We began this chapter by discussing and deploying primary and secondary NSX managers, followed by learning how to configure VXLANs and segment IDs. We then configured our transport zones, which define the scope of logical switches in your environment. A logical switch can only be part of one transport zone, and there can only be one universal transport zone in a cross-vCenter NSX environment. We then looked at creating logical switches and L2 bridges. L2 bridges connect your logical networks to your physical networks for seamless network integration and extension. We looked at deploying a distributed logical router to enable L2 bridging. We also got started with the Edge services gateway by deploying it. We protected our environment by deploying a logical firewall and configuring rules in it. We finished the chapter by configuring the Edge services gateway firewall service, which is similar to the logical firewall configuration. Ideally, the Edge services gateway firewall protects north-south traffic, while the logical firewall protects east-west traffic.

In Chapter 5, Edge Services Gateway, we will look at the NSX Edge gateway services and deploy and configure multiple Edge services.