NSX网络虚拟化部署手册

第一步，部署NSXManagerAppliance

导入OVA文件

DeployOVFTempUte

1SourceSelectsource

Selectmsourcelocation

1aSetoctsource

1bReviewdetailsEnteraURLtodownloadandinstalltheOVFpackagefromtheInte-net.orbrowsetoalocationaccessblefromyourcomputer,such

asalocalherddnve.anefwortcshare,oraCCXDVDdrtve.

2Destination

Oura.

2aSelectnameandfolder

IF)

2bSelectaresource

©Localfile

2cSeloctstorage

Bioww..AJsers/vniwBro/Downloe(fe/VMwBre-NSX-Manag«r-651366401wa

3Readytocomplete

确认版本号

选择NSXManager的管理端口组，与vCenter通信运用。

DeployOVFTempUU①“

1SourceSetupr«twor1(s

Configuethenetworksthedeployedtemplateshoulduse

▼1aSelectsource

\Z1bReviewdetails

31cAcceptEULAs

2D«»Un«tlon

32aSelectnameandloidef

32bSelectaresource

N/2CSelectstorageIPprotocol:IPv4IPlocation:Static-Manual❶

2dSetupnetworks

2eCustomizetemplate

Dettirwtlon:Vian700-ProtocolMttings

NoconiguratKXineededforthisnetwork

Cancel

确认EULA和选择部署的集群与存储后，对NSXManager进行自定义，这里设置

admin密码和CLI模式的密码。

DcptoyOVFTemplate⑦.

1SourceCustcxnizetemplate

Custom。thedeptoymentpropertiesofthissoftwaresolution

V1aSelectsource

31bReviewdetals。1panoArfyhAftanmvnltflvnliiAAlwiwnmrtCAIIACMAHI

>/1cAcceptEULA»

UsermustvisitWebUlorCLI

2DMtlnatlon▼ofNSXManagertoconfirm2sections

theconftguration

32aSeioctnameandfolder

CUUserPasswordThepasswordfordefaultCUuMfforthisVM.

32bSelectaresource

Enterpassword

32cSelectstorage

Conflrmpassword

2dSetupnetwork*

2eCustomizetemplateCUPrr^egeMode

Pasjword

3Readytocomplete

•Net*ortcproperties。

»DNS

*S«nncogCcnfigufQbon

绽开NetworkProperties,填写NSXManager主机名和配置管理的IPv4地址

与vcenter通信运用

绽开DNS和ServicesConfiguration,配置DNS和域名，配置NTP服务器信息

留意：NSX的时间同步必须要与vcenter和esxi主机一样,时间敏感！

其次步，设置NSXManager与vCenter关联。

登陆s://172.20.21.3,运用admin和设置好的密码登陆NSXManager管理

页面。

（可选）选择ManagerApplianceSettings,配置IP、NTP、主机名、DNS和

备份复原等信息。

O

NSXManagerVirtualAppKanc*Managomont

TWn«S«<BrvB皿

ForSSOcomguBloniD»ortcoo«Y»c9yil・Nsr*dZQZVm8tUtyaap0iancaandNTPMfwrthcMdMinl»f«ootmw*dMtoUMP«MmeNTP

•en^ruwd“tieSSO•»»*•r

MTPSw

TirreiofwuTC

D«to<Tc1QH7a)131OW:3t

Yowcantp«c«yZPPeworn»m«ofzM*og“wrMcanxBOh«dZ・0《menecfw^"$

S>WogServer

PM

PwtXXM

V".Qj回■-172.M.21.J

VWwareNSKNUna^VlHualApplUnce

DtxmfName«nwwimJoe«i

P*4hlDHn®>©r

BactugARMM3g

NMnMfc256J565280

DeteiAGag”17220A1

NSX8«<vca

P*WfaLrMT

DNSS«nmUnccrAQ^EtM

Tofwctfva«*totfectimfrenceduaa^ahoearwm,youmutl(»wd«oneormoreDSS・fvaccowvoatoESXhotiiandofwvSc^amcoo^onenii(•pcHwyorMCOMEMTT

・ww«j.G«n«nratobtoS»wfM»fntielrewotld«WJ<TW5#cMpon»O4iiy)

VMDHSS^WO

^irrwyServer177JO^1.1

8«condafyS«v»«

fMDWS^wo

PnimryS*rwr

S«conderyServe*

S^rcM>om*ft»«m««mlocal

选择ManagevCenterRegistration配置SSO和vCenter信息，显示绿灯后

NSXManager配置完成。

WTTIHGtLeo*it*8«fvte«UncorAQvr*EcM

OonMForvtoo^5.1mdSOOM*.you…oonlgtr*Loota/pS«<vc««n<jpnMMZSSO•Jnw»m©ftoyrKSXM*n«9t<TwniS«MC«as•toA*Bcu・r.■

f^cemvieModtoMir«KTPMfwbSSOconlg^nbontowortcor*cfyr.

