Part 6 – Configure Edge Services Router (ESG)

In this series, we are going to configure our Edge Services Router in NSX 6.4

Blog Series

Installing NSX-V 6.4

NSX-V Firewall Service Composer

An ESG router will have an UPLINK interface connected to our Managament portgroup wherein it can connect to the external network such as Internet. The INTERNAL Interface on the ESG is connected to the Distributed Logical router.

The main purpose of an ESG router is to enable our Virtual machines to gain access to the outside world.

These are the functions an ESG router can offer

Firewall
Load Balancer

Routing
VPN Services
NAT

Create Edge Service Gateway

Select NSX Edges tab in the left panel – Click Add and choose Edge

Choose a name and select Deploy Control VMs to deploy VM for the router.

Specify the username and password and click Next.

Click on Add Edge Appliance VM.

Click Next to proceed

In the configure Interface tab, we define two interfaces for edge services router

ESG-2-Internet will be our Uplink and it’s connected to our Management Network – VLAN 1611. We also need to add an IP address and this IP will need to communicate to our VLAN1611 gateway.

The 2nd interface on the ESG is for a connection to the Internal Network which is a connection to our Distributed logical router

ESG-2-DLR will be our Internal network, we connect that network to VLAN2711. VLAN 2711 is a transit network connection to our DLR router. We also need to add an IP address and this IP will need to communicate to our VLAN2711 gateway.