So based on our game plan, we are going to go ahead and implement DHCP really
services for the existing DHCP service
that's currently running on my router here at 23.1.2.1.
Now the reason I'm actually choosing to use this device as the DHCP server is
because we already have our routing in place.
We already have OSPF configured between our tier zero gateway and this device.
We did that in a previous set of videos.
And that means that when we have a client, for example, let's go ahead and put
a new client here.
When VM5 does a discover message, this gateway is going to see it. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
When VM5 does a discover message, this gateway is going to see it.
It's going to encapsulate that discover message, forwarded it up to the IP
address specified as the server.
In this case, it's going to be 23.1.2.1.
It'll be sourced from this IP address, 1010.0.1.
At which point this device acting as a DHCP server can grab an IP address that
's available from the appropriate pool for the 1010.0 subnet,
forwarded back down to the relay, who can then forward it down to the client.
So that discover, offer, request, acknowledgement process will go back and
forth between the real DHCP server and the client WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
forth between the real DHCP server and the client
and the relay function on the gateway here in the case of segment 10.
Or in the case of segment 20, it'd be gateway B, providing that middleman
function between the real DHCP server up here and the clients down here.
So that's our game plan for implementing DHCP relay.
Now there are a couple of guidelines that we really should pay attention to
before we just go in and start configuring.
And one is some prereqs supplied by VMware.
So here is the NSX admin guide for NSX 4.1.
If we take a peek over here at DHCP, we'll click there and let's scroll down a WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
If we take a peek over here at DHCP, we'll click there and let's scroll down a
few pages.
So here in the admin guide for NSX, we're getting DHCP.
It mentions the use of DHCP relay, which we're about to do.
Also, setting up DHCP server for a segment and also setting up DHCP server
based on gateways.
And if we scroll down a little bit, I just want to share with you a couple of
prereqs.
So if we scroll down here, here's the one I want to share with you.
And it's dating here that if we do have DHCP server or DHCP relay configured on
a VLAN segment, on a virtual switch, we want to say accept or yes to allow for WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
a VLAN segment, on a virtual switch, we want to say accept or yes to allow for
age transmits for NSX segments for virtual distributed switch 6.6 and later,
which is our case, we want to enable Mac learning.
So both those options are under the security section for our switch.
So to enhance our chances for success, I'm going to enable both those features
right now using the vSphere client.
So here in the vSphere client, here's our distributed switch we're using as
part of NSX.
And we have a couple of overlay segments, seg 10 yellow, seg 10 pink. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we have a couple of overlay segments, seg 10 yellow, seg 10 pink.
And if we go to the summary tab here for each of those, it's also showing us
the VNI number for each of those and the transport zone they're in.
Fantastic.
And then I have a couple of normal port groups.
I've got one called DPG leads to VM NIC 3.
I've got another one right here for VLAN 23.
And what I want to do is I want to set the security for all the native port
groups here on this distributed switch.
And I want to make sure I'm allowing forage transmits.
And I also want to enable Mac learning.
So to do that, the most efficient way possible, I'm going to grab the switch
itself, right click, and then click here on distributed port group. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
itself, right click, and then click here on distributed port group.
And then from the drop down, I'll click on manage, distributed port groups.
That way, if you have 20 or 30 port groups, you can do them all at one fell
swoop.
So I'm going to go ahead and say, I want to modify just the security sections
for each of those port groups.
Click on next, give me a list of all the applicable port groups.
These are the two here.
I'll go ahead and select those, click on next.
So here, the security section for forage transmits, I want to say accept.
And then for Mac learning, I want to enable and that's it.
So click on next and finish and that is done.
We're now in good striking position for our future demos. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
We're now in good striking position for our future demos.
All right, let me minimize that.
And let's go to the NSX manager.
So up to this point in our previous videos, I had implemented some DHCP
services just to make it quicker for clients to get IP addresses.
But because I want to do all of this with you from scratch, let's go ahead and
remove any current existing DHCP services that I might have had in place
previously.
So to do that, we're going to go to our segments and to get there, we're going
to go to networking on top and on the left, we'll click on segments.
And then for the yellow segment, we'll go ahead and click on the three dots, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then for the yellow segment, we'll go ahead and click on the three dots,
click on edit.
Then right over here, we have options for editing the DHCP config or deleting
it.
I'm going to click on delete, click on delete again, scroll down, click on save
, and click on close editing.
And repeat that process for the 1020 network.
So we'll click on the three dots, click on edit over on the right for segment
20.
I'm going to click on delete any DHCP config and delete again, scroll down,
click on save, and then click on close editing.
All right, so we have no DHCP services configured for segment 10 or segment 20. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
All right, so we have no DHCP services configured for segment 10 or segment 20.
And in addition, I'm going to go ahead and the left here with networking on the
top selected on the left and scroll down.
And under settings, I've got a section right here called networking profiles.
So on the bottom left here, I'm going to click on networking profiles.
And then on the top, I've got a sub tab right here for DHCP.
And now that we're no longer using this DHCP server profile that I put in place
beforehand for convenience because we're no longer using it on any of our
segments, we're going to click on the three dots here, click on delete, and
click on delete.
And then I'm going to click on refresh. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And so right now we have absolutely no DHCP services whatsoever.
So back at our game plan, we want to go ahead and have a DHCP relay and have
these gateways forward.
Any discover messages they see here on segment 10 or segment 20 and forward
them up to my DHCP server up here at 23.1.2.1.
So the first step in making that happen is we are going to configure a DHCP
profile, a specific type of DHCP profile for relays, and specify what the IP
address is of our actual DHCP server. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
address is of our actual DHCP server.
So again, in my case, is at 23.1.2.1.
Actually, before we do that, we also just take a moment and make sure that we
can reach and ping that IP address.
