Organization virtual data center networks are created and assigned to your organization virtual data center by a system administrator or an organization administrator. An organization administrator can view information about networks, configure network services, and more.


Note: This chapter assumes that your underlying network resources are backed by NSX for vSphere. For organization virtual data centers that are backed by NSX-T Data Center, only your service provider can create organization virtual data center networks. You can use direct, routed, internal, or cross-VDC organization virtual data center networks.


Table 1. Types of Organization Virtual Data Center Networks
Data Center Type NetworkDescription
Direct

Accessible by multiple organizations. Virtual machines belonging to different organizations can connect to and see traffic on this network.

This network provides direct layer 2 connectivity to virtual machines outside of the organization. Virtual machines outside of this organization can connect to virtual machines in the organization directly.

Note: Only your service provider can add a direct organization VDC network. You cannot add this type of organization VDC network from the Tenant Portal.

Can be IPv4 or IPv6.

Isolated (Internal)

Accessible only by the same organization. Only virtual machines in this organization can connect to and see traffic on the internal network.

The internal network provides an organization with an isolated, private network that multiple virtual machines and vApps can connect to. This network provides no connectivity to virtual machines outside the organization. Machines outside of the organization have no connectivity to machines in the organization.

Can be backed by either a network pool or an NSX-T logical switch.

Note: Only your service provider can add an NSX-T organization virtual data center networks. You can add an isolated organization VDC network backed only by a network pool.

Can be IPv4 only.

Routed

Accessible only by the same organization. Only virtual machines in this organization can connect to this network.

This network also provides controlled access to an external network. System administrators and organization administrators can configure network address translation (NAT), firewall, and VPN settings to make specific virtual machines accessible from the external network.

Can be IPv4 or IPv6.

Cross-VDC

This network is part of a stretched network spanning a data center group. A data center group can comprise between two and four organization virtual data centers in a single or multisite vCloud Director deployment.

Virtual machines connected to this network are connected to the underlying stretched network.

Can be IPv4 only.


All steps for managing your organization virtual data center networks are documented assuming that you have more than one virtual data center.


Source: https://docs.vmware.com/en/vCloud-Director/9.5/com.vmware.vcloud.tenantportal.doc/GUID-B208CDD2-5D46-4841-8F3C-BED9E4F27F07.html