For a stretched cluster with sites across geographic distance, plan for the following network requirements:
- The vSAN witness needs to be positioned in a separate failure domain to ensure resiliency.
- The VxRail External Management Network must be stretched across the primary and secondary sites on a Layer 2 network to ensure seamless connectivity for the management components in the event of a failure.
- The networks supporting the vSAN witness must be able to route between both VxRail cluster sites and the witness site.

Figure 64. Stretched cluster with vSAN witness at third site