Virtual enclaves

A virtual enclave is a defined group of virtual machines, virtual port groups, resources (if using resource pools), and potentially underlying datastores. The notion of a virtual enclave is to provide segmentation within the VDI, separating one group from another.

The following figure is an illustration showing three separate enclaves:

In the preceding figure, three classifications of vDesktops exist within the overall virtual infrastructure. These classifications are composed of desktop pools of the same name. They are as follows:

• Training: This enclave is used by training rooms to provide vDesktops for training purposes

• Faculty: This enclave is used by faculty members at the organization for their primary vDesktop

• Servers: This enclave is used by all of the virtual machines running a server-based operating system

From within the virtual infrastructure, there are ways to isolate the three enclaves:

• VLAN tagging

• Separate vSwitch/vDSwitch uplinks

• Enabling vSwitch/vDSwitch security...