NSX 4 is now available, and it was a surprisingly sparse release in terms of new capabilities. NSX 4.0 appears to be a "clean house" initiative, so while it's missing "whizz-bang" new data plane features it does address a variety of issues I am happy to say are now closed: Numerous documented API …

Read More

The principles that define the information security field are decades older than computing, and we'd do well to learn from the lessons that precede our industry. We as security professionals naively construct an "our stuff versus them" model when attempting to defend our networks in our early career. As we …

Read More

VMware introduced the ability to double-encapsulate layer 2 frames in via the "Access VLAN" option for VRF instances in NSX Data Center: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-4CB5796A-1CED-4F0E-ADE0-72BF7B3F762C.html Q-in-VNI provides a capable infrastructure engineer the …

Read More

VMware's vDS is a bit of a misnomer In a previous post, I covered the concept of transitivity in networking - but in Layer 2 (Ethernet) land, transitivity is critically important to understanding how VMware's Virtual Distributed Switch (vDS) works. The statement "VMware's Virtual Distributed Switch is not a …

Read More

Cisco Modeling Labs (CML) has turned out to be a great tool for deploying virtual network resources, but the "only Cisco VNFs" limitation is a bit much. Let's use this opportunity to really take advantage of the capabilities that NSX-T has for virtual network labs! Overview For the purpose of lab …

Read More

Spanning Tree is the all-important loop prevention method for Layer 2 topologies and source of ire to network engineers worldwide. Usually IT engineers list the Dunning-Kruger Effect in a negative context, depicting an oblivious junior or an unaware manager, but I like to focus on the opposite end of the curve with …

Read More

Ever wonder what it would be like to have a platform dedicated to Continuous Improvement / Testing / Labbing? Cisco's put a lot of thought into good ways to do that, and Cisco Modeling Labs(CML) is the latest iteration of their solutions to provide this as a service to enterprises and casual users alike. CML is the …

Read More

There are numerous advantages to deploying an internal root CA to an enterprise: Autonomy: Enterprises can control how their certificates are issued, structured, and revoked independently of a third party. Slow or fast replacement cycles are permissible if you control the infrastructure, letting you customize the CA to …

Read More

VMware's NSX Datacenter product is designed for a bit more than single enterprise virtual networking and security. When reviewing platform maximums (NSX-T 3.2 ConfigMax), the listed maximum number of Tier-1 routers is 4,000 logical routers. Achieving that number takes a degree of intentional design, however. When …

Read More

What is the point of all this software-defined infrastructure if you don't use it? In prior examples, it's a fairly straightforward path to SDN when deploying NSX Data Center, allowing a VI admin or network engineer to deploy virtual network resources via a GUI. This isn't the end of an effort, but the start of a …

Read More