The vSAN witness can be VxRail-managed or customer-managed.

• For a VxRail stretched cluster, a customer-managed vSAN witness is the only option.

• Configuring connectivity between the VxRail cluster networks and the vSAN witness networks occurs after VxRail Manager completes initial build of the cluster at the primary site.

• For a VxRail 2-node cluster, the vSAN witness can be VxRail-managed or customer-managed.

• For a VxRail-managed vSAN witness, VxRail Manager will configure the vSAN witness with the network settings provided during the initial build process.
• For a customer-managed vSAN witness, VxRail Manager will validate network connectivity as part of the validation process. Validation must pass before continuing to the initial build phase.

Record the two IP addresses for the vSAN witness virtual appliance. The Witness Management Network and the Witness vSAN Network cannot share the same subnet.

Decide whether to use the vSAN network or the Witness Traffic Separation (WTS) Network for monitoring.

• For a VxRail 2-node Cluster, the WTS network is required.
• For a VxRail stretched cluster, a WTS network is recommended but not required.

Record the VLAN for the WTS network.

For a 2-node cluster deployment, record the IP addresses for each node required for vSAN witness traffic.