In this step you begin to deploy the SDDC infrastructure in VMware Cloud on AWS on which Horizon 7 will be installed.

1. Click the Create SDDC button
2. Click on the AWS Region field
3. Click on EU (London)
4. Click in the SDDC Name field.
5. Type HoL
6. Click on the Number of Hosts field
7. Click on 1.  This will deploy a minimal installation suitable for a Proof of Concept.  An actual production deployment would have 3 or more hosts.  
8. Click Next
9. Click Next
10. Click on the Deploy SDDC button.  This process normally takes between 90 minutes and 2 hours, but we have sped it up for the purposes of this lab simulation.  This will deploy an entire SDDC including vCenter, vSphere host(s), VSAN storage, and NSX-T networking.

In this step, we will get a public IP address for the gateway that we will use to connect to the compute resources in the VMware Cloud on AWS SDDC.

1. Click View Details
2. Click the Networking & Security tab
3. Click the scroll bar on the left to scroll down
4. Click System > Public IPs
5. Click Request New IP
6. Click Save.  See the new public IP that we will use in the next step.

It is a common use case for VMware Cloud on AWS to link to an on-premises datacenter for expansion or BCDR purposes.  So, in this step we setup a secure connection between the on-premises datacenter and the VMware cloud on AWS SDDC.

1. Click on VPN to expand the menu
2. Click on Policy Based
3. Click Add VPN button
4. Type OnPremises
5. Click in the Remote Public IP field
6. Type 80.127.105.12  This is the IP address for the On-premises datacenter to which we are connecting this VMware Cloud on AWS datacenter.
7. Click in the Remote Networks field
8. Type 10.0.0.0/16
9. Click in the Local Networks field
10. Click to scroll right
11. Click on sddc-cgw-ne...
12. Click in Select Networks
13. Click infrastructure s...
14. Click on scroll bar on right
15. Click in Preshared Key field
16. Type VMware1!
17. Click Save
18. You can now see the IPSEC network between the on-premises and VMware Cloud network is up and running.  Note the green status indicator and Up status.  We now have a secure connection between our on-premises datacenter and the VMware Cloud on AWS SDDC.  

Now that we have a secure connection between the two datacenters, we need to make the VMware Cloud vCenter accessible from the on-premises datacenter in order to link them for ease of management.  

1. Click on the Settings tab
2. Click on vCenter FQDN
3. Click on EDIT
4. Click on the Public IP dropdown below Resolution Address
5. Click on Private IP: 10.2.224.4
6. Click on Save
7. Click on the Networking & Security tab
8. Click on Inventory > Groups
9. Click on Management Groups
10. Click the Add Group button
11. Click in the Name field
12. Type ONPremises
13. Click in Members field
14. Type 10.0.0.0/16  This is the On-premises subnet
15. Click Save
16. Click on Workload Groups
17. Click the Add Group button
18. Click in the Name field
19. Type vCenter
20. Click in the Member type field
21. Click on IP Address
22. Click in Members field
23. Type 10.2.224.4  This is the internal subnet of the vCenter on VMware Cloud on AWS.
24. Click the Save button
25. Click on Security > Edge Firewall
26. Click the Add New Rule button
27. Type vCenter Inbound Rule
28. Click on Set Source
29. Click on User Defined Groups radio button
30. Click the Select box on the ONPremises line
31. Click in scroll bar on right to scroll down
32. Click Save
33. Click Set Destination
34. Click the Select box on the vCenter line
35. Click on scroll bar on far right to scroll down
36. Click Save
37. Click in Services field
38. Click on HTTPS (TCP 4..
39. Click on SSO (TCP 744..
40. Click on ICMP (ALL ICM..
41. Click on Publish button.  This configures the firewall rules to allow the on-premises datacenter vCenter to reach the VMware Cloud vCenter on HTTPS, SSO, and ICMP
42. Click on Settings tab
43. Click Default vCenter User Account
44. Click on the eye symbol next to password to reveal the password.  You can now see the admin username and password for the VMware Cloud on AWS vCenter
45. Click on Sphere Client (HTML5).  You can now see the URL to access the vSphere HTML5 client for the vCenter for the VMware Cloud on AWS SDDC.  This gives you all the information you need to connect to vCenter in the VMware Cloud on AWS SDDC and install VMware Horizon as you normally would.
46. Click on the vCenter URL.  We have already logged you into the vSphere Client using the credentials you saw above.  Take a look and see that you are now logged into the vCenter for the VMware Cloud on AWS SDDC.  You can see the single ESXi host we deployed and the NSX components that were deployed in the first part of the lab.  You now have a complete datacenter including NSX networking, storage and compute ready to deploy VMware Horizon 7.  This step will be completed for you before we move on to showing Cloud Pod Architecture federation.  The important concept to keep in mind is that deploying Horizon 7 in this SDDC is the same as deploying it in an on-premises datacenter.  The work of deploying the datacenter has been completed by the automation in VMware Cloud on AWS.  

To return to the lab, click the link in the top right corner or close this browser tab.