WEBVTT

1
00:00.000 --> 00:03.360
So let's go through the process of configuring the green VRF

2
00:03.360 --> 00:06.600
Tier 0 gateway, the green T1 gateway, this segment,

3
00:06.600 --> 00:10.770
and some VMs, and then we'll test to verify we have access from those VMs out

4
00:10.770 --> 00:11.400
to the Internet.

5
00:11.400 --> 00:15.780
So here in the NSX Manager, let's go to Networking and click on Network Top

6
00:15.780 --> 00:16.920
ology and take a peek.

7
00:16.920 --> 00:21.980
So currently we have this beautiful infrastructure for blue that's currently in

8
00:21.980 --> 00:22.280
place,

9
00:22.280 --> 00:27.210
and we want to basically replicate that for the green VRF, which we'll add

10
00:27.210 --> 00:27.840
right now.

11
00:27.840 --> 00:32.040
So as part of that, let's go ahead and create the segment first for VLAN 24
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

11
00:27.840 --> 00:32.040
So as part of that, let's go ahead and create the segment first for VLAN 24

12
00:32.040 --> 00:34.640
that we're going to be connecting the green VRF 2.

13
00:34.640 --> 00:38.520
So on the left, we'll click on segments, we'll click on Add Segment,

14
00:38.520 --> 00:43.820
we'll call this EXT for VLAN 24, and that'll be the VLAN we're using for this

15
00:43.820 --> 00:45.240
external VRFs connection

16
00:45.240 --> 00:46.880
up to the external gateway.

17
00:46.880 --> 00:51.150
And that's going to be a VLAN back segments, we'll choose our VLAN back segment

18
00:51.150 --> 00:52.240
transport zone.

19
00:52.240 --> 00:58.280
And then for the VLAN, we're going to put right here VLAN 24 and click on Save.

20
00:58.280 --> 01:00.920
And then we'll click on Nose, so now we have that external segment.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

20
00:58.280 --> 01:00.920
And then we'll click on Nose, so now we have that external segment.

21
01:00.920 --> 01:04.640
So in our topology, that little segment is right here.

22
01:04.640 --> 01:07.040
Let me zoom in, it is right here.

23
01:07.040 --> 01:09.840
So now that we have that segment, let's create a new green VRF.

24
01:09.840 --> 01:13.240
So to do that, with the Networking tab still selected, we're going to click on

25
01:13.240 --> 01:14.840
Tier Zero Gateways on the left

26
01:14.840 --> 01:18.890
and click on Add Gateway, and from the dropdown, we're going to create another

27
01:18.890 --> 01:19.240
VRF.

28
01:19.240 --> 01:22.160
So we'll click here on VRF, we'll call this green VRF,

29
01:22.160 --> 01:25.960
and then we'll associate it with our parent Tier Zero Gateway from the dropdown

30
01:25.960 --> 01:25.960
.

31
01:25.960 --> 01:29.670
It's the only Tier Zero Gateway that we have, that's not a VRF, so we'll select

32
01:29.670 --> 01:29.960
it.

33
01:29.960 --> 01:32.160
Then we'll scroll down and click on Save.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

33
01:29.960 --> 01:32.160
Then we'll scroll down and click on Save.

34
01:32.160 --> 01:34.980
And then let's continue editing it because we also want to implement network

35
01:34.980 --> 01:35.960
address translation

36
01:35.960 --> 01:39.360
and also a default route on this Tier Zero green gateway.

37
01:39.360 --> 01:41.560
So let's go ahead and click on Yes.

38
01:41.560 --> 01:44.620
So now that we're still configuring a Tier Zero Gateway, let's configure its

39
01:44.620 --> 01:45.160
interfaces.

40
01:45.160 --> 01:49.960
So we'll expand interfaces, click on Set, and let's click on Add Interface,

41
01:49.960 --> 01:54.650
and let's call this Edge 1 on VLAN 24, and that's going to be connecting to our

42
01:54.650 --> 01:55.160
segment,

43
01:55.160 --> 01:57.160
External Segment VLAN 24.

