To prepare for a distributed firewall (DFW) configuration migration, configure the export version of DFW filter on hosts and create a layer-2 bridge between NSX-V and NSX-T. Also, tag the management VMs if you have a collapsed vCenter Server cluster.
For information on creating a layer-2 bridge between NSX-V and NSX-T, see Preparing Layer-2 Bridging for Lift-and-Shift Migration.