Vmware VCP Training Course Live Online

I will cover

The brief overview of the course content
How you can access the operating course
How you can access the recording of the access
Questions & Answers

I will cover

Compare and Contrast the Benefits of a VMware NSX Implementation
• Determine challenges with physical network implementations
• Understand common VMware NSX terms
logo is restricted to individuals who have achieved the
respective certification.
• Differentiate NSX network and security functions and services
• Differentiate common use cases for VMware NSX

I will cover

• Differentiate component functionality of NSX stack infrastructure components
• Compare and contrast with advantages/disadvantages of topologies (star, ring, etc.) as well
as scaling limitations
• Compare and contrast VMware NSX data center deployment models
• Prepare a vSphere implementation for NSX

I will cover

Differentiate logical and physical topologies, components and services
Differentiate logical and physical security constructs
o Endpoint Security
o Data Security
o Flow Monitoring
o Activity Monitoring
o Distributed Firewall
o Perimeter Firewall

I will cover

Understand VMware NSX Integration with Third-Party Products and Services
Understand integration with third-party partner tools and systems using NSX REST APIs
Determine integration with third-party services
o Network services
o Security services
o Load Balancing
o Anti-malware
o IDS/IPS
 Determine integration with third-party hardware
o Network Interface Cards (NICs)
o Terminating overlay networks
o HW VTEP
o VXLAN offload
o RSS
Install/register a third-party service with NSX

I will cover

Understand VMware NSX Integration with vRealize Automation (vRA)
Understand integration with vRealize Automation
• Demonstrate NSX deployment capabilities built into vRealize Automation
• Compare and contrast Network Profiles available in vRealize Automation
• Understand NSX preparation tasks for attaching a network profile to a blueprint
Discern vRealize Automation preparation tasks for deploying a machine with on-demand
network services

I will cover

Differentiate physical network topologies
o Differentiate physical network trends
o Understand the purpose of a Spine node
o Understand the purpose of a Leaf node
Differentiate virtual network topologies
o Enterprise
o Service Provider Multi-Tenant
o Multi-Tenant Scalable
Given a specific physical topology, determine what challenges could be addressed by a
VMware NSX implementation.
Differentiate physical/virtual QoS implementation
Differentiate single/multiple vSphere Distributed Switch (vDS)/Distributed Logical
Router implementations
Differentiate NSX Edge High Availability (HA)/Scale-out implementations
Differentiate Separate/Collapsed vSphere Cluster topologies
Differentiate Layer 3 and Converged cluster infrastructures

I will cover

Determine Physical Infrastructure Requirements for a VMware NSX Implementation
• Discern management and edge cluster requirements
• Differentiate minimum/optimal physical infrastructure requirements for a
VMware NSX implementation
• Determine how traffic types are handled in a physical infrastructure
• Determine use cases for available virtual architectures
• Describe ESXi host vmnic requirements
• Differentiate virtual to physical switch connection methods
• Compare and contrast VMkernel networking scenarios

I will cover

Configure and Manage vSphere Distributed Switches (vDS)
• Compare and contrast vDS capabilities
• Create/Delete a vDS
• Configure dvPort settings
• Add/Remove uplink adapters to dvUplinkgroups
• Create/Configure/Remove virtual adapters
• Migrate virtual machines to/from a vDS
• Monitor dvPort state
• Determine use cases for a vDS
• Add/Remove ESXi hosts from a vDS
• Edit general vSphere vDS settings
• Add/Configure/Remove dvPortgroups

I will cover

• Compare and contrast common vDS policies
• Configure dvPortgroup blocking policies
• Explain benefits of Multi-Instance TCP/IP stack
• Configure load balancing and failover policies
• Configure VLAN settings
• Configure traffic shaping policies
• Enable TCP Segmentation Offload (TOE) support for a virtual machine
• Enable Jumbo Frame support on appropriate components
• Determine appropriate VLAN configuration for a vSphere implementation
• Understand how DSCP is handled in a VXLAN frame

