DLR Managment Interface

[vSohill]

Hi NSX communitie,

I have DLR Control VM running on the management cluster. For the management interface,is the best design decision to connect managment interface to the engagement protgroup vlan backed ?

Thanks

[HassanAlKak88]

Hello,

Can you more explain your issue ?

[Ravi Shankar]

By the Management interface you mean to say that you want to do SSH DLR control VM ?

[Paul Hite]

Probably means the option under Configure > High Availability > Management/HA Interface

I've also wondered if this should be a dedicated segment just for UDLR HA, a more generic HA segment that can include other appliances, or if you can just reuse a transit segment.

[Ravi Shankar]

use can create a dedicated link for HA else you can use the same existing LS for HA.

its not mandatory to create a dedicated link for HA.

[vSohill]

Yes for DLR SSH

[lmoglie]

I think you can have more information here: Add a Distributed Logical Router  however, assuming that during the deploy of the DLR you have enabled SSH (disabled by default) ...... you can have login via  SSH to DLR Control VM pointing to its "Protocol Address". The Protocol Address is the IP that you configure when you are configuring dynamic routing, and is in the same IP subnet as your uplink.

regards

LM

[Ravi Shankar]

SSH service can be enabled during the time of deployment or after the deployement also.

SSH can be done on Protocol address only as the other interface of DLR are distributed and non of the IP stick only to Control VM. Protocol address is the only address that is for Control VM and not for distributed kernel modules.