In a vSAN stretched cluster, the witness host has one address for External Management traffic and one address for vSAN traffic. Each network is on a separate VLAN that is configured on the witness host and the DCI-Site-3 switch that the witness host is connected to. The witness host does not participate in vMotion. The example VLAN IDs and network addresses used for the witness host are shown in the following table:
VLAN ID | Description | Network | Gateway | Witness host ports | VRF |
31 | External Management | 192.168.31.0/24 | 192.168.31.254 | Tagged | default |
33 | vSAN | 192.168.33.0/24 | 192.168.33.254 | Tagged | default |
The witness host networks differ from Site 1 and 2 networks because witness traffic is routed from Sites 1 and 2 to the witness host.