SSLOftAc^wLMupSmtt72<202127444.loofcupMfv^cMMi

»»3eCooMCMG

B»Ckup«ARMM

vCemerS*cv—&M

MSXManagementS«<MC«

CcnnecSpto•«C«iMarw«wcM$XMan»09<TWCtto**WWWBfriWWuctjrvnwwr<xyHTIFSpod(40)rtMdttoXop*'«dlorOXmwrMcatonFftX

lteh*Q»vw48«Mce,E8<«odVC.For.3..o<po*ttf»Qw«f*d.•••MCAOA€••*<endUwACCMA'C/CNB阳torXU.crVcZNSXkMaMoxXUpQ«MGuW

，ycu<©H*M«ve<♦bMMlDy•StiverAppMrwe.P«MM•<mr»M•8copna・CPUandmenwy•atnto2apoiance0.

gmtrserver17220212

•C.r..—T*M・"Ovtg，J，g，8CMYO

第三步，配置NSX虚拟网络

稍等一会，重新登陆vCenter主页（运用NSX注册vCenterSSO和vCetner服

务的权限，如：administrator@vsphere.local）,会出现Networking&

Security控件和按钮，点击进入NSX管理页面。

Max.再”…944)。

vSphteM>bCB«MDNSXE

vmware-vSpbereWebClientQIAdmstralor^VSPXRCLOCAL'IF

1）点击Installation,可见NSXManager信息：并按+添加首个Controller

节点。

vmware'vSphereWebClientft0UiAdmrw»^torcvsPHERELOCAL-i…,

JHome，©*InatoUtton

HoelPrepamtcnLovcalNetwofXPreperMcnSecnceOeplornecS

MSXManson

Q»

N&XMvMtariPAaMaWw

HFrwwsl密1722a21.3172J0J130172JO212601366401

《Spot/GuaP

❸S«rvKeDoAnoont

七SovietCorpceer

<£DateSecumy

WFtowMomtonng

ActrrtyMonorng

■Netwodiing&SecurityInvwntcxy

gH&XManagerv

MmMode0ManagarCX<W<ni，MMWM)«Sof»*vWr»StttM

corWolef-11722021241用17220,215RWCXFOM60▼NOE0

配置Controller信息，包括创建IPPool用于Controller运用，Connected

To的端口组，以及IPPool地址是与NSXManager通信运用。

一AddIPPool

AstaticIPpoolcanbespecifiedas

alistofcomma-separatedIPaddressranges,

forexample192.168.1200or

abcd:87:87::10-abcd:87:87:i0.

OKCancel

Controller创建必需留意时间同步，创建胜利。

NSXControllernodes

♦X0(QFilter

NameNodeNSXManagerCluster/Resour...DatastoreHostSoftwareVersi...Status

controller-1411-8172.20....Resourcesdatastore16.0yNormal

2）选择HostPreparation并选择须要安装的集群点击instal1,安装agent

完成。

留意：若配置和NSX的域名，须要在DNS添加域名的解析，否则无法安装

agent©

Installation

ManagementHostPreparationLogicalNetworkPreparationServiceDeployments

NSXManager:▼:

InstallationofnetworkvirtualizationcomponentsonvSpherehosts

Clusters&HostsinstallationstatusFirewaaVXLAN

▼曲LabClustery6.0UninstallyEnabledyEnabled

QyReadyyEnabled

口yReadyyEnabled

3)选择LogicalNetworkPreparation,并点击configure配置VXLANVTEP

信息。

留意：必需在此前先创建好vDS,且确保vDS所接的物理交换机MTU值大于

1600o

Configur*VXLANnetworking»

ConfiguringallhostsindusteraLabCluster-forVXLANnetwodong.

