ESXi v5 VSA cluster network layout

I'm about to deploy a 2 node VSA cluster.  I'm still a little confused on the network layout.  Does the VSA Cluster Management IP, Cluster Service IP, front end management IP, and front end NFS server IP address all have to be on the same subnet? My goal is to assign all of these static IP's so I can manage remotely…  But.. I only have 6 static IP's..  I also plan to use a virtual firewall for my VM's.. So.. I need full access to manage the entire VSA cluster via static public IP's..
gopher_49Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Yes, they do have to be on the same subnet, and also the same subnet as vCenter Server.

e.g. the default gateways have to be the same as vCenter Server, the wizard detects the default gateway from vCenter Server.

I think you will need more IP Addresses, do not use public IP Addresses, and setup a VM, so you can connect to the VM, and then manage from that VM internally.
0
gopher_49Author Commented:
In regards to setting up a VM.. Don't I need a public assigned to the management network to be able to turn that VM on after powering up the ESXi host?
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Public IP Address needs to be assigned to VM, or use NAT to Port Forward from Public IP Address to VM. (internal IP address).

You can use the Auto-Start feature to power-on a VM at Host Startup.
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

gopher_49Author Commented:
I thought about the auto-start feature.. I guess worse case scenario we have a satellite connection that we can assign a public IP to and we can always remote in that way also...  I'm trying to make the decision to either use an Endian VM firewall or just purchase 2 x Ubiquity EdgeMax firewalls..  We want a spare firewall or a auto fail over.. Since it will be a VSA cluster the Endian would be auto fail over but the EdgeMax would be manual fail over..  He's my only concern.  If I assign a public IP to a VM I have no way to control what external IP's can access the VM for it will be plugged directly into the ISP's router.. So, that's a little sketchy.  All ports would be open.. So.. I guess I could enable a software firewall and use LogMein to broadcast outbound to allow remote access...
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
LogMeIn has it uses.
0
gopher_49Author Commented:
Is there a way to have my vcenter / VSA manager server have a public IP/gateway and a private range(s) without gateways?  My goal is to void having a dedicated VM just for remote access and have it shared with the vCenter / VSA manager.  So...  We would access the vcenter/VSA manager via public IP / gateway through logmein.  Then.. The second nic would have the private IP range that my cluster network is on without a gateway.. So, it would just manage that network and void dealing with multiple gateway issues..  Does this sound okay or would I be better off with a dedicated VM just for remote management that doesn't have vcenter/VSA manager on it?
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Unfortunately no,

You will need to investigate other options to manage remotely.
0
gopher_49Author Commented:
Okay.  So, a dedicated VM with a public IP to it.  And...  Private IP with no gateway so I can access management network when I remote in, correct?
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Yes, that's correct.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.