All right, so based on our game plan, we are now going to create a Tier 0
gateway that's going to be stretched and available across both of our sites.
So once again, we're going to go to our global manager and we're going to
create that new T0 gateway.
So here at the NSX global manager, if we go back to networking and with
networking selected, we'll go down under connectivity and click on Tier 0 gate
ways.
We don't have any yet, so let's go ahead and create one by clicking here on add
Tier 0 gateway.
So let's go ahead and name this stretch T0 and as far as the H.A. mode, let's WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So let's go ahead and name this stretch T0 and as far as the H.A. mode, let's
use active standby.
And for the failover mode, we could use non-pramptive or preemptive.
With non-pramptive, if there's a failover event, we have to manually fail it
back.
So I'm going to go ahead for the lab and say preemptive.
In that way, the device that we specify as active, if there's a problem or a
failover issue, if it comes back online, it'll fail back to the method that we
specify.
So here under locations, this is how we specify where this is going to be
stretched to. So by default, there are no locations specified.
So under location, we use the dropdown, say we want this stretch T0 gateway to WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So under location, we use the dropdown, say we want this stretch T0 gateway to
be available at site one, and we'll click on add location and specify we also
want it available at site two, just like that.
And then we're going to specify which one's going to be primary.
So for this Tier 0 gateway, let's make site one the primary and site two the
secondary.
And then as we go to the right, we're going to specify the edge cluster to use
from each of the sites.
So at site one and site two, I only have one cluster of edge nodes. So that'll
be the one here in the list.
So here's the lab edge cluster. That's the name of it in site one and at site
two, I called it lab two edge cluster. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
two, I called it lab two edge cluster.
So we'll select those respective edge clusters. And then furthermore, if you
want to control which edge node as part of that cluster you want to use, we
could specify that here.
So here at site one, I've got the edge one and edge two and a similar treatment
for site two from the lab two edge cluster.
I've got two choices there as well, or you can just go ahead and let it choose
on its own.
And the add location button is now grayed out because I only have these two
sites. There isn't yet another site I could add here if I wanted to.
So we'll scroll down and we'll go ahead and click on save. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll scroll down and we'll go ahead and click on save.
So since we also want to add some interfaces, let's click on yes to continue
our configuration. And now for the stretched tier zero gateway, let's go ahead
and add some interfaces.
So I'm going to expand the interfaces section. And before we start configuring
interfaces, let's take a look at our game plan.
So for our game plan here at site one, I want to use these two interfaces, one
on each edge for the tier zero gateway and over at site two, I want to use
these two interfaces, again, leveraging the extra segment 23 here at site one. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
these two interfaces, again, leveraging the extra segment 23 here at site one.
And the external segment using VLAN 24 at site two. So for the naming
convention, it'll remind us of which site we're at, which edge node, which VLAN
and the last octet of the IP address.
So over here at site one for that external connection is 23.1.2.0. That's the
subnet. And over here at site two, the external segment on VLAN 24 is 24.1.2.0
with the 24-bit mask.
And the router on the physical network is at dot one. And then what we'll do is WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And the router on the physical network is at dot one. And then what we'll do is
we'll have edge one over here, use dot 61, edge two over here, use dot 62.
And then over here at site two, we'll have edge one used dot 61 on the 24.1 to
network and edge two use dot 62 on that same network.
So let's add those four interfaces to this stretch T zero gateway. So to give
us a little more room here, I'm going to go ahead and collapse the left hand
column.
And let's go to work. So under interfaces for our tier zero gateway, let's go
ahead and click on set under interfaces and click on add.
So for the first one is going to be site one edge one VLAN 23 and using dot 61. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So for the first one is going to be site one edge one VLAN 23 and using dot 61.
So that'll be the name of this interface.
And the IP address is going to be 23.1.2.61 with a 24-bit mask. So we'll put
that in. Notice here for the segment, we can't choose that yet because we haven
't specified which location we want this to be at.
So under location, we'll choose site one. And then it should show us any of our
VLAN back segments over at site one. So we'll use the drop down.
And sure enough, there it is site one external VLAN 23. So let's choose that WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And sure enough, there it is site one external VLAN 23. So let's choose that
segment. And then as we continue down for the edge node, we use the drop down
and let's use edge one based on our plan.
We do the name right there, E1 representing edge one and we'll scroll down and
click on save. All right. So there's one interface for site one. Let's add a
second one for site one and they'll be using edge two.
So I'm going to go ahead and copy that syntax so I can replicate it pretty
easily. And let's click on add interface. I'll go ahead and paste that name in
and then I'll edit it.
So this is site one. This is going to be edge two still be then 23 and the IP WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So this is site one. This is going to be edge two still be then 23 and the IP
address is going to be dot 62. And that way when we see these interface names,
the reminder is based on the naming convention.
Exactly where they are. So then for the location, this is going to be site one
also for the IP address. This is going to be 23 dot one dot two dot 62 with a
24 bit mask.
And for the segment, we're going to be connecting to that site one external V
LAN 23. And then for the edge node, we only have one other one there and that's
edge two. So we'll select that and we'll scroll down and click on save.
So there's the two edge node interface addresses that we're using on the tier WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So there's the two edge node interface addresses that we're using on the tier
zero gateway over at site one. Let's repeat that process. But for the two
interfaces for the tier zero gateway over at site two.
So we'll click on add interface. I'll click on paste and let's update this. So
for the names can be s two for site two. The edge is going to be edge one at
site two. It's going to be VLAN 24.
