Upgrading everyday security Commpact Manual de usuario descargar pdf (Pagina 31)

7 Type the MAC address for the interface. If HA is enabled, type two management IP addresses in CIDR

format.

NOTE Heartbeats of the two NSX Edge HA virtual machines are communicated through these

management IP addresses. The management IP addresses must be in the same L2/subnet and be able to

communicate with each other.

8 Change the default MTU if required.

9 In Options, select the required options.

Option Description

Enable Proxy ARP

Supports overlapping network forwarding between different interfaces

Send ICMP Redirect

Conveys routing information to hosts

10 Type the fence parameters and click OK.

11 (Optional) Repeat the above steps to add additional interfaces.

12 Click Next.

Configure the Default Gateway

If you installing an NSX Edge services gateway, provide the IP address for the NSX Edge default gateway.

Procedure

1 On the Default Gateway page, select Configure Default Gateway.

2 Select the interface that can communicate with the next hop or gateway IP address.

3 Type the IP address for the default gateway.

4 In MTU, the default MTU for the interface you selected in Step 2 is displayed. You can edit this value,

but it cannot be more than the configured MTU on the interface.

5 Click Next.

The Firewall & HA page appears.

Configure Firewall Policy and High Availability

Configure the default firewall policy and HA parameters.

If you do not configure the firewall policy, the default policy is set to deny all traffic and logs are disabled.

You must configure HA parameters for high availability to work on network configurations on NSX Edge.

NSX Edge supports two virtual machines for high availability, both of which are kept up to date with user

configurations. If a heartbeat failure occurs on the primary virtual machine, the secondary virtual machine

state is changed to active. Thus, one NSX Edge virtual machine is always active on the network.

Procedure

1 On the Firewall & HA page, select Configure Firewall default policy.

2 Specify whether to accept or deny incoming traffic by default.

3 Select whether to log incoming traffic.

Enabling default logging may generate too many logs and affect the performance of your NSX Edge.

Hence, it is recommended that you enable default logging only while troubleshooting or debugging.

Chapter 4 Installing NSX Components

VMware, Inc. 31

1 2 ... 26 27 28 29 30 31 32 33 34 35 36 ... 57 58

Sin comentarios

Upgrading everyday security Commpact Manual de usuario Pagina 31