The tier-0 gateway is the NSX logical router that provides the North-South connectivity for the NSX logical networking to the physical infrastructure. vSphere IaaS control plane supports multiple tier-0 gateways on multiple NSX Edge clusters in the same transport zone.
Prerequisites
Procedure
Configure NSX Route Maps on Edge Tier-0 Gateway
When you deploy vSphere IaaS control plane, the route maps created on the edge tier-0 gateway in eBGP mode contains an IP prefix with only a deny rule. This blocks routes from getting advertised to the ToR switches.
If you are using the Edge cluster only for Kubernetes - Workload Management, follow option 1 and deactivate tier-1 route advertisements. If you are using the Edge cluster for additional tasks, follow option 2 and create a new allow rule.
Option 1: Deactivate Advertisements of Tier-1 Connected Networks through Tier-0 Gateway
Networks connected to tier-1 gateway are not advertised from tier-0 gateway to outside networks.
- Log in to the NSX Manager.
- Select .
- Click Edit.
- In the Advertised Tier-1 Subnets section, deselect Connected interfaces and Segments.
- Click Apply and then click Save.
Option 2: Create New Allow Rule and Apply it to Route Re-redistribution
When you deploy vSphere IaaS control plane, a new deny rule is appended to the route map. So you must add a new permit rule to the route map to allow any IP prefix list and route map and apply it to the route redistribution rule as the last rule.
- Log in to the NSX Manager.
- Select .
- Create a new IP prefix list.
- Expand Routing.
- Click 1 next to IP Prefix Lists.
- In the Set IP Prefix List dialog box, click Add IP Prefix List.
- Enter a name, for example, test and click Set.
- Click Add Prefix.
- In Network, click Any and in Action, select Permit.
- Click Apply and then click Save.
- Create a route map for the IP prefix list created in step 3.
- Click Set next to Route Map.
- Click Add Route Map.
- Add new match criteria with IP prefix.
- Select the IP prefix created in step 3 and action Permit.
- Click Apply and then click Save.
- Apply edited route map to route re-distribution.
- On the Tier-0 Gateways page, expand Route Re-Distribution and click Edit
- From the drop-down menu in the Route Map column, select the route map you created in step 4.
- Click Apply and then click Save.
Create a Tier-1 Gateway
A tier-1 gateway is typically connected to a tier-0 gateway in the northbound direction and to segments in the southbound direction.
Prerequisites
Verify that you have created a tier-0 gateway.
Procedure
- Log in to the NSX Manager.
- Select .
- Click ADD TIER-1 GATEWAY.
- Enter a name for the gateway. For example, ContainerAviT1
- Select a tier-0 gateway to connect to this tier-1 gateway. For example, ContainerT0.
- Select the NSX Edge cluster. For example, select EDGECLUSTER1.
- After you select an NSX Edge cluster, a toggle gives you the option to select NSX Edge nodes.
- Select a failover mode or accept the default option of Non-preemptive.
- Accept the default options for remaining settings.
- Click SAVE.
- (Optional) Configure service interfaces, static routes, and multicast settings. You can accept the default values.
Create a Tier-0 Uplink Segment and Overlay Segment
The tier-0 uplink segment provides the North-South connectivity from NSX to the physical infrastructure. The overlay segment provides the Service Engine management NIC with the IP address.