VMware Certified Professional vsphere 5 Blueprint. By Josh Coen and Jason Langer

Transcription

1 VMware Certified Prfessinal vsphere 5 Blueprint By Jsh Cen and Jasn Langer Cntents Sectin 1 Plan, Install, Cnfigure and Upgrade vcenter Server and VMware ESXi... 3 Objective 1.1 Install and Cnfigure vcenter Server... 3 Objective 1.2 Install and Cnfigure VMware ESXi... 6 Objective 1.3 Plan and Perfrm Upgrades f vcenter Server and VMware ESXi... 9 Objective 1.4 Secure vcenter Server and ESXi Objective 1.5 Identify vsphere Architecture and Slutins Sectin 2 Plan and Cnfigure vsphere Netwrking Objective 2.1 Cnfigure vnetwrk Standard Switches Objective 2.2 Cnfigure vnetwrk Distributed Switches Objective 2.3 Cnfigure vss and vds Plicies Sectin 3 Plan and Cnfigure vsphere Strage Objective 3.1 Cnfigure Shared Strage fr vsphere Objective 3.2 Cnfigure the Strage Virtual Appliance fr vsphere Objective 3.3 Create and Cnfigure VMFS and NFS Datastres Sectin 4 Deply and Administer Virtual Machines and vapps Objective 4.1 Create and Deply Virtual Machines Objective 4.2 Create and Deply vapps Objective 4.3 Manage Virtual Machine Clnes and Templates Objective 4.4 Administer Virtual Machines and vapps Sectin 5 Establish and Maintain Service Levels... 75

2 Objective 5.1 Create and Cnfigure VMware Clusters Objective 5.2 Plan and Implement VMware Fault Tlerance Objective 5.3 Create and Administer Resurce Pls Objective 5.4 Migrate Virtual Machines Objective 5.5 Backup and Restre Virtual Machines Objective 5.6 Patch and Update ESXi and Virtual Machines Sectin 6 Perfrm Basic Trubleshting and Alarm Management Objective 6.1 Perfrm Basic Trubleshting fr ESXi Hsts Objective 6.2 Perfrm Basic vsphere Netwrk Trubleshting Objective 6.3 Perfrm Basic vsphere Strage Trubleshting Objective 6.4 Perfrm Basic Trubleshting fr HA/DRS Clusters and vmtin/strage vmtin 120 Sectin 7 Mnitr a vsphere Implementatin Objective 7.1 Mnitr ESXi, vcenter Server, and Virtual Machines Objective 7.2 Create and Administer vcenter Server Alarms

3 Sectin 1 Plan, Install, Cnfigure and Upgrade vcenter Server and VMware ESXi Objective 1.1 Install and Cnfigure vcenter Server Knwledge Identify available vcenter Server editins vcenter Server Essentials Prvides the same features as vcenter Fundatin, integrated with the Essentials and Essentials Plus kits vcenter Server Fundatin Prvides pwerful management tls fr smaller envirnments (up t 3 vsphere hsts) lking t rapidly prvisin, mnitr, and cntrl virtual machines vcenter Server Standard Prvides large scale management f VMware vsphere deplyments fr rapid prvisining, mnitring, rchestratin, and cntrl f virtual machines Includes vcenter Server Essentials vcenter Server Fundatin vcenter Server Standard Management Server X X X Database Server X X X Search Engine X X X VMware vsphere Client X X X VMware vcenter API s and.net Extensin vcenter Orchestratr vcenter Server Linked Mde X X X X X Further details see page 8 f the VMware vsphere 5.0 Licensing, Pricing and Packaging white paper Deply the vcenter Appliance As an alternative t installing vcenter Server n a Windws machine, yu can dwnlad the VMware vcenter Server Appliance. The vcenter Server Appliance is a precnfigured Linuxbased virtual machine ptimized fr running vcenter Server and assciated services. Micrsft SQL Server and IBM DB2 are nt supprted fr the vcenter Server Appliance. The vcenter Server Appliance des nt supprt Linked Mde cnfiguratin nr des it supprt IPv6 Fr further infrmatin see page 201 f the vsphere Installatin and Setup dcument and pages 41 thru 48 f the vsphere Server and Hst Management dcument

4 Install vcenter Server int a virtual machine When installing vcenter Server n a virtual machine the hardware recmmendatins and sftware prerequisites d nt change. The fllwing are advantages when ding s: Rather then dedicating a separate server t the vcenter Server system, yu can place it in a virtual machine running n the same hst where yur ther virtual machines run Yu can prvide high availability fr the vcenter Server system by using vsphere HA Yu can migrate the virtual machine cntaining the vcenter Server system frm ne hst t anther, enabling maintenance and ther activities Yu can create snapshts f the vcenter Server virtual machine and use them fr backups, archiving, and s n Size the vcenter Server Database The size f yur vcenter Database is dependent n hw many hst yu have, have many VM s yu have, and the level f statistics yu are using. Frm within vcenter Server under Administratin -> vcenter Server Settings -> Statistics there is a sectin fr Database Size. Yu can plug in yur envirnments specifics and get a DB size. Als, n VMware s website there is a Database Sizing Calculatr. Currently available is the calculatr fr vsphere 4 Install additinal vcenter Server cmpnents Besides vcenter Server there are several additinal cmpnents yu may wish t install. Full details n pages 204 thru 211 f the vsphere Installatin and Setup dcument. vsphere Client- Windws prgram that yu can use t cnfigure the hst and t perate its virtual machines vsphere Web Client Allws yu t cnnect t a vcenter Server system t manage an ESXi hst thrugh a web brwser Update Manager Server Allws fr the patching f ESXi hsts as well as virtual machines. Can be installed n the same cmputer as vcenter Server r a different cmputer. vsphere ESXi Dump Cllectr ESXi can be cnfigured t dump its vmkernel memry t a netwrk server instead f writing it t disk when the system has had a critical failure (Purple Screen f Death). ESXi Dump Cllectr can be used as the netwrk server vsphere Syslg Cllectr Allws ESXi hsts t be cnfigured fr their system lgs t be captured n a netwrk server vsphere Aut Deply Allws fr the deplyment and custmizatin f ESXi hsts by lading the ESXi image int the hsts memry vsphere Authenticatin Prxy Enables ESXi hsts t jin a dmain withut using Active Directry credentials. Enhances security fr PXE-bted hsts and hsts that are prvisined using Aut Deply, by remving the need t stre Active Directry credentials in the hst cnfiguratin. Install/Remve & Enable/Disable vsphere Client plug-ins After the server cmpnents f a plug-in is installed and registered with vcenter Server, its client cmpnent is available t vsphere clients. Client cmpnent installatin and enablement are managed thrugh the Plug-in Manager dialg bx. The Plug-in Manager lets yur perfrm the fllwing actins:

5 View available plug-ins that are nt currentl installed n the client View installed plug-ins Dwnlad and install available plug-ins Enable and disable installed plug-ins See page 27 f the vcenter Server and Hst Management dcument fr step by step License vcenter Server T license a single vcenter Server 5.0, yu need a vcenter Server 5.0 license key with a capacity fr ne instance. If yu have vcenter Server systems in Linked Mde grup, yu can purchase a vcenter Server license key with a larger capacity and assign the key t all vcenter Server systems in the grup. See pages 70 thru 97 f the vcenter Server and Hst Management dcument fr additinal infrmatin and prcedures. Determine availability requirements fr a vcenter Server in a given vsphere implementatin Obviusly yu want as little dwn time as pssible fr yur vcenter server. Just be aware f the ptins t allw vcenter Server t highly available Run vcenter Server in a VM t take advantage f VMware HA/DRS vcenter Server Cluster Heartbeat Cld standby vcenter Server (virtual r physical) Determine use case fr vsphere Client and Web Client vsphere Client As VMware Administratrs we are quite familiar with the traditinal vsphere Client. It is the ne stp shp t cnfigure and maintain yur entire envirnment. Using this client may nt be suitable fr nn-administratrs (think VM wners r Operatins staff). Web Client Better suited fr yur nn-administrative users. Uses a java based web page t allw fr the basic tasks f managing VM s. See page 17 f the vcenter Server and Hst Management dcument fr further details Tls VMware vsphere Basics Guide vsphere Installatin and Setup guide vcenter Server and Hst Management guide

6 Objective 1.2 Install and Cnfigure VMware ESXi Knwledge Perfrm an interactive installatin f ESXi ESXi can be installed either using CD/DVD r USB flash drive. Regardless f which media type yu use, the fllwing prerequisites shuld be applied: 1. Verify that the server hardware clck is set t UTC in the system BIOS 2. Verify that a keybard and mnitr are attached t the machine n which the ESXi sftware will be installed. Alternatively, use a remte management applicatin 3. Cnsider discnnecting yur netwrk strage. This actin decreases the time it takes the installatin t search fr available disk drives. I thught abut including screen shts, but as I assume mst are familiar with the ESXi installatin I will utline the general prcedure: 1. Place the CD/DVD int the ROM drive f the hst r cnnect yur USB flash drive that cntains the ESXi installer files 2. Bt the hst (if needed set the apprpriate BIOS bt rder, CD/DVD drive r USB) 3. Press Enter t select ESXi 5 Installer r allw the timer t finish cunting dwn 4. Press Enter n the "Welcme t the VMware ESXi Installatin" screen 5. Read and press F11 t Accept the End User License Agreement (EULA) 6. Highlight the apprpriate disk n the "Select a Disk t Install r Upgrade" and press Enter t cntinue Nte If the drive yu are installing t currently has an installatin f ESXi yu will be prvided with additinal chices: Upgrade ESXi, preserve VMFS datastre Install ESXi, preserve VMFS datastre Install ESXi, verwrite VMFS datastre Select the apprpriate ptin fr yur hst installatin and press Enter t cntinue 7. Select the apprpriate keybard layut, press Enter t cntinue 8. Set a rt passwrd (nte this is nt required but recmmended), press Enter t cntinue See pages 37 thru 40 f the vsphere Installatin and Setup dcument fr further infrmatin Deply an ESXi hst using Aut Deply vsphere Aut Deply is a new feature f vsphere 5 that allws fr prvisining ESXi hsts n a large scale. With this feature yu are able t install ESXi n a new hst (first bt), rebt hsts, r reimage an existing hst with an upgraded image. The prcedure t install n a new hst (first bt):

7 1. Pwer n the hst The hst will attempt t cntact the DHCP server and dwnlad the gpxe. The Aut Deply server will install the new hst with the image specified and apply a Hst Prfile if ne is prvided. T finish up, Aut Deply will add the hst t vcenter 2. (Optinal) If Aut Deply applies a hst prfile that requires user input such as an IP address, the hst is placed in maintenance mde. The brief descriptin is just a very small part f the functinality f Aut Deply and als des nt discuss the infrastructure setup t implement this feature. Refer t pages 57 thru 115 f the vsphere Installatin and Setup dcument fr further reading. Als, Duncan Yellw-Bricks.cm has an excellent write up n setting Aut Deply in yur hme lab. Link HERE - aut-deply-in-yur-hme-lab/ Cnfigure NTP n an ESXi Hst Via the vsphere Client yu can cnfigure the startup mde fr the NTP service as well as list the hsts yu wish t query: 1. Within the vsphere Client select the hst and click the Cnfiguratin tab 2. Under Sftware select Time Cnfiguratin 3. Click Prperties in the upper right 4. Click Optins and select Start and stp with hst 5. In left hand pane yu can select NTP Settings t add yur list f NTP hsts 6. Click OK Cnfigure DNS and Ruting n an ESXi Hst Via the vsphere Client yu can cnfigure the DNS servers yur hst will use as well as the default gateway: 1. Within the vsphere Client select the hst and click the Cnfiguratin tab 2. Under Sftware select DNS and Ruting 3. Click Prperties in the upper right 4. Under Use the fllwing DNS server address set yur DNS servers 5. Click the Ruting tab 6. Specify the default gateway fr the VMkernel 7. Click OK Enable/Cnfigure/Disable hyperthreading 1. Within the vsphere Client select the hst and click the Cnfiguratin tab 2. Under Hardware select Prcessrs 3. Click Prperties in the upper right 4. Select r Deselect Enable Hyperthreading 5. Click OK Nte Fr this ptin t be available yur CPU s need t supprt hyperthreading and it needs t be enabled in the system BIOS

8 Enable/Size/Disable memry cmpressin cache One f the memry management techniques ESXi uses is Memry Cmpressin. When a give ESXi hst is under memry strain ESXi will cmpress virtual pages and stre them in memry. Using this memry management technique allws fr better perfrmance the accessing memry that has been swapped t disk. Yu can all set the size f the cmpressin cache as percentage f the assigned memry t a VM. Enable/Disable Memry Cmpressin 1. Within the vsphere Client select the hst and click the Cnfiguratin tab 2. Under Sftware select Advanced Settings 3. In the left hand pane select Mem and scrll dwn till yu find Mem.MemZipEnable 4. The default value is 1 (enabled), t disable change the value t 0 (disabled) 5. Click OK Sizing the Memry Cmpressin Cache 1. Within the vsphere Client select the hst and click the Cnfiguratin tab 2. Under Sftware select Advanced Settings 3. In the left hand pane select Mem and scrll dwn till yu find Mem.MemZipMaxPct 4. The default value is 10 with a minimum f 5 and a maximum f 100. Set the value t desired percentage 5. Click OK License an ESXi hst Yu can assign a license t a hst in ne f tw ways, either with using vcenter Server r withut. With vcenter Server 1. Within the vsphere Client click Inventry in the navigatin bar 2. Expand the inventry tree and select the lcatin were yu wuld like t add the new hst 3. Right-click and select Add Hst 4. When cmpleting the Add New Hst Wizard at the licensing screen allcate an existing license key r add a new key if needed Withut vcenter Server 1. Within the vsphere Client select the hst and click the Cnfiguratin tab 2. Under Sftware select Licensed Features 3. Click Edit in the upper right hand crner 4. Cnfigure a license key either with an existing key r select Assign a new key t this hst 5. Click OK Fr further infrmatin abut ESXi licensing refer t pages 65 thru 94 f the vcenter Server and Hst Management dcumentatin

9 Tls VMware vsphere Basics guide vsphere Installatin and Setup Guide vcenter Server and Hst Management guide Objective 1.3 Plan and Perfrm Upgrades f vcenter Server and VMware ESXi Knwledge Identify upgrade requirements fr ESXi hsts 1. Hardware Requirements Supprted server platfrm Check the Hardware Cmpatability List (HCL) ESXi 5. 0 will install and run nly n servers with 64-bit x86 CPUs ESXi 5.0 requires a hst machine with at least tw cres ESXi 5.0 supprts nly LAHD and SAHF CPU instructins Knwn 64-bit prcessrs 2GB RAM minimum One r mre Gigabit r 10GB Ethernet cntrllers Again check the HCL Any cmbinatin f ne r mre f the fllwing cntrllers Basic SCSI cntrllers RAID cntrllers SCSI disk r a lcal, nn-netwrked, RAID LUN with unpartitined space fr the virtual machines Fr Serial ATA (SATA), a disk cnnected thrugh supprted SAS cntrllers r supprted n-bard SATA cntrllers 2. ESXi 5.0 supprts installing n and bting frm the fllwing strage systems: SATA disk drives SATA disk drives cnnected behind supprted SAS cntrlles r supprted n-bard SATA cntrllers (See page 12 f the vsphere Upgrade Guide fr full listing) Serial Attached SCSI (SAS) disk drives Dedicated SAN disk n Fibre Channel r iscsi USB Device Check the HCL fr supprted devices Identify steps required t upgrade a vsphere implementatin See each perspective envirnment is different, the vsphere Upgrade dcumentatin utlines several example upgrade scenaris. Including the fllwing: Upgrading envirnments with Hst Clusters Upgrading envirnments withut Hst Clusters Mving virtual machines using vmtin during an upgrade Mving pwered ff r suspended virtual machines during an upgrade with vcenter Server Upgrading t vcenter Server n a new machine Migrating ESX 4.x r ESXi 4.x hsts t ESXi 5.0 in a PXE-bted Aut Deply Installatin

10 Upgrading vsphere cmpnents separately in a VMware View envirnment These examples are discussed n pages 159 thru 165 f the vsphere Upgrade dcumentatin Upgrade a vnetwrk Distributed Switch 1. Within the vsphere Client frm the Hme screen select Netwrking frm the Inventry sectin 2. In the left hand pane select the virtual Distributed Switch t be upgraded 3. Under the Summary tab in the right hand pane click Upgrade next t Versin 4. The wizard Upgrade vds t newer versin will launch 5. Select the vsphere Distributed Switch versin t upgrade t Nte Depending n what versin yu currently running yur upgrade ptins maybe different Optin vsphere Distributed Switch Versin: vsphere Distributed Switch Versin: Descriptin Cmpatible with ESX/ESXi versins 4.1 and later Cmpatible with ESXi versin 5.0 and later 6. Click Next The upgrade wizard lists the hsts assciated with the vds and whether r nt they are cmpatible with the upgraded vds. Yu can nly cntinue with the upgrade if all hsts are cmpatible 7. Click Next 8. Verify that the upgrade infrmatin listed is crrect and click Finish Fr further infrmatin read pages 24 thru 25 f the vsphere Netwrking dcumentatin Upgrade frm VMFS3 t VMFS5 Prerequisites If yu use a VMFS2 datastre, yu must first upgrade t VMFS3 prir t upgrading t VMFS5 All hsts accessing the datastre must supprt VMFS5 Verify that the vlume t be upgraded has at least 2MB f free blcks available and 1 free file descriptr Prcedure 1. Within the vsphere Client select a hst and click n the Cnfiguratin tab 2. In the left hand pane under Hardware select Strage 3. In the right hand pane select the VMFS3 datastre yu wish t upgrade 4. Click the link that says Upgrade t VMFS5 in the lwer right 5. Click Ok n the Upgrade t VMFS-5 dialg bx 6. Verify that the Upgrade VMFS task has cmpleted 7. Rescan all hsts that are presented the datastre

11 Fr further infrmatin read pages 120 thru 124 f the vsphere Strage dcumentatin Upgrade VMware Tls Since VMware supprts several client perating systems, I will nly be cvering the prcess fr upgrading VMware tls n Windws based guest. Fr further examples and instructins fr ther perating systems refer t pages 137 thru 158 f the vsphere Upgrade dcumentatin. Prerequisites Make sure that the VM is pwered n and bted int the perating system Verify the current running versin f VMware tls n the Summary tab f the VM Installatin 1. Within the vsphere Client select the VM yu wish t install VMware Tls 2. Right click n the VM and select Guest -> Install/Upgrade VMware Tls 3. Select if yu wuld like t d an Interactive Tls Upgrade r a Autmatic Tls Upgrade. Fr this example we will be selecting Interactive Tls Upgrade 4. Once the VMware tls ISO has been munted cnnect t the system via cnsle r RDP 5. If autrun has nt been enabled, manually lunch the CD-ROM 6. Click Next n the VMware Tls welcme screen 7. After the installer has cmpleted click Finish 8. Click Yes if nw is a gd time t rebt the system. If nt click N 9. After the system rebt verify that the upgraded versin f VMware Tls is displayed n the Summary tab f the VM Upgrade Virtual Machine Hardware Hardware versin 8 is the newest versin in ESXi 5. VMware recmmends that all VM s running n a ESXi 5 hst run hardware versin 8. Prerequisites Create a backup r snapsht f the virtual machine. If yu have a snapsht f the VM it is pssible t reverse the upgrade if there are issues Upgrade VMware Tls first. On Micrsft Windws VM s if yu upgrade the hardware prir t upgrading VMware Tls, netwrking settings maybe lst Verify that all.vmdk files are available t the ESX/ESXi hsts n a VMFS3, VMFS5, r NFS datastre Determine the current versin f the virtual hardware by selecting the VM s Summary tab and checking the VM Versin value Installatin 1. Within the vsphere Client select the VM yu wish t upgrade 2. Pwer dwn the VM 3. Right click n the VM and select Upgrade Virtual Hardware 4. Click Yes n the Cnfirm Virtual Machine Upgrade dialg bx 5. Verify the upgrade task has cmpleted and pwer n the VM 6. Fr Windws perating systems upn bt up new hardware devices will be detected requiring anther system rebt. 7. Within the vsphere Client select the VM and verify n the Summary tab that the VM Versin has been updated

12 Fr further infrmatin read pages 154 thru 156 f the vsphere Upgrade dcumentatin Upgrade an ESXi Hst using vcenter Update Manager This is a lng sectin t discuss. In the effrt f saving time and space be sure t read pages 92 thru 103 f the vsphere Upgrade dcumentatin Tls VMware vsphere Basics Guide vsphere Installatin and Setup Guide vsphere Upgrade Guide

13 Objective 1.4 Secure vcenter Server and ESXi Knwledge Identify cmmn vcenter Server privileges and rles Cmmn Privileges Create a Virtual Machine On the destinatin flder r datacenter: Virtual Machine.Inventry.Raw Create Virtual Machine.Cnfiguratin.Add New Disk (If creating new VMDK) Virtual Machine.Cnfiguratin.Add Existing Disk (If using existing VMDK) Virtual Machine.Cnfiguratin.Raw Device (If using a RDM) On the destinatin hst, cluster r resurce pl: Resurce.Assign Virtual Machine t Resurce Pl On the destinatin datastre r flder cntaining a datastre: Datastre.Allcate Space On the netwrk that the virtual machine will be assigned t: Netwrk.Assisgn Netwrk Take a virtual machine snapsht On the virtual machine r a flder f virtual machines: Virtual Machine.State.Create Snapshts On the destinatin datastre r flder f datastres Datastre.Allcate Space Mirgrate a VM with Strage vmtin On the virtual machine r flder f virtual machines: Resurce.Migrate On the destinatin datastre Datatstre.Allcated Space Mve a hst int a cluster On the hst: Hst.Inventry.Add Hst t Cluster On the destinatin cluster Hst.Inventry.Add Hst t Cluster Fr further examples f cmmn privileges see pages 56 thru 58 vsphere Security dcumentatin

14 Default Rles in ESXi and vcenter Server Rle Rle Type Descriptin f User Capabilities N Access system Cannt view r change the assigned bject vsphere Client tabs assciated with an bject appear withut cntent. Can be used t revke perissins that wuld therwise be prpagated t an bject frm a parent bject Available in ESXi and vcenter Server Read Only system View the state and details abut the bject View all the tab panels in the vphere Client except the Cnsle tab Cannt perfrm any actins thrugh te menus and tlbars Available n ESXi and vcenter Server Administratr system All privileges fr all bjects Add, remve, and set access rights and privileges fr all the vcenter Server users and all the virtual bjects in the vsphere envirnment Available in ESXi and vcenter Server Virtual Machine Pwer User sample A set f privileges t allw the user t interact with and make hardware changes t virutal machines, as well as perfrm snapsht peratins. Privileges granted include: All privileges fr the scheduled task privileges grup Selected privileges fr glbal items, datastre, and virtual machine privileges grups N privileges fr flder, datacenter, netwrk, hst, resurce, alarms, sessins, perfrmance, and permissins privileges grups. Usually granted n a flder that cntains virtual machines r n individual virtual machines Available n vcenter Server Virtual Machine User sample A set f privileges t allw the user t interact with a virtual machine s cnsle, insert media, and perfrm pwer peratins. Des nt gratn privileges t make virtual hardware changes t the virtual machine. Privileges granted include: All privileges fr the scheduled taks privileges grup Selected privileges fr the glbal items and virtual machines privileges grups N privileges fr the flder, datacenter, datastre, netwrk, hst, resurce, alarms, sessins, perfrmance, and permissins privileges grups Usually granted n a flder that cntains virtual machines r n individual virtual machines. Available n vcenter Server Resurce Pl Administratr sample A set f privileges t allw the user t create child resurce pls and mdify the cnfiguratin f the children, but nt t mdify the resurce cnfiguratin f the pl r cluster n which the rle was granted. Als allws the user t grant permissins t child resurce pls, and assign virtual machines t the parent r child resurce pls. Privileges granted include:

15 All privileges fr flder, virtual machine, alarms, and scheduled task privileges grups Selected privileges fr resurce and permissins privileges grups N privileges fr datacenter, netwrk, hst, sessins, r perfrmance privileges grups Additinal privileges must be granted n virtual machines and datastres t allw prvisining f new virtual machines Usually granted n a cluster r resurce pl Available n vcenter Server Datastre Cnsumer sample A set f privileges t allw the suer t cnsume space n the datastres n which this rle is granted. T perfrm a space-cnsuming peratin, such as creating a virtual disk r taking a snapsht, the use msut als have the apprpriate virtual machine privileges granted fr these peratins Usually granted n a datastre r a flder f datastres Available n vcenter Server Netwrk Cnsumer sample A set f privileges t allw the user t assign virtual machines r hsts t netwrks, if hte apprpriate permissins fr the assignment are als granted n the virtual machines r hsts Usually granted n a netwrk r flder f netwrks Available n vcenter Server Describe hw permissins are applied and inherited in vcenter Server vsphere allws the assignment f permissins t bjects in the vsphere Client. When assigning permissins yu select t have the permissins prpagate dwn thrugh the bject tree r nt. If yu allw fr prpagatin bjects lwer in the tree inherit the set permissins. Hwever, if a permissin is set at the child bject it will take prescedance ver an inherited permissin. Fr further infrmatin read pages 48 thru 53 (and the great diagram n pg 49) f the vsphere Security dcument. Cnfigure and administer the ESXi firewall Enable/Cnfigure/Disable services in the ESXi firewall 1. Within the vsphere Client select a hst and click n the Cnfiguratin tab 2. In the left hand pane under Sftware select Security Prfile 3. In the right hand pane select Prperties t the right f the Firewall sectin 4. Check r uncheck the services yu wish t enable r disable 5. (Optinal) With a service highlighted click Optins in the lwer right 6. (Optinal) Select a Startup Plicy frm the fllwing: a. Start Autmatically if any prts are pen, and stp when all prts are clsed b. Start and stp with hst c. Start and stp manually 7. (Optinal) Click OK 8. (Optinal) Click the Firewall buttn in the lwer right

16 9. (Optinal) Select t Allw cnnectins frm any IP address r Only allw cnnectins frm the fllwing netwrks 10. (Optinal) Click OK 11. Click OK Fr further infrmatin, including cmmand line syntax, refer t pages 34 thru 40 f the vsphere Security dcument Enable Lckdwn Mde - Enabled via the vsphere Client 1. Within the vsphere Client select a hst and click n the Cnfiguratin tab 2. In the left hand pane under Sftware select Security Prfile 3. In the right hand pane select Edit t the right f Lckdwn Mde 4. Check the bx Enable Lckdwn Mde 5. Click OK -Enabled via the Direct Cnsle User Interface (DCUI) 1. Frm the DCUI press F2 and lg in 2. Select the ptin Cnfigure Lckdwn Mde and press Enter 3. Press the ESC t back ut f the menus till yu are back at the DCUI Cnfigure netwrk security plicies MAC Address Changes - With this plicy set t Accept (Default), ESXi allws the changing f effective MAC address t smething ther than the initial MAC address. When set t Reject ESXi des nt allw fr thse changes t ccur. This prevents hst against MAC spfing. Frged Transmissins - With this plicy set t Accept (Default), ESXi des nt cmpare surce and effective MAC addresses. When set t Reject the ESXi hst des cmpare the surce and effective MAC addresses f the client. If they d nt match the ESXi hst drps the packet Prmiscuus Mde - With this plicy set t Reject (Default) guest perating systems are nt allwed t receive all netwrk traffic n the wire. When set t Accept the guest perating system can receive all netwrk packets. Helpful when ding trubleshting with a tl such as WireShark. Nte hwever, this des intrduce sme security cncerns View/Srt/Exprt user and grup lists 1. Cnnect the vsphere Client directly t an ESXi hst 2. Select the hst and click the Lcal Users & Grups tab 3. Srt the clumns either by UID, User, Name, GID, r Grup 4. Right click any where in the right hand pane and click Exprt List 5. Prvide a File Name as well as the Lcatin in the Save As dialg bx 6. Click Save Fr further infrmatin read page 45 f the vsphere Security dcumentatin

