VCIX-NV

last update: 28/01/2015

Contents

About VCIX-NV

Purpose of Exam:

The VMware Certified Implementation Expert – Network Virtualization (VCIX-NV) Exam tests potential certification candidates on their skills and abilities installing, configuring and administering VMware NSX® environments

 

Number of Questions:

The VCIX-NV Exam consists of approximately 18 live lab activities and a short pre-exam survey consisting of 9 questions. Live lab activities consist of multiple tasks, where each task is scored.
The total number of activities provided is based on the total number of tasks. Because of this, the actual number of lab activities may vary slightly between exams.

 

Passing Score:

The passing score for this exam is 300. The scale is from 100-500. Scaled scores are calculated using a mathematical formula that considers a variety of factors, including the number and type of exam questions
included in a specific version of the exam. Because this combination may vary in different versions of the same examination, scaled scores provide a fair score for each individual based on the version of the exam taken.
Points are awarded for the successful completion of each lab task. Most items on the exam are composed of several tasks, and partial credit is awarded for those tasks that are completed successfully. Candidates can
choose to complete a task using different methods, as points are awarded based on successful completion, not on the steps used to complete the task.

 

Exam Environment:

The exam consists of a number of tasks that are performed using a virtual environment consisting of a management cluster, multiple compute clusters, and related virtual machines. The lab environment is based
on vSphere 5.5 and NSX for vSphere 6.0.2.
The VCIX-NV Exam includes troubleshooting tasks. As a result, some components may not be correctly configured, or may not have been configured at all, which is entirely intentional. In addition, some lab tasks
are dependent on the successful completion of previous tasks. Every task can be completed successfully, and knowledge of how the task is completed is essential to determine what component or components must be
configured or re-configured.

 

VCIX-NV Paths

Path 1: If you are VCP-NV certified

Step 1) Required Prerequisite: Valid VCP-NV certification.
Step 2) Pass the following exam and get certified
VMware Certified Implementation Expert — Network Virtualization (VCIX-NV)

Path 2: If you are VCP-DCV, VCP-Cloud, VCP-Desktop certified.

Step 1) Completion of the following course is RECOMMENDED:
VMware NSX: Install, Configure Manage
Step 2) Pass the following exam and get certified
VMware Certified Implementation Expert — Network Virtualization (VCIX-NV)

Path 3: If you hold a valid CCIE Data Center or CCIE Routing & Switching certification.

Note: This path is only available until February 28, 2015

Step 1) Completing one the courses below is RECOMMENDED, but not required.
VMware NSX: Fast Track for Internetworking Experts
VMware NSX Technical Overview with Labs
Step 2) Submit verification of your Cisco Certification.
Step 3) Pass the following exam and get certified:
VMware Certified Implementation Expert — Network Virtualization (VCIX-NV)

 

Objectives

Section 1 – Install and Upgrade VMware NSX

Objective 1.1 – Deploy VMware NSX Components

  • Deploy the NSX Manager virtual appliance
  • Integrate the NSX Manager with vCenter Server
  • Implement and Configure NSX Controllers
  • Prepare Host Clusters for Network Virtualization
  • Implement NSX Edge Services Gateway devices
  • Implement Logical Routers
  • Deploy vShield Endpoints
  • Implement Data Security
  • Create IP Pools

NSX Home LAB Part 1

NSX Home LAB Part 2

NSX Home LAB Part 3

NSX Home LAB Part 4 – Logical Switch

NSX – Distributed Logical Router

Host Preparation

 

Objective 1.2 – Upgrade VMware NSX Components

  • Upgrade vShield Manager 5.5 to NSX Manager 6.x.
  • Upgrade NSX Manager 6.0 to NSX Manager 6.0.x
  • Upgrade Virtual Wires to Logical Switches
  • Upgrade vShield App to NSX Firewall
  • Upgrade vShield 5.5 to NSX Edge 6.x
  • Upgrade vShield Endpoint 5.x to vShield Endpoint 6.x
  • Upgrade to NSX Data Security

