Need to understand on Demand Network type in vRealize automation 8.x

[rahulhcl]

Hi,

I am having below requirement to create Template but bit confuse how it can be achieved using On demand Network profile in VRealize Automation.  (NSX-T 3.2 version used)

New setup requirement:-

1.  3 Nos of VM with App, Web & DB tier should talked with each other only and not with other Virtual machines which will be created outside of this Templates but should be accessible with user zone. 
2. Network type should be used as "Routed"

Old Setup:

1. 3 Nos of VM with App, Web & DB tier each connected with private network + External network as "Outbound" profile + NAT + Gateway added into Template which allows created VMs to talk with each other only and not from other VM created by another Templates though it is part of Same external profile subnet used.

Here need clarity for new setup like if i go with "routed" network is again i have to add NAT + Gateway resources in Template?

[mannharry · Accepted solution]

Hello 

1. For Deploy multi-machine Cloud Template, you can use the security group, for more granularity it can be used on the Web, App, or DB Network profile.

Also, the Common Security group can be applied at the VM deployment parameter level.

Security groups are visible within Infrastructure > Resources > Security. This view enables you to see all the discovered security groups.

2. Routed Network Profile will create, a logical segment, T1, and connect to T0 and advertise the routes. For Routed network profile NAT rules are not created, the VM will be able to communicate to the external network and vice versa

Regards

Harry