17 Add/Mdify/Remve permissins fr users and grups n vcenter Server inventry bjects 1. Cnnect the vsphere Client directly t an ESXi hst r vcenter Server 2. Select an inventry bject and select the Permissins tab 3. In the right hand pane right click anywhere and select Add Permissin 4. Select a given rll frm the Assigned Rle menu 5. Under Users and Grups click Add 6. Add the required user r grups t the rle (either lcal r Active Directry) 7. Click OK 8. Click OK 9. Verify that permissins have been applied crrectly Create/Clne/Edit vcenter Server Rles Create a vcenter Server Rle 1. Within the vsphere Client select the Hme page and click Rles 2. In the upper left crner click Add Rle 3. Prvide a name f the new rle in the Name 4. Select the privileges yu wuld like t prvide the rll frm the tree 5. Click OK when cmpleted Clne a vcenter Server Rle 1. Within the vsphere Client select the Hme page and click Rles 2. Under Rles -> Name right click the rle yu wish t clne 3. Select Clne frm the ptins menu 4. A new rle is created with the name Cpy f <rle name> Edit a vcenter Server Rle 1. Within the vsphere Client select the Hme page and click Rles 2. Under Rles -> Name right click the rll yu wish t edit 3. In the Edit Rle screen yu can change the rll name as well as change the rles privileges 4. When edits are cmpleted click OK Fr further infrmatin read pages 61 thru 63 f the vsphere Security dcumentatin Add an ESXi Hst t a directry service 1. Within the vsphere Client select a hst and click n the Cnfiguratin tab 2. In the left hand pane under Sftware select Authenticatin Services 3. In the right hand pane select Prperties t the right f Authenticatin Services Settings 4. Change the drp dwn t Active Directry under User Directry Service 5. Under Dmain Settings enter the FQDN f the dmain yu wish t jin in the Dmain field 6. Click the Jin Dmain buttn 7. Enter a user name and passwrd fr accunt that has the rights t jin the system t the Active Directry dmain. 8. Click OK 9. Click OK t clse the Directry Services Cnfiguratin windw

18 Fr further infrmatin read pages 63 thru 70 f the vsphere Security dcumentatin. Apply permissins t ESXi Hsts using Hst Prfiles 1. Within the vsphere Client select the Hme page and click Hst Prfiles 2. Right click an existing hst prfile in the left hand pane and select Edit Prfile 3. Expand the prfile tree, and then expand Security Cnfiguratin 4. Right-click the Permissin rules flder and select Add Prfile 5. Expand Permissin Rules and select Permissin 6. On the Cnfiguratin Details tab in the right hand pane, click the Cnfigure a permissin drp-dwn menu and select Require a Permissin Rule 7. Enter the name f a user and grup 8. Enter the assigned rle name fr the user r grup 9. Select the Prpagate permissin check bx and click OK Determine the apprpriate set f privileges fr cmmn tasks in vcenter Server See sectin Cmmn Privileges abve Tls vsphere Installatin and Setup guide vcenter Server and Hst Management guide vsphere Security guide Slutins and Examples fr VMware vsphere 5 guide

19 Objective 1.5 Identify vsphere Architecture and Slutins Knwledge Identify available vsphere editins and features VMware vsphere Editins Standard Enterprise Enterprise Plus Entitlements per CPU License vram Entitlement 32 GB 64 GB 96 GB vcpu/vm 8 Way 8 Way 32 Way Features Hypervisr x x x High Availability x x x Data Recvery x x x vmtin x x x Virtul Serial Prt Cncentratr x x Ht Add x x vshield Znes x x Fault Tlerance x x Strage APIs fr Array Integratin x x Strage vmtin x x Distributed Resurce Scheduler x x Distributed Pwer Management x x Distributed Switch x I/O Cntrls (Netwrk & Strage) x Hst Prfiles x

20 Aut Deply Plicy-Driven Strage Strage DRS x x x Tw additinal versin f vsphere are available: VMware vsphere Hypervisr - Free versin f the hypervisr that cnsists f a subset f the functinality and has maximum RAM allcatin f 32GB VMware vsphere Desktp - Used fr licensing vsphere in VDI deplyments. Prvides all Enterprise Plus features Acceleratin Kits Essenitials Essentials Plus Standard Enterprise Enterprise Plus AK AK AK Includes 6 CPUs 6 CPUs 8 CPUs 6 CPUs 6 CPUs Entitlements per CPU License vram Entitlement 32 GB 32 GB 32 GB 64 GB 96 GB vcpu/vm 192GB Max 192GB Max 256GB Max 384GB Max 576GB Max 8 Way 8 Way 8 Way 8 Way 32 Way Features Hypervisr x x x x x High Availability x x Data Recvery x x vmtin x x Virtul Serial Prt Cncentratr x x x x Ht Add x x x x vshield Znes x x x x Fault Tlerance x x x x Strage API fr Array Integratin x x

21 Strage vmtin Distributed Resurce Scheduler x x Distributed Pwer Management x x x x Distributed Switch x I/O Cntrls (Netwrk & Strage) x Hst Prfiles Aut Deply x x Plicy-Driven Strage x Strage DRS x Fr further infrmatin read pages 6 thru 8 f the VMware vsphere 5.0 Licensing, Pricing and Packaging white paper Explain ESXi and vcenter Server architectures In a VMware vsphere deplyment if yu want t take full advantage f the features available t yu vcenter Server mst be used. vcenter Server is the single pint that allws yu t centrally manage yur cnnected ESXi hsts as well as deply new virtual machines at the basic level. As yu mve up thrugh the vsphere licensed editins vcenter Server allws fr the use f vmtin, Fault Tlerance, DRS, etc. Withut it, yu are just cnnecting directly t an ESXi hst and managing them in a singular fashin and withut the mre advanced features utlined abve Explain Private/Public/Hybrid clud cncepts Private Clud - Datacenter virtualizatin that is managed by and running n internal assets Public Clud - Datacenter virtualizatin that is managed by and running n 3rd party equipment hused in there facility. Cmpute resurces are accessed via the Internet Hybrid Clud - A cmbinatin f bth Private and Public cluds. Yu may have pieces f yur business running n internal cmpute resurces, but fr DR/BC yu may leverage a 3rd party facility Determine apprpriate vsphere editin based n custmer requirements Fr the exam (and in yur career) beware f what features are available based n the different vsphere editins (hst prfiles nly with Enterprise Plus, etc). Als with the

22 changes in licensing knw the vram entitlements (and maximums fr Acceleratin Kits) fr each vsphere editin. Tls VMware vsphere Basics guide vcenter Server and Hst Management guide Sectin 2 Plan and Cnfigure vsphere Netwrking Objective 2.1 Cnfigure vnetwrk Standard Switches Knwledge Identify vnetwrk Standard Switch (vss) capabilities A lt f the capabilities yu find in a virtual switch are the same as a physical switch Rutes traffic internally between virtual machines and links t external netwrks Allws fr multiple prt grups cnfigured with different plicies Allws fr VLANs Create netwrk labels fr virtual machine virtual adapters t attach t (is unique within the current datacenter) Balance cmmunicatin acrss multiple netwrk adapters Cnfigurable t handle physical NIC failure by failing ver t anther physical NIC Maximum f 4096 ttal prts per hst (vss and vds) Maximum f 1016 ttal active prts per hst (vss and vds) Maximum f 4088 virtual netwrk switch create prts Maximum f 256 prt grups Create/Delete a vnetwrk Standard Switch Yu can create/delete a vnetwrk Standard Switch frm the VI Client either cnnected directly t the hst r thrugh vcenter. The steps shuld be the same regardless f the management pint. 1. Frm within the VI Client select a hst n the left 2. Select the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click Add Netwrking n the tp right 5. Chse Virtual Machine r VMkernel as cnnectin type > click next 6. Chse Create a vsphere standard switch and select any physical adapters yu want t use > click next 7. Fill in a Netwrk Label and VLAN ID (ptinal) > click next 8. Click Finish

23 Deleting a vnetwrk Standard Switch 1. Frm within the VI Client select a hst n the left 2. Select the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Find the vnetwrk Standard Switch yu want t delete 5. Chse Remve next t its name 6. Click Yes t cnfirm yu want t remve it Add/Cnfigure/Remve vmnics n a vnetwrk Standard Switch Yu can Add/Cnfigure/Remve vmnics frm the VI Client either cnnected directly t the hst r thrugh vcenter. The steps shuld be the same regardless f the management pint 1. Frm within the VI Client select a hst n the left 2. Select the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Find the vnetwrk Standard Switch n the right > click Prperties 5. Select the Netwrk Adapters Tab 6. Click Add t add a vmnic a. Select the adapter yu want frm the list belw > click next b. Select the NIC rder that yu want > click next c. Click Finish 7. T cnfigure a vmnic select the adapter and click Edit (the nly things yu can cnfigure are cnfigured speed and duplex) a. Select yur speed and duplex and click Ok 8. T remve a vmnic select the adapter and click Remve Cnfigure vmkernel prts fr netwrk services Yu can cnfigure a vmkernel prt n an existing vnetwrk Standard Switch r a new vnetwrk Standard Switch. The three netwrk services yu can select are vmtin, Fault Tlerance lgging and management traffic. It is best practice t segregate this each f these ver different physical adapters, unless yu are using cnverged netwrking (FCE) r a lab envirnment. 1. Frm within the VI Client select a hst n the left 2. Select the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click Add Netwrking n the tp right 5. Select VMkernel > click Next 6. Create a new vsphere standard switch r select an existing vswitch > click next 7. Enter in a Netwrk Label (such as vmtin) 8. Enter in an ptinal VLAN ID 9. Select which netwrk services yu want this vmkernel t prvide, in this case we will check Use this prt grup fr vmtin > click Next 10. Chse btain IP settings autmatically (nt recmmended unless yu are using DHCP reservatins) r chse Use the fllwing IP settings

24 11. Enter in an IP address and Subnet Mask 12. Yu can chse t change yur VMkernel Default Gateway by clicking the Edit buttn r yu can leave it at the default, usually the default is gd > click Next 13. Click Finish The new vmkernel prt (it s really a prt grup) will nw shw up with a under yur vnetwrk Standard Switch. Yu will ntice is has a vmk number which is in numeric rder with any ther vmkernels yu have already created. Yu will als see the IP address yu set next t the vmkernel prt number. Add/Edit/Remve prt grups n a vnetwrk Standard Switch Adding prt grups n a vnetwrk Standard Switch is straight frward and fllws the same relative prcedures and the previus tasks 1. Frm within the VI Client select a hst n the left 2. Select the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click Add Netwrking n the tp right 5. Select Virtual Machine r VMkernel > click Next 6. Chse an existing vswitch > click Next 7. Enter in the Netwrk Label and VLAN ID (ptinal) if yu chse the vmkernel ptin chse ne f the three netwrk services > click Next 8. Click Finish Creating a Virtual Machine Prt Grup withut a physical adapter will allw virtual machines cnnected t the same prt grup t cmmunicate with each ther, but they will nt be able t access any external netwrks Edit a prt grup n a vnetwrk Standard Switch 1. Frm within the VI Client select a hst n the left 2. Select the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Find the vswitch that huses the prt grup(s) yu want t edit and click Prperties 5. By default yu are n the Prts tab, find the prt grup yu want t edit within the list, select it and click Edit 6. Frm here there are fur different tabs yu can cnfigure ptins frm; General, Security, Traffic Shaping, NIC Teaming. We will g ver all f these in future bjectives (all detailed n pages f the vsphere Netwrking guide) Remve a prt grup n a vnetwrk Standard Switch 1. Frm within the VI Client select a hst n the left 2. Select the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane

25 4. Find the vswitch that huses the prt grup(s) yu want t remve and click Prperties 5. By default yu are n the Prts tab, find the prt grup yu want t remve within the list, select it and click Remve 6. Click Yes t cnfirm yu want t remve that selected prt grup 7. Clse the vswitch Prperties dialg bx when cmplete Determine use case fr a vnetwrk Standard Switch There are a few use cases fr using a vnetwrk Standard Switch in yur envirnemnt The biggest ne has t be licensing. T utilize a vnetwrk Distributed Switch (vds) yu must be an Enterprise Plus custmer r yu have t us the vss. Regardless f licensing its gd t place a redundant management netwrk fr each hst n their wn vnetwrk Standard Switch. This will ensure yur management netwrk is available in case a yu have a physical NIC failure and/r a vnetwrk Distributed Switch If yu nly have ne hst that needs access t a separate netwrk that can t be prvided thrugh an existing vnetwrk Distributed Switch then yu wuld use a vnetwrk Standard Switch Tls Cnfiguratin Maximums fr VMware vsphere 5.0 vsphere Installatin and Setup guide vsphere Netwrking guide Objective 2.2 Cnfigure vnetwrk Distributed Switches Knwledge Identify vnetwrk Distributed Switch (vds) capabilities A vnetwrk Distributed Switch has the same capabilities as a vnetwrk Standard Switch and much mre. Keep in mind yu must have an enterprise plus license t use this feature Functins as a single switch acrss all hsts Allws virtual machines t maintain cnsistent netwrking cnfiguratin regardless f the hst they reside n Can frward traffic t ther virtual machines r link t an external netwrk Allws yu t have ne r mre distributed prt grups Allws fr VLANs Create netwrk labels fr virtual machine virtual adapters t attach t (is unique within the current datacenter) Netwrk resurce pls Yu can manage traffic by the type f netwrk traffic

26 4096 Maximum netwrk switch prts per hst (vds and vss) 1016 Maximum active prts per hst (vds and vss) Maximum distributed virtual netwrk switch prts per vcenter 350 Maximum hsts per vds 32 Maximum distributed switches per vcenter Create/Delete a vnetwrk Distributed Switch Creating and deleting a vnetwrk Distributed Switch is a bit different than a vnetwrk Standard Switch. It is dne frm a different area frm within the VI Client and can nly be dne using vcenter 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the Datacenter where yu want t create the vds and click New vsphere Distributed Switch 4. Select the versin f the vds yu want t create (4.0, r 5.0.0) > click Next 5. Give it a descriptive name and specify the number f uplink prts > click Next 6. Yu can chse t add hsts nw r later. If yu chse t Add nw select the hst(s) and the assciated physical adapters yu want t use as uplinks > click Next 7. Determine whether yu want the wizard t create a default prt grup r nt. If yu plan n having multiple prt grups, I advise NOT creating a default prt grup. Leave the Autmatically create a default prt grup ptin checked, r uncheck it depending n yur situatin 8. Click Finish Add/Remve ESXi hsts frm a vnetwrk Distributed Switch Once yu have created a vnetwrk Distributed Switch yu can g back and add new hsts r remve them frm said switch. Adding a hst 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the vnetwrk Distributed Switch yu want t add and select Add Hst 4. Select the hst(s) yu want t add and their crrespnding physical adapter(s) yu want t use > click Next 5. At this pint yu can assign any existing vmkernel prts (virtual adapters) frm the vnetwrk Standard Switch prt grups t an existing prt grup n the vnetwrk Distributed Switch. Yu can d this by selecting the virtual adapter and clicking Assign prt grup buttn and selecting a prt grup, r, use the

27 drp dwn t select the new prt grup which is lcated in the Destinatin prt grup clumn > click Next 6. During this step yu can elect t migrate virtual machine netwrking f an existing VMs frm the vnetwrk Standard Switch t the vnetwrk Distributed Switch. Make the prper selectin(s) > click Next 7. Click Finish Remving a hst 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Click n the Hsts tab in the right pane 4. Right-click the hst yu want t remve and click Remve frm vsphere Distributed Switch > click Yes t cnfirm Add/Cnfigure/Remve dvprt grups At sme pint yu may need t Add/Cnfigure/Remve dvprt grups frm yur vnetwrk Distributed Switches Adding a dvprt grup 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the vnetwrk Distributed Switch yu want t add the dvprt grup t and click and click New Prt Grup 4. Specify the Name, Number f Prts and VLAN type (VLAN, VLAN Trunking r Private) > click Next 5. Click Finish Cnfigure a dvprt grup 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n dvprt grup yu want t cnfigure and select Edit Settings 4. Frm here yu can cnfigure three different settings; General, Plicies, and Advanced. There are 7 different ptins under Plicies which we will dive int in Objective Make any changes needed in any f the three settings (and their child settings) 6. Click OK r Cancel Remving a dvprt grup

28 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n dvprt grup yu want t cnfigure and select Delete 4. Click Yes t cnfirm the deletin Add/Remve uplink adapters t dvuplink grups 1. Lg in t vcenter using the VI Client 2. Select the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click n the vsphere Distributed Switch buttn at the tp 5. Click the Manage Physical Adapters hyperlink 6. Frm the left side f the windw is where yu can Add/Remve physical adapters. If all yur uplinks are taken up with physical adapters, and yu need t add mre physical adapters, add mre uplink prts t yur vnetwrk Distributed Switch 7. Click OK r Cancel when finished Create/Cnfigure/Remve virtual adapters Creating a virtual adapter 1. Lg in t vcenter using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click n the vsphere Distributed Switch buttn at the tp 5. Click the Manage Virtual Adapters hyperlink 6. Click the Add hyperlink at the tp 7. Select New virtual adapter > click Next 8. Select VMkernel > click Next 9. Select the apprpriate prt grup frm the drp dwn r select an individual prt 10. If yu want this virtual adapter t run any netwrk services (vmtin, FT lgging r management) select the apprpriate checkbx(s) > click Next 11. Select Obtain IP settings autmatically r Use the fllwing IP settings a. If yu select Use the fllwing IP settings, input the IP Address and Subnet Mask and the VMkernel Default Gateway (typically yu leave this at the default) 12. Click Next 13. Click Finish Cnfiguring an existing virtual adapter

29 1. Lg in t vcenter using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select the Cnfiguratin tab n the right 4. Select Netwrking in the left clumn f the center pane 5. Click n the vsphere Distributed Switch buttn at the tp 6. Click the Manage Virtual Adapters hyperlink 7. Select the name f the virtual adapter yu want t cnfigure and click the Edit hyperlink 8. Frm here there are tw tabs; General and IP Settings. Frm the General tab yu can change the prt grup r prt settings, the netwrk services settings (vmtin, FT lgging, management) and yu can als set the MTU size fr the virtual adapter. The IP settings are self-explanatry. 9. Click OK r Cancel when cmplete Remving a virtual adapter 1. Lg in t vcenter using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click n the vsphere Distributed Switch buttn at the tp 5. Click the Manage Virtual Adapters hyperlink 6. Select the virtual adapter yu want t delete and click the Remve hyperlink 7. Click Yes t cnfirm yu the deletin 8. Click Clse when finished Migrate virtual adapters t/frm a vnetwrk Standard Switch Migrate T a vnetwrk Distributed Switch 1. Lg in t vcenter using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click n the vsphere Distributed Switch buttn at the tp 5. Click the Manage Virtual Adapters hyperlink 6. Click the Add hyperlink at the tp 7. Select Migrate existing virtual adapters > click Next 8. Select the virtual adapter(s) yu want t migrate > select a prt grup frm the drp dwn under the Prt Grup clumn > click Next 9. Click Finish Migrate Frm a vnetwrk Distributed Switch t a vnetwrk Standard Switch 1. Lg in t vcenter using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane

30 4. Click n the vsphere Distributed Switch buttn at the tp 5. Click the Manage Virtual Adapters hyperlink 6. Select the virtual adapter yu want t migrate and click the Migrate hyperlink 7. Select the vsphere Standard Switch > click Next 8. Enter in a Netwrk Label and an Optinal VLAN ID > click Next 9. Click Finish Migrate virtual machines t/frm a vnetwrk Distributed Switch Migrate virtual machines T/Frm a vnetwrk Distributed Switch 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the vnetwrk Distributed Switch yu want t migrate t and select Migrate Virtual Machine Netwrking 4. Fr the Surce Netwrk yu can chse t Include all virtual machine netwrk adapters that are cnnect t the fllwing netwrk: (pick that netwrk frm the drp dwn) r yu can Include all virtual machine netwrk adapters nt cnnect t any netwrk. Als select a Destinatin Netwrk frm the drp dwn > click Next 5. Select the virtual machine(s) yu want t migrate; yu can als select all r nly certain netwrk adapters if needed > click Next 6. Click Finish Determine use case fr a vnetwrk Distributed Switch The first thing I want t mentin is that yu must have an Enterprise Plus license if yu want t use the vnetwrk Distributed Switch (even if yu chse the Cisc Nexus 1000v). If yu have many hsts it s simpler and makes mre sense t implement a vnetwrk Distributed Switch fr management and virtual machine flexibility. Withut it, yu have t ensure all prt grups and plicies match fr each hsts vnetwrk Standard switch a management nightmare! If yu need t perfrm NetFlw functins, Prt Mirrring r have Private VLANs, yu need a vnetwrk Distributed Switch If yu want t utilize the Rute based n physical NIC lad Lad Balancing plicy (allws a single TCP flw ver multiple NICs if utilizatin is high) If yu have a need t cntrl netwrk traffic; vsphere 5 has imprved Netwrk I/O Cntrl (NOIC) and has intrduced Netwrk Resurce Pls, bth features require a vnetwrk Distributed Switch Tls vsphere Installatin and Setup guide

31 vsphere Netwrking guide Objective 2.3 Cnfigure vss and vds Plicies Knwledge Identify cmmn vss and vds plicies When lking at vss and vds plicies there is sme verlap. Instead f breaking it dwn by each type, I will list the cmmn plicies (at least these are what I envisin as cmmn) and at the end f each tell what they can be applied t; vss, vds r bth Cmmn Plicies Security applies t vss and vds Plicy exceptins include Prmiscuus Mde, MAC Address Changes and Frged Transmits Traffic Shaping can be applied t utbund traffic n a vss and can be applied t utbund and/r inbund traffic n a vds Plicy exceptins include Average Bandwidth (Kbits/sec), Peak Bandwidth (Kbits/sec) and Burst Size (Kbytes) NIC Teaming (n vss) and Teaming and Failver (n vds) bth cntain same plicies Plicies include Lad Balancing, Netwrk Failver Detectin, Ntify Switches, Failback and Failver Order Sme ther cmmn plicies that nly apply t the vds are Mnitring and Resurce Allcatin Cnfigure dvprt grup blcking plicies Yu can cnfigure an individual dvprt grup n a vds t blck all prts (this can t be dne n a vss) 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the dvprt grup yu want t blck prts n and select Edit Settings 4. Select the Miscellaneus plicy under the Plicies tree 5. Change the drp dwn fr Blck all prts t Yes Changing this ptin t Yes will shut dwn all the prts fr this prt grup 6. Click OK

32 Cnfigure lad balancing and failver plicies The lad balancing plicies are used t determine hw utbund traffic spread acrss multiple physical adapters (vmnics). Inbund lad balancing is handled by the physical switch the physical uplinks are cnnected t Editing these plicies fr the vss and vds are dne in tw different lcatins within the VI Client. I will first explain hw t get t them fr each, then explain the plicies (plicies are the same with ne exceptin, which will be identified) vnetwrk Standard Switch (vss) 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click the Prperties hyperlink next t the vss yu want t mdify 5. Select the vswitch r prt grup yu want t mdify and click Edit NOTE: All settings frm the vswitch are prpagated t individual prt grups. Mdifying settings n an individual prt grup will verride the settings prpagated by the vswitch 6. Select the NIC Teaming tab vnetwrk Distributed Switch (vds) 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the dvprt grup yu want t cnfigure and select Edit Settings 4. Under Plicies select Teaming and Failver Lad Balancing and Failver Plicies 1. The first Plicy Exceptin is Lad Balancing; there are fur/five ptins (vss and vds respectively): i. Rute based n the riginating prt ID: This setting will select a physical uplink based n the riginating virtual prt where the traffic first entered the vss

33 ii. Rute based n IP hash: This setting will select a physical uplink based n a hash prduced using the surce and destinatin IP address. When using IP hash lad balancing: The physical uplinks fr the vss must be in an ether channel n the physical switch All prt grups using the same physical uplinks shuld use IP hash lad balancing plicy iii. Rute based n surce MAC hash: This setting is similar t IP hash in the fact that it uses hasing, but it uses hashing based n the surce MAC address and des nt require additinal cnfiguratin n the physical switch iv. Use explicit failver rder: This setting uses the physical uplink that is listed first under Active Adapters v. Rute based n Physical NIC lad (vds ONLY): This setting determines which adapter traffic is ruted t based n the lad f the physical NICs listed under Active Adapters. This is my persnal favrite as it requires ZERO physical switch cnfiguratins and is true lad balancing 2. The next plicy exceptin is Netwrk Failver Detectin; there are tw ptins: i. Link Status nly: Using this will detect the link state f the physical adapter. If the physical switch fails r if smene unplugs the cable frm the NIC r the physical switch, failure will be detected and failver initiated. Link Status nly is nt able t detect miscnfiguratins such as VLAN pruning r spanning tree ii. Beacn Prbing: This setting will listen fr beacn prbes n all physical NICs that are part f the team (as well as send ut beacn prbes). It will then use the infrmatin it receives frm the beacn prbe t determine the link status. This methd will typically be able t detect physical switch miscnfiguratins as initiate a failver. D nt use beacn prbing when using the IP hash lad balancing plicy 3. Select Yes r N if fr the Ntify Switches plicy. Chsing Yes will ntify the physical switches t update its lkup tables whenever a failver event ccurs r whenever a virtual NIC is cnnected t the vss. If using Micrsft NLB in unicast mde set this setting t N 4. Select Yes r N fr the Failback plicy. Chsing Yes will initiate a failback when a failed physical adapter becmes peratinal. If yu chse N then a failed physical adapter that becmes peratinal will nly becme active again if/when the standby adapter that was prmted fails 5. The last plicy is Failver Order; this has three sectins

34 i. Active Adapters: Physical adapters listed here are active and are being used fr inbund/utbund traffic. Their utilizatin is based n the lad balancing plicy. These adapters will always be used when cnnected and peratinal ii. Standby Adapters: Physical adapters listed here are n standby and nly used when an active adapter fails r n lnger has netwrk cnnectivity. iii. Unused Adapters: Physical adapters listed here will nt be used 6. Once finished click OK r Cancel Cnfigure VLAN settings VLAN settings n virtual switches allw traffic flwing t/frm virtual machines t be a part f a physical VLAN vnetwrk Standard Switch (vss) 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click the Prperties hyperlink next t the vss yu want t mdify 5. Select prt grup yu want t mdify and click Edit 6. On the General tab yu can mdify the VLAN ID (ptinal) if yu want t perfrm VLAN tagging at the vss layer. Enter in a VLAN ID fr this particular prt grup 7. Click OK r Cancel when finished vnetwrk Distributed Switch (vds) 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the dvprt grup yu want t cnfigure and select Edit Settings 4. Under Plicies select VLAN 5. There are fur ptins fr VLAN type: i. Nne: VLAN tagging will nt be perfrmed by this dvprt grup ii. VLAN: Enter in a valid VLAN ID (1-4094). The dvprt grup will perfrm VLAN tagging using this VLAN ID iii. VLAN Trunking: Enter a range f VLANs yu want t be trunked

35 iv. Private VLAN: Select a private VLAN yu want t use the Private VLAN must be cnfigured first under the dvswitch settings prir t this ptin being cnfigurable Yu can learn mre abut Private VLANs n pages f the vsphere Netwrking dcument listed in the tls sectin 6. Click OK r Cancel when finished Cnfigure traffic shaping plicies Traffic shaping can be cnfigured fr bth the vss and the vds. When cnfiguring n the vss yu can cnfigure f fr the entire vswitch and thse settings will be prpagated dwn t all prt grups (can be verridden per prt grup); traffic shaping applies nly t egress traffic n a vss. Yu can nly cnfigure traffic shaping n the vds per dvprt grup; traffic shaping can be applied t egress and ingress traffic n the vds. Except fr the fact that yu can cnfigure ingress/egress traffic shapping n the vds, the plicies are the same when cnfiguring a vss r vds. Therefre, I will list hw t navigate t traffic shaping separately, but the plicies and their cnfiguratins will be explained as ne vnetwrk Standard Switch (vss) 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click the Prperties hyperlink next t the vss yu want t mdify 5. Select the vswitch r prt grup yu want t mdify and click Edit NOTE: All settings frm the vswitch are prpagated t individual prt grups. Mdifying settings n an individual prt grup will verride the settings prpagated by the vswitch 6. Select the Traffic Shaping tab vnetwrk Distributed Switch (vds) 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the dvprt grup yu want t cnfigure and select Edit Settings 4. Under Plicies select Traffic Shaping Traffic Shaping Plicies

36 1. Once yu navigate t the apprpriate lcatin yu will see fur different settings (n a vds yu will see these settings twice; ne fr ingress and ne fr egress) 2. The first ptin is Status and yu can chse Enabled r Disabled. These shuld be self-explanatry 3. Average Bandwidth (defined in Kbits/sec): this setting is used t determine the allwed number f Kbits/sec t traverse each individual prt and is averaged ver time 4. Peak Bandwidth (defined in Kbits/sec): Wrklads tend t have perids f burst; meaning netwrk traffic will increase fr a shrt perid f time. The number yu enter fr Peak Bandwidth determines the maximum amunt f Kbits/sec that can traverse each individual prt 5. Burst Size (defined in Kbytes/sec): Prts gain a burst bnus when it des nt use all f the bandwidth it is allcated. When the prt needs additinal bandwidth then defined in Average Bandwidth, it can use its burst bnus. The Burst Size setting will limit the number f Kbytes gained by the burst bnus 6. Click Ok r Cancel when finished Enable TCP segmentatin Offlad supprt fr a virtual machine TCP segmentatin Offlad (TSO) can be enabled at the virtual machine level fr VMs running the fllwing guest perating systems Micrsft Windws 2003 EE with SP2 (32 bit and 64 bit) RHEL 4 (64 bit) RHEL 5 (32 bit and 64 bit) SUSE Linux Enterprise Server 10 (32 bit and 64 bit) TSO is enabled by default n the VMkernel interface Yu must use the enhanced vmxnet virtual netwrk adapter If yu are replacing an existing virtual adapter be sure t recrd the netwrk settings and MAC address f the ld adapter 1. Lgin t vcenter r directly t an ESXi hst using the VI Client 2. Navigate t the Hsts and Cluster view by clicking the View menu > Inventry > Hsts and Clusters (r Ctrl+Shift+H) 3. Right-click n the virtual machine yu want t enable TSO n > click Edit Settings 4. On the Hardware tab click Add (if replacing an existing adapter; recrd netwrk settings and MAC and remve the Netwrk Adapter n the list first) 5. Select Ethernet Adapter > click Next 6. Fr type, chse VMXNET 3 under the drpdwn 7. Specify the Netwrk t cnnect t using the drpdwn and whether yu want the adapter t be cnnected at pwer n > click Next 8. Click Finish 9. Upgrade VMware Tls manually if necessary (VMware tls are required t use the vmxnet virtual adapters)

