Starting with VCF 4.0.1, you can fully separate system traffic and NSX-T traffic using a second vDS dedicated for NSX traffic. This can be achieved for both the management WLD and VI WLD. For the management WLD, additional optional inputs are required. Cloud builder will create and configure the second vDS during VCF bring-up. For the VI WLD, a script available in Developer Center in the SDDC Manager must be used to add a second vDS or cluster to the VI WLD. The additional input that is needed for the vDS must be provided to the script during execution.
Note: VCF orders the vmnic to uplink mapping on the vDS lexicographically (lowest to highest), even if the order in the input spreadsheet for the Mgmt WLD or the input to the script in the VI WLD are not ordered lexicographically.