Information Technology

VMware NSX-T Data Center: Install, Configure, Manage [V3.2]

Instructor-Led 11 Agenda

Description

This five-day, fast-paced course provides comprehensive training on how to install, configure, and manage a VMware NSX-T™ Data Center environment. This course covers key NSX-T Data Center features and functionality offered in the NSX-T Data Center 3.2 release, including the overall infrastructure, logical switching, logical routing, networking and security services, firewalls and advanced threat prevention, and more.

Course Overview

Course Objective

By the end of the course, you should be able to meet the following objectives: Describe the architecture and main components of NSX-T Data Center Explain the features and benefits of NSX-T Data Center Deploy the NSX Management cluster and VMware NSX® Edge™ nodes Prepare VMware ESXi™ and KVM hosts to participate in NSX-T Data Center networking Create and configure segments for layer 2 forwarding Create and configure Tier-0 and Tier-1 gateways for logical routing Use distributed and gateway firewall policies to filter east-west and north-south traffic in NSX-T Data Center Configure Advanced Threat Prevention features Configure network services on NSX Edge nodes Use VMware Identity Manager and LDAP to manage users and access Explain the use cases, importance, and architecture of Federation

Who Should Attend

Experienced security administrators or network administrators

Course Introduction Lesson Id 1

Course Introduction

VMware Virtual Cloud Network and NSX-T Data Center Lesson Id 2

VMware Virtual Cloud Network and NSX-T Data Center

Preparing the NSX-T Data Center Infrastructure Lesson Id 3

Preparing the NSX-T Data Center Infrastructure

NSX-T Data Center Logical Switching Lesson Id 4

NSX-T Data Center Logical Switching

NSX-T Data Center Logical Routing Lesson Id 5

NSX-T Data Center Logical Routing

NSX-T Data Center Bridging Lesson Id 6

NSX-T Data Center Bridging

NSX-T Data Center Firewalls Lesson Id 7

NSX-T Data Center Firewalls

NSX-T Data Center Advanced Threat Prevention Lesson Id 8

NSX-T Data Center Advanced Threat Prevention

NSX-T Data Center Services Lesson Id 9

NSX-T Data Center Services

NSX-T Data Center User and Role Management Lesson Id 10

NSX-T Data Center User and Role Management

NSX-T Data Center Federation Lesson Id 11

NSX-T Data Center Federation

Lesson Id	Title	Description
1	Course Introduction	Introductions and course logistics<br />Course objectives
2	VMware Virtual Cloud Network and NSX-T Data Center	Introduce the VMware Virtual Cloud Network vision<br />Discuss NSX-T Data Center solutions, use cases, and benefits<br />Explain NSX-T Data Center architecture and components<br />Describe the VMware NSXTM product portfolio and features<br />Explain the management, control, data, and consumption planes and function
3	Preparing the NSX-T Data Center Infrastructure	Describe NSX Management Cluster<br />Deploy VMware NSXTM ManagerTM nodes on VMware ESXi and KVM hypervisors<br />Navigate through the NSX Manager UI<br />Explain data-plane components such as N-VDS/VDS, transport nodes, transport zones, profiles, and more<br />Perform transport node preparation and establish the data center infrastructure<br />Verify transport node status and connectivity
4	NSX-T Data Center Logical Switching	Introduce key components and terminology in logical switching<br />Describe the function and types of L2 segments<br />Explain tunneling and the GENEVE encapsulation<br />Configure logical segments and attach hosts using NSX Manager UI<br />Describe the function and types of segment profiles<br />Create segment profiles and apply them to segments and ports<br />Explain the function of MAC, ARP, and TEP tables used in packet forwarding<br />Demonstrate L2 unicast packet flow<br />Explain ARP suppression and BUM traffic handling
5	NSX-T Data Center Logical Routing	Describe the logical routing function and use cases<br />Introduce the two-tier routing architecture, topologies, and components<br />Explain the Tier-0 and Tier-1 Gateway functions<br />Describe the logical router components: Service Router and Distributed Router<br />Discuss the architecture and function of NSX Edge nodes<br />Discuss deployment options of NSX Edge nodes<br />Configure NSX Edge nodes and create NSX Edge clusters<br />Configure Tier-0 and Tier-1 Gateways<br />Examine the single-tier and multitier packet flow<br />Configure static routing and dynamic routing, including BGP and OSPF<br />Enable ECMP on Tier-0 Gateway<br />Describe NSX Edge HA, failure detection, and failback modes<br />Configure VRF Lite
6	NSX-T Data Center Bridging	Describe the function of logical bridging<br />Discuss the logical bridging use cases<br />Compare routing and bridging solutions<br />Explain the components of logical bridging<br />Create bridge clusters and bridge profiles
7	NSX-T Data Center Firewalls	Describe NSX segmentation<br />Identify the steps to enforce Zero-Trust with NSX segmentation<br />Describe the Distributed Firewall architecture, components, and function<br />Configure Distributed Firewall sections and rules<br />Configure the Distributed Firewall on VDS<br />Describe the Gateway Firewall architecture, components, and function<br />Configure Gateway Firewall sections and rules
8	NSX-T Data Center Advanced Threat Prevention	Explain NSX IDS/IPS and its use cases<br />Configure NSX IDS/IPS<br />Deploy the NSX Application Platform<br />Identify the components and architecture of NSX Malware Prevention<br />Configure NSX Malware Prevention for east-west and north-south traffic<br />Describe the use cases and architecture of NSX Intelligence<br />Identify the components and architecture of VMware NSX® Network Detection and Response™<br />Use NSX Network Detection and Response to analyze network traffic events.
9	NSX-T Data Center Services	Describe NSX-T Data Center services<br />Explain and configure Network Address Translation (NAT)<br />Explain and configure DNS and DHCP services<br />Describe VMware NSX® Advanced Load Balancer™ architecture, components, topologies, and use cases.<br />Configure NSX Advanced Load Balancer<br />Discuss the IPSec VPN and L2 VPN function and use cases<br />Configure IPSec VPN and L2 VPN using the NSX Manager UI
10	NSX-T Data Center User and Role Management	Describe the function and benefits of VMware Identity Manager™ in NSX-T Data Center<br />Integrate VMware Identity Manager with NSX-T Data Center<br />Integrate LDAP with NSX-T Data Center<br />Identify the various types of users, authentication policies, and permissions<br />Use role-based access control to restrict user access
11	NSX-T Data Center Federation	Introduce the NSX-T Data Center Federation key concepts, terminology, and use-cases.<br />Explain the onboarding process of NSX-T Data Center Federation<br />Describe the NSX-T Data Center Federation switching and routing functions.<br />Describe the NSX-T Data Center Federation security concepts.