It is critical that VVD project is greenfield deployment with spine leaf network topology. Where VVD can be accomplished on a traditional three-tier network, it might not fit within the preferred prescribed nature of a VVD. The preferred routing protocol is BGP, VVD can support OSPF configurations with some little extra effort. Where if there is no dynamic routing protocol an install of VVD will need a custom design for NSX to fit your network. Understanding firewall topology between different network zones is critical.

Failure to start with the prescribed Greenfield with Spine Leaf and BGP with good firewall documentation can add time and cost to a VVD project.

Please see https://kb.vmware.com/s/article/2079386 where Port 4789 is a requirement for the data center to data center traffic via VTEP protocol.

Please see https://communities.vmware.com/docs/DOC-34307 for all ports if there are firewalls between network segments in one datacenter. Along with an understanding of what ports might need to be open for users to access management products.

Prerequisites like AD Service Accounts, FQDN for all servers with forward and reverse DNS are working is paramount. SSL certificates need to be generated before the start of the project. Having hardware that is same per cluster is VMware best practice and is necessary for successful VVD deployment.

Please see http://pubs.vmware.com/vmware-validated-design-41/topic/com.vmware.ICbase/PDF/vmware-validated-design-41-sddc-planning-preparation.pdf

For a list of prerequisites and guide to prep for VVD engagement, I assume that VLAN’s, IP’s and FQDN’s will follow your corporate procedures.

Yes, the prerequisites seem to be a daunting task but many of them are core services for any data center. The vast majority of this prep work will cut down on process and change approval time and allow you to focus on the task of deployment laid out in the documentation for VMware validated designs.


Joe Tietz

VCP-DV, VCP-NV, VCAP-DCD currently working at VMware in the PSO organization​.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: