VMware NSX-T Data Center: Install, Configure, Manage [V3.2]

Opis

Cel

By the end of the course, you should be able to meet the following objectives:

• Describe the architecture and main components of NSX-T Data Center
• Explain the features and benefits of NSX-T Data Center
• Deploy the NSX Management cluster and VMware NSX® Edge™nodes
• Prepare VMware ESXi™and KVM hosts to participate in NSX-T Data Center networking
• Create and configure segments for layer 2 forwarding
• Create and configure Tier-0 and Tier-1 gateways for logical routing
• Use distributed and gateway firewall policies to filter east-west and north-south traffic in NSX-T Data Center
• Configure Advanced Threat Prevention features
• Configure network services on NSX Edge nodes
• Use VMware Identity Manager and LDAP to manage users and access
• Explain the use cases, importance, and architecture of Federation

Grupa docelowa

• Experienced security administrators or network administrators.

Wymagania

• Good understanding of TCP/IP services and protocols
• Knowledge and working experience of computer networking, including switching and routing technologies (L2-L3) and L2-L7 firewall
• Knowledge and working experience with VMware vSphere® environments
• Knowledge and working experience with Kubernetes or vSphere with VMware Tanzu environments

Konspekt

1. Course Introduction
   • Introductions and course logistics
   • Course objectives
2. VMware Virtual Cloud Network and NSX-T Data Center
   • Introduce VMware’s Virtual Cloud Network vision
   • Discuss NSX-T Data Center solutions, use cases, and benefits
   • Explain NSX-T Data Center architecture and components
   • Describe VMware NSX® product portfolio and features
   • Explain the management, control, data, and consumption planes and function
3. Deployment Preparing the NSX-T Data Center Infrastructure
   • Describe NSX Management Cluster
   • Deploy VMware NSX® Manager nodes on VMware ESXi and KVM hypervisors
   • Navigate through the NSX Manager UI
   • Explain data plane components such as N-VDS, transport nodes, transport zones, profiles, and more
   • Perform transport node preparation and establish the data center infrastructure
   • Verify transport node status and connectivity
4. NSX-T Data Center Logical Switching
   • Introduce key components and terminology in logical switching
   • Describe the types of L2 segments and function
   • Explain tunneling and the GENEVE encapsulation
   • Configure logical segments and attach hosts using NSX Manager UI
   • Describe the function and types of segment profiles
   • Create segment profiles and apply them to segments and ports
   • Explain the function of MAC, ARP, and TEP tables used in packet forwarding
   • Demonstrate L2 unicast packet flow
   • Explain ARP suppression and BUM traffic handling
5. NSX-T Data Center Logical Routing
   • Describe the logical routing function and use cases
   • Introduce the two-tier routing architecture, topologies, and components
   • Explain the Tier-0 and Tier-1 Gateway functions
   • Describe the logical router components: Service Router and Distributed Router
   • Discuss the architecture and function of VMware NSX® Edge™ nodes
   • Discuss deployment options of NSX Edge nodes
   • Configure NSX Edge nodes and create NSX Edge clusters
   • Configure Tier-0 and Tier-1 Gateways
   • Examine the single-tier and multitier packet flow
   • Configure static routing and dynamic routing
   • Enable ECMP on Tier-0 Gateway
   • Describe NSX Edge HA, failure detection, and failback modes
6. NSX-T Data Center Bridging
   • Describe the function of logical bridging
   • Discuss the logical bridging use cases
   • Compare routing and bridging solutions
   • Explain the components of logical bridging
   • Create bridge clusters and bridge profiles
7. NSX-T Data Center Security
   • Introduce the NSX-T Data Center security approach and model
   • Describe the micro-segmentation benefits and use cases
   • Describe the Distributed Firewall architecture, components, and function
   • Configure Distributed Firewall sections and rules
   • Describe the Gateway Firewall architecture, components, and function
   • Configure Gateway Firewall sections and rules
   • Describe URL analysis and distributed intrusion system importance and use-cases.
   • Describe the service insertion functionality for east-west and north-south security
   • Discuss the integration and benefits of partner security solutions with NSX-T Data Center
8. NSX-T Data Center Services
   • Describe NSX-T Data Center services
   • Explain and configure Network Address Translation (NAT) and NAT 64
   • Explain and configure DNS and DHCP services
   • Describe the load-balancing function, topologies, components, and use cases
   • Configure L4-L7 load balancing
   • Discuss the IPSec VPN and L2 VPN function and use cases
   • Configure IPSec VPN and L2 VPN using NSX Manager UI
9. NSX-T Data Center Monitoring
   • Explain the importance and functionality of NSX Intelligence
   • Navigate through the NSX Topology UI and identify the various key elements in the UI
   • Discuss the importance and use-cases of dashboards and alarms
10. NSX-T Data Center User and Role Management
    • Describe the function and benefits of VMware Identity Manager in NSX-T Data Center
    • Integrate VMware Identity Manager with NSX-T Data Center
    • Identify the various types of users, authentication policies, and permissions
    • Use role-based access control to restrict user access
    • Explain the built-in roles in VMware Identity Manager and role assignment to users
11. NSX-T Data Center Federation
    • Introduce the NSX-T Data Center Federation key concepts, terminology, and use-cases.
    • Explain the onboarding process of NSX-T Data Center Federation
    • Describe the NSX-T Data Center Federation switching and routing functions.
    • Describe the NSX-T Data Center Federation security concepts and routing functions

Uwagi

Szkolenie realizowane jest przy współpracy z naszym Partnerem – firmą szkoleniową Arrow ECS Sp. z o.o.

CZAS TRWANIA: 40 HOURS (5 DAYS)

For more details, please contact us at osec@osec.pl