Datacenter Gateway firewall configuration

In Datacenter Gateway firewall Configuration we are adding two rules, they are

Management Gateway for (appliance access to vCenter)
Compute Gateway for (appliance access to internet for access to Mavvrik API via internet)

Why this matters: the appliance needs two things to work: it has to reach vCenter (Management Gateway), and it has to reach Mavvrik's API over the internet (Compute Gateway). Miss either rule and the appliance either can't read your environment or can't send the data anywhere — getting both configured correctly here avoids a confusing "it's deployed but nothing's showing up" troubleshooting session later.

Before you start: you'll need admin access to your VMware Cloud console's networking and security section.

Below are the steps for configuring the gateway firewall

Under Left side nav bar > inventory > View details > Networking and security

Management Gateway

In networking and security click on Legacy View

Switch to the legacy Networking and Security view

On Security > Click on Gateway firewall > Management Gateway > Enter all the required details

Then Click on Add rule. Then:

Enter the rule name
In the Source section click on edit icon > user-defined Group > Add Group

Create a source group for the Management Gateway rule

Add Group name and click on set link and enter the IP
eg. 192.168.0.1 your network Ip and then click on apply

Add the source IP to the Management Gateway group

After setting up the Ip click on Save and then Apply

Save the Management Gateway source group

Then on the Destination column click on edit icon
Then select vCenter from the list and click on apply

Set vCenter as the Management Gateway destination

Then on the service column click on edit icon
Select “HTTPS”, “SSO”, “ICMP All” and click on Publish

Select services and publish the Management Gateway rule

For mavvrik appliances having internet access to connect to Mavvrik APIs

Compute Gateway

On Security > Click on Gateway firewall > Compute Gateway > Enter all the required details

Then click on Add rule. Then:

Enter the rule name
In the Source section click on edit icon > user-defined Group > Add Group

Create a source group for the Compute Gateway rule

Add Group name and click on set link and then click on ip address only and enter the IP
eg. 192.168.0.0/24 your network Ip and then click on apply

Add the source network to the Compute Gateway group

After setting up the Ip click on Save and then Apply

Then on the Applied to column click on edit icon
Select “All Uplinks”, “VPC Interface”, “Intranet Interface”, “Internet Interface“, “VPN Tunnel Interface” and click on Publish

Apply and publish the Compute Gateway rule