37 NOTE: If TSO smehw gets disabled n a VMkernel interface yu must delete said interface and recreate it with TSO enabled Enable Jumb Frames supprt n apprpriate cmpnents Jumb Frames can be enabled at the vss layer, the vds layer, the VM layer and the VMkernel interface A jumb frame is a 9KB (9000 bytes) frame that enables less frames t be sent and push mre thrughput n a physical interface. In rder t take full advantage f jumb frames yur physical infrastructure must nt nly supprt them, but be cnfigured fr them, end-t-end vnetwrk Standard Switch (vss) 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Netwrking in the left clumn f the center pane 4. Click the Prperties hyperlink next t the vss yu want t mdify 5. Select the vswitch vmkernel interface yu want t mdify and click Edit 6. Change the MTU frm 1500 t 9000 a. If mdifying the virtual switch this is lcated n the General tab under Advanced Prperties b. If mdifying a vmkernel interface this is lcated n the General tab under NIC Settings 7. Click OK r Cancel when finished vnetwrk Distributed Switch (vds) 1. Lg in t vcenter using the VI Client 2. G t the Netwrking view by clicking the View menu > Inventry > Netwrking (r Ctrl+Shift+N) 3. Right-click n the dvswitch yu want t cnfigure and select Edit Settings 4. On the Prperties tab select Advanced 5. Change the Maximum MTU frm 1500 t Click OK r Cancel when finished Virtual Machine (VM) 1. Lgin t vcenter r directly t an ESXi hst using the VI Client

38 2. Navigate t the Hsts and Cluster view by clicking the View menu > Inventry > Hsts and Clusters (r Ctrl+Shift+H) 3. Right-click n the virtual machine yu want t enable TSO n > click Edit Settings 4. On the Hardware tab click Add (if replacing an existing adapter; recrd netwrk settings and MAC and remve the Netwrk Adapter n the list first) 5. Select Ethernet Adapter > click Next 6. Fr type, chse VMXNET 3 under the drpdwn 7. Specify the Netwrk t cnnect t using the drpdwn and whether yu want the adapter t be cnnected at pwer n > click Next 8. Click Finish 9. Upgrade VMware Tls manually if necessary (VMware tls are required t use the vmxnet virtual adapters) 10. Cnfigure jumb frames fr the virtual netwrk adapter within the guest perating system 11. Ensure all physical switches are cnfigured fr jumb frames Determine apprpriate VLAN cnfiguratin fr a vsphere implementatin There is n blanket VLAN cnfiguratin fr a vsphere implementatin. As I m sure yu have heard befre, it all depends n yur envirnment and what yur requirements are. A few principals t keep in mind thugh: There are three VLAN cnfiguratin ptins when it cmes t VLAN tagging External Switch Tagging (EST): all VLAN tagging f packets happens at the physical switch and all VLAN IDs in the virtual switches shuld be set t 0 (zer) Virtual Switch Tagging (VST): all VLAN tagging ccurs at the virtual switch. This requires the prts that the physical uplinks are cnnected t be cnfigured as a trunk prt. VLAN IDs must be specified at the prt grup level Virtual Guest Tagging (VGT): VLAN tagging is dne by the virtual machine. The 802.1Q VLAN trunking driver must be installed n the VM fr this t wrk prperly. All the prts n the physical switch cnnected t the physical adapters n the vswitch must be cnfigured as trunk prts Cnsider the three VLAN tagging methds abve and apply them t yur envirnment. If yu decide t use Virtual Switch Tagging (VST) be aware the physical prts they are cnnected t nt nly must be cnfigured as a trunk, but shuld nt have a native VLAN either r yu can run int cnflicts (i.e. tagged with the same VLAN by the vswitch and pswitch) Tls vsphere Installatin and Setup guide vsphere Netwrking guide

39 Sectin 3 Plan and Cnfigure vsphere Strage Objective 3.1 Cnfigure Shared Strage fr vsphere Knwledge Identify strage adapters and devices List f strage adapters includes: SCSI adapter iscsi adapter RAID adapter Fibre Channel adapter Fibre Channel ver Ethernet (FCE) adapter Ethernet adapter Device drivers are part f the VMkernel and are accessed directly by ESXi In the ESXi cntext, devices, als smetimes called Lgical Unit Numbers (LUNs) are represented by a SCSI vlume that is presented t the hst. Sme vendrs expse this as a single target with multiple strage devices (LUNs), and thers expse this as multiple targets with n device (LUN) each. As far as ESXi is cncerned, a device is a SCSI vlume presented t a hst Identify strage naming cnventins There are three different types f device identifiers used that make up part f the strage naming cnventin. Here they are alng with their crrespnding device ID frmats: SCSI INQUIRY Identifiers: these will be unique acrss all hsts and are persistent. The hst uses the SCSI INQUIRY cmmand in rder t use the page 83 infrmatin (Device Identificatin) t generate a unique identifier naa.number t10.number eui.number Path-based Identifier: When a device is queried and des nt return page 83 infrmatin, the hst generates an mpx.path name. Path represents the path t that particular device. This is created fr lcal devices during bt and is nt unique r persistent (culd change upn next bt) Example: mpx.vmhba1.c0:t0:l0 Legacy Identifier : ESXi als generates an legacy name as an alternative with the fllwing frmat: Vml.number The number are digits unique t the device and can be taken frm a part f the page 83 infrmatin if it s available Identify hardware/dependent hardware/sftware iscsi initiatr requirements

40 A hardware iscsi adapter fflads the netwrk and iscsi prcessing frm the hst. There are tw types f hardware iscsi adapters; dependent hardware iscsi adapter and independent hardware iscsi adapter (ensure these are listed n the HCL) Dependent Hardware iscsi Adapter these types f adapters depend n VMware netwrking and the iscsi management interfaces within VMware dependent upn the hst s netwrk cnfiguratin fr IP and MAC Independent Hardware iscsi Adapter These types f adapters are independent frm the hst and VMware Prvides its wn cnfiguratin management fr IP and ther netwrk address assignment The sftware iscsi adapter is built int VMware s cde, specifically the VMkernel. Using this type f adapter yu can cnnect t iscsi targets using a standard netwrk adapter installed n the hst. Since this is a sftware adapter, netwrk prcessing and encapsulatin are perfrmed by the hst, which des use hst resurces Cmpare and cntrast array thin prvisining and virtual disk thin prvisining Virtual Disk Thin Prvisining Allws yu t create virtual disks f a lgical size that initially differs frm the physical space used n a datastre. If yu create a 40GB thin disk, it may initially use nly 20GB f physical space and will expand as needed up t 40GB Can lead t ver-prvisining f strage resurces Array Thin Prvisining Thin prvisin a LUN at the array level Allws yu t create a LUN n yur array with a lgical size that initially differs frm the physical space allcated can expand up t lgical size ver time Array thin prvisining is nt ESXi aware withut using the strage APIs fr array integratin (VAAI). With a VAAI capable array, the array can integrate with ESXi, which at that pint ESXi is aware that the underlying LUNs are thin prvisined Using VAAI yu can mnitr space n the thin prvisined LUNs and tell the array when files are freed (deleted r remved) s the array can reclaim that free space My pinin is, if yur array supprts array thin prvisining and VAAI then use array thin prvisining and thick disks within vsphere. Even thugh yu are chsing a thick disk fr yur virtual disk type, it is still thin by prxy f array thin prvisining Describe zning and LUN masking practices Zning and LUN masking are smewhat similar in the fact that they are used fr access cntrl between different bjects and devices that may r may nt need t cmmunicate with each ther Zning Use single-initiatr zning r single-initiatr-single-target zning (mre restrictive). Each vendr will have different zning practices/best practices

41 Defines which Hst Bus Adapters (HBAs) can cnnect t which targets n the SAN. Objects that aren t zned t ne anther, r are utside f a particular zne aren t visible Reduces the number f LUNs and targets presented t a particular hst Cntrls/islates paths in yur SAN fabric Prevents unauthrized systems frm accessing targets and LUNs LUN Masking exact same thing as zning, but applied nly fr LUN-hst mapping Limits which hsts can see which LUNs Can be dne at the array layer r the VMware layer Scan/Rescan strage There are many different situatins in which strage is Scanned/Rescanned; here are a few When adding a new strage device, strage will be scanned/rescanned afterwrds; a scan fr new Strage Devices will be dne and a scan fr new VMFS vlumes will initiate After adding/remving iscsi targets Yu can perfrm a Rescan manually by perfrming the fllwing steps: 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Click the Rescan All hyper link n the tp right 5. Select which items yu want t scan fr; Scan fr New Strage Devices and Scan fr New VMFS Vlumes (bth are checked by default) 6. Click OK and wait fr the scan t cmplete, after which pint any new Strage Devices r VMFS Vlumes that exist will be displayed and available Identify use cases fr FCE FCE adapters are used t access fibre channel strage. FCE encapsulates FC frames int Ethernet frames and uses 10Gbit lssless Ethernet as transprt t the strage array Like the iscsi adapter, there are tw types f FCE adapters; sftware and hardware Sftware FCE Adapter: Uses the native FCE prtcl stack within ESXi t prcess the FCE prtcl Requires a physical NIC that has I/O fflad and Data Center Bridging (DCB) capabilities Maximum f 4 FCE sftware adapters per hst Hardware FCE Adapter: Specialized adapter that carries Ethernet and FC ver the same cnnecting (SFP r SFP+) Fr Ethernet, the hardware FCE adapter appears as a vmnic in the netwrking area f ESXi Fr Fibre Channel, the hardware FCE adapter appears as a vmhba in the strage area f ESXi When wuld use a hardware r sftware FCE adapter?

42 When yur datacenter supprts 10Gbit Ethernet When yu want t reduce yur ftprint inside yur hsts, as well as reduce the cable cunt cming frm each hst When yu have existing DCB technlgies in yur datacenter (i.e. Cisc Nexus 5K/7K r Cisc MDS) Create an NFS share fr use with vsphere This is ging t be subjective t yur particular strage device, but the basic steps are: Create a strage vlume Create a flder n that strage vlume Create a share fr that flder Allw the IP f yur hst(s) t access the strage Give the IPs f yur hst read/write access t the share yu created Cnnect t a NAS device Cnnecting t a NAS device is similar t creating a VMFS datastre; here are the steps 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Click the Add Strage hyperlink 5. Chse Netwrk File System > click Next 6. Enter in the Server, Flder, and what the name f the Datastre yu want 7. Click Next 8. Click Finish Enable/Cnfigure/Disable vcenter Server strage filters There are 4 different strage filters in vsphere 5 and they are all enabled by default cnfig.vpxd.filter.vmfsfilter Filters ut strage devices r LUNs that are already used by a VMFS datastre n any hst managed by vcenter. These LUNs will nt have the ptin t be frmatted with anther VMFS datastre and cannt be used as a RDM cnfig.vpxd.filter.rdmfilter Filters ut any LUNs already referenced as a RDM fr any hst managed by vcenter cnfig.vpxd.filter.samehstandtransprtsfilter Filters ut LUNs that are unable t be used as a VMFS datastre extent LUNs that aren t expsed n all the hsts that the datastre yu are trying t extend is expsed t LUNs that are using a different strage type than the riginal datastre (datastre using lcal strage can t use an iscsi extent t extend the datastre) cnfig.vpxd.filter.hstrescanfilter This filter, when enabled, autmatically rescans and updates VMFS datastres after yu perfrm datastre management peratins Hw t Enable/Cnfigure/Disable

43 1. Lg in t vcenter using the VI Client 2. Click the Administratin menu frm the menu bar 3. Select vcenter Server Settings 4. Chse Advanced Settings n the left 5. At the bttm in the textbx labeled Key: enter in the value f the strage filter yu want t enable r disable (.vmfsfilter,.rdmfilter,.samehstandtransprtfilter r.hstrescanfilter) 6. In the textbx labeled Value: type True t enable it r False t disable it Keep in mind that these filters are enabled by default 7. Click Add 8. T edit a key that is already added in the displayed list click n the current value fr the key yu want t cnfigure and change it (True t enable, False t disable) 9. Click OK r Cancel when finished Cnfigure/Edit hardware/dependent hardware initiatrs Independent Hardware iscsi Adapters 1. Install the adapter based vendr dcumentatin 2. Verify the adapter is installed crrectly and cnfigure it: Lg in t vcenter r directly t the hst using the VI Client Select a hst frm the left pane and then click the Cnfiguratin tab n the right Select Strage Adapters in the left clumn f the center pane If installed prperly, yu will see the new adapter in this list Select the newly installed adapter and click the Prperties hyperlink Frm here yu can change the default iscsi name, alias and IP settings 3. Click OK when finished Dependent Hardware iscsi Adapters: When yu install a dependent hardware iscsi adapter yu will be presented with a standard netwrk prt and a strage adapter. T Cnfigure: 1. Determine the assciatin between the dependent hardware adapter and the physical NIC Find the physical NIC listed under Netwrk Adapters that is assciated with yur dependent hardware adapter, yu ll need this fr later in the cnfiguratin 2. Lg in t vcenter r directly t the hst using the VI Client 3. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 4. Select Strage Adapters in the left clumn f the center pane 5. If installed prperly, yu will see the new adapter in this list 6. Select the newly installed adapter and click the Prperties hyperlink 7. Select the Netwrk Cnfiguratin tab and click Add 8. Add the netwrk adapter that crrespnds t the iscsi adapter listed 9. Click OK

44 Enable/Disable sftware iscsi initiatr Enable sftware iscsi initiatr: If yu haven t already added a sftware iscsi initiatr, d s nw: 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage Adapters in the left clumn f the center pane 4. Click the Add hyperlink 5. Select Add Sftware iscsi Adapter 6. Click OK twice 7. The newly added sftware iscsi adapter shuld shw in the list and is enabled by default 8. T disable, highlight the sftware iscsi adapter and click the Prperties hyperlink n the bttm right 9. Click Cnfigure 10. Uncheck the Enabled checkbx 11. Click OK 12. Click Clse Cnfigure/Edit sftware iscsi initiatr settings 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage Adapters in the left clumn f the center pane 4. Highlight the sftware iscsi adapter yu want t cnfigure and click the Prperties hyperlink n the bttm right 5. Click Cnfigure 6. Here yu can change the Status (enabled r disabled), the iscsi Name and the iscsi Alias 7. Click OK r Cancel when cmplete 8. On the Netwrk Cnfiguratin tab yu can cnfigure VMkernel Prt Bindings (will g ver in the next sectin) 9. Dynamic Discvery tab Click Add Enter in the iscsi target yu want t dynamicall discver in the iscsi Server field Leave the Prt set t 3260 unless yu have changed it in yur envirnment Skip CHAP if yu are using it in yur envirnment and d nt have it cnfigured t use it s parent (we will cver CHAP glbal cnfiguratin in a future sectin) Click OK Once the dynamic discvery is cmplete all targets fr that server shuld ppulate in the Static Discvery tab 10. Static Discvery

45 Click Add Enter in the iscsi Server IP, the Prt and the iscsi Targert Name Skip CHAP if yu are using it in yur envirnment and d nt have it cnfigured t use it s parent (we will cver CHAP glbal cnfiguratin in a future sectin) Click OK 11. Click Clse nce cmplete Cnfigure iscsi prt binding 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage Adapters in the left clumn f the center pane 4. Highlight the sftware iscsi adapter yu want t cnfigure and click the Prperties hyperlink n the bttm right 5. Select the Netwrk Cnfiguratin tab 6. Click Add 7. Select the VMkernel Adapter that crrespnds t the Physical Adapter yu want t bind 8. Click OK NOTE: When using the dependent hardware iscsi adapter the nly VMkernel interface that will display in the list is the ne assciated with the physical NIC fr that dependent hardware adapter Enable/Cnfigure/Disable iscsi CHAP There are tw types f CHAP yu can enable within the iscsi initiatr; nrmal CHAP, in which the target (a SAN typically) authenticates the hst cnnecting t it, and Mutual CHAP, in which the hst als authenticates the target. Mutual CHAP is the mst secure, and here is hw t cnfigure bth: CHAP (target authenticates hst) 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage Adapters in the left clumn f the center pane 4. Highlight the sftware iscsi adapter yu want t cnfigure and click the Prperties hyperlink n the bttm right 5. Click the CHAP buttn 6. Select an ptin D nt use CHAP CHAP will nt be used D nt use CHAP unless required by target CHAP will nly be used if its required by the back-end strage Use CHAP unless prhibited by target CHAP will always be used unless the back-end strage is nt cnfigured fr it

46 Use CHAP CHAP will be used all the time 7. Either check the Use initiatr name checkbx t use the initiatr name (uses the IQN f the adapter) as a lgin, r enter a name in the Name field 8. Enter in the CHAP secret in the Secret field Mutual CHAP (hst authenticates target) In rder t use Mutual CHAP yu must have the nrmal CHAP set t the Use CHAP ptin r else the nly ptin available fr Mutual CHAP will be D nt use CHAP 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage Adapters in the left clumn f the center pane 4. Highlight the sftware iscsi adapter yu want t cnfigure and click the Prperties hyperlink n the bttm right 5. Click the CHAP buttn 6. Select an ptin D nt use CHAP CHAP will nt be used Use CHAP CHAP will be used all the time 7. Either check the Use initiatr name checkbx t use the initiatr name (uses the IQN f the adapter) as a lgin, r enter a name in the Name field 8. Enter in the CHAP secret in the Secret field NOTE: the Secret fr CHAP and Mutual CHAP must be different Determine use case fr hardware/dependent hardware/sftware iscsi initiatr Independent hardware iscsi initiatr If yu have a very heavy iscsi envirnment with a lt f I/O (OLTP) yu may want t use a hardware iscsi initiatr, this will ff-lad all netwrk prcessing t the physical NIC, which will be mre efficient and free up resurces n the physical hst Dependent hardware iscsi initatr Yu may already have NICs that supprt this ptin s there is n reasn t buy anther ne If yu are in a high iscsi I/O envirnment, a dependent hardware iscsi initiatr may wrk as iscsi traffic bypasses the netwrking stack and ges straight t the hardware adapter, while the netwrk prtin f the adapter uses VMkernel netwrking. This leads t a lwer ftprint, being able t use ne adapter fr bth functins Sftware iscsi initiatr Yu can leverage existing Ethernet adapters and run netwrking and iscsi in the same adapter; VMkernel prcesses all netwrking and iscsi traffic

47 Lw cst Determine use case fr and cnfigure array thin prvisining Cnfiguring array thing prvisining is ging t be different fr each type f array s yu shuld cnsult the vendr dcumentatin in rder t cnfigure array thin prvisining Use Cases Unifrmity nce yu prvisin it fr the LUN, it wn t matter if the virtual disk created is thick r thin, it will always be thin because the LUN is thin prvisined Less verhead when integrated with strage APIs the hst can infrm the array when datstre space is freed up and allw the array t reclaim the freed blcks Ease f use allws an administratr t easily mnitr space usage n thin prvisined LUNs Tls vsphere Installatin and Setup guide vsphere Strage guide VMware vsphere Examples and Scenaris guide Objective 3.2 Cnfigure the Strage Virtual Appliance fr vsphere Knwledge Define Strage Virtual Appliance (SVA) architecture Belw is hw VMware describes their tw nde VSA Cluster Architecture frm page 9 f the VMware vsphere Strage Appliance Installatin and Cnfiguratin:

48 As depicted in the diagram abve, the cmpnents needed fr the SVA are: Physical hsts with lcal strage running ESXi 5.0 (can nly be cnfigured in a tw r three nde cluster) In clusters using nly tw ndes (like abve) the VSA Cluster Service runs n the vcenter machine. In a three nde cluster this is nt required Each hst has an active vlume and a replica vlume f ne f the ther hsts Netwrking fr VSA Netwrk traffic is brken up int frnt-end and back-end traffic Frnt-end traffic Prvides cmmunicatin between each VSA member cluster and the VSA cluster service Prvides cmmunicatin between each VSA cluster member and the VSA manager Prvides cmmunicatin between ESXi and the VSA vlumes Back-end traffic Prvides clustering cmmunicatin between all VSA cluster members Prvides the netwrk fr vmtin traffic between hsts running the VSA Prvides replicatin between a vlume and its replica that s lcated n anther hst Each VSA has tw virtual NICs, ne fr frnt-end traffic and ne fr back-end traffic; back-end uses private IP space f *.* Hw it wrks: Each VSA has tw vlumes; its wn active vlume and a replica vlume fr anther VSA. This is true in a tw r three nde cluster. Each VSA runs an NFS server. The NFS server takes the active vlume n the VSA and exprts it as an NFS vlume and then

49 presents that NFS vlume back t the ESXi server. VMware states that the underlying strage needs t be in a RAID 10 cnfiguratin s half the RAID 10 vlume is fr the active vlume, and the ther half fr the replica vlume. The idea is basically RAID 10 fr the vlume, but between cluster ndes, s if yu lse the physical nde, the vlume is still active n the secndary (I knw it is a bit cnvluted!) Quick run-dwn f Hardware and Sftware ESXi requirements fr VSA: 64-bit x86 2GHz r higher per cre Memry 6GB minimum 24 GB recmmended 72 GB maximum/tested 4 NIC prts per hst 8 hard disks with same capacity per hst, n mre than 2TB each RAID cntrller that supprts RAID10 Must be running ESXi 5.0 Cnfigure ESXi hsts as SVA hsts Yur ESXi hsts need t be what the VSA installer refers t as greenfield, which is basically a fresh install f ESXi 5 with n virtual machines and n additinal cnfiguratin The rt passwrd shuld be the same n all ESXi hsts that are jining the VSA cluster Assign static IPs and VLANs (ptinal) t yur ESXi hst(s) Assign a hstname and DNS servers n yur ESXi hst(s) Install vcenter Server as a physical server r VM If yu install as a VM d nt install it n an ESXi hst that yu re using fr the VSA Install the vsphere Client n the vcenter Server If using the GUI t install the VSA Create a new vdatacenter Add hsts t vdatacenter If using the cmmand line t install the VSA, d nt create a vdatacenter r add hsts t vcenter - - the autmated installatin will handle all f that Install the VSA Manager n the vcenter server Fr prerequisite infrmatin r step-by-step prcedures f the preceding items refer t pages f the VMware vsphere Strage Appliance Installatin and Cnfiguratin dcument Cnfigure the strage netwrk fr the SVA Yu need t have at least fur physical NICs per ESXi hst Yu need a Gigabit Ethernet switch If yu want t use VLANs it must supprt 802.1q VLAN trunking Yu need a DHCP server if yu plan t use DHCP t btain the vsphere Feature IP Address autmatically Cnfiguring the netwrks:

50 Ensure the physical prts n yur Gig switch are set fr 802.1q VLAN trunking if yu are using VLANs and that the VLAN IDs yu are using aren t being pruned Using the GUI t install the VSA (tw-member cluster withut DHCP, requires 11 static IP addresses) Prir t running the VSA install within the VI client yu will need t IP bth ESXi hsts and the vcenter server Once yu have started the install yu will be prmpted t enter the remaining IP addresses The first tw are glbal IPs, meaning nt hst-centric: VSA Cluster IP Address VSA Cluster Service IP Address The next fur addresses are fr VSA1: these are hst-centric Management IP Address fr VSA1 (frnt-end) Datastre IP address fr VSA1 (frnt-end) Back- end IP address fr VSA1 vsphere feature IP address fr ESXi hst 1 (can be assigned via DHCP) Specify VLAN (ptinal) The next fur addresses are fr VSA2: these are hst-centric Management IP Address fr VSA2 (frnt-end) Datastre IP address fr VSA2 (frnt-end) Back- end IP address fr VSA2 vsphere feature IP address fr ESXi hst 2 (can be assigned via DHCP) Specify VLAN (ptinal) Deply/Cnfigure the SVA Manager There are a few steps yu need t take in rder t deply/cnfigure the SVA Manager. The first thing yu will need t d is install the VSA manager n the vcenter server yu are using in yur VSA deplymen Install VSA Manager Lg n t the vcenter server Run the VSA Manager install file (as f this psting it is VMware-vsamanager-en exe) Chse yu language > click OK Click Next twice Accept the EULA > click Next Enter in the IP address and prt fr the vcenter server that will manage the VSA (shuld default t the vcenter IP yu are n and prt 443) > click Next Enter in license key r leave blank t install in evaluatin mde > click Next Click Install

51 Click Finish Deply/Cnfigure the VSA 1. Lg in t vcenter r directly t the hst using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters 3. If a vdatacenter desn t exist, create ne (right-click the vcenter bject at the tp and click New Datacenter) 4. Add the tw r three hsts yu want t use fr the VSA t the vdatacenter (remember, these must be greenfield hsts, i.e. n cnfiguratin) 5. Click the vdatacenter n the left and select the VSA Manager tab in the right pane (requires Adbe Flash) 6. Select Yes t accept the security certificate 7. Chse New Installatin > click Next > click Next 8. Chse the vdatacenter yu want t use > click Next 9. Chse the hsts yu want t use fr the VSA by checking the checkbx next t each hst (three maximum) > click Next 10. Enter in IPs fr the VSA Cluster IP Address and VSA Cluster Service IP Address 11. Enter in the IPs fr the first hst; Management IP Address and Datastre IP Address. The vsphere Feature IP Address is set t use DHCP, but yu can uncheck that and manually enter ne 12. Enter a VLAN ID (ptinal) fr the Frnt-end netwrk 13. Enter in the last tw ctets fr the Back-end IP Address 14. Enter in a VLAN ID (ptinal) fr the Back-end netwrk 15. Repeat steps fr each additinal hst (by default all IPs are aut-filled in a cntiguus manner after yu enter in the IPs fr the VSA Cluster IP and VSA Cluster Service IP) 16. Click Next 17. Chse either Frmat disks n first access r Frmat disks immediately > click Next 18. Click Install > click Yes t cnfirm starting the installatin Administer SVA strage resurces Once the install is cmplete yu get a dashbard lk f everything ging n in the VSA, here is hw yu get int it and what items are administrable The hsts that are participating in the VSA cluster are nw presented with NFS datastres, tw r three depending n the number f hsts part f the VSA cluster The VSA Manager Tab 1. Lg in t vcenter r directly t the hst using the VI Client

52 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters 3. Click the vdatacenter n the left and select the VSA Manager tab in the right pane (requires Adbe Flash) 4. Select Yes t accept the security certificate 5. Here yu are presented with a dashbard: Shws the VSA Cluster status Shws yu the VSA Cluster Netwrk Shws yur strage capacity 6. If yu want t put the VSA cluster in maintenance mde click the Enter VSA Cluster Maintenance Mde hyperlink > click Yes t cnfirm > click Clse nce it is cmplete 7. T exit cluster maintenance mde click the Exit VSA Cluster Maintenance Mde hyperlink 8. Yu can change the passwrd fr the cluster by click the Change Passwrd hyperlink. Enter in the lder username and passwrd and then enter and cnfirm the new passwrd > click OK 9. Yu can recnfigure the netwrk by clicking the Enter Recnfigure Netwrk Mde hyperlink > click Yes t cnfirm THE VSA CLUSTER WILLBECOME UNAVAILABLE WHILE YOU RECONFIGURE THE NETWORK Enter in yur new netwrk settings Click Next Click Install > click Yes t cnfirm 10. Yu can exprt lgs by clicking n the Exprt Lgs hyperlink. Once it cmpletes click the Dwnlad buttn and chse a place t save the lgs 11. As yu can see the Datastres view in the lwer prtin f the pain gives yu all the data fr each individual datastre 12. Click the Appliances buttn t view infrmatin abut the appliances 13. Click the Enter Appliance Maintenance Mde if yu want t place an individual VSA int maintenance mde 14. Manage the VSA datastres the same way yu wuld manage any ther NFS datastre, see Objective 3.3 fr mre details n hw t manage/administer an NFS datastre Determine use case fr deplying the SVA There are a few different use cases fr the SVA, with the biggest ne I believe t be the SMB SMBs mst likely can t affrd an expensive SAN; even an entry-level SAN/NAS, s even thugh the VSA license may be a bit expensive (~6K), it is still at least 50% cheaper than an entry-level SAN, and it enables yu t utilize existing strage and get all the features in vsphere that require shared strage. There are sme arguments against because f the steep price, but I wn t get int that here If yu are limited n pwer r space and need a bit f shared strage, the VSA may be a gd ptin fr yu t utilize pwer and real estate that s already being cnsumed

