Starting with VCF 4.0.1, you can fully separate system traffic and NSX-T traffic using a second vDS dedicated for NSX traffic. This can be achieved for both the management WLD and VI WLD. For the management WLD, additional optional inputs are required. Cloud builder will create and configure the second vDS during VCF bring-up. For the VI WLD, a script available in Developer Center in the SDDC manager must be used to add a cluster to the VI WLD. The additional input that is needed for the vDS must be provided to the script during execution.