Starting with VCF 4.0.1, the option to fully separate system traffic and NSX-T traffic is possible by using a second vDS dedicated for NSX traffic. This can be achieved for both the management WLD and VI WLD. For the management WLD additional optional inputs are required and cloud builder will create and configure the second vDS during VCF bring-up. For the VI WLD, a script available in Developer Center in the SDDC manager must be used to add a cluster to the VI WLD. The additional input that is needed for the vDS must be provided to the script during execution.