44
01:57.160 --> 02:00.420
And for the Edge node, we're going to go ahead and use Edge 1, and its IP
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

44
01:57.160 --> 02:00.420
And for the Edge node, we're going to go ahead and use Edge 1, and its IP

45
02:00.420 --> 02:03.560
address there is going to be 24.1.2.61

46
02:03.560 --> 02:07.340
with a 24-bit mask, and that all looks good, so we'll scroll down and click on

47
02:07.340 --> 02:07.760
Save.

48
02:07.760 --> 02:11.360
Then we'll click on Add Interface, and we'll add another interface for Edge 2.

49
02:11.360 --> 02:13.760
So there'll be Edge 2, VLAN 24.

50
02:13.760 --> 02:17.070
We're going to connect that to our external segment that we just made, External

51
02:17.070 --> 02:17.960
VLAN 24,

52
02:17.960 --> 02:20.570
and the IP address we're going to use on that edge as we connected that

53
02:20.570 --> 02:21.360
external segment

54
02:21.360 --> 02:26.930
is going to be 24.1.2.62 with a 24-bit mask, just like that, and we'll scroll

55
02:26.930 --> 02:28.360
down and click on Save.

56
02:28.360 --> 02:31.520
And what did I forget? Oh, I forgot to specify which Edge node, so this is
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

56
02:28.360 --> 02:31.520
And what did I forget? Oh, I forgot to specify which Edge node, so this is

57
02:31.520 --> 02:32.160
going to be Edge 2,

58
02:32.160 --> 02:35.560
so we'll choose Edge 2, scroll down and click on Save.

59
02:35.560 --> 02:37.560
All right, that looks good.

60
02:37.560 --> 02:42.790
So we'll click on Close, and also while we're here, let's also add a default

61
02:42.790 --> 02:42.960
route.

62
02:42.960 --> 02:46.360
So we'll go to Routing, and for Static Routes, we'll click here on Set,

63
02:46.360 --> 02:49.920
and we'll click on Add Static Route, and we'll say Default, and then we'll go

64
02:49.920 --> 02:51.360
ahead and put in the default route of 0,

65
02:51.360 --> 03:00.550
0, 0, 0, slash 0, and then set the next top to be 24.1.2.1, and click on Add,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

65
02:51.360 --> 03:00.550
0, 0, 0, slash 0, and then set the next top to be 24.1.2.1, and click on Add,

66
03:00.550 --> 03:02.760
and Apply, and Save,

67
03:02.760 --> 03:05.960
and Close, and let me go ahead and close editing there.

68
03:05.960 --> 03:10.960
And let's go over to Edge 1 and just verify the details for that new VRF.

69
03:10.960 --> 03:15.080
So here as we log into Edge 1, we're going to start off with a Get Gateway's

70
03:15.080 --> 03:15.760
command.

71
03:15.760 --> 03:20.380
So we'll type in Get Gateway's press Enter, and there is our Tier 0 green VRF

72
03:20.380 --> 03:21.160
right there.

73
03:21.160 --> 03:27.360
And it is VRF #16, so we type in VRF #16, and then here in VRF #16, if you will

74
03:27.360 --> 03:28.960
get route and press Enter,

75
03:28.960 --> 03:32.760
here we have our default route with the next top of 24.1.2.1.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

75
03:28.960 --> 03:32.760
here we have our default route with the next top of 24.1.2.1.

76
03:32.760 --> 03:36.730
Also, while we're here, let's go ahead and ping 24.1.2.1 just to verify that we

77
03:36.730 --> 03:37.960
are on the right subnet,

78
03:37.960 --> 03:39.360
and that looks good.

79
03:39.360 --> 03:42.160
Always a good sign if you can ping the next top of your default route.

80
03:42.160 --> 03:46.450
So next, let's create our green Tier 1 Gateway A, and we'll associate that with

81
03:46.450 --> 03:48.560
our Tier 0 green VRF.

