Add VMware NSX-V devices

Relevant for: AFA Administrators

This topic describes ASMS's support for VMware NSX-V devices.

Network connectivity

NSX-V ("NSX for vSphere") works with VMware vSphere and requires deployment of the VMware vCenter. VMware NSX-V is specific to vSphere hypervisor environments.

The following diagram shows an ASMS Central Manager or Remote Agent connecting to a VMware NSX-V device environment:

Device permissions

ASMS requires the following to collect data from VMware NSX-V devices

Add a VMware NSX-V to AFA

This procedure describes how to add a VMware NSX-V device to AFA.

Do the following:

1. Access the Devices Setup page. For details, see Access the DEVICES SETUP page

2. In the vendor device selection page, click VMware > NSX-V.

3. Complete the fields as needed.

   Access Information

   Host	Enter the host name or IP address of the NSX Manager. This is the name that will be displayed in the devices tree.
   User Name	Enter the username to use for REST access to the device.
   Password	Enter the password to use for REST access to the device.

   Close ⌃
   Geographic Distribution

   Select the remote agent that should perform data collection for the device.

   To specify that the device is managed locally, select Central Manager.

   This field is relevant when a Geographic Distribution architecture is configured. For more details, see Configure a distributed architecture.

   Close ⌃
   Additional Information

   Select the Learning mode option to specify that AFA traffic simulation should treat traffic that is not specified in a rule as blocked.

   In reality, the default behavior for NSX-V devices is to allow all traffic that is not explicitly blocked. Learning mode enables you to better understand the specific traffic that needs to be allowed on the device.

   Close ⌃
   Route Collection

   Specify how AFA should acquire the device's routing information:

   • Automatic. AFA will automatically generate the device's routing information upon analysis or monitoring.
   • Static Routing Table (URT). AFA will take the device's routing information from a static file you provide. For details, see Specify routing data manually.

   Close ⌃
   ActiveChange

   Select the Enable ActiveChange option to enable ActiveChange for the device.

   Note: Enabling ActiveChange rollback for this device requires special configuration on the device.

   For more details, see Implement changes with ActiveChange and Enabling VMWare NSX ActiveChange Rollback.

   Close ⌃
   Options

   Real-time change monitoring	Select this option to enable real-time change monitoring. For details, see Configure real-time monitoring.
   Set user permissions	Select this option to set user permissions for this device.

   Close ⌃
4. Click Finish. The new device is added to the device tree.

5. If you selected Set user permissions, the Edit users dialog box appears.

   In the list of users displayed, select one or more users to provide access to reports for this account.

   1. To select multiple users, press the CTRL button while selecting.

   2. Click OK to close the dialog.

A success message appears to confirm that the device is added.