So in this video, I'd like to go ahead and walk you through the confirmation of
which IP
discovery segment profile is applied by default to our segments and then also
take a look at some
of the results that we're learning from that IP discovery segment profile,
including information
about the layer two addresses and layer three addresses because behind the
scenes, the IP discovery
profile is doing ARP spoofing and DHCP snooping to dynamically discover that
information from our
VMs. So because we already have our Mint 10 computer sitting right here on the
green segment
and there's a default IP discovery segment profile in place, let's take a look WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and there's a default IP discovery segment profile in place, let's take a look
at the results of the
IP discovery profile on a segment and how it was used to discover the
information about our Mint 10
VM right here, including its layer two information and layer three information.
So back in the NSX
manager, we'll once again click on the networking tab on top, I'll expand the
left hand side so we
can navigate here and let's go back to segments. So if we click on segments and
we go down to our
green segment, in fact, I'm going to go ahead and edit that and I'm going to
put a period in
front of that. So it's sourced to the top and be a little bit easier to find WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
front of that. So it's sourced to the top and be a little bit easier to find
every time I'm looking
for that specific segment. So I'm going to put a period there, scroll down,
click on save and then
click on close editing and there's our green segment sorted to the top.
Fantastic. So let's go ahead
and look at the details for the green segment. We'll expand it, we'll expand
segment profiles and
here's the IP discovery profile that's associated with this segment. It is the
default one. So if we
wanted to edit that, we can click on edit here to edit the segment and then go
down to that segment
profile. And for the IP discovery, we could click on the three dots and from
here we can click on view WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
here we can click on view
and they'll show us all the settings in that current segment profile. So the
duplicate IP
detection by default is disabled, ARP snooping is enabled. There's a limit of
one and then for
ND, that's for IPv6, that's neighbor discovery protocol. The ND snooping is
disabled by default,
however, we can enable it if we wanted to create our own profile. So this
little lock symbol implies
that this default segment profile cannot be modified. So if we want a different
setting,
we could create our own segment profile and then apply it to this segment. And WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
we could create our own segment profile and then apply it to this segment. And
then over here on
the right, we have DHCP snooping enabled. If we had DHCP for IPv6, it is
disabled by default.
And regarding VMware tools, if VMware tools is running on a VM, that's also
going to be used by
NSX to determine information about that network interface card on that VM,
including its IP address
and MAC address. And the trust on first use option, which is enabled in the
default profile,
simply says that as we discover an IP slash MAC address slash VLAN combination
for a VM,
that will go ahead and just immediately place that in the table. And that's WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
that will go ahead and just immediately place that in the table. And that's
going to stay there
persistently. If we create a segment profile and we disable that feature of
trust on first use,
it would then use a method called trust on every use. So it's still going to
add the information
to a table instead of NSX. However, there's an expiration timer. So after a
period of time,
that'll be removed. So if I lab at this point, I'm not using IPv6, so I don't
need to enable
any of the neighbor's discovery or DHCP snooping for IPv6. And this is pretty
much going to serve
our purposes. Now, as a result of having this on, let's take a look at Mint 10.
So we'll close that
and I'll click on close editing here. And for this segment, green segment 10, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and I'll click on close editing here. And for this segment, green segment 10,
let me go ahead
and collapse the left hand side gives a little more room here. We click here on
the ports and
interfaces. Here is our Mint 10 machine. And if we expand that and scroll down
here, if we
expand address binding, if we click right here on discovered bindings and click
on view, it's
going to show us what was discovered about that VM, including the layer three
information,
the layer two information, and how it was discovered. So for our network here,
I'm going to leave the
default segment port profiles in place and also get in here looking at the
details for this individual WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
details for this individual
VM, it's showing us the actual segment port profiles in place and how they got
there. And they
were inherited from the segment profile that's currently applied to the segment
itself. And if
And if there was any overrides at this VM, they would show up right here.
[BLANK_AUDIO]