82
03:48.560 --> 03:51.950
So to do that here on the Networking tab, under Connectivity, we're going to go

83
03:51.950 --> 03:54.160
down to Tier 1 Gateways,

84
03:54.160 --> 03:57.160
and we'll click on Add to add a Tier 1 Gateway.

85
03:57.160 --> 04:02.960
And let's call this green T1 short for Tier 1, and let's call it Gateway-A.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

85
03:57.160 --> 04:02.960
And let's call this green T1 short for Tier 1, and let's call it Gateway-A.

86
04:02.960 --> 04:05.760
And then we'll associate that with our Edge Cluster.

87
04:05.760 --> 04:09.360
So for the linked Tier 0 Gateway, we're going to choose our green VRF.

88
04:09.360 --> 04:13.160
And also while we're here for this Gateway, let's also do route advertisement.

89
04:13.160 --> 04:15.960
And that way, any networks that we connect to this Tier 1 Gateway,

90
04:15.960 --> 04:19.960
those networks can be advertised up to the parent, which is our green VRF.

91
04:19.960 --> 04:23.160
So we'll enable that as well, and let's click on Save.

92
04:23.160 --> 04:24.560
And let's click on Note.

93
04:24.560 --> 04:28.160
And let's also verify our topology by clicking here on Network Topology.

94
04:28.160 --> 04:31.560
And here it is over here on the left, let's zoom in a little bit.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

94
04:28.160 --> 04:31.560
And here it is over here on the left, let's zoom in a little bit.

95
04:31.560 --> 04:35.560
So there's our green VRF, and then we have our Enter Router link down to our

96
04:35.560 --> 04:37.760
green Tier 1 Gateway A right there.

97
04:37.760 --> 04:40.560
Also, what I noticed is it doesn't show any DHCP services yet,

98
04:40.560 --> 04:43.560
so let's go ahead and enable DHCP services here as well.

99
04:43.560 --> 04:45.960
So we'll go back to our Tier 1 Gateways.

100
04:45.960 --> 04:50.080
We'll edit our green Tier 1 Gateway A by clicking on the three dots,

101
04:50.080 --> 04:54.430
clicking on Edit, then over on the right, we'll click here on Set next to DHCP

102
04:54.430 --> 04:55.080
Config.

103
04:55.080 --> 04:57.960
And we'll specify that we want to be a DHCP server,

104
04:57.960 --> 05:01.480
and more specifically, we want to use this Profile, and then click on Apply.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

104
04:57.960 --> 05:01.480
and more specifically, we want to use this Profile, and then click on Apply.

105
05:01.480 --> 05:05.130
And that way, when we create the segment, we can go ahead and use Gateway-based

106
05:05.130 --> 05:06.160
DHCP services

107
05:06.160 --> 05:07.960
to provide our IP addressing.

108
05:07.960 --> 05:11.000
So we'll scroll down, click on Save, and that looks good, so we go ahead and

109
05:11.000 --> 05:12.560
click on Close Editing.

110
05:12.560 --> 05:14.960
So now we are a green Tier 1 Gateway A.

111
05:14.960 --> 05:17.160
And the next thing we want to do is connect it to a segment.

112
05:17.160 --> 05:20.360
So our next logical step then would be to create our segment.

113
05:20.360 --> 05:25.060
We'll call it Green Segment 10, and then for the Logical Layer 3 IP address for

114
05:25.060 --> 05:26.760
the default gateway for that segment,

115
05:26.760 --> 05:30.160
let's use 10.10.0.1 with a 24-bit mask.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

115
05:26.760 --> 05:30.160
let's use 10.10.0.1 with a 24-bit mask.

116
05:30.160 --> 05:34.020
And for the Transport Zone, it's going to be an overlay transport for Green Se

117
05:34.020 --> 05:34.560
gment 10.

118
05:34.560 --> 05:38.690
So let's go ahead and choose an Overlay Transport Zone that is being supported

119
05:38.690 --> 05:40.160
by all of our Transport Nodes.

120
05:40.160 --> 05:42.760
So we'll choose the Hour A, B, Overlay.