53 Determine apprpriate ESXi hst resurces fr the SVA Determining resurce fr yur ESXi hsts resurces fr the SVA are, as always, ging t depend n the envirnment, and the requirement. There will be many f design cnsideratins that yu need t take int accunt: What kind f wrklads will yu be running Hw many hsts yu need is determined by hw much capacity is needed Each hst can have a max f 8 hard disks, design capacity with that mind Hw many VMs will yu stre n the VSA Memry ver-cmmitment is NOT supprted fr VSA ESXi hsts Reserve all if the memry that is allcated t each VSA appliance VM Disable a virtual machine frm ding VMX swapping t a VSA datastre Requires an advanced cnfiguratin setting Sched.swap.vmxSwapEnabled = True Tls VMware vsphere Strage Appliance Installatin and Cnfiguratin guide VMware vsphere Strage Appliance Administratin guide Objective 3.3 Create and Cnfigure VMFS and NFS Datastres Knwledge Identify VMFS and NFS Datastre prperties VMFS Datastre Prperties Identify VMFS5 capabilities VMFS5 is a majr imprvement ver VMFS3 (IMHO) with ne f the biggest imprvements being the 32x increase in datastre capacity, a whpping 64TTB! Here is a list f VMFS5 capabilities: Supprts greater than 2TB strage devices fr each VMFS extent All blck sizes are nw standard at 1MB Supprt fr greater than 2TB disks fr RDM (physical cmpatibility mde) Scalability imprvements fr strage devices supprting hardware acceleratin (VAAI) ESXi supprts NAS plug-ins fr array integratin Atmic test and set (ATS) lcking n strage devices that supprt hardware acceleratin is nw the default lcking mechanism Can reclaim physical strage space n thin prvisined strage devices Online upgrades f datastres withut service disruptin Create/Rename/Delete/Unmunt a VMFS Datastre Create a VMFS Datastre

54 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Click the Add Strage hyperlink 5. Select Disk/LUN fr the strage type > click Next 6. Select the disk yu want t use > click Next 7. Select VMFS-5 fr the file system versin > click Next > click Next 8. Input a datastre name > click Next (yu shuld make it smething descriptive) 9. Chse whether t use Maximum available space r Custm Space (if chsing Custm space enter in the amunt yu want t use, in GB) > click Next 10. Click Finish Rename a VMFS Datastre 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Right-click n the datastre yu want t rename and select Rename 5. Enter in the new name and press enter r click a different area f the screen t cmmit the change Delete a VMFS Datastre 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Right-click n the datastre yu want t delete and select Delete 5. Chse Yes t cnfirm the deletin peratin (this will delete all files and virtual machines n this datastre Delete a VMFS Datastre 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Right-click n the datastre yu want t unmunt and select Unmunt 5. At this pint there are five checks that are perfrmed befre yu can Unmunt a datastre (If ne r mre f these checks fail yu must remediate it and repeat this step): 1) N virtual machines can reside n the datastre 2) The datastre can t be part f a datastre cluster 3) The datastre can t be managed by strage DRS 4) The datastre must have Strage I/O cntrl disabled 5) The datastre can t be used fr vsphere HA heartbeat 6. Click OK

55 NOTE: t munt, right-click the inactive datastre and select Munt Munt/Unmunt an NFS Datastre Munt an NFS Datastre 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Click the Add Strage hyperlink 5. Select Netwrk File System > click Next 6. Enter in the server name r IP address in the Server field 7. Enter in the flder path fr the NFS share in the Flder field 8. Check the Munt NFS read nly checkbx if yu want t munt the NFS vlume as read nly 9. Enter in a name fr the datastre in the Datastre Name field > click Next 10. Click Finish 11. The new NFS datastre shuld nw appear in the Datastres view Unmunt an NFS Datastre 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Right-click the NFS datastre yu want t unmunts and select Unmunt 5. Click Yes t cnfirm the remve datastre peratin Extend/Expand VMFS Datastres Extend/Expand a VMFS Datastre Adding Extents negates yur ability t use Strage I/O Cntrl (SIOC) fr that VMFS datastre 1. Lg in directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Right-click n the datastre yu want t extend/expand and select Prperties 5. Click the Increase buttn under Vlume Prperties 6. Chse the device yu want t use t extend the datastre > click Next > click Next 7. Chse the Custm space setting ptin and enter in hw much space yu want t use in GB r chse the Maximum available space ptin > click Next 8. Click Finish 9. Click Clse t return t the Datastres view Upgrade a VMFS3 Datastre t VMFS5

56 When yu upgrade the datastre, the ESXi file-lcking mechanism ensure that n lcal prcesses r remte hsts can access the datastre This is a ne-way nly prcess; n dwngrading Hw t upgrade a VMFS3 Datastre t VMFS5 will nt change blck size t 1MB 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Right-click n the datastre yu want t extend/expand and select Prperties 5. Click the Upgrade t VMFS-5 hyperlink lcated twards the bttm right 6. Click OK t cnfirm and start the VMFS-5 upgrade prcess Place a VMFS Datastre in Maintenance Mde Hw t place a VMFS datastre int Maintenance Mde 1. Lg in t vcenter using the VI Client 2. Click the View menu at the tp > select Inventry > select Datastres and Datastre Clusters (r Ctrl + Shift + D) 3. Select the datastre n the left that yu want t place in maintenance mde 4. Click the Summary tab 5. In the Cmmands pane, click the Enter SDRS Maintenance Mde hyperlink 6. T exit maintenance mde click the Exit SDRS Maintenance Mde hyperlink Select the Preferred Path fr a VMFS Datastre Hw t select a Preferred Path fr a VMFS Datastre 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Right-click n the datastre yu want and select Prperties 5. Click the Manage Paths buttn 6. Right-click n the path yu want t set as preferred and select Preferred 7. Once yu d this there shuld be a checkbx next t Preferred in the cntext menu and an asterisk (*) next t that path under the Preferred clumn 8. Click Clse twice Disable a path t a VMFS Datastre Hw t disable a particular path(s) t a VMFS Datastre 1. Lg in t vcenter r directly t the hst using the VI Client 2. Select a hst frm the left pane and then click the Cnfiguratin tab n the right 3. Select Strage in the left clumn f the center pane 4. Right-click n the datastre yu want and select Prperties 5. Click the Manage Paths buttn 6. Right-click n the path yu want t disable and select Disable

57 7. Once yu d this there shuld be a checkbx next t Disable in the cntext menu and the Status shuld say Disabled 8. Click Clse twice Determine use case fr multiple VMFS/NFS Datastres There are a few big use cases fr using multiple VMFS/NFS Datastres Datastres sit n backend strage that have physical disks cnfigured in a particular way. If yu have a requirement where sme applicatins need mre space, r need t be faster than thers, creating multiple datastres with different characteristics will slve that requirement Disk cntentin culd be a prblem, having different datastre will allw yu t spread thse wrklads ver different physical disks HA and resiliency having multiple datastres allws yu t spread yur VMs acrss them. If yu lse a datastre, all f yur VMs wn t g dwn, nly VMs lcated n that particular datastre Determine the apprpriate Path Selectin Plicy fr a given VMFS Datastre Determining the apprpriate Path Selectin Plicy (PSP) fr a given VMFS Datastre, r curse, depends n the situatin: Different strage back-ends supprt different PSP, sme are active/passive, sme are active/active (ALUA) Number f physical strage adapters als is a factr; if yu have n physical adapter with paths t 2 strage prcessr, yu are prtected againast a strage prcessr failure, but if the physical NIC fails, yu get int an All Paths Dwn(APD) scenari, which = nt gd! If yu are using virtualized strage, such as EMC VPLEX r NetApp Metr-Cluster, yu may nt want t use Rund-Rbin There are als third-party pathing plug-ins, such as EMC PwerPath/VE, which will dynamically lad balance, perfrm failback, and is VM/Strage aware Tls vsphere Installatin and Setup guide vsphere Strage guide Sectin 4 Deply and Administer Virtual Machines and vapps Objective 4.1 Create and Deply Virtual Machines Knwledge Identify capabilities f virtual machine hardware versins

58 Virtual Hardware Versin Memry Limits CPU Limits Descriptin GB (5.x) 32 Cmpatible with ESXi 5.0 and later hsts. Prvides the latest virtual machine features GB (4.x) 8 Cmpatible with ESX/ESXi4, 4.x, and 5.0 hsts. Recmmended fr sharing strage r VM;s with ESX/ESXi versins 3.5 t MB (3.5) 4 Cmpatible with ESX/ESXi 3.0 and later hsts. Recmmended fr VM s that need t run n ESX/ESXi 3.x hsts 16384MB (3.x) Infrmatin prvided by VMware KB article KB as well as pages 81 thru 82 f the vsphere Virtual Machine Administratin dcumentatin. Identify VMware Tls device drivers Driver Name SVGA Driver Descriptin This virual driver enabled 32-bit display, high display reslutin, and significantly faster graphics perfrmance. When yu install VMware Tls, a virtual SVGA driver replaces the default VGA driver, which allws fr nly 640 x 480 reslutin and 16-bit clr On Windws guest perating systems whse perating systems is WIndws Vista r later, the VMware SVGA 3D (Micrsft - WDDM) driver is installed. This driver prvides the same base funtinality as teh SVGA driver, and it adds Windws Aer supprt SCSI Driver Paravirtual SCSI Driver When yu create a virtual machine, if yu specify that yu want the virtual machine t use a BusLgic adapter, he guest perating system uses the SCSI driver that VMware Tls prvides. Sme recent guest perating systems, hwerver, cntain LSI Lgic Parallel r LSI Lgic SAS drivers. Fr example, Windws Server 2008 defaults t LSI Lgic SAS, which prvides the best perfrmance fr that perating system. In this case, the LSI Lgic SAS driver prvided by the perating system is used This driver is fr PVSCSI adapters, which enhance the perfrmance f sme virtualized applicatins VMXNet NIC Drivers The vmxnet and vmxnet3 netwrking drivers imprve netwkr perfmrance. Which driver is used depends n hw yu cnfigure devices settings fr the virtual machine. When yu install VMware Tls, a VMXNet NIC driver replaced the default vlance driver Muse Driver Audi Driver Kernel Mdule fr Sharing Flder ThinPrint Driver The virtual muse driver imprves muse perfrmance. Tis driver is required if yu use sme third-party tls such as Micrsft Terminal Services This sund driver is required fr all 64-bit Windws guest perating systems and 32-bit Windws Server 2003, WIndws Server 2008, and Windws Vista guest perating systems if yu use the virtual machine with VMware Server, Wrkstatin, r Fusin The hst-guest file system mdule, called hgfs.sys n Windws guest perating systems and vmhgfs n Linux and Slaris, is required t use the virtual machine with Wrkstatin r Fusin and share flders between hsts and guests. This driver enables the virtual printing feature n Micrsft Windws virtual machines. With

59 virtual printing, printers added t the perating system n the client r hst appear in the list f available printers in the gust perating system. N additinal printer drivers must be installed in the virtual machine Memry Cntrl Driver Mdules and Drivers That Supprt Making Autmatic Backups VMCI and VMCI Sckets Drivers This driver is available and recmmended if yu use VMware vsphere. Excluding this driver hinders the memry management capabilities f the virtual machine in a vsphere deplyment If the guest perating system is Windws Vista, Windws Server 2003, r ther newer Windws perating systems, a Vlume Shadw Cpy Services (VSS) mdule is installed. Fr ther, lder Windws perating systems, the Filesystem Sync driver is installed. These mdules enable backup applicatins t create applicatin-cnsistent snapshts. During the snapshtting prcess, certain prcesses are paused and virtual machine disks are quiesced The Virtual Machine Cmmunicatin Interface driver allws fast and efficient cmmunicatins between virtual machines. Develpers can write client-server applicatins t the VMCI Sck (vsck) interface t make use f the VMCI virtual device Chart infrmatin prvided frm pages 8 thru 9 f the Installing and Cnfiguring VMware Tls dcument as well as VMware KB Article KB340. Identify methds t access and use a virtual machine cnsle In vsphere 5 there are nw tw ways t access a virtual machines cnsle. First the newest way via the vsphere Web Client. T d s yu need t dwnlad and install the Client Integratin Plug-In. Secnd, and the tried and true way is via the vsphere Client. Fr step by step instructins n using either f tw ways refer t pages 202 thru 203 f the vsphere Virtual Machine Administraitn dcument Identify virtual machine strage resurces File Usage Descriptin.vmx vmname.vmx Virtual machine cnfiguratin file.vmxf vmname.vmxf Additinal virtual machine cnfiguratin files.vmdk vmname.vmdk Virtual disk characteristics -flat.vmdk vmname-flat.vmdk Prealcated virtual disk.nvram vmname.nvram r nvram Virtual machine BIOS r EFI cnfiguratin.vmsd vmname.vmsd Virtual machine snapshts.vmsn vmname.vmsn Virtual machine snapsht data file.vswp vmname.vswp Virtual machine swap file.vmss vmname.vmss Virtual machine suspend file

60 .lg vmware.lg Current virtual machine lg file -#.lg vmware-#.lg (where # is a number starting with 1) Old virtual machine lg entries Place virtual machines in selected ESXi hsts/clusters/resurce Pls - Hst r Cluster 1. On the Hst/Cluster page f the New Virtual Machine wizard, select the hst r cluster where yu want t run the virtual machine 2. Click Next - Resurce Pl 1. On the Resurce Pl page f the New Virtual Machine wizard, navigate t the resurce pl where yu want t run the virtual machine 2. Select the resurce pl and click Next Cnfigure and deply a Guest OS int a new virtual machine 1. Open the vsphere Client and lg in t the vcenter Server system r hst n which the virtual machine resides 2. Select an installatin methd: a. CD-ROM - Insert the installatin CD-ROM fr yur guest perating system int the CD-ROM drive f yur ESXi hst b. ISO image - Munt the ISO image frm a VMFS r NFS datastre t VM 3. Right-click the virtual machine and select Pwer -> Pwer On 4. Fllw the installatin instructins that the perating system vendr prvides Cnfigure/Mdify disk cntrller fr virtual disks 1. Frm within the vsphere Client select a VM in yur inventry 2. Right click the VM and select Edit Settings 3. Click the Hardware tab, select a SCSI cntrller, and click Change Type (Nte, the VM needs t be pwered dwn fr this ptin t be available) 4. Select a SCSI cntrller type and click OK 5. Click OK t save yur changes and clse the dialg bx Fr further infrmatin refer t page 36 f the vsphere Virtual Machine Administratin dcumentatin Cnfigure apprpriate virtual disk type fr a virtual machine Optin Type Thick Prvisin Lazy Zered (zeredthick) Actin Space required fr the virtual disk is allcatd during the creatin f the disk file. Any data remaining n the physical device is nt earased during creatin, but is zered ut n demand at a later time n first write frm the virtual machine. The virtual machine

61 des nt read stale data frm disk. Thick Prvisin Eager Zered (eagerzeredthick) Thin Prvisin Raw Device Mapping (RDM) Space required fr the virtual disk is allcated at creatin time. In cntrast t zeredthick frmat, the data remaining n the physical device is zered ut during creatin. It might take much lnger t create disks in this frmat thant t create ther types f disks Space required fr the virtual disk is nt allcated during creatin, but is supplied and zered ut, n demand at a later time Allws a VM t stre its data directly n a SAN LUN. The RDM file (which ends in.vmdk) cntains the LUN mapping infrmatin that ESXi uses t prcess I/O t the assigned LUN Fr further infrmatin abut disk types refer t VMware KB article KB as well as pages 36 thru 40 f the vsphere Virtual Machine Administratin dcument. Fr further infrmatin regarding Raw Device Mapping (RDM) refer t pages 135 thru 141 f the vsphere Strage dcument. Create/Cnvert thin/thick prvisined virtual disks 1. Frm within the vsphere Client select a VM in yur inventry 2. Click the Summary tab and under Resurces duble click the datastre fr the virtual machine t pen the Datastre Brwser dialg bx 3. Click the virtual machine flder t find the virtual disk file yu want t cnvert. The file has the.vmdk extensin 4. Right-click the virtual disk file and select Inflate Cnfigure disk shares 1. Frm within the vsphere Client select a VM in yur inventry 2. Right click the VM and select Edit Settings 3. Click the Resurces tab and select Disk 4. In the Resurce Allcatin panel, select the virtual hard disk t change 5. Click the Shares clumn and change the value t allcate a number f shares f its disk bandwidth t the virtual machine Lw (500) Nrmal (1000) High (2000) 6. Custm - Allws fr a user-defined share value 7. Click the Limit - IOPS clumn and enter the upper limit f strage resurces t allcate t the virtual machine 8. Click OK t save yur changes and clse the dialg bx Install/Upgrade/Update VMware Tls 1. Frm within the vsphere Client select a VM in yur inventry 2. Right click the VM and select Guest -> Install/Upgrade VMware Tls a. If yu are perfming a first time installatin f VMware tls, click OK n the Install VMware Tls dialg bx

62 b. If yu are perfmring an upgrade/update in the Install/Upgrade VMware Tls dialg bx, select Interactive Tls Installatin r Interactive Tls Upgrade and click OK 3. If autrun is nt enabled, t manually launch the wizard, click Start -> Run and enter D:\Setup.exe, where D: is yur first virtual CD-ROM drive 4. Fllw the n-screen instructins a. If yu use vsphere, t install nndefault cmpnents, select the Custm setup 5. If the New Hardware wizard appears, g thrugh the wizard and accept the defaults 6. If yu are installing a beta r RC versin f VMware Tls and yu see a warning that a package r driver is nt signed, click Install Anyway t cmplete the installatin 7. When prmpted, rebt the virtual machine Cnfigure virtual machine time synchrnizatin 1. Open a cmmand prmpt r termial in the guest perating system 2. Change t the VMware Tls installatin directry (refer t table belw) 3. Enter the cmmand t determine whether time synchrnizatin is enabled (refer t table belw) utility-name timesync status 4. Enter the cmmand t enable r disable peridic time synchrnizatin utility-name timesync <disable/enable> Operating System Default Path Utility Name Windws C:\Prgram Files\VMware\VMware Tls VMwareTlbxCmd.exe Linux and Slaris /usr/sbin vmware-tlbx-cmd FreeBSD /usr/lcal/sbin vmware-tlbx-cmd Fr further infrmatin read pages 30 thru 31 f the Installing and Cnfiguring VMware Tls dcumentatin Cnvert a physical machine using VMware Cnverter Mdify virtual hardware settings using VMware Cnverter Each f these tpics culd take several pages t fully explain and walk thrugh. Fr a clear understanding f each f these prcesses (as well as thers) read thrugh the VMware vcenter Cnverter Standalne User s Guide. Cnfigure/Mdify virtual CPU and Memry resurces accrding t OS and applicatin requirements

63 This sectin is all abut right sizing yur virtual machines with the crrect amunt f available resurces cmpared t the needed resurces. Des the applicatin require 2 vcpu s r if yu present it 2 vcpu s wuld it prperly leverage thse resurces? Hw abut memry, des it need the full 4GB that is mentined by the applicatin vendr r after trending analysis it can run with nly 3GB. Thankfully with the ptins vsphere prvides if yu need t make these needed adjustments (if yu plan accrdingly ahead f time) n the fly. If need be and if supprted by yur guest perating system vsphere allws fr the Ht Add f bth vcpu and memry resurces. If the abve applicatin was cnfigured with 3GB f memry and truly needs 4GB yu can add the additinal memry withut any dwntime t the server r applicatin. Same hlds fr CPU, if additinal resurces are needed and them n the fly (based guest perating system supprt) Fr further infrmatin n bth CPU and Memry resurce setup and cnfiguratin refer t pages 88 thru 106 f the vsphere Virtual Machine Administratin dcumentatin. Cnfigure/Mdify virtual NIC adapter and cnnect virtual machines t apprpriate netwrk resurces 1. In the vsphere Client inventry, right-click the virtual machine and select Edit Settings 2. Click the Hardware tab and select the apprpriate NIC in the Hardware list 3. (Optinal) T cnnect the virtual NIC when the virtual machine is pwered n, select Cnnect at pwer n 4. (Optinal) Click the blue infrmatin icn under DirectPath I/O t view details regarding the virtual NIC s DirectPath I/O status and capability 5. Select an ptin fr MAC address cnfiguratin Optin Descriptin Autmatic Manual vsphere assigns a MAC address autmatically Type the MAC address t use 6. Cnfigure the Netwrk Cnnectin fr the virtual NIC Optin Standard Settings Advanced Settings Descriptin The virtual NIC cnnects t standard r distribured prt grup. Select the prt grup fr the virtual NIC t cnnect t frm the Netwrk label drp-dwn menu The virtual NIC cnnects t a specific prt n a vsphere distributed switch. This ptin appears nly when a vsphere distributed switch is available

64 1. Click Switch t advanced Settings 2. Select a vsphere distributed switch fr the virtual NIC t use frm the VDS drp-dwn menu 3. Type the Prt ID f the distributed prt fr virtual NIC t cnnect t 7. Click OK t save yru changes and clse the dialg bx Determine apprpriate datastre lcatins fr virtual machines based n applicatin wrklads Strage can be divided int different tiers depending n a number f factrs: High Tier - Offers high perfrmance and high availability. Might ffer built-in snapshts t facilitate backups and pint-in-time restratins. Supprts replicatin, full SP redundancy, and SAS drives. Uses high-cst spindles Mid Tier - Offers mid-range perfrmance, lwer availability, sme SP redundancy, and SCSI r SAS drives. May ffer snapshts. Uses medium-cst spindles Lwer Tier - Offers lw perfmance, little internal strage redundancy. Uses lw end SCSI drives r SATA Fr further infrmatin read pages 26 thru 27 f the vsphere Strage dcumentatin Tls vsphere Virtual Machine Administatin guide Installing and Cnfiguring VMware Tls Guide Objective 4.2 Create and Deply vapps Knwledge Identify vapp settings - Optins Tab Resurces - Just like with Resurce Pls, with vapps yu can allcate CPU and memry resurces and cntrl Shares, Reservatins and Limits Prperties - Allws fr cnfiguratin f custm prperties in the OVF envirnment f the vapp. Defined under the Advanced -> Prperties sectin

65 IP Allcatin Plicy - Allw fr the cnfiguratin f hw IP addresses are allcated. Three ptins available; Fixed, Transient, and DHCP. Cnfigured under Advanced -> IP Allcatin Advanced - Allws fr the setting f the Prduct Name, Versin, Vendr URL, etc. Als as stated abve the advanced cnfiguratin f Prperties and IP Allcatin - Start Order Tab The start rder tab allws yu t set the Startup and Shutdwn actins f grups f VM s. This allws yu t cntrl the startup rder f VM s in a vapp. Fr example, yu have a DB server that needs t be started prir t the applicatin server cming up. Create/Clne/Exprt a vapp - Create a vapp 1. Within the vsphere Client right click a cluster resurce and select New vapp 2. Name the vapp and select an inventry lcatin, click Next 3. Set the cpu and memry resurce allcatin, click Next 4. Select Finish t cmplete the New vapp wizard - Clne a vapp 1. Within the vsphere Client select the vapp yu wish t clne 2. In the tp menu bar select Inventry -> Clne (be sure that all VM s have been pwered dwn) 3. Select the destinatin fr the clned vapp. Click Next 4. Give the clned vapp a name and select an inventry lcatin. Click Next 5. Select a destinatin datastre and click Next 6. Select a disk frmat and click Next 7. Map the netwrks if necessary and click Next 8. Review yur settings and click Finish - Exprt a vapp 1. Within the vsphere Client select the vapp yu wish t exprt 2. In the tp menu bar select File -> Exprt -> Exprt OVF Template 3. The Exprt OVF Template dialg bx is displayed 4. Prvide a Name, Directry t exprt t, Frmat, and a Descriptin if needed. 5. Click OK t begin the exprt Cnfigure IP pls - Specify an IP Address Range 1. In the inventry, select the datacenter that cntains the vapp 2. In the IP Pls tab, right-click the IP pl that yu want t edit and select Prperties

66 If n IP Pls appear, click Add t add a new IP pl 3. In the Prperties dialg bx, select the IPv4 r the IPv6 tab, depending n yur IP prtcl 4. Enter the IP Subnet and Gateway in their respective fields 5. (Optinal) Select the Enable IP Pl check bx 6. (Optinal) Enter a cmma-separated list f hsts address ranges in the Ranges field 7. Click OK - Select DHCP 1. In the inventry, select the datacenter that cntains the vapp yu are cnfiguring 2. In the IP Pls tab, right-click the IP pl that yu want t edit and select Prperties If n IP Pls appear, click Add t add a new IP pl 3. In the Prperties dialg bx, select the DHCP tab 4. Select either the IPv4 DHCP Present r IPv6 DHCP Present check bx t indicate that ne f the DHCP servers is available n this netwrk 5. Click OK - Specify DNS Settings 1. In the inventry, select the datacenter that cntains the vapp 2. In the IP Pls tab, right-click the IP pl that yu want t edit and select Prperties If n IP Pls appear, click Add t add a new IP Pl 3. In the Prperties dialg bx, select the DNS tab 4. Enter the DNS server infrmatin 5. Click OK - Specify a Prxy Server 1. In the inventry, select the datacenter that cntains the vapp 2. In the IP Pls tab, right-click the IP pl that yu want t edit and select Prperties If n IP Pls appear, click Add t add a new IP Pl 3. In the Prperties dialg bx, select the Prxy tab 4. Enter the server name and prt number fr the prxy server 5. Click OK - Select Netwrk Assciatins 1. In the inventry, select the datacenter that cntains the vapp 2. In the IP Pls tab, right-click the IP pl that yu wantt t edit and select Prperties

67 If n IP Pls appear, click Add t add a new IP Pl 3. In the Prperties dialg bx, select the Assciatins tab 4. Select the netwrks that use this IP Pl 5. Click OK Fr further infrmatin read pages 191 thru 193 f the vsphere Virtual Machine Administratin dcumentatin Suspend/Resume a vapp - Suspend a vapp 1. Frm the vsphere Client select the vapp yu want t place in suspended state 2. Right-click the vapp and select Suspend - Resume a vapp 1. Frm the vsphere Client select the vapp yu want t resume 2. Right-click the vapp and select Pwer On Determine when a tiered applicatin shuld be deplyed as a vapp If yu envirnment has tiered applicatins running in virtual machines and have a dependency n specific start rder (think first DB server, then applicatin server, and finally web server) they are the ideal candidates fr use in a vapp. Tls vsphere Virtual Machine Administatin guide Objective 4.3 Manage Virtual Machine Clnes and Templates Knwledge Identify the vcenter Server managed ESXi hsts and Virtual Machine maximums Virtual Machine maximums Item vsphere 5.x vsphere 4.1 Virtual CPUs per VM 32 8 RAM per VM 1TB 255GB

68 ESXi Hst maxiums Item vsphere 5.x vsphere 4.1 VMs per Hst Virtual CPUs per Hst RAM per Hst 2TB 1TB This is a brief list f the maximums that are nw available fr vsphere 5. Fr a full listing refer t the Cnfiguratin Maximums dcument fr vsphere 5. Identify Clning and Template ptins Regardless f which deplyment ptin yu select bth allw fr the changing/setting f the virtual machine name, inventry lcatin, hst and cluster placement, resurce pl, datastre, disk frmat, and finally guest OS custmizatins. Clne an existing virtual machine 1. Right-click the virtual machine and select Clne 2. Enter a virtual machine name, select a lcatin, and click Next 3. Select a hst r cluster n which t run the new virtual machine 4. Select a resurce pl in which t run the virtual machine and click Next 5. Select the datastre lcatin where yu want t stre the virtual machine files 6. Select the frmat fr the virtual machine s disks and click Next 7. Select a guest perating system custmizatin ptin 8. Review yur selectins and select whether t pwer n the virtual machine r edit virtual machine settings Fr further infrmatin read pages 46 thru 47 f the vsphere Virtual Machine Administratin guide Create a template frm an existing virtual machine 1. Right-click the virtual machine and select Template -> Cnvert t Template Deply a virtual machine frm a template 1. Right-click the template, and select Deply Virtual Machine frm this Template 2. Enter a virtual machine name, select a lcatin, and click Next 3. Select a hst r cluster n which t run the new virtual machine 4. Select a resurce pl in which t run the virtual machine and click Next 5. Select the datastre lcatin where yu want t stre the virtual machine files 6. Select the frmat fr the virtual machine s disks and click Next

