To get past the first major test (Explorer), you simply need to access a page over IPv6, and pass a quiz. To do this, spin up a desktop VM on your dual-stack vn-segment and navigate to https://ipv6.he.net/certification/ To get past your next phase (Enthusiast) you do have to spend some money - purchase a domain (the …

Read More

The next step is to get IPv6 up and running with NSX-T! This should be pretty short - as with existing deployments of NSX-T, most of the difficult work is already completed. Here are a few preparatory steps to be performed before getting started: Ensure MP-BGP is on and that the data center fabric is running the …

Read More

As is probably obvious from the sidebar, I'm pretty enthusiastic about IPv6 - for quite a few reasons, not least of which is implementing a new Layer 3 protocol after guys like Vint Cerf already did most of the cool stuff. However, I didn't want to simply complete this task - most people complete all of these tasks …

Read More

First off, let's cover what's been built so far: To set up an anycast vIP in NSX-T after standing up your base infrastructure (already depicted and configured), all you have to do is stand up a load balanced vIP at multiple sites. NSX-T takes care of the rest. Here's how: Create a new load balancing pool. Create a new …

Read More

Before getting started, let's cover what different IP message types exist in a brief summary, coupled with a "day in the life of a datagram" as it were. Unicast: One source, one well-defined destination. Most network traffic falls into this category. Mayfly perspective: Source device originates packet, and …

Read More

Now that the primary infrastructure components for NSX-T are in place, it is now possible to build-out the actual functions that NSX-T is designed to provide. A friendly suggestion, make sure your Fabric is healthy before doing this: NSX-T differs from NSX-V quite a bit here. Irregular topologies between edge routers …

Read More

Since NSX-T 2.5 just came out, it's about time to do a full rebuild and getting started guide. NSX-T differs greatly from NSX-V in that the initial setup is quite a bit more complicated and doesn't have many guardrails or direct paths to initial set-up. We'll be skipping the appliance deployment, because if you have …

Read More

I cheated/pivoted a little bit - decided to simulate a bit more closely what I'd be using at work. I bootstrapped a CentOS VM and followed the instructions in: https://github.com/PaloAltoNetworks/minemeld-ansible 1sudo yum install -y wget git gcc python-devel libffi-devel openssl-devel zlib-dev sqlite-devel bzip2-devel …

Read More

Palo Alto Networks has provided a tool for public use - Minemeld - that will collate threat intelligence feeds and other indicators for a more dynamic security policy enforcement strategy with their firewalls: https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/minemeld I have a slightly …

Read More

I've removed NSX-V 6.4.4, and am about to start some more datacenter/route-switch projects - this is the lab network diagram for reference: And, the meatspace version - the cheetos are there in case of an emergency:

Read More