The following parameters are inherited from the default Tier-0 gateway and cannot be modified at the VRF level:
- Local AS
- Graceful restart
- Graceful restart timer
- Graceful restart stale timer
- Multipath relax
Inter-SR iBGP is not supported in VRF gateways.
BGP can be enabled or disabled per VRF gateway.
Route aggregation and BGP neighbors are local configurations per VRF.
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-4CB5796A-
1CED-4F0E-ADE0-72BF7B3F762C.html

https://docs.vmware.com/en/VMware-NSX/4.1/administration/GUID-26C44DE8-1854-4B06- B6DA-A2FD426CDF44.html

Network segmentation is a feature of NSX that improves the security of today's modern workloads by preventing lateral movement. Lateral movement is a technique used by attackers to move from one compromised system to another within a network, exploiting vulnerabilities or credentials. Network segmentation prevents lateral movement by dividing a network into smaller segments or zones, each with its own security policies and controls. This way, if one segment is compromised, the attacker cannot access other segments or resources. NSX enables network segmentation by using micro-segmentation, which applies granular firewall rules at the virtual machine level, regardless of the physical network topology.

Switch Visualization in the NSX UI provides a clear mapping between virtual NICs (vNICs) and the physical adapters on the host. This feature allows administrators to see how virtual network interfaces connect to the underlying physical network infrastructure, which is essential for troubleshooting connectivity issues on transport nodes.

The netcpa process is responsible for Local Control Plane (LCP) connectivity with the Central Control Plane (CCP) in NSX. Using the command esxcli network ip connection list | grep netcpa, administrators can verify the connectivity status between the LCP on the ESXi host and the CCP, ensuring proper communication for NSX operations.