Is it possible to allocate different External IP Blocks for specific purposes in VCF 9.1?
Article ID: 441546
Updated On:
Products
Issue/Introduction
In the NSX VPC configuration, multiple External IP Blocks can be defined.
Is it possible to separate and allocate their usage as follows?
- External IP Block-1: Dedicated to Source NAT (SNAT)
- External IP Block-2: Dedicated to Load Balancer Virtual IP (LB VIP)
Environment
VCF 9.1.0
Resolution
No, VCF 9.1.0 does not support separating the usage of External IP Blocks for specific purposes in this manner.
Additional Information
For SNAT (Outbound traffic), VCF 9.1 introduces a feature called External IP Block for Default Outbound NAT.
With this feature, if multiple External IP Blocks (e.g., Block-1 and Block-2) are defined, you can specify a particular block (e.g., Block-1) to be preferentially assigned for SNAT IPs.
While this addresses the requirements for SNAT, for Inbound traffic (LB VIP), IP addresses will still be allocated from both Block-1 and Block-2. Therefore, completely isolating and dedicating External IP Block ranges for specific use cases is currently not supported.
Feedback
