BroadcomVATCLogo PNG v2
8388  Reviews star_rate star_rate star_rate star_rate star_half

VMware NSX: Design [V4.x]

This five-day course provides comprehensive training on considerations and practices to design a VMware NSX® environment as part of a software-defined data center strategy. This course prepares the...

Read More
$4,625 USD
Duration 5 days
Course Code EDU-NSXD4
Available Formats Classroom, Virtual

Overview

This five-day course provides comprehensive training on considerations and practices to design a VMware NSX® environment as part of a software-defined data center strategy. This course prepares the student with the skills to lead the design of an NSX environment, including design principles, processes, and frameworks. The student gains a deeper understanding of the NSX architecture and how it can be used to create solutions to address the customer’s business needs.

Skills Gained

By the end of the course, you should be able to meet the following objectives

  • Describe and apply a design framework
  • Apply a design process for gathering requirements, constraints, assumptions, and risks
  • Design a VMware vSphere® virtual data center to support NSX requirements
  • Create a VMware NSX® Manager™ cluster design
  • Create a VMware NSX® Edge™ cluster design to support traffic and service requirements in NSX
  • Design logical switching and routing
  • Recognize NSX security best practices
  • Design logical network services
  • Design a physical network to support network virtualization in a software-defined data center
  • Create a design to support the NSX infrastructure across multiple sites
  • Describe the factors that drive performance in NSX

Who Can Benefit

  • Network and security architects and consultants who design the enterprise and data center networks and NSX environments

Prerequisites

  • Before taking this course, you must complete the following course:
  • VMware NSX: Install, Configure, Manage [V4.0]
  • You should also have understanding or knowledge of these technologies:
  • Good understanding of TCP/IP services and protocols
  • Knowledge and working experience of computer networking and security, including:
  • Switching and routing technologies (L2 and L3)
  • Network and application delivery services (L4 through L7)
  • Firewalling (L4 through L7)
  • vSphere environments
  • The VMware Certified Professional – Network Virtualization certification is recommended.

Course Details

Course Modules

Course Introduction

  • Introduction and course logistics
  • Course objectives

NSX Design Concepts

  • Identify design terms
  • Describe framework and project methodology
  • Describe the role of VMware Cloud Foundation™ in NSX design
  • Identify customers’ requirements, assumptions,
  • constraints, and risks
  • Explain the conceptual design
  • Explain the logical design
  • Explain the physical design

NSX Architecture and Components

  • Recognize the main elements in the NSX architecture
  • Describe the NSX management cluster and the management plane
  • Identify the functions and components of management, control, and data planes
  • Describe the NSX Manager sizing options
  • Recognize the justification and implication of NSX Manager cluster design decisions
  • Identify the NSX management cluster design options

NSX Edge Design

  • Explain the leading practices for edge design
  • Describe the NSX Edge VM reference designs
  • Describe the bare-metal NSX Edge reference designs
  • Explain the leading practices for edge cluster design
  • Explain the effect of stateful services placement
  • Explain the growth patterns for edge clusters
  • Identify design considerations when using L2 bridging services

NSX Logical Switching Design

  • Describe concepts and terminology in logical switching
  • Identify segment and transport zone design considerations
  • Identify virtual switch design considerations
  • Identify uplink profile and transport node profile design considerations
  • Identify Geneve tunneling design considerations
  • Identify BUM replication mode design considerations

SX Logical Routing Design

  • Explain the function and features of logical routing
  • Describe the NSX single-tier and multitier routing architectures
  • Identify guidelines when selecting a routing topology
  • Describe the BGP and OSPF routing protocol configuration options
  • Explain gateway high availability modes of operation and failure detection mechanisms
  • Identify how multitier architectures provide control over stateful service location
  • Identify EVPN requirements and design considerations
  • Identify VRF Lite requirements and considerations
  • Identify the typical NSX scalable architectures

NSX Security Design

  • Identify different security features available in NSX
  • Describe the advantages of an NSX Distributed Firewall
  • Describe the use of NSX Gateway Firewall as a perimeter firewall and as an intertenant firewall
  • Determine a security policy methodology
  • Recognize the NSX security best practices

SX Network Services

  • Identify the stateful services available in different edge cluster high availability modes
  • Describe failover detection mechanisms
  • Compare NSX NAT solutions
  • Explain how to select DHCP and DNS services
  • Compare policy-based and route-based IPSec VPN
  • Describe an L2 VPN topology that can be used to interconnect data centers
  • Explain the design considerations for integrating VMware NSX® Advanced Load Balancer™ with NSX

