I'm planning to install a vsphere with tanzu using an  NSX ALB. I think to use the already existing VDS portgroup  management network and to create another portgroup for workload network. This workload portgropup wil stay on a separate vlan/subnet.

Is it enough? 

do the management network and workload network to be routables with each other?

am I forgetting something?

Thanks in advance