For a stretched cluster with sites across geographic distance, plan for the following network requirements:
- The vSAN witness needs to be positioned in a separate failure domain to ensure resiliency.
- The VxRail External Management Network must be stretched across the primary and secondary sites on a layer 2 network to ensure seamless connectivity for the management components in the event of a failure.
- The networks supporting the vSAN witness must be able to route between both VxRail cluster sites and the witness site.

Figure 60. Stretched cluster with vSAN witness at third site