Configure ECMP on VMware NSX

VMwareNSX

In this post we will be deploying an additional Edge Services Gateway (ESG) so that we can take advantage of Equal-Cost Multipath (ECMP) from the distributed logical router to the ESG. The advantage of using ECMP is that you can split the traffic from VMs evenly between the ESGs and have multiple bidirectional links. Let’s get started configuring!

Navigate to Networking & Security > NSX Edges and click the green + to begin deploying a new ESG.

ecmp1

Enter a name for the ESG. Click Next

ecmp2

Enter a password and enable SSH access. Click Next.

ecmp3

Select where you want to place your edge appliance

ecmp4

Click Next

ecmp5

On the Configure Interfaces page, click the green + to add a interface. We are going to configure our Uplink interface. Select type Uplink. Enter in a IP address and subnet prefix. Click Select.

ecmp6

Select the Production port group. Click OK.

ecmp7

Click OK

ecmp8

Now let’s create another interface to connect to our transit switch. This is done in the same way except we will be selecting our logical switch to connect to and not a port group. Enter a IP address and subnet prefix. Click Select.

ecmp9

Select the Transit Network logical switch

ecmp10

Click OK.

ecmp11

Review your interface config and click Next

ecmp12

Select the box next to Configure Default Gateway. Select the Uplink-Interface and enter in the IP address of the next hop switch/router. Click Next.

ecmp13

Select the box next to Configure Firewall default policy. Change the Default Traffic Policy to Accept. Click Next

ecmp14

Review the final config and click Finish

ecmp15

Now you must go and setup static or dynamic routing on this edge device. In this case I’ve configured OSPF on the edge devices, as you can see from the show ip ospf neighbor command below done on the edge device.

ecmp16

Now navigate to Networking & Security > NSX Edges and double click on the distributed logical router. Under Manage > Routing > Global Configuration click Enable next to ECMP. Publish the changes. Now we should be able to see a route pointing to both of our edge devices.

ecmp17

Open up the console on one of the edge devices and after logging in, enter show ip route. Notice we have a route going to the 172.20.10.0 and 172.20.11.0 networks for both of the edge devices. Now traffic will be able to be split between the two edge devices.

ecmp18

That’s it! And just like that we’ve configured ECMP in our NSX environment.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s