69 7. Select a guest perating system custmizatin ptin 8. Review yur selectins and select whether t pwer n the virtual machine r edit virtual machine settings Fr the cmplete details, refer t pages 50 thru 52 f the vsphere Virtual Machine Administratin dcument. Update existing virtual machine templates 1. Frm the vsphere Client switch t the VMs and Templates view 2. Select the Template yu wish t update and right click and chse Cnvert t Virtual Machine 3. Make the need changes 4. Pwer the VM dwn and cnvert back t a template (see steps abve) Deply virtual appliances and/r vapps frm an OVF template 1. In the vsphere Client, select File -> Deply OVF Template 2. Specify the surce lcatin and click Next 3. View the OVF Template Details page and click Next 4. If license agreements are packaged with the OVF template, the End User License Agreement page appears. Agree t accept the terms f the licenses and click Next 5. (Optinal) Edit the name and select the flder lcatin within the inventry where the vapp will reside, and click Next 6. Select the deplyment cnfiguratin frm the drp-dwn menu and click Next 7. Select the hst r cluster n which yu want t deply the OVF tempate and click Next 8. Select the hst n which yu want t run the deplyed OVF tempate, and click Next 9. Navigate t, and select the resurce pl where yu want t run the OVF template and click Next 10. (Optinal) Apply a virtual machine strage prfile frm the VM Strage Prfile drpdwn menu 11. Select a datastre t stre the deplyed OVF template, and click Next 12. Select the disk frmat t stre the virtual machined virtual disks, and click Next 13. If the appliance that yu are deplying has ne r mver vservice dependencids, select a binding service prvider 14. Fr each netwrk specified in the OVF template, select a netwrk by right-clicking the Destinatin Netwrk clumn in yur infrastructure t set up the netwrk mapping and click Next 15. On the IP Allcatin page, cnfigure hw IP addresses are allcated fr the virtual appliance and click Next 16. Set the user-cnfigurable prperties and click Next 17. Review yur settings and click Finish Fr further infrmatin read pages 68 thru 69 f the vsphere Virtual Machine Administratin guide Imprt and /r Exprt an OVF template 1. Select the virtual machine r vapp and select File -> Exprt -> Exprt OVF Template 2. In the Exprt OVF Template dialg, type the Name f the template

70 3. Enter the Directry lcatin where the exprted virtual machine template is saved, r click... t brwse fr the lcatin 4. In the Frmat field, determine hw yu want t stre the files Select Flder f Files (OVF) t stre the OVF tempate as a set f files. This frmat is ptimal if yu plan t publish the OVF files n a web server r miage library. The package can be imprted, fr example, int the vsphere cleint by publishing the URL t the.vf file Select Single file (OVA) t package the OVF template int a single.va file. This might be cnvenient t distribute the OVF package as a single file if it needs t be explicitly dwnladed frm a web site r mved arund using a USB key. 5. In Descriptin, type a descriptin fr the virtual machine 6. Select the checkbx if yu want t include image files attached t flppy and CD/DVD devices in the OVF package 7. Click OK Fr further infrmatin read pages 69 thru 71 f the vsphere Virtual Machine Administratin guide Determine the apprpriate deplyment methdlgy fr a given virtual machine applicatin Create as needed virtual machines Create a virtual machine template t quickly deply standardized virtual machines Clne an existing virtual machine t get an exact cpy (r many cpies) f a virtual machine Use OVF (Open Virtual Machine Frmat) t deply virtual machines,vapps, and virtual appliances Tls vsphere Virtual Machine Administatin guide VMware vsphere Examples and Secnaris guide OVF Tl User guide Objective 4.4 Administer Virtual Machines and vapps Knwledge Identify files used by virtual machines File Usage Descriptin.vmx vmname.vmx Virtual machine cnfiguratin file.vmxf vmname.vmxf Additinal virtual machine cnfiguratin files.vmdk vmname.vmdk Virtual disk characteristics -flat.vmdk vmname-flat.vmdk Prealcated virtual disk

71 .nvram vmname.nvram r nvram Virtual machine BIOS r EFI cnfiguratin.vmsd vmname.vmsd Virtual machine snapshts.vmsn vmname.vmsn Virtual machine snapsht data file.vswp vmname.vswp Virtual machine swap file.vmss vmname.vmss Virtual machine suspend file.lg vmware.lg Current virtual machine lg file -#.lg vmware-#.lg (where # is a number starting with 1) Old virtual machine lg entries Identify lcatins fr virtual machine cnfiguratin files and virtual disks The default lcatin fr VM cnfiguratin files t be stred is a named flder (usually that f the VM) n the datastre that the VM was created(referred t as the wrking directry ). There are tw exceptins hwever. If adding an additinal hard disk t a VM (VMDK r RDM) yu have the ability t place these files n a different datastre. Als, yu can relcate a VM s swap file t a different lcatin. This can be cntrlled at the cluster, hst, r VM level. Identify cmmn practices fr securing virtual machines Install Antivirus Sftware Disable cpy and paste peratins t the clipbard Remve unnecessary hardware devices These are just a few examples taken frm pages 87 thru 89 f the vsphere Security dcumentatin. Fr a mre detailed security apprach review the vsphere Security Hardening Guide, currently versin 4.1 Ht Extend a virtual disk Ht extending a virtual disk allws fr increasing the size f an assigned VMDK file while the system is running. This is a tw part prcess with the first step taking place via the vsphere Client and the ther taking place in the guest VM which differs between guest OS es. Frm vsphere Client 1. Select the virtual machine yu wuld like t extend 2. Right click the VM and select Edit Settings 3. On the Hardware tab select the Hard Disk yu wish t extend 4. In the right hand pane increase the hard disk t the new size 5. Click OK Fr the secnd step n a Windws based VM yu will either need t use DiskPart (Win2K3, Win2K, r XP) r the Disk Manager GUI (Win2K8 and up, Vista and up). Refer t VMware KB article KB fr full details.

72 Cnfigure virtual machine ptins Virtual machine ptins allw fr the cnfiguratin and setting f advanced features f a virtual machine. They are accessed via the Optins tab after selecting a VM and selecting Edit Settings. Virtual Machine Optins Optins Descriptin General Optins Display name and type f guest perating system. Lcatin f the virtual machine and its cnfiguratin file vapp Optins VMware Tls Pwer Management Optins fr functinality, prduct infrmatin, prperties, and OVF settings specific t virtual appliances Pwer Cntrls behavir, VMware Tls scripts, and autmatic updates Virtual machine Suspend behavir Advanced Virtual Machine Optins Advanced Optins General CPUID Mask Memry/CPU Htplug Bt Optins Descriptin Acceleratin, lgging, debugging and statistics NX flag and advanced identifciatin mask ptins Ht add enablement fr individual virtual machines Virtual machine bt ptins. Add a delay befre bting r frce entry int the BIOS r EFI setup screen Fibre Channel NPIV Virtual nde and prt Wrld Wide Names (WWNs) CPU/MMU Virtualizatin Swapfile Lcatin SDRS Rules Settings fr enabling Hardware Page Tabe Virtualizatin. In sme new prcessrs, cntrls the use f hardware supprt fr virtual MMUs Swapfile lcatin Set affinity rules fr virtual disks within a datastre cluster Chart frm page 80 f the vsphere Virtual Machine Administratin dcuement Cnfigure virtual machine pwer settings

73 1. In the vsphere Client inventry, right-click the virtual machine and select Edit Settings 2. Click the Optins tab and select Pwer Management 3. In the Guest Pwer Management panel, select a pwer ptin Suspend the virtual machine Put the guest perating system in standby mde and leave the virtual machine pwered n 4. (Optinal) Select Wake n LAN fr virtual machine traffic n and select the virtual NICs t trigger this actin. 5. Click OK t saver yur changes and clse the dialg bx See pages 170 thru 171 f the vsphere Virtual Machine Administratin dcumentatin fr further details Cnfigure virtual machine bt ptins 1. In the vsphere Client inventry, right-click the virtual machine and select Edit Settings 2. Click the Optins tab and under Advanced select Bt Optins 3. In the Pwer n Bt Delay panel, select the time in milliesecnds t delay the bt peratin 4. (Optinal) Select whether t frce entry int the BIOS r EFI setup screen the next time the virtual machine bts 5. (Optinal) Select whether t try t rebt after a bt failure 6. Click OK t save yur changes and clse the dialg bx See pages 173 thru 174 f the vsphere Virtual Machine Administratin dcumentatin fr further details Cnfigure virtual machine trubleshting ptins Enable Virtual Machine Lgging 1. In the vsphere Client inventry, right-click the virtual machine and select Edit Settings 2. Click the Optins tab and select Advanced -> General 3. In the Settings pane, select Enable lgging Cnfigure Debugging and Statistics 1. In the vsphere Client inventry, right-click the virtual machine and select Edit Settings 2. T enable debugging mde, select an ptin frm the Debugging and Statistics sectin Optin Run Nrmally Recrd debugging infrmatin Descriptin Cllects debugging infrmatin Cllects debugging and perfrmance infrmatin

74 See pages 174 and 176 f the vsphere Virtual Machine Administratin dcumentatin fr further details Assign a Strage Plicy t a virtual machine Verify Strage Plicy cmpliance fr virtual machines 1. Open the Prfiles tab f a virtual machine Right-click a virtual machine and select Edit Settings, select the Prfiles tab Right-click a virtual machine and select VM Strage Prfile -> Manage Prfiles 2. Assciate the virtual machine hme files with a virtual machine strage prfile frm the Hme VM Strage Prfile drp-dwn menu 3. (Optinal) Click Prpagate t disks t assciate all virtual disks with the same virtual machine strage prfile 4. Under VM strage prfiles fr virtual disks, assciate each virtual disk with a different virtual machine strage prfile frm the VM Strage Prfile drp-dwn menu 5. Click OK See pages 131 and 132 f the vsphere Virtual Machine Administratin dcumentatin fr further details Determine when an advanced virtual machine parameter is required Advanced settings can be added t a virtual machines.vmx file manually. The VM in questin needs t be pwered ff t d s. Hwever, mst f the advanced ptins/features that are needed (NPIV, Swapfile lcatin, etc) are cnfigured via the Optins tab and radial buttns. T add ptins manually select the Optins tab, Advanced, General and click Cnfiguratin Parameters. This will pen the Cnfiguratin Parameters windw allwing yu t add additinal cnfiguratins t the.vmx file. Adjust virtual machine resurces (shares, limits and reservatins) based n virtual machine wrklads 1. In the vsphere Client inventry, right-click the virtual machine and select Edit Settings 2. Click the Resurces tab 3. Frm the Resurces tab yu can set Shares, Reservatins and Limits fr CPU, Memry, Disk as well as Hyperthreaded Cre Sharing See pages 88, 100, and 121 f the vsphere Virtual Machine Administratin dcumentatin fr further details Tls vsphere Virtual Machine Administatin guide

75 Sectin 5 Establish and Maintain Service Levels Objective 5.1 Create and Cnfigure VMware Clusters Knwledge Describe DRS virtual machine entitlement DRS will calculate CPU and memry entitlements fr virtual machines. The hst-lcal schedulers are actually respnsible fr supplying thse resurces t virtual machines and therefre als calculate CPU and memry entitlements fr the virtual machines that reside n it. There are tw types f entitlements, static and dynamic entitlement. Static Entitlement Static entitlement is user-defined Defined by resurce shares, limits and reservatins Shares: are prprtinal and are weighted against ther running virtual machines when cntentin ccurs Limits: are the maximum amunt f resurce a virtual machine r resurce pl can use, think f this as the max value Reservatins: are the minimum amunt f resurces a virtual machine r resurce pl is entitled t. Memry entitlement backed by a reservatin cannt be reclaimed even if it is nt being used. CPU entitlement can be laned ut t ther virtual machines if it is nt being used Dynamic Entitlement Dynamic entitlement is calculated by the DRS cluster and by the hst-lcal schedulers, specifically the hst-lcal CPU scheduler and the hst-lcal memry scheduler. Dynamic entitlement is flexible and will increase/decrease based n virtual machine demand, but will never increase passed its cnfigured CPU/Memry size CPU Entitlement Based n the Active CPU, which is taken frm %Run + %Ready MHz metrics f that virtual machine Memry Entitlement the three items belw makeup memry entitlement (wrking set, memry verhead and 25% f idle memry) Based n Active Memry; the wrking memry set f the virtual machine (actual physical RAM pages) Includes memry verhead (this number varies) Includes 25% f the idle memry Create/Delete a DRS/HA Cluster Create a DRS/HA Cluster 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the vdatacenter yu want t create yur DRS cluster in and select New Cluster (r Ctr+L) 4. Type in a name fr the cluster in the Name field

76 5. Check the Turn On vsphere HA and Turn n vsphere DRS > click Next 6. Chse an autmatin level (Manual, Partially autmated r Fully autmated) > click Next 7. Decide if yu want t enable Pwer Management (DPM), set t Off, Manual r Autmatic > click Next 8. Enable Hst Mnitring is checked by default; this enables heartbeats between the hsts 9. Chse whether t enable r disable Admissin Cntrl (enabled by default) 10. If yu chse t enable Admissin Cntrl (recmmended) chse an admissin cntrl plicy: Hst failures the cluster tlerates (specify number f hsts) Percentage f cluster resurces reserved as failver spare capacity (chse a percentage fr bth CPU and Memry) Specify failver hsts (designate hsts t use nly in case f failver) 11. Click Next 12. Set the VM restart pririty (Disabled, Lw, Medium and high) 13. Set the Hst Islatin respnse (Leaved pwered n, Pwer ff and Shut dwn) 14. Click Next 15. Chse whether t enable VM Mnitring (requires VMware Tls t be installed) 16. Use the slider t chse the Mnitring Sensitivity 17. Click Next 18. Enable Enhanced vmtin Cmpatability (EVC) r leave it disabled > click Next 19. Chse the Swapfile Plicy fr Virtual Machines; stre in same directry as virtual machine r let the hst chse a datastre > click Next 20. Click Finish Delete a DRS/HA Cluster 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t delete and select Remve 4. Click Yes t cnfirm the remval peratin Add/Remve ESXi hsts frm a DRS/HA Cluster There are a few ways t add a hst t a DRS/HA Cluster. If yu already have a hst added t vcenter, but nt part f a DRS/HA Cluster yu can simply drag-and-drp the hst int the cluster and specify the resurce pl yu want t use. Yu can put all the virtual machines in the cluster s rt resurce pl, r create a new resurce pl utilizing the hsts existing resurce pl Add a new ESXi hst t a DRS/HA Cluster

77 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the cluster yu want t add a new hst t 4. Click Add Hst 5. Enter in the hstname r IP address in the Hst field 6. Enter in an administrative username/passwrd > click Next 7. If prmpted, click Yes t accept the certificate f the unverified hst 8. Click Next 9. Assign an existing prduct key r assign a new key fr the hst > click Next 10. If yu want t enable Lckdwn Mde select the Enable Lckdwn Mde check bx > click Next 11. Chse whether t use the cluster s rt resurce pl r create a new resurce pl based ff the hsts resurce pl > click Next 12. Click Finish Remve an ESXi hst frm a DRS/HA Cluster 13. Lg in t vcenter using the VI Client 14. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 15. Right-click n hst yu want t remve and select Enter Maintenance Mde 16. Remve the hst T remve the hst nly frm the cluster, yu can drag the hst ut f the cluster and drp it int the vdatacenter If yu want t cmpletely remve it frm vcenter, right-click the hst and select Remve > click Yes t cnfirm remval f the hst Add/Remve virtual machines frm a DRS/HA Cluster There are three ways t add a virtual machine t a DRS/HA Cluster and tw ways t remve them Add virtual machines t a DRS/HA Cluster 1. Anytime yu add a hst t a DRS/HA cluster all virtual machines that are registered n that hst will be added t the DRS/HA cluster 2. Whenever yu create a new virtual machine the wizard asks yu whether yu want t place it n a DRS/HA cluster r a standalne hst 3. vmtining a virtual machine will allw yu t add it t a DRS/HA cluster either frm a standalne hst r anther DRS/HA cluster Remve virtual machines t a DRS/HA Cluster

78 1. When yu remve a hst frm a DRS/HA cluster all f the pwered-ff virtual machines that are still registered n the hst will be remved as well. Because yu have t be the hst in maintenance mde prir t remving it, pwered-n virtual machines will have already been migrated t anther hst r pwered ff 2. Yu can vmtin a virtual machine frm a hst in a DRS/HA cluster t a standalne hst Cnfigure Strage DRS Yu cnfigure Strage DRS glbally fr a datastre cluster, and then yu can manually disable n a per virtual machine level if needed Cnfigure Strage DRS 1. Lg in t vcenter using the VI Client 2. Navigate t the Datastres and Datastre Clusters view (View > Inventry > Datstres and Datastre Clusters r Ctrl+Shift+D) 3. Right-click n the vdatacenter yu want t create yur datastre cluster in and select New Datastre Cluster 4. Enter in a name in the Datastre Cluster Name field 5. Ensure the Turn n Strage DRS checkbx is checked > click Next 6. Chse the autmatin level that yu want t use, either N Autmatin (Manual Mde) r Fully Autmated 7. Click the Advanced Optins buttn if yu need t input any advanced ptins 8. Once cmplete click Next 9. T include I/O metrics in SDRS recmmendatins select the Enable I/O metric fr SDRS recmmendatins 10. Set yur Strage DRS Threshlds; Utilized Space (default is 80%) and I/O Latency (default is 15ms) 11. Click the Shw Advanced Optins hyperlink t set advanced ptins Use the slider t set the utilizatin difference between the surce and destinatin hsts befre SDRS will make a recmmendatin (default is 5%) Set frequency fr which yu want vsphere t check fr imbalances (default is 8 hurs) Set the I/O imbalance threshld using the slider; this setting determins hw much imbalance SDRS will allw befre making recmmendatins 12. Click Next 13. Using the checkbxes select the hst(s)/cluster(s) yu want t add t this particular Datastre Cluster > click Next 14. Select the datastres yu want t add t the Datastre Cluster > click Next 15. Review all yur settings and click Finish

79 When creating a new virtual machine yu can disable SDRS when yu select the datastre cluster fr the virtual hard disk lcatins. If yu leave it enabled, at the very end f the wizard yu can check an ptin that will shw yu SDRS recmmendatins, which will recmmend initial placement f the virtual hard disks and cnfiguratin file (must be stred tgether) and yu can then apply that recmmendatin(s) Once yu have virtual machines created and living n a datastre cluster yu can cnfigure SDRS rules (Intra VM Affinity rule) n a per virtual machine basis Yu can create a scheduled task t change SDRS settings during ff-hurs. Yu wuld want t d this in rder t autmatically rebalance yur datastre cluster while users are ut f the ffice and the impact is negligible Create SDRS Scheduled Task 1. Lg in t vcenter using the VI Client 2. Navigate t the Datastres and Datastre Clusters view (View > Inventry > Datstres and Datastre Clusters r Ctrl+Shift+D) 3. Right-click n the datastre cluster yu want t schedule > click Edit Settings 4. Chse SDRS Scheduling frm the left menu 5. Click the Add buttn 6. Chse a Start and End time and the Frequency (days f the week) in which yu want it t run > click Next 7. Cnfigure yur Start Settings; enter in a Descriptin 8. Chse which Autmatin level yu want t start when the start date/time begins 9. Select whether yu want t enable the I/O metric fr SDRS recmmendatins 10. Use the sliders t cnfigure utilized space and I/O imbalance threshld 11. Click Next 12. Cnfigure yur End Settings; enter in a Descriptin 13. By default yu can use the Restre settings t the riginal cnfiguratin r yu can uncheck that ptin and cnfigure the ptins described in steps Click Next 15. Click Finish Yu can als set VMDK and VM anti-affinity rules as well as default Virtual Machine settings (default is Full Autmated and Keep VMDKs tgether in the Datastre Cluster settings Cnfigure Enhanced vmtin Cmpatibility Cnfiguring Enhanced vmtin Cmpatibility (EVC) 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t enable EVC n and select Edit Settings

80 4. Frm the menu n the left select VMware EVC 5. Click Change EVC Mde 6. Chse Enable EVC fr AMD Hsts r Enable EVC fr Intel Hsts 7. Fr AMD Hsts select ne f the fllwing: AMD Optern Generatin 1 AMD Optern Generatin 2 AMD Optern Fen. 3 (n 3DNw!) AMD Optern Generatin 3 AMD Optern Generatin 4 8. Fr Intel Hsts select ne f the fllwing ptins Intel Merm Gen. (Xen Cre 2) Intel Penryn Gen. (Xen 45nm Cre 2) Intel Nehalem Gen. (Xen Cre i7) Intel Westmere Gen. (Xen 32nm Cre i7 Intel Sandy Bridge Generatin 9. Click OK twice Mnitr a DRS/HA Cluster There are multiple ways that yu can mnitr a DRS/HA cluster when cnnected t vcenter via the VI Client. There are a number f pre-defined alarms fr different HA events that will trigger based n default threshlds (there are n pre-defined alarms fr DRS specifically) Yu can lk at DRS Recmmendatins, Faults and Histry thrugh the DRS tab When lgged int vcenter g t the Hsts and Cluster view and select the Cluster that yu want t mnitr, in the right pane click n the DRS tab On the summary page yu can view a summary f vsphere HA and vsphere DRS alng with sme advanced items Mnitr a DRS/HA Cluster frm the Summary tab 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the DRS/HA cluster yu want t mnitr 4. On the right, click n the Summary tab 5. vsphere HA pane Yu can view the status f the fllwing items: Admmissin Cntrl enabled r disabled Current Failver Capacity hw many hsts are available fr failver Cnfigured Failver Capacity items listed here will be different depending upn the Admissin cntrl plicy yu are using Hst Mnitring enabled r disabled VM Mnitring enabled r disabled Applicatin Mnitring enabled r disabled

81 T view the HA Cluster Status click n the Cluster Status hyperlink Here yu are presented with three tabs, hsts, VMs and Heartbeat Datastres. These tabs are all read-nly T view any HA cnfiguratin issues click n the Cnfiguratin Issues hyperlink Here yu are listed with cnfiguratin issues, if any, fr HA Cluster validity can als be visibly nticed when there is an issue, it will be marked as red if its invalid when the failver requirements are exceeded by the number f pwered-n VMs 6. vsphere DRS pane Yu can view the status f the fllwing items: Migratin Autmatin Level fully autmated, partially autmated r disabled Pwer Manangement Autmatin Level ff, manual r autmatic DRS Recmmendatins number f DRS recmmendatins DRS Faults number f DRS faults Migratin Threshlds lists setting yu are using fr pririty 1-5 recmmendatins Target hst lad standard deviatin what the hst lad standard deviatin SHOULD be Current hst lad standard deviatin what the hst lad standard deviatin is as f the last DRS invcatin (default is 5 minutes) Click the View Resurce Distributin Chart t lk at CPU/Memry utilizatins per hst Mnitr a HA Cluster using pre-defined vcenter Alarms 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the vcenter bject (this is the tpmst bject in the tree) 4. Click the Alarms tab n the right 5. Click the Definitins buttn at the tp 6. Here are a list f the seven pre-defined HA alarms fr vcenter Insufficient vsphere HA failver resurces vsphere HA failver in prgress Cannt find vsphere HA master agent vsphere HA hst status vsphere HA virtual machine failver failed vsphere HA virtual machine mnitring actin vsphere HA virtual machine mnitring errr 7. Right-click each alarm listed abve and select Edit Settings in rder t view the triggers, reprting, and actins fr the alarm. Here yu can als add r remve triggers, enable reprting, and define actins t take when the alarm is invked

82 If desired, yu can als create yur wn alarms Cnfigure migratin threshlds fr DRS and virtual machines Migratin threshlds are typically setup when creating a DRS cluster, but they can be mdified if needed, and here is hw t d it Cnfigure Migratin Threshld n DRS Cluster 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t edit and select Edit Settings 4. Select vsphere DRS frm the menu n the left 5. Chse the desired migratin threshld frm the five different settings using the slider in the right-hand pane lcated under Fully Autmated. Here are the different settings, frm left-t-right: Apply nly pririty 1 recmmendatins vcenter nly applies recmmendatins t satisfy cluster cnstraints Apply pririty 1 and pririty 2 recmmendatins vcenter applies recmmendatins that prmise significant imprvement t the cluster Apply pririty 1, pririty 2 recmmendatins and pririty 3 recmmendatins -- vcenter applies recmmendatins that prmise gd imprvement t the cluster Apply pririty 1, pririty 2 recmmendatins, pririty 3 and pririty 4 recmmendatins -- vcenter applies recmmendatins that prmise mderate imprvement t the cluster Apply all recmmendatins -- vcenter applies recmmendatins that prmise slight imprvement t the cluster 6. Click OK r Cancel when cmplete Cnfigure autmatin levels fr DRS and virtual machines DRS autmatin levels can be set n the DRS cluster (glbal fr that particular DRS cluster) and can be set n individual virtual machines. Setting DRS autmatin levels n a virtual machine will verride the autmatin level that is set n the DRS cluster fr that virtual machine Setting DRS Autmatin Level n a DRS Cluster nrmally dne when creating DRS Cluster 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t edit and select Edit Settings 4. Select vsphere DRS frm the menu n the left 5. Chse the desired autmatin level frm the right- hand pane

83 6. Click OK r Cancel when finished Setting DRS Autmatin Level n a Virtual Machine 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t edit and select Edit Settings 4. Select Virtual Machine Optins frm the menu n the left 5. Select the Enable individual virtual machine autmatin levels checkbx 6. The windw belw will display the lists f virtual machines and yu can mdify their autmatin level by clicking n the current set autmatin level and click the dwn arrw. Select frm the fllwing ptins: a. Fully Autmated b. Partially Autmated c. Manual d. Default this is listed as what s cnfigured glbally fr that DRS Cluster e. Disabled 7. Click OK r Cancel when finished Create VM-Hst and VM-VM affinity rules As yu may have gathered frm the tpic title, there are tw types f affinity rules that yu can create; VM-VM affinity rules and VM-Hst affinity rules Within these tw types f rules yu can either specify them as affinity (tgether) r antiaffinity (separate) VM-VM affinity rules used t ensure certain virtual machines run n the same hst r d nt run n the same hst Creating a VM-VM Affinity Rule 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t edit and select Edit Settings 4. Under vsphere DRS select the Rules ptin 5. Click the Add buttn 6. Type a name fr the new rule in the Name field (try and be descriptive) 7. Frm the Type drpdwn chse either Keep Virtual Machines Tgether r Separate Virtual Machines 8. Click the Add buttn 9. Select tw r mre virtual machines that yu want t incrprate in the affinity rule > click OK 10. Click OK twice

84 VM-Hst affinity rules used t keep virtual machines running n a particular hst(s) r t ensure virtual machines DO NOT run n particular hst(s). Befre yu can create a VM-Hst affinity rules cannt be created until yu create Virtual Machine DRS Grups and Hst DRS Grups Creating a VM-Hst Affinity Rule 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t edit and select Edit Settings 4. Under vsphere DRS select DRS Grups Manager ptin 5. Under the Virtual Machines DRS Grups click Add 6. Enter in a descriptive Name 7. Select virtual machine(s) yu want t use in yur VM-Hst affinity rule frm the left pane and mve them t the right pane > click OK 8. Under the Hst DRS Grups click Add 9. Enter in a descriptive Name 10. Select hst(s) yu want t use in yur VM-Hst affinity rule frm the left pane and mve them t the right pane > click OK 11. Under vsphere DRS select the Rules ptin 12. Click Add 13. Enter a descriptive Name 14. In the Type drpdwn select Virtual Machines t Hsts 15. Chse which virtual machine grup yu want t use frm the Cluster Vm Grup drpdwn 16. Select which type f affinity yu want fr this rule frm the drpdwn, ptins are: Must run n hsts in grup Shuld run n hsts in grup Must Nt run n hsts in grup Shuld Nt run n hsts in grup 17. Click OK when finished 18. Click OK Enable/Disable Hst Mnitring Enabling/Disabling hst mnitring is straight frward and it allws each f the ESXi hsts within the cluster t send heartbeats ver the netwrk between each ther; here is hw t d it 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t edit and select Edit Settings 4. Click n vsphere HA

85 5. In the right-pane select r deselect the Enable Hst Mnitring checkbx t enable r disabled hst mnitring, respectively 6. Click OK r Cancel when finished Enable/Cnfigure/Disable virtual machine and applicatin mnitring VM Mnitring will restart virtual machines if the heartbeats sent t VMware tls within the guest aren t respnding r received within a set time. Applicatin mnitring will restart a virtual machine if the VMware tls APPLICATION heartbeats aren t respnding r received within a set time Enable/Disable/Cnfigure VM Mnitring and Applicatin Mnitring 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t edit and select Edit Settings 4. Under vsphere HA select the VM Mnitring ptin 5. Chse which level f mnitring yu want t perfrm, either VM Mnitring Only r VM and Applicatin Mnitring 6. Belw that yu can set the Mnitring sensitivity using a slider, there are fur different settings: Lw vsphere HA restarts the VM after n heartbeats are received within 2 minutes. HA will restart the VM after each failure, but nly up t 3 failures within a 7 day perid Medium -- vsphere HA restarts the VM after n heartbeats are received within 60 secnds. HA will restart the VM after each failure, but nly up t 3 failures within a 24 hur perid High -- vsphere HA restarts the VM after n heartbeats are received within 30 secnds. HA will restart the VM after each failure, but nly up t 3 failures within a 60 minute perid Custm (click the checkbx) frm here yu can specify yur wn values: Failure Interval (in secnds) Minimum uptime (in secnds) Maximum per-vm resets Maximum resets time windw set t n windw r specify time in hurs 7. Yu can als change all f the settings abve n a per-virtual machine basis by selecting the different ptins frm the drp dwns under Virtual Machine Settings in the VM Mnitring clumn and Applicatin Mnitring clumn 8. Click OK r Cancel when finished Cnfigure admissin cntrl fr HA and virtual machines I m nt ging t cver hw each f the admissin cntrl plicies wrk, but I will walk yu thrugh enable/disabling and picking an admissin cntrl plicy

