The bootstrapping configuration templates on VSD ensures NSG configuration conformance.

NSG is ready for dispatch without prior configuration.

It solves the problem of site CPE activation without having to send a skilled technician on site.

NSG exchanges the plain text proprietary bootstrap protocol with VSD.

Forwarding policies can be applied to ingress and egress traffic.

Redirection targets should be created in advance and associated with vports.

Redirection targets cannot be associated with bridge vports (physical appliances).

Traffic between two branch offices or between two devices in the same branch office can be redirected to an appliance located in the data center.

An ‘overlay network’ is a virtual abstraction built on top of an existing physical network.

Both VXLAN and TRILL are host-centric overlay solutions.

Nuage Networks VNS uses a VXLAN-based overlay solution.

Overlay networks are totally transparent to their physical underlay network.

A security policy is composed of entries defining the conditions to redirect a packet.

Ingress policy acts on traffic flow towards the network (or the OVS component).

The security policies are defined at the domain level.

The security policies deployed on the VSD are distributed ACLs implemented on the VRSs and NSGs.

The VSD in the data center and the VSD for the branch office are running XMPP to synchronize with each other.

The VSC in the data center and the VSC for the NSG branch office are running BGP to update each other’s forwarding table.

With integration, the virtual machines in the data center and the devices in the branch office can belong to the same overlay network.

Traffic between the virtual machines in the data center and the devices in the branch office are forwarded in VXLAN tunnels.

NSG vPorts are associated with access ports.

There are four types of vPorts: VM, container, host and bridge.

The NSG’s vPorts are typically host vPorts.

One vPort can only belong to one subnet or L2 domain.

Manual provisioning slows down the new site turn-up.

There is no Internet access at the remote office.

OPEX is very high whereas CAPEX is low.

MPLS VPN is not supported on CPEs.

It runs directly on any Linux-based bare metal server.

It is packaged as a docker container.

It is deployed as a KVM, Hyper-V or ESXi virtual machine.

It must be hosted in a public cloud such as AWS.

It is a virtual appliance.

It has 4 LAN ports at maximum.

It supports dual WAN uplinks.

It can only be deployed in standalone model.

The NSGs use OpenFlow to exchange routing information between each other.

The NSGs use VXLAN to exchange routing information between each other.

The NSGs forward overlay traffic between each other by using an OpenFlow tunnel.

The NSGs forward overlay traffic between each other by using a VXLAN tunnel.