I will cover

Comprehend physical infrastructure configuration for NSX Compute, Edge and Management
clusters (MTU, Dynamic Routing for Edge, etc.)
Prepare a Greenfield vSphere Infrastructure for NSX Deployment
o Configure Quality of Service (QoS)
o Configure Link Aggregation Control Protocol (LACP)
Configure a Brownfield vSphere Infrastructure for NSX
Determine how IP address assignments work in VMware NSX
Determine minimum permissions required to perform an NSX deployment task in a vSphere
implementation

I will cover

• Install/Register NSX Manager
• Prepare ESXi hosts
• Deploy NSX Controllers
• Understand assignment of Segment ID Pool and appropriate need for Multicast addresses
• Install Guest Introspection
• Create an IP pool
• Understand when to use IP Pools versus DHCP for VTEP configuration

I will cover

Based on a given upgrade scenario, identify requisite steps and components for upgrading to NSX 6.x
Upgrade vCNS 5.5 to NSX 6.x
Upgrade vCNS Virtual Wires to NSX Logical Switches
Upgrade to NSX Components
o Upgrade to NSX Firewall
o Upgrade to NSX Edge
o Upgrade vShield Endpoint from 5.5 to 6.x
o Upgrade to NSX Data Security
Upgrade NSX Manager from 6.0 to 6.x
Update vSphere Clusters after NSX upgrade
Understand the impact of availability to the aspects of NSX during an upgrade

I will cover

• Understand the function of a Transport Zone
• Understand proper addition of a Transport Zone
• Understand necessity to expand or contract a Transport Zone
• Edit a Transport Zone
• Understand appropriate use of Control Plane mode modification of a Transport zone

I will cover

Given a scenario, demonstrate the proper way to add/remove a Logical Switch
Determine use case for and contrast the three Control Plane Modes
o Multi-cast
o Hybrid
o Unicast
o Determine use case for connecting a Logical Switch to an NSX Edge gateway
Deploy services to a Logical Switch
Demonstrate multiple ways of adding or removing virtual machines from a Logical Switch
Test Logical Switch connectivity

I will cover

• Determine areas where VXLANs should be configured
• Understand physical network requirements for virtual topologies with VXLANs
• Understand how to prepare a vSphere cluster for VXLAN
• Determine the appropriate teaming policy for a given implementation
• Understand how to configure and modify the options of a Transport Zone
• Understand how prepare VXLAN Tunnel End Points (VTEPs) on vSphere clusters

I will cover

• Given a scenario, determine an appropriate High Availability configuration for Layer 2 Bridging
• Understand how to add a Layer 2 Bridge to an NSX Edge device
• Determine when Layer 2 Bridging would be required for a given NSX implementation
• Determine use cases for multiple Layer 2 Bridges
• Compare and contrast software and hardware bridging

I will cover

Install NSX Edge
Understand how to connect/disconnect a Logical Switch from a logical router
Understand and describe the different types of router interfaces
Determine NSX components needed to build out topologies with logical routers
Understand how to add and configure a new logical router
Determine use case for and configure a management interface
Determine use case for and configure High Availability for a logical router
Configure routing protocols
o Static
o OSPF
o BGP
o IS-IS
Configure default gateway
Determine if cross-protocol route sharing is needed for a given NSX implementation
Understand how to configure administrative distances for routing
Understand configuration differences between iBGP and eBGP
Understand and configure route redistribution

I will cover

• Differentiate when to use the two topologies for load balancing
• Understand how to configure load balancing
• Configure and understand service monitors
• Understand how to Add/Edit/Delete a server pool
• Understand how to Add/Edit/Delete an application profile
• Understand how to Add/Edit/Delete virtual servers
• Determine appropriate NSX Edge instance size based on load balancing requirements

