Implementing software-defined network resources for vSphere with Tanzu includes deployment and configuration of NSX components.

Add a Network Segment for Developer Ready Infrastructure for VMware Cloud Foundation

Create a network segment in NSX for the VI workload domain. You use the network segment to connect network profiles defined in vSphere with Tanzu.

UI Procedure

  1. Log in to NSX Manager at https://<nsx_manager_fqdn>/login.jsp with a user assigned the Network admin role.
  2. On the main navigation bar, click Networking.

  3. In the left pane, click Segments.

  4. On the Segments tab, click Add Segment.

  5. Configure the settings for the segment according to your values in the VMware Cloud Foundation Planning and Preparation Workbook, and click Save.

  6. In the Want to continue configuring this Segment? dialog box, click No.

PowerShell Procedure

  1. Start PowerShell.

  2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

    $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
$sddcManagerUser = "[email protected]"
$sddcManagerPass = "VMw@re1!"

$sddcDomainName = "sfo-w01"

$tanzuSegmentName = "sfo-w01-seg01-tanzu"
$tier1GatewayName = "sfo-w01-ec01-t1-gw01"
$tanzuSegmentGatewayCIDR = "192.168.20.1/24"
$overlayTzName = "overlay-tz-sfo-w01-nsx01.sfo.rainpole.io"

  3. Perform the configuration by running the command in the PowerShell console.

    Add-NetworkSegment -Server $sddcManagerFqdn -User $sddcManagerUser -Pass $sddcManagerPass -Domain $sddcDomainName -SegmentName $tanzuSegmentName -ConnectedGateway $tier1GatewayName -Cidr $tanzuSegmentGatewayCIDR -TransportZone $overlayTzName -GatewayType Tier1 -SegmentType Overlay

Add IP Prefix Lists to the Tier-0 Gateway for Developer Ready Infrastructure for VMware Cloud Foundation

Define three IP prefix lists and IP prefixes on the Tier-0 gateway for use by the Supervisor. You configure the IP Prefixes so their corresponding routes are advertised northbound via Border Gateway Protocol (BGP).

UI Procedure

  1. Log in to NSX Manager at https://<nsx_manager_fqdn>/login.jsp with a user assigned the Network admin role.
  2. On the main navigation bar, click Networking.
  3. In the left pane, click Tier-0 gateways.

  4. Click the ellipsis menu for your Tier-0 gateway, and click Edit.

  5. Create a new IP prefix list for management operations.

    1. Expand the Routing section and click the digit link next to IP prefix lists.

    2. In the Set IP prefix list dialog box, click Add IP prefix list.

    3. Enter a name for the prefix and, under Prefixes, click Set.

    4. In the Set prefixes dialog box, click Add Prefix.

    5. Under Network, enter the value for your Management network according to your value in the VMware Cloud Foundation Planning and Preparation Workbook.

    6. Under Action set the drop-down menu to Permit, and click Add.

    7. Repeat step d and f for your Load Balancer (ingress) and NAT (egress) prefixes.

    8. To finish adding the IP prefix list, click Apply and click Save.

  6. In the Set IP prefix list dialog box, click Close.

  7. On the Tier-0 gateway page, click Close editing.

PowerShell Procedure

  1. Start PowerShell.

  2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

    $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
$sddcManagerUser = "[email protected]"
$sddcManagerPass = "VMw@re1!"

$sddcDomainName = "sfo-w01"

$tier0GatewayName = "sfo-w01-ec01-t0-gw01"
$prefixListName = "sfo-w01-ec01-t0-gw01-prefixlist"
$tanzuManagementSubnetCidr = "192.168.20.0/24"
$tanzuIngressSubnetCidr = "192.168.21.0/24"
$tanzuEgressSubnetCidr = "192.168.22.0/24"

  3. Perform the configuration by running the command in the PowerShell console.

    Add-PrefixList -Server $sddcManagerFqdn -User $sddcManagerUser -Pass $sddcManagerPass -Domain $sddcDomainName -Tier0Gateway $tier0GatewayName -PrefixListName $prefixListName -SubnetCIDR $tanzuManagementSubnetCidr -ingressSubnetCidr $tanzuIngressSubnetCidr -egressSubnetCidr $tanzuEgressSubnetCidr -GE "28" -LE "32" -Action PERMIT

Create a Route Map on the Tier-0 Gateway for Developer Ready Infrastructure for VMware Cloud Foundation

Define a route map on the Tier-0 gateway for use by the Supervisor. You configure the route map to ensure appropriate Tier-1 gateway-based routes are advertised northbound via BGP.

UI Procedure

  1. Log in to NSX Manager at https://<nsx_manager_fqdn>/login.jsp with a user assigned the Network admin role.
  2. On the main navigation bar, click Networking.
  3. In the left pane, click Tier-0 gateways.

  4. Click the ellipsis menu for your Tier-0 gateway and click Edit.

  5. Create a new route map.

    1. Expand the Routing section and, in the Route maps section, click Set.

    2. In the Set route maps dialog box, click Add route map.

    3. Enter a route map name and, in the Match criteria column, click Set.

    4. In the Set match criteria dialog box, click Add match criteria.

    5. In the Members column, click Set.

    6. In the Select IP Prefix dialog box, select the check box next to the prefix list you created earlier and click Save.

    7. In the Action column, select Permit, click Add, and click Apply.

    8. In the Set route maps dialog box, click Save and click Close.

  6. Configure route re-distribution.

    1. On the Tier-0 gateway, expand the Route re-distribution section and click the digit link next to Route re-distribution.

    2. In the Set route re-distribution dialog, click Edit.

    3. In the Route re-distribution dialog box, click the ellipsis drop-down menu for the default route re-distribution and click Edit.

    4. From the Route map drop-down menu, select the route map you created in the previous step, click Add, and click Apply.

  7. On the Tier-0 gateway page, under Route re-distribution, click Save and click Close editing.

PowerShell Procedure

  1. Start PowerShell.

  2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

    $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
$sddcManagerUser = "[email protected]"
$sddcManagerPass = "VMw@re1!"

$sddcDomainName = "sfo-w01"

$tier0GatewayName = "sfo-w01-ec01-t0-gw01"
$prefixListName = "sfo-w01-ec01-t0-gw01-prefixlist"
$routeMapName = "sfo-w01-ec01-t0-gw01-routemap"

  3. Perform the configuration by running the command in the PowerShell console.

    Add-RouteMap -Server $sddcManagerFqdn -User $sddcManagerUser -Pass $sddcManagerPass -Domain $sddcDomainName -Tier0Gateway $tier0GatewayName -RouteMap $routeMapName -PrefixListName $prefixListName -Action PERMIT -ApplyPolicy:$True