You can add an NSX on-demand NAT network component or NSX on-demand routed network component to the design canvas in preparation for associating their settings to one or more vSphere machine components in the blueprint.

About this task

When you associate an existing network component or an on-demand network component with a machine component, the NIC information is stored with the machine component. The network profile information that you specify is stored with the network component.

You can add multiple network and security components to the design canvas.

For machine components that do not have a Network or Security tab, you can add network and security custom properties, such as VirtualMachine.Network0.Name, to their Properties tab in the design canvas. NSX network, security, and load balancer properties are only applicable to vSphere machines.


  • Create and configure network settings for NSX externally. See Checklist for Preparing NSX Network and Security Configuration and NSX Administration Guide.

  • Verify that the NSX plug-in for vRealize Automation is installed and that the NSX inventory has executed successfully for your cluster .

    To use NSX configurations in vRealize Automation, you must install the NSX plug-in and run data collection.

  • Create a network profile. See Creating a Network Profile.

    For example, if you are adding an on-demand NAT network component, create a network profile for NAT.

  • Log in to the vRealize Automation console as an infrastructure architect.

  • Open a new or existing blueprint in the design canvas by using the Design tab.


  1. Click Network & Security in the Categories section to display the list of available network and security components.
  2. Drag one of the on-demand network components onto the design canvas, depending on whether you want to configure an on-demand NAT or on-demand routed network component.
  3. Enter a component name in the ID text box to uniquely label the component in the design canvas.
  4. Select an appropriate network profile from the Parent network profile drop-down menu.

    For example, if you are adding an On-Demand NAT Network component, select a NAT network profile.

    The following network settings are populated based on your network profile selection. Changes to these values must be made in the network profile:

    • External network profile name

    • NAT type (On-Demand NAT Network)

    • Subnet mask

    • Range subnet mask (On-Demand Routed Network)

    • Range subnet mask (On-Demand Routed Network)

    • Base IP address (On-Demand Routed Network)

  5. (Optional) Enter a component description in the Description text box.
  6. (Optional) Click the DNS/WINS tab.
  7. (Optional) Specify or accept provided DNS and WINS settings for the network profile.
    • Primary DNS

    • Secondary DNS

    • DNS Suffix

    • Preferred WINS

    • Alternate WINS

    You cannot change the DNS or WINS settings for an existing network.

  8. (Optional) For an on-demand NAT network component, click the DHCP tab to specify IP address range and lease length values.

    You can edit the start and end IP address values for the DHCP range. When the virtual machine is provisioned with DHCP, the network adapter assigns an IP address to the machine that is within this range. It is a static network adapter by default. The IP address values cannot be those of the network or broadcast addresses used in the associated subnet. You cannot overlap static IP ranges.

    DHCP is available only for on-demand one-to-many NAT network components.

  9. (Optional) Enter a start IP address value in the IP range start text box.
  10. (Optional) Enter an end IP address value in the IP range end text box.
  11. Enter a DHCP lease length, in seconds, in the Lease time (seconds) text box or leave blank for an unlimited lease length. For NAT networks you can also change IP ranges.
  12. (Optional) Click the IP Ranges tab.

    The IP range or ranges specified in the network profile are displayed. You can change the sort order or column display. For NAT networks, you can also change IP range values.

  13. Click Finish to save the blueprint as draft or continue configuring the blueprint.

What to do next

You can continue configuring network settings by adding additional network components and by selecting settings in the Network tab of a vSphere machine component in the design canvas.