Module 4: Networking

Learning Objectives

By the end of this module, you will be able to:

• Configure external and internal networks in VergeOS for production workloads
• Set up VLANs and firewall rules to segment and secure network traffic
• Configure dynamic routing (BGP/OSPF) for enterprise environments
• Troubleshoot common networking issues using VergeOS diagnostic tools

Prerequisites

• Completion of Module 1: Architecture Fundamentals — understanding of core fabric networking
• Completion of Module 3: Installation — a running VergeOS cluster to configure

Estimated Time

3 hours (1.5 hours reading + 1.5 hours lab)

VMware Bridge

VergeOS networking replaces the combination of vSphere Standard/Distributed Switches, NSX-T, and vCenter network configuration. In VergeOS, all networking — internal, external, VLANs, routing, and firewalling — is managed from a single interface with software-defined networking built into the platform. There is no separate SDN product to deploy. Think of it as if NSX and vDS were fully integrated into vSphere from day one.

Nutanix Bridge

Nutanix networking relies on AHV’s built-in Open vSwitch (OVS) for VM connectivity and VLANs, with Flow as an optional add-on for micro-segmentation and security policies. VergeOS goes further by providing a complete integrated SDN stack — internal networks with built-in DHCP, DNS, routing, firewall, NAT, and VPN (WireGuard/IPsec) — all managed from a single UI. There is no equivalent to the VergeOS core fabric or DMZ network in Nutanix; these functions require external network infrastructure.

Topics

Network Concepts & Types

The VergeOS networking model: network types (internal, external, core, DMZ, maintenance), default-secure isolation, and software-defined networking fundamentals.

External Networks

Connecting VergeOS to upstream physical networks, IP addressing, gateway configuration, bonding modes, and provider network integration.

Internal Networks & DHCP/DNS

Creating isolated virtual networks for workloads, built-in DHCP and DNS services, inter-network routing via DMZ, and tenant self-service networking.

Firewall Rules, NAT & VLANs

Rule types (accept/drop/reject, NAT/PAT translate), rule processing order, VLAN trunking, VPN overview (WireGuard/IPsec), and micro-segmentation.

Lab: Network Configuration

Build a multi-network environment with external access, internal segmentation, and firewall rules.

Module Outline

1. Network Concepts & Types — Networking model, network types, default-secure isolation, and SDN fundamentals
2. External Networks — Upstream connectivity, IP addressing, gateway configuration, and bonding modes
3. Internal Networks & DHCP/DNS — Virtual network creation, DHCP, DNS, and inter-network routing via DMZ
4. Firewall Rules, NAT & VLANs — Firewall rules, NAT/PAT translation, VLAN trunking, and VPN overview
5. Lab: Network Configuration — Configure a complete multi-network environment with firewall rules and routing