86 Cnfigure Admissin cntrl 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS/HA cluster yu want t edit and select Edit Settings 4. Click n vsphere HA 5. Under Admissin Cntrl in the right-pane select Enable r Disable 6. If yu select Enable yu will need t select an admissin cntrl plicy, select frm the fllwing: Hst failures the cluster tlerates specify number f hsts Percentage f cluster resurces reserved as failver spare capacity Specify a percentage fr CPU and a percentage fr Memry Specify failver hsts click the Click t edit hyperlink t chse which hsts yu want t reserve fr failver purpses 7. Click OK r Cancel when cmplete Determine apprpriate failver methdlgy and required resurces fr an HA implementatin Determining which failver methdlgy and required resurces are apprpriate fr vsphere HA will always depend n the envirnment and availability requirements f the rganizatin. Even if yu aren t using admissin cntrl, I can t think f a single reasn NOT t enable HA Determining yur required resurces and the failver methdlgy g hand-in-hand with each ther. Yu need t lk at the availability requirements, determine what resurces yu have t meet thse requirements and then determine the best methdlgy. In sme cases yu may need t allcate mre resurces r manage expectatins with stake hlders There is n right answer that applies t every situatin, but here are my suggestins when attempting t determine failver methdlgy and required resurces t supprt that methdlgy Knw yur availability requirements this will be the fundatin fr making a prper determinatin Identify which failver methdlgy meets thse availability requirements and the prs/cns fr that methdlgy Ensure yu have enugh resurces t sustain the failver methdlgy yu chse based n requirements. If yu determine Specify failver hsts is the right plicy, d yu have idle hsts yu can allcate? If yu want t use the Percentage plicy (general best practice as it s the mst flexible), what percentage fr CPU and Memry is free t handle yur availability requirement? I believe yu can use the lgical frmula abve t cme up with a successful failver methdlgy, r yu can cme up with yur wn. Tls vcenter Server and Hst Management guide

87 vsphere Availability guide vsphere Resurce Management guide Objective 5.2 Plan and Implement VMware Fault Tlerance Knwledge Identify VMware Fault Tlerance requirements Figuring ut VMware Fault Tlerance requirements can be a bit cumbersme, especially when brwsing thrugh all the different CPUs and their cmbinatins. VMware has a tl called SiteSurvey ( that yu can install and run and it will tell yu if yur hardware/sftware is cmpatible with VMware Fault Tlerance VMware Fault Tlerance uses VMware s vlckstep technlgy which requires extensins in the physical prcessr that are nly present in tdays (relative) prcessrs Here are sme basic requirements that the SiteSurvey utility checks fr CPU Cmpatibility a hst must have an FT capable prcessr; use the SiteSurvey help page ( t determine FT capable prcessrs. Bth hsts that are hsting the FT virtual machines must have prcessrs in the same prcessr family and the CPU speeds between the tw hsts shuldn t be different mre than 400Mhz +/- ESXi hsts hsting FT virtual machines must be running the same versin and build number Hardware virtualizatin must be enabled in the BIOS Each hst participating in the Fault Tlerance cluster must have at least tw physical NICs with speeds f at least 1Gbps r greater Tw virtual NICs, ne fr vmtin and ne fr FT lgging must be present n each hst in the FT cluster The lcatin f the prtected virtual machine(s) must be n shared strage and that strage accessible t hsts in the FT cluster Virtual machines prtected by Fault Tlerance cannt have mre than ne vcpu Thin-prvisined disks n virtual machines prtected by Fault Tlerance are nt supprted. Thin-prvisined disks are autmatically cnverted when FT is enabled, hwever, the VM needs t be in a pwered-ff state Snapshts are nt supprted fr FT virtual machines, which als means n snapshts can be present when yu enable FT Physical RDMs are nt supprted n virtual machines prtected by FT N_Prt ID Virtualizatin (NPIV) is nt supprted with FT as well as paravirtualized guests CD-ROMs and/r Flppy drives backed by a remte r physical device are als nt supprted by FT

88 Vmxnet2 virtual NICs and physical NIC pass-thrugh is nt supprted by FT Cnfigure VMware Fault Tlerance netwrking At a minimum yu need at least tw physical NICs fr Fault Tlerance netwrking; ne fr FT Lgging and ne fr vmtin, yu shuld als create a vswitch fr each Each NIC must be n a different IP subnet Add additinal NICs t add redundancy and cnnect the redundant NICs t separate physical switches s yu have physical switch redundancy Cnfigure Netwrking fr Fault Tlerance Lgging (d this fr each hst) 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the hst n the left side > click the Cnfiguratin tab n the right 4. Click the Netwrking hyperlink 5. Find the vswitch yu will use fr FT Lgging and click the Prperties hyperlink abve it (slightly t the right) 6. Click the Add buttn > select VMkernel > click Next 7. Give it a descriptive name in the Netwrk Label field 8. Input a VLAN if necessary 9. Check the Use this prt grup fr Fault Tlerance Lgging > click Next 10. Enter in the IP address and Subnet mask yu want t use > click Next 11. Click Finish 12. Click Clse t clse the vswitch prperties dialg 13. Repeat n the secnd hst (make sure yu use a different IP!!) Cnfigure Netwrking fr vmtin (d this fr each hst) 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the hst n the left side > click the Cnfiguratin tab n the right 4. Click the Netwrking hyperlink 5. Find the vswitch yu will use fr vmtin and click the Prperties hyperlink abve it (slightly t the right) 6. Click the Add buttn > select VMkernel > click Next 7. Give it a descriptive name in the Netwrk Label field 8. Input a VLAN if necessary 9. Check the Use this prt grup fr vmtin > click Next 10. Enter in the IP address and Subnet mask yu want t use > click Next 11. Click Finish 12. Click Clse t clse the vswitch prperties dialg 13. Repeat n the secnd hst (make sure yu use a different IP!!)

89 Enable/Disable VMware Fault Tlerance n a virtual machine Whenever yu enable Fault Tlerance n a virtual machine any limits and reservatins are discarded and a new reservatin is set t whatever the cnfigured memry abut is fr that virtual machine. Nne f these ptins can be changed while Fault Tlerance is enabled fr that virtual machine When yu disable Fault Tlerance n a virtual machine, any changes that were made t the limit, reservatin r shares are nt reverted back t what they were prir t Fault Tlerance being enabled VMware HA is required t be enabled n the cluster yur Fault Tlerant hsts are in therwise yu will get an errr telling yu HA is nt enabled n the cluster when trying t enable fault tlerance n a virtual machine Enable Fault Tlerance n a Virtual Machine (fr mst Windws Guest Operating systems FT can nly be enabled while pwered-n if yur physical hst is running an Intel Xen Penryn prcessr) 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the virtual machine yu want t enable fault tlerance n > select Fault Tlerance > click Turn On Fault Tlerance 4. Answer Yes t the questin abut changing the memry reservatin t the cnfigured memry size f the VM (if yu are using a thin prvisined disk there were als be a warning that all unused blcks will be zered ut and that it may require mre prcessing time) 5. Mnitr the Recent Tasks pane t see when the task is cmplete, the VM icn fr the newly prtected VM will change t a dark blue and a new VM will shw up n the secndary hst with the same name as the primary VM with a (secndary) at the end f the name Disable Fault Tlerance n a Virtual Machine 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the virtual machine yu want t enable fault tlerance n > select Fault Tlerance > click Turn Off Fault Tlerance 4. Answer Yes t the questin asking yu if yu are sure yu want t disable fault tlerance 5. Mnitr the Recent Tasks pane t see when the task is cmplete. The VM icn will revert back t a light blue

90 Test an FT cnfiguratin There are plenty f ways t test ut an FT cnfiguratin. Yu can pwer ff the hst that is hsting the primary r secndary r yu can manually mve t the secndary. Fr the purpses f the blueprint I will fcus n manually mving the primary t the secndary The first thing I tested was migrating the secndary FT virtual machine t the same hst as the primary virtual machine. I started ging thrugh the wizard and when I selected the same hst that the primary FT virtual machine was running n I get a validatin errr: Virtual machines in the same Fault Tlerance pair cannt be n the same hst Nw, VMware prvides tw f its wn test that yu can perfrm within the vsphere client; Test Failver and Test Restart Secndary. Let s g thrugh thse nw: Test Failver 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the virtual machine yu want t test failver n > select Fault Tlerance > click Test Failver What happens nw is that the secndary virtual machine becmes primary and the primary machine gets remved. A new secndary virtual machine is nw created and synced up with the primary, the final step is it will be pwered n. This is the nly time in which the primary virtual machine is unprtected, and this can be seen by the alert that gets displayed fr the primary virtual machine. Once the primary virtual machine is prtected the alert ges away Test Restart Secndary 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the virtual machine yu want t test failver n > select Fault Tlerance > click Test Restart Secndary As yu might imagine the secndary virtual machine gets restarted. Determine use case fr enabling VMware Fault Tlerance n a virtual machine Fault Tlerance is all abut availability and uptime. Availability and uptime and generally determined by business requirements, which is the driving frce behind mst design decisins Here are sme brad use cases fr VMware Fault Tlerance Applicatins that require 100& uptime Applicatins that aren t cluster-aware and need t have high availability Applicatins that might be cluster-aware but yu dn t have the in-huse experience t implement a cluster slutin Tls

91 vsphere Availability guide Objective 5.3 Create and Administer Resurce Pls Knwledge Describe the Resurce Pl hierarchy A resurce pl is a pl f resurces.if nly that was all there was t it. The hierarchy f resurce pls, whether talking abut a standalne hst r a cluster, starts at the rt resurce pl. The rt resurce pl exists fr every standalne hst and DRS cluster and is nt smething yu can see within vcenter. By default, all resurces fr a hst r cluster will exist in the rt resurce pl. In the resurce pl hierarchy there are three types f bjects; parent resurce pl, siblings and a child resurce pl, with the rt resurce pl being the parent resurce pl Here is a graphical depictin f the resurce pl hierarchy taken frm chapter 8 f the vsphere Resurce Management Guide: The first resurce pl created under the rt resurce pl is a child resurce pl (let s call this RP1). RP1 is a child nly t the rt resurce pl. Underneath RP1 yu can add virtual machines int it, and thse virtual machines will get their resurces frm RP1 dependent upn their shares, limits, reservatins r dynamic virtual machine entitlement. A new resurce pl can be added t RP1 (let s call this new resurce pl RP2). RP2 is nw a child resurce pl f RP1, making RP1 a parent t RP2, but still a child resurce pl f the rt resurce pl The parent/child relatinship can cntinue further as yu nest mre resurce pls and virtual machines inside ne anther. Any resurce pl r virtual machines created at the same level as anther resurce pl will be knwn t each ther as a sibling The mre nesting f virtual machines and resurce pls yu have the mre cmplex it will be t understand and mre verhead t manage. One KEY things t remember; never use resurce pls as an rganizatinal tl, meaning dn t use it as a way t lgically grup virtual machines (use flders fr this)

92 Define the Expandable Reservatin parameter When yu enable the expandable reservatin parameter it allws a child resurce pl t asks its direct parent resurce pl t brrw resurces. If the child resurce runs ut f resurces, it is pssible t still prvide resurces t its child pls r virtual machines by asking its parent resurce pl. Brrwing resurces is recursive, meaning, if the child asks a parent, and the parent desn t have any, then that parent will asks its parent t brrw resurces if the expandable resurce parameter is set t enable. That explanatin can definitely get cnfusing, but just knw that the expandable reservatin allws a child resurce pl t asks its parent fr mre shuld the child need it, and it is a recursive questin if the parent resurce pls ging up the hierarchy have the expandable parameter set t true Create/Remve a Resurce Pl Let s create a resurce pl under a cluster that nly has the rt resurce pl (the cluster itself is the rt resurce pl) Create a Resurce Pl 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the DRS cluster yu want t create the resurce pl in and select New Resurce Pl -- if yu dn t see this ptin then yu must enable DRS fr this cluster 4. Enter in a descriptive name fr the resurce pl in the Name field 5. Allcate CPU resurces Allcate CPU shares fr the resurce pl: shares are nly relative t siblings that share the same parent resurce pl Lw Nrmal High Custm set the number f shares Use the slider t set a CPU reservatin fr the resurce pl Is represented in MHz Represents the minimum amunt f CPU resurces this resurce pl shuld have Chse whether t enable/disable expandable reservatins by checking/unchecking the Expandable Reservatin checkbx Enable/disable maximum CPU resurces by checking/unchecking the Unlimited checkbx. If disabled, set a maximum fr CPU resurces this resurce pl is allwed t have represented in MHz 6. Allcate Memry Resurces Allcate memry shares fr the resurce pl: shares are nly relative t siblings that share the same parent resurce pl Lw

93 Nrmal High Custm set the number f shares Use the slider t set a memry reservatin fr the resurce pl Is represented in MB Represents the minimum amunt f CPU resurces this resurce pl shuld have Chse whether t enable/disable expandable reservatins by checking/unchecking the Expandable Reservatin checkbx Enable/disable maximum CPU resurces by checking/unchecking the Unlimited checkbx. If disabled, set a maximum fr CPU resurces this resurce pl is allwed t have represented in MHz 7. Click OK when finished Remve a Resurce Pl 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the resurce pl yu want t remve and select Remve 4. Click Yes t cnfirm the remval peratin Cnfigure Resurce Pl attributes Cnfiguring attributes fr a resurce pl means changing the same attributes yu cnfigured when creating the resurce pl. The attributes yu can change are: the resurce pl name, CPU and Memry share, CPU and Memry reservatins, CPU and Memry limits and set CPU and Memry expandable reservatins. Here is hw t d it: Cnfiguring Resurce Pl Attributes 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the resurce pl yu want t edit and select Edit Settings 4. Change the name if desired 5. Change the CPU Shares, Reservatin, Expandable Reservatin and Limit if desired 6. Change the Memry Shares, Reservatin, Expandable Reservatin and Limit if desired 7. Click OK r Cancel when finished Add/Remve virtual machines frm a Resurce Pl Adding a Virtual Machine t a Resurce Pl the virtual machines reservatins and limits d nt change 1. Lg in t vcenter using the VI Client

94 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. When yu create a new virtual machine ne f the pages in the wizard will allw yu t specify a resurce pl t place the virtual machine int 4. If yu create a new resurce pl and want t add existing virtual machines t it yu can drag-and-drp a virtual machine int a resurce pl as lng as yu have the prper permissins If the resurce pl des nt have enugh resurces t guarantee the virtual machine reservatin(s) then the mve int the resurce pl will fail (applies nly t a pwered-n virtual machine) Remving a Virtual Machine frm a Resurce Pl 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Drag-and-drp the virtual machine int anther resurce pl. Dragging it int the rt f the DRS cluster will mve it int the rt resurce pl 4. If yu n lnger need the virtual machine pwer it ff and delete it frm disk r remve frm inventry this will als remve the virtual machine frm a resurce pl Determine Resurce Pl requirements fr a given vsphere implementatin As yu may have nticed a srt f theme t this blueprint, anytime yu are trying t determine requirements fr a certain functin always has the same general answer it depends and resurce pl requirements are n different Befre yu can determine yu resurce pl requirements yu need t define the wrklads that will be running in yur envirnment and their assciated pririty within the rganizatin Resurce pls are used t segment yur resurces, whether by rganizatin, wrklad r sme ther business requirement. Once yu define the wrklads and their requirements, yu can start t divide up the resurce within the hst r DRS cluster and begin t divide the resurces int pls in a way that is efficient and is able t meet the requirements f the wrklads running n said hst r DRS cluster Determine if yur resurce pls need t reach ut t their parent resurce pls shuld they need t prvide mre resurces then they are allcated (expandable reservatins) Determine the need fr reservatins r limits. I strngly recmmend NOT using per-virtual machine reservatins as they add a lt f administrative verhead and dn t play well with certain HA admissin cntrl plicies (hst failures the cluster tlerates). If yu are ging t set a reservatin, d it at the resurce pl level Evaluate apprpriate shares, reservatins and limits fr a Resurce Pl based n virtual machine wrklads Evaluating apprpriate shares, reservatins and limits fr a resurce pl based n virtual machine wrklads directly relates t the previus sectin and the same pre-requisite applies; KNOW YOUR WORKLOADS! If yu dn t knw what is happening in yur

95 envirnment and what yur virtual machines require t perate efficiently and effectively, yur vsphere implementatin will mst likely fail I briefly defined what shares, reservatins, and limits were previusly, but let s really dig int them nw Shares: The amunts f shares yu allcate t a resurce pl are relative t the shares f any sibling (virtual machine r resurce pl) and relative t its parent s ttal resurces. Remember, a sibling is a virtual machine r resurce pl that shares the same parent (receives resurce frm the same parent resurce pl). When resurces are allcated, shares nly matter when there is cntentin. Cntentin ccurs if yu have vercmmitted the resurces in yur DRS cluster (assigned mre resurce then yu have) r during shrt-term spikes f wrklads, which is nrmal. Rule f thumb, allcate mre shares t yur higher pririty wrklads and dn t ver-cmmit yur resurces unless yu abslutely have t Reservatins: Again, reservatins are the minimum amunt f resurces the resurce pl will get. When yu set a CPU r Memry reservatin fr a resurce pl, thse reservatins are subtracted frm the parent s available resurces, making them unavailable t ther siblings. If yu have virtual machines that yu need t guarantee a certain amunt f resurces fr, reserve them in a resurce pl and add thse virtual machines t the resurce pl Expandable Reservatins: Using expandable reservatins gives yu flexibility. If a virtual machine s wrklad increases and its resurce pl cannt allcate mre resurces because there aren t any available, the resurce pl will asks its parent resurce pl t brrw resurces. Resurce pls that have virtual machines with spiking wrklads may cnsider enabling expandable reservatins Limits: Limits is the maximum amunt f resurces a resurce pl can have. If yu set a 16GB memry limit fr a resurce pl, it will never receive anymre than 16GB. There aren t t many use cases t limit a resurce pl, but ne use case maybe a wrklad within a virtual machine that will utilize any and all resurces it can get its hands n and yu can t cnfigure it therwise, setting a limit n the resurce pl is an ptin yu may want t entertain Clne a vapp Clne a vapp 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the vapp yu want t clne and select Clne 4. Select a hst, cluster r resurce pl fr the vapp t run n/in > click Next 5. Enter in a name fr the vapp in the vapp Name field 6. Chse an inventry lcatin fr the vapp (which vdatacenter and flder) > click Next 7. Select where yu want t stre the new vapp, chse a datastre r datastre cluster > click Next 8. Chse the disk frmat yu want t use

96 Same frmat as surce Thin prvisined frmat Thick frmat 9. Click Next 10. Map the netwrks fr the new vapp select the destinatin netwrks yu want the new vapp t perate (surce netwrks f riginal vapp are als displayed) by selecting the netwrk frm the drp dwn under the Destinatin Netwrks clumn > click Next 11. Click Finish Tls vsphere Resurce Management guide vsphere Virtual Machine Administratin guide Objective 5.4 Migrate Virtual Machines Knwledge Identify ESXi hst and virtual machine requirements fr vmtin and Strage vmtin There are multiple hst and virtual machine requirements in rder t perfrm vmtin and Strage vmtins n any given virtual machine. Hst Requirements fr vmtin and Strage vmtin Each hst participating in a vmtin needs t have the prper licensing The hsts participating in a vmtin need t meet the netwrking requirements fr vmtin The hsts participating in a vmtin must meet shared strage requirements Virtual Machine Requirements fr vmtin and Strage vmtin The VM must nt have raw disks in use fr clustering N virtual devices backed by physical devices that the destinatin hst des nt als have access t If the VM is using a USB passthrugh, ensure the device is enabled fr vmtin The VM must nt have a virtual device backed by a device n a client cmputer Identify Enhanced vmtin Cmpataibility CPU requirements In rder t perfrm a vmtin between hsts the prcessrs n thse hsts need t meet certain requirements in rder fr the vmtin t take place tw wrk. In an effrt t make

97 mre hsts cmpatible with each ther, which is t say mre prcessrs cmpatible, Enhanced vmtin Cmpatibility (EVC) was created. EVC allws fr hsts with prcessrs with different clck speeds, cache sizes, and ther CPU differing features, t vmtin VMs between each ther (prcessrs must be frm the same vendr class, i.e. AMD r Intel and the same prcessr family). Certain CPUs within the same family will nt be cmpatible, especially if there is a majr change t the instructin set There are multiple mdes in which yu can be set fr EVC, see Objective 5.1 fr details What is EVC actually ding? EVC figures ut the cmmn instructins/features amngst all hsts CPUs and then masks the unique features frm the virtual machines running in that DRS cluster. This ensures that executin f CPU instructins will successfully resume n the destinatin hst nce a vmtin has cmpleted T sum up EVC CPU requirements: CPUs must be in the same vendr class (can t mix Intel and AMD prcessrs) CPUs must als be frm the same prcessr family (all CPUs within the same family may nt be cmpatible) Identify snapsht requirements fr vmtin/strage vmtin migratin Basic vmtin requirements apply t virtual machines with snapshts. As lng as the lcatin f the snapshts are accessible by bth surce and destinatin hst (default is virtual machine flder) Basic Strage vmtin requirements apply t virtual machines with snapshts. This is new t vsphere 5 as earlier versins did nt supprt perfrming a strage vmtin n virtual machines with snapshts Migrate virtual machine using vmtin/strage vmtin Migratins are pretty simple using the vsphere Client and the vsphere Web Client. Fr this purpse I ll nly cver the thick client Migrating a Virtual Machine using vmtin has vdatacenter bundary 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the virtual machine yu want t vmtin and select Migrate 4. The Migrate Virtual Machine wizard will display, select Change hst > click Next 5. Chse a DRS cluster r individual hst yu want t migrate t > click Next 6. Chse between High pririty and Standard pririty, High is the default > click Next 7. Click Finish Migrating a Virtual Machine using Strage vmtin 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters)

98 3. Right-click n the virtual machine yu want t strage vmtin and select Migrate 4. The Migrate Virtual Machine wizard will display, select Change datastre > click Next 5. Chse a frmat fr the destinatin virtual disk Same frmat as surce (default) Thick Prvisin Lazy Zered Thick Prvisin Eager Zered Thin Prvisin 6. Chse whether yu want t change the VM strage prfile r nt 7. Chse a new datastre r datastre cluster 8. If yu selected a datastre cluster in step 7 and want t disable strage DRS check the Disable Strage DRS fr this virtual machine checkbx and manually select a destinatin datastre in the pane belw > click Next 9. Click Finish Cnfigure virtual machine swap file lcatin There are three different lcatins that yu can cnfigure the swap file lcatin f a virtual machine. If the hst is nt part f a cluster, yu cnfigure it per-hst. If the hst is part f a cluster, yu cnfigure it fr the cluster r yu can cnfigure it fr an individual virtual machine regardless if the hst it runs n is part f a cluster r nt Cnfigure Virtual Machine Swap Lcatin Cluster 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the cluster yu want t cnfigure and select Edit Settings 4. Select Swapfile Lcatin frm the list n the left 5. Select either Stre the swapfile in the same directry as the virtual machine (recmmended) r select Stre the swapfile in the datastre specified by the hst. Selecting the secnd ptin will allw yu t edit the swapfile n a per-hst basis 6. Click OK when finished Cnfigure Virtual Machine Swap Lcatin Hst 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the hst yu want t cnfigure the swapfile lcatin fr frm the left 4. In the right pane select the Cnfiguratin tab 5. Underneath the Sftware menu click the Virtual Machine Swapfile Lcatin hyperlink 6. In the tp left f the center pane click the Edit hyperlink 7. Chse the datastre yu want t stre the swapfile n

99 8. Click OK when finished Cnfigure Virtual Machine Swap Lcatin Virtual Machine 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click the virtual machine yu want t cnfigure and select Edit Settings 4. Chse the Optins tab n tp 5. Select Swapfile Lcatin, which is the very last ptin in the list 6. Chse Default, which uses the settings f the cluster (if in a cluster), chse Always stre with the virtual machine r chse Stre in hst s swapfile datastre 7. Click OK when finished Migrate a pwered-ff r suspended virtual machine Migrating a pwered-ff r suspended VM is pretty straight-frward, it is a similar prcess t a nrmal vmtin Migrate a Pwered-ff r Suspended Virtual Machine has vcenter bundary 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Right-click n the virtual machine yu want t vmtin and select Migrate 4. Leave the default ptin f Change bth hst and datastre r chse either hst r datastre if yu are migrating t anther vdatacenter yu must chse the default > click Next 5. Chse the DRS cluster r individual hst fr the destinatin > click Next 6. If yu select a DRS in the previus step chse nw yu must chse an individual hst > click Next 7. Select the frmat fr the virtual disk 8. If applicable select a VM Strage Prfile 9. Select a datastre r datastre cluster, if yu select a datastre cluster yu have the ptin f checking the Disable Strage DRS fr this virtual machine checkbx, ding s requires yu t select an individual datastre frm that datastre cluster and cnfiguring advanced settings 10. Click Next 11. Click Finish Utilize Strage vmtin techniques (changing virtual disk type, renaming virtual machines, etc.)

