Need some help in VMware NSX to route between two vSwitch in single ESXi server for different Subnet ?

People,

Using VMware NSX v6, can anyone here please assist me what is the steps that I can use to route traffic between two different vSwitch which contains VM with different IP subnet in a single ESXi server ?

The idea is to eliminate the physical router appliance so that all routing and firewalling can be done virtually in vSphere environment.

Thanks.
LVL 12
Senior IT System EngineerSenior Systems EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Aaron TomoskyDirector of Solutions ConsultingCommented:
A physical router adds vlans and interfaces but nsx calls them segments. The VMware blog explains it well
https://blogs.vmware.com/networkvirtualization/2014/07/getting-started-vmware-nsx-part-ii-building-virtual-networks.html
Senior IT System EngineerSenior Systems EngineerAuthor Commented:
Thanks Aaron,

So does this means I can deploy NSX in each of my ESXi servers and then expect it to route between two vSwitch / vDS ?

If yes, I need some guide to do that.
Aaron TomoskyDirector of Solutions ConsultingCommented:
Why not just add another vnic to the VM? While you can do what you are asking, You may want to consider not just duplicating your physical setup but redesigning based on the virtual capabilities open you.
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

Senior IT System EngineerSenior Systems EngineerAuthor Commented:
Hi Aaron,

So if I add another vNIC to each and every VM (like exchange heartbeat network) what's the default gateway ?
Aaron TomoskyDirector of Solutions ConsultingCommented:
The default gateway is what the nic uses to get out of its subnet, so to other subnets on your lan, or the Internet.
So the default gateway stays on the nic that already gives you access to the Internet.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Senior IT System EngineerSenior Systems EngineerAuthor Commented:
Hm...,
That's bit confusing.

Because the existing gateway vNIC1 in my test VM is already set to 192.168.1.1

I cannot set the other vNIC2 I the same VM to the same 192.168.1.1 ?
gheistCommented:
You need a router between two vlans. It can be a VM with some router software.
Senior IT System EngineerSenior Systems EngineerAuthor Commented:
Gheist, I used to play & test around Vyatta but it is not free anymore.

Is there any Windows server equivalent ?
Aaron TomoskyDirector of Solutions ConsultingCommented:
Back to your original question, nsx can totally do this. The blog post goes through it pretty well and the basic concept of a virtual router is the same as a physical router.

Give it access to both subnets, be the gateway.
Senior IT System EngineerSenior Systems EngineerAuthor Commented:
Aaron, quick question.

so in the real world, when using NSX Virtual Appliance, does that means the physical appliance will be just Layer 3 switch connected to the modem / FIbre Channel aggregator ?
Aaron TomoskyDirector of Solutions ConsultingCommented:
Plugin the ISP hardware to an Untagged "wan vlan" on a switch, pass the wan vlan to the VM.
Senior IT System EngineerSenior Systems EngineerAuthor Commented:
Is there any other options without using NSX perhaps ?
Because I feel that NSX is to overkill for this purpose.
Aaron TomoskyDirector of Solutions ConsultingCommented:
Something has to do the routing. So if not physical hardware than a VM. Amy Linux distro, pfsense and others are made for routing.
Senior IT System EngineerSenior Systems EngineerAuthor Commented:
Thanks !
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.