Create security groups for use in configuring firewall rules for the groups of applications in the SDDC.

About this task

A security group is a collection of assets (or objects) from your vSphere inventory that you group together.

You perform this procedure multiple times to configure all of the necessary security groups. In addition, you create the VMware Appliances and Windows Servers groups from the security groups you add in the previous repetitions of this procedure.

Table 1. Security Groups for the Management Clusters Components in the Consolidated Cluster

Name

Object Type

Selected Object

vRealize Automation Proxy Agents

IP Sets

vRealize Automation Proxy Agents

vRealize Business Data Collector

IP Sets

vRealize Business Data Collector

vSphere Data Protection

IP Sets

vSphere Data Protection

vRealize Operations Manager Remote Collectors

IP Sets

vRealize Operations Manager Remote Collectors

vRealize Log Insight

IP Sets

vRealize Log Insight

Update Manager Download Service

IP Sets

Update Manager Download Service

ROBO SDDC

IP Sets

ROBO SDDC

Administrators

IP Sets

Administrators

Windows Servers

Security Groups

  • vRealize Automation Proxy Agents

VMware Appliances

Security Groups

  • vRealize Business Data Collector

  • vSphere Data Protection

  • vRealize Operations Manager Remote Collectors

  • vRealize Log Insight

Procedure

  1. Log in to vCenter Server by using the vSphere Web Client.
    1. Open a Web browser and go to https://nyc01vc01.rainpole.local/vsphere-client.
    2. Log in using the following credentials.

      Setting

      Value

      User name

      administrator@vsphere.local

      Password

      vsphere_admin_password

  2. In the Navigator, click Networking & Security and click NSX Managers.
  3. Select the 172.18.11.65 NSX Manager instance, and click the Manage tab.
  4. Click Grouping Objects, select Security Group, and click the Add new Security Group icon. 

    The Add Security Group wizard appears.

  5. On the Name and description page, enter vRealize Automation Proxy Agents in the Name text box, and click Next
  6. On the Define dynamic membership page, click Next.
  7. On the Select objects to include page, select IP Sets from the Object Type drop-down menu, select vRealize Automation Proxy Agents from the list of available objects, click the Add button, and click Next.
  8. On the Select Objects to exclude page, leave the defaults , click Next.
  9. On the Ready to Complete page, verify the configuration values that you entered and click Finish.
  10. Repeat this procedure to create all of the necessary security groups.
    Figure 1. Security Groups