1. Course Introduction
- Introductions and course logistics
- Course objectives
- Identify additional resources
2. Introduction to vSphere Networking
- Describe vSphere networking components
- Describe vSphere standard switches
- Describe vSphere distributed switches
3. Introduction to NSX
- Describe the benefits of NSX
- Identify NSX key use cases
4. NSX Architecture
- Describe the NSX architecture
- Describe the cloud management, management, control, and data planes of NSX
- Identify the component interactions
- Describe the NSX Controller cluster and its functions
- Explain the NSX Controller workload distribution
5. NSX Infrastructure Preparation
- Explain the steps required for an NSX installation
- Describe what is involved in planning an NSX deployment
- Describe the NSX Controller cluster and deployment
- Describe NSX Controller cluster high availability and load distribution
- Explain how to deploy and configure the NSX Controller cluster
- Explain the workflow involved in host preparation
6. NSX Logical Switch Networks
- Explain transport zones, VXLANs, and VXLAN tunnel endpoints (VTEPs)
- Describe the procedure of preparing the infrastructure for virtual networking
- Describe the configuration of vSphere distributed switches for VXLAN
- Identify the components involved in NSX logical switching
- Define VLANs for VXLAN
7. NSX Logical Routing
- Explain the east-west and north-south routing concepts
- Define the NSX distributed logical router
- Explain the logical router, interfaces, and interface addresses
- Describe the management plane and control plane interaction
- Describe logical router deployment models and two-tier routing for east-west traffic
- Explain the common topologies of an NSX Edge services gateway
8. Advanced NSX Logical Routing
- Describe how routers connect remote networks
- Explain route redistribution methods
- Describe less-than-or-equal (LE) and greater-than-or-equal (GE) configurations
- Describe routing event notification enhancements
- Configure equal-cost multipath (ECMP) routing
- Describe high availability for NSX Edge service gateways
9. NSX L2 Bridging
- Explain L2 bridging use cases
- Describe software and hardware L2 bridging between VXLAN and VLANs
- Discuss L2 bridging packet flows
10. NSX Edge Services
- Describe the NSX Edge services
- Explain how network address translation (NAT) works
- Describe source NAT and destination NAT
- Explain NAT64
- Explain the function of load balancing
- Explain the one-armed and inline load-balancing architectures
- Explain the DHCP and DNS services of NSX Edge
11. NSX Edge VPN Services
- Describe the NSX Edge VPN services
- Describe the VPN use cases
- Configure an L2 VPN on an NSX Edge device
- Configure an NSX Edge device for IPsec VPN services
- Explain NSX Edge SSL VPN-Plus services
- Configure NSX Edge SSL VPN-Plus server settings
12. NSX Security Services
- Describe the policy enforcement of the distributed firewall
- Describe virtualization context-awareness
- Explain custom network and security containers
- Describe the architecture of an NSX Edge firewall
- Explain DHCP snooping
- Explain ARP snooping
13. NSX Advanced Security Services
- Describe NSX SpoofGuard
- Identify how tags enable dynamic security service chains
- Explain Service Composer groups, policies, tags
- Describe the Identity Firewall architecture
- Explain Application Rule Manager
- Explain how to create a monitoring session
14. NSX Introspection Services
- Describe the types of introspection services
- Describe the installation and configuration of Guest Introspection and Network Introspection
- Summarize Guest Introspection and Network Introspection alarms, events, and audit messages
15. Cross-vCenter NSX
- Describe cross-vCenter NSX features and use cases
- Identify NSX Manager roles and NSX Controller cluster placement
- Deploy universal logical networks
- Explain the design considerations for cross-vCenter NSX
16. Troubleshooting Methodology
- Develop a structured troubleshooting approach
- Differentiate between symptoms and root causes
- Identify and isolate problems residing in various areas
- Apply an appropriate methodology and procedure to troubleshooting
17. NSX Troubleshooting and Operational Tools
- Discuss NSX operational requirements
- Use the native NSX tools (such as the central CLI, the NSX dashboard, and Application Rule Manager) to solve various types of problems
- Use vRealize Network Insight to identify and analyze problems
- Use vRealize Log Insight Content Pack for NSX in troubleshooting and operations
18. Troubleshooting and Operating NSX Infrastructure
- Explain the NSX infrastructure and component communications
- Troubleshoot NSX Manager and the management plane
- Troubleshoot NSX Controller and the control plane
- Troubleshoot problems in host preparation
19. Troubleshooting and Operating NSX Logical Switches
- Explain VXLAN and logical switching components
- Verify the VXLAN and logical switch configuration and status
- Identify and troubleshoot common L2 configuration errors
- Use the GUI, the CLI, packet capture, traceflow, and other tools to troubleshoot logical switching problems
20. Troubleshooting and Operating NSX Logical Routers
- Describe the NSX logical routing architecture
- Explain routing components, functions, and communications
- Verify logical router configuration settings
- Use packet capture on routers and perform packet walk
- Use the GUI, the CLI, trace flow, and other tools to troubleshoot various logical routing problems
21. Troubleshooting and Operating NSX Edge Services
- Verify edge services (such as DHCP and DNS) configuration settings and operational status
- Troubleshoot various types of VPN services (SSL VPN-Plus, L2 VPN, and IPsec VPN)
- Verify the configuration and status of logical load balancers
- Troubleshoot common load-balancing and high availability scenarios
22. Troubleshooting and Operating NSX Security Services
- Discuss the NSX distributed firewall architecture, components, communication channels, and features
- Use the CLI and other tools to troubleshoot the configuration and operations of the NSX distributed firewall and the NSX Edge firewall
- Explain and troubleshoot the Service Composer components and architecture
- Troubleshoot common problems related to Identity Firewall
- Verify Guest Introspection deployment configuration and functions, and troubleshoot common problems