{"id":1004,"date":"2021-04-11T16:47:00","date_gmt":"2021-04-11T16:47:00","guid":{"rendered":"https:\/\/labiol.xyz\/?p=1004"},"modified":"2022-01-11T16:49:31","modified_gmt":"2022-01-11T16:49:31","slug":"deploy-and-use-standalone-edge-for-vpn-l2-in-vmc","status":"publish","type":"post","link":"https:\/\/www.labiol.xyz\/index.php\/2021\/04\/11\/deploy-and-use-standalone-edge-for-vpn-l2-in-vmc\/","title":{"rendered":"Deploy and use standalone edge for VPN L2 in VMC."},"content":{"rendered":"\n<p>For VMC you can create one VPN Layer 2.<\/p>\n\n\n\n<p>There are 3 ways to configure L2 by deploying appropriate appliances:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Deploy autonomous edge<\/li><li>Deploy HCX L2 extensions<\/li><li>Deploy standalone edge<\/li><\/ul>\n\n\n\n<p>Autonomous edge:<\/p>\n\n\n\n<p>It is quite easy when you are using the NSX Autonomous edge. There are several well described steps how to deploy and configure (using web interface) this appliance.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/o2s_sHF2S8vCUozb8U3t4iu-EMQnoxS8hv_yjx7B8FbUQFUjbr6mBDOCh_kp38erc8Wpa0LoYRAX7NE-EBQr9mDaa4pOWyk9PtxDzRkjXyTV02p1YzW0WMrGspVT1J5BoQL-e_zB\" alt=\"\"\/><\/figure>\n\n\n\n<p>From VPN -&gt; layer 2 blade you can find link to VMware autonomous edge appliances:<br><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/De66ASF_waHDjqnS_tf5KDHuL9IeGBM88V0SmTLkkbt-4qd3nTbnUXnvRTCMaLBeX_oQpwOHt7MIgGuQJ9bkw8yOGUH1LKDTkNAzVBEQ2Gq4F6rh8T5B5TjI8X1tql-q9tLXpiuc\" alt=\"\"\/><\/figure>\n\n\n\n<p>Downloaded image should have the nsx-autonomous-edge-ovf-XXXX name.&nbsp;<\/p>\n\n\n\n<p>Compatibility can be found:<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/docs.vmware.com\/en\/VMware-Cloud-on-AWS\/services\/com.vmware.vmc-aws.networking-security\/GUID-ACC0D32B-F8A6-4D64-84C2-B3CF72508507.html\n<\/div><\/figure>\n\n\n\n<p>Good example on how to install and configure autonomous edge you can find here: <a href=\"https:\/\/davidwzhang.com\/2020\/02\/24\/setting-up-l2vpn-in-vmc-on-aws\/\">https:\/\/davidwzhang.com\/2020\/02\/24\/setting-up-l2vpn-in-vmc-on-aws\/<\/a><\/p>\n\n\n\n<p>&nbsp;Benefits:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Easy to deploy and configure<\/li><li>Fast start after failure<\/li><li>Stable<\/li><li>No need to have distributed switches in on-prem environment<\/li><\/ul>\n\n\n\n<p>Disadvantages:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Limitation to 8 extended network<\/li><li>Just one L2VPN can be set up<\/li><\/ul>\n\n\n\n<p>HCX L2 extension:<\/p>\n\n\n\n<p>Similarly to the above, HCX can be deployed and configured in a quite straightforward way. You need to fulfill all the requirements described here:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/docs.vmware.com\/en\/VMware-HCX\/4.3\/hcx-user-guide\/GUID-D64901F4-6AB4-4820-9303-27927648A34D.html\">https:\/\/docs.vmware.com\/en\/VMware-HCX\/4.3\/hcx-user-guide\/GUID-D64901F4-6AB4-4820-9303-27927648A34D.html<\/a><\/li><li><a href=\"https:\/\/docs.vmware.com\/en\/VMware-HCX\/4.3\/hcx-user-guide\/GUID-8128EB85-4E3F-4E0C-A32C-4F9B15DACC6D.html\">https:\/\/docs.vmware.com\/en\/VMware-HCX\/4.3\/hcx-user-guide\/GUID-8128EB85-4E3F-4E0C-A32C-4F9B15DACC6D.html<\/a> &#8212; L2 minimum requirements<\/li><\/ul>\n\n\n\n<p>Benefits:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Advanced