After you register a service, you must deploy an instance of the service for the service to start processing network traffic.
Deploy partner service VMs that run the partner security engine on all the NSX-T Data Center hosts in a cluster. The vSphere ESX Agency Manager (EAM) service is used to deploy the partner service VMs on each host. After you deploy the SVMs, you can create policy rules used by SVM to protect guest VMs.
Prerequisites
-
All hosts are managed by a vCenter Server.
-
Partner services are registered with NSX-T Data Center and are ready for deployment.
-
NSX-T Data Center administrators can access partner services and vendor templates.
-
Both the service VM and the partner Service Manager (console) must be able to communicate with each other at the management network level.
- Prepare hosts as NSX-T Data Center transport nodes:
- Create a transport zone.
- Create an IP pool for tunnel endpoint IP addresses.
- Create an uplink profile.
- Add a transport node profile to prepare a cluster for auto deployment of NSX-T Data Center transport nodes.
- Configure a standalone or managed host.
Procedure
Results
To remove host from a cluster, first move it into maintenance mode. Then, select the option to migrate the guest VMs to another host to complete migration.
What to do next
Know deployment details and heath status about service instances deployed on hosts. See View Service Instance Details.