In this section, the specific networking required to support the NSX-T overlay networks are configured on sfo01-Leaf1A. Figure 18 shows three networks, VLANs 2500, 1647, and 1648. VLAN 2500 is used to support NSX-T TEPs and VLANs 1647 and 1648 are used for north-south traffic into the NSX-T overlay.

Note: The physical connections from the VxRail nodes to the leaf switches use the PCIe card in slot2.

Figure 18.     NSX-T networking

1. Configure the interface VLAN 2500 to carry east-west overlay traffic. This VLAN uses the ip helper-address command to forward DHCP requests to the DHCP server.

sfo01-Leaf01A(config)# interface vlan 2500

sfo01-Leaf01A(conf-if-vl-2500)# description sfo01-w-host-overlay

sfo01-Leaf01A(conf-if-vl-2500)# no shutdown

sfo01-Leaf01A(conf-if-vl-2500)# mtu 9216

sfo01-Leaf01A(conf-if-vl-2500)# ip address 172.25.101.251/24

sfo01-Leaf01A(conf-if-vl-2500)# ip helper-address 10.10.14.5

sfo01-Leaf01A(conf-if-vl-2500)# vrrp-group 250

sfo01-Leaf01A(conf-vlan2500-vrid-250)# virtual-address 172.25.101.253

sfo01-Leaf01A(conf-vlan2500-vrid-250)# exit

sfo01-Leaf01A(conf-if-vl-2500)# exit

2. Create VLAN 1647 and assign an IP address. This VLAN is used to carry north-south traffic from the Edge service cluster configured in Configure NSX-T North-South Connectivity.

sfo01-Leaf01A(config)# interface vlan1647

sfo01-Leaf01A(config-if-vl-1647)# description sfo01-w-uplink01

sfo01-Leaf01A(config-if-vl-1647)# no shutdown

sfo01-Leaf01A(config-if-vl-1647)# mtu 9216

sfo01-Leaf01A(config-if-vl-1647)# ip address 172.27.11.1/24

sfo01-Leaf01A(config-if-vl-1647)# exit

3. Create VLAN 1649. This VLAN provides north-south traffic flow between the transport nodes and the Tier-1 Gateway you created in Configure NSX-T North-South Connectivity.

sfo01-Leaf01A(config)# interface vlan1649

sfo01-Leaf01A(config-if-vl-1649)# description sfo01-w-edge-overlay

sfo01-Leaf01A(config-if-vl-1649)# no shutdown

sfo01-Leaf01A(config-if-vl-1649)# mtu 9216

sfo01-Leaf01A(config-if-vl-1649)# exit

4. Configure VxRail node ports as VLAN members for VLANs 1647, 1649, and 2500.

sfo01-Leaf01A(config)# interface range ethernet1/1/17-1/1/18

sfo01-Leaf01A(conf-range-eth1/1/17-1/1/18)# switchport trunk allowed vlan 1647,1649,2500

sfo01-Leaf01A(conf-range-eth1/1/17-1/1/18)# end

5. Configure eBGP for the peering with the ESGs.

sfo01-Leaf01A(config)# router bgp 65101

sfo01-Leaf01A(config-router-bgp-65101)# neighbor 172.16.47.2

sfo01-Leaf01A(config-router-neighbor)# advertisement-interval 5

sfo01-Leaf01A(config-router-neighbor)# bfd

sfo01-Leaf01A(config-router-neighbor)# fall-over

sfo01-Leaf01A(config-router-neighbor)# password <bgp-password>

sfo01-Leaf01A(config-router-neighbor)# remote-as 65000

sfo01-Leaf01A(config-router-neighbor)# timers 4 12

sfo01-Leaf01A(config-router-neighbor)# no shutdown

sfo01-Leaf01A(config-router-neighbor)# exit

sfo01-Leaf01A(config-router-bgp-65101)# neighbor 172.16.47.3

sfo01-Leaf01A(config-router-neighbor)# advertisement-interval 5

sfo01-Leaf01A(config-router-neighbor)# bfd

sfo01-Leaf01A(config-router-neighbor)# fall-over

sfo01-Leaf01A(config-router-neighbor)# password <bgp-password>

sfo01-Leaf01A(config-router-neighbor)# remote-as 65000

sfo01-Leaf01A(config-router-neighbor)# timers 4 12

sfo01-Leaf01A(config-router-neighbor)# no shutdown

sfo01-Leaf01A(config-router-neighbor)# end

Note: The BGP password is set during the configuration of the Tier-0 gateway in Configure NSX-T North-South Connectivity.

6. Update the existing route map to allow the new networks to pass through the leaf-spine fabric.

sfo01-Leaf01A(config)# ip prefix-list spine-leaf seq 70 permit 172.25.101.0/24

sfo01-Leaf01A(config)# ip prefix-list spine-leaf seq 70 permit 172.25.102.0/24

sfo01-Leaf01A(config)# ip prefix-list spine-leaf seq 90 permit 172.16.49.0/24

7. Repeat the steps using the appropriate values from 0, for the remaining leaf switches.

Note: If any of the workload subnets need to have access to the underlay network, additional IP prefix lists will need to be added.