IPv6 is here and IPv4 is definitely running out of time. Here in the Netherlands, the consumer internet providers have been “working on it” for years. I’ve been lobbying for IPv6 connectivity for years, without much luck. After a time of experimenting with IPv6-over-IPv4 tunnels and Teredo, I basically gave up on those technologies due to various reasons; high latency, complexity & subnet reputation (a lot of shady stuff was going on those free IPv6 subnets).

Recently, I finalized my IPv6 implementation in my hosted environment (couple of websites, other apps/databases), which also contains a NSX testlab. Considering … Read more


Amazon Web Services has a few ways of giving you connectivity: internet, Direct Connect (a physical line) and VPN. While AWS has a ton of examples for firewall/VPN vendors, there is none for connecting with NSX. I needed to connect a NSX network with AWS for a proof of concept and had to figure out how to configure AWS and what settings to use on the NSX Edge VPN. Behold, the fruits of my labor!

aws-nsx-vpn-topology

This is what we are going to be building in this post. Compute resources inside AWS connected with a VPN towards VMware NSX for corporate … Read more


This post is part of my VMware VCIX-NV Study Guide and covers the Virtual Private Network connection (VPNs) options inside VMware NSX.

Documentation

Index

Read more

This is going to be a lengthy post, one I’ve been wanting to do for a while, since there is not much information out there on this type of setup.

First off, let me explain the title real quick. “Juniper SSG Double Dual Homed VPN” means that we have 2 sites, e.g. branch and a main office and that both sites have two different internet connections for failover. We want to create a VPN between these 2 sites. It will look like this:

ssg-double-dual-homed

Juniper SSG firewall devices could be a perfect fit for a branch connecting to a main facility/datacenter. … Read more