Log Insight & NSX-v DFW
I was recently asked by a customer who is running NSX vSphere (NSX-v) and Log Insight, is there a way they can export data from Log Insight that will give them the unique...
View ArticleNSX-v: Where is my object used that I am trying to delete?
Over the past few years of working with NSX vSphere, one of the more frustrating things that would happen is that you would try to delete an object of some description (IP Set, Security Group, Service...
View ArticleRunning nested NSX-T on NSX-T
Recently I have been seeing various posts about running NSX-T on NSX-T, and I thought it was about time that I finished off this post i’ve been sitting on for quite some time. As part of my teams...
View ArticleHow to sync a dynamic NSX-T group to an external system.
One of the things that makes NSX-T such a flexible platform when it comes to creating security policy is the ability to group membership defined by dynamic criteria, or based on objects such as a...
View ArticleNSX-T Error when trying to configure a VDS port group for a VMK Uninstall...
This is one of those pesky errors that I keep stumbling across, and every time It pops up, I forget how to fix it, so I am going to document it once and for all so that I can at easily find the fix...
View ArticleWorking with NSX-T 3.0 and VDS 7.0 – Duplicate Port Group Names
When working with a colleague recently on an NSX-T 3.0 environment that utilises VDS 7.0 rather than N-VDS, we came across something which initially stumped me. If you were to try and create 2...
View ArticleHow to count DFW rules per ESXi host.
If you’ve heard me speak at VMworld on NSX Distributed Firewall best practises, you would have heard me speak about the importance of using the Applied To option when configuring DFW rules. One of the...
View ArticleNotify Switches on N-VDS
Recevied an interesting question today about whether a N-VDS supports the “Notify Switches” feature that is available in regular VDS. And as I didn’t know the answer to this off the top of my head, it...
View ArticleCounting Exploded NSX-v DFW Rules
When working with a customer recently, there was a question raised about how to calculate the actual number of NSX-v distributed firewall rules configured for a given VM on the dataplane of an ESXi...
View ArticleMonitoring NSX FW Rules per host
Today I was asked for some help in figuring out the number of NSX-T Distributed Firewall rules configured for all filters on a given ESXi host. Why do we need to figure out this value? If you take a...
View Article