Implementing Enhanced Secure Multi-tenancy Solutions (IESMT)

Transcription

1 Implementing Enhanced Secure Multi-tenancy Solutions (IESMT) Virtualized computing environments have grown over the last several years at a phenomenal rate. As IT budgets shrink many organizations are looking for more efficient ways of meeting the increasing need for additional applications and services while dealing with the availability of environmental, hardware and staffing resources. The challenge previously was how to implement a multi-tenant virtualized server computing environment that met security and regulatory compliance. The Secure Multi-Tenant environment provides: Secure isolated computing environments at all layers: network, server computing and storage, satisfying the requirements of many security and regulatory agencies. Detailed Course Outline Enhanced Secure Multi-Tenancy Overview The need for secure multi-tenancy and define the four pillars of Enhanced Secure Multi- Tenancy NetApp MultiStore, Cisco UCS and Nexus Line Switches and VMware vsphere integrate to create the secure multi-tenant architecture Overview of Enhanced Secure Multi-Tenancy o Data center challenges that create the need for secure multi-tenancy o Multi-Tenant concepts in a virtualized data center environment including consolidation, integration, and automation o Overview of secure multi-tenant environment architecture o High Availability o Secure Isolation o Service Level Assurance and Priority o Granular Insight and Administrative Management into multi-tenant environments Components of Multi-Tenant Environments o Overview of the Enhanced Secure Multi-Tenant environment components o Cis-co UCS o NetApp MultiStore o VMware vsphere o Cisco Nexus switches FlexPod for VMware Overview o FlexPod architecture and hardware components o Cisco UCS Nexus Switching components Nexus 1000v, Nexus 5000, Nexus 7000 NetApp MultiStore VMware vcenter and vsphere Secure multi-tenancy on FlexPod o Changes to the FlexPod architecture to accommodate the Enhanced Secure Multi-Tenancy Deployment Guide for the Enhanced Secure Multi-Tenancy on FlexPod Introduction to the UCS System Hardware and software components and management architecture of Cisco UCS

2 Define how Cisco UCS Meets the Four Pillars of Secure Multi-Tenancy o Cisco UCS Management o Cisco UCS Availability o Cisco UCS Service Assurance o Cisco UCS Secure Separation Implementing Tenant Compute Resources Defining Computing Requirements o Tenant computing requirements. o Tenant requirements o Tenant 0 o All other tenants o Building the tenant compute infrastructure with UCS o Organizational structure o vnic and vhbas o VLANS and VSANS for each tenant o Resource Pools (Server, MAC, UUID, WWPN) for tenant use o Server policies o Service Profiles Templates o Service Profile o KVM and virtual media utilities to access a compute node NetApp Storage in a Multi-Tenant Environment Configuring NetApp Storage in a Multi-Tenant Environment How NetApp Storage meets the four pillars o NetApp Storage Management o NetApp Storage Availability o NetApp Storage Service Assurance o NetApp Storage Secure Separation The Role of NetApp MultiStore in a Multi-Tenant Environment o NetApp MultiStore functionality and features o the advantages of NetApp MultiStore in a Multi-Tenant Environment o the process of creating virtual storage controllers (vfilers) using MultiStore o how to configure NetApp MultiStore NetApp MultiStore Security o secure isolation capabilities of MultiStore o IP Spaces o the role based access control with MultiStore o networking and VLAN capabilities with MultiStore Storage Availability Solutions High Availability. o NetApp High Availability solutions and how they apply to MultiStore o MultiStore migration tools o Storage Availability with ESMT ESMT backup, restore and disaster recovery NetApp Virtual Storage Console backup and recovery VMware Site Recovery Manager features and benefits

3 NetApp Site Recovery Adapter for VMware SRA ESX NFS datastores and tenant data on NetApp MultiStore NetApp MultiStore Storage efficiencies. vfiler Management o Managing the host storage controller and NetApp MultiS-tore vfiler units o Managing services o Using run commands against individual vfiler units o vfilers and protocols used within the secure multi-tenant environment o VMware and NetApp Storage Managing Data on MultiStore o FlexShare impacts on ESMT service assurance o Benefits of FlashCache Thin provisioning and the advantages with ESMT Deduplication s role in the ESMT environment vfiler and Storage Management Managing MultiStore functionality in the ESMT environment. Virtual Storage Console (VSC) o Virtual Storage Console features o Virtual Storage Console provisioning and cloning o Virtual Storage Console backup and recovery Operations Manager o Operations Manager, Provisioning and Protection Manager enhance management in the ESMT environment o vfiler management functionality included with Provisioning Manager o Provision MultiStor with NetApp provisioning manager VMware vsphere in a Multi-Tenant Environment Configuring the Tenant Virtualized Environment VMware ESMT components o vsphere Management features o vsphere Availability features o vsphere Secure Separation features o vsphere Service Assurance features VMware vshield o vshield s purpose o vshield components o Implementing vshield Virtual Networking in a Multi-Tenant Environment VMware Ethernet Networking o Virtual access layer o VMware vswitch o VMware network configuration

4 o Distributed virtual switching Cisco Nexus 1010 and 1000V Architecture o Cisco Nexus 1010 and its features o Cisco Nexus 1000v and its features o Cisco virtual switching o Virtual Service domains and their role Secure Integrated Multi-Tenant Architecture Integration: Putting It All Together Benefits of Multi-Tenant Architecture Multi-Tenant Secure Separation Security Model o Multi-Tenant security architecture o Integration of the security components with the multi-tenant architec-ture Multi-Tenant Highly-Available Redundant Architecture o NetApp, VMware and Cisco integration for a highly available computing infrastructure o Describe the high-availability components of Secure Multi-Tenancy Multi-Tenant Administrative Support Model o Scalability o Granular assignment of administrative functions Multi-Tenant Resource consolidation o Consolidation of resources versus dedicated equipment o Reducing costs for space, power and cooling Course Lab Outline Introduction to the Fast Lane Lab Environment Become familiar with how to access the devices in the Fast Lane lab environment Implementing Tenant Compute Resources Creating a Service Profile Template (IESMTUC) Creating a Service Profile (IESMTUC) Restore the UCS Service Profile (IESMTNA) Install ESX and vcenter Configuring NetApp Storage in a Multi-Tenant Environment Setup and Configuration of NetApp MultiStore Security Storage Availability Solutions vfiler failover within an HA Pair Migration of a vfiler to another storage system

5 ESX NFS datastores and tenant data on NetApp MultiStore Setup and configure NFS and iscsi for use with VMware vfiler and Storage Management Deploy virtual machine clones using NetApp Virtual Storage Console Deploying vfilers using Provisioning Manager Configuring the Tenant Virtualized Environment Configuring secure separation for tenants