And the last octet is going to be 61 and this can be on the 24 dot one dot two
network. So we'll put a dot 61 there with the 24 bit mask and the location for
this is going to be site two. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then we'll use the dropdown for the segment and it's showing us the VLAN
back segments over at site two. So there's our site to external VLAN 24.
And for the edge nodes, it's going to show us the two edge nodes over there at
site two. So for this first one, it'll be the IP address associated with edge
one and we'll scroll down and click on save.
And then we'll repeat that process for the second edge node at site two. So I'm
going to copy that name. They'll save me a little bit of typing. And then we'll
click on add interface and we'll paste.
And then I'll go ahead and update this to be edge two and the IP address is WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then I'll go ahead and update this to be edge two and the IP address is
going to be dot 62 location is going to be site two IP address is going to be
24 dot one dot two dot 62 with a 24 bit mask.
And for the external segment over at site two, use the dropdown. Here's our
site to external VLAN 24 segments will select that. And then for the edge node
for this one, our only remaining edge node over there at site two is lab two
edge two so select that.
And we'll scroll down, click on save, and then we are going to check our work. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So let me go ahead and check status on each of these. And let me check out the
IP address real quick. So 23 dot 1 dot 2 61 62 24 12 61 62 that part looks good
site one site two.
The naming convention looks good as well. If we expand each one, this is for
edge one fantastic that should be edge two.
Then for site two, that's edge one and the second edge is edge two. That all
looks great. So we'll go ahead and click on close, scroll down, click on close
editing.
And now if we scroll down interfaces, it's showing us that we have two WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And now if we scroll down interfaces, it's showing us that we have two
interfaces for site one and two interfaces for site two.
Now, what I'd like to do just for a moment is pop over and just give you a bird
's eye view of what this looks like from the topology from the perspective of
site one.
So we click here on site one from the drop down. It just took us over to site
one and furthermore, click on network topology.
It's now showing us the details from the local manager of site one, which says,
hey, I've got this tier zero gateway and I've got these two logical interfaces.
231261 and 231262. And if we double click on the tier zero gateway here, they WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
231261 and 231262. And if we double click on the tier zero gateway here, they
'll show us the fabric view to confirm for us which edges are being used for
that functionality.
So here's edge one with 231261 and edge two with 231262. Fantastic.
I'd also like to take a moment and just confirm from the perspective of edge
one here at site one that it really does have access to this 2312 network and
then my VLANs are all set up correctly.
So let's just go SSH over to edge one for a moment and verify we can ping the
external router on that same VLAN, which should be at 23.1.2.1. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
external router on that same VLAN, which should be at 23.1.2.1.
So let me confirm the IP address of this edge node. So we're still here at site
one. So on site one, if we go to system by clicking on the system tab right
here and then on the left expand fabric and then click on nodes.
Here it can confirm for us the IP addresses. So edge one is at 192.168.1.191.
So let's open up an SSH session and just verify basic connectivity. So here's
my secure CRT as my terminal emulator.
And I've got an entry right here for 191. So we'll go ahead and connect and it WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And I've got an entry right here for 191. So we'll go ahead and connect and it
's not connecting. Oh, I may not have enabled SSH on that edge node.
Have no fear. We can check and correct that if that's the case. So back at the
site one local manager. So we got there by starting at the NSX global manager
and choosing site one.
And so here logically at site one, if we go to this edge and select it, I want
to click on actions and let's go ahead and click right here on change node
settings.
And that should allow us to enable SSH. So again, from actions for that edge
node clicking on change node settings and we'll give that just a moment. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
node clicking on change node settings and we'll give that just a moment.
And from here, we want to go ahead and specify that we want to allow SSH login.
So I rebuilt my lab a few days ago and I failed to enable that when I deployed
the edge of nodes.
So I'll go ahead and say yes to that scroll down. Then we'll click on save. So
now that's updating. Let's go ahead and try the SSH session again.
So back at secure CRT will try that connection and that looks a lot better. All
right. So we are logged on to edge one at site one and let's do a get gateways. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So there's our T zero services router. It's in VRF 13. So the test connectivity
to the outside world, which that T zero router should have.
Let's go into that VRF by typing in VRF space 13. And then from here, let's do
a get route just to verify our routes.
So there is our T zero connected network with 23.12 and we could also get
forwarding. So currently we are directly connected to this network.
So we should be able to ping 23.1.2.1, which is the external gateway on that V WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we should be able to ping 23.1.2.1, which is the external gateway on that V
LAN 23. So we'll do a ping to 23.1.2.1 and press enter.
And sure enough, that is flying fantastic. So we'll do a control C. So that's a
great way to confirm from a connectivity perspective that we really are
connected to the right.
VLAN and we have access to that external gateway by the interface on the T zero
gateway that's being provided by edge one.
Let me go ahead and minimize that. So now we have our tier zero gateway. We
also have our external interfaces configured for both site one and site two WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
using these VLANs respectively and the edge nodes at those sites.
And our next logical step would be to configure the routing. So with NSX
Federation, what is not supported is OSPF. So we couldn't use OSPF between the
edge routers and our tier zero gateways.
But we could use BGP or we could use data crowds. So what I propose we do in
the next video, let's go to our tier zero gateway and set up two default routes
.
One that says, Hey, your default route goes up to service provider A over here
through site one. That's a 23.1.2.1 and at site two for that T zero gateway. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
through site one. That's a 23.1.2.1 and at site two for that T zero gateway.
It's default route. She's the next top of 24.1.2.1. So we'll set up a static
default route. Also, while we're there, let's also set up source net for
traffic that's trying to go out to the external world.
And we'll do that as well here at site one as well as at site two, both for
that T zero gateway. So we'll do both of those in the next video. So I'll see
you there in just a moment.