121
05:42.760 --> 05:47.200
And let's also make sure we connect this Green Segment 10 to the right Tier 1

122
05:47.200 --> 05:47.960
Gateway.

123
05:47.960 --> 05:51.160
So we want to connect it here to the Green T1 Gateway A.

124
05:51.160 --> 05:52.160
We'll select that.

125
05:52.160 --> 05:54.360
And then also let's set up DHCP services as well.

126
05:54.360 --> 05:56.360
So we'll click here on Set DHCP.

127
05:56.360 --> 05:58.560
We want to go ahead and use Gateway DHCP server.

128
05:58.560 --> 06:04.360
And then we'll put in the range here of 10.10.0.151 through 10.0.1.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

128
05:58.560 --> 06:04.360
And then we'll put in the range here of 10.10.0.151 through 10.0.1.

129
06:04.360 --> 06:09.360
And then let's set up a fairly short lease of like 500 seconds.

130
06:09.360 --> 06:14.360
And then for DNS services, let's use 8, 8, 8, 8, and that looks good.

131
06:14.360 --> 06:15.360
And then we'll click on Apply.

132
06:15.360 --> 06:17.360
And then we'll scroll down and we'll click on Save.

133
06:17.360 --> 06:22.360
So now that we have this Tier 1 Gateway and it's connected to this segment,

134
06:22.360 --> 06:26.360
let's go ahead and take a look at our topology by clicking on Network Topology.

135
06:26.360 --> 06:30.360
So here is our blue VRF and it's T1 and it's couple segments.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

135
06:26.360 --> 06:30.360
So here is our blue VRF and it's T1 and it's couple segments.

136
06:30.360 --> 06:33.360
And over here on one of its segments, it's using the 10, 10 address space.

137
06:33.360 --> 06:39.360
But here on the green VRF, which is right here, connected to our Tier 1 Gateway

138
06:39.360 --> 06:39.360
,

139
06:39.360 --> 06:41.360
still as part of that green VRF.

140
06:41.360 --> 06:43.360
And now we have the green segment 10.

141
06:43.360 --> 06:47.360
This network segment 10.10.0 with the 24-bit mask is different.

142
06:47.360 --> 06:50.770
And in a different VRF, then the one over here, which is under our blue Tier 1

143
06:50.770 --> 06:51.360
Gateway.

144
06:51.360 --> 06:56.050
And that's the benefit of having our VRFs is that we have separate containers,

145
06:56.050 --> 06:56.360
if you will,

146
06:56.360 --> 07:00.360
for groups of routes, one for each customer or one for each tenant.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

146
06:56.360 --> 07:00.360
for groups of routes, one for each customer or one for each tenant.

147
07:00.360 --> 07:05.360
So now that we have this all set up right here, let's go ahead and add a VM

148
07:05.360 --> 07:08.360
and put it right here on the green segment 10.

149
07:08.360 --> 07:10.360
So to do that, let's head over to the vSphere client.

150
07:10.360 --> 07:13.360
And over here on the vSphere client, I currently have Mint 10 and Mint 20.

151
07:13.360 --> 07:18.360
They are both connected to the segments as part of the blue VRF.

152
07:18.360 --> 07:20.360
So let me go ahead and choose, let's choose Cali 10.

153
07:20.360 --> 07:22.360
That's another Linux box.

154
07:22.360 --> 07:24.360
Let's go ahead and first of all, make sure it's on the right segment.

155
07:24.360 --> 07:28.890
So we'll right click, click on Edit Settings and for Cali 10, let's go ahead

156
07:28.890 --> 07:29.360
and put that

157
07:29.360 --> 07:33.360
specifically over on the green segment 10 right here.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

157
07:29.360 --> 07:33.360
specifically over on the green segment 10 right here.

158
07:33.360 --> 07:36.360
So it just shows up looking like a port group here, which is like the network.

159
07:36.360 --> 07:39.360
And that's the overlay segment called green segment 10.

160
07:39.360 --> 07:41.360
We'll click on OK and we'll click on OK.

161
07:41.360 --> 07:44.360
And then we'll go ahead and power that up.

