# Deploy NSX Autonomous Edge (on-premises site)
## **Overview**
On-premises sites or the client’s L2 VPN require a specially configured VMware® NSX Edge™ appliance called autonomous edge. Deploy the NSX Autonomous Edge appliance using an OVF file on the ESXi host.
The autonomous NSX Edge is straightforward to deploy and provides a high-performance VPN. The autonomous NSX Edge is deployed using an OVF file. You can also enable high availability (HA) for VPN redundancy by deploying primary and secondary autonomous Edge L2 VPN clients.
*Please request the HI GIO team to get the OVF file.*
## **Procedure**
{% stepper %}
{% step %}
**Step 1:** Log in to the vCenter Server.
{% endstep %}
{% step %}
**Step 2:** Select Hosts and Clusters. To show the available hosts, expand the clusters.
{% endstep %}
{% step %}
**Step 3:** To deploy the NSX Edge, right-click the host where you want it and select Deploy OVF Template.
* On the Select an **OVF template** page, to download and deploy the OVF file, paste the URL, or select a locally downloaded OVF file and click NEXT.
* On the **Select a name and folder** page, Enter **Virtual machine name** & select a location for its > click **Next**.
* Select the destination compute resource > click Next on the Select a compute resource page.
* On the **Review details** page, verify the OVF package template details > click **Next**.
* On the **Configuration** page, select a deployment configuration size (**detail as below**) > click **Next**.
{% hint style="warning" %}
Medium size is suitable for normal use-case. If you don’t have special requirement, please use it.
{% endhint %}
**Sizing for NSX Autonomous Edge VM**
* On the **Select storage** page: select a storage & select virtual disk format = Thin provision > click **Next**.
* On the **Select networks** page, for all destination networks select the management network > click **Next**.
* On the **Customize template** page, enter the following properties > click **NEXT**.
*+ In the **Application** section, do the following:*
> Set the **System Root User Password**.
>
> Set the **CLI "admin" User Password**.
>
> Select the **Is Autonomous Edge** checkbox.
Leave the remaining fields empty.
{% hint style="warning" %}
NSX Edge core services do not start unless you enter passwords meeting these requirements:
At least 12 characters
At least one uppercase letter
At least one lowercase letter
At least one digit
At least one special character
At least five different characters
{% endhint %}
*+ In the **Network Properties** section, do the following:*
> Set the **Hostname**.
>
> Set the **Management Network IPv4 Address**. This is the management IP for the autonomous edge.
>
> Set the **Management Network Netmask**. This is the management network prefix length.
>
> Set the **Default IPv4 Gateway**. This is the default gateway of the management network.
***+** In the **DNS** section, do the following:*
> In the **DNS Server list** field, enter the DNS server IP addresses separated by spaces.
>
> In the **Domain Search List** field, enter the domain name.
***+** In the **Services Configuration** section, do the following:*
> Enter the **NTP Server List**.
>
> Enter the **NTP Servers**, separated by spaces.
>
> Select the **Enable SSH** checkbox.
>
> Select the **Allow Root SSH logins** checkbox.
***+** In the **External** section, do the following:*
Enter the **External Port** details in the following format: VLAN\_ID,Exit Interface,IP,Prefix Length.
*For example: 138,eth2,192.168.138.77,24*. Replace the following values:
VLAN ID: VLAN ID of the uplink VLAN
Exit Interface: interface ID reserved for uplink traffic
IP: IP address reserved for the uplink interface
Prefix Length: prefix length for the uplink network
In the **External Gateway** field, enter the default gateway of the uplink network.
***+ (Optional)** In the **HA** section, do the following:*
Enter the **HA Port** details in the following format: VLAN\_ID,Exit Interface,IP,Prefix Length.
*For example:* *137,eth2,192.168.137.81,24*. Replace the following values:
VLAN ID: VLAN ID of the uplink VLAN
Exit Interface: interface ID reserved for uplink traffic
IP: IP address reserved for the uplink interface
Prefix Length: prefix length for the uplink network
In the **HA Port Default Gateway** field, enter the default gateway of the management network
* Review the NSX Autonomous Edge settings > on the Ready to complete page> and click **FINISH**.
After the deployment completes, power on the NSX Autonomous Edge virtual machine.
Log in NSX autonomous via web browser:
{% endstep %}
{% endstepper %}
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.higiocloud.vn/hi-gio-draas/stretching-layer-2-networks-for-hi-gios-draas/deploy-nsx-autonomous-edge-on-premises-site.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.