Managing NSX with Ansible
15 Jun 2016Overview
In this article we will cover how to manage NSX Manager and NSX Edge settings using Ansible Playbooks.
In this article we will cover how to manage NSX Manager and NSX Edge settings using Ansible Playbooks.
Is the NSX Distributed Firewall supported on vSphere Standard Switches?
In this post we will create a helper function to retrieve the vdnScope’s in our environment. This is important as a large number of calls we make to NSX will require a ‘scopeId’.
In this series of articles we will configure our NSX environment so it can support a number of isolated test environments, which we will dynamically deploy using our python script. Our end script will be idempotent - which means if its run multiple times it won’t do any harm. In this post we will prepare our lab with a Perimeter Edge Device, a Distributed Logical Router, and a couple of Logical Networks.
Quick start guide to getting an environment setup ready to write some python scripts to control NSX.
I’m currently involved in a large scale automation project, a key part of this project is aligning a large number of teams, platforms and technologies. To provide guidance to all involved, the aims and principles of the project have been documented, to ensure consitency during the design and proof of concept implementation. Whilst writing this document I deliberately pulled references from non-IT sources, to reinforce how fundamental these principles are to success.
Whilst building out a new environment I needed a really quick script to populate a Distributed Virtual Switch (dvs), mirroring the Port Group configuration of a Standard Switch (vss).
Whilst deploying a brand new vROps 6.1 environment today I noticed a couple of additional hurdles to enabling SSH that hadn’t been there previously.
Its not an uncommon occurance for an account to become locked out either through user error or a configuration issue (for example a monitoring service using an out of date credential). The below details the process to reset a user account which has become locked out. This isn’t new information, and there are various KB’s detailing this, but I’m just including it as it was a step in the vROps 6.1 enable ssh post.
Recently I’ve had a few discussions during which statements have been made around NSX’s ability to firewall the VMKernel port of a Hypervisor, using its distributed firewall functionality. So I’m planning on putting this to bed once and for all!