So we set that up in that external connectivity up in a previous skill.
As one of verify we have reachability to that IP address 23.1.2.1.
I also want to verify that this router currently does have the configuration to
support the subnets for 10, 10, and 10, 20 from a DHCP server perspective.
So let's do a quick check of connectivity and the pools right now. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So let's do a quick check of connectivity and the pools right now.
So let's go ahead and do it from edge one.
If we do a get gateways and press enter, they'll show us our gateways.
So let's go to our services router right here, which is VRF number two.
So we'll type in VRF two.
Another we're in the room effectively for VRF two.
Let's do a get forwarding and we scroll up.
So I have a whole bunch of IP addresses that we're using for the benefit of
network address translation.
And there is our default route and the next top is 23.1.2.1.
So we should be able to ping that IP address as well. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So here in VRF two, let's do a ping to 23.1.2.1.
Just to verify our connectivity.
Fantastic.
I'll do a control C to stop that.
And now that we've verified that we have that connectivity to that IP address,
let's also verify the DHCP services on that gateway.
So here we are at the console for this gateway slash firewall.
And to verify that we have DHCP services set up on it, I'm going to do a show
configuration space.
And let's make it easy to look at.
Let's do a commands and I'll hit space bar a few times to go to the end. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let's do a commands and I'll hit space bar a few times to go to the end.
And let's scroll up a little bit.
And I'm looking for DHCP services for the 10, 10 and the 10, 20 networks.
So the highlighted part right here and the colors is because of secure CRT and
the color scheme I'm using.
But the actual output is what we're focused on.
So these five lines here are DHCP services for the 10, 10, zero network with a
range of 151 all the way through 200 and a default gateway of 10, 10, 01 and a
DNS server. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And these next five lines right here.
These are the configurations for DHCP services for subnet 20 with their
respective default gateway address, a DNS server they can use and the range of
151 through 200.
So our next step is to create a DHCP relay profile.
And it's pretty simple.
It basically says this is the server at 23.1.2.1.
So let's create that DHCP relay profile right now.
So to do that here in the NSX manager will click on the networking tab right
here.
And then on the left, we'll scroll all the way down and under settings. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then on the left, we'll scroll all the way down and under settings.
We have a section called network profiles.
And I've also noticed that over various iterations of NSX, including four dot
zero and four dot one.
Sometimes they move things around a little bit.
So as of four dot one, which is what we're using right now, if we have network
profile selected, then this main section here, we have a sub tab right here for
DHCP.
And this is where we can configure our DHCP profile.
So this is the same place we go to create a server profile or a relay profile. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll click on DHCP, click right here and add DHCP profile.
And then we'll give it a name, let's call it our relay at 23.1.2.1.
Just the way I see it, I'll remember where it is.
And then the profile type is going to be a DHCP relay.
So we'll choose DHCP relay right there.
And then it wants to know what is the IP address of your DHCP server that you
want the gateways to forward these DHCP messages to.
And our server is at 23.1.2.1.
And that's it.
So that looks good. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we'll click on save.
And there is our relay profile called our relay at 23.1.2.1, which if we use
that profile, it'll mean the server we want to forward packets to is 23.1.2.1.
So now that we have the DHCP relay profile configured, now it exists, how do we
actually train and a [garbled] that for clients down here on segment 10, that they
should have their DHCP messages relayed up to that server.
And the same thing for segment 20. And the answer is we're going to go to these WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And the same thing for segment 20. And the answer is we're going to go to these
segments themselves and specify that we want to use this DHCP relay profile.
And that's going to effectively train gateway A and gateway B that, oh, you
know what?
If I see these DHCP discover messages, I'm going to go ahead and encapsulate
them using my source IP address on the respective 10 network and route that
packet up to the DHCP server.
And then the DHCP server can go ahead and respond back with an offer.
So let's go ahead and configure segment 10 and segment 20 to use the DHCP relay
profile that we just created. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So back in the NSX manager, one scan will go to networking and then on the left
under connectivity, we'll click on segments.
So here is segment 10 and segment 20. Let's go ahead and configure segment 10
first.
So we'll click on the three dots next to segment 10 and click on edit.
And then here on the far right where we deleted any existing DHCP configuration
, a few moments ago, we'll click right here to set DHCP config.
And the first thing is asking us right here at the top on the top left is which
type of DHCP.
Do you want this to be a DHCP relay? The answer is yes. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Do you want this to be a DHCP relay? The answer is yes.
Or do you want to use a segment DHCP server? Or do you want to use a gateway
DHCP server?
So for this demo, we want a DHCP relay.
You'll notice there's not a whole bunch of choices down here, but we do have an
option right here to choose a specific profile.
So we'll click here for DHCP profile and then select the profile we made just a
moment ago.
So we're going to specify our relay at 23.1.2.1 by selecting it.
And that's it. And we'll click on apply. And then we'll scroll down a little
bit, click on save.
And then we'll click here on close editing. And that concludes our WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then we'll click here on close editing. And that concludes our
configuration of DHCP relay for segment 10.
We'll repeat that here for segment 20 by clicking on the three dots, clicking
on edit.
And then over here on the right, click on set DHCP config.
So here we also want segment 20 to go ahead and have DHCP relay services.
And we'll point to the same profile, which effectively points to the server at
23.1.2.1.
And we'll click on apply. And then we'll scroll down and we'll click on save.
And it'll scroll down and click on close editing. And so now that we have
configured DHCP relay services for segment 10 and segment 20, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
configured DHCP relay services for segment 10 and segment 20,
we also verified basic connectivity up to our device at .1 on the 23.1.2
network, which is acting as our DHCP server.
We can either assume that it works or we can test it.
And that's exactly what we're going to do, the testing part in the next video.
So I'll see you there in just a moment.
[BLANK_AUDIO]