Before the migration, make sure that the NSX-V configurations do not exceed the limits listed below.

Table 1. Single-Site Limits
Feature Limit
Hosts per NSX Manager (Single vCenter - Transport Zone) 512
vCenter Clusters 64
Distributed Logical Router interfaces per Distributed Logical Router 999
Logical Switches 10000
ECMP paths 8
Static routes per Edge Services Gateway 10000
Virtual interfaces per hypervisor host 150
NAT rules per Edge Services Gateway 4096
Edge firewall rules per Edge Services Gateway 2000
Security Groups per NSX Manager 10000
Distributed Firewall rules per host 10000
Distributed Firewall sections 5600
Distributed Firewall rules per NSX Manager 100000
Networks per L2VPN client-server pair 100
L2VPN clients (spoke) handled by a single L2VPN server (hub) 2
IPSec tunnels per Edge Services Gateway 500
DHCP leases per Edge Services Gateway 2048
IP Sets 10000
Security Tags 9000
Security Tags per VM 30
Grouping Objects (Security Groups to which a virtual machine can be a member) 100
Grouping Objects per NSX Manager 10000

Grouping Objects include Security Groups, IP Sets, and Security Tags. The sum of all their values in your NSX-V environment must not exceed 10000.
Virtual servers per load balancer 1024
AD groups 70000
Users in the AD domain 100000
AD groups per individual user 200
VMs using terminal service per host 8
Hosts (when migrating IDFW) 250
VMs with Network Introspection enabled 1000
Network Introspection rules per NSX Manager 3500
VMs per Security Group with Network Introspection enabled 1000
VMs per host with Network Introspection enabled 125
Guest Introspection VMs per host 40
Table 2. Load Balancer
Feature Limit
Pools per Load Balancer (large and quad large ESG) 64
Pools per Load Balancer (x-large ESG) 1000
Load Balancer servers per pool 32
Load Balancer pools per ESG 64
Load Balancer VIPs per ESG 64