VMC NSX ALB Load Balancing with HCX Network Extension

IntroductionPlanning and ImplementationNSX ALB Cloud TypeNSX ALB Topology and HCX Network ExtensionNSX ALB and HCX MONNSX ALB Service Engine PlacementService Resilience Introduction Since VMware Cloud on AWS SDDC version 1.9, NSX Advanced Load Balancer has been available as a customer-managed solution. The NSX ALB controllers and SEs are manually deployed as VMs through vCenter in …

Continue reading VMC NSX ALB Load Balancing with HCX Network Extension

Make Thousands of NSX-T API Calls in Minute

Background As a network guy, network automation has always been my favourite topic. I needed to build an NSX-T environment to validate a specific function from time to time. When I got an NSX-T config, I used a straightforward Python script that makes the NSX-T API calls to import the config into a new lab …

Continue reading Make Thousands of NSX-T API Calls in Minute

How to Set Up an L2VPN on Custom T1 in a VMware Cloud on AWS SDDC

PrefaceStep 1: Add an L2 VPN Server serviceStep 2: Create L2VPN Local EndpointStep 3: Create L2VPN SessionStep 4: Enable ConnectivityStep 5. On-Prem NSX Autonomous Edge Preface I wrote a blog in 2020 about setting up an L2VPN from on-premise to the VMC NSX T0 router. Since SDDC 1.18, VMware Cloud on AWS introduced the support …

Continue reading How to Set Up an L2VPN on Custom T1 in a VMware Cloud on AWS SDDC

Exploring the Lesser-Known Yet Powerful VMC-AWS Networking APIs

NSX API Access PointsAPI to Backup NSX ConfigAPI to Get the VMC Gateway Routing TableAPI to Request AWS Public IPAPI to Get the NSX Capacity Usage VMware NSX-T provides a programmatic API to automate management activities. The API follows a resource-oriented Representational State Transfer (REST) architecture, using JSON object encoding. Clients interact with the API …

Continue reading Exploring the Lesser-Known Yet Powerful VMC-AWS Networking APIs

Setting Up Federated Identity Management for VMC on AWS – Authentication with PingOne

The Federated Identity feature of VMware Cloud on AWS can be integrated with all 3rd party IdPs who support SAML version 2.0. In this integration model, the customer dedicated vIDM tenant will work as SAML Service Provider. If the 3rd party IdP is set up to perform multi-factor authentication (MFA), the customer will be prompted …

Continue reading Setting Up Federated Identity Management for VMC on AWS – Authentication with PingOne

Setting Up Federated Identity Management for VMC on AWS – Authentication with Azure AD

The Federated Identity feature of VMware Cloud on AWS can be integrated with Microsoft Azure AD as well. In this integration model, the customer dedicated vIDM tenant will work as the SAML Service Provider and the Azure AD will work as the IdP. Disclaimer: The Azure AD settings in this blog are to demo the …

Continue reading Setting Up Federated Identity Management for VMC on AWS – Authentication with Azure AD

Setting Up Federated Identity Management for VMC on AWS – Authentication with ADFS

The Federated Identity feature of VMware Cloud on AWS can be integrated with Microsoft Active Directory Federation Services (ADFS). In this integration model, the customer dedicated vIDM tenant will work as the SAML Service Provider and the ADFS will work as the IdP. Disclaimer: The ADFS settings in this blog are to demo the integration …

Continue reading Setting Up Federated Identity Management for VMC on AWS – Authentication with ADFS

Setting Up Federated Identity Management for VMC on AWS – Authentication with Okta IdP

The Federated Identity feature of VMware Cloud on AWS can be integrated with all 3rd party IdPs who support SAML version 2.0. In this integration model, the customer dedicated vIDM tenant will work as SAML Service Provider. If the 3rd party IdP is set up to perform multi-factor authentication (MFA), the customer will be prompted …

Continue reading Setting Up Federated Identity Management for VMC on AWS – Authentication with Okta IdP

Setting Up Federated Identity Management for VMC on AWS – Authentication with Active Directory

This blog is the second blog of this Federated Identity Management for VMC on AWS series. Please complete the vIDM connector installation and setup as per my first blog of this series before moving forward. (https://davidwzhang.com/2019/07/31/setting-up-federated-identity-management-for-vmc-on-aws-install-and-setup-vidm-connector/) VMware Cloud on AWS Federated Identity management supports different kinds of authentication methods. This blog will demo the basic …

Continue reading Setting Up Federated Identity Management for VMC on AWS – Authentication with Active Directory

Setting Up Federated Identity Management for VMC on AWS – Install and Setup vIDM Connector

As an enterprise using VMware Cloud Services, you can set up federation with your corporate domain. Federating your corporate domain allows you to use your organization's single sign-on and identity source to sign in to VMware Cloud Services. You can also set up multi-factor authentication as part of federation access policy settings. Federated identity management …

Continue reading Setting Up Federated Identity Management for VMC on AWS – Install and Setup vIDM Connector