Network Segmentation - Backplane VLAN with Gateway? | Nutanix Community
Skip to main content
I'm will be configuring Network Segmentation on my Nutanix Cluster as per these instructions. https://portal.nutanix.com/#/page/docs/details?targetId=Web-Console-Guide-Prism-v510:wc-network-segment-on-existing-cluster-wc-t.html The VLAN that I put my backplane traffic on, does it matter or not if I have a Gateway for that VLAN? I would use 172.16.10.0 as the Subnet IP and 255.255.255.0 as the Netmask. I am planning on having a Gateway of 172.16.10.1 on the firewall. Currently, the default configuration without network segmentation, the management and backplane traffic on eth0 has a gateway so as far as I can tell, everything should still work if I have a gateway for backplane traffic. Could someone please confirm that it doesn’t matter if I have a gateway on the backplane VLAN or not?

@kent

Default gateway is only needed on networks when no route specification matches the destination IP address of a packet. Since current implementation of backplane network involves CVM and hosts using the same subnet, there is no need for the traffic to be routed, said that, we having the gateway set will not make any difference for the backplane traffic, so to keep it simple, we do not need to have default gateway set for backplane traffic.

 

More details

Tech TopX: Network Segmentation

https://www.youtube.com/watch?v=yAg8_up-Xrk

 

SECURING TRAFFIC THROUGH NETWORK SEGMENTATION

https://portal.nutanix.com/#/page/docs/details?targetId=Nutanix-Security-Guide-v511:wc-network-segmentation-intro-wc-c.html

 

NEW AND UPDATED FEATURES | AOS 5.11.1

https://portal.nutanix.com/#/page/docs/details?targetId=Release-Notes-AOS-v5_11_1:AOS-features-updates-aos-r.html

 

HTH 
Vignesh