162
07:44.360 --> 07:48.360
And as it powers up, we'll also launch a remote console so we can take a look

163
07:48.360 --> 07:48.360
at it.

164
07:48.360 --> 07:50.360
So we'll click here on Launch Remote Console.

165
07:50.360 --> 07:54.360
So here is that virtual machine right here that is coming up.

166
07:54.360 --> 07:56.360
And the first thing I want to do is just verify its IP address.

167
07:56.360 --> 07:59.360
And let's also verify it can get out to the internet.

168
07:59.360 --> 08:00.360
All right.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

168
07:59.360 --> 08:00.360
All right.

169
08:00.360 --> 08:02.360
So here is the desktop.

170
08:02.360 --> 08:05.360
Let's open up a command prompt and let's type in if config.

171
08:05.360 --> 08:09.360
Or we could also an IP space address and that would show us as well.

172
08:09.360 --> 08:15.360
So this is 10 10 0 1 84 and if you do a ping out to 8 8 8 8.

173
08:15.360 --> 08:17.360
Survey says.

174
08:17.360 --> 08:19.360
Survey says that is not flying.

175
08:19.360 --> 08:23.290
Let's do a tracer out and I'll tell it to not bother doing name resolution out

176
08:23.290 --> 08:24.360
to 8 8 8 8 and.

177
08:24.360 --> 08:27.380
And sure enough, we are making it through the first top there, which is the 10

178
08:27.380 --> 08:28.360
10 0 1.

179
08:28.360 --> 08:32.360
And that's the IP address on our green tier one gateway A.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

179
08:28.360 --> 08:32.360
And that's the IP address on our green tier one gateway A.

180
08:32.360 --> 08:35.360
So let's take a look at the topology and determine what could be wrong.

181
08:35.360 --> 08:38.360
So we're sitting on a VM over here on this segment segment 10.

182
08:38.360 --> 08:42.360
I don't know if we're on post A or on host B, but that part doesn't matter.

183
08:42.360 --> 08:43.360
We're over on this segment.

184
08:43.360 --> 08:47.360
So we'd be using our default gateway and that should be forming up here.

185
08:47.360 --> 08:49.360
And then this should be forwarding it up here.

186
08:49.360 --> 08:51.360
Oh, I just realized what the problem was.

187
08:51.360 --> 08:56.360
We we did not on this external gateway, which is at 24 dot 1 dot 2 dot 1.

188
08:56.360 --> 09:00.690
We did not have dynamic routing going on between here and here with BGP to
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

188
08:56.360 --> 09:00.690
We did not have dynamic routing going on between here and here with BGP to

189
09:00.690 --> 09:04.360
advertise, for example, reachability to this 10 10 network.

190
09:04.360 --> 09:06.360
So for clients over here on this segment, they're trying to get out.

191
09:06.360 --> 09:11.130
They're going to use the default gateway of 10 10 0 1 and it's going to go to

192
09:11.130 --> 09:13.360
the tier 0 V or F green in this case.

193
09:13.360 --> 09:14.360
And then out.

194
09:14.360 --> 09:17.360
So a couple of things that it could be number one on this tier one gateway.

195
09:17.360 --> 09:21.540
If we didn't say advertise the routes for directly connected networks, that

196
09:21.540 --> 09:25.550
would cause this tier 0 gateway to not have knowledge about how to reach the 10

197
09:25.550 --> 09:26.360
10 network.

198
09:26.360 --> 09:30.050
Or if we did that and the packets actually getting up here, this router does
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

198
09:26.360 --> 09:30.050
Or if we did that and the packets actually getting up here, this router does

199
09:30.050 --> 09:32.360
not know how to get back to the 10 10 network.

200
09:32.360 --> 09:36.080
And that's because we're not yet setting up routing between this VRF and an

201
09:36.080 --> 09:37.360
external BGP speaker.

202
09:37.360 --> 09:40.480
So there's no way by default that this external router would know how to

203
09:40.480 --> 09:41.360
forward back.

