Multi-Site Network and Security Services with NSX-T

1. Front Matter

   Pages i-xxiv

   PDF

2. NSX-T Security and Firewalls

   • Iwan Hoogendoorn

   Pages 1-52

3. NSX-T Advanced Security

   • Iwan Hoogendoorn

   Pages 53-68

4. NSX-T Service Insertion

   • Iwan Hoogendoorn

   Pages 69-86

5. NSX-T NAT, DHCP, and DNS Services

   • Iwan Hoogendoorn

   Pages 87-124

6. NSX-T Load Balancing

   • Iwan Hoogendoorn

   Pages 125-156

7. NSX-T VPN

   • Iwan Hoogendoorn

   Pages 157-194

8. NSX Intelligence, NSX-T Alarms/Events, and Network Visualizations

   • Iwan Hoogendoorn

   Pages 195-219

9. Authentication and Authorization

   • Iwan Hoogendoorn

   Pages 221-246

10. NSX-T Federation

    • Iwan Hoogendoorn

    Pages 247-301

11. Public Cloud Integration

    • Iwan Hoogendoorn

    Pages 303-316

12. Cloud Management Platform Integration and Automation

    • Iwan Hoogendoorn

    Pages 317-322

13. Back Matter

    Pages 323-329

    PDF

Know the basics of network security services and other stateful services such as NAT, gateway and distributed firewalls (L2-L7), virtual private networks (VPN), load balancing (LB), and IP address management. This book covers these network and security services and how NSX-T also offers integration and interoperability with various other products that are not only created by VMware, but are also referred by VMware as third-party integrated vendors.

With the integration of VMware vRealize Automation, you can automate full application platforms consisting of multiple virtual machines with network and security services orchestrated and fully automated.

From the operational perspective, this book provides best practices on how to configure logging, notification, and monitoring features and teaches you how to get the required visibility of not only your NSX-T platform but also your NSX-T-enabled network infrastructure.

Another key part of this book is the explanation of multi-site capabilities and how network and security services can be offered across multiple on-premises locations with a single management pane. Interface with public cloud services also is included. The current position of NSX-T operation in on-premises private clouds and the position and integration with off-premises public clouds are covered as well.

This book provides a good understanding of integrations with other software to bring the best out of NSX-T and offer even more features and capabilities.

What You Will Learn

• Understand the NSX-T security firewall and advanced security
• Become familiar with NAT, DNS, DHCP, and load balancing features
• Monitor your NSX-T environment
• Be aware of NSX-T authentication and authorization possibilities
• Understand integration with cloud automation platforms
• Know what multi-cloud integrations are possible and how to integrate NSX-T with the public cloud

Who This Book Is For



Virtualization administrators, system integrators

• VMware
• NSX
• NSX - T
• SDN
• Network Automation

• ROTTERDAM, The Netherlands

  Iwan Hoogendoorn

Iwan Hoogendoorn started his IT career in 1999 as a help desk agent. Soon after, he started to learn Microsoft products and obtained MCP, MCSA, MCDBA, and MCSE certifications. While working as a Microsoft Systems Engineer, Iwan developed additional skills and knowledge in computer networking. Networking became a passion in his life. This passion resulted in learning networking with Cisco products. One of Iwan's dreams was to work for Cisco. But before this could happen, he first needed to finish his bachelor's degree in ICT, which he completed in 2009. In early 2010, he started working for his dream company, Cisco. After finishing his master's degree (part-time) in computer science at the University of Amsterdam and becoming a CCIE (#13084) in six different technology areas, Iwan wanted to learn something new, and that was virtualization. Because networking was something that ran through his veins, network virtualization was the next logical step. So he decided tolearn VMware NSX.

Iwan got the opportunity to work for VMware in 2016 as Senior NSX PSO Consultant. In his time at VMware, he gained more knowledge on private and public clouds and the related products that VMware developed to build the Software-Defined Data Center (SDDC). As new technology is growing at a rapid pace (especially within VMware and the VMware cloud space), Iwan is trying to keep up.

After working for four years as Senior NSX PSO Consultant (primarily with VMware NSX-v and NSX-T), Iwan was promoted to Staff SDDC Consultant, focusing on the full SDDC stack that includes Hyperscaler offerings on the main public clouds such as AWS (VMC on AWS), Microsoft (Azure VMware Solution), and Google (Google Cloud VMware Engine).

Iwan is certified on multiple VMware products, including NSX, and he is actively working together with VMware certification to develop network-related exams for VMware. Next to his VMware certifications, Iwan is also AWS andTOGAF certified.

Iwan is the author of the Apress book, Getting Started with NSX-T: Logical Routing and Switching.

 

Policies and ethics