Switch:#dvSwitch\▼j

VLAN:/700

MTU:,1600

VMKNicIPAddressing:eQUseDHCP

(j)UseIPPool

IPPool:VXLANPool・；

Installation

ManagementHostPreparationLogicalNetworkPreparationServiceDeployments

NSXManager:▼

VXLANTransportSegmentIDTransportZones

Clusters&HostsConfigurationStatusSwitchVLANMTUVMKNicIPAddreTeamingPc

►Eft]LabdvSwitch7001600StaticEtt

3UnconfigureIPPod

Cluster

（可选）若没有配置DNS的环境，建议设置vCenter管理地址。

4）创建VXLAN虚拟子网ID池，若网络不支持组播则不要点击enable组播。

Installation

ManagementHostPreparationLogicalNetworkPreparationServiceDeployments

NSXManager:172.20.21^3▼

VXLANTransportSegmentIDTransportZones

SegmentIDs&MulticastAddressesallocation(systemwidesettings)EditReset

SegmentIDpool:

Multicastaddresaea:

5）创建租户的虚拟网络，本测试中配置了一个NSXDemoNetwork。

Installation

ManagementHostPreparationLogical

NSXManager:▼

VXLANTransportSegmentIDTransportZones

NameOMcnption

6）（可选）假如须要测试平安功能，点击ServiceDeployments部署。

7）点击LogicalSwitches,创建租户虚拟二层网络，本用例中创建了2个虚

拟二层网络VXLAN5001LSforWeb和VXLAN5002LSforDB°

LogicalSwitches

NSXManager:172.20.2V3|▼)

+*(QFilter▼

NameStatusTransportZoneSegmentID

3VXLAN5001LSforWebQNormal=NSXDemoNetwork5001

>•VXLAN5002LSforDB9Normal三NSXDemoNetwork5002

8）通过选择虚拟二层网络，点击添加虚机按钮，可批量把虚机的虚拟网卡接

入到对应的虚拟二层网络中。

NSXManager17220.21.3▼•R»

'19FWer

♦/X自三匕令Actions，■AJI

IUpctak

Statu*TmportZoneSegnwntO

上VXLAN5001LSforWebQNomuil三HSXDenoNetwork5001<AddD

XVXLAN5002LSforDBQNormal三NSXDenoNetwork5002ad/Swd

VXLAN5001LSforWeb-AddVirtualMachines>>

1SelectVirtualMachlnM

SeledVMsloconnecttothisnetwork

2SelectVNIC*

3—tORP*Filer(SelectedOt^cts

*Q〜

0个DHCP

031DNSServer

□6NSX_Controner.27e1cc^X»eMa7(^G4d7^7ca514cb2

□3)HSXManager

m子jNTPServer

□6TemingOOI

□6T®st»ng002

□3)T»ting003

□二7esting004

m6

N«xt4hCancel

VXLAN5001LSforWeb.AddVirtualItechines”

1MeetVirtMlMachinesSelectVNICs

SelectatleastonevnicforBSC力virtualmadwieyouwanttocorrecttothisnetwork.

3Readytocomplete

QFltef

NameNetworkHMt

MKTPSorvor回他NTPServer­Networtcadaptor1(VMNotwcxk)Q172.2Q2,2

■CHCPM3)DHCP•Networtcadaptor1(Internet)2172.2Q2.2

taCNSServer，5)DNSServer-Networkadaptor1(VMNotwork)口172.2Q2.5

BackN«xtFrCancel

点击进入VXLAN5001LSforWeb的虚拟二层网络可见接入该网络的虚机。

vmware-vSphereWebClientA®UpdM«J«t11:19AMQ|AdmciMraUxQVSPHeRE.LOCAL-IHelp

p

«Networtonfl&SecurityO1上VXLAN5001LSforWebAcftons▼

SummaryMonitorManageR«oudObjecu

QHosts■)

*VrtualMachinMHOMSVrtualMachines

ViflufilMaines者》■OI©Acsons▼XIQRtar-

dbDHCPHOMsmCovetedW

ohDHCPQ1722122

他NTPServerPowwwlOn1

@NTPServerQ172^0.22PoweredOn1

双击虚机，查看虚机网卡信息，已经接入VXLAN虚拟端口组

vmware-vSphereWebClient0updated8t11:19AMQIAdmriwtrmor©VSPHERELOCAL-I»M

&VXLAN5001LSforWefao1.NTPS«rv«rActkxw▼

NTPServer

小VMwareTooUisoutofdateonttavrtualriachneUpdateVMwartToots

•VMHjirrfwam■RaearityTag

>CPU1CPU(s),0MHzusedAa^MdTtg