204
09:41.360 --> 09:45.730
So here's what I propose we do. Let's verify that on this gateway, the tier one

205
09:45.730 --> 09:50.360
gateway that we are advertising our routes up to the green VRF tier 0 gateway.

206
09:50.360 --> 09:54.580
And then secondly, let's implement that right here and list that anything

207
09:54.580 --> 09:55.360
coming up.

208
09:55.360 --> 10:00.360
If the source address is 10, let's map it to 24 dot 1 dot 2 dot 60.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

208
09:55.360 --> 10:00.360
If the source address is 10, let's map it to 24 dot 1 dot 2 dot 60.

209
10:00.360 --> 10:02.360
That is currently available here in my topology.

210
10:02.360 --> 10:06.120
And that way as that traffic goes up to this router, it'll look like it's

211
10:06.120 --> 10:07.360
coming from 24 1 to 60.

212
10:07.360 --> 10:10.590
And because this router is directly connected to that network segment, it can

213
10:10.590 --> 10:11.360
respond back.

214
10:11.360 --> 10:15.490
So let's check out both of those items starting here at the tier 1 gateway A to

215
10:15.490 --> 10:17.360
make sure that we are advertising our routes.

216
10:17.360 --> 10:21.630
So if we go to our tier 1 gateways and we go to our green tier 1 gateway A and

217
10:21.630 --> 10:25.450
click on the three dots and click on edit and scroll down to route

218
10:25.450 --> 10:26.360
advertisement.

219
10:26.360 --> 10:29.790
Oh, I did advertise. All right. So we are advertising our routes up and we can

220
10:29.790 --> 10:35.430
verify that by going to the VRF for green and just verify that the 10 10
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

220
10:29.790 --> 10:35.430
verify that by going to the VRF for green and just verify that the 10 10

221
10:35.430 --> 10:36.360
network shows up.

222
10:36.360 --> 10:40.660
So let's head over for a moment to edge one. We'll type in gate gateways and

223
10:40.660 --> 10:41.360
press enter.

224
10:41.360 --> 10:47.000
So for our green VRF, it is VRF 16. Let's go ahead and change into that VRF by

225
10:47.000 --> 10:48.360
typing in VRF 16.

226
10:48.360 --> 10:51.360
And let's do a get route and press enter. And sure enough, it knows about it.

227
10:51.360 --> 10:54.360
And that's because at the tier 1, we were advertising that route.

228
10:54.360 --> 10:57.590
So the next problem we're going to solve is this router being able to route

229
10:57.590 --> 10:59.360
back to the 10 10 network.

230
10:59.360 --> 11:03.360
And instead of having to do that, let's just do net right here at the green VRF
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

230
10:59.360 --> 11:03.360
And instead of having to do that, let's just do net right here at the green VRF

231
11:03.360 --> 11:05.360
to make all the traffic that's coming from the 10 address space.

232
11:05.360 --> 11:09.960
Down here to make it look like it's coming from the netted address of 24 dot 1

233
11:09.960 --> 11:11.360
dot 2 dot 60.

234
11:11.360 --> 11:15.590
So back at the NSX manager with the networking tab selected on the left, we're

235
11:15.590 --> 11:19.360
going to scroll down under network services and click right here on net.

236
11:19.360 --> 11:22.360
And it says you were in the middle of changing something and I say no.

237
11:22.360 --> 11:25.260
And let's just take a look. I click here and close editing to make sure I'm not

238
11:25.260 --> 11:27.360
leaving anything open. Fantastic.

239
11:27.360 --> 11:30.360
So now let's go over on the left hand side and go down to net.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

239
11:27.360 --> 11:30.360
So now let's go over on the left hand side and go down to net.

240
11:30.360 --> 11:34.910
And we want to do this on our green VRF. So on the gateway, we're going to use

241
11:34.910 --> 11:40.360
the drop down and choose the green VRF right there and then add net rule.

242
11:40.360 --> 11:43.770
So I'll minimize the left hand side there and I'll call this G net for this

243
11:43.770 --> 11:45.360
rule as part of the green VRF.

