Firewall between VSM and VEM

[helenokeeffe]

Hi, first of all, this is possible right? We are in L3 mode of course.

1. How does discovery work? i.e. How does the VSM find the hosts over L3? I don't see any commands that target an IP address...

2. What ports need to be opened?

Thanks,

Claire

[Ahsan Haq]

 UDP port 4785 must open on firewall for L3 connectivity between VSM and VEM

Ahsan

[Keny Perez]

Thinking on ESXi....  The host will be added to vCenter and the N1Kv will be connected to vCenter, then you add the Hosts to the Nexus1000v and you put a vmkernel on a port-group/port-profile that is L3-capable and finally vCenter and Nexus1000v use the "opaque data" to know about the VEMs.

Not super detailed but that is it, pretty much...

HTH,

-Kenny