Focus

VM-Series Deployment Guide

Enable Communication Between NSX-T Manager and Panorama

Table of Contents

Enable Communication Between NSX-T Manager and Panorama

Complete the following procedure to enable communication between Panorama and NSX-T Manager. You can connect your Panorama to up to 16 NSX-T Managers. If you are connecting your Panorama to multiple NSX-T Managers, you must carefully plan your device group hierarchy and template stacks and consider how they interact with the other components needed for deployment. Service definitions reference device groups and template stacks and push that information to the firewalls in the related ESXi clusters.

(Optional) Bypass proxy server settings, configured on Panorama under PanoramaSetupServicesProxy Server, for communication between Panorama and NSX-T Manager. This command allows Panorama to communicate directly with NSX-T Manager while maintaining proxied communication for other services.
1. Log in to the Panorama CLI.
2. Execute the following command to enable or disable proxy bypass.
  admin@Panorama> request plugins vmware_nsx global proxy bypass {yes | no}
  Select yes to enable proxy bypass and no to disable proxy bypass. This is set to no by default.
Log in to the Panorama web interface.
Using a secure connection (https) from a web browser, log in using the IP address and password you assigned during initial configuration (https://<IP address>).
Set up access to the NSX-T Manager. Repeat this procedure for each NSX-T Manager to which you will connect Panorama.
1. Select PanoramaVMwareNSX-TService Managers and click Add.
2. Enter a descriptive Name for your NSX-T Manager.
3. (Optional) Add a Description for NSX-T Manager.
4. Enter the NSX Manager URL—NSX-T Manager cluster virtual IP address or FQDN—at which to access the NSX-T Manager.
5. Enter the NSX Manager Login credentials—username and password, so that Panorama can authenticate to the NSX-T Manager.
6. Click OK.
If you change your NSX-T Manager login password, ensure that you update the password on Panorama immediately. An incorrect password breaks the connection between Panorama and NSX-T Manager.
Commit your changes to Panorama.
Select Commit and Commit to Panorama.
Verify the connection status on Panorama.
1. Select PanoramaVMwareNSX-TService Managers.
2. Verify the message in the Status column.
  When the connection is successful, the status displays as Registered. This indicates that Panorama and the NSX-T Manager are in sync.
  The unsuccessful status messages are:
  - No connection: Unable to reach/establish a network connection to the NSX-T Manager.
  - Invalid Credentials: The access credentials (username and/or password) are incorrect.
  - Out of sync: The configuration settings defined on Panorama are different from what is defined on the NSX-T Manager.Click the link for details on the reasons for failure. For example, NSX-T Manager may have a service definition with the same name as defined on Panorama. To fix the error, use the service definition name listed in the error message to validate the service definition on the NSX-T Manager. Until the configuration on Panorama and the NSX-T Manager is synchronized, you cannot add a new service definition on Panorama.
  - Connection Disabled: The connection between Panorama and the NSX-T Manager was manually disabled.

Install the Panorama Plugin for VMware NSX

Create Template Stacks and Device Groups on Panorama