I will cover

Configure and Manage Logical Virtual Private Networks (VPN)
Understand how to configure IPSec VPN
o Configure IPSec VPN parameters
o Enable logging
Understand how to configure Layer 2 VPN
o Add Layer 2 VPN Client/Server
o View Layer 2 VPN Statistics
Configure Network Access/Web Access SSL VPN-Plus
o Edit Client Configurations
o Edit General Settings
o Edit Web Portal Designs
o Add/Edit/Delete IP Pools
o Add/Edit/Delete Private Networks
o Add/Edit/Delete Installation Packages
o Add/Edit/Delete Users
o Add/Edit/Delete Login/Logoff script
Determine appropriate VPN service type for a given NSX implementation

I will cover

• Understand proper use and addition of a DHCP IP Pool
• Enable a DHCP IP pool
• Determine use and proper implementation of DNS services
• Determine when and how to configure Source NAT
• Determine when and how to configure Destination NAT
• Given a scenario, compare and contrast proper DHCP uses

I will cover

Given a scenario, compare and contrast proper HA uses
Determine service availability during an Edge High Availability failover
Differentiate NSX Edge High Availability and vSphere High Availability
Configure NSX Edge High Availability
o Configure heartbeat settings
o Configure management IP addresses
Modify and existing Edge High Availability deployment
Determine resource pool requirements for a given Edge High Availability configuration
Configure Equal-Cost Multi-Path Routing (ECMP)
o Determine ECMP timers
o Understand process flows
Combine ECMP with other stateful services

I will cover

• Add/Edit/Delete an Edge Firewall rule
• Configure Source/Destination/Service/Action rule components
• Compare and contrast between Edge Rule Types (PreRules/Internal/User Rules/Default Rules)
• Change the order of an Edge User Firewall rule
• Demonstrate how to configure an Edge Firewall PreRule
• Understand the limitations of ECMP and Edge Firewall Policy

I will cover

Understand VM IP Address learning for the purposes of DFW vCenter attribute learning
Differentiate between Layer 2 and Layer 3 rules
Differentiate between entity-based and identity-based rules
Understand firewall rule entities
Determine rule processing order
Understand rule segregation
Demonstrate steps to Add/Delete a Distributed Firewall rule
Demonstrate configuration of Source/Destination/Service/Action rule components
Change the order of a Distributed Firewall rule
Add/Merge/Delete a Distributed Firewall rule section
Determine publishing requirements for rules in a given NSX implementation
Demonstrate Import/Export Distributed Firewall Configuration
Load Distributed Firewall configuration
Determine need for excluding virtual machines from distributed firewall protection
Describe SpoofGuard Operation and Default Policy and Actions
Describe SpoofGuard IP Address Learning
Determine requirements for a Spoofguard Policy
Demonstrate how to Create and Edit a SpoofGuard Policy
o IP Local Addresses
o Approve IP addresses
o Edit/Clear IP addresses

I will cover

Understand the benefits/use cases for Cross-vCenter NSX
Contrast single and Cross-vCenter deployment models
Determine the appropriate NSX topology for a given use case
Understand options for ingress and egress traffic flows in a multi-site topology
Describe and differentiate Universal components
o Universal Firewall rules
o Universal Network and Security objects
o Universal Logical Switches
o Universal Distributed Logical Routers

I will cover

Deploy a Cross-vCenter NSX environment
o Create and configure the Primary NSX Manager
o Create and configure the Secondary NSX Manager
Migrate an NSX deployment to Cross-vCenter
Create and configure Cross-vCenter components
o Universal Segment ID Pool
o Universal Transport Zone
o Universal Logical Switch
o Universal Distributed Logical Router
Compare and contrast Local and Universal Firewall Rules

I will cover

Understand default roles
• Understand Single Sign-On (SSO) integration
• Configure SSO
• Assign a role to a vCenter Server user or group
• Compare and contrast the uses for the various NSX Security Roles
• Determine how roles can be applied to a subset of the vCenter infrastructure for multi
Tenancy purposes
• Understand how to apply NSX Roles to an AD group
• Assign objects to a user
• Enable/Disable a user account
• Edit/Delete a user account

