Deploy two NSX Edge devices for North-South Routing.

Perform this procedure two times to deploy two NSX Edge devices. Enter the name and IP addresses for the respective device using the values shown in the tables.

Table 1. NSX Edge Devices

NSX Edge Device

Device Name

NSX Edge Device 1

nyc01r01esg01

NSX Edge Device 2

nyc01r01esg02

Table 2. NSX Edge Interfaces Settings

Interface

Primary IP Address nyc01r01esg01

Primary IP Address nyc01r01esg02

Uplink01

172.18.16.2

172.18.16.3

Uplink02

172.18.17.3

172.18.17.2

nyc01r01dlr01

172.18.18.1

172.18.18.2

Procedure

  1. Log in to vCenter Server by using the vSphere Web Client.
    1. Open a Web browser and go to https://nyc01r01vc01.rainpole.local/vsphere-client.
    2. Log in using the following credentials.

      Setting

      Value

      User name

      administrator@vsphere.local

      Password

      vsphere_admin_password

  2. Under Inventories, click Networking & Security.
  3. In the Navigator, click NSX Edges.
  4. Select 172.18.11.65 from the NSX Manager drop-down menu.
  5. Click the Add icon to deploy a new NSX Edge.

    The New NSX Edge wizard appears.

    1. On the Name and description page, enter the following settings and click Next.

      Settings

      nyc01r01esg01

      nyc01r01esg02

      Install Type

      Edge Service Gateway

      Edge Service Gateway

      Name

      nyc01r01esg01

      nyc01r01esg02

      Deploy NSX Edge

      Selected

      Selected

      Enable High Availability

      Deselected

      Deselected

    2. On the Settings page, enter the following settings and click Next.

      Settings

      Value

      User Name

      admin

      Password

      edge_admin_password

      Enable SSH access

      Selected

      Enable FIPS mode

      Deselected

      Enable auto rule generation

      Selected

      Edge Control Level logging

      INFO

    3. On the Configure deployment page, click Large to specify the Appliance Size and click the Add icon. 
    4. In the Add NSX Edge Appliance dialog box, enter the following settings, click OK, and click Next.

      Setting

      Value

      Cluster/Resource Pool

      nyc01-sddc-edge

      Datastore

      nyc01-r01-vsan01

      Folder

      nyc01-r01fd-nsx

      Resource Reservation

      System Managed

    5. On the Configure interfaces page, click the Add icon to configure the Uplink01 interface, enter the following settings, and click OK.

      Setting

      nyc01r01esg01

      nyc01r01esg02

      Name

      Uplink01

      Uplink01

      Type

      Uplink

      Uplink

      Connected To

      nyc01-r01-vds01-uplink01

      nyc01-r01-vds01-uplink01

      Connectivity Status

      Connected

      Connected

      Primary IP Address

      172.18.16.2

      172.18.16.3

      Subnet Prefix Length

      24

      24

      MTU

      9000

      9000

      Send ICMP Redirect

      Selected

      Selected

    6. Click the Add icon to configure the Uplink02 interface, enter the following settings, and click OK.

      Setting

      nyc01r01esg01

      nyc01r01esg02

      Name

      Uplink02

      Uplink02

      Type

      Uplink

      Uplink

      Connected To

      nyc01-r01-vds01-uplink02

      nyc01-r01-vds01-uplink02

      Connectivity Status

      Connected

      Connected

      Primary IP Address

      172.18.17.3

      172.18.17.2

      Subnet Prefix Length

      24

      24

      MTU

      9000

      9000

      Send ICMP Redirect

      Selected

      Selected

    7. Click the Add icon to configure the UDLR interface, enter the following settings, click OK, and click Next.

      Setting

      nyc01r01esg01

      nyc01r01esg02

      Name

      nyc01r01dlr01

      nyc01r01dlr01

      Type

      Internal

      Internal

      Connected To

      Transit Network

      Transit Network

      Connectivity Status

      Connected

      Connected

      Primary IP Address

      172.18.18.1

      172.18.18.2

      Subnet Prefix Length

      24

      24

      MTU

      9000

      9000

      Send ICMP Redirect

      Selected

      Selected

    8. On the Default gateway settings page, deselect the Configure Default Gateway check box and click Next.
    9. On the Firewall and HA page, click Next.
    10. On the Ready to complete page, review the configuration settings that you entered and click Finish.
  6. Repeat this procedure to configure another NSX Edge using the settings for the second NSX Edge device.
  7. Configure DRS anti-affinity rules for the Edge Services Gateways.
    Note:

    You do not perform this step if the management cluster has more than four hosts.

    1. Go back to the Home page.
    2. In the Navigator, click Hosts and Clusters and expand the nyc01r01vc01.rainpole.local  tree.
    3. Select the nyc01-r01-robo01 cluster and click the Configure tab.
    4. Under Configuration, click VM/Host Rules.
    5. Click Add.
    6. In the nyc01-r01-robo01 - Create VM/Host Rule dialog box, enter the following settings and click Add.

      Setting

      Value

      Name

      anti-affinity-rule-ecmpedges

      Enable rule

      Selected

      Type

      Separate Virtual Machine

    7. In the Add Rule Member dialog box, select the check box next to each of the two newly deployed NSX ESGs and click OK.
    8. In the nyc01-r01-robo01 - Create VM/Host Rule dialog box, click OK.