network technologies used by that appliance (to optimize network traffic)<\/li><li>Nice boundled in HCX as part of implementation<\/li><li>Stable<\/li><li>Can be restarted in a few second on another ESXi node in case of node failure<\/li><li>Many appliances can be deployed (on both sides &#8211; on-prem and in VMC)<\/li><\/ul>\n\n\n\n<p>Disadvantages:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Distributed switches are needed<\/li><li>HCX appliances need some resources (usually it is not an issue, but need to be calculated before implementation)<\/li><\/ul>\n\n\n\n<p>NSX L2 edge:<\/p>\n\n\n\n<p>Search for the newest NSX-l2t-client-large image and download it.<\/p>\n\n\n\n<p>Deploy the OVF template as usual:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/7gyo7ST9vc0MWSiUFyJRwp3sXhZofMUrPNt567ibCyDFgpCP9apJzR4ONJnK8Vt3g94BmUvmfSArFrYLELnXUqFGPxGLaljRW4DbDHs1UnKyeiU4GA8qB8i0tIveizkWodVER8e0\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/0PUNCr_BN_BrF4fYCmiN2tkfk82nOt27hBTfW7cT66ely7-bhWOHkc9v0313itMQVcsP0xMKUKLCM2rdkGaUIgzvMGtX5jvd7CuHzsTfQPSt0y8hWtvDJ37mbfEszAeI6hKO10CI\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/82vEP6hAYGLi-ncDTOArfBbgoE15yj_sreiIYtt_IEG-9NEFkrhXDGpzsmWTlMbyv6AR7_UqxufSa5h3g9cg2P_rfqE7AG7V70E3An6Hp0iNC3TVdQPtlKYt4PhMg9rL7_2Tqj85\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/WluhkaV2gwGktVsXAUowJQ1yZgdw94c-C5_GKBhLuK9dn71xf47Y7dMubcmztoUNaoy8WYh5bI8Svss2P0-rQTRjcLEU9y_q8gqkzlWqLacnsJy8GZooqF_lmv9aqjCimbi7D97g\" alt=\"\"\/><\/figure>\n\n\n\n<p>Pay attention to IP address (should be the same as the uplink interface and \u201cRemote Private IP\u201d in console.cloud.vmware.com VPN blade.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/SCpKlVE27MQNgLXXMAu8wxuYLCE_QtuZRYKoHMAUH0Xo1v-k1ir4S8tWNRp-lVmpHhpAD7SVcjKkGF5CE9tKDQ2dyvQS3pnkWvsb4sn6AUZHmPvaAk52hx0gyhUaz9go6KdEVuiB\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/3yCmuKck3RvSKzOE6orP0A6gUTSMaljGkyX86YQDlScO0j0O7IJSHIQlNcJoVK1EPWPzQCG0__9SsXcAF4mty3lIp0x0dCU16s6tyReznndyp8D5N_SXzOOe6W_tRzsZpV_D-8-u\" alt=\"\"\/><\/figure>\n\n\n\n<p>Peer Address and peer code should be also readed from the VPN blade (and configuration file).<\/p>\n\n\n\n<p>Be sure that the values are set correctly.<\/p>\n\n\n\n<p>There is another option you can set: \u201cEnable TCP Loose settings\u201d. This option is important if you want to keep your connection after the system has been migrated to VMC.<\/p>\n\n\n\n<p>Also set HA Index to 0 (or other appropriate value).<\/p>\n\n\n\n<p>After deployment you can login to the appliance and start ssh by:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/Lizdfyq9pDxrDlsR-bf8ZlnHSLM_vjxr25d1SXXfHsMd_tUAQt7lZ7zmkp3oDn6BDYkvPai3zhBY4y5zfV7oy0VNi8Vsiflqovg510nQsLX3hkkRa4qJ1E_QWrs5FtJQ3lVJEnBp\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/PKkT6gayPgl6J0sXbNZsm5nCCYbcUXEXWG4IPAi94S9tl5lPThNU114he2gOcgoGAAZU6C9qn-OBlFkAc0QQIkdETqKlK3xbwGodIElB1IoPoMFfTS2ZhsKHXfuDgizi912941AY\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh4.googleusercontent.com\/mKBMeUtcy3tup-8VNf1KMKOO5tmLvhBqABry41g3Ix9fYEv-7q4polrGGjNc2LMudkbfATUqhgs3e6BCLwPrGVfLjt4AmGm8ZSQgDDca_2ulJb40FN6eTMfy8yoPJ6aZQqqByqoC\" alt=\"\"\/><\/figure>\n\n\n\n<p>Above VTI is one configured during appliance installation (and configuration wizard).