100 Strage vmtin has mre uses than just mving data frm ne datastre t anther. Yu can change the virtual disk frmat, apply strage prfiles, split up virtual disks and disable Strage DRS Yu can change yur virtual disk frmat t ne f the three virtual disk frmat ptins: Thick Prvisin Lazy Zered this will allcate the space, but will nt write t every blck (zer it ut) until first write Thick Prvisin Eager Zered this will allcate the space and zer ut all f it up frnt, because f this thick prvisin eager zered disks take lnger t create/strage vmtin Thin Prvisin this will lgically allcate space, and the virtual machine will think it has all physical capacity, but the space is allcated as needed. Be careful f vercmmitment and ensure yu have prper alarms setup if yu are ging t ver-cmmit using virtual disk thin prvisining Yu can change the VM Strage Prfile during a strage vmtin, which an administratr will have pre-cnfigured (this ptin is nt available if yu dn t have any strage prfiles defined) Yu can split up yur virtual disk files als. Clicking the Advanced buttn in the strage vmtin wizard n the Strage page brings up anther windw that allws yu t chse, individually, where yu stre yur cnfiguratin file and virtual hard disks If yu are selecting a datastre cluster as yur destinatin strage yu als have the ptin t disable strage DRS fr that particular virtual machine. At that pint yu can manually chse a datastre frm that datastre cluster Tls vsphere Resurce Management guide vsphere Virtual Machine Administratin guide VMware vsphere Examples and Scenaris guide Objective 5.5 Backup and Restre Virtual Machines Knwledge Identify snapsht requirements A snapsht is essentially a pint-in-time image f a virtual machine. I wn t get deep int hw they are implemented within vsphere because it can be a bit cmplex if this is yur first time lking at them. Yu can either take a crash-cnsistent snapsht r an applicatin cnsistent snapsht. Taking a snapsht and Quiescing the state will create an applicatin cnsistent snapsht There are different types f requirements when talking abut snapshts, business requirements and hard requirements as defined by vsphere. Business requirements are mre the business use/use case fr them in yur envirnment Sme use cases r business requirements fr snapshts Change management

101 Patching Sftware upgrades vsphere Requirements fr Snapshts Raw disks, physical Raw Device Mapping (RDM) disks r guest perating systems utilizing iscsi sftware initiatrs are nt supprted PCI Direct Path I/O devices are nt supprted VMs with independent disks are nly supprted fr snapshts when turned ff Snapshts are nt supprted n VMs that are cnfigured fr bus sharing Create/Delete/Cnslidate virtual machine snapshts Create a Snapsht 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) r navigate t the VMs and Templates view (View > Inventry > VMs and Templates) 3. Right-click n the virtual machine yu want t snapsht > select the Snapsht menu and click Take Snapsht 4. The Snapsht windw will cme up, enter in a Name fr the snapsht make it meaningful 5. Enter in a Descriptin fr the snapsht 6. Select whether r nt t Snapsht the virtual machine s memry, this checked by default 7. Select whether yu want t Quiesce guest file system, which requires VMware tls by checking the checkbx 8. Click OK and the snapsht will be created Delete/Cnslidate a Snapsht deleting is cnslidating 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) r navigate t the VMs and Templates view (View > Inventry > VMs and Templates) 3. Right-click n the virtual machine yu that has a snapsht yu want t delete/cnslidate > select the Snapsht menu and click Snapsht Manager 4. Select the snapsht yu want t delete 5. Click Delete 6. Yu can als click Delete All if yu want t delete/cnslidate all f the snapshts fr that virtual machine 7. Click Yes t cnfirm deleting/cnslidating the snapsht 8. Click Clse t clse the snapsht manager

102 Keep in mind that the lnger yu have been running n the snapsht(s) yu are deleting, the lnger it will take t cnslidate them int the base vmdk Install and Cnfigure VMware Data Recvery Befre we g ver installed VMware Data Recvery lets discuss a few requirements Only 100 VMs can be backed up per data recvery virtual appliance 10 data recvery appliances per vcenter instance 8 virtual machines can be backed up simultaneusly Depending upn the number f virtual disks being backed up yu may have t add additinal SCSI cntrllers t the data recvery appliance in rder t ht-add mre hard drives The appliance cnnects t vcenter ver prt 902 The File Level Restre (FLR) client uses prt There are a lt mre requirements than the list abve, see pages f the VMware Data Recvery Administratin Guide t see a cmplete list Install VMware Data Recvery Client Plug-in; install n the machine yu want t manage Data Recvery frm 1. Frm the installatin media run VMwareDataRecveryPlugin.msi (this is the name at the time f this psting) 2. Click Next three times 3. Chse I Agree t the EULA and click Next 4. Click Next t begin the install 5. Click Clse when the installatin is cmplete Install VMware Data Recvery Backup Appliance 1. Extract the OVF frm the installatin media fr the backup appliance if yu have nt dne s already 2. Lg in t vcenter using the VI Client 3. Click the File menu and select Deply OVF Template 4. Brwse and select the OVF file yu extracted frm the installatin media > click Next 5. Yu will see the details f the OVF > click Next 6. Accept the EULA and click Next 7. Select a name fr the backup appliance 8. Select an Inventry lcatin fr the backup appliance > click Next 9. Select the cluster yu want t deply the appliance t > click Next 10. Chse a datastre cluster r datastre yu want t stre the appliance n if yu chse a datastre cluster yu have the ptin f disabling SDRS > click Next

103 11. Select yur disk frmat > click Next 12. Map ut yur surce and destinatin netwrks fr the tw netwrks > click Next 13. Select a time zne setting frm the drpdwn > click Next 14. Optinally check Pwer n after deplyment and click Finish 15. Nw yu can add additinal hard disks t the backup appliance if yu want t use that space t stre backups instead f using SMB r NFS 16. Pwer n the backup appliance Cnfigure VMware Data Recvery 1. Lg in t vcenter using the VI Client 2. Open the cnsle fr the backup appliance yu just deplyed 3. Select Cnfigure Netwrk frm the menu > press Enter 4. Fllw the steps t cnfigure the IP settings fr the appliance, IPv4 r IPv6 5. Alternatively yu can cnfigure the netwrk settings thrugh a web brwser if the appliance received an IP address via DHCP, check the cnsle and g t the URL displayed (default lgin is rt/vmw@re) 6. Lg in t vcenter using the VI Client (if yu aren t already) 7. Select the View menu > select Slutins and Applicatins > VMware Data Recvery this wn t be in the list f items if yu haven t installed the plug-in 8. Prvide a name r IP f the data recvery backup appliance > click Cnnect 9. Enter in the passwrd fr the username displayed > click OK 10. The Getting Started Wizard will display and aut-fill with the credentials yu just prvided > click Next 11. Yu need t add a backup destinatin Virtual Disk attached t the Backup Appliance If yu added a disk during the install, it will be displayed in the list. Select it and click the Frmat hyperlink t frmat the vlume. Once cmplete the vlume will be munted Netwrk Share Click the Add Netwrk Share hyperlink Click Cntinue t the warning displayed which basically states dn t use a netwrk share greater than 500GB Enter in the URL, Username and Passwrd > click Add Click Clse 12. Chse which backup destinatin yu want t use > click Next 13. The Create a new Backup Jb after cmpletin is checked by default; leave checked r uncheck > click Clse Create a backup jb with VMware Data Recvery Alright, lets create a backup jb with ur newly installed Data Recvery Appliance Create a Backup Jb with VMware Data Recvery

104 1. Lg in t vcenter using the VI Client (if yu aren t already) 2. Select the View menu > select Slutins and Applicatins > VMware Data Recvery 3. There are a few different ways yu can create a new backup jb, yu can rightclick n a vdatacenter, a cluster, a virtual machine r a template > select Add t Backup Jb > New Backup Jb 4. (this is the methd I ll use) Yu can als click n the Backup tab in the right-pane > right-click anywhere in the windws > select New 5. The Backup Jb Wizard pens > enter in a name fr the backup jb in the Name field make this descriptive and meaningful > click Next 6. Select which bjects yu want t backup by placing a checkbx next t it. Yu can backup: All bjects under vcenter All bjects under a vdatacenter All bjects under a Cluster Individual virtual machines with all assciated virtual disks Individual virtual disks frm a virtual machine 7. After making yur selectin(s) click Next 8. Select the destinatin lcatin fr the backup > click Next 9. Set yur backup windw, this shuld be self-explanatry > click Next 10. Select the Retentin Plicy yu want t use (few, mre, many r custm), setting any f the first three has pre-canned settings Few retain 7 recent backups, retain 4 weekly backups, retain 3 mnthly backups and retain 0 quarterly and yearly backups Mre retain 7 recent backups, retain 8 weekly backups, retain 6 mnthly backups, 4 quarterly backups and 1 yearly backup Mre retain 15 recent backups, retain 8 weekly backups, retain 3 mnthly backups, 8 quarterly backups and 3 yearly backup Custm set yur wn 11. Click Next > click Finish Perfrm a test and live full/file-level restre with VMware Data Recvery Perfrm a Test f a Full Restre with VMware Data Recvery 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Slutins and Applicatins > VMware Data Recvery 3. Right-click n the virtual machine yu want t test a full restre n > click Restre Rehearsal frm Last Backup 4. Ensure the virtual machine and virtual disks yu want t test a full restre n > click Next 5. If yu need t prvide alternate credentials click the Restre Credentials hyperlink and enter in a different username and passwrd

105 6. Yu can change sme ptins fr the restre Datastre select the datastre t use fr the Virtual machine and select ne fr the virtual disk(s) Virtual Disk Nde specify the SCSI Bus yu want t use Restre Cnfiguratin select Yes r N Recnnect NIC select Yes r N Pwer On select Yes r N 7. Click Next 8. Click Restre 9. Once cmplete a new VM is spawned and pwered-n (hpefully yu did nt answer Yes t Recnnect NIC) and yu can lg in and check it ut 10. Fr sme very strange reasn, there is n Dne with Restre Rehearsal ptin and yu have t manually clean it up. Once yu are dne testing, pwer ff the rehearsal VM and delete it Perfrm a Full Restre with VMware Data Recvery 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Slutins and Applicatins > VMware Data Recvery 3. Click n the Restre tab in the right pane 4. Click the Restre hyperlink 5. Select the virtual machine yu want t restre and select which backup yu want t restre frm 6. Select the virtual disk(s) yu want t restre > click Next 7. If yu need t prvide alternate credentials click the Restre Credentials hyperlink and enter in a different username and passwrd 8. The Datastre ptin will default t the datastre the disk was n befre 9. Yu can chse whether r nt t pwer n the virtual machine by selecting Yes r N frm the Pwer On clumn 10. Yu can select the Virtual Disk Nde fr the disk(s) yu are restring 11. Click Next 12. Click Restre Perfrm a File Level Restre with VMware Data Recvery (Windws VM) 1. Lg in t the virtual machine that requires the File Level Restre (FLR) 2. Run the FLR client, VMwareRestreClient.exe (as f this psting) 3. Enter in the IP address r Name fr the Data Recvery Appliance 4. Click Lgin 5. Select the virtual disk yu want t restre frm using the list f restre pints 6. Click the Munt buttn at the tp left 7. Once munted click the Brwse buttn 8. This will pen an explrer Windw. Frm here brwse t the file(s) yu want t restre and cpy them back t the virtual machine

106 9. Once cmplete unmunts the restre pint by clicking Unmunt and clse the FLR client Fr instructins hw t perfrm a FLR n a Linux VM take a lk at pages f the VMware Data Recvery Administratin Guide Determine apprpriate backup slutin fr a given vsphere implementatin Every implementatin is different and yu can t always d a ckie-cutter slutin, especially when it cmes t backups. Right nw VMware Data Recvery will backup individual virtual machines and file. Data Recvery is nt applicatin aware and therefre sme applicatins, such as Sharepint and MS Exchange yu may want a mre granular level f backup, specific t thse applicatins If yur vsphere implementatin includes branch ffices where sme hsts/vms traverse a WAN, yu may nt want t use data recvery Bttm line is knw yur envirnment, knw what yur requirements and cnstraints are and knw the capabilities f VMware Data Recvery t determine if it is a fit fr yur vsphere implementatin Tls vsphere Virtual Machine Administratin guide VMware Data Recvery Administratin guide Objective 5.6 Patch and Update ESXi and Virtual Machines Knwledge Identify patching requirements fr ESXi hsts and virtual machine hardware/tls Patching requirements fr ESXi hsts and virtual machine hardware/tls are usually separate, but depending n the update may crrespnd with virtual machine hardware/tls updates, in which case fllw the Orchestrated Datacenter Upgrade methdlgy described n pages f Installing and Administering VMware vsphere Update Manager guide Yu will need t identify whether the update manager server can dwnlad patches directly r, if the netwrk is secure withut internet access yu may cnsider using Update Manager Dwnlad Server (UMDS) Cnfiguring baselines fr yur ESXi hsts and virtual machines will allw yu t scan yur envirnment and determine which entities are nt cmpliant, and frm there remediate (stage/deply patches) Determine if yu have any third party virtual appliances that can be updated via update manager

107 Typically the biggest requirement is t keep yur hsts and virtual machine hardware/tls up-t-date with the latest patches; d that with Update Manager Create/Edit/Remve a Hst Prfile frm an ESXi hst If yu have read ther bjectives in this guide, this sectin will lk familiar; lets start with Creating a Hst Prfile: NOTE: Hst prfiles require Enterprise Plus licensing Creating a Hst Prfile 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Management > Hst Prfiles (r Ctrl + Shift + P) 3. Right-click in the white area under the Hst Prfiles flder icn and select Create Prfile 4. Yu have tw ptin, Create Prfile frm existing hst r Imprt prfile, fr this walk-thrugh chse Create Prfile frm existing hst > click Next 5. Chse which hst yu want t use as a reference hst > click Next 6. Enter in a Name and a Descriptin fr this new Hst Prfile > click Next 7. Click Finish Editing a Hst Prfile 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Management > Hst Prfiles (r Ctrl + Shift + P) 3. Right-click n the hst prfile yu want t edit and select Edit Prfile 4. Frm here yu can edit the name and descriptin f the hst prfile, as well as the prfile itself and the plicies within 5. Click n any plicy and view the cnfiguratin and cmpliance details in the right-pane 6. Click OK when finished There are 21 different plicies and many mre ptins beneath each plicy s I wn t g int them here, but the best way t get t knw these plicies is by taken a lk at a hst prfile

108 Deleting a Hst Prfile 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Management > Hst Prfiles (r Ctrl + Shift + P) 3. Right-click n the prfile yu want t delete and select Delete Prfile 4. Click Yes t cnfirm deletin Attach/Apply a Hst Prfile t an ESXi hst r cluster Attaching a hst prfile t an ESXi hst r a cluster is the same basic prcedure Attaching a Hst Prfile t an ESXi Hst r Cluster 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Management > Hst Prfiles (r Ctrl + Shift + P) 3. Right-click n the hst prfile yu want t attach and select Attach Hst/Cluster 4. Chse the hst(s) and/r cluster(s) yu want t attach the hst prfile t in the left-pane > click Attach 5. Click OK when cmplete Applying a Hst Prfile t an ESXi Hst cannt apply directly t a Cluster 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters)

109 3. Frm the left pane right-click the hst yu want t apply the hst prfile (yu must attach a prfile befre yu apply it) > click Hst Prfile > Apply Prfile a. If the hst is nt in maintenance mde yu will get an errr telling yu that the hst must first be in maintenance mde prir t applying the hst prfile 4. A screen will shw yu the list f cnfiguratin changes that will be made and any settings requiring user input will be displayed; yu must manually enter static values fr these fields 5. Once cmplete click Finish and take the hst ut f maintenance mde Perfrm cmpliance scanning and remediatin f an ESXi hst using Hst Prfiles Cmpliance Scanning and Remediatin using Hst Prfiles 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Management > Hst Prfiles (r Ctrl + Shift + P) 3. In the left pane select the prfile yu want t check fr cmpliance > click the Hsts and Cluster tab n the right 4. Select whichever hst/cluster yu want t check cmpliance n > click the Check Cmpliance hyperlink 5. Once it cmpletes it will see a status under the HstPrfileCmpliance clumn and if nn-cmpliant, details will be displayed in the lwer pane letting yu knw which plicies yur hst/cluster is ut f cmpliance with 6. If yur hst/cluster cmes up as nn-cmpliant click the Apply Prfile hyperlink (remember the hst must be in maintenance mde prir t applying a hst prfile) 7. Like prcedure abve, Applying a Hst Prfile a screen will shw yu a list f cnfiguratin changes that will be applied t the hst yu are remediating (these shuld be the same changes yu saw listed in step 5) 8. Once yu are dne reviewing the changes and are cmfrtable with them click Finish 9. Once it is cmplete the hst/cluster shuld nw shw as Cmpliant Install and Cnfigure vcenter Update Manager Yu can install vcenter Update Manager in a few different cnfiguratins. First and fremst ensure that the hardware, perating system and database yu are lading update manager n is supprted (pages f Installing and Administrating VMware vsphere Update Manager) The dcumentatin references three deplyment mdels fr update manager: All-in-ne mdel vcenter, Update Manager and the database all n ne server. Number f servers required = 1 Medium deplyment mdel vcenter and Update Manager n ne server, database n anther server. Number f servers required = 2 Large deplyment mdel vcenter n ne server with a dedicated database server, Update Manager n its wn server with a dedicated database server. Number f servers

110 required = 4 (recmmended when yu have mre than 1000 virtual machines r 100 hsts Requires a 32bit DSN (except if yu re using SQL 2008 R2 Express) Installing vcenter Update Manager using SQL 2008 R2 Express and installing n same server as vcenter 1. Lcate yur vcenter 5.0 media and munt t vcenter server 2. Execute autrun.exe t bring up the menu f prducts n the vcenter 5.0 media 3. Click n VMware vsphere Update Manager 4. In the right pane there are tw prerequisites listed, Micrsft.NET 3.5 SP1 and Windws Installer 4.5, if yu d nt have these installed already install them 5. Once cmplete click the Install buttn 6. Select yur language and click OK 7. Click Next twice 8. Accept the EULA and click Next 9. Select whether yu want t dwnlad updates frm a default surce after the installatin (default ptin is yes), d nt select if yu this deplyment f Update Manager is air gapped > click Next 10. Enter in infrmatin fr the vcenter server yu want t link t this instance f Update Manage, it s 1:1 ; enter IP Address/Name, HTTP Prt, Username and Passwrd > click Next 11. Chse whether t install Micrsft SQL Server 2008 R2 Express r t use an existing supprted database, if yu chse t use an existing database yu ll need t prvide the 32bit DSN > click Next 12. Chse hw yu want Update Manager t be identified n the netwrk by making a selectin frm the drpdwn, usually the IP r NETBIOS name 13. If yu wish t change the SOAP Prt, Web Prt, r SSL Prt d s at this screen. If yu have an internet cnnectin and use a prxy, check Yes, I have Internet cnnectin and I want t cnfigure prxy settings nw. 14. If yu want t change the default installatin paths fr the Update Manager installatin r the lcatin fr dwnlading patches d s at this screen > click Next If yu have less than 120GB f disk space free yu will get a warning and a link t VMwares vsphere Update Manage Sizing Estimatr > click OK 15. Click Install 16. Click Finish nce the install cmpletes Cnfigure patch dwnlad ptins Befre yu can cnfigure any ptins fr Update Manager the machine yu are using t cnnect t vcenter needs t have the Update Manager plug-in installed. Once it is installed it will appear under Slutins and Applicatins as Update Manager

111 Cnfigure Patch Dwnlad Optins 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Slutins and Applicatins > Update Manager 3. Click n the Cnfiguratin tab 4. Frm the Settings menu n the left click the Dwnlad Settings hyperlink 5. First lets define the ur dwnlad surces. By default the Direct cnnectin t Internet ptin is enabled alng with fur surces 6. Add a new dwnlad surce (third-party dwnlad surce) Click the Add Dwnlad Surce hyperlink Enter in a Surce URL and Descriptin Click the Validate URL buttn (clicking OK will als try t validate the URL) If the URL can t be validated it will shw as Nt Cnnected and a warning will be displayed if yu click OK with a nn-validated URL letting yu knw that the surce is nt valid and asks if yu still want t add it t the list 7. Instead f using the Direct Cnnect t the Internet ptin yu can chse the Use a shared repsitry ptin Enter in a URL fr the shared repsitry and click Validate URL 8. Click the Imprt Patches hyperlink t manually imprt frm a.zip file 9. Click the Dwnlad Nw buttn t dwnlad available patches frm yur listed surces 10. If yu envirnment requires a prxy server t access the Internet r shared repsitry enter in the fllwing infrmatin as needed Check the Use Prxy checkbx Enter in the prxy server name and prt If yur prxy server requires authenticatin check the Prxy requires authenticatin checkbx and enter in a Username/Passwrd Click Test Cnnectin t verify yu have the crrect settings Click Apply 11. Frm the Settings menu n the left click the Dwnlad Schedule hyperlink 12. Chse whether yu want t enable/disable a dwnlad schedule by checking/unchecking the Enable scheduled dwnlad checkbx 13. Click the Edit Dwnlad Schedule hyperlink

112 14. Enter in a Task Name and descriptin 15. Chse a Frequency (Once, Hurly, Daily, Weekly r Mnthly) 16. Chse a Start Time 17. Chse the Interval (represented in days) > click Next 18. Enter in the addresses yu want t be ntified when new patches are dwnladed; this requires that vcenter be setup with a wrking SMTP server > click Next 19. Click Finish 20. Frm the Settings menu n the left click the Ntificatin Check Schedule hyperlink 21. Chse whether yu want t enable/disable scheduled dwnlad by checking/unchecking the Enable scheduled dwnlad checkbx (this lks the same as dwnlad schedule, but these are fr ntificatins) 22. Click the Edit Ntificatins hyperlink 23. Enter in a Task Name and descriptin 24. Chse a Frequency (Once, Hurly, Daily, Weekly r Mnthly) 25. Chse a Start Time 26. Chse the Interval (represented in days) > click Next 27. Enter in the addresses yu want t be ntified when new patches are dwnladed; this requires that vcenter be setup with a wrking SMTP server > click Next this will ntify yu f recalled patches r ther alerts 28. Click Finish Create/Edit/Delete an Update Manager baseline Creating an Update Manager Baseline 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Slutins and Applicatins > Update Manager 3. Select the Baselines and Grups tab There are tw different views fr Baselines, Hsts and VMs/VAs. There are tw predefined baselines in the Hsts baseline view; Critical Hst Patches and Nn-Critical Hst Patches. There are three pre-defined baselines in the VMs/VAs baseline view; VMware Tls Upgrade t Match Hst, VM Hardware Upgrade t Match Hst and VA Upgrade t Latest 4. Depending upn what yu want t create a baseline fr (hsts r VMs/VAs) select the apprpriate view, in ur case we ll chse the Hsts view, which is the default 5. Click the Create hyperlink 6. Enter in a Name and Descriptin 7. Select the Baseline Type frm the fllwing Hst Baselines Hst Patch, Hst Extensin and Hst Upgrade VA Baselines VA Upgrade

113 8. Click Next 9. Select the type f baseline Fixed this a set f patches that are static and manually defined Dynamic this is a set f patches that updated autmatically when new patches are available based n user-defined criteria 10. After selecting the baseline type (I m using Dynamic fr this) click Next 11. Select which patch vendrs and prducts yu want fr the dynamic baseline t update fr 12. Select the Severity (lw, mderate, imprtant and critical) and select the Categry (any, security, bugfix, enhancement and ther) 13. Select the Release Date criteria; On r After r On r Befre r chse bth. After making yu selectins it will tell yu, based n yur selected criteria and patches yu have already dwnladed, hw many patches meet yur criteria 14. Click Next 15. This screen will shw yu each patch that met yur criteria and gives yu the ptin t exclude certain patches. Click n the patches yu want t exclude and click the dwn arrw t add them t the exclusin list > click the Advanced buttn t filter yur selectin 16. Click Next 17. Here yu can add additinal fixed patches (must already have been imprted manually). Click n the fixed patches yu want t include in yur dynamic baseline and click the dwn arrw t add them click the Advanced buttn t filter yur selectin 18. Click Next 19. Click Finish Editing an Update Manager Baseline 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Slutins and Applicatins > Update Manager 3. Select the Baselines and Grups tab 4. Click n the baseline yu want t mdify and click the Edit hyperlink 5. All the ptins available in the Create Baseline wizard are available in this wizard, fr a detailed verview see the sectin n Created an Update Manager Baseline abve 6. Step thrugh the wizard and make changes as needed 7. Click Finish when cmplete Deleting an Update Manager Baseline 1. Lg in t vcenter using the VI Client 2. Select the View menu > select Slutins and Applicatins > Update Manager 3. Select the Baselines and Grups tab 4. Click n the baseline that yu want t delete and click the Delete hyperlink 5. Click Yes t cnfirm the deletin peratin

114 Attach an Update Manager baseline t an ESXi hst r cluster Yu can attach a baseline t ESXi hst r cluster, as well as the vdatacenter. This walkthrugh will take yu thrugh attaching a baseline t an ESXi hst Attach an Update Manager Baseline t an ESXi Hst 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the hst yu want t attach an Update Manager baseline t and click the Update Manager tab n the right 4. Click the Attach hyperlink at the tp right 5. Select which patch baseline(s) yu want t attach > click Attach 6. The baseline(s) yu just attached shuld nw shw in the Attached Baselines pane Scan and remediate ESXi hsts and virtual machine hardware/tls using Update Manager Befre yu can scan and remediate an ESXi hst yu need t have attached a baseline, either pre-defined r manually created. The peratins described belw can als be initiated by right-clicking n the ESXi hst r Virtual Machine and selecting Scan fr Updates and Remediate Scanning an ESXi hst 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the hst yu want t scan and click the Update Manager tab n the right 4. Click the Scan hyperlink at the tp right 5. Select what yu want t scan fr (Patches and Extensins and Upgrades) 6. Click Scan Remediating an ESXi hst 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the hst yu want t remediate and click the Update Manager tab n the right 4. Click the Remediate... buttn at the bttm 5. Select the Basegrup r Baseline type in the right pane and place a check in the checkbx f the Baseline(s) yu want > click Next 6. Select the Patches and/r extensins yu want t apply t this ESXi hst > click Next

115 7. Yu will be prmpted t schedule this remediatin as a task, enter in a Task Name and Descriptin 8. Under Remediatin Time chse when yu want t run the task. Chse Immediately (default) r specify a date and time > click Next 9. Chse yur hst maintenance ptins. If the patches yu selected require the hst t g int maintenance mde, chse the pwer state fr the virtual machines n the hst (pwer ff, suspend, d nt change) 10. If yu want t retry entering maintenance mde shuld the first time fail, check the Retry entering maintenance mde in case f failure checkbx and select the Retry delay (in minutes) and Number f retires 11. Check the Disable any remvable media devices cnnected t the virtual machines n this hst checkbx if yu want t discnnect remvable media 12. If yu want t remediate pwered n PXE bted ESXi hsts (aut-deply) check the Enable patch remediatin f pwered n PXE bted ESXi hsts checkbx 13. Click Next 14. Click Finish Stage ESXi hst updates Staging patches allws yu t send the patches t the ESXi hst(s) prir t perfrming remediatin. This will lessen the ttal time fr remediatin and yur hst(s) being in maintenance mde because the patches will already be available lcally t the hst(s), therefre nt having t wait fr the patches t be cpied. Stage ESXi Hst Updates 1. Lg in t vcenter using the VI Client 2. Navigate t the Hst and Clusters view (View > Inventry > Hsts and Clusters) 3. Select the hst yu want t stage patches fr and click the Update Manager tab n the right 4. Click the Stage buttn at the bttm (yu can als right click n the hst and chse Stage Patches withut ging t the Update Manager tab) 5. Select the baseline where the patches yu want t stage are lcated > click Next 6. Select the patches yu want t stage > click Next 7. Click Finish Tls vsphere Hst Prfiles guide Installing and Administering VMware vsphere Update Manager guide Recnfiguring VMware vsphere Update Manager VMware vsphere Examples and Scenaris guide

116 Sectin 6 Perfrm Basic Trubleshting and Alarm Management Objective 6.1 Perfrm Basic Trubleshting fr ESXi Hsts Knwledge Identify General ESXi Hst Trubleshting Guidelines The vsphere Trubleshting guide is the ne stp shp fr this sectin Trublesht Cmmn Installatin Issues Refer t Objective 1.3 and make sure yur hsts meet the hardware requirements as well as the VMware HCL. If using AutDeply refer t pages 20 thru 26 f the vsphere Trubleshtingguide and als VMware KB (Trubleshting vsphere Aut Deply). Mnitr ESXi System Health With the release f ESXi back in the VI 3.5 days it prvided a new way t manage yur hsts, the Cmmn Infrmatin Mdel (CIM). CIM allws fr a standard framewrk t manage cmputing resurces and presents this infrmatin via the vsphere Client. Fr further infrmatin read the VMware White Paper The Architecture f VMware ESXi as well as thisvmware Supprt Insider blg pst. T actually see hw ESXi and vsphere Client leverages CIM read pages 25 thru 28 f thevsphere Mnitring and Perfrmance dcumentatin. Exprt Diagnstic Infrmatin There are multiple ways t get at this infrmatin, but I will assume the exam is ging t be geared mre twards using the vsphere Client fr this task. Fr cmpleteness hwever I have included links that cver using a cnsle sessin as well as PwerCLI. Gathering vcenter Server Lg Bundles (VMware KB , Cllecting Diagnstic Infrmatin fr VMware vcenter Server) T generate a vcenter Server lg bundle, select Start > All Prgrams > Vmware and select either Generate vcenter Server Lg Bundle Extended r Generate vcenter Server Lg Bundle (Be sure t Run as Administratr ). Gathering vcenter Server and ESXi Lg Bundles (VMware KB 653, Cllecting Diagnstic Infrmatin fr Vmware ESX/ESXi Using the vsphere Client) Frm within the vsphere Client cnnected t vcenter click Administratin frm the menu bar and select Exprt System Lgs. This will allw yu t exprt either vcenter lgs, ESX/ESXi lgs, are all f the abve in a single zip file. T use the vm-supprt cmmand r PwerCLI refer t VMware KB (Cllecting diagnstic infrmatin fr VMware ESX/ESXi using the vm-supprt cmmand) and VMware KB

117 (Cllecting diagnstic infrmatin fr VMware vcenter Server and ESX/ESXi using the vsphere PwerCLI) Tls vcenter Server and Hst Management Guide vsphere Mnitring and Perfrmance Guide vsphere Trubleshting Guide Objective 6.2 Perfrm Basic vsphere Netwrk Trubleshting Knwledge Verify Netwrk Cnfiguratin Refer t each bjective under Sectin Tw. Fcus n the cre cncepts and cnfiguratin f bth vnetwrk Standard Switches and vnetwrk Distributed Switches: Prt/dvPrt Grups Lad Balancing and Failver Plicies VLAN Settings Security Plicies Traffic Shaping Plicies Fr additinal infrmatin read the VMware Infrmatin Guide VMware Virtual Netwrking Cncepts. This dcument is based n VI3 but still des a gd jb with the cre functins f a vstandard Switch. Verify a Given Virtual Machine is Cnfigured with the Crrect Netwrk Resurces Instead f duplicating wrk, refer t VMware KB , Trubleshting Virtual Machine Netwrk Cnnectin Issues. Mre then enugh infrmatin listed there. Trublesht Virtual Switch and Prt Grup Cnfiguratin Issues One key aspect t remember is when setting up Prt Grups r dvprt Grups, spelling cunts (as well as upper/lwer case)! If a Prt Grup is spelled Test n ne hst and is spelled test n a secnd hst vmtin will fail. Same hlds true with Security Plicies, if ne vswitch n a hst is set t accept Prmiscuus Mde and it is set t Reject n the ther hst, again vmtin will fail. Als, refer t the bjectives under Sectin Tw t be sure yur switches are cnfigured crrectly. Trublesht Physical Netwrk Adapter Cnfiguratin Issues This is pretty straight frward as there is nt a lt f cnfiguratin dne at the physical netwrk layer. Be sure that yur physical nics that are assigned t a virtual switch (vswitch r dvswitch) are cnfigured the same (speed, vlans, etc) n the physical switch. If using IP Hash as yur lad balancing methd make sure n the physical switch side link aggregatin has been enabled. Refer t VMware KB and VMware KB fr further details as well as examples. If using beacn prbing fr netwrk failver detectin it standard practice t use a minimum f three (r mre) uplink adapters. See VMware KB fr further details.

