Create security groups for use in configuring firewall rules for the groups of applications in the SDDC.

A security group is a collection of assets (or objects) from your vSphere inventory that you group together.

You perform this procedure multiple times to configure all the necessary security groups. In addition, you create the VMware Appliances and Windows Servers groups from the security groups you add in the previous repetitions of this procedure.

Table 1. Security Groups for the Management Clusters Components in the SDDC

Name

Object Type

Selected Object

vRealize Automation Proxy Agents

IP Sets

vRealize Automation Proxy Agents

vRealize Business Data Collector

IP Sets

vRealize Business Data Collector

VMware Storage API for VADP Solution

IP Sets

VMware VADP

vRealize Operations Manager Remote Collectors

IP Sets

vRealize Operations Manager Remote Collectors

vRealize Suite Lifecycle Manager

IP Sets

vRealize Suite Lifecycle Manager

vRealize Log Insight

IP Sets

vRealize Log Insight

Update Manager Download Service

IP Sets

Update Manager Download Service

ROBO SDDC

IP Sets

ROBO SDDC

Administrators

IP Sets

Administrators

Windows Servers

Security Groups

  • vRealize Automation Proxy Agents

VMware Appliances

Security Groups

  • vRealize Business Data Collector

  • VMware vStorage API for Data Protection Solution

  • vRealize Operations Manager Remote Collectors

  • vRealize Suite Lifecycle Manager

  • vRealize Log Insight

Procedure

  1. Log in to vCenter Server by using the vSphere Web Client.
    1. Open a Web browser and go to https://nyc01r01vc01.rainpole.local/vsphere-client.
    2. Log in using the following credentials.

      Setting

      Value

      User name

      administrator@vsphere.local

      Password

      vsphere_admin_password

  2. In the Navigator, click Networking & Security and click Groups and Tags.
  3. Select the 172.18.11.65 NSX Manger instance, and click the Security Groups tab.
  4. Click the Add new Security Group icon. 

    The Add Security Group wizard appears.

  5. On the Name and description page, enter vRealize Automation Proxy Agents in the Name text box, click the Universal Synchronization toggle to On, and click Next.
  6. On the Select Objects to include page, select IP Sets from the Object Type drop-down menu, select vRealize Automation Proxy Agents from the list of available objects, click the Add button, and click Next.
  7. On the Ready to Complete page, verify the configuration values that you entered and click Finish.
  8. Repeat this procedure to create all the necessary security groups.