You can use vSphere Web Client to deploy NSX Manager as a virtual appliance. You can also configure the NSX Manager installation to install the NSX Policy Manager.

The NSX Policy Manager is a virtual appliance that lets you manage NSX policies. You can configure NSX policies to specify rules for NSX-T components such as logical ports, IP addresses, and VMs. NSX policy rules allow you to set high-level usage and resource access rules that are enforced without specifying the exact details.


It is recommended that you use vSphere Web Client instead of vSphere Client. If you do not have vCenter Server in your environment, use ovftool to deploy NSX Manager. See Install NSX Manager on ESXi Using the Command-Line OVF Tool.


  • Verify that the system requirements are met. See System Requirements.

  • Verify that the required ports are open. See Ports and Protocols.

  • If you do not already have one, create the target VM port group network. It is recommended to place NSX-T appliances on a management VM network.

    If you have multiple management networks, you can add static routes to the other networks from the NSX-T appliance.

  • Plan your IPv4 IP address scheme. In this release of NSX-T, IPv6 is not supported.


  1. Locate the NSX-T Unified Appliance OVA or OVF file.

    Either copy the download URL or download the OVA file onto your computer.

  2. In vSphere Web Client, launch the Deploy OVF template wizard and navigate or link to the .ova file.
  3. Enter a name for the NSX Manager, and select a folder or datacenter.

    The name you type appears in the inventory.

    The folder you select will be used to apply permissions to the NSX Manager.

  4. Select a datastore to store the NSX Manager virtual appliance files.
  5. If you are installing in vCenter, select a host or cluster on which to deploy the NSX Manager appliance.

    Normally, you would place the NSX Manager in a cluster that provides network management utilities.

  6. Select the port group or destination network for the NSX Manager.
  7. Specify the NSX Manager passwords and IP settings.
  8. Type the nsx-manager role.

    You can also type nsx-policy-manager to install the NSX Policy Manager.

  9. (Optional) For optimal performance, reserve memory for the NSX-T component.

    A memory reservation is a guaranteed lower bound on the amount of physical memory that the host reserves for a virtual machine, even when memory is overcommitted. Set the reservation to a level that ensures the NSX-T component has sufficient memory to run efficiently. See System Requirements.

  10. Open the console of the NSX-T component to track the boot process.
  11. After the NSX-T component boots, log in to the CLI as admin and run the get interface eth0 command to verify that the IP address was applied as expected.
    nsx-component> get interface eth0
    Interface: eth0
      MAC address: 00:50:56:86:7b:1b
      MTU: 1500
      Default gateway:
      Broadcast address:
  12. Verify that your NSX-T component has the required connectivity.

    Make sure that you can perform the following tasks.

    • Ping your NSX-T component from another machine.

    • The NSX-T component can ping its default gateway.

    • The NSX-T component can ping the hypervisor hosts that are in the same network as the NSX-T component using the management interface.

    • The NSX-T component can ping its DNS server and its NTP server.

    • If you enabled SSH, make sure that you can SSH to your NSX-T component.

    If connectivity is not established, make sure the network adapter of the virtual appliance is in the proper network or VLAN.

What to do next

Connect to the NSX Manager GUI by from a supported web browser.

The URL is https://<IP address of NSX Manager>. For example,


You must use HTTPS. HTTP is not supported.