For traffic segmentation in VMware Cloud Foundation, you place NSX Global Manager for the management domain on the management VLAN, and decide on the IP addressing scheme and name resolution for optimal support for the SDDC management components and host management.
Network Segment
For secure access to the ESXi hosts and vCenter Server, in each location of VMware Cloud Foundation, NSX Global Manager for the management domain is connected to the management VLAN segment.
| Decision ID |
Design Decision |
Design Justification |
Decision Implication |
|---|---|---|---|
| VCF-MGMT-NSX-FED-NET-001 |
Place the appliances of the NSX Global Manager cluster on the management VLAN network in each VMware Cloud Foundation instance. |
Reduces the number of required VLANs because a single VLAN can be allocated to both vCenter Server and NSX-T Data Center. |
None. |
IP Addressing Scheme
You can assign the IP addresses of the NSX Global Manager appliances by using DHCP or statically according to the network configuration in your environment.
| Decision ID |
Design Decision |
Design Justification |
Design Implication |
|---|---|---|---|
| VCF-MGMT-NSX-FED-NET-002 |
Allocate a statically assigned IP address and host name to the nodes of the NSX Global Manager cluster. |
Ensures stability across the private cloud, makes it simpler to maintain and track, and to implement a DNS configuration. |
Requires precise IP address management. |
Name Resolution
Name resolution provides the translation between an IP address and a fully qualified domain name (FQDN), which makes it easier to remember and connect to components across the VMware Cloud Foundation instance. Each IP address must have valid internal DNS registration which includes forward and reverse name resolution. NSX Manager must be connected to the following components:
-
Management vCenter Server
-
Each ESXi host
-
NSX Edge cluster
- NSX Local Manager clusters if your environment is configured with NSX Federation
-
Internal DNS servers for name resolution of other management components
| Decision ID |
Design Decision |
Design Justification |
Design Implication |
|---|---|---|---|
| VCF-MGMT-NSX-FED-NET-003 |
Configure forward and reverse DNS records for the nodes of the NSX Global Manager cluster for the management domain. |
The NSX Global Manager nodes and VIP address are accessible by using fully qualified domain names instead of by using IP addresses only. |
You must provide DNS records for the NSX Global Manager nodes for the management domain in each VMware Cloud Foundation instances. |
Time Synchronization
Time synchronization provided by the Network Time Protocol (NTP) is important to ensure that all components within the SDDC are synchronized to the same time source
| Decision ID |
Design Decision |
Design Justification |
Design Implication |
|---|---|---|---|
| VCF-MGMT-NSX-FED-NET-004 |
Configure NTP on each NSX Global Manager appliances. |
NSX Global Manager depends on time synchronization across all private cloud components. |
None. |
