• Understand VMware NSX architecture and components.
• Deploy and configure NSX management and control components.
• Configure logical switching and VXLAN networks.
• Implement logical routing and Layer 2 bridging.
• Configure NSX Edge services, NAT, and VPNs.
• Configure distributed and Edge firewall policies.
• Implement advanced security and introspection services.
• Understand cross-vCenter NSX deployment.

Module 1: Course Introduction

• Course objectives
• Course logistics

Module 2: Introduction to vSphere Networking

• vSphere networking components
• Standard switches
• Distributed switches
• VMkernel ports and services

Module 3: Introduction to NSX

• Data center networking challenges
• Network virtualization
• Software-defined data center
• NSX benefits and use cases

Module 4: NSX Architecture

• NSX architecture
• Operational planes
• Management, control, and data planes
• NSX Manager
• Control plane
• User World agents
• Data plane components

Module 5: NSX Infrastructure Preparation

• NSX installation overview
• Deployment planning
• NSX Manager and vCenter Server registration
• NSX Controller cluster deployment and verification

Module 6: NSX Logical Switch Networks

• Switching challenges
• Transport zones, VTEPs, and VXLAN
• Virtual networking infrastructure
• Segment ID pools and address ranges
• Replication modes
• VXLAN transport parameters
• VNI and VLANs for VXLAN
• Logical switch packet flows

Module 7: NSX Logical Routing

• Routing challenges
• Hairpinning
• East-West and North-South routing
• NSX Distributed Logical Router
• NSX Edge Services Gateway
• Logical router workflows
• Router interfaces and addresses
• Traffic flows
• Deployment models
• Edge Services Gateway topologies

Module 8: Advanced NSX Logical Routing

• Static and dynamic routing
• DLR and Edge routing configuration
• OSPF and BGP
• Ingress and egress traffic
• Equal-Cost Multipathing
• High availability

Module 9: NSX L2 Bridging

• L2 bridging use cases
• Software and hardware bridging
• VXLAN-to-VLAN bridging
• L2 bridging packet flows

Module 10: NSX Edge Services

• NSX Edge services
• Network Address Translation
• Source and destination NAT
• NAT64

Module 11: NSX Edge VPN Services

• VPN use cases
• IPsec VPN
• IPsec security protocols
• L2 VPN
• SSL VPN-Plus
• VPN configuration

Module 12: NSX Security Services

• Software-defined data center security
• Logical firewalls
• Distributed Firewall architecture
• Firewall rule sections
• Layer 2 and Layer 3 rules
• Exclusion lists
• Layer 7 filtering
• Security and service groups
• DHCP and ARP snooping

Module 13: NSX Advanced Security Services

• SpoofGuard
• Identity Firewall
• Active Directory integration
• RDSH
• Application Rule Manager
• Monitoring sessions
• Firewall rule publication

Module 14: NSX Introspection Services

• Guest and Network Introspection
• Service chaining
• Advanced services
• Introspection status
• Alarms, events, and audit messages

Module 15: Cross-vCenter NSX

• Cross-vCenter features and use cases
• Cross-vCenter components
• NSX Manager roles
• Controller cluster placement
• Universal logical networks
• Deployment models
• Design considerations

5 days

• Experienced System Administrators
• Network Administrators
• Security Administrators
• Network Engineers
• VMware Infrastructure Professionals
• Data Center Professionals

• Understanding of enterprise switching and routing.
• Knowledge of TCP/IP services.
• Experience with firewalls and firewall rule sets.
• Completion of VMware Data Center Virtualization Fundamentals is recommended.