<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/uubZJdKL-UOvk4wIr4wMFbbkhXe8CcUbe-I0l4Sl92tSZNjuGyWJ6DNEG9lkDUXia63QHlui5j4szAcLU4ENVpcxFRhR0KVpH25k93LiT87fwzGxPeLf8kS4dJCo2TZcYU5tNAAz\" alt=\"\"\/><\/figure>\n\n\n\n<p>After a while (couple of minutes) the tunnel should be in up state:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/nYsKY-NrCo-euLSDb_Iwq3hK8KmAodoVrGIlOAxmmyYW9ady5_0Kf7lT_KZrD9L_iruMYnVbP4tLoDKMBFFZU8A6gH0P0mD1qJ04679JuMfaSO_wX8VqLpXHuUmqBrTSEWwk-qeh\" alt=\"\"\/><\/figure>\n\n\n\n<p>Also from appliance the tunnel should be visible:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/kCdEgyGj0VHAJW0d5zoF8eJe-h857jeXrBEzwPeHIuY98H95IY8eV3DNUzAVzUmRAvl-yoTqJwM4WNC37E6KDf0k9kmBymYd6mQkIjARLK1w_fl775_lUwHdZDUTcQ4VvUiRQpUn\" alt=\"\"\/><\/figure>\n\n\n\n<p>To add an additional vlan:segment pair you can add in the following way:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh3.googleusercontent.com\/8Ue7dDHZcBZGM6djDRZtXn9NCI9SBSaimvdGSEB9DdKrMt6jVSRhqjjqk5edlNuMJ2qAJ6niTUNUKFFG0aeW-LT2w1y0fdOBp0xyeVx7BYmume43bibcr9Dk1ZkqdEfcFbBgdPJp\" alt=\"\"\/><\/figure>\n\n\n\n<p>command : sub-interface pairs VLAN:segment.<\/p>\n\n\n\n<p>Following command can be useful:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><code>enable \/ conf t<\/code><\/li><li><code>show sub-interface<\/code><\/li><li>Configure set of pairs: <code>for i in {100..115}; do echo sub-interface pairs $i:$i; done<\/code><\/li><li>Remove sub-interface: <code>no sub-interface pairs vlan:tunnel_id<\/code><\/li><\/ul>\n\n\n\n<p>&nbsp;Benefits:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Easy to deploy and configure<\/li><li>Fast start after failure<\/li><li>Stable<\/li><li>No need to have distributed switches in on-prem environment<\/li><\/ul>\n\n\n\n<p>Disadvantages:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Not as easy to configure as autonomous edge<\/li><li>Just one L2VPN can be set up<\/li><li>Potential problem with support (needs to be verified if it is still supported by VMware)<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>For VMC you can create one VPN Layer 2. There are 3 ways to configure L2 by deploying appropriate appliances: Deploy autonomous edge Deploy HCX L2 extensions Deploy standalone edge Autonomous edge: It is quite easy when you are using the NSX Autonomous edge. There are several well described steps &hellip; <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-1004","post","type-post","status-publish","format-standard","hentry","category-vmware"],"_links":{"self":[{"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/posts\/1004","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/comments?post=1004"}],"version-history":[{"count":3,"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/posts\/1004\/revisions"}],"predecessor-version":[{"id":1007,"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/posts\/1004\/revisions\/1007"}],"wp:attachment":[{"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/media?parent=1004"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/categories?post=1004"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.labiol.xyz\/index.php\/wp-json\/wp\/v2\/tags?post=1004"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}