Bridging a Federated Segment for the Migration

You can create a bridge on Federated segments for the migration.

Prerequisites

Configure an NSX Edge bridge as a transport node. See Configure an NSX Edge Bridge as a Transport Node.
Create an NSX Edge cluster. See Create an NSX Edge Cluster.
Configure the NSX Manager user interface settings and set Toggle Visibility to Visible to All Users. See "Configure the User Interface Settings" in the NSX Administration Guide.

Procedure

Log in to NSX Manager with admin privileges.
Click the Manager button in the upper-right corner to select Manager mode.
Create an Edge bridge profile by navigating to Networking > Logical Switches > Edge Bridge Profiles.

Make the following API call to tie the logical switch created from the GM (Global Manager) segment. For example:

POST https://<nsx-manager>/api/v1/bridge-endpoints
{
    "bridge_endpoint_profile_id": "0010b881-0c1c-4829-98f3-8389697dc4e8", <- ID of the Bridge Endpoint Profile
    "vlan_transport_zone_id": "a95c914d-748d-497c-94ab-10d4647daeba", <- ID of the VLAN Transport Zone
    "vlan": 0 
}
 
Response:
{ 
    "vlan": 0,
    "vlan_trunk_spec": {
        "vlan_ranges": []
    },
    "ha_enable": true,
    "bridge_endpoint_profile_id": "0010b881-0c1c-4829-98f3-8389697dc4e8", <- ID of the Bridge Endpoint Profile
    "vlan_transport_zone_id": "a95c914d-748d-497c-94ab-10d4647daeba", <- ID of the Bridge Endpoint Profile
    "resource_type": "BridgeEndpoint",
    "id": "7e9c3517-f15b-490b-b14e-5ec356e92655", 
    "display_name": "7e9c3517-f15b-490b-b14e-5ec356e92655", <- ID of the Bridge Endpoint
    "tags": [],
    "_create_user": "admin",
    "_create_time": 1638555736780,
    "_last_modified_user": "admin",
    "_last_modified_time": 1638555736780,
    "_system_owned": false,
    "_protection": "NOT_PROTECTED",
    "_revision": 0
}

You can find the UUID of the transport zone by navigating to System > Fabric > Transport Zones. Look for the VLAN transport zone of your Edge node.

Screenshot of the transport zones screen

Make the following API call to create a port on the bridge.

POST https://<nsx-manager>/api/v1/logical-ports 
{
    "logical_switch_id": "dd2841db-dff9-4927-834f-11b5ac8803d4", <- ID of the Logical Switch
    "admin_state": "UP",
    "attachment": {
        "attachment_type": "BRIDGEENDPOINT",
        "id": "7e9c3517-f15b-490b-b14e-5ec356e92655" <- ID of the Bridge Endpoint
    }
}

Response:
{
    "logical_switch_id": "dd2841db-dff9-4927-834f-11b5ac8803d4", <- ID of the Logical Switch
    "attachment": {
        "attachment_type": "BRIDGEENDPOINT",
        "id": "7e9c3517-f15b-490b-b14e-5ec356e92655"  <- ID of the Bridge Endpoint
    },
    "admin_state": "UP",
    "address_bindings": [],
    "switching_profile_ids": [
        {
            "key": "SwitchSecuritySwitchingProfile",
            "value": "47ffda0e-035f-4900-83e4-0a2086813ede"
        },
        {
            "key": "SpoofGuardSwitchingProfile",
            "value": "fad98876-d7ff-11e4-b9d6-1681e6b88ec1"
        },
        {
            "key": "IpDiscoverySwitchingProfile",
            "value": "64814784-7896-3901-9741-badeff705639"
        },
        {
            "key": "MacManagementSwitchingProfile",
            "value": "1e7101c8-cfef-415a-9c8c-ce3d8dd078fb"
        },
        {
            "key": "PortMirroringSwitchingProfile",
            "value": "93b4b7e8-f116-415d-a50c-3364611b5d09"
        },
        {
            "key": "QosSwitchingProfile",
            "value": "f313290b-eba8-4262-bd93-fab5026e9495"
        }
    ],
    "ignore_address_bindings": [],
    "internal_id": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3",
    "resource_type": "LogicalPort",
    "id": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3", <- ID of the Port created with the Bridge 
    "display_name": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3",
    "_create_user": "admin",
    "_create_time": 1638556071051,
    "_last_modified_user": "admin",
    "_last_modified_time": 1638556071051,
    "_system_owned": false,
    "_protection": "NOT_PROTECTED",
    "_revision": 0
}

You can see the UUID by navigating to Networking > Logical Switches.

This logical switch is the stretched segment created from Global Manager. You can see it in NSX Manager UI after selecting Policy mode.

