[ad_1]
VMware introduced the final availability of help for Cloud Director service with Google Cloud VMware Engine as an SDDC endpoint on Might fifth 2022.
This weblog is the second within the sequence to reveal methods to setup the setting to implement CDs with Google Cloud VMware Engine for multi-tenancy. When you missed the first weblog put up, I recommend you go to it earlier than studying half two. This weblog will cowl the next matters:
- Making ready and deploying the reverse proxy for connectivity from Google Cloud VMware Engine elements to CDs.
- Deploying and configuring an IPsec Tunnel from a tenant’s T1 to that tenant’s supplier managed GCP undertaking.
With a purpose to put together a Google Cloud VMware Engine setting to connect with CDs, you have to to carry out the next steps:
As proven within the directions above, you possibly can confirm the proxy equipment is working by working the next instructions:
- systemctl standing transporter-client.service
As of the preliminary launch, egress and ingress site visitors from a tenant in CDs requires an IPsec VPN from the tenant’s T1 to a VPN system endpoint of their supplier managed tenant undertaking. Within the CDs reference structure for Google Cloud VMware Engine, the primary web page depicts the connectivity ingress and egress from the tenant. Visitors will traverse the VPN for something exterior of CDs; that’s Web, native GCP providers and connections to on-prem.
The next directions are an instance on methods to configure an IPsec VPN utilizing StrongSwan to a tenant T1 edge. Any system that may act as a termination endpoint for an IPsec tunnel ought to work.
The subsequent step is to configure the IPsec VPN tunnel connection on the NSX edge in CDs and configure the tenant firewall guidelines to permit the connection.
As soon as the IPsec VPN has been setup efficiently, in CDs on the sting gateway, it would present the Tunnel Standing and IKE Service Standing as Up.
A check workload within the tenant the place the VPN was setup ought to have the ability to ping the distant endpoint of the tunnel.
[ad_2]