MENU
A digital marketing agency is planning to modernize its IT infrastructure to accommodate a growing number of applications and services. The agency's current physical network infrastructure is complex and difficult to manage due to the high number of VLANs. They have chosen VMware NSX as their preferred network virtualization platform, aiming to simplify the network design and increase flexibility. The agency is particularly interested in creating isolated networks for each application and optimizing East-West traffic.
Which of the following would be part of the optimal recommended design?
1. Why Overlay Networks & Tier-1 Gateways are the Best Choice (Correct Answer - C)
Using NSX Overlay Networks eliminates the complexity of VLAN-based segmentation, providing greater scalability and automation.
Each application gets its own NSX segment, ensuring strong isolation and improved East-West traffic flow.
Tier-1 Gateways handle intra-application traffic efficiently, reducing overhead on Tier-0 Gateways.
2. Why Other Options are Incorrect
(A & B - VLAN-Backed Segments):
VLANs limit scalability and increase network management complexity.
(D - NSX Edge Nodes Instead of Tier-1 Gateways):
NSX Edge nodes are used for North-South traffic. East-West traffic should be handled at the Tier-1 level for efficiency.
3. NSX-T Network Design Best Practices
Use Overlay Networks to eliminate VLAN scaling limitations.
Implement micro-segmentation via NSX Distributed Firewall for application security.
Leverage Tier-1/Tier-0 hierarchy to separate East-West and North-South traffic.
VMware NSX 4.x Reference:
NSX-T Overlay Networking and Transport Zone Design Guide
NSX-T Tier-1 vs. Tier-0 Gateway Best Practices