setting up L2 Bridging on NSX Projects to External VLAN-based Cluster

Products

• VMware NSX

Issue/Introduction

• L2 bridging on NSX Projects can be configured using the Policy API and it is supported
• No option to configure from the GUI

Environment

VMware NSX 4.x

Resolution

Apart from the regular configuration from admin guide: https://techdocs.broadcom.com/us/en/vmware-cis/nsx/vmware-nsx/4-2/migration-guide/preparing-layer-2-bridging-for-lift-and-shift-migration/create-an-edge-bridge-profile.html below are the only additional steps through API:

1. Create or update L2 Bridge Endpoint Profile using below API

PUT https://<nsx-mngr-ip>/policy/api/v1/infra/sites/default/enforcement-points/default/edge-bridge-profiles/<name>

Sample Body:

{

  "edge_paths": [

      "/infra/sites/default/enforcement-points/default/edge-clusters/########-####-####-####-############/edge-nodes/0"

    ],

  "ha_mode": "ACTIVE_STANDBY",

  "failover_mode": "PREEMPTIVE"

}

2. Bind or attach the profile to the segment under project.

PUT/PATCH https://<nsx-mngr-ip>/policy/api/v1/orgs/default/projects/test1/infra/segments/<name>

Sample Body:

{"bridge_profiles": [

        {

            "bridge_profile_path": "/infra/sites/default/enforcement-points/default/edge-bridge-profiles/p1",

            "vlan_ids": [

                "#"

            ],

            "vlan_transport_zone_path": "/infra/sites/default/enforcement-points/default/transport-zones/########-####-####-####-############"

        }

    ]

}

API References: Create or update L2 Bridge Endpoint Profile