When does class start/end?
Classes begin promptly at 9:00 am, and typically end at 5:00 pm.
This five-day, comprehensive, fast-paced training course presents VMware NSX® as a part of the software-defined data center. You will learn how to use logical switching in NSX to virtualize your switching environment. The course also details logical routing to enable you to dynamically route between different virtual environments. You will also learn how to use gateway services, firewall configurations, and security services to help secure and optimize your NSX environment.
Access to a software-defined data center environment is provided through hands-on labs to reinforce the skills and concepts presented in the course.
This five-day, comprehensive, fast-paced training course presents VMware NSX® as a part of the software-defined data center. You will learn how to use logical switching in NSX to virtualize your switching environment. The course also details logical routing to enable you to dynamically route between different virtual environments. You will also learn how to use gateway services, firewall configurations, and security services to help secure and optimize your NSX environment.
Access to a software-defined data center environment is provided through hands-on labs to reinforce the skills and concepts presented in the course.
This course is also available in an Instructor-Led Training (ILT) format.
Objectives
By the end of the course, you should be able to meet the following objectives:
- Configure and deploy NSX components for management and control
- Describe basic NSX layer 2 networking
- Configure, deploy, and use logical switch networks
- Configure and deploy NSX distributed router appliances to establish east-west connectivity
- Configure and deploy VMware NSX® Edge™ services gateway appliances to establish north-south connectivity
- Configure NSX L2 bridging
- Configure and use all main features of the NSX Edge services gateway
- Configure NSX Edge firewall rules to restrict network traffic
- Configure NSX distributed firewall rules to restrict network traffic
- Configure Service Composer policies
- Configure an identity-aware firewall
- Describe NSX data security
- Use the cross-vCenter NSX feature
Certifications
This course prepares you for the following certification:
- VMware Certified Professional 6 – Network Virtualization (VCP6-NV)
Intended Audience
- Experienced system or network administrators
Prerequisites
- Understanding of enterprise switching and routing
- Knowledge of TCP/IP services
- Experience with firewalls and firewall rule sets
- Understanding of concepts presented in the VMware Data Center Virtualization Fundamentals course
- Understanding of the concepts presented in the VMware Introduction to Network Virtualization with NSX course
Product Alignment
- VMware NSX 6.4
Course Outline
1 Course Introduction
- Introductions and course logistics
- Review course objectives
2 Introduction to vSphere Networking
- Describe VMware vSphere® networking components
- Describe vSphere standard switches
- Describe vSphere distributed switches
3 Introduction to NSX
- Describe the benefits of NSX
- Identify NSX key use cases
4 NSX Architecture
- Describe the NSX architecture
- Describe the cloud management, management, control, and data planes of NSX
- Identify the component interactions
- Describe the VMware NSX® Controller™ cluster and its functions
- Explain the NSX Controller workload distribution
5 NSX Infrastructure Preparation
- Explain the steps required for an NSX installation
- Describe what is involved in planning an NSX deployment
- Describe the NSX Controller cluster and deployment
- Describe NSX Controller cluster high availability and load distribution
- Explain how to deploy and configure the NSX Controller cluster
- Explain the workflow involved in host preparation
6 NSX Logical Switch Networks
- Explain transport zones, VXLANs, and VXLAN tunnel end points (VTEPs)
- Describe the procedure for preparing the infrastructure for virtual networking
- Describe the configuration of vSphere distributed switches for VXLAN
- Identify the components involved in NSX logical switching
- Define VLANs for VXLAN
7 NSX Logical Routing
- Explain the east-west and north-south routing concepts
- Define the NSX distributed logical router
- Explain the logical router, interfaces, and interface addresses
- Describe the management and control plane interaction
- Describe logical router deployment models and two-tier routing for east-west traffic
- Explain the common topologies of an NSX Edge services gateway
8 Advanced NSX Logical Routing
- Describe how routers connect remote networks
- Explain route redistribution methods
- Describe less-than-or-equal (LE) and greater-than-or-equal (GE) configurations
- Describe routing event notification enhancements
- Configure equal-cost multipath (ECMP) routing
- Describe high availability for NSX Edge service gateways
9 NSX L2 Bridging
- Explain L2 bridging use cases
- Describe software and hardware L2 bridging between VXLAN and VLANs
- Discuss L2 bridging packet flows
10 NSX Edge Services
- Describe the NSX Edge Services
- Explain how Network Address Translation (NAT) works
- Explain NAT64
- Explain the function of load balancing
- Explain one-armed and inline load-balancing architectures
- Explain the DHCP and DNS services for NSX Edge
11 NSX Edge VPN Services
- Describe the NSX Edge VPN services
- Describe the VPN use cases
- Configure a L2 VPN on an NSX Edge instance
- Configure an NSX Edge instance for IPsec VPN services
- Explain NSX Edge SSL VPN-Plus services
- Configure NSX Edge SSL VPN-Plus server settings
12 NSX Security Services
- Describe the policy enforcement of the distributed firewall
- Describe virtualization context-awareness
- Explain custom network and security containers
- Describe the architecture of an NSX Edge firewall
- Explain DHCP snooping
- Explain ARP snooping
13 NSX Advanced Security Services
- Describe NSX SpoofGuard
- Identify how tags enable dynamic security service chains
- Explain Service Composer groups, policies, and tags
- Describe the Identity Firewall architecture
- Explain Application Rule Manager
- Explain how to create a monitoring session
