As part of the NSX-T 3.0 release, an API only feature that I had discussed in a previous post (https://www.sneaku.com/2020/03/02/how-to-sync-a-dynamic-nsx-t-group-to-an-external-system/), now looks like it has had the experimental flag removed, which means it is now a supported API. This is great news for those who were looking at this set […]
When working with a customer recently, there was a question raised about how to calculate the actual number of NSX-v distributed firewall rules configured for a given VM on the dataplane of an ESXi host. Whilst the short answer was to jump onto the console of the hypervisor or SSH […]
When operating NSX-v DFW at scale, the recommendation from VMware on memory/heap usage per host is to stick to a maximum of around 80% usage. But then this often raises the question of how to monitor the actual memory/heap the the DFW is consuming per host. As the NSX-v Distributed […]
With the recent release of NSX vSphere 6.2.3 there were a couple of subtle updates to the Distributed Firewall UI that aren’t obvious at first glance. Rule ID now shown by default. The Rule ID is now shown in the Distributed Firewall UI by default. No need to continually enable […]
NSX-v 6.2 was released last week (Release Notes) and one of the features mentioned in the release notes is the Communication Channel Health feature. Show health of the communication channels: NSX 6.2.0 adds the ability to monitor communication channel health. The channel health status between NSX Manager and the firewall […]
When using the CLI of an Edge Services Gateway there are some commands that can only be run from privileged mode. This is similar in fashion to the Privileged EXEC mode in Cisco IOS devices, and also the commands to turn on and off privileged mode are identical. To turn […]
When working on a customer site recently, it was discovered that the root account on the vRealize Operations Manager 6.0 server had been locked out. This is the process we used to unlock the root account. Open up a console session to the VM Press Alt + F1 and try […]
Recently on a customer site we had a peculiar scenario where we were deploying a VM into a NSX environment via vRA and the operation was failing due to an unknown reason. However, we noticed that the IP address that vRA had allocated for the new VM was still responding […]
When logging is enabled on a Cisco ASA, it often logs way to much information and makes it difficult to troubleshoot when there are issues to be looked at. Below is a config that can be pasted into an ASA which will disable most “noisy” logs and leave you with […]
Its become quite a common occurance that I need to create encrytped zip files to send to clients, and it seems to be one of those things which I always have to Google to figure out how to do it. So to save me looking up Google all the time, […]