In Manager mode, you can see that the bridge is successful.

In Policy mode, you can see the VIF that was created. It shows that it is connected to the bridge endpoint but does not have more details.

You can get more information on this port with the following API call:

GET https://<nsx-manager>/api/v1/logical-ports/55ac50fa-c5e1-413b-b1ec-2d85619cf5c3

Response:
{
    "logical_switch_id": "dd2841db-dff9-4927-834f-11b5ac8803d4",
    "attachment": {
        "attachment_type": "BRIDGEENDPOINT",
        "id": "7e9c3517-f15b-490b-b14e-5ec356e92655"
    },
    "admin_state": "UP",
    "address_bindings": [],
    "switching_profile_ids": [
        {
            "key": "SwitchSecuritySwitchingProfile",
            "value": "47ffda0e-035f-4900-83e4-0a2086813ede"
        },
        {
            "key": "SpoofGuardSwitchingProfile",
            "value": "fad98876-d7ff-11e4-b9d6-1681e6b88ec1"
        },
        {
            "key": "IpDiscoverySwitchingProfile",
            "value": "64814784-7896-3901-9741-badeff705639"
        },
        {
            "key": "MacManagementSwitchingProfile",
            "value": "1e7101c8-cfef-415a-9c8c-ce3d8dd078fb"
        },
        {
            "key": "PortMirroringSwitchingProfile",
            "value": "93b4b7e8-f116-415d-a50c-3364611b5d09"
        },
        {
            "key": "QosSwitchingProfile",
            "value": "f313290b-eba8-4262-bd93-fab5026e9495"
        }
    ],
    "ignore_address_bindings": [],
    "internal_id": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3",
    "resource_type": "LogicalPort",
    "id": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3",
    "display_name": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3",
    "_create_user": "admin",
    "_create_time": 1638556071051,
    "_last_modified_user": "admin",
    "_last_modified_time": 1638556071051,
    "_system_owned": false,
    "_protection": "NOT_PROTECTED",
    "_revision": 0
}

Results

Now that you have configured the bridge for the Federated segment, perform the following tasks:

Configure the logical switch to connect to the Edge bridge. See Configure the Logical Switch to Connect to the Edge Bridge.
Test the connectivity across the bridge. See Test the Connectivity Across the Layer 2 Bridge.

Post Migration Bridge Removal

After the migration, remove the objects that are no longer needed.

Make the following PUT API call. The logical port ID (55ac50fa-c5e1-413b-b1ec-2d85619cf5c3) is in the response from the POST API call in step 5 above. Use the response from the POST API call as the body of this call but without the "attachment" parameter.

PUT https://<nsx-manager>/api/v1/logical-ports/55ac50fa-c5e1-413b-b1ec-2d85619cf5c3
{
    "logical_switch_id": "dd2841db-dff9-4927-834f-11b5ac8803d4",
    "admin_state": "UP",
    "address_bindings": [],
    "switching_profile_ids": [
        {
            "key": "SwitchSecuritySwitchingProfile",
            "value": "47ffda0e-035f-4900-83e4-0a2086813ede"
        },
        {
            "key": "SpoofGuardSwitchingProfile",
            "value": "fad98876-d7ff-11e4-b9d6-1681e6b88ec1"
        },
        {
            "key": "IpDiscoverySwitchingProfile",
            "value": "64814784-7896-3901-9741-badeff705639"
        },
        {
            "key": "MacManagementSwitchingProfile",
            "value": "1e7101c8-cfef-415a-9c8c-ce3d8dd078fb"
        },
        {
            "key": "PortMirroringSwitchingProfile",
            "value": "93b4b7e8-f116-415d-a50c-3364611b5d09"
        },
        {
            "key": "QosSwitchingProfile",
            "value": "f313290b-eba8-4262-bd93-fab5026e9495"
        }
    ],
    "ignore_address_bindings": [],
    "internal_id": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3",
    "resource_type": "LogicalPort",
    "id": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3",
    "display_name": "55ac50fa-c5e1-413b-b1ec-2d85619cf5c3",
    "_create_user": "admin",
    "_create_time": 1638556071051,
    "_last_modified_user": "admin",
    "_last_modified_time": 1638556071051,
    "_system_owned": false,
    "_protection": "NOT_PROTECTED",
    "_revision": 0
}

Delete the port and bridge endpoints with the following API calls. The port ID and the bridge endpoint ID are in the response from the POST API call in step 5 above.

DEL https://<nsx-manager>/api/v1/logical-ports/55ac50fa-c5e1-413b-b1ec-2d85619cf5c3
DEL https://<nsx-manager>/api/v1/bridge-endpoints/7e9c3517-f15b-490b-b14e-5ec356e92655