118 Identify the Rt Cause f a Netwrk Issue Based n Trubleshting Infrmatin Using the abve ntes as well as the linked VMware KB articles ne shuld be able t islate issue t ne f fur areas: Virtual Machine ESX/ESXi Hst Netwrking (uplinks) vswitch r dvswitch Cnfiguratin Physical Switch Cnfiguratin Tls vsphere Trubleshting guide vsphere Netwrking guide Objective 6.3 Perfrm Basic vsphere Strage Trubleshting Knwledge Verify strage cnfiguratin Refer t the vsphere Strage and the SAN System Design and Deplyment Guide (nt specific t vsphere 5, but wrth a read) by VMware. This will cver a lt f areas needed fr wrking with a FC/iSCSI SAN envirnment with vsphere. Als a gd understanding f the hardware yu are using n the backend (strage arrays, FC switches, netwrking, etc) and there vsphere Best Practices dcuments will assist in the prper cnfiguratin. Trublesht strage cntentin issues We they mentin strage cntentin I am taking this as I/O thrughput r I/O latency issues. I find the quickest and easiest way f measuring/checking this is via esxtp/resxtp. VMware KB and Duncan Eppings esxtp blst pst cvers this is in mre detail. Metrics t be aware f: Disk Metric Threshld Descriptin DAVG 25 This is the average respnse time in millisecnds per cmmand being sent t the device. GAVG 25 This is the respnse time as it is perceived by the guest perating system. This number is calculated with the frmula: DAVG + KAVG = GAVG.

119 KAVG 2 This is the amunt f time the cmmand spends in the VMkernel Als see pages 47 thru 50 f the vsphere Trubleshting dcumentatin fr further infrmatin. Trublesht strage ver-cmmitment issues Strage can be ver cmmitted in a several ways: As mentined abve is with I/O latency and thrughput datastre usage, ging ver the actual amunt f strage yur array prvides r the amunt assigned t a datastre (think Thin-prvisining). Amunt f VM s n a datastre, can cause SCSI reservatin issues Datastre path thrashing Inadequate LUN queue depth Trublesht iscsi sftware initiatr cnfiguratin issues Things t lk ut fr: Setting up a prper iscsi Netwrk (pg 74 thru 79 f the vsphere Strage dcument) Cnfiguratin f Jumb Frames (pg 80 f the vsphere Strage dcument) Netwrk cnnectivty using vmkping (See VMware KB , Testing VMkernel netwrk cnnectivity with the vmkping cmmand) Fr further infrmatin refer t pages 107 thru 112 f the vsphere Strage dcumenatin as well as page 51 f the vsphere Trubleshting dcumenatin. Trublesht Strage Reprts and Strage Maps See pages 29 thru 32 f the vsphere Mnitring and Perfrmance dcumentatin Identify the rt cause f a strage issue based n trubleshting infrmatin The vsphere Trubleshting dcument cvers several issues that yu may run int. See Pages 45 thru 51. Tls vsphere Strage guide vsphere Trubleshting guide

120 Objective 6.4 Perfrm Basic Trubleshting fr HA/DRS Clusters and vmtin/strage vmtin Knwledge Identify HA/DRS and vmtin requirements HA Requirements All hsts must be licensed fr vsphere HA Yu need at least tw hsts in the cluster All hsts need t be cnfigured with static IP addresses. If yu are using DHCP, yu must ensure that the address fr each hsts persists acrss rebts There shuld be at least n management netwrk in cmmn amng all hsts and best practices is t have at least tw. Management netwrks differ depending n the versin f hst yu are using. ESX hsts - service cnsle netwrk ESXi hsts earlier than versin VMkernel netwrk ESXi hsts versin 4.0 and later - VMkernel netwrk with the Management Netwrk checkbx enabled T ensure that any virtual macine can run n any hst in the cluster, all hsts shuld have access t the same virtual machine netwrks and datastres Fr VM Mnitring t wrk, VMware tls must be installed Hst certificate checking shuld be enabled vsphere HA supprts bth IPv4 and IPv6. A cluster that mixes the use f bth f the prtcl versins, hwever is mre likely t result in a netwrk partitin Fr further infrmatin see page 22 f the vsphere Availability dcumentatin DRS Requirements Shared Strage Strage can be either SAN r NAS Shared VMFS vlumes Place the disks f all virtual machines n VMFS vlumes that are accessible by all hsts Set access mde fr the shared VMFS t public Ensure the VMFS vlumes n surce and destinatin hst use vlume names, and all virtual machines use thse vlume names fr specifying the virtual disks Prcessr Cmpatibility - Prcessrs f bth the surce and destinatin hst must be f the same vendr (AMD r Intel) and be f the same prcessr family. This requirement is mre fr the use f vmtin and allwing a VM t execute its prcesses frm ne hst t the ther. vcenter prvides advanced features t make sure that prcessr cmpatibility requirements are met: Ehnanced vmtin Cmpatibility (EVC) - Yu can use EVC t help ensure vmtin cmpatibility fr the hsts in a cluster. EVC ensures that all hstsin a cluster present the same CPU feature set t virutal machines, even if the actual CPUs n

121 the hsts differ. This prevents migratin with vmtin frm failing due t incmpatible CPUs. CPU Cmpatibility Masks - vcetner Server cmpares the CPU features available t a virtual machine with the CPU features f the destinatin hst t deterine whether t allw r disallw migratins with vmtin. By applying CPU cmpatibility mask t individual virtual macines, yu can hide certain CPU features frm the virtual machine and ptentially prevent migratins with vmtin frm failing due t incmpatible CPUs Fr further infrmatin see pages 55 thru 56 f the vsphere Resurce Management dcumentatin vmtin Requirements The virtual machine cnfiguratin file fr ESXi hsts must reside n a VMware Virtual Machine File System (VMFS) vmtin des nt supprt raw disks r migratin f applicatins clustered using Micrsft Cluster Service (MSCS) vmtin requires a private Gigabit Ethernet (minimum) migratin netwrk between all f the vmtin enabled managed hsts. When vmtin is enabled n a managed hst, cnfigure a unique netwrk identity bject fr the managed hst and cnnect it t the private migratin netwrk Yu cannt use migratin with vmtin t migrate a virtual machine that uses a virtual device backed by a device that is nt accessible n the destinatin hst Yu cannt use migratin with vmtin t migrate a virtual machine that uses a virtual device backed by a device n the client cmputer Fr further infrmatin see page 56 f the vsphere Resurce Management dcumentatin and pages 119 thru 120 f the vcenter Server and Hst Management dcumentatin Verify vmtin/strage vmtin cnfiguratin See abve sectins fr DRS and vmtin requirements. Key areas f fcus will be prper netwrking (VMKernel interface fr vmtin), CPU cmpatability, and shared strage access acrss all hsts. Verify HA netwrk cnfiguratin On legcacy ESX hsts in the cluster, vsphere HA cmmunicatins travel ver all netwrks that are designated as service cnsle netwrks. VMkernel netwrks are nt used by these hsts fr vsphere HA cmmunicatins On ESXi hsts in the cluster, vsphere HA cmmunicatins, by default, travel ver VMkernel netwrks, except thse marked fr use with vmtin. If there is nly ne VMkernel netwrk, vsphere HA shares it with vmtin, if necessary. With ESXi 4.x and ESXi, yu must als explicitly enable the Management Netwrk checkbx fr vsphere HA t use this netwrk Fr further infrmatin see page 32 f the vsphere Availability dcumentatin

122 Verify HA/DRS cluster cnfiguratin Cnfiguratin issues and ther errrs can ccur fr yur cluster r its hsts that adversely affect the prper peratin f vsphere HA. Yu can mnitr these errrs by lking at the Cluster Operatinal Status and Cnfiguratin Issues screens, which are accessible in the vsphere Client frm the vsphere HA sectin f the cluster s Summary tab. Fr further infrmatin see page 31 f the vsphere Availability dcumentatin Trublesht HA capacity issues T trublesht HA capacity issues first be familiar with the three Admissin Cntrl Plicies: Hst failures the cluster tlerates (default) - Yu can cnfigure vsphere HA t tlerate a specified number f hst failures. Uses a slt size t display cluster capacity Percentage f cluster resurces reserved as failver spare capacity - Yu can cnfigure vsphere HA t perfrm admissin cntrl by reserving a specific percentage f cluster CPU and memry resurces fr recvery frm hst failure Specify failver hsts - Yu can cnfigure vsphere HA t designate specific hsts as the failver hsts Things t lk ut fr when trubleshting HA issues: Failed r discnnected hsts Over sized VM s with high CPU/memry reservatins. This will affect slt sizes Lack f capacity/resurces if yu using Specify Failver Hsts, IE nt enugh hsts set as failvers See pages 31 thru 33 f the vsphere Trubleshting dcumentatin that utlines cmmn failver scenaris fr each f the three Admissin Cntrl Plicies. Fr further reading n the three admissin cntrl plicies see page 16 thru 21 f the vsphere Availability dcumentatin. Trublesht HA redundancy issues Like all ther cmpnents in a vsphere design, yu want design redundancy fr clusters HA netwrk traffic. Yu can g abut this ne f tw ways r bth. The use f NIC f teaming (tw physical NICs perferably cnnected t separate physical switches) is the mst cmmn methd used. This will allw either f the tw links t fail and still be able t cmmunicate n the the netwrk. The secnd ptin is the setup and creatin f a secndary management netwrk. This secnd interface will need t be attached t a different virtual switch as well as a different subnet as the primary netwrk. This will allw fr HA traffic t be cmmunicated ver bth netwrks. Interpret the DRS Resurce Distributin Graph and Target/Current Hst Lad Deviatin The DRS Resurce Distributin Chart is used t display bth memry and CPU metrics fr

123 each hst in the cluster. Each resurce can be displayed in either a percentage r as a size in mega bytes fr memry r mega hertz fr CPU. In the chart display each bx/sectin represents a VM running n that hst and the resurces it is currently cnsuming. The chart is accessed frm the Summary tab at the cluster level under the sectin fr VMware DRS. Click the hyperlink fr View Resurce Distributin Chart. The target/current hst lad deviatin is a representatin f the balance f resurces acrss the hsts in yur cluster. The DRS prcess runs every 5 minutes and analyzes resurce metrics n each hst acrss the cluster. Thse metrics are plugged in an equeatin: (VM entitlements)/(hst Capacity) This value returned is what determines the Current hst lad standard deviatin. If this number is higher then the Target hst lad standard deviatin yur cluster is imbalanced and DRS will make recmmendatins n which VM s t migrate t re-balance the cluster. This is just my basic understanding f hw DRS wrks. Fr cmplete dwn int the weeds explanatins I wuld recmmend reading this pst as well as this ne frm Duncan Yellw-Bricks.cm. Trublesht DRS lad imbalance issues DRS clusters becme imbalanced/vercmitted fr several reasns: A cluster might becme vercmmitted if a hst fails A cluster becmes invalid if vcenter Server is unavailable and yu pwer n virtual machines using a vsphere Client cnnected directly t a hst A cluster becmes invalid if hte user redueces the reservatin n a parent resurce pl while a virtual machine is in the prcess f failing ver If changes are made t hsts r virtual machines using a vsphere Client cnnected t a hst while vcenter Server is unavailable, thse changes take effect. When vcenter Server becmes available again, yu might find that clusters have turned red r yellw because cluster requirements are nt lnget met. See pages 62 thru 66 f the vsphere Resurce Management dcumentatin fr further infrmatin Trublesht vmtin/strage vmtin migratin issues Fr vmtin refer t sectin abve fr DRS and vmtin requirements. Make sure all requirements are being met. Fr Strage vmtin be aware f the fllwing requirments and limitatins Virtual machine disks must be in persistent mde r be raw device mappings (RDMs). Fr virtual cmpatibility mde RDMs, yu can migrate the mapping file r cnvert t thick-prvisined r thin-prvisined disks during migratin as lang as the destinatin is nt an NFS datastre. If yu cnvert the mapping file, a new virtual disk is created and

124 the cntents f the mapped LUN are cpied t this disk. Fr physical cmpatibility mde RDMs, yu can migrate the mapping file nly. Migratin f virtual machines during VMware Tl installatin is nt supprted The hst n which the virtual machine is running must have a license that includes Strage vmtin ESX/ESXi 3.5 hsts must be licensed and cnfigured fr vmtin. ESX/ESXi 4.0 and later hsts d nt require vmtin cnfiguratin in rder t perfrm migratin wth Strage vmtin The hst n which the virtual machines is running must have access t bth the surce and target datastre Fr further infrmatin read pages 119 thru 122 f the vcenter Server and Hst Management dcumentatin Interpret vmtin Resurce Maps vmtin resurce maps prvide a visual representatin f hsts, datastres, and netwrks assciated with the selected virtual machine vmtin resurce maps als indicate which hsts in the virtual machine s cluster r datacenter are cmpatible, it must meet the fllwing criteria Cnnect t all the same datastres as the virtual machine Cnnect t all the same netwrks as the virtual machine Have cmpatible sftware with the virtual machine Have a cmpatible CPU with the virtual machine Fr further infrmatin see page 144 f the vcenter Server and Hst Management dcumentatin Identify the rt cause f a DRS/HA cluster r migratin issues based n trubleshting infrmatin Use infrmatin frm abve tpics t help islate the issue based n HA/DRS requirements as well pages frm the reference dcuments listed. Tls vsphere Availability guide vsphere Resurce Management guide vsphere Mnitring and Perfrmance guide vsphere Trubleshting guide

125 Sectin 7 Mnitr a vsphere Implementatin Objective 7.1 Mnitr ESXi, vcenter Server, and Virtual Machines Knwledge Describe hw Tasks and Events are viewed in vcenter Server View All Tasks 1. Display the bject in the inventry 2. Display the tasks fr a single bject r the entire vcenter Server T display the tasks fr an bject, select the bject T display the tasts in the vcenter Server, select the rt flder 3. Click the Tasks & Events tab 4. (Optinal) T view detailed infrmatin fr a task, select the task in the list View Events 1. Select the inventry bject and click the Tasks & Events tab 2. Click Events 3. (Optinal) Select an event in the list t see the Event Details, including a list f related events and errrs in the errr stack 4. (Optinal) Click the icn next t Descriptin t view further details and pssible causes f the event Fr further infrmatin n bth viewing events and tasks see pages 101 thru 110 f the vcenter Server and Hst Management dcumentatin Identify critical perfrmance metrics As yu will see listed in the sectins belw, the critical pints t mnitr are CPU, memry, netwrking, and strage. Explain cmmn memry metrics Metric Descriptin SWR/s and SWW/s SWCUR SWTGT %SWPWT Measured in megabyts, these cunters represent the rate at which the ESXi hst is swapping memry in frm disk (SWR/s) and swapping memry ut t disk (SWW/s) This is the amunt f swap space currently used by the virtual machine This is the amunt f swap space that the hst expects the virtual machine t use This metric represents the percentage f time that the VM is waiting fr memry t be swapped in (cpu screen in esxtp/resxtp)

126 MCTL? MCTLSZ MCTLTGT Indicates whether the balln driver is installed in the virtual machine Amunt f physical memry that the balln driver has reclaimed Maximum amunt f memry that the hst wants t reclaim via the balln driver Explain cmmn CPU metrics Metric Descriptin %USED Percentage f physical CPU time used by a grup f wrlds %RDY Percentage f time a grup was ready t run but was nt prvided CPU resurces %CSTP Percentage f time the vcpus f a virtual machine spent in the c-stpped state, waiting t be c-started %SYS Percentage f time spent in the ESX VMkernel n behalf f the wrld/resurce pl Explain cmmn netwrk metrics Metric Descriptin MbTX/s MbRX/s %DRPTX %DRPRX Amunt f data transmitted in Mbps Amunt f data received in Mbps Percentage f utbund packets drpped Percentage f inbund packets drpped Explain cmmn strage metrics Metric DAVG KAVG Descriptin Average amunt f time it takes a device t service a single I/O request (read r write) The average amunt f time it takes the VMkernel t service a disk peratin

127 GAVG The ttal latency seen frm the virtual machine when perfrming an I/O request ABRTS/S Number f cmmands abrted per secnd Fr further infrmatin and deeper explanatin f these and ther metrics t mnitr read VMware Cmmunities dcument Interpreting esxtp Statisics as well as Duncan Epping s esxtp blg pst Cmpare and cntrast Overview and Advanced Charts Overview Charts - Display multiple data sets in ne panel t easily evaluate different resurce statistics, display thumbnail charts fr child bjects, and display charts fr a parent and a child bject Advanced Charts - Display mre infrmatin than verview charts, are cnfigurable, and can be printed r exprted t a spreadsheet Cnfigure SNMP fr vcenter Server 1. If necessary, select Administratin -> vcenter Server Settings t display the vcenter Server Settings dialg bx 2. If the vcenter Server system is part f a cnnected grup, select the server yu want t cnfigure frm the Current vcenter Server drp-dwn menu 3. In the settings list, select SNMP 4. In Receiver URL, enter the hst name r IP address f the SNMP receiver 5. In the field next t the Receiver URL field, enter the prt number f the receiver 6. In Cmmunity, enter the cmmunity identifier 7. Click OK See page 37 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Cnfigure Active Directry and SMTP settings fr vcenter Server Cnfigure Active Directry 1. If necessary, select Administratin -> vcenter Server Settings t display the vcenter Server Settings dialg bx 2. If the vcenter Server system is part f a cnnected grup, select the server yu want t cnfigure frm the Current vcenter Server drp-dwn menu 3. In the navigatin pane, select Active Directry 4. In Active Directry Timeut, enter the timeut interval in secnds fr cnnecting t the Active Directry server 5. Select Enable Query Limit t limit the number f users and grups displayed in the Add Permissins dialg bx 6. In Users & Grups, enter the maximum number f users and grups t display

128 7. Select Enable Validatin t have vcenter Server peridically check its knwn users and grups against the Active Directry server 8. In Validatin Perid, enter the number f minutes between instances f synchrnizatin 9. Click OK t save yur changes and clse the dialg bx See page 36 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Cnfigure SMTP Settings 1. If necessary, select Administratin -> vcenter Server Settings t display the vcenter Server Settings dialg bx 2. If the vcenter Server system is part f a cnnected grup, select the server yu want t cnfigure frm the Current vcenter Server drp-dwn menu 3. In the navigatin pane, select Mail 4. Enter the SMTP server infrmatin 5. Enter the sender accunt infrmatin 6. Click OK See page 36 thru 37 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Cngfigure vcenter Server lgging ptins 1. If necessary, select Administratin -> vcenter Server Settings t display the vcenter Server Settings dialg bx 2. If the vcenter Server system is part f a cnnected grup, select the server yu want t cnfigure frm the Current vcenter Server drp-dwn menu 3. In the settings list, select Lgging Optins 4. Frm the vcenter Server Lgging list select lgging ptins (see chart belw) 5. Click OK Optin Descriptin Nne (Disable lgging) Turn ff lgging Errr (Errrs nly) Display nly errr lg entries Warning (Errrs and warnings) Display warning and errr lg entries

129 Inf (Nrmal lgging) Displays infrmatin, errr, and warning lg entries Verbse (Verbse) Displays infrmatin, errr, warning, and verbse lg entries Trivia (Extended verbse) Displays infrmatin, errr, warning, verbse, and trivia lg entries See page 37 thru 38 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Create a lg bundle 1. Select File -> Exprt System Lgs 2. If yu are cnnected t vcenter Server, select the bject fr which yu want t exprt data 3. If yu are cnnected t vcenter Server, select Include infrmatin frm vcenter Server and vsphere Client t dwnlad vcenter Server and vsphere Client lg files and hst lg files, and click Next 4. If the selected hst supprts manifest drive exprts f system lg files, select the system lg files t cllect. Select the specific system lg files t dwnlad 5. Select Gather perfrmance data t include perfrmance data infrmatin in the lg files. Click Next 6. Click Next 7. Click Brwse and specify the lcatin t which t save the lg files 8. Click Next 9. Verify the infrmatin in the Summary and click Finish t dwnlad the lg files 10. If the dwnlad fails, click Retry t attempt t dwnlad the generated bundles again See page 97 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Create/Edit/Delete a Scheduled Task Create a Scheduled Task 1. In the navigatin bar, click Hme -> Management -> Schedule Tasks 2. In the tlbar, click New 3. In the Select a Task t Schedule dialg bx, select a task and click OK t pen the wizard fr that task 4. Cmplete the wizard that pens fr the task 5. Click OK t pen the Scheduled Task wizard 6. Enter a task name and task descriptin and click Next 7. Select a Frequency and specify a Start Time 8. Click Next

130 9. Set up ntificatins and click Next 10. Click Finish Remve a Scheduled Task 1. In the vsphere Client navigatin bar, click Hme -> Management -> Scheduled Tasks 2. Select the task 3. Select Inventry -> Scheduled Task -> Remve 4. Click OK Edit a Scheduled Task 1. In the vsphere Client navigatin bar, click Hme -> Management -> Scheduled Tasks 2. Select the task 3. In the tlbar, click Prperties 4. Change task attributes as necessary 5. Click Next t advance thrugh the wizard 6. Click Finish See pages 101 thru 106 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Cnfigure/View/Print/Exprt resurce maps View vcenter Maps 1. Display the bject in the inventry 2. Select the bject and click the Maps tab Print vcenter Maps 1. Select File -> Print Maps -> Print 2. In the printer Name list, select the printer 3. Click Print Exprt vcenter Maps 1. If necessary, view the resurce map 2. Select File -> Exprt -> Exprt Maps 3. Navigate t the lcatin t save the file 4. Type a name fr the file and select a file frmat 5. Click Exprt See pages 143 thru 146 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Start/Stp/Verify vcenter Server service status

131 Start vcenter Server service 1. G t the Services cnsle fr yur versin f Windws 2. Right-click the vcenter Server service and select Prperties 3. In the VMware vcenter Server Services Prperties dialg bx, click the General tabe and view the service status Restart vcenter Server service 1. Gt t the Services cnsle fr yur versin f Windws 2. Right-click VMware vcenter Server, select Start, and wait fr the startup t cmplete 3. Clse the Prperties dialg bx Stp vcenter Server service 1. G t the Services cnsle fr yur versin f Windws 2. Click VMware vcenter Server Service 3. Right-click VMware vcenter Server, select Stp, and wait fr it t stp 4. Clse the Prperties dialg bx See page 112 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Start/Stp/Verify ESXi hst agent status 1. Shut dwn all virtual machines running n the ESXi hst 2. Select the ESXi hst yu want t shut dwn 3. Frm the main r right-click menu, select Rebt r Shut Dwn 4. Prvide a reasn fr the shut dwn See page 111 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Cnfigure vcenter Server timeut settings 1. If necessary, select Administratin -> vcenter Server Settings t display the vcenter Server Settings dialg bx 2. If the vcenter Server system is part f a cnnected grup, select the server yu want t cnfigure frm the Current vcenter Server drp-dwn menu 3. In the settings list, select Timeut Settings 4. In Nrmal Operatins, enter the timeut interval in secnds fr nrmal peratins 5. In Lng Operatins, enter the tiemut interval in minutes fr lng peratins 6. Click OK 7. Restart the vcenter Serve system fr the changes t take effect See page 38 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Mnitr/Administer vcenter Server cnnectins View Active Sessins

132 1. Frm the Hme page f a vsphere Client cnnected t a vcenter Server system, click the Sessins buttn Terminate Active Sessins 1. On the Hme page f a vsphere Client cnnected t a vcenter Server system, click the Sessins buttn 2. Right-click a sessin and select Terminate 3. Click OK t cnfirm the terminatin Send a Message t All Active Users 1. On the Hme page f a vsphere Client cnnected t a vcenter Server system, click the Sessins buttn 2. Type a message in the Message f the day field 3. Click Change See page 28 thru 29 f the vcenter Server and Hst Management dcumentatin fr further infrmatin Create an Advanced Chart 1. Select an inventry bject and click the Perfrmance tab 2. Click Advanced 3. Click Chart Optins 4. Select a metric grup fr the chart 5. Select a time range fr the metric grup 6. Select the chart type 7. In Objects, select the inventry bjects t display in the chart 8. In Cunters, select the data cunters t display in the chart 9. Click Apply 10. Click OK See page 14 f the vsphere Mnitring and Perfrmance dcumentatin fr further infrmatin Determine hst perfrmance using resxtp and guest Perfmn Given perfrmance data, identify the affected vsphere resurce These tw tpics culd easily fill pages f infrmatin. Fr quick and easy knwledge refer t the sectins abve utlining the mre significant perfrmance metrics t mnitr. Read chapter 7 f the vsphere Mnitring and Perfrmance dcumentatin as well as Duncan Epping s esxtp blg and the VMware Cmmunities dcument Interpreting esxtp Statistics. One final nte, if yu dn t have ne already create a VMwrld accunt and view Trubleshting using ESXTOP fr Advanced Users, sessin TA6720 frm VMwrld Tls vcenter Server and Hst Management guide vsphere Resurce Management guide

133 vsphere Mnitring and Perfrmance guide Objective 7.2 Create and Administer vcenter Server Alarms Knwledge List vcenter default utilizatin alarms Alarm Descriptin Virtual machine memry usage Default alarm t mnitr virtual machine memry usage Virtual machine cpu usage Default alarm t mnitr virtual machine cpu usage Datastre usage n disk Default alarm t mnitr datastre disk usage Hst memry usage Default alarm t mnitr hst memry usage Hst cpu usage Default alarm t mnitr hst cpu usage List curtesy f the Alarms tab at the rt f vcenter List vcenter default cnnectivity alarms Alarm Descriptin Cannt cnnect t strage Default alarm t mnitr hst cnnectivity t strage device Hst cnnectin and pwer state Default alarm t mnitr hst cnnectin and pwer state Hst cnnectin failure Default alarm t mnitr hst cnnectin failure

134 Netwrk cnnectivity lst Default alarm t mnitr netwrk cnnectivity n a virtual switch Netwrk uplink redundancy degraded Default alarm t mnitr netwrk uplink redundancy degradatin n a virtual switch Netwrk uplink redundancy lst Default alarm t mnitr lss f netwrk uplink redundancy n a virtual switch List curtesy f the Alarms tab at the rt f vcenter List pssible actins fr utilizatin and cnnectivity alarms Hst related actins Send a ntificatin Send a ntificatin trap Run a cmmand Enter maintenance mde Exit maintenance mde Enter standby Exit standby Rebt hst Shutdwn hst VM related actins Send a ntificatin Send a ntificatin trap Run a cmmand Pwer n VM Pwer ff VM Suspend VM Reset VM Migrate VM Rebt guest n VM Shutdwn guest n VM Create a vcenter utilizatin alarm Fr this excercise we are ging t create a hst alarm based n netwrk utilizatin 1. Frm the rt bject in vcenter select the Alarms tab 2. Select the Definitins tab next t View 3. In the right hand, right click in pen a space and select New Alarm 4. In the General tab give the alarm a Name, Descriptin, and select Hsts frm the Alarm Type drp dwn.

135 5. Select the Triggers tab 6. Right click in the pen space and select Add Trigger 7. Click the trigger type t display the list f available triggers 8. Frm the list select Hst Netwrk Usage (kbps) 9. Fr the Warning and Alert values select what is apprpriate fr yur envirnment 10. Click the Actins tab 11. Right click in the pen space and select Add Actin 12. Select Send a ntificatin 13. Under the Cnfiguratin clumn input yur address 14. Leave the default setting t when ging frm a warning state t an alert state 15. Click OK Create a vcenter cnnectivity alarm Fr this exercise we are ging t create a hst alarm based n lst strage path redundancy 1. Frm the rt bject in vcenter select the Alarms tab 2. Select the Definitins tab next t View 3. In the right hand, right click in pen a space and select New Alarm 4. In the General tab give the alarm a Name, Descriptin, and select Hsts frm the Alarm Type drp dwn. 5. Select Mnitr fr specific events ccuring n this bject, fr example, VM pwered n 6. Select the Triggers tab 7. Right click in the pen space and select Add Trigger 8. Click the trigger type t display the list f available triggers 9. Frm the list select Lst Netwrk Redundancy 10. Click the Actins tab 11. Right click in the pen space and select Add Actin 12. Select Send a ntificatin 13. Under the Cnfiguratin clumn input yur address 14. Leave the default setting t when ging frm a warning state t an alert state 15. Click OK Cnfigure alarm triggers See sectins abve Create a vcenter Cnnectivity Alarm and Create a vcenter Utilizatin Alarm. Als review pages 33 thru 39 f the vsphere Mnitring and Perfrmance dcumentatin. Cnfigure alarm actins See sectins abve Create a vcenter Cnnectivity Alarm and Create a vcenter Utilizatin Alarm. Als review pages 33 thru 39 f the vsphere Mnitring and Perfrmance dcumentatin. Fr a give alarm, identify the affected resurce in vsphere implementatin If using any f the default vcenter alarms the alarm name as well as the alarm descriptin shuld identify which resurce is being affected.

136 Tls vcenter Server and Hst Management guide vsphere Resurce Management guide vsphere Mnitring and Perfrmance guide VMware vsphere Examples and Scenaris guid