IN VMware Cloud Foundation , to support the communication between tenant workloads by using application virtual networks in NSX-T and to connect tenant workloads to the external network, configure dynamic routing in the initial cluster of the NSX-T workload domain.
Routing occurs in both the North-South and East-West directions.
North-South traffic leaving or entering the workload domain, for example, a virtual machine on an overlay network communicating with an end-user device on the corporate network.
East-West traffic remains in the workload domain, for example, two virtual machines on the same or different segments communicating with each other.
Procedure
Create an NSX-T Edge Cluster Profile for an NSX-T Workload Domain In VMware Cloud Foundation , for availability of the routing services and connectivity to the external network, you create a multi-node cluster of NSX-T Edge nodes. To define a common configuration for NSX-T Edge nodes, you create an edge cluster profile.
Deploy the NSX-T Edge Appliances for an NSX-T Workload Domain In VMware Cloud Foundation , to provide tenant workloads with routing, services, and connectivity to networks that are external to the workload domain, deploy a pair of NSX-T Edge nodes in each availability zone.
Join the NSX-T Edge Nodes to the Management Plane for an NSX-T Workload Domain In VMware Cloud Foundation , after you deploy the NSX-T Edge appliances in the NSX-T workload domain cluster, to connect them to the NSX-T Manager cluster, join them to the management plane.
Create an Anti-Affinity Rule for the NSX-T Edge Nodes for an NSX-T Workload Domain To ensure that the two NSX-Т Edge appliances run on different ESXi hosts in VMware Cloud Foundation , create a vSphere DRS VM-host anti-affinity rule. If a failure occurs on one of the hosts, the appliance on the other host continues providing routing services.
Create Host Groups and Rules for Both Availability Zones for an NSX-T Workload Domain To ensure that all virtual machines that in an availability zone run on ESXi hosts in the same zone in VMware Cloud Foundation , you create and configure host and virtual machine groups rules in vSphere DRS .
Add the NSX-T Edge Nodes to the Transport Zones for an NSX-T Workload Domain After you deploy the NSX-T Edge nodes and join them to the management plane in VMware Cloud Foundation , add them to the transport zones for uplink and overlay traffic, and configure the N-VDS switches on each edge node.
Create the NSX-T Edge Cluster for an NSX-T Workload Domain Adding multiple NSX-T Edge nodes to a cluster increases the availability of networking services. An NSX-T Edge cluster is necessary to support the Tier-0 and Tier-1 gateways in the workload domain in VMware Cloud Foundation .
Create and Configure the Tier-0 Gateway for an NSX-T Workload Domain The Tier-0 gateway in the NSX-T Edge cluster provides a gateway service between the logical and physical network in VMware Cloud Foundation . The NSX-T Edge cluster can back multiple Tier-0 gateways.
Create and Configure the Tier-1 Gateway for an NSX-T Workload Domain To redistribute routes to the Tier-0 gateway and to provide routing between tenant workloads in VMware Cloud Foundation , create and configure the Tier-1 gateway.
Verify BGP Peering and Route Redistribution for an NSX-T Workload Domain The Tier-0 gateway must establish a connection to each of the upstream Layer 3 devices in its availability zone before BGP updates can be exchanged. Verify that the NSX-T Edge nodes are successfully peering and that BGP routing is established in VMware Cloud Foundation .