Deploy the NSX Load Balancer for Consolidated SDDC

Deploy a load balancer for use by management applications connected to the application virtual network, Mgmt-xRegion01-VXLAN.

Procedure

1. Log in to vCenter Server by using the vSphere Web Client.
   1. Open a Web browser and go to https://sfo01w01vc01.sfo01.rainpole.local/vsphere-client.
   2. Log in using the following credentials.

      Setting	Value
      User name	[e-mail]
      Password	vsphere_admin_password

2. Under Inventories, click Networking & Security.
3. In the Navigator, click NSX Edges.
4. Select 172.16.11.66 from the NSX Manager drop-down menu.
5. Click the Add icon to create an NSX Edge.
6. On the Name and description page, enter the following settings and click Next.

   Setting	Value
   Install Type	Edge Services Gateway
   Name	sfo01w01lb01
   Hostname	sfo01w01lb01.sfo01.rainpole.local
   Deploy NSX Edge	Selected
   Enable High Availability	Selected

7. On the Settings page, enter the following settings and click Next.

   Setting	Value
   User Name	admin
   Password	edge_admin_password
   Enable SSH access	Selected
   Enable FIPS mode	Deselected
   Enable auto rule generation	Selected
   Edge Control Level logging	INFO

8. On the Configure deployment page, perform the following configuration steps, and click Next. 
   1. Select sfo01-w01dc, from the Datacenter drop-down menu.
   2. Click Large to specify the Appliance Size.
   3. Click the Add icon, enter the following settings, and click OK.

      Setting	Value
      Resource pool	sfo01-w01-consolidated01
      Datastore	sfo01-w01-vsan01
      Folder	sfo01-w01fd-nsx
      Resource Reservation	System Managed

   4. To create a second appliance, click the Add icon again, make the same selections in the New NSX Appliance dialog box, and click OK.
9. On the Configure interfaces page, click the Add icon to configure the OneArmLB interface, enter the following settings, click OK, and click Next.

   Setting	Value
   Name	OneArmLB
   Type	Internal
   Connected To	Mgmt-xRegion01-VXLAN
   Connectivity Status	Connected
   Primary IP Address	192.168.11.2
   Subnet Prefix Length	24
   MTU	9000
   Send ICMP Redirect	Selected

10. On the Default gateway settings page, click Next.
11. On the Firewall and HA page, select the following settings and click Next. 

    Setting	Value
    Configure Firewall default policy	Selected
    Default Traffic Policy	Accept
    Logging	Disable
    vNIC	any
    Declare Dead Time	15

12. On the Ready to complete page, review the configuration settings you entered and click Finish.
13. Enable HA logging.
    1. In the Navigator, click NSX Edges.
    2. Select 172.16.11.66 from the NSX Manager drop-down menu.
    3. Double-click the sfo01w01lb01 device.
    4. Click the Manage tab and click the Settings tab.
    5. Click Change in the HA Configuration window.
    6. Select the Enable Logging checkbox and click OK.
14. Configure the Default Gateway.
    1. In the Navigator, click NSX Edges.
    2. Select 172.16.11.66 from the NSX Manager drop-down menu.
    3. Double-click the sfo01w01lb01 device.
    4. Click the Manage tab and click the Routing tab.
    5. Click the Edit button to configure the Default Gateway and enter 192.168.11.1.
    6. Click Publish Changes.
15. Enable the Load Balancer service. 
    1. In the Navigator, click NSX Edges.
    2. Select 172.16.11.66 from the NSX Manager drop-down menu.
    3. Double-click the sfo01w01lb01 device.
    4. Click the Manage tab, click the Load Balancer tab, click Global Configuration, and click Edit.
    5. In the Edit Load balancer global configuration dialog, select Enable Load Balancer and click OK.