Hi,
We're having some trouble working out the design for our NVGRE VM's that will provide NAT gateway services for our tenant VMs.
We are attempting to implement the 3 NIC HA model using the provided template as described in this article:
https://blogs.technet.microsoft.com/scvmm/2013/12/05/adopting-network-virtualization-part-iii/
We've also referred to the excellent Hybrid Cloud with NVGRE guide here:
https://gallery.technet.microsoft.com/Hybrid-Cloud-with-NVGRE-aa6e1e9a
The one area in both of the above referenced designs that we haven't followed is where their gateway VM's are part of the same management domain as VMM and other infrastructure services.
As we will be directly connecting our gateways to the internet with public IP addresses assigned to their front end networks we definitely don't want these VM's connected to our trusted internal network and would prefer to have them connected to a stand alone DMZ/perimeter network and domain.
We do also see no issue in having the dedicated edge gateway Hyper-V hosts added to the trusted network as they will not have the public internet facing IP's directly assigned - only the gateway vm's sitting on those hosts will.
When attempting that scenario we are unable to deploy the network service. The service tests fail and we receive the error:
exception: Microsoft.VirtualManager.Utils.CarmineException: Unable to determine all the active nodes of the cluster. Error Access is denied.Bring the node and/or cluster name resource online and retry the operation again.
Check the documentation for the configuration provider or contact the publisher support. (Error ID: 50000)
We've tried multiple run as accounts but can't get past this error.
Can anyone explain if it is possible to have the gateway VM's on a different domain from VMM and the edge gateway?
Thanks,
Ian