To deploy and use VMware Cloud Director Availability™ in VMware Cloud™ on AWS for migrations, first prepare the Software-Defined Data Center (SDDC). Create a network segment and allow accessing the management gateway vCenter Server for appliances deployment.
After meeting the SDDC prerequisites, prepare the SDDC for
VMware Cloud Director Availability deployment outside the management resource pool. Before deploying the appliances, create a dedicated resource pool.
Note: The access to the management resource pool is limited and the public IP addresses of all the users must be explicitly allowed before accessing the management components in the management resource pool, like
vCenter Server for the appliances deployment.
For an overview, see
Migration with VMware Cloud Director service.
Prerequisites
- Verify that the SDDC is successfully deployed at VMware Cloud on AWS, that the cloud administrator user can login to the SDDC, and has permissions to deploy OVF templates.
- Verify that in the VMware Cloud Director service, the Cloud Director instance is deployed at VMware Cloud on AWS in the same AWS region as the SDDC, for example, US West (Oregon), and that the Cloud Director instance is associated with the VMC SDDC.
- Verify that in the Cloud Director instance at least one organization, one organization network, one provider data center (Provider VDC), one organization virtual data center (Organization VDC), and a local administrator user with CDS Provider Admin Role exist and that the Cloud Director instance can host migrated virtual machines.
Procedure
- Log in to VMware Cloud on AWS at https://vmc.vmware.com.
- In the VMC console, in the left pane click SDDCs.
- Under the SDDC, click the View Details link.
- Under the SDDC name, click the Networking & Security tab.
- Add a network segment that connects the VMware Cloud Director Availability appliances so they can communicate between themselves and with other network services.
- On the Networking & Security tab, in the left pane under the Network section, click Segments.
- To add a dedicated routed network for the VMware Cloud Director Availability appliances, under Segment List, click Add Segment and enter the following settings.
Option |
Description |
Name |
Enter a name for the network segment. For example, enter vcda-network-segment. |
Type |
Routed |
Subnets |
Enter an IPv4 CIDR subnet for all the VMware Cloud Director Availability appliances. |
- To save the network segment, click Save and to finish configuring the segment click No.
Under the Subnets column, you see the routed network
CIDR used in the OVF deployment wizard, on the
Select Networks page.
- Before accessing the management gateway vCenter Server in VMware Cloud on AWS for deploying the VMware Cloud Director Availability appliances, create a Trusted Management Sources Group containing the allowed IP addresses.
- On the Networking & Security tab, in the left pane under the Inventory section click Groups.
- To create a management group, click the Management Groups tab, click Add Group and enter a group name.
- To add trusted members to this new management group, under the Compute Members column, click the Set Members link.
- In the Select Members window, on the IP Addresses tab enter the IP addresses of the trusted users and click Apply.
Management Group Name |
Management Group Trusted Members IP Addresses |
Trusted Management Sources Group |
Enter the externally-facing public-IP-addresses of the users granted with access to the vCenter Server management gateway service in VMware Cloud on AWS.
Important: Ensure that you add all the public IP addresses of each user allowed to access
vCenter Server in
VMware Cloud on AWS or the users have no access.
|
- To save the management group, click Save.
- To allow accessing the management gateway vCenter Server for the cloud appliances deployment, allow access from the trusted management sources group.
- On the Networking & Security tab, in the left pane under the Security section click Gateway Firewall.
- Click the Management Gateway tab, then click Add Rule and configure the following settings.
Option |
Description |
Name |
Enter a name for the compute gateway firewall rule. For example, enter vCenter Inbound From Trusted Management Sources Rule. |
Sources |
Click Any in the Sources column. In the Set Source window select User Defined Groups, select the trusted IP addresses management group and click Apply. For example, select Trusted Management Sources Group. |
Destinations |
In the Destinations column click Any, then in the Set Destination window, select System Defined Groups and select vCenter. |
Services |
In the Services column, select HTTPS (TCP 443). |
Action |
Allow |
- To publish the new management gateway firewall rule, click Publish.
- To obtain permissions for creating new virtual machines, create a separate resource pool dedicated for the multiple cloud VMware Cloud Director Availability appliances, outside the management resource pool.
- Click Open vCenter and log in with the cloud admin user credentials.
- Expand SDDC-Datacenter, right-click Cluster-1 and select New Resource Pool.
- In the New Resource Pool window, enter a name for the resource pool for the VMware Cloud Director Availability appliances. For example, enter VCDA-Resource-Pool.
- Configure the CPU and the Memory sections and click OK.
The new resource pool shows under
.
Results
After performing all the steps in this procedure, the SDDC in
VMware Cloud on AWS is fully prepared for
VMware Cloud Director Availability deployment. For a summary of the configuration, see
SDDC network configuration summary.
What to do next
You can now deploy the
VMware Cloud Director Availability appliances in
VMware Cloud on AWS. For more information, see
Deploy VMware Cloud Director Availability in the SDDC.