From a165ef204ad04b13e0122b81944229e7a4b055ab Mon Sep 17 00:00:00 2001 From: sumitkapoor Date: Wed, 24 Feb 2021 16:33:37 +0530 Subject: [PATCH 1/2] In 2.1 we need DHCP to be enabled in VCS for cold migration support as MicroVM does not get configured with static IP --- .../08.vcs/10.Network Planning/30.IPSec Tunnel/default.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/pages/01.HDM Documentation/08.vcs/10.Network Planning/30.IPSec Tunnel/default.md b/pages/01.HDM Documentation/08.vcs/10.Network Planning/30.IPSec Tunnel/default.md index 613782c0..7f1c635c 100644 --- a/pages/01.HDM Documentation/08.vcs/10.Network Planning/30.IPSec Tunnel/default.md +++ b/pages/01.HDM Documentation/08.vcs/10.Network Planning/30.IPSec Tunnel/default.md @@ -13,7 +13,7 @@ Please ensure that the following prerequisites are met before proceeding for dep 1. Cloud ESXi hosts, Cloud Vcenter and Cloud WAN network should be reachable from the appliance through VPN and FQDN is resolved. -2. Virtual machines created on the Cloud should be able to reach Cloud vCenter and Cloud ESXi and FQDN is resolved through either cloud HDM_WAN network or HDM_INTERNAL_NETWORK +2. Virtual machines created on the Cloud should be able to reach Cloud vCenter and Cloud ESXi and FQDN is resolved through either cloud HDM_WAN network or HDM_INTERNAL_NETWORK 3. The cloud DNS is also reachable from the on-premise through the IPsec tunnel. (Please make note that the Cloud side DNS details are required at the time of deployment of HDM product). In order to meet above requirements, following route based IPsec VPN tunnels need to be configure. For additional information please refer to VMware document [Configure a VPN Connection Between Your SDDC and On-Premises Data Center](https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws.networking-security/GUID-92F6C09E-8E74-430E-8F79-C2E5B2150ADA.html) @@ -29,7 +29,9 @@ In order to meet above requirements, following route based IPsec VPN tunnels ne Here is the process to create the network for HDM which will act as a WAN and INTERNAL network. - +``` +Note: The recommendation is to have DHCP enabled for HDM_INTERNAL_NETWORK +``` * On cloud Vcenter Click on Networking -> SDDC-DSwitch-Private (Right Click)-> Distributed Port Group -> New Distributed Port Group. In this wizard, enter the network name and click on next. @@ -54,7 +56,6 @@ Here is the process to create the network for HDM which will act as a WAN and I * - ## Setting up Single Network IPsec tunnel This section describes the steps to setup a single network IPsec tunnel. Once all the prerequisites are met and planning is done, please follow the steps below. From aea14fadeaae13ea10404fe6494dfa0f652a882c Mon Sep 17 00:00:00 2001 From: sumitkapoor Date: Wed, 24 Feb 2021 16:40:27 +0530 Subject: [PATCH 2/2] MAking the note more assertive --- .../08.vcs/10.Network Planning/30.IPSec Tunnel/default.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/01.HDM Documentation/08.vcs/10.Network Planning/30.IPSec Tunnel/default.md b/pages/01.HDM Documentation/08.vcs/10.Network Planning/30.IPSec Tunnel/default.md index 7f1c635c..912cb7fc 100644 --- a/pages/01.HDM Documentation/08.vcs/10.Network Planning/30.IPSec Tunnel/default.md +++ b/pages/01.HDM Documentation/08.vcs/10.Network Planning/30.IPSec Tunnel/default.md @@ -30,7 +30,7 @@ In order to meet above requirements, following route based IPsec VPN tunnels ne Here is the process to create the network for HDM which will act as a WAN and INTERNAL network. ``` -Note: The recommendation is to have DHCP enabled for HDM_INTERNAL_NETWORK +Note: DHCP needs to be enabled and configured for HDM_INTERNAL_NETWORK ``` * On cloud Vcenter Click on Networking -> SDDC-DSwitch-Private (Right Click)-> Distributed Port Group -> New Distributed Port Group. In this wizard, enter the network name and click on next.