BGP Gateway Deployment: The BGP gateway is deployed as Azure native VMs within the Prism Central VNet. This deployment ensures seamless integration with Azure's networking infrastructure.

Route Advertisement: The BGP gateway advertises the externally routable IP addresses to the Azure Route Server. This setup allows for dynamic routing and efficient traffic management.

Flow Gateways (FGW) as Next Hops: Each active Flow Gateway's external IP address is used as the next hop. This configuration ensures that southbound traffic is correctly routed to the appropriate Flow Gateway, providing efficient and reliable connectivity.

References:

Nutanix NC2 Networking Guide

Azure Route Server and BGP Documentation

Azure Subscription Validation : When deploying an NC2 cluster, the Azure subscription must be validated and allowlisted by Microsoft. This is a crucial step to ensure that the necessary permissions and configurations are set up for the deployment.

Booting State Issue : If the nodes are stuck in the Booting state, it often indicates that the subscription has not been properly validated and allowlisted. This prevents the deployment from progressing as required resources and permissions are not fully accessible.

Checking Allowlisting Status : Administrators should verify that their subscription has been allowlisted by contacting Azure support or checking the status through the Azure portal.

Resolution : Once the subscription is validated and allowlisted by Microsoft, the deployment should proceed without the nodes getting stuck in the Booting state.

References :

Nutanix NC2 on Azure Documentation

Azure Subscription Management

To connect the company's on-premises datacenter to the Azure cloud environment while avoiding traffic over the public internet, the administrator should use Azure ExpressRoute. ExpressRoute provides a private connection to Azure, offering more reliability, faster speeds, and lower latencies compared to typical internet connections. This service ensures that data traffic does not traverse the public internet, enhancing security and performance. References

Azure ExpressRoute Overview

Flow Gateway Network Security Group (NSG): NSGs control the traffic flow to and from network interfaces associated with VMs and other resources. Configuring the NSG correctly is crucial for ensuring that required traffic is allowed.

Internal NIC Configuration: To allow Native Azure instances in the Prism Central VNet (10.20.0.0/24) to access the web servers in the Tier1 subnet, the internal NIC of the Flow Gateway must be configured to allow traffic from 10.20.0.0/24. This ensures that inbound traffic from these instances is permitted and properly routed to the web servers.

References:

Azure Network Security Group Documentation

Nutanix Flow Gateway Configuration Guide

Azure Resource Providers : To prepare an Azure subscription for NC2, specific resource providers must be registered to enable necessary services and resources.

Required Providers :

Microsoft.Network : This provider is essential for networking functionalities, including virtual networks, subnets, and other network resources necessary for NC2 deployment.

Microsoft.Nutanix : This provider is specifically required for integrating and managing Nutanix resources within the Azure environment.

Other Providers :

Microsoft.HybridNetwork and Microsoft.HybridCompute : These are not specifically required for NC2 but might be relevant for other hybrid or extended network configurations.

Conclusion : Registering both "Microsoft.Network" and "Microsoft.Nutanix" ensures that all necessary network and Nutanix-specific resources are available for NC2 deployment.

References :

Azure Resource Providers Documentation

Nutanix on Azure Setup Guide

Network Security Groups (NSGs): NSGs control the inbound and outbound traffic to and from Azure resources. For traffic between on-premises CVMs and NC2 CVMs in Azure, the NSGs associated with the Flow Gateway VM's Internal NICs must be configured to allow the required traffic.

Editing NSGs: To enable traffic flow, specific rules must be added to the NSGs to permit traffic from the on-premises network to the NC2 environment. This includes specifying the appropriate source and destination IP ranges and the necessary ports and protocols.

References:

Azure Network Security Groups Documentation

Nutanix NC2 Networking Configuration Guide

Allowlisting the Azure Subscription: This step ensures that the Azure subscription is recognized and permitted by Nutanix Cloud Clusters (NC2). Without allowlisting, the necessary resources and permissions within the Azure subscription may not be available for NC2, potentially blocking the creation and management of clusters.

Creating an App Registration: This involves setting up an application within Azure Active Directory (AAD) to enable secure communication between NC2 and Azure. The app registration process includes assigning permissions and obtaining necessary authentication credentials, facilitating the interaction and management of Azure resources by NC2.

References:

Nutanix Documentation on NC2 Setup

Azure Active Directory Application Registration Guide

Error Message Analysis: The error message indicates that the node cannot boot successfully and will be replaced with a new node. This points towards an issue related to the specific node type or configuration.

Bare Metal Node Support: One common cause for such deployment failures is selecting a bare metal node type that is not supported in the chosen deployment region. Azure has specific regions where certain node types are available, and attempting to use an unsupported node type in a region can result in provisioning failures.

References:

Nutanix KB 9768 for troubleshooting deployment issues: KB 9768

Azure Region Availability Documentation

Nutanix NC2 on Azure Deployment Guide

SMTP Server Configuration: To send alert emails from Prism Central, it is essential to configure an SMTP server in the Prism Central settings. This server handles the email sending process, ensuring that alerts generated by Prism Central are properly delivered to the specified email addresses.

Email Notification Setup: The SMTP server settings include the server address, port, and authentication details. Once these settings are correctly configured, Prism Central can use the SMTP server to send out alert emails reliably.

References:

Nutanix Prism Central Administration Guide

SMTP Configuration for Email Alerts in Prism Central

Payment Method Options: When using a Pay As You Go subscription plan and opting to pay directly to Nutanix, wire transfer is a valid and secure payment method.

Direct Payment: Wire transfers allow for the direct transfer of funds from the organization's bank account to Nutanix, ensuring a straightforward and efficient payment process.

References:

Nutanix Billing and Payment Documentation

Pay As You Go Subscription Payment Methods Guide