Mastering NSX: Navigating Logical Switching Commands in NSX Manager and ESXi

Understanding the command-line interface (CLI) commands for logical switching is crucial for VCAP-NV Deploy Exam. This guide provides an overview of essential CLI commands for managing logical switches, segments, and related components from both the NSX Manager and ESXi hosts.

Commands Run from NSX Manager (nsxcli)

1. Managing Segments

Segments in NSX-T are logical constructs that define Layer 2 broadcast domains, similar to VLANs in traditional networking.

  • List All Segments: To view all configured segments, use
    get segments
  • List All Switch Ports Connected to a Segment: View ports with
    get segment <uuid> ports
  • Segment Information: For details on a specific segment, use
    get segment <vni-or-uuid>
  • ARP Table: View the ARP table of a segment with
    get segment <vni-or-uuid> arp-table
  • MAC Table: To see the MAC address table, use
    get segment <vni-or-uuid> mac-table
  • Segment Statistics: For segment traffic statistics, use
    get segment <vni-or-uuid> stats
  • Transport Node Table: List transport nodes part of a segment with
    get segment <vni-or-uuid> transport-node-table
  • VTEP Table: View VTEP information with
    get segment <vni-or-uuid> vtep
  • Segment Port Information: To inspect a segment port, use
    get segment-port <uuid>
  • Segments Statistics: For aggregated statistics of all segments,
    get segments stats.

Commands Run from ESXi (nsxcli)

Viewing Segment Information and Tables on ESXi

  • All Segments: get segments lists all segments accessible from the ESXi host.
  • Segment Information: Use
    get segment <logical-switch-id> for segment details.
  • ARP Table: Access a segment’s ARP table with
    get segment <vni-or-uuid> arp-table
  • MAC Table: View the MAC table via
    get segment <vni-or-uuid> mac-table
  • ND Table: To see the ND table,
    get segment <vni-or-uuid> nd-table
  • VTEP Table: For VTEP details,
    get segment <vni-or-uuid> vtep-table
  • Segment Port Status: Check the status of segment ports with
    get segment-port status
  • Tables Using VNI: To access MAC, ARP, VTEP tables using VNI,
    get segment {local | remote} {mac-cache | arpcache | vtep-cache} <vni>
  • Tunnel Status: Verify transport node tunnel status with
    get host-switch <host-switch-name> tunnels

ESXi Commands for Network Insights

Insights and Performance Monitoring

  • Switch Port ID: View switch port IDs using net-stats -l
  • Configured Switches: List switches with esxcfg-vswitch -l
  • VTEP and VNI Configuration: net-vdl2 -l shows VTEP and VNI config
  • VDS Uplinks Configuration: For uplink configuration, net-vdr -C -l
  • View Gateways: List gateways with net-vdr -I -l
  • Verify VXLAN Module: Check VXLAN kernel module with
    esxcli system module get -m vdl2
  • Performance Monitoring: Utilize esxtop for monitoring performance.

Log Files on ESXi

Troubleshooting and Logs

  • ESXi Host hostd Log File: Accessible at /var/log/hostd.log
  • ESXi Host VMkernel Log File: /var/log/vmkernel.log contains kernel logs
  • NSX Syslog Log File: Located at /var/log/nsx-syslog.log

Understanding and utilizing these commands efficiently can significantly enhance the management and troubleshooting of your NSX-T environment. Whether you’re a seasoned network professional or new to VMware NSX, mastering these commands is a step towards ensuring a robust, efficient virtual networking infrastructure.

Mastering VMware NSX: Strategies for Success on the VCAP-NV Deploy Exam

The VCAP-NV Deploy exam is one of the most thrilling practical tests that evaluates your efficiency and forces you to work effectively.

“The journey is the destination.”

To prepare efficiently, I highly recommend taking the VMware NSX Troubleshooting and Operations [V4.x] – Deploy course. This course covers:

  • NSX Operations and Tools
  • Troubleshooting the NSX Management Cluster
  • Troubleshooting Infrastructure Preparation
  • Troubleshooting Logical Switching
  • Troubleshooting Logical Routing
  • Troubleshooting Security
  • Troubleshooting the NSX Advanced Load Balancer and VPN Services
  • Datapath Walkthrough

The syllabus thoroughly addresses the scope of the exam.

Review the labs multiple times and after completing the VMware NSX – Deploy course. Useful links:

Focus on the VMware Odyssey HOL Labs that were available at my time: HOL-2426-81-ODY VMware Odyssey – NSX Security Challenge.

Aim to be precise and sufficiently quick.

