Example

The implementation steps assume that both the Engineering and QE organizations have been provisioned with a single external routed organization virtual datacenter network in each organization. The creation of these two organization networks creates two vCloud Networking and Security Edge (Edge) devices in the System-virtual datacenter.

Disable the firewall service in all four Edge devices below to allow for testing of communication between vApp networks. Normally you would enable the firewalls and use the Default Deny policy coupled with Allow policies for the specific traffic patterns that are required.

Device	Location	IP Address	Notes
Corerouter01	Physical network perimeter	192.168.20.1 24.38.44.205	Cisco ASR Caution No static routes defined Caution Gateway for physical network to Internet
QE-vse1	vCloud Director system virtual datacenter	Internal: 172.16.200.1 External: 192.168.20.167	vCloud Networking and Security Edge 5.1 QE external organization network
Eng-vse1	vCloud Director system virtual datacenter	Internal: 192.168.200.1 External: 192.168.20.162	vCloud Networking and Security Edge 5.1 Engineering External organization network
QE-build01-vappnet	vCloud Director system virtual datacenter	Internal: 192.168.3.1 External: 172.16.200.12	vCloud Networking and Security Edge 5.1 qe-build01 routed vApp network
Eng-code01-vappnet	vCloud Director system virtual datacenter	Internal: 192.168.2.1 External: 192.168.200.12	vCloud Networking and Security Edge 5.1 eng-code01 routed vApp network
Build01.qe.vmlab.com	QE organization	172.16.200.11	Ubuntu 11.10
Code01.eng.vmlab.com	Engineering organization	192.168.200.11	Ubuntu 11.10

The configuration of static routes is performed on the Gateway Services tab of both the QE and Engineering organization virtual datacenter networks. A SNAT rule is created if it doesn’t already exist on both the QE and Engineering organization virtual datacenter networks. Two static routes are created on both organization virtual datacenter networks. These two routes correspond to the destination or external vApp network and the source or internal vApp network.

For both of the vApps, create a routed vApp network connected to the parent external organization network and then disable the firewall for testing. vCloud Director deploys a vCloud Networking and Security Edge device for these networks. There is no further configuration needed on these vApp networks, because the routing configuration is all performed on the external routed organization networks in the previous steps.