Configure vSphere Networking for ESXi Hosts

This topic describes how to configure vSphere Networking for ESXi Hosts for VMware Tanzu Kubernetes Grid Integrated Edition (TKGI).

Prerequisites

Before completing this section, make sure you have completed the following sections:

• NSX Installation Prerequisites
• Install and Configure the NSX Manager Hosts
• Generate and Register the NSX TLS Certificate and Private Key
• Create an IP Pool for VTEP
• Configure Transport Zones

Configure vSphere Networking for ESXi Hosts

In this section of the NSX-T installation for TKGI, you configure the vSphere networking and port groups for ESXi hosts (the vSwitch). If you have created separate vSphere clusters for Management and Compute, perform this operation on each ESXi host in the Management cluster. If you have not created separate vSphere clusters, perform this operation on each ESXi host in the cluster.

The following instructions describe how to configure a vSphere Virtual Standard vSwitch (VSS). For production environments, it is recommended that you configure a Virtual Distributed vSwitch (VDS). You configure the VDS from the vCenter Networking tab and then add the ESXi hosts to the VDS. The configuration settings for the VDS are similar to the VSS configuration described below. For instructions on configuring the VDS, see Create a vSphere Distributed Switch in the vSphere 7 documentation.

Refer to the Release Notes for details on TKGI support for vSphere 7 VDS for NSX transport node traffic.

Create vSwitch Port-Groups for Edge Nodes

Create vSwitch Port-Groups for the Edge Nodes on the ESXi hosts in the MANAGEMENT-cluster.

For each ESXi host in the MANAGEMENT-cluster, create the following vSwitch Port Groups:

• EDGE-VTEP-PG: VLAN 3127

• EDGE-UPLINK-PG: VLAN trunk (All (4095))

• Log in to the vCenter Server.

• Select the ESXi host in the MANAGEMENT-cluster.
• Select Configure > Virtual switches.
• Select Add Networking (upper right).
• Select the option Virtual Machine Port Group for a Standard Switch and click Next.
• Select the existing standard switch named vSwitch0 and click Next.
• Enter a Network Label, such as EDGE-VTEP-PG.
• Enter a VLAN ID, such as 3127.
• Click Finish.
• Verify that you see the newly created port group.
• Select Add Networking (upper right).
• Select the option Virtual Machine Port Group for a Standard Switch and click Next.
• Select the existing standard switch named vSwitch0 and click Next.
• Enter a Network Label, such as EDGE-UPLINK-PG.
• For the VLAN ID, select All (4095) from the drop-down.
• Click Finish.
• Verify that you see the newly created port group.

Set vSwitch0 with MTU at 9000

For each ESXi host in the MANAGEMENT-cluster, or each ESXi host in the vCenter cluster if you have not created separate Management and Compute clusters, you must enable the virtual switch with jumbo MTU, that is, set vSwitch0 with MTU=9000. If you do not do this, network overlay traffic will jam. The TEP interface for the NSX Edge Nodes must be connected to a port group that supports > 1600 bytes. The default is 1500.

1. Select the Virtual Switch on each ESXi host in the MANAGEMENT-cluster, or each host in the vCenter cluster.
2. Click Edit.
3. For the MTU (bytes) setting, enter 9000.
4. Click OK to complete the operation.

Next Step

Deploy NSX Edge Nodes.