Learn how to set up Zerto Virtual Replication between your Hosted Private Cloud platforms.
The purpose of this guide is to provide step-by-step instructions to connect multiple on-premises Zerto deployments to a Managed vSphere instance. By following this guide, users will be able to establish secure multi-site replication, ensure disaster recovery readiness, and manage data protection across different sites.
Requirements
- Managed vSphere Setup: A Managed vSphere environment with Zerto deployed
- On-Premises Zerto: Zerto installed and configured on your local infrastructure.
- VPN Information: All necessary VPN credentials, IP addresses, and keys for both on-premises and Managed vSphere environments
Appropriate access to Zerto Manager on both Managed vSphere and on-premises sites.
Network Diagram
The following diagram illustrates the connectivity setup for multi-site Zerto replication between the customer site and Managed vSphere:
Diagram Explanation:
- OPNSense Public IP: The public IP of the customer firewall/router.
- OPNSense Private IP: The internal IP address of the customer firewall.
- ZVM Private IP: The internal IP of the customer Zerto Virtual Manager.
- Internal ZVM Network: The LAN connecting customer ZVM and vRAs.
- OVHcloud Public IP: The public-facing IP for the Managed vSphere.
- OVHcloud ZVM Network /23: The private network within the hosted Managed vSphere.
- ZVM Private IP (Managed vSphere): The private IP addresses of Zerto VMs (ZVM and vRAs) hosted in Managed vSphere.
This setup ensures secure VPN connectivity between on-premises Zerto and OVHcloud Managed vSphere, allowing multi-site replication and disaster recovery.
Instructions
Access Zerto Manager on Managed vSphere
From the OVHcloud Control Panel, navigate to your infrastructure via the Hosted Private Cloud and Managed VMware vSphere menus.
Select your PCC (e.g., pcc-123-45-67-890) and datacenter (e.g., datacenter12345), then choose the Zerto tab.
Configure VPN and On-Premise Zerto Details
Click the Add a site button, enter your VPN information (IP address and encryption key), and enter the details of your on-premises Zerto deployment. Refer to our example screenshot for guidance:


Start VPN configuration
Submit your information. The Managed vSphere will automatically start the VPN setup, allowing secure access to your on-premises Zerto site.
Let automated processes run
Managed vSphere will run automated tasks to configure multi-site connectivity.
Wait until the status shows Configuration deployed.
Connect the VPN
Connect your on-premises VPN to the Managed vSphere’s Zerto VPN and verify that the connection is active.
Pair the Zerto sites
Log in to the PCC Zerto, select the Sites section, and retrieve the token by choosing your site and clicking the 🔑 Generate Pairing Token button.
Log in to the on-premise Zerto, select Pair to a site with a license, and enter the pairing token you retrieved in the previous step.
Once paired, your multi-site replication setup is complete.
Troubleshooting Tips
- VPN issues: Check credentials, firewall, and network settings.
- Token/site pairing: Verify the token, ZVM IP, and Zerto license.
Security Considerations
- Use strong encryption for all VPN connections.
- Ensure secure authentication methods are in place.
- Limit access to Zerto and Managed vSphere management interfaces.
- Regularly review logs and monitor for suspicious activity.
- Keep Zerto and Managed vSphere software up to date with security patches.
Go further
For more information and tutorials, please see our other VMware on OVHcloud or Hosted Private Cloud guides. You can also explore the guides for other OVHcloud products and services.
If you need training or technical assistance to implement our solutions, contact your sales representative or click on this link to get a quote and ask our Professional Services experts for a custom analysis of your project.