14 NSX Introspection Services
- Describe the types of introspection services
- Describe the installation and configuration of Guest and Network Introspection
- Summarize Guest and Network Introspection alarms, events, and audit messages
15 Cross-vCenter NSX
- Describe cross-vCenter features and use cases
- Identify VMware NSX® Manager™ roles and NSX Controller cluster placement
- Deploy universal logical networks
- Explain the design considerations for cross-vCenter NSX
Who Can Benefit
- Experienced system or network administrators
Course Details
Course Introduction
- Introductions and course logistics
- Review course objectives
Introduction to vSphere Networking
- Describe VMware vSphere® networking components
- Describe vSphere standard switches
- Describe vSphere distributed switches
Introduction to NSX
- Describe the benefits of NSX
- Identify NSX key use cases
NSX Architecture
- Describe the NSX architecture
- Describe the cloud management, management, control, and data planes of NSX
- Identify the component interactions
- Describe the VMware NSX® Controller™ cluster and its functions
- Explain the NSX Controller workload distribution
NSX Infrastructure Preparation
- Explain the steps required for an NSX installation
- Describe what is involved in planning an NSX deployment
- Describe the NSX Controller cluster and deployment
- Describe NSX Controller cluster high availability and load distribution
- Explain how to deploy and configure the NSX Controller cluster
- Explain the workflow involved in host preparation
NSX Logical Switch Networks
- Explain transport zones, VXLANs, and VXLAN tunnel end points (VTEPs)
- Describe the procedure for preparing the infrastructure for virtual networking
- Describe the configuration of vSphere distributed switches for VXLAN
- Identify the components involved in NSX logical switching
- Define VLANs for VXLAN
NSX Logical Routing
- Explain the east-west and north-south routing concepts
- Define the NSX distributed logical router
- Explain the logical router, interfaces, and interface addresses
- Describe the management and control plane interaction
- Describe logical router deployment models and two-tier routing for east-west traffic
- Explain the common topologies of an NSX Edge services gateway
Advanced NSX Logical Routing
- Describe how routers connect remote networks
- Explain route redistribution methods
- Describe less-than-or-equal (LE) and greater-than-or-equal (GE) configurations
- Describe routing event notification enhancements
- Configure equal-cost multipath (ECMP) routing
- Describe high availability for NSX Edge service gateways
NSX L2 Bridging
- Explain L2 bridging use cases
- Describe software and hardware L2 bridging between VXLAN and VLANs
- Discuss L2 bridging packet flows
NSX Edge Services
- Describe the NSX Edge Services
- Explain how Network Address Translation (NAT) works
- Explain NAT64
- Explain the function of load balancing
- Explain one-armed and inline load-balancing architectures
- Explain the DHCP and DNS services for NSX Edge
NSX Edge VPN Services
- Describe the NSX Edge VPN services
- Describe the VPN use cases
- Configure a L2 VPN on an NSX Edge instance
- Configure an NSX Edge instance for IPsec VPN services
- Explain NSX Edge SSL VPN-Plus services
- Configure NSX Edge SSL VPN-Plus server settings
NSX Security Services
- Describe the policy enforcement of the distributed firewall
- Describe virtualization context-awareness
- Explain custom network and security containers
- Describe the architecture of an NSX Edge firewall
- Explain DHCP snooping
- Explain ARP snooping
NSX Advanced Security Services
- Describe NSX SpoofGuard
- Identify how tags enable dynamic security service chains
- Explain Service Composer groups, policies, and tags
- Describe the Identity Firewall architecture
- Explain Application Rule Manager
- Explain how to create a monitoring session
NSX Introspection Services
- Describe the types of introspection services
- Describe the installation and configuration of Guest and Network Introspection
- Summarize Guest and Network Introspection alarms, events, and audit messages
Cross-vCenter NSX
- Describe cross-vCenter features and use cases
- Identify VMware NSX® Manager™ roles and NSX Controller cluster placement
- Deploy universal logical networks
- Explain the design considerations for cross-vCenter NSX
Does the course schedule include a Lunchbreak?
Lunch is normally an hour long and begins at noon. Coffee, tea, hot chocolate and juice are available all day in the kitchen. Fruit, muffins and bagels are served each morning. There are numerous restaurants near each of our centers, and some popular ones are indicated on the Area Map in the Student Welcome Handbooks - these can be picked up in the lobby or requested from one of our ExitCertified staff.
How can someone reach me during class?
If someone should need to contact you while you are in class, please have them call the center telephone number and leave a message with the receptionist.
What languages are used to deliver training?
Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.
What does GTR stand for?
GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.
How do I find an ExitCertified training location?
We have training locations across the United States and Canada. View a full list of classroom training locations.
Which delivery formats are available?
At ExitCertified we offer training that is Instructor-Led, Online, Virtual and Self-Paced.
Does ExitCertified deliver group training?
Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.
Does ExitCertified deliver group training?
Yes, we provide training for groups, individuals, and private on sites. View our group training page for more information.
Great instructor, clear and concise course. Labs were easy to follow and worked perfectly.
Great class, labs, and content. Very thorough and labs actually work with the lab guide. :)
Excellent training experience from start to finish. Lab environment was easy accessible and very easy to use/follow.
Good experience . have taken 3 course till date and each of them helped my career.
Good class and great instructor that took time to answer questions and available during lab times.
