Diagram showing Traceflow lets you inject and trace synthetic packets through the NSX-T fabric, visualizing every hop - distributed firewall, logical switches, Tier-0/1 routers, edge nodes - and highlighting where packets are delivered or...

NSX-T Traceflow and Port Mirroring Troubleshooting Guide

Traceflow or port mirroring: which tool should you use? Use Traceflow when you need to follow a synthetic packet through VMware NSX and identify the component or rule that forwards or drops it. Use port mirroring when you need a copy of real traffic for Wireshark or tcpdump. Start with Traceflow for path and policy … Explore: NSX-T Traceflow and Port Mirroring Troubleshooting Guide

Diagram of Example 1: Basic NSX-T Topology.

YAML-Driven NSX-T Infrastructure as Code: Real Examples for Modern Ops

Table of Contents 1. Introduction: Why YAML-Driven IaC for NSX-T? Modern IT organizations demand agility, repeatability, and compliance. Infrastructure as Code (IaC) using YAML allows network engineers, architects, and platform teams to design, provision, and version entire NSX-T network topologies with source-controlled, human-readable files. Benefits: 2. Foundation: NSX-T 4.x Automation Landscape NSX-T 4.x unlocks API-first … Explore: YAML-Driven NSX-T Infrastructure as Code: Real Examples for…

Diagram showing NSX-T’s logical switch and overlay architecture virtualizes this replication, ensuring traffic efficiency while supporting advanced multi-tenant and east-west isolation.

NSX-T Multicast and BUM Traffic: Design, Optimization, and Troubleshooting

Introduction Multicast, broadcast, and unknown unicast (BUM) traffic management is fundamental in any NSX-T Data Center deployment. These traffic types can impact scalability, efficiency, and performance if not carefully designed and monitored. NSX-T 4.x introduces mature mechanisms for handling BUM traffic within overlay networks and in integration with physical underlays, supporting both greenfield and brownfield … Explore: NSX-T Multicast and BUM Traffic: Design, Optimization, and…

Diagram of VCF 9 + NSX Architecture Overview.

VMware VCF 9 Deep Dive: Unlocking NSX Power in Modern On-Prem Data Centers

What’s New in VCF 9 (with NSX) VMware Cloud Foundation (VCF) 9 introduces a series of impactful enhancements for network virtualization, with NSX taking center stage. This release brings higher scalability, smarter automation, and simplified operations that matter to network engineers, virtualization admins, and architects in on-premises environments. Key advancements: Summary:VCF 9 with NSX offers … Explore: VMware VCF 9 Deep Dive: Unlocking NSX Power…

VMware NSX east-west traffic between application tiers inside the workload environment.

East-West vs. North-South Traffic in VMware NSX: Architecture and Troubleshooting

Quick answer: east-west vs. north-south traffic East-west traffic moves between workloads, services, or network segments inside a data center or cloud environment. North-south traffic crosses that environment’s boundary to reach users, the internet, another site, or another external network. In VMware NSX, east-west forwarding is often distributed across the host data path, while north-south connectivity … Explore: East-West vs. North-South Traffic in VMware NSX: Architecture…

VMware presentation slide titled "Virtual Cloud Network"; the adjacent article text explains that exapnds portfolio deeper into the enterprise edge.

VMware Bringing SASE to SD-WAN VMworld 2020

At VMworld 2020 a new solution called Edge Network Intelligence from the Nyansa acquisition has been announced.  One thing you have to appreciate about VMware is they will acquire a company to add a missing feature to their portfolio.  The VeloCloud acquisition bringing SD-WAN to VMware was a huge piece to add to the edge … Explore: VMware Bringing SASE to SD-WAN VMworld 2020

VMware presentation slide titled "vRealize Network Insight Overview"; the adjacent article text explains that for a quick refresh/overview of what vRNI is.

VMware vRealize Network Insight (vRNI) VMworld 2020 Announcements

In an effort to continue to give you deeper visibility into your environment, vRNI has some great updates being released at VMworld.  vRNI has always been a great end to end tool but now with assurance and verification giving you the ability to perform intent verification, with network wide visibility, and proactive operations based on … Explore: VMware vRealize Network Insight (vRNI) VMworld 2020 Announcements

VMware presentation slide titled "Benefit from Rich Workload Context"; the adjacent article text explains that VMware has the strategic advantage and knowledge of what is happening inside the systems running your production workloads.

VMware NSX-T Advanced Threat Prevention Announcements at VMworld 2020

It is hard to believe that NSX-T is now three years old and what an incredible three years has it been.  Being a former global enterprise architect for a couple companies that deployed NSX-T, I have had the privilege of watching this solution grow.  Every year there feels like there is a new acquisition or … Explore: VMware NSX-T Advanced Threat Prevention Announcements at VMworld…

VMworld 2020 slide titled Increased Attack Surface

VMware NSX in the Modern Data Center: From NSX-T to VCF 9.1

This page began as my notes from VMworld 2020. The central idea survived: a perimeter firewall cannot govern all of the lateral traffic moving among applications, infrastructure services, containers, and data platforms. What changed is the architecture around that idea. NSX-T became VMware NSX, networking moved deeper into the VMware Cloud Foundation operating model, and … Explore: VMware NSX in the Modern Data Center: From…

NSX-T System Upgrade page before the 2.5 upgrade workflow begins.

