You can install NSX Edge devices in a manual fashion using an ISO file. This installation method would typically be used in a proof-of-concept (POC) lab with no access to a PXE server.

About this task


The NSX component virtual machine installations include VMware Tools. Removal or upgrade of VMware Tools is not supported for NSX appliances.


  • Verify that the system requirements are met. See System Requirements.

  • Verify that the required ports are open. See Ports and Protocols.

  • If you don't already have one, create the target VM port group network. Most deployments place NSX appliances on a management VM network.

    If you have multiple management networks, you can add static routes to the other networks from the NSX appliance. Prepare management VM port group on which NSX appliances will communicate.

  • Plan your IPv4 IP address scheme. In this release of NSX-T, IPv6 is not supported.


  1. On a standalone host or in the vCenter Web client, create a VM and allocate the following resources:
    • Guest operating system: Other (64-bit).

    • 3 VMXNET3 NICs. NSX Edge does not support the e1000 NIC driver.

    • The appropriate system resources required for your NSX-T deployment.

  2. Bind the NSX Edge ISO file to the VM.

    Make sure the CD/DVD drive device status is set to Connect at power on.

  3. During ISO boot, open the VM console and choose Automated installation.

    There might be a pause of 10 seconds after you press Enter.

    During power-on, the VM requests a network configuration via DHCP. If DHCP is not available in your environment, the installer prompts you for IP settings.

    By default, the root login password is vmware, and the admin login password is default.

    When you log in for the first time, you will be prompted to change the password. This password change method has strict complexity rules, including the following:

    • At least eight characters

    • At least one lower-case letter

    • At least one upper-case letter

    • At least one digit

    • At least one special character

    • At least five different characters

    • No dictionary words

    • No palindromes


    The core services on the appliance will not start until a password with sufficient complexity has been set.

  4. For optimal performance, reserve memory for the NSX component.

    A memory reservation is a guaranteed lower bound on the amount of physical memory that the host reserves for a virtual machine, even when memory is overcommitted. Set the reservation to a level that ensures the NSX component has sufficient memory to run efficiently. See System Requirements.


Open the console of the NSX Edge to track the boot process. If the window doesn’t open, make sure that pop-ups are allowed.

After the NSX Edge is completely booted, log in to the CLI and run the get interface eth0 command to verify that the IP address was applied as expected.

nsx-edge-1> get interface eth0 

Interface: eth0
  MAC address: 00:50:56:86:62:4d
  MTU: 1500
  Default gateway:
  Broadcast address:

If needed, run the set interface eth0 ip <CIDR> gateway <gateway-ip> plane mgmt command to update the management interface. Optionally, you can start the SSH service with the start service ssh command.

Ensure that your NSX Edge appliance has the required connectivity.

  • Make sure that you can ping your NSX Edge.

  • Make sure that the NSX Edge can ping its default gateway.

  • Make sure that your NSX Edge can ping the hypervisor hosts that are in the same network as the NSX Edge.

  • Make sure that the NSX Edge can ping its DNS server and its NTP server.

  • If you enabled SSH, make sure that you can SSH to your NSX Edge.


If connectivity is not established, make sure the VM network adapter is in the proper network or VLAN.

By default, the NSX Edge datapath claims all virtual machine NICs except the management NIC (the one that has an IP address and a default route). If DHCP assigns the wrong NIC as management, you can correct this as follows:

  1. stop service dataplane

  2. set interface eth0 dhcp plane mgmt

  3. Place eth0 into the DHCP network and wait for an IP address to be assigned to eth0.

  4. start service dataplane

The datapath fp-ethX ports used for the VLAN uplink and the tunnel overlay are shown in the get interfaces and get physical-port commands on the NSX Edge.

What to do next

Join the NSX Edge with the management plane. See Join NSX Edge with the Management Plane.