# Preparing the configure

## <mark style="color:green;">**Procedure**</mark> <a href="#procedure" id="procedure"></a>

{% stepper %}
{% step %}

#### **Step 1:** Please fill in the formation in yellow cells. <a href="#step-1-please-fill-in-the-formation-in-yellow-cells" id="step-1-please-fill-in-the-formation-in-yellow-cells"></a>

* VLAN & Port groups will be created on vDistributed Switch.

| **#** | **Port Group** | **VLAN**                                                    | **Remark**                         |
| ----- | -------------- | ----------------------------------------------------------- | ---------------------------------- |
| 1     | Management     | 1<mark style="background-color:yellow;">37</mark>           | For NSX Autonomous Edge management |
| 2     | Uplink         | <mark style="background-color:yellow;">138</mark>           | For NSX Autonomous Edge uplink     |
| 3     | Trunk          | <mark style="background-color:yellow;">140, 141, 142</mark> | Stretch L2 network traffic         |

* Network settings for NSX Autonomous Edge.

<table data-header-hidden data-full-width="false"><thead><tr><th></th><th></th><th width="286"></th><th></th><th></th><th></th></tr></thead><tbody><tr><td>#</td><td>OVF Template Name</td><td>Port Group</td><td>Primary Node</td><td>Second Node (optional)</td><td>Remark</td></tr><tr><td>1</td><td>Network 0</td><td>Management</td><td><mark style="background-color:yellow;">192.168.137.79</mark></td><td><mark style="background-color:yellow;">192.168.137.80</mark></td><td> </td></tr><tr><td>2</td><td>Network 1</td><td>Uplink</td><td><mark style="background-color:yellow;">192.168.138.77</mark></td><td>–</td><td>must to have access to internet</td></tr><tr><td>3</td><td>Network 2</td><td>Trunk</td><td>–</td><td>–</td><td> </td></tr><tr><td>4</td><td>Network 3</td><td>– (HA, optional)</td><td><mark style="background-color:yellow;">192.</mark>1<mark style="background-color:yellow;">68.137.81</mark></td><td><mark style="background-color:yellow;">192.168.137.82</mark></td><td> </td></tr></tbody></table>

&#x20;

<figure><img src="https://3953927389-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fbvay7AR0CH8vZKgD3dSy%2Fuploads%2FylL0ATor0Wkzw9uBYMSj%2Fimage.png?alt=media&#x26;token=fd529b51-f8ef-49d2-a2eb-0824a6333b4b" alt=""><figcaption><p>NSX Autonomous Interfaces</p></figcaption></figure>

* Public IP address:

| On-premises Public IP                                       | HI GIO's Public IP                                          |
| ----------------------------------------------------------- | ----------------------------------------------------------- |
| <mark style="background-color:yellow;">\<IP Address></mark> | <mark style="background-color:yellow;">\<IP Address></mark> |
| {% endstep %}                                               |                                                             |

{% step %}

#### **Step 2:** Creating port groups (VLANs)on vCenter (if we don't have) <a href="#step-2-creating-port-groups-vlans-on-vcenter-if-we-dont-have" id="step-2-creating-port-groups-vlans-on-vcenter-if-we-dont-have"></a>

<figure><img src="https://3953927389-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fbvay7AR0CH8vZKgD3dSy%2Fuploads%2FZCCavrJmEHLgiFc1KXnR%2Fimage.png?alt=media&#x26;token=5e5f3f28-31a6-43aa-805c-bd8f092a446b" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

#### **Step 3:** Configure VLAN & Security for TRUNK port <a href="#step-3-configure-vlan-and-security-for-trunk-port" id="step-3-configure-vlan-and-security-for-trunk-port"></a>

* Tag VLAN:<br>

  <figure><img src="https://3953927389-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fbvay7AR0CH8vZKgD3dSy%2Fuploads%2Fc7vODxlYwvtzksMha3M0%2Fimage.png?alt=media&#x26;token=d4852687-5933-41a3-ab24-7f927e4448fe" alt=""><figcaption></figcaption></figure>

* Set security: enable Promiscuous mode and Forged transmits

  <figure><img src="https://3953927389-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fbvay7AR0CH8vZKgD3dSy%2Fuploads%2Fbzq7cn2rutnCUaTo8UCj%2Fimage.png?alt=media&#x26;token=45d02764-9315-47be-bad4-a5f115159922" alt=""><figcaption></figcaption></figure>

{% endstep %}

{% step %}

#### **Step 4:** Creating Network on HI GIO (detail steps can check [here](https://higio-support.atlassian.net/wiki/spaces/v2/pages/33095854/Working+with+Organization+VDC+Networks#II.-Creating-a-Routed-VCD-network)) <a href="#step-4-creating-network-on-hi-gio-detail-steps-can-check-here" id="step-4-creating-network-on-hi-gio-detail-steps-can-check-here"></a>

* These networks are stretch layer 2 (same subnet as on-prem).
* Select IP for gateway CIDR **(It's must not duplicate IP address)**

<figure><img src="https://3953927389-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fbvay7AR0CH8vZKgD3dSy%2Fuploads%2F2XUIPKuJ5yVx96piOt6C%2Fimage.png?alt=media&#x26;token=09bc73fa-49c8-4495-932a-dd471376ef4c" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

{% endstep %}
{% endstepper %}
