taken as the default gateway. This is optional.
    • Lease Time
      Select whether to lease the address to the client for the default time (1 day), or type a value in seconds. You cannot specify the lease time if you selected Lease never expires. This is optional.
  • Click OK.
• Enable a DHCP IP pool
  I assume this should say “enable the DHCP Service”
  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click NSX Edges.
  • Double-click an NSX Edge.
  • Click the Manage tab and then click the DHCP tab.
  • Click Enable.
  • Select Enable logging if required and select the log level.
  • Click Publish Changes.
• Add/Edit DHCP static binding
  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click NSX Edges.
  • Double-click an NSX Edge.
  • Click the Manage tab and then click the DHCP tab.
  • Select Bindings from the left panel.
  • Click the Add “+” icon (or select the binding and click Edit)
  • Configure the binding.
    • Auto Configure DNS
      Select to use the DNS service configuration for the DHCP binding.
    • Lease never expires
      Select to bind the address to the MAC address of the virtual machine forever.
    • Interface
      Select the NSX Edge interface to bind.
    • VM Name
      Select the virtual machine to bind.
    • VM vNIC Index
      Select the virtual machine NIC to bind to the IP address.
    • Host Name
      Type the host name of the DHCP client virtual machine.
    • IP Address
      Type the address to which to bind the MAC address of the selected virtual machine.
    • Domain Name
      Type the domain name of the DNS server.
    • Primary Name Server
      If you did not select Auto Configure DNS, type the Primary Nameserver for the DNS service. You must enter the IP address of a DNS server for hostname-to-IP address resolution.
    • Secondary Name Server
      If you did not select Auto Configure DNS, type the Secondary Nameserver for the DNS service. You must enter the IP address of a DNS server for hostname-to-IP address resolution.
    • Default Gateway
      Type the default gateway address. If you do not specify the default gateway IP address, the internal interface of the NSX Edge instance is taken as the default gateway.
    • Lease Time
      If you did not select “Lease never expires”, select whether to lease the address to the client for the default time (1 day), or type a value in seconds.
  • Click Add.
  • Click Publish Changes.
• Configure DNS services
  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click NSX Edges.
  • Double-click a NSX Edge.
  • Click the Manage tab and then click the Settings tab.
  • In the DNS Configuration panel, click Change.
  • Click Enable DNS Service to enable the DNS service.
  • Type IP addresses for both DNS servers.
  • Change the default cache size if required.
  • Click Enable Logging to log DNS traffic and select the log level Generated logs are sent to the log server.
  • Click Ok.
• Add Source NAT (SNAT) rule
  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click NSX Edges.
  • Double-click an NSX Edge.
  • Click the Manage tab and then click the NAT tab.
  • Click the Add “+” icon and select Add SNAT Rule.
  • Select the interface on which to add the rule.
  • Type the original source IP address in one of the following formats.
    • IP address eg 192.0.2.0
    • IP address range eg 192.0.2.0-192.0.2.24
    • IP address/subnet eg 192.0.2.0/24
    • “any”
  • Type the translated (public) source IP address in one of the following formats
    • IP address eg 192.0.2.0
    • IP address range eg 192.0.2.0-192.0.2.24
    • IP address/subnet eg 192.0.2.0/24
    • “any”
  • Select Enabled to enable the rule.
  • Click Enable logging to log the address translation.
  • Click OK to add the rule.
  • Click Publish Changes.
• Add Destination NAT (DNAT) rule
  • Log in to the vSphere Web Client.
  • Click Networking & Security and then click NSX Edges.
  • Double-click an NSX Edge.
  • Click the Manage tab and then click the NAT tab.
  • Click the Add “+” icon and select Add DNAT Rule.
  • Select the interface on which to apply the DNAT rule.
  • Type the original (public) IP address in one of the following formats.
    • IP address eg 192.0.2.0
    • IP address range eg 192.0.2.0-192.0.2.24
    • IP address/subnet eg 192.0.2.0/24
    • “any”
  • Type the protocol
  • Type the original port or port range.
    • Port number eg 80
    • Port range eg 80-85
    • “any”
  • Type the translated IP address in one of the following formats.
    • IP address eg 192.0.2.0
    • IP address range eg 192.0.2.0-192.0.2.24
    • IP address/subnet eg 192.0.2.0/24
    • “any”
  • Type the translated port or port range.
    • Port number eg 80
    • Port range eg 80-85
    • “any”
  • Select Enabled to enable the rule.
  • Select Enable logging to log the address translation.
  • Click Add to save the rule.

Tools

• NSX Administration Guide
• NSX Manager
• vSphere Web Client