5.1

Table Of Contents
n
The Features element defines features of the vApp network, and can include the following services:
DhcpService
Provides DHCP services to virtual machines on the network.
FirewallService
Specifies firewall rules that, when matched, block or allow incoming or
outgoing network traffic.
NatService
Provides network address translation services to virtual machines on
the network.
StaticRoutingService
Specifies static routes to other networks. Requires a routed organization
vDC network.
For more information, see “Network Services in vApp Networks,” on page 112
n
Additional modifiable elements like IpScopes and RetainNetInfoAcrossDeployments, and read-only
elements such as SyslogServerSettings and RouterInfo. For more information about the type and
scope of these elements, see the schema reference.
n
Network pool resources required by an isolated or natRouted vApp network are allocated by the system
from the pool associated with the vDC in which the vApp is deployed.
Organization vDC Networks
An organization vDC network allows virtual machines in the organization vDC to communicate with each
other and to access other networks, including organization vDC networks and external networks, either
directly or through an Edge Gateway that can provide firewall and NAT services.
n
A direct organization vDC network connects directly to an eternal network. Only a system administrator
can create a direct organization vDC network.
n
A routed organization vDC network connects to an external network through an Edge Gateway, which
is backed by a vShield Edge device. A routed organization vDC network also requires the containing vDC
to include a network pool. After a system administrator has provisioned an organization vDC with an
Edge Gateway and associated it with a network pool, organization administrator or system administrators
can create routed organization vDC networks in that vDC.
n
An isolated organization vDC network does not require an Edge Gateway or external network, but does
require the containing vDC to be associated with a network pool. After a system administrator has created
an organization vDC with a network pool, organization administrators or system administrators can create
isolated organization vDC networks in that vDC.
n
Most types of organization vDC networks do not provide any network services. Isolated organization
vDC networks can specify a DhcpPoolService, which provides DHCP addresses from several pools of IP
address ranges. All other services, such as NAT, firewall, and load balancing, are configured by a system
administrator on the Edge Gateway to which the network connects.
Chapter 6 Creating and Managing Organizations
VMware, Inc. 149