Creating your first subnet

Google Cloud VMware Engine creates a network for each private cloud and uses VLANs for network management. For workload virtual machines (VMs), you create subnets as network segments on NSX-T Manager for your private cloud. VMware Engine includes NSX-T for workload networking and security features such as microsegmentation and firewall policies. This page explains how to create subnets for your workloads using NSX-T Manager.

Before you begin

This quickstart assumes that you have done the following:

  1. Created a Google Cloud VMware Engine private cloud. You can create one by completing the following quickstart: Creating your first private cloud.
  2. Allocated address ranges in your network for the following purposes:
    • A DHCP service
    • A subnet for the NSX-T workload network segment

Access NSX-T Manager from the VMware Engine portal

The process of creating a subnet happens in NSX-T, which you access through VMware Engine:

  1. Access the VMware Engine portal
  2. From the main navigation, go to Resources.
  3. Click the Private cloud name corresponding to the private cloud where you want to create the subnet.
  4. On the details page of your private cloud, click the vSphere Management Network tab.
  5. Click the FQDN corresponding to NSX Manager.
  6. When prompted, enter your sign-in credentials. As a reminder, you can retrieve generated credentials from the private cloud details page.

If you've set up vIDM and connected it to an identity source, such as Active Directory, use your identity source credentials instead.

Set up DHCP service for the subnet

Before you can create a subnet, set up a DHCP service:

  1. In NSX-T, go to Networking > DHCP. The networking dashboard shows that the service creates one Tier-0 and one Tier-1 gateway.
  2. To begin provisioning a DHCP server, click Add Server.

  3. For Server type, select DHCP server.

  4. Provide a DHCP Service IP Address range.

  5. Click Save to create the DHCP service.

Next, attach this DHCP service to the relevant Tier-1 gateway. A default Tier-1 gateway has already been provisioned by the service:

  1. In NSX-T, go to Networking > Tier-1 Gateways.
  2. Click the vertical ellipses.
  3. Select Edit.
  4. In the IP Address Management field, click No IP Allocation Set.
  5. Set Type to DHCP Local Server and select the DHCP Server that you just created.
  6. Click Save.
  7. Click Close Editing.

You can now create a network segment in NSX-T. For more information about DHCP in NSX-T, see the VMware documentation for DHCP.

Create a network segment in NSX-T

For workload VMs, you create subnets as NSX-T network segments for your private cloud:

  1. In NSX-T, go to Networking > Segments.
  2. Select Add Segment.
  3. Name your segment and, from the Connected Gateway & Type drop-down list, select Tier1 to connect to the Tier1 Gateway.
  4. Click Set Subnets.
  5. Click Add Subnets.
  6. Enter the subnet range in the Gateway IP/Prefix Length field. Specify the subnet range with .1 as the last octet. For example,
  7. Specify the DHCP Ranges and click ADD.
  8. In Segment, select TZ-OVERLAY | Overlay from the drop-down list.
  9. Click Save. You can now select this network segment in vCenter when creating a VM.

In a given region, you can set up at most 100 unique routes from VMware Engine to your VPC network using private services access. This includes, for example, private cloud management IP address ranges, NSX-T workload network segments, and HCX network IP address ranges. This limit includes all private clouds in the region.

What's next