244
11:45.360 --> 11:49.570
We want to use source net and a traffic that is coming in that begins with 10

245
11:49.570 --> 11:50.360
anything.

246
11:50.360 --> 11:55.730
We want to go ahead and translate that to 24 dot 1 dot 2 dot 60 based on our

247
11:55.730 --> 11:56.360
plan.

248
11:56.360 --> 11:59.570
And then I'm going to also click here on set and apply that to these two

249
11:59.570 --> 12:02.360
interfaces, although we could leave that off.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

249
11:59.570 --> 12:02.360
interfaces, although we could leave that off.

250
12:02.360 --> 12:06.000
It was still function on those two. But if we had multiple interfaces and only

251
12:06.000 --> 12:09.020
want to do net on one or the other, this is how you could go ahead and choose

252
12:09.020 --> 12:10.360
just one of the interfaces.

253
12:10.360 --> 12:14.160
So I'll go ahead and choose both of them, click on apply and scroll down and

254
12:14.160 --> 12:16.360
click on save and make sure that flies.

255
12:16.360 --> 12:20.360
That's fantastic. And let's go back over to the network topology.

256
12:20.360 --> 12:24.440
So here is our green T1 gateway A above that we have our green VRF with two

257
12:24.440 --> 12:25.360
services.

258
12:25.360 --> 12:28.360
And one of those is the net rule that we just implemented.

259
12:28.360 --> 12:31.540
So let's verify the client that is sitting right here on segment 10. Let me
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

259
12:28.360 --> 12:31.540
So let's verify the client that is sitting right here on segment 10. Let me

260
12:31.540 --> 12:32.360
expand that real quick.

261
12:32.360 --> 12:36.030
That is the Kali 10 machine. Let's make sure that can get out to the internet

262
12:36.030 --> 12:36.360
now.

263
12:36.360 --> 12:41.360
So let's scootch him over here. So here is the Kali 10 virtual machine.

264
12:41.360 --> 12:44.360
I also want to make darn sure that this is really the machine I'm looking at.

265
12:44.360 --> 12:48.280
So let's just do a real quick I have config press center and for its ethernet

266
12:48.280 --> 12:53.360
zero interface, the Mac address the layer two dress ends in F 754.

267
12:53.360 --> 12:56.710
So I'm just going to verify that that literally is the last four characters of

268
12:56.710 --> 13:00.370
the Mac address by clicking on that virtual machine here in the topology view,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

268
12:56.710 --> 13:00.370
the Mac address by clicking on that virtual machine here in the topology view,

269
13:00.370 --> 13:05.750
clicking right here on virtual interfaces and verifying the IP address 10 10 0

270
13:05.750 --> 13:09.360
184 and the last four characters here of F 754.

271
13:09.360 --> 13:11.360
All right, that looks great. So we'll close that.

272
13:11.360 --> 13:14.950
So I make sure I'm on the right VM and then let's go ahead and hit the up arrow

273
13:14.950 --> 13:17.360
key a couple times and do a trace route again.

274
13:17.360 --> 13:20.360
And sure enough, we are making it all the way out to the internet.

275
13:20.360 --> 13:25.480
So if we did a ping to www.vmware.com and press enter name resolutions working

276
13:25.480 --> 13:28.360
internet connectivity working. It's all great.

277
13:28.360 --> 13:32.750
So we'll do a control C and as a result, we just implemented and verified the
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

277
13:28.360 --> 13:32.750
So we'll do a control C and as a result, we just implemented and verified the

278
13:32.750 --> 13:36.360
full implementation of a new VRF in this case, VRF green.

279
13:36.360 --> 13:40.360
And we tested it from a VM here going out to the internet.

280
13:40.360 --> 13:44.560
So thanks for joining me in this set of videos and in the skill regarding using

281
13:44.560 --> 13:46.360
the VRF light in the world of NSX.

282
13:46.360 --> 13:50.360
And I'll see you my friend in another skill very, very soon.

283
13:50.360 --> 13:54.770
Until then, I hope this has been informative and I'd like to thank you for

284
13:54.770 --> 13:55.360
viewing.