VMWARE NSX SD-WAN Velocloud Basics & NSX-T

Compare Velocloud and Viptela sd-wan components, including edge devices, gateways, and cloud orchestrators, and examine zero touch provisioning, application recognition, and secure, optimized connectivity.

Compare Velocloud and Viptela SD-WAN features such as application routing policies, firewalling, cloud integration, per-segment traffic engineering, and SaaS quality of experience.

Install Velocloud vEdge by deploying a valid OVF image on a hypervisor and linking to the Velocloud orchestrator for zero-touch provisioning using the activation key and serial matching.

Verify Velocloud vEdge post-deployment by logging into the edge router, checking routes and two van interfaces, and confirming green orchestrator status, then run ARP, ping, traceroute, and bandwidth diagnostics.

Create and tailor a Velocloud edge profile, including profile overview, network services, segments, and policy settings, then attach it to devices to enforce business and firewall rules.

Configure authentication, dns, and netflow in the vco profile, including radius server setup, dns forwarding, and netflow with collector ip and port.

Configure vlan and related settings in Velocloud's vco profile, assign vlans to lan interfaces, and tailor snmp, visibility, and multi-source bandwidth options.

Configure profile business policy in Velocloud and NSX-T to apply application aware routing and QoS, using match and action rules across segments, source, destination, and applications.

Learn to create firewall rules in VMware Velocloud NSX, matching source, destination, VLAN, IP, port, MAC, and applications, with allow, deny, or deny and log actions.

Learn to configure a Velocloud edge with the edge template and override from the profile template, including static routes, ICMP probes, and VLAN/interface settings.

Discover how Velocloud integrates underlay routing with an overlay flow control to deliver enterprise-wide routing across edge devices and gateways, using ospf and bgp with route reflection and redistribution.

Explore Velocloud overlay flow control to manage routing over overlay tunnels with OSPF and BGP, using the orchestrator to adjust global routing preferences and default priority.

Explore the NSX-T architecture by detailing the management, control, and data planes, including NSX manager, central and local control planes, and transport and edge data plane components.

Explore the NSX-T consumption model and the 2.4 declarative interface, featuring simplified UI, API-driven deployment, DNS service, VPN endpoint protection, and context profiles like L7 apps or FQDN.

Explore the NSX-T dashboard in the NSX manager, with an overview of networking, security, inventory, and system, plus gateways, VPN, NAT, and load balancers in a single management plane.

Understand NSX-T logical switching, comparing VLAN backed and overlay backed segments with MAC-over-IP tunnels, and learn how uplink profiles and LAG govern VM-to-VM and VM-to-physical forwarding.

This lab walks through creating and mapping NSX-T uplink profiles, configuring VLAN and MTU, and applying profiles to iSCSI and KVM hosts with network control, failover, and load balancing.

Explore north to south routing with a service router on the edge, detailing Geneve encapsulation and decapsulation, and the flow of traffic between edge, gateway, and outside.

VMware recommends a two-tier NSX-T design with tier zero and tier one gateways, where tier zero handles external and overlay connectivity and tier one manages tenant routes.

Verify north-south traffic with a traceroute from an external PC to an inside VM, exploring tier zero and tier one gateways, route redistribution, and BGP on the NSX manager.

Explore high availability in nsx-t with active-active and active-standby configurations, examining SR components, tier zero and tier one gateways, and inter SR routing using BGP, including stateless versus stateful failover.

Explore a high availability lab for VMware NSX Velocloud. Log in to the NSX Manager, configure a T0 gateway in active-active mode, and verify BGP convergence and edge redundancy.

Utilize multi step tunnel endpoint support on vEdge to enable overlay load balancing and high availability, with dual uplinks P1 and P2 and management VLANs for VM and bare metal.

Create a tier one gateway attached to tier zero, attach a web segment, and configure destination NAT and source NAT rules with translated IPs, then verify in NSX manager.

Verify NAT translation on the edge by inspecting forwarding information, advertised IPs, and firewall connections, then test reachability with a ping to internal and external addresses.

Verify dhcp assignment by switching to the correct network interface, enabling dhcp services, and confirming the ip address on eth1 is sourced from the dhcp server.

Explore how the NSX-T distributed firewall uses the connection tracker and flow table, scans the rule table top-to-bottom, and updates the flow table after a match, favoring a white-list policy.

Learn to create, edit, and test DFW rules in NSX-T Velocloud, including blacklist/whitelist transitions, rule order, and service-based permissions for web to app to DB across IP or VM groups.

Learn how NSX-T load balancers offload traffic, distribute requests via a virtual IP to server pools, and enable scale-out and high availability with tiered architecture.