Physical Infrastructure Design

  • Identify the components of a switch fabric design
  • Assess Layer 2 and Layer 3 switch fabric design implications
  • Review guidelines when designing top-of-rack switches
  • Review options for connecting transport hosts to the switch fabric
  • Describe typical designs for VMware ESXi™ compute hypervisors with two pNICs
  • Describe typical designs for ESXi compute hypervisors with four or more pNICs
  • Differentiate dedicated and collapsed cluster approaches to SDDC design

NSX Multilocation Design

  • Explain scale considerations in an NSX multisite design
  • Describe the main components of the NSX Federation architecture
  • Describe the stretched networking capability in Federation
  • Describe stretched security use cases in Federation
  • Compare the Federation disaster recovery designs

NSX Optimization and DPU-Based Acceleration

  • Describe Geneve Offload
  • Describe the benefits of Receive Side Scaling and Geneve Rx Filters
  • Explain the benefits of SSL Offload
  • Describe the effect of Multi-TEP, MTU size, and NIC speed on throughput
  • Explain the available enhanced datapath modes and use cases
  • List the key performance factors for compute nodes and NSX Edge nodes
  • Describe DPU-Based Acceleration
  • Define the NSX features supported by DPUs
  • Describe the hardware and networking configurations supported with DPUs
|
View Full Schedule

Schedule

2 options available

  • Aug 4, 2025 - Aug 8, 2025 (5 days)
    Live Virtual | 10:00AM 6:00PM EDT
    Language English
    Select from 1 options below
    Live Virtual |10:00AM 6:00PM EDT
    Live Virtual | 10:00AM 6:00PM EDT
    Enroll
    Enroll Add to quote
  • Oct 20, 2025 - Oct 24, 2025 (5 days)
    Live Virtual | 9:00AM 5:00PM EDT
    Language English
    Select from 1 options below
    Live Virtual |9:00AM 5:00PM EDT
    Live Virtual | 9:00AM 5:00PM EDT
    Enroll
    Enroll Add to quote

FAQ

Does the course schedule include a Lunchbreak?

Classes typically include a 1-hour lunch break around midday. However, the exact break times and duration can vary depending on the specific class. Your instructor will provide detailed information at the start of the course.

What languages are used to deliver training?

Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.

What does GTR stand for?

GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.

Does Ascendient Learning deliver group training?

Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.

What does vendor-authorized training mean?

As a vendor-authorized training partner, we offer a curriculum that our partners have vetted. We use the same course materials and facilitate the same labs as our vendor-delivered training. These courses are considered the gold standard and, as such, are priced accordingly.

Is the training too basic, or will you go deep into technology?

It depends on your requirements, your role in your company, and your depth of knowledge. The good news about many of our learning paths, you can start from the fundamentals to highly specialized training.

How up-to-date are your courses and support materials?

We continuously work with our vendors to evaluate and refresh course material to reflect the latest training courses and best practices.

Are your instructors seasoned trainers who have deep knowledge of the training topic?

Ascendient Learning instructors have an average of 27 years of practical IT experience and have also served as consultants for an average of 15 years. To stay current, instructors spend at least 25 percent of their time learning new, emerging technologies and courses.

Do you provide hands-on training and exercises in an actual lab environment?

Lab access is dependent on the vendor and the type of training you sign up for. However, many of our top vendors will provide lab access to students to test and practice. The course description will specify lab access.

Will you customize the training for our company’s specific needs and goals?

We will work with you to identify training needs and areas of growth.  We offer a variety of training methods, such as private group training, on-site of your choice, and virtually. We provide courses and certifications that are aligned with your business goals.

How do I get started with certification?

Getting started on a certification pathway depends on your goals and the vendor you choose to get certified in. Many vendors offer entry-level IT certification to advanced IT certification that can boost your career. To get access to certification vouchers and discounts, please contact info@ascendientlearning.com.

Will I get access to content after I complete a course?

You will get access to the PDF of course books and guides, but access to the recording and slides will depend on the vendor and type of training you receive.

How do I request a W9 for Ascendient Learning?

View our filing status and how to request a W9.

Reviews

The platform is very intuitive and easy to navigate. Great tool for learning

It is very good and very simple instructions. almost to much hand holding.

Good Course. We covered a lot of material in a short amount of time. This course had useful labs that built upon each other.

ExitCertified provided a very organized way to learn and provided materials to follow along.

Both course material and instructor demonstrated a sound foundation on Maximo material