Upgrade NSX-V, The right Way

Objective 1.3 – Configure and Manage Transport Zones

  • Create Transport Zones
  • Configure the control plane mode for a Transport Zone
  • Add clusters to Transport Zones
  • Remove clusters from Transport Zones

NSX Home LAB Part 4 – Logical Switch

Section 2 – Create and Manage VMware NSX Virtual Networks

Objective 2.1 – Create and Administer Logical Switches

  • Create/Delete Logical Switches
  • Assign and configure IP addresses
  • Connect a Logical Switch to an NSX Edge
  • Deploy services on a Logical Switch
  • Connect/Disconnect virtual machines to/from a Logical Switch
  • Test Logical Switch connectivity

NSX Home LAB Part 4 – Logical Switch

Objective 2.2 – Configure VXLANs

  • Prepare a cluster for VXLAN
  • Configure VXLAN transport zone parameters
  • Configure the appropriate teaming policy for a given implementation

Host Preparation

NSX and Teaming Policy

NSX Home LAB Part 3

NSX Minimum MTU

Objective 2.3 – Configure and Manage Layer 2 Bridging

  • Add Layer 2 Bridging
  • Connect Layer 2 Bridging to the appropriate distributed virtual port group

NSX L2 Bridging

Objective 2.4 – Configure and Manage Logical Routers

  • Configure default gateway parameters
  • Add/Remove static routes
  • Configure dynamic routing protocols:
    OSPF
    BGP
    IS-IS
  • Configure route redistribution

NSX – Distributed Logical Router

Section 3 – Deploy and Manage NSX Network Services

Objective 3.1 – Configure and Manage Logical Load Balancing

  • Configure the Load Balancer service
  • Create/Modify/Remove a service monitor
  • Create/Modify/Remove a server pool
  • Create/Modify/Remove an application profile and rules
  • Create/Modify/Remove virtual servers

NSX Load Balancing

Objective 3.2 – Configure and Manage Logical Virtual Private Networks (VPNs)

  • Enable/Disable IPSec VPN service
  • Configure global IPSec VPN parameters
  • Generate a Certificate Signing Request (CSR)
  • Enable and configure logging
  • Implement Network Access SSL VPN-Plus
  • Implement Web Access SSL VPN-Plus
  • Enable/Disable L2 VPN
  • Add and configure a L2 VPN server
  • Add and configure a L2 VPN client

 Virtual Private Networks (VPN)s

Objective 3.3 – Configure and Manage DHCP/DNS/NAT

  • Add/Modify/Delete a DHCP IP Pool
  • Enable/Disable the DHCP service
  • Add/Remove a DHCP static binding
  • Enable/Disable DNS services
  • Configure DNS services
  • Add/Modify/Delete a Source NAT (SNAT) rule
  • Add/Modify/Delete a Destination NAT (DNAT) rule

NSX-V Edge NAT

 

Section 4 – Perform Operational Maintenance

Objective 4.1 – Backup and Restore Network Configurations

  • Schedule/Backup/Restore NSX Manager data
  • Export/Restore vSphere Distributed Switch configuration
  • Import/Export Service Composer profiles
  • Export/Import/Load Distributed Firewall configurations

Backing Up NSX Manager Data

Upgrade NSX-V, The right Way

Objective 4.2 – Monitor an NSX Implementation

  • Configure and manage centralized logging for the NSX Manager and NSX Edge devices
  • Create/Edit/Delete a Service Monitor
  • Monitor and analyze networking and security metrics with vCenter Operations Manager
  • Monitor security policies with Activity Monitoring and ensure they are being enforced correctly
  • Monitor and analyze traffic to and from protected virtual machines with Flow Monitoring
  • Monitor statistics, counters and health of networking services
  • Monitor health and status of infrastructure components, such as vSphere, NSX Manager, and Control Cluster
  • Enable data collection for single/multiple virtual machines

Flow Monitoring

System Events and Audit Logs

Specify Syslog Server

 

Section 5 – Perform Advanced Troubleshooting

Objective 5.1 – Troubleshoot Common NSX Installation/Configuration Issues

  • Troubleshoot port assignments in an NSX implementation
  • Troubleshoot lookup service configuration
  • Troubleshoot vCenter Server integration
  • Troubleshoot licensing issues
  • Troubleshoot permissions issues
  • Troubleshoot host preparation issues
  • Troubleshoot IP pool issues

