5.5

n
An isolated organization VDC network does not require an Edge Gateway or external network, but
does require the containing VDC to be associated with a network pool. After a system administrator has
created an organization VDC with a network pool, organization administrators or system
administrators can create isolated organization VDC networks in that VDC.
n
Most types of organization VDC networks do not provide any network services. Isolated organization
VDC networks can specify a DhcpPoolService, which provides DHCP addresses from several pools of
IP address ranges. All other services, such as NAT, firewall, and load balancing, are configured by a
system administrator on the Edge Gateway to which the network connects.
Table 6‑2. Types of Organization VDC Networks and Their Requirements
Organization VDC
Network Connection Description Requirements
Direct connection to an
external network.
Provides direct layer 2 connectivity to machines and
networks outside of the organization VDC. Machines
outside of this organization VDC can connect directly
to machines within the organization VDC.
The cloud must contain an
external network.
Routed connection to an
external network.
Provides controlled access to machines and networks
outside of the organization VDC via an Edge Gateway.
System administrators and organization
administrators can configure network address
translation (NAT) and firewall settings on the gateway
to make specific virtual machines in the VDC
accessible from an external network.
The VDC must contain an Edge
Gateway and a network pool.
No connection to an
external network.
Provides an isolated, private network that machines in
the organization VDC can connect to. This network
provides no incoming or outgoing connectivity to
machines outside this organization VDC.
The VDC must contain a network
pool.
By default, only virtual machines in the organization VDC that contains the network can use it. When you
create an organization VDC network, you can specify that it is shared. A shared organization VDC network
can be used by all virtual machines in the organization.
Edge Gateways
An Edge Gateway provides a routed connection between an organization VDC network and an external
network. It can provide any of the following services, defined in the GatewayFeatures element of the Edge
Gateway's Configuration.
FirewallService
Specifies firewall rules that, when matched, block or allow incoming or
outgoing network traffic. See “Firewall Service Configurations,” on
page 179.
GatewayDhcpService
Provides DHCP services to virtual machines on the network. A variant of
this service, DhcpService, is intended to provide DHCP services in vApp
networks. See “Gateway DHCP Service Configurations,” on page 187.
GatewayIpsecVpnService
Defines one or more virtual private networks that connect an Edge Gateway
to another network in or outside of the cloud.
LoadBalancerService
Distributes incoming requests across a set of servers. See “Load Balancer
Service Configurations,” on page 184.
NatService
Provides network address translation services to computers on the network.
StaticRoutingService
Specifies static routes to other networks. See “Static Routing Service
Configurations,” on page 182.
Chapter 6 Creating and Managing Organizations
VMware, Inc. 171