Add IP Allowlist for Accessing vCenter and
NSX Manager
You can restrict access to the and NSX Manager based on the source public IP addresses you
explicitly add using the Console. Specify the IP allowlist for vCenter and NSX Manager across
SDDCs within
the organizations to which the SDDCs belong.
The IP allow list that you specify is
applicable only when vCenter and NSX Manager are accessed through the Internet.
You can find your /32 IP address at
https://ifconfig.me/ or https://ip.me/.
- Log in to the VMware Cloud Services Console at https://console.cloud.vmware.com/csp/gateway/discovery.
- Launch theVMware Cloud on Dellservice.
- Click
on the left pane.
TheService Settingspage appears. - ClickEdit.
- Enter the publicly allowed IP addresses in CIDR format, separated by commas, in the text box.The IP addresses that you provide apply the access restrictions to all the SDDCs within the organization irrespective of the physical location of the SDDCs. You can add or delete the IP address based on your requirement.Ensure that the IP allowlist meets the following requirements:
- CIDR format: <0-255>.<0-255>.<0-255>.<0-255>/<0-32>.
- CIDR includes the network address only.For example, if you own a /24 public subnet 100.1.1.0/24 and you configure 100.1.1.30 as your public IP address, then you have the following options to specify your IP allowlist:
- Add the network address 100.1.1.0/24 as your IP allowlist, which permits any IP address within the /24 range to access the .
- Add the network address 100.1.1.30/32 as your IP allowlist, which permits only this IP address to access the .
- The CIDR notations are not duplicate.
- The CIDR notations are not private, multicast, loopback, or link-local addresses.
- The CIDR notations are not any of the reserved IP addresses as presented in the following table.IP Address TypeReserved IP AddressPrivate10.0.0.0 through 10.255.255.255172.16.0.0 through 172.31.255.255192.168.0.0 through 192.168.255.255Multicast224.0.0.0 through 239.255.255.255Link-local169.254.0.0 through 169.254.255.255Loopback127.0.0.0 through 127.255.255.255
- ClickSave.
and NSX Manager are accessible only through the IP
allowlist that you added.