Skip to content

IP Blocks in vCenter

This section describes the procedures for configuring IP Blocks using the vSphere Client.

IP Blocks are used for VPC IP allocation.

vCenter IP Blocks


Overview of IP Block Types

Different IP Block types are available:

Type Use Case Routing Logic
External Used for VPC Subnets Public and different NAT.
Also used by LB VIP (AVI configuration) and VPN (NSX configuration).
External visibility is high; direct ingress/egress.
Private-TGW Used for VPC Subnets Private-TGW and specific NAT (SNAT/DNAT) Best for shared internal services across the enterprise.
Private-VPC Used for VPC Subnets Private-VPC.
Note: Configuration is within the VPC Gateway.
Maximum isolation; workloads are "hidden" even from other VPCs.

vCenter IP Blocks Types

For more information on VPC Subnets, refer to the VPC Subnet page.


IP Block External

This IP Block type is used for Public VPC Subnets (and also NAT, LB VIP (AVI configuration), and VPN (NSX configuration)).
Also used for VLAN-backed Subnets.

  • Public VPC Subnets: These IP Blocks must be manually defined in this section (see configuration steps below).
  • VLAN-backed Subnets: These IP Blocks are not created here; they are configured directly within the VPC Subnet VLAN Extension

Configuration

  • Step1. Create new IP Block External
    IP Block Ext config

    • Visibility:
      Set to External.

    • CIDRs/Ranges:
      Enter the specific CIDR(s) and/or IP Range(s) to be managed by this block.
      . CIDR: Required for VPC-Subnet Publics, Specific NAT, Load Balancer VIPs (AVI configuration), and VPN (NSX configuration)
      . Range: Supported for All NAT, Load Balancer VIPs (AVI configuration), and VPN (NSX configuration). It cannot be used for for VPC-Subnet Publics; these require CIDRs.

    • Excluded IP Ranges:
      (Optional) Specify any IP Range(s) within the CIDRs above that should be withheld from automatic allocation (e.g. IP Range used by the physical network).

    • Reserved for Specific Subnet:
      This setting is used exclusively for VLAN-backed Subnets.
      For the creation of VPC-Subnet Public this option must be left Disabled.
      Note: IP Blocks for VLAN-backed Subnets are created directly within the VPC Subnet VLAN Extension.

Monitoring

  • Status
    The status reflects the successful application of the configuration.
??? info "Note about the Status" Because this represents a logical configuration mapping rather than an active link-state protocol, the status will typically remain Green (Healthy) once the settings are validated by the NSX Manager.

IP Block Ext validation


IP Block Private-TGW

Configuration

This is the IP Block used for future VPC Subnets Private-TGW.

  • Step1. Create new IP Block Private-TGW
    IP Block Ext config

    • Visibility:
      Set to Private.

    • CIDRs/Ranges:
      Enter the specific CIDR(s) and/or IP Range(s) to be managed by this block.
      . CIDR: Required for VPC-Subnet Private-TGW and Specific NAT
      . Range: Supported for specific NAT (SNAT/DNAT), Load Balancer VIPs (AVI configuration), and VPN (NSX configuration). It cannot be used for for VPC-Subnet Private-TGW; these require CIDRs.

    • Excluded IP Ranges:
      (Optional) Specify any IP Range(s) within the CIDRs above that should be withheld from automatic allocation.

    • Reserved for Specific Subnet:
      Not Applicable.

Monitoring

  • Status
    The status reflects the successful application of the configuration.
??? info "Note about the Status" Because this represents a logical configuration mapping rather than an active link-state protocol, the status will typically remain Green (Healthy) once the settings are validated by the NSX Manager.

IP Block Ext validation


IP Block Private-VPC

Configuration

This is the IP Block used for future VPC Subnets Private-VPC.
It's configuration is managed directly within the VPC Gateway settings.


Monitoring IP Blocks

  • Utilization
    Real-time utilization metrics for IP Blocks can be monitored via the following indicators:

    • Available IPs: The remaining number of addresses in the pool ready for allocation.

    • Used IPs: The number of addresses currently assigned to active VPC subnets. For External IP Blocks, this also includes addresses consumed by NAT and Load Balancer Virtual VIPs.

    IP Block Statistics