So, list together,
now that we had a moment to think about it,
let's list out a few of the benefits of VMware's software
to find networking with their product called NSX.
One of the benefits is the ability
to have a common layer two segment.
And if we told that to the customer
and they said, "Well, we have layer two segments already.
We have, you know, distribute a switch,
we have four or five VMs, all the same port group,
and they're in the same segment."
But that's if, on our transport
or underlay networks, we have those two ESXI hosts
that are hosting the VMs, able to reach WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
that are hosting the VMs, able to reach
that same layer two broadcast domains.
So with NSX, even if we have two ESXI hosts,
we have one over here at this end of the data center
in a rack, we have one over here in a different rack,
and we have lots of routing between them.
So here's a router, there's a router.
We can still have a common layer two segment,
an overlay segment
that those VMs can go ahead and connect to.
And then behind the scenes, these two ESXI hosts can tunnel
that traffic back and forth.
So we have a tunnel endpoint over on the host on the left,
and a tunnel endpoint over on the host on the right. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and a tunnel endpoint over on the host on the right.
So this is host A and this is host B.
And even though they're not on the transport network
directly connected to the same layer two broadcast demand
or the same vlan, the little VMs who are connected
to the overlay segment can look and feel
like they're on the same layer two broadcast domain.
So this could be 10.10.0.10 over here,
and we have 10.10.0.11 here on the same IP subnet
because they're also on the same layer two broadcast domain
courtesy of this logical segment provided by NSX. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
courtesy of this logical segment provided by NSX.
So I would say that would be one of the benefits.
We can have logical layer two segments
across the entire data center wherever we need them to be,
without having to have the actual underlay network.
And the ESXI hosts
connected to that underlay network in the same exact VLAN.
So I'll make a little note up here.
Layer two segments across routed networks.
Another big benefit that NSX can bring to the table
is regarding security.
So if we wanted to control what is or isn't allowed between,
for example, this VM, we'll call it VM1 WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
for example, this VM, we'll call it VM1
and this VM, VM2,
even though they're on the same layer two broadcast domain
and the same subnet, with NSX, we can now control very,
very granularly what is allowed between those two VMs.
For example, we wanna allow TCP traffic if it's HTTPS,
or do we wanna allow ICMP,
or if this is an application server,
and this is a database server, we can specifically permit
or deny certain types of traffic flows
between those two VMs.
Another big benefit is routing.
Now, in the case of routing, if we want to implement routing WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now, in the case of routing, if we want to implement routing
within our NSX environment,
we can do exactly that.
We can have a router here and here and here,
and then a network segment here,
another network segment here,
and a third network segment there,
and then route everywhere between them.
And this is all without having to touch
a physical piece of hardware for routing.
So all this routing, especially the east west traffic,
can all be done inside of NSX in software.
And in addition to routing,
we can also provide other IP services, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
we can also provide other IP services,
including things like DHCP services and VPN,
and we can set up gateway firewall services,
and other services like network address translation.
And all of that can be implemented right here
inside of NSX in software.
So the way that would play out is that you and I
would log into the NSX manager.
We would configure what we wanna go ahead
and have implemented in NSX.
And also there's various options
for working with NSX manager.
So here is our NSX manager,
it's very likely we're gonna have a cluster of those WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
it's very likely we're gonna have a cluster of those
so that we have some fault tolerance.
So this would be NSX Manager, one and two, and three,
all configured as an NSX management cluster,
as a virtual IP address.
So you and I can connect to that virtual IP address,
for example, that's reachable on the management network.
So here's the computer that we're sitting at,
we connect to that IP address to the browser,
and then it's gonna associate that
with one of our NSX managers, so we can go ahead
and get the graphical user interface.
So that's one of our options for working with
and managing NSX.
And now, another option also is we could get
a plugin for vCenter. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
a plugin for vCenter.
So we have our vCenter server appliance,
and within vCenter we could have a NSX plugin.
And then that way we could just log into the vSphere client.
And then within vSphere client,
there's additional controls
that we can use to implement control
and set up our NSX world as well.
And for most of the configuration and demonstrations
that we're gonna use together in this course,
we're gonna be managing the NSX GUI interface
directly on the NSX manager
as opposed to using the plugin inside of vCenter.
Although at the end of the day,
the functionality is the same whether we're configuring WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the functionality is the same whether we're configuring
security, or DHCP services, or routing.
And those are all functions
and features that a customer can use
by leveraging NSX in their environment.
So thanks for taking an extra moment in this set of videos
to pause and help reconfirm our understanding.
And when you're ready, my friend,
I'll see you in the very next skill.
Until then, I hope this has been informative
and I'd like to thank you for viewing.