Author: Danilo

Setting Up Windows AD FS is an article that shows how to set up the Windows AD FS service to provide Federated Identity and Access Management. AD FS Overview AD FS is an acronym for Active Directory Federation Services. It enables Federated Identity and Access Management by securely sharing digital identity and entitlements rights across security and enterprise boundaries. AD FS extends the ability to use single sign-on functionality available within a single security or enterprise boundary to Internet-facing applications to enable customers, partners, and suppliers a streamlined user experience while accessing the web-based applications of an organization. In other…

Working with IDFW on NSX-T is an article that shows what are the IDFW rules and how to create your IDFW rules on the NSX-T environment. IDFW is an acronym for Identity Distributed Firewall. Basically, with this feature, we can create DFW (Distributed Firewall) rules based on users and groups of users from Microsoft Active Directory (AD). This type of rule is useful when the aim is to create rules based on users or groups independent what is the source address of the end-user. For example, with an IDFW rule, we can permit the group user “Sales” to access the…

DHCP Server on NSX-T is an article that provides all the steps to set up a DHCP Server on an NSX-T Segment. With this configuration, NSX-T will be your DHCP Server for the specific NSX-T Segment. Configuring an NSX-T DHCP Server allows virtual machines connected to an NSX-T Segment to receive IP addresses and network settings automatically. In this guide, we explain how the built-in DHCP service works and walk through the configuration process step by step. NSX-T supports multiple approaches for delivering DHCP services to workloads. You can configure NSX-T to operate as the DHCP Server for individual segments…

Configuring DNS Service on NSX-T is an article that provides the necessary steps to configure the DNS Forwarder service on the NSX-T environment. DNS is the acronym for Domain Name Server. This network protocol translates DNS names/FQDN to IP addresses (and vice versa). In the picture below, we have an example of how the DNS protocol translates the domain name to the IP address. The end-user is requesting the domain name “www.example.com” to its DNS resolver and it is responsible for giving the IP address for the user’s request. If the DNS resolver (DNS server used by the end-user) does…

Useful RVC Commands for Troubleshooting vSAN is an article that provides some RVC commands to help the vSAN troubleshooting process. Firstly, What is RVC? RVC is an acronym for Ruby vSphere Console. It is an interactive command-line console accessible by the vCenter Server. The RVC is based on the popular RbVmomi Ruby Interface. When the vCenter Server is deployed, the RVC console “is embedded” – we do not need to install any additional package or something like that. We can use RVC for troubleshooting several things on the vSphere environment, and for vSAN clusters, RVC can be a primary tool…

Network Address Translation (NAT) on NSX-T is an article that explains some ways to use the NAT on NSX-T. We will provide some examples of SNAT (Source NAT) and DNAT (Destination NAT). First and Foremost, What is NAT? When we are talking about NAT, we are talking about some techniques when it is possible to translate the IP addresses. It is a method by which IP addresses are mapped from one realm to another, in an attempt to provide transparent routing to hosts, access services, solve network overlap issues, etc. Just to remember, the NAT technology was developed to solve…