I will cover

• Discern common use cases that require the NSX REST API
• Compare and contrast how the NSX REST API works and how it is used with a support
browser
• Understand how NSX REST API Calls are sent to the NSX Manager
• Differentiate common NSX REST API verbs
• Determine how to use NSX REST API calls to learn the network topology

I will cover

Compare and contrast available monitoring methods (UI, CLI, API, etc.)
Monitor infrastructure components
o Control Cluster Health
o Manager Health
o Hypervisor Health
Perform Inbound/Outbound activity monitoring
Enable data collection for single/multiple virtual machines
Perform virtual machine activity monitoring
Monitor activity between inventory containers (security groups, AD groups)
Analyze network and security metrics in vRealize Operations
Monitor logical networks and services
o Identify available statistics/counters
o Network/service health
o Configure and collect data from network

I will cover

• Given an auditing scenario, determine where applicable log information can be located
• Differentiate permissions for auditing
• Differentiate common data security regulations supported by NSX Data Security
• Differentiate information available in audit logs
• Use flow monitoring to audit firewall rules
• Audit deleted users
• Audit infrastructure changes
• View NSX Manager audit logs and change data
• Configure NSX Data Security
• Create a Data Security Policy
• Install Data Security
• Run a Data Security scan
• View and download compliance reports
• Create a regular expression
• Configure Guest Introspection (Install vShield Endpoint)

I will cover

• Given a scenario, utilize information contained in technical support bundles/logs to assist in
troubleshooting
• Explain usage of CLI for logging
• Configure Syslog(s)
• Configure logging for Dynamic Routing information
• Given a scenario, utilize information contained in technical support bundles/logs to assist in
troubleshooting
• Explain usage of CLI for logging
• Configure Syslog(s)
• Configure logging for Dynamic Routing information

I will cover

• Understand how to backup and recover various components
• Schedule backups
• Export/Restore vSphere Distributed Switch configuration
• Import/Export Service Composer profiles
• Perform NSX Manager backup and restore operation

I will cover

Compare and Contrast Tools Available for Troubleshooting
• Capture and trace uplink, vmknic, and physical NIC packets
• Audit NSX infrastructure changes
• Output packet data for use by a protocol analyzer
• Capture and analyze traffic flows
• Mirror network traffic for analysis
• Perform a network health check
• Configure vSphere Distributed Switch alarms

I will cover

Troubleshoot Common NSX Installation/Configuration Issues
• Troubleshoot lookup service configuration
• Troubleshoot vCenter Server link
• Troubleshoot licensing issues
• Troubleshoot permissions issues
• Troubleshoot host preparation issues
• Troubleshoot IP pool issues

I will cover

• Differentiate NSX Edge logging and troubleshooting commands
• Verify NSX Controller cluster status and roles
• Verify NSX Controller node connectivity
• Check NSX Controller API service
• Validate VXLAN and Logical Router mapping tables
• List Logical Router instances and statistics
• Verify Logical Router interface and route mapping tables
• Verify active controller connections
• View Bridge instances and learned MAC addresses
• Display Logical Router instances
• Verify NSX Manager services status
• View Logical Interfaces and routing tables
• Analyze NSX Edge statistics

I will cover

• Review netcpa logs for control plane connectivity issues
• Verify VXLAN, VTEP, MAC, and ARP mapping tables
• List VNI configuration
• View VXLAN connection tables and statistics
• Perform VTEP connectivity tests

I will cover

• Verify network configuration
• Verify a given virtual machine is configured with the correct network resources
• Troubleshoot virtual switch and port group configuration issues
• Troubleshoot physical network adapter configuration issues
• Determine the root cause of a network issue based on troubleshooting information