All configurations made from the Global Manager are made in Policy mode. Manager mode is not available in NSX Federation.
See NSX Manager for more information about the two modes.
For most configurations, the Local Manager cluster has the same configuration maximums as an NSX Manager cluster. Go to VMware Configuration Maximums tool and select NSX-T Data Center.
Select the NSX Federation category for NSX-T Data Center in the VMware Configuration Maximums tool for exceptions and other NSX Federation-specific values.
For a given location, the following configurations contribute to the configuration maximum:
- Objects that were created on the Local Manager.
- Objects that were created on the Global Manager and include the location in its span.
You can view the capacity and usage on each Local Manager. See View the Usage and Capacity of Categories of Objects.
- All service-insertion related configuration such as partner service registration, deployment and consumption, is done from a Local Manager (LM).
- Only objects configured on the LM are used with service insertion. This includes groups, segments, and any other constructs. Service insertion cannot be applied to workloads connected to a stretched/global segment defined from the GM, or any segment connected to a logical router created from the GM. Groups created from the Global Manager should not be used within service insertion redirection polices.
- NSX Federation locations must run on environments where administrators have full control of the underlay fabric.
- NSX Federation does not support Local Manager or Global Manager hosted on VMware Cloud on AWS (VMC on AWS), Azure VMware Solution (AVS), Google Cloud VMware Engine (GCVE), Oracle Cloud VMware Solution (OCVS), or Alibaba Cloud VMware Service (ACVS).
||Add a Tier-0 Gateway from Global Manager|
|Tier-1 Gateway||Add a Tier-1 Gateway from Global Manager|
|Segments||Layer 2 Bridge is not supported.||Add a Segment from Global Manager|
|Groups||Some limitations. See Security in NSX Federation.||Create Groups from Global Manager|
|Distributed Firewall||Starting in 3.2: Draft of the security policies are now available on Global Manager. This includes support for auto and manual drafts.||Create Drafts In Global Manager|
|Gateway Firewall||Create Gateway Policies and Rules from Global Manager|
|Network Address Translation (NAT)||Tier-0 Gateway:
Stateless NAT rules are pushed to all locations in the gateway's span unless scoped to one or more locations specifically.
Stateful NAT rules are also pushed to all locations in the gateway's span or to the specific location selected. However, stateful NAT rules are realized and enforced only on the primary location.
|Configure SNAT/DNAT/No SNAT/No DNAT/Reflexive NAT|
|DNS||See Add a DNS Forwarder Service|
|DHCP and SLAAC||
|Using objects created on Global Manager in a Local Manager confiiguration||Most configurations are supported. For example:
|Network Monitoring||Starting in 3.2:
|Backup and Restore||
||Backup and Restore in NSX Federation|
|vMotion between locations||