It is important to understand what your responsibilities include and which are shared between your teams and the VMware team. Deploying Horizon Cloud Service on IBM Cloud can be divided into several basic areas of responsibility, as shown in the table below.
|Phase||Areas of Responsibility|
|Project Kickoff||Your SMEs with VMware:
|Final Setup and Test||Your SMEs:
|Complete||Your SMEs with VMware:
Ensure that all required internal and external network traffic ports for the protocols are enabled (see Prerequisites for Firewall and Ports). You are also responsible for your organization’s side of the IPsec VPN tunnel, if you choose to deploy in that configuration. If you deploy a dedicated connection, MPLS, or Network Exchange, you are responsible for working with your preferred carrier or telecommunications provider to establish connectivity to the VMware data center.
Depending on the network connection option you select, VMware provides you with the information you need for success.
- IPsec VPN – VMware provides the information required to establish the IPsec tunnel and is responsible for the VMware side of the VPN IPsec tunnel configuration.
- Dedicated connection, MPLS, Network Exchange, or an existing rack – VMware configures the interconnect between the Network Service Provider and your networking equipment and your Horizon Cloud Service tenant in the VMware data center. You must purchase the Direct Connect with Cross Connect option or Direct Connect with Network Exchange option from VMware. For all connectivity types, VMware works with you to perform the necessary network tests to ensure a successful connection.
- Island tenant – If you deploy an island tenant without integration between VMware and your infrastructure, VMware provides a utility server to use as an Active Directory, DNS, and DHCP server. To function properly, cloud-hosted desktops require that an Active Directory Domain controller and supporting services be deployed in the tenant.