Internal interfaces are generally for East-West traffic, while uplink interfaces are for North-South traffic. When a logical router (DLR) is connected to an edge services gateway (ESG), the interface on the router is an uplink interface, while the interface on the ESG is an internal interface. An NSX trunk interface is for internal networks, not external networks. The trunk interface allows multiple internal networks (either VLAN or VXLAN) to be trunked.

An NSX edge services gateway (ESG) can have up to ten internal, uplink, or trunk interfaces. These limits are enforced by the NSX Manager.

An NSX deployment can have up to 1,000 distributed logical router (DLR) instances on a single ESXi host. On a single logical router, you can configure up to 8 uplink interfaces, and up to 991 internal interfaces. These limits are enforced by the NSX Manager. For more information about interface scaling in an NSX deployment, see the VMware® NSX for vSphere Network Virtualization Design Guide at


  1. Log in to the vSphere Web Client.
  2. Click Networking & Security and then click NSX Edges.
  3. Double-click an NSX Edge.
  4. Click the Manage tab and then click the Interfaces tab.
  5. Select an interface and click the Edit (Edit icon) icon.
  6. In the Edit Edge Interface dialog box, type a name for the interface.
  7. Select Internal or Uplink to indicate whether this is an internal or external interface.

    Select Trunk when creating a sub interface. For more information, see Add a Sub Interface.

  8. Select the port group or logical switch to which this interface should be connected.
    1. Click Select next to the Connected To field.
    2. Depending on what you want to connect to the interface, click the Logical Switch, Standard Portgroup, or Distributed Portgroup tab.
    3. Select the appropriate logical switch or portgroup.
    4. Click Select.
  9. Select the connectivity status for the interface.
  10. In Configure Subnets, click the Add (add) icon to add a subnet for the interface.

    An interface can have multiple non-overlapping subnets.

  11. In Add Subnet, click the Add (add) icon to add an IP address.

    If you enter more than one IP address, you can select the Primary IP address. An interface can have one primary and multiple secondary IP addresses. NSX Edge considers the Primary IP address as the source address for locally generated traffic.

    You must add an IP address to an interface before using it on any feature configuration.

  12. Type the subnet mask for the interface and click Save.
  13. Change the default MTU if required.
  14. In Options, select the required options.



    Enable Proxy ARP

    Supports overlapping network forwarding between different interfaces.

    Send ICMP Redirect

    Conveys routing information to hosts.

    Reverse Path Filter

    Verifies the reachability of the source address in packets being forwarded. In enabled mode, the packet must be received on the interface that the router would use to forward the return packet. In loose mode, the source address must appear in the routing table.

  15. Type the fence parameters and click Add.
  16. Click OK.