Upgrading VMware NSX-T 2.4.0 to NSX-T 2.5.0 Step by Step Guide

Recently, VMware released NSX-T 2.5 with a lot of new features and improvements I know everyone is wanting.  I know being one of those people I had to upgrade NSX-T from 2.4.0 in my production environment to 2.5.  This is my walk through of upgrading from 2.4.0 to 2.5.0.  I must admit the upgrade assistant … Explore: Upgrading VMware NSX-T 2.4.0 to NSX-T 2.5.0 Step…

Humorous command-line graphic introducing a VMware NSX-T CLI cheat sheet.

Useful Cheat Sheet CLI for VMware NSX-T

I just wanted to take a moment to write a quick article on some useful commands I use for troubleshooting NSX-T 2.4 By no means is this everything and I will update this article routinly. How to find VTEP (Tunnel End Points)From NSX Manager#get logical-switch vtep From ESXi Host to display TEP end point#esxcfg-vmnic -land#esxcli … Explore: Useful Cheat Sheet CLI for VMware NSX-T

NSX-T Transport Zones inventory showing Edge, Overlay, and uplink VLAN zones required for edge deployment.

How to Install VMware NSX-T (Part 5) – setting up Edge VMs and Edge Cluster on N-VDS

As the journey continues we have now come to the portion where we setup the Edge.  There are a couple different ways you can setup your edge, IE leverage Port Groups from a Distributed Switch or leverage NSX-T N-VDS switches.  Do you deploy two Transport Zones or four? I have elected to deploy the edge … Explore: How to Install VMware NSX-T (Part 5) –…

NSX-T Fabric Profiles page with Uplink Profiles selected before creating a host uplink profile.

How to Install NSX-T (Part 4) – Transport Zone Creation, Uplink Profile, TEP IP Pool, & Configure NSX-T for ESXi

Part 4 of the journey takes us through deploying NSX-T on our ESXi Hosts.  This will be a multi-step process and has some complexity but this piece can be a lot of fun. The work we do here will have a ripple effect as we move forward so it is important to know your use … Explore: How to Install NSX-T (Part 4) – Transport…

NSX-T system overview showing a stable management cluster and the Add Nodes control.

How to Install NSX-T (Part 3) Deploying 2nd/3rd NSX Manager.

At this point in my journey, we have our first NSX Manager deployed and verified. Along with the compute manager created. Next comes deploying the 2nd & 3rd Managers and form them into a cluster.  Luckily, I like how NSX-T keeps getting easier so we’ll deploy this cluster from the UI instead of manually deploying an … Explore: How to Install NSX-T (Part 3) Deploying 2nd/3rd…

NSX-T Fabric Compute Managers page before adding a vCenter Server.

How to Install NSX-T (Part 2) – Deploy Compute Manger

As this journey continues the next step in deploying NSX-T 2.4 after deploying your first Manager is to add a new compute manager.  This article will be a quick one because it is a quick and easy process.  Woohoo! Other Articles in my serieshttps://digitalthoughtdisruption.com/2019/07/01/how-to-install-nsx-t-2-4-part-1-1st-nsx-manager/https://digitalthoughtdisruption.com/2019/07/03/how-to-install-nsx-t-2-4-part-2-deploy-compute-manger/https://digitalthoughtdisruption.com/2019/07/08/how-to-install-nsx-t-2-4-part-3-deploying-2nd-3rd-nsx-manager/https://digitalthoughtdisruption.com/2019/07/11/how-to-install-nsx-t-2-4-part-4-transport-zone-creation-uplink-profile-tep-ip-pool-configure-nsx-t-for-esxi/https://digitalthoughtdisruption.com/2019/07/15/how-to-install-nsx-t-2-4-part-5-the-war-that-was-setting-up-edge-vms-and-edge-cluster-on-n-vds/ Heads up:This is where having all the required ports open are … Explore: How to Install NSX-T (Part 2) – Deploy…

NSX-T Networking navigation with Segments selected before creating a logical segment.

NSX-T – Deploy Segment (Logical Switch)

A single logical switch is mapped to a unique Geneve segment that is distributed across the ESXi hosts in a transport zone. The logical switch supports line-rate switching in the ESXi host without the constraints of VLAN sprawl or spanning tree issues. A segment is a representation of layer-2 connectivity across transport nodes (ESXi Hosts), … Explore: NSX-T – Deploy Segment (Logical Switch)