Exam Content Overview: The exam includes various sections focused on:

Section 4 – Installation, Configuration, and Setup
Objective 4.1 - Prepare VMware NSX-T Data Center Infrastructure
Objective 4.1.1 - Deploy VMware NSX-T Data Center Infrastructure components
Objective 4.1.2 - Configure Management, Control and Data plane components for NSX-T Data Center
Objective 4.1.3 - Configure and Manage Transport Zones, IP Pools, Transport Nodes etc.
Objective 4.1.4 - Confirm the NSX-T Data Center configuration meets design requirements
Objective 4.1.5 - Deploy VMware NSX-T Data Center Infrastructure components in a multi-site
Objective 4.2 - Create and Manage VMware NSX-T Data Center Virtual Networks
Objective 4.2.1 - Create and Manage Layer 2 services
Objective 4.2.2 - Configure and Manage Layer 2 Bridging
Objective 4.2.3 - Configure and Manage Routing including BGP, static routes, VRF Lite and EVPN
Objective 4.3 - Deploy and Manage VMware NSX-T Data Center Network Services
Objective 4.3.1 - Configure and Manage Logical Load Balancing
Objective 4.3.2 - Configure and Manage Logical Virtual Private Networks (VPNs)
Objective 4.3.3 - Configure and Manage NSX-T Data Center Edge and NSX-T Data Center Edge Clusters
Objective 4.3.4 - Configure and Manage NSX-T Data Center Network Address Translation
Objective 4.3.5 - Configure and Manage DHCP and DNS
Objective 4.4 - Secure a virtual data center with VMware NSX-T Data Center
Objective 4.4.1 - Configure and Manage Distributed Firewall and Grouping Objects
Objective 4.4.2 - Configure and Manage Gateway Firewall
Objective 4.4.3 - Configure and Manage Identity Firewall
Objective 4.4.4 - Configure and Manage Distributed IDS
Objective 4.4.5 - Configure and Manage URL Analysis
Objective 4.4.6 - Deploy and Manage NSX Intelligence
Objective 4.5 - Configure and Manage Service Insertion
Objective 4.6 - Deploy and Manage Central Authentication (Workspace ONE access)

Section 5 - Performance-tuning, Optimization, Upgrades
Objective 5.1 - Configure and Manage Enhanced Data Path (N-VDSe)
Objective 5.2 - Configure and Manage Quality of Service (QoS) settings

Section 6 – Troubleshooting and Repairing
Objective 6.1 - Perform Advanced VMware NSX-T Data Center Troubleshooting
Objective 6.1.1 - Troubleshoot Common VMware NSX-T Data Center Installation/Configuration Issues
Objective 6.1.2 - Troubleshoot VMware NSX-T Data Center Connectivity Issues
Objective 6.1.3 - Troubleshoot VMware NSX-T Data Center Edge Issues
Objective 6.1.4 - Troubleshoot VMware NSX-T Data Center L2 and L3 services
Objective 6.1.5 - Troubleshoot VMware NSX-T Data Center Security services
Objective 6.1.6 - Utilize VMware NSX-T Data Center native tools to identify and troubleshoot 

Section 7 – Administrative and Operational Tasks
Objective 7.1 - Perform Operational Management of a VMware NSX-T Data Center Implementation
Objective 7.1.1 - Backup and Restore Network Configurations
Objective 7.1.2 - Monitor a VMware NSX-T Data Center Implementation
Objective 7.1.3 - Manage Role Based Access Control
Objective 7.1.4 - Restrict management network access using VIDM access policies
Objective 7.1.5 - Manage syslog settings
Objective 7.2 - Utilize API and CLI to manage a VMware NSX-T Data Center Deployment
Objective 7.2.1 - Administer and Execute calls using the VMware NSX-T Data Center vSphere API

Each section contains objectives ranging from deploying NSX-T Data Center Infrastructure components to configuring and managing security features like the Distributed Firewall, Gateway Firewall, Identity Firewall, and more. It also covers performance tuning, quality of service settings, advanced troubleshooting, operational management, and using API and CLI for management.

Key Recommendations for Success:

  • Thoroughly study the VMware NSX Documentation to understand the fundamentals and advanced features of NSX.
  • Leverage the VMware NSX Product Page for the latest features and updates.
  • Engage with NSX Hands-On-Labs for practical, hands-on experience.
  • Watch NSX Training and Demo videos on YouTube to visualize configurations and use cases.
  • Prioritize precision and speed in lab exercises to mimic exam conditions.

Wishing you all the best in your preparation and lab endeavors. Let’s dive into the labs and master NSX.

Rebuilding from the Break – Restoring the…

Rebuilding from the Break – Restoring the…

This article describes my made experiences with restoring the Avi controller. It demonstrates how easy and effective a restore procedure can be. As kind of bonus material, I also added two scripts to the article which can be used to backup the configuration backup-files to a remote location […]


VMware Social Media Advocacy

A Deep Dive into VMware vSphere vMotion…

A Deep Dive into VMware vSphere vMotion…

Ensuring application availability and performance during infrastructure maintenance is essential in the ever changing virtualization landscape. VMware’s flagship product, vMotion, allows virtual machines (VMs) to be moved between physical hosts without interruption. How about the programmes […]


VMware Social Media Advocacy

Quick Tip – Using ESXCLI to upgrade ESXi 8.x…

Quick Tip – Using ESXCLI to upgrade ESXi 8.x…

Several users in the community have reported running into a memory error issue when attempting to upgrade their standalone ESXi hosts using this ESXCLI trick, which has been possible since ESXi 5.1 back in 2012. [MemoryError] Please refer to the log file for more details. Initially, I was not […]


VMware Social Media Advocacy