(NSX v6.2) Objective 1.1: Compare and Contrast the Benefits of a VMware NSX Implementation

  • Challenges with Physical Network Implementations (See NSX Design Guide 6.2)
    • Lack of vlans, for instance in the enterprises environment, ie limitation of 4096
    • Edge hair-pinning of traffic with firewalls
    • NSX scalability
    • You need long distance vmotion but faces the need for application continuity
    • Overhead of firewall management
    • VMware wants you to be able to see where this software defined networking product can help alleviate pain points in your network
      • Also be aware of where it will not help, as some exam prep examples state, something like oversubscription or taxing of a top of rack switch due to increased bandwidth needs between core and TOR

 

  • Common Terms
    • Management Plane
    • Control Plan
    • Data Plane
    • Layer 2 frame
    • Layer 3 Packet
    • Layer 4 datagram/segment
    • VXLAN
    • Transport Zone
    • VNI
    • VTEP
    • VXLAN segment

 

  • Network Security Functions
    • You need to know what parts of NSX are indeed needed to support other functions
      • distributed firewall and no VXLAN
      • VXALN and Layer 2 VPN and not making use iof the distributed firewall
      • endpoint and data security and none of the above
    • Logical Switching and Distributed firewalls are core but NSX also does
      • Data Security
      • Activity Monitoring
      • IPSec VPN
      • L2 VPN
      • Load Balancing
      • Integration with 3rd Party intrusion detection and Data Loss Prevention systems and solutions

 

  • Common NSX Use Cases
    • Page 6 of the NSX Design Word Doc
    • data center automation
    • customer self service
    • increase network deployment speed
    • Isolation of dev test and prod environments
    • zero trust model
    • every vm can be covered with a full stateful firewall engine
    • stop desktop to desktop hacking (VDI)

Again, keep in mind that using NSX doesnt mean you as the end user need to make use of every single feature. Its good to know what features NSX has that match the needs.