HCX interworking through VTC and security VPC

[yomangte]

Hello

My client wants to migrate through HCX linkage in the following situations.

precondition
1. In the DX section, only Private VIF can be used, so it cannot be connected from VTC to DXGW.
2. HCX traffic must only go through the Security VPC. There is no internet connection available.

inquiry)
Would an HCX-IX connection be possible in a case like this?

[viquarhcimca]

HCX IX-I creates an ipsec tunnel to HCX-IX-R (remote) using the port 4500. 

we should have connection between those appliances.

https://ports.esp.vmware.com/home/VMware-HCX

[yomangte]

Thanks for your reply.

Customer Router <->DX <-> DXGW <-> VPC <-> TGW <-> VTC <-> Tier-0
If port 4500 is allowed and there is no problem with communication between the above settings, we will assume that there is no problem creating the ipsec tunnel.

Thank you.