NSX-V Troubleshooting registration to vCenter

Host Preparation

Objective 5.2 – Troubleshoot Common NSX Component Issues

  • Troubleshoot NSX Manager services
  • Troubleshoot NSX Controller cluster status, roles and connectivity
  • Troubleshoot active NSX Controller connections
  • Troubleshoot Logical Switch transport zone and NSX Edge mappings
  • Troubleshoot services deployed on Logical Switches
  • Troubleshoot Logical Router interface and route mappings
  • Troubleshoot VXLAN and Logical Router mapping tables
  • Troubleshoot L2 Bridge learned MAC addresses
  • Troubleshoot distributed and edge firewall implementations

 Deploying NSX-V controller failed and disappear from vSphere client

Troubleshooting NSX-V Controller

NSX-v under the hood: VXLAN ARP suppression

Objective 5.3 – Troubleshoot Common Connectivity Issues

  • Troubleshoot virtual machine connectivity to Logical Switches
  • Troubleshoot dynamic routing protocols
  • Troubleshoot Virtual Private Networks (VPNs)
  • Troubleshoot VXLAN, VTEP, and VNI configuration and connectivity

NSX-v Troubleshooting L2 Connectivity

Objective 5.4 – Troubleshoot Common Services Issues

  • Troubleshoot NSX Management Services issues
  • Troubleshoot Service creation/deletion issues
  • Troubleshoot Service Group creation/deletion issues
  • Troubleshoot DHCP service issues
  • Troubleshoot DNS service issues
  • Troubleshoot Network Address Translation (NAT) service issues
  • Troubleshoot Logical Load Balancer implementation issues
  • Troubleshoot Service Composer implementation issues
  • Troubleshoot Data Security issues

 

Section 6 – Secure an NSX Environment

  • Create/Modify/Delete an Edge Firewall rule
  • Create/Modify/Delete a Distributed Firewall rule
  • Configure Source/Destination/Service/Action rule components
  • Modify the order/priority of Firewall rules
  • Create/Modify/Delete Firewall rule sections
  • Create/Modify/Delete Source and Destination Network Address Translation rules
  • Create/Modify/Delete SpoofGuard policies

 

Objective 6.2 – Configure and Administer Role Based Access Control

  • Implement identity service support for Active Directory, NIS, and LDAP with Single Sign-On (SSO)
  • Configure/Modify/Delete user accounts
  • Configure/Modify/Delete user roles
  • Assign roles to user accounts
  • Disable/Enable user accounts

NSX Role Based Access Control

 

Objective 6.3 – Configure and Manage Service Composer

  • Create/Modify/Delete Security Groups
  • Create/Modify/Delete Security Policies
  • Map Security Policies to Security Groups
  • Add/Assign/Edit/Delete Security Tags
  • View and manage effective services and failures for a Security Policy
  • Manage Security Policy priorities

 

Section 7 – Utilize API and CLI Commands to Manage an NSX Deployment

Objective 7.1 – Administer and Execute calls using the NSX vSphere API

  • Deploy and successfully authenticate an REST API client
  • Construct and execute an API call using correct syntax and formatting
  • Analyze, modify, and successfully retrieve configuration data using an existing API call

Working with NSXv API 

Objective 7.2 – Manage and Report on an NSX Environment using the NSX Command Line Interface (CLI)

  • Manage and report on an NSX installation status using ESXi Command Line Interface (CLI)commands
  • Manage and report on an NSX Infrastructure using NSX Manager, NSX Controller, and ESXi CLI commands
  • Manage and report on a Logical Switch using NSX Controller and ESXi CLI commands
  • Manage and report on a Logical Router NSX Controller, NSX Edge, and ESXi CLI commands
  • Manage and report on a Distributed Firewall using NSX Manager and ESXi CLI commands
  • Manage and report on an Edge Services VPN-Plus device using NSX Edge and client OS CLI commands
  • Manage and report on Load Balancers using NSX Edge CLI commands