Configure NSX-T north-south gateway firewall rules or policies

Home > VMWare platform > VMWare NSX > Configure NSX-T north-south gateway firewall rules or policies

When we configure NSX-T T0 in active-active mode as advised at Configure NSX-T 3.0 from scratch with edge cluster and tier gateways or as is automatically done when using VCloud Foundation automated NSX-T deployment, then while configuring north-south gateway firewall rules or policies we need to:

• Ensure that TCP strict is disabled as the same Edge may not see all the packets related to 3-way handshake
• Disable stateful as again edge may not see all packets related to connection establishment, acks, etc. to maintain proper TCP state of connection.

Refer:

• https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-DE6FE8CB-017E-41C8-85FC-D71CF27F85C2.html

Home > VMWare platform > VMWare NSX > Configure NSX-T north-south gateway firewall rules or policies