Step by Step install NSX – Part 6

Creating the Distributed logical router (DLR) and Edge Service Gateway (ESG)

In previous POST shared the lab design for the NSX LAB, In this Post we will create and configure the below based on that design

1. NSX Distributed Logical Router.
2. NSX Edge Service Gateway (ESG).
3. Configuring the routing protocols.
   1. OSPF.
   2. BGP.

Create Distributed Logical Router

From the vSphere client select the Networking and Security from the menu and select the NSX Edges tab in the left panel, And click ADD. Select Distributed Logical Router.

Write the Name and the Host Name and select Deploy Control VMs to deploy VM for the router. And in the production select the High Availability and Click Next.

Specify the username and password and click Next.

To configure the virtual appliance, click on Add Edge Appliance VM.

Configure the location to import the virtual appliance and click ADD.

Configure the management network for the appliance and specify the IP and click Next.

Add the interfaces required that will be attached to the logical switches, by click ADD.

For all the interfaces will be connected to the end logical switch will be internal and what will connect to the logical switch of the Edge will be uplink. Also can be configured as internal as well.

After writing the name and select Internal, select the pencil opposite to the Connected To, to select the logical switch.

Select the logical switch and click OK.

Under the Configuration Subnets Click Add and add the IP of the interface and the subnet. Click Ok.

Repeat the previous steps and add another interface and click Ok.

After Adding all the interfaces required click Next.

Specify the GW if needed (The Edge router) and click Next.

After reviewing the configuration click Finish.

Repeat the previous steps to add all the additional distributed routers.

Create Edge Service Gateway

From the vSphere client select the Networking and Security from the menu and select the NSX Edges tab in the left panel, And click ADD. Select Edge Service Gateway.

Write the Name and the Host Name and select Deploy Control VMs to deploy VM for the router. And in the production select the High Availability and Click Next.

Specify the username and password and click Next.

To configure the virtual appliance, click on Add Edge Appliance VM.

Configure the location to import the virtual appliance and click ADD. After finish click Next

Add the interfaces required that will be attached to the logical switches, by click ADD.

For all the interfaces will be connected to the end logical switch will be internal and what will connect to the Port Group will be uplink.

After writing the name and select Internal, select the pencil opposite to the Connected To, to select the logical switch. Add the subnet and the IP of the Interface. And click OK. Repeat this for all the interfaces.

Here as this the uplink that will link with the external network, we should select Uplink and select the port group.

Review the interfaces and click Next.

Specify the GW for the uplink interface and click next.

Here you can enable the firewall default policy, or you can specify enable or disable the traffic, or you can do this later. Click Next.

After review click Finish.

Finally, we add the 2 Distributed LR and the ESG.

We can confirm the deployment of the router controller from the vSphere Client under the Hosts and clusters you will find the routers up and running.

Configure the Routing protocol OSPF / BGP

OSPF Protocol

For the Logical Router will enable the OSPF

If the Router ID not configured, we should configure it first.

Select The first Router and from the sub tap select Routing tap select Edit for the Dynamic Routing configuration.

Write the IP address for the router uplink and click Save

After finish click Publish

Select OSPF from the left tap and expand the Area Definition and click Add.

Create Area 820, Click ADD

Do not forget to click Publish. And Edit the Configuration to define the protocol Address and the forwarding address

 The protocol address can be any IP address that is in the same subnet and is not used. And the forwarding address should be the ip address of the uplink interface of the router.

Configure the Ips as mentioned and Click Enable for the OSPF. Click Save

Click Publish

After That do the same previous configuration for the second router.

From The edge server

Will enable for the interfaces connected to the logical routers / Switches the OSPF protocol, And for the uplink interface we will enable the BGP protocol

Same as in the previous router will configure the same configuration in the Edge router and we will define the interfaces.

Define the Same OSPF Area

Enable the service OSPF Service

Expand the Area to interface Mapping and click Add

Define the Interfaces that will be connected to the OSPF area (the internal routers) and define the area and click ADD

Repeat it to all the required interfaces.

BGP Protocol

Configure the BGP routing protocol for the Edge Uplink.

Normally using the edge uplink to link with the aggregation switches using the bgp protocol (As this is the best practices)

Select The first Router and from the sub tap select Routing tap select the BGP tap in the left tab and click Edit the configuration

Define the Local AS (65430) and select enable the status and click Save

Local AS this is the Local autonomous systems (AS) that define the BGP area and can define the areas of the router neighbors with it. The AS ranges can be as follow:

Publish the configuration

Add the Neighbors by click ADD

Write the configuration of the neighbor router and click ADD

Click Publish