A sovereign cloud provider has a VMware Cloud Foundation (VCF) stretched Workload Domain across two data centers (AZ1 and AZ2), where site connectivity via Layer 3 is provided by the underlay. The…

Question

Options

• ADisable the liveness check during Edge deployment in SDDC Manager.
• BConfigure BGP neighbors before deploying the Edge Cluster.
• CReuse the TEP IP pool from AZ1.
• DCreate an AZ2-specific Edge TEP IP pool and map it to the AZ2 uplink profile before deploying the

• A
  8% (2)
• B
  13% (3)
• C
  4% (1)
• D
  75% (18)

Explanation

In a VMware Cloud Foundation (VCF) stretched cluster or Multi-Availability Zone (Multi-AZ) architecture, the networking design must account for the fact that AZ1 and AZ2 typically reside in different Layer 3 subnets. While the NSX Overlay provides Layer 2 adjacency for virtual machines across sites, the underlying Tunnel Endpoints (TEPs) must be able to communicate over the physical Layer 3 network. According to the VCF Design Guide for Multi-AZ deployments, when stretching a workload domain, each availability zone should have its own dedicated TEP IP Pool. This is because TEP traffic is encapsulated (Geneve) and routed via the physical underlay. If the Edge nodes in AZ2 were to use the same IP pool as AZ1 (Option C), the physical routers would likely encounter routing conflicts or reachability issues, as the subnet for AZ1 would not be natively routable or "local" to the AZ2 Top-of- Rack (ToR) switches. The failure during the SDDC Manager workflow occurs because the automated "Liveness Check" or "Pre-validation" step attempts to verify that the newly assigned TEP IPs in AZ2 can reach the existing TEPs in the environment. To resolve this and ensure a successful deployment, the administrator must define a unique AZ2-specific IP Pool in NSX. Furthermore, this pool must be associated with an Uplink Profile (or a Sub-Transport Node Profile in VCF 5.x/9.0) that uses the specific VLAN tagged for TEP traffic in the second data center. This ensures that the Edge Nodes in AZ2 are assigned IPs that are valid and routable within the AZ2 underlay, allowing Geneve tunnels to establish correctly to the ESXi hosts in both sites without requiring a stretched Layer 2 physical network for the TEP infrastructure.

No community discussion yet for this question.