5.5

The configuration of a vApp network, contained in the NetworkConfig element of the
InstantiateVAppTemplateParams request body, includes the following information
n
A name for the network, specified in the networkName attribute of the NetworkConfig element. The
instantiation parameters must create a vApp network whose name matches the value of the network
attribute of the NetworkConnection of each Vm element in the template. If this attribute has the value none
or is missing, the Vm can connect to any network. If the template contains Vm elements that specify
different names for their network connections, you must create a vApp network for each.
NOTE When you create a vApp network where the FenceMode is bridged, the networkName of the vApp
network must match the name of the ParentNetwork. This requirement is enforced by the composeVapp
operation. The instantiateVappTemplate operation automatically corrects a name mismatch by
changing the value of the network attribute in the NetworkConnection element of the VApp.
n
A Configuration element that specifies network configuration details.
n
For routed and directly connected networks, the ParentNetwork element contains a reference to the
organization VDC network that the vApp network connects to. The FenceMode element controls
how the two networks connect. Specify a FenceMode of bridged for a direct connection to the parent
network, or natRouted to specify a routed connection controlled by network Features such as a
NatService or FirewallService. If you want the organization network to be isolated, with no
external connection, omit the ParentNetwork element and specify the FenceMode as isolated.
n
The Features element defines features of the vApp network, and can include the following
services:
DhcpService
Provides DHCP services to virtual machines on the network.
FirewallService
Specifies firewall rules that, when matched, block or allow incoming
or outgoing network traffic.
NatService
Provides network address translation services to virtual machines on
the network.
StaticRoutingService
Specifies static routes to other networks. Requires a routed
organization VDC network.
For more information, see “Network Services in vApp Networks,” on page 131
n
Additional modifiable elements like IpScopes and RetainNetInfoAcrossDeployments, and read-only
elements such as SyslogServerSettings and RouterInfo. For more information about the type and
scope of these elements, see the schema reference.
n
Network pool resources required by an isolated or natRouted vApp network are allocated by the
system from the pool associated with the VDC in which the vApp is deployed.
Organization VDC Networks
An organization VDC network allows virtual machines in the organization VDC to communicate with each
other and to access other networks, including organization VDC networks and external networks, either
directly or through an Edge Gateway that can provide firewall and NAT services.
n
A direct organization VDC network connects directly to an eternal network. Only a system
administrator can create a direct organization VDC network.
n
A routed organization VDC network connects to an external network through an Edge Gateway, which
is backed by a vShield Edge device. A routed organization VDC network also requires the containing
VDC to include a network pool. After a system administrator has provisioned an organization VDC
with an Edge Gateway and associated it with a network pool, organization administrator or system
administrators can create routed organization VDC networks in that VDC.
vCloud API Programming Guide
170 VMware, Inc.