A segment is a logical switch that VMs can connect to. A tier-1 gateway routes traffic between segments. A tier-0 gateway connects tier-1 gateways to a physical router so that segments have external connectivity.

Note: The object names and configuration values that are used in the steps below are example values mentioned in Preparing the Environment. Replace them with names and values that are appropriate for your environment.

Create a VLAN Segment to Connect to the Physical Router

  1. In NSX Manager, go to Networking > Segments.
  2. Click Add Segment.
  3. Provide the following information.
    Segment Name External-segment-1
    Connected Gateway None
    Transport Zone nsx-vlan-transportzone
    VLAN 50

Create a Tier-0 Gateway

  1. In NSX Manager, go to Networking > Tier-0 Gateways.
  2. Click Add Tier-0 Gateway.
  3. Enter a name for the gateway, for example, T0-gateway-1.
  4. Select the HA (high availability) mode Active Standby.
  5. Select the Edge cluster Edge-cluster-1.
  6. Click Save and continue configuring this gateway.
  7. Click Interfaces and click Set.
  8. Click Add Interface.
  9. Enter a name, for example, IP1-EdgeNode1.
  10. Enter the IP address 192.168.50.11/24.
  11. In the Connected To (Segment) field, select External-segment-1.
  12. In the Edge Node field, select Edge-1.
  13. Save the changes.
  14. Repeat steps 8-13 to configure a second interface called IP2-EdgeNode2. The IP address should be 192.168.50.12/24. The Edge Node should be Edge-2.
  15. In the HA VIP Configuration field, click Set to create a virtual IP for the tier-0 gateway.
  16. Enter the IP address 192.168.50.13/24.
  17. Select the interfaces IP1-EdgeNode1 and IP2-EdgeNode2.
  18. Save the changes.

Configure Routing on the Physical Router and Tier-0 Gateway

  1. On the physical router, configure a static route to the subnets 10.1.1.0/24, 10.1.2.0/24, and 10.2.1.0/24 via 192.168.50.13, which is the virtual IP address of the tier-0 gateway's external interface.
  2. In NSX Manager, go to Networking > Tier-0 Gateways.
  3. Edit T0-gateway-1.
  4. Under Routing > Static Routes, click Set and click Add Static Route.
  5. In the Name field, enter default.
  6. In the Network field, enter 0.0.0.0/0.
  7. Click Set Next Hops.
  8. In the IP Address field, enter 192.168.50.1.
  9. Click Add.
  10. Save the changes.

Alternatively, you can configure dynamic routes. For more information, see the NSX-T Data Center Administration Guide.

Create Two Tier-1 Gateways

  1. In NSX Manager, go to Networking > Tier-1 Gateways.
  2. Click Add Tier-1 Gateway.
  3. Provide the following information.
    Tier-1 Gateway Name T1-gateway-1
    Edge Cluster Edge-cluster-1
    Linked Tier-0 Gateway T0-gateway-1
  4. Under Route Advertisement, enable All Connected Segments & Service Ports.
  5. Save the changes.
  6. Repeat steps 2-5 and create T1-gateway-2. Specify the same edge cluster.

Create Three Overlay Segments for VMs

  1. In NSX Manager, go to Networking > Segments.
  2. Click Add Segment.
  3. Provide the following information.
    Segment Name LS1.1
    Connected Gateway T1-gateway-1
    Transport Zone nsx-overlay-transportzone
    Subnets 10.1.1.1/24

    Note: For an overlay segment that is attached to a tier-1 gateway, in the Subnets field, specify an IP address for the tier-1 gateway. This address will be the default gateway for VMs attached to this segment.

  4. Repeat steps 2-3 and create LS1.2 (Subnets: 10.1.2.1/24, Connected Gateway: T1-gateway-1) and LS2.1 (Subnets: 10.2.1.1/24, Connected Gateway: T1-gateway-2).
  5. Verify that LS1.1, LS1.2, and LS2.1 are created under the appropriate VDS in VC.