In this lab we are going to verify north to south traffic.
So from the easy that we are logged in.
That is the outside busy.
From there I will do the trace aloud to one of the VM here that will be inside 172 116 dart X subnet
and then we'll see the part that how it is coming hop by hop.
So let me go and log into the NSX manager and from there first of all will verify the configuration
Two Tier 0 Tier 1 or what configuration is there what routing protocol is going there and then I will
do the create vote from outside to inside.
So let me log into the NSX manager and let me show you all these configurations.
I logged in inside the NSX manager and will go to networking.
We know that we have created Tier 0 and Tier 1 gateways.
So if you go here to Tier 0 gate we can see that we have options to do road redistribution.
We can go and check interfaces routing and BGP.
So let's go and check this out.
Distribution whatever road we are doing the redistribution here we can see that Tier 0 subnet and advertise
Tier 1 subnet these things.
Actually I have covered in the theoretical Section 3 for recording.
Earlier we have seen that what type of road that is coming from Tier 1 and it is going to Tier 0 and
insight is 0.
We have easy to configure to how they are doing all these things.
But materials we can see that Tier 0 subnet connected interfaces segment service interface subnet external
interface connected segment and it is getting the connected subnets and the Nat IP from the Tier 1 so
DNS 6 redistribution.
Then if you go and check the external interface external interface means how it is connected with the
external way you can see that it is connected with this particular IP.
So here you can see 1 92 160 candidate 3.
And if you go and refer the to political will find the same.
So this is the external connecting interface and with help of this external connecting interface we
have actually BGP configured to before showing you the BGP let's go and check this routing routing This
is nothing is their IP prefix list a static wrote community list etc. Let's go and verify the BGP.
So if we are in the inside if you can see that your local is a 6 5 0 0 1 The you have to BGP neighbors
disappears is on CNBC on multipart relaxes on entries that I receive is on so I will go and verify who
is to label.
So one of the near neighbor is family.
This is actually the neighbour I am looking for this is my direct connected outside neighbour.
This is also their use for some other lab so at the moment will focus on this particular neighbour and
now it's coming from this particular neighbour.
When I get to 1 6 8 0 and they docked 1 Alright so this is the configuration we have.
And if you go to tier 1 they clearly haven't done anything inside Tier 1 gateway but if you go and check
their default configuration that we have we have done this actually wrote advertisement for all connected
and service port.
Apart from that we haven't enable anything there so at the moment we connect two different interfaces
means two interfaces back to back from Tier One Gateway 0 1 2 3 0 0 they will or to configure one of
the IP in between that.
So let me go and show you this for that section you can go to advance networking and security and if
you go and select routers you'll find that you have a router here's the gateway Tier 1 gateway.
So first of all let's go and check this zero Gateway click there.
Here you can see you have the configuration and if you go inside configuration and road report so here
we can see clearly that you have back to back connectivity that IP is this this one and it is connected
with.
So let me make some more space here.
And it is connected with Tier 1 gateway.
The other interface is configured as a uplink so Tier 0 2 1.
And here you can see the transport as well if you want we can check the stats and other stuff as well.
So these are the port that is configured in routing.
You can go and check the BGP that we have already seen.
So easy is enable and BGP BGP neighbor is up and running.
Actually we have two neighbour we are actually looking for this particular neighbour.
So we have this routing configure and we are not taking any action at the moment.
Apart from that I didn't know routing can check all these other stuffs then services we can go and check
the services in routing you have local configuration as well and believe this at the moment.
All right.
So now quickly go and we are going and we are going to check the deal when Gateway as well was we are
inside Tier 1 Gateway and if we go and check the static cloud if you go and check it out equities mints
we are advertising all the connected goats and the service outs as well.
Now we are desperate to see the drought report because dear a zero dear one is connected with you.
So here we can see that you have this connection.
This automatically assigned IP here in this particular range.
Apart from that we have these IP.
These are connected with a logical segment.
So we can see here that we have full connectivity routing is also going on out.
Redistribution is also going on.
So next what I want to do that I will log into the external I do the command line so I'll go do the
command prompt of the external B.S. that actually we are logged in and from there I will do the Chris
wrote to the internal say for example this particular segment they 172 1 6 standard eleven this IP IP
is of one of the VM so let me do the Chris and the IP is 172 once extend out then dart eleven so let
me do that.
K
let me speak this IP
172 116 dot eleven
you can see that a few packet cards go up and back after that trick spinning sets as well so let's go
here and do the research Chris wrote and I will to resolve the system
and
okay so I can see
tactic is working now so it clearly can see that it is going to the outside interface then this is the
from outside this is the next hop that is belonging to two years zero device and then between the interface
that they have.
So that is not enable to get or detect any package that actually could stand out.
And then finally it is going and being into this particular Ah I see peeping we can see there Chris
it is very much similar like ping is happening.
So finally it is going and hitting this particular target Greg.
So this developed from outside we can go and combine the hops and to reach up to this point to please
cover up all the routing theoretical sections so you will clearly understand where the local lookup
is happening where the remote lookup is happening who is you know providing all this I guess resolution
and who is doing the lookup up resolution and all those things are light so we are good to stop here
let's stop.