Exporting the NSX-T DFW configuration via the Policy API

Some times it’s useful to export the entire distributed firewall configuration. It could be used as an offline backup before applying configuration changes, provided to personnel who does not have direct access to the NSX manager for auditing or information, or leveraged as a starting point for a migration to a new environment. Unfortunately, NSX-T does not have an out of the box export/import functionality for the distributed firewall configuration such as the one available in NSXv.

That said, we can use the Policy API to retrieve the entire firewall configuration and store it in a single JSON file that can be later leveraged to restore the configuration on the same NSX installation or a different one.

For the full post click here


Leave a Reply

%d bloggers like this: