VMWARE data center design

Similar Questions

• Mini Data Center design

  Hello

  I have a few doubts about the best solution for the design of a mini data center.

  In the data center, there is a 6500 with FWSM module installed, there are a few created vlans, each of them in the fwsm module. For example, a back-end to communicate with a server in the front end server must always go through the firewall. My question is, these flows through the firewall that does not reduce the speed of communication?

  What is the best practice, just to pass the communications with the Wan in the firewall, and the communication of vlan between front-end and back-end is only set up to 6500?

  Thank you

  Although security is a subject with many facets. How to fix you can do things depends on part on your needs to provide the functionality for the application to work.

  If the database servers do not need to Internet, just keep on a VLAN internal only and do not allow to be routed even initialized requests internally by. If the database servers have need to talk to the Internet (why is this really necessary would be a good question to ask - a bastion host could be used instead?), then lock the rules in the FWSM with an access list that allows only addresses and ports as necessary for the minimum necessary service work.

  In any scenario, your should analyse your servers (for example with Nessus) and harden to reduce their exposed attack surface. Additional measures could include things like Tripwire on the servers to block further down. Audit of system access - and actually looking at the newspapers! -also helps. Tools such as iptables on Linux or Windows Firewall servers must be a lever to allow only the communications in and out of the box as necessary so that it can perform its designated function.

• Licenses of Microsoft and VMware data center

  Hello

  You have a question regarding Microsoft Licensing and VMware ESX hosts.

  We have a Microsoft School Agreement and a lot of our windows servers are running standard edition. One is business running. All about the physical servers.

  We are virtualizing some of our Windows servers and schools prices are very favourable if we buy a license of data center. Its about £70 and it means that we can run an unlimited number of Microsoft server VM in VMware. relation to the enterprise which is only £5 cheaper, but only allows you to run a maximum of 4 people.

  Question, I realized that a Windows license for data center would be per processor, so if I have 2 physical processorsin each esx host, I need to get 2 X Datacenter license per ESX host, is - that correct?

  If I bought 6 data center licenses (3 ESX host with 2 physical processors in each), what version of Windows server can be used, I understand his only standard or Premium, can anyone confirm this? It also covers Windows XP?

  Thank you

  > Question, I realized that a Windows license for data center would be per processor, so if I have 2 physical processorsin each esx host, I need to get 2 X Datacenter license per ESX host, is - that correct?

  Fix.

  License from Microsoft Windows Server 2008 to run with Virtualization Technologies

  Page 13:

  Instead of license servers with enough licenses Windows Server 2008 Standard to satisfy the greatest number of simultaneously running instances of Windows Server, the processors in servers could be allowed with Windows Server 2008, Datacenter Edition. This would allow an unlimited number of instances of Windows Virtual Server to run simultaneously in operating systems. Because the servers have two processors, two licenses of Windows Server 2008, Datacenter Edition for each server should be. Licenses of Windows Server 2008, Datacenter Edition provides the flexibility to move instances of Windows Server without concern to maintain the license compliance.

  > If I bought 6 data center licenses (3 ESX host with 2 physical processors in each), what version of Windows server can be used, I understand his only standard or Premium, can anyone confirm this? It also covers Windows XP?

  Anton is correct - Datacenter license covers only the OS Server.

  Some info about OS desktop VMware licenses - FAQ VMware: licenses Microsoft Windows Vista on a VM for VDI.

• Configuration data center approach!

  Hi have a project where I need to set up a Vmware data center... What is the best approach with regard to the physical host computers?

  4 guests very strong and powerful or have 8 not so powerful, but with the same ability group, has the 4 very powerful?

  Thank you.

  See this post by Duncan Epping - http://www.yellow-bricks.com/2010/03/17/scale-up/ & VMware Scale Up vs. Scale Out: The Big Picture - The Lone Sysadmin

  They both have explained well if you need to select the host of big size or more guest with small size.

  Thank you

  Hentzien

• A suspended snapshot could not be created for the virtual machine (DC) ha-data center (DC) \vm\VMware vCenter Server Appliance.

  Hello gentlemen,

  I can not only save this virtual machine with Backup Exec 2014 for a long time.

  They are there was no snapshot in snapshot Manager.

  Could you help me?

  A suspended snapshot could not be created for the virtual machine (DC) ha-data center (DC) \vm\VMware vCenter Server Appliance.

  V-79-57344-38260 - failed to create a snapshot of the virtual machine. The virtual machine is no longer exist, or may be too busy to pause to take the snap.

  A suspended snapshot could not be created for the virtual machine (DC) ha-data center (DC) \vm\FRPA111PRIM01.

  V-79-57344-38299-\vm\FRPA111PRIM01 ha-data center (DC) VMVCB::\\192.168.204.42\VCGuestVm\ (DC). To try to take a snapshot of a virtual machine failed because it could not be suspended in a file system.

  Hello

  I found the solution.

  I disabled the JOB BE general relativity.

  and the host where the virtual machine belong was not the right time. No Ntp server has been configured.

  I did and now there works.

  I think that the problem can come from this.

• Shortcut to achieve VCDX virtualization in the data center.

  Friends,

  I would like to know to achieve VCDX can choose path below to avoid to submit the design VCDX defense.

  VCP5-VTC > VCAP5DCA > VCAP-CID > VCDX - data center virtualization.

  Who currently hold VCP5-VTC & VCP Cloud. VCAP5DCA inprogress... hope it will pass soon

  Any information will be greatly appreciated.

  Please notify.

  Thank you

  Knockaert

  Yes - actually if you want the VCDX Cloud you have to earn the VCAP-CIA and certification VCAP-CID before sit you for the VCDX defense according to the chart here - (VCDX-cloud) VMware Certified Design Expert-cloud.

  The other option is to pursue and get VCDX-VTC and when you pass the VCAP-CID cert, you will get the Cloud VCDX certification.

  I also move the VCDX forum

• vCloud Data Center hosts certified Services

  We are looking for a hosting provider. Can someone give me a list of what hosting providers expose Data Center Services vCloud vCloud Director auto services portal, where I am able to configure my cloud services based on a pool of resources of clouds we buy?

  I know bluelock is a. Who are the others?

  Thanks, Dave

  Hi Dave,.

  My apologies, a little slow on the response!

  vCloud Datacenter Services addresses in the enterprise space, and only a handful of providers a global level have this certification.  This essentially means that their environments have been jointly designed by VMware and the provider.  They use vCloud Director and expose the vCloud API.

  vCloud Powered suppliers such as StratoGen have built their own environments, but to be certified powered vCloud you must be a partner of provider for VMware Service (VSPP), deployment vCloud Director and expose the vCloud API.  You have a choice of billing models based on the 3 types of data center virtual in vCloud Director - fixed monthly allowance & booking pool models and variable rates by the hour on Pay plans pay as You Go.

  So the difference is really what you consider the market to be in - if you need a global business player then you should watch vCloud Datacenter Services, if you are into SMB or Mid market, then you should probably look vCloud Powered suppliers.

  Many vCloud providers offer a free test drive of their services, so you can try with zero commitment.

  vCloud Express was supposed to be the answer to VMware for Amazon EC2 - instant access to vCloud resources, only credit card payment, distribution plans by the payment of hours only.  Only a few ever offered vCloud Express providers.  You always vCloud Director, but you will see that there is nothing on the vCloud ecosystem as it rolled into vCloud Powered.

  I hope this helps.

  Thank you

  Karl.

• Does anyone use this switches in a data center?

  I have an interest in the switches of SG-300 or SG-500 small businesses for small and moderate use.

  These are rack switches, but my question is if someone is actually using them in a rack of data center with public servers rather than catalysts?

  I understand that they are small business units, but they would hold the heat, vibration in a rack? How do they practice?

  I have an older catalyst, it costs less than new now that some of this small business ones, but I really need gigabit for internal LAN traffic ports and my DC tells me none has this unit to small businesses in their DC, it is not normal to use because they are not high-performance switches. IM worried to go small businesses who are actually Linksys device and not Cisco. I have some Linksys devices for personal use and at home and they are still in years. But I Don t know how they perform outside of this environment. I need to stay under $ 1000 per switch.

  They would fail in a few months? Can be clustered (2 switches) so if one fails the other take the network up until I have replace the failure? If so, I could take the risk, but one dying switch would be a disaster.

  My needs are low speed gigabit between the servers for backup and storage, but usually less 50 Mbit on the public Wan. These switches are really only for small office use or if they work very well with the servers in an institution? If so, I'd love to hear some real experiences, everyone I ask most of them said not to go with the switches, but then why are they still rack? They can´t be this bad or that they are not really designed for 24/7 usage?

  I'd appreciate some experiences with the amount of traffic you are passing on them and for how long (months) because I Don t know anyone use so far in a remote installation.

  Catalyst has shared backplanes and ASICS. SX300 and SX500 series does not work. If you do not need things like the protocols of the road (BPG, OSPF, IS - IS), VTP, CEF then these switches are very good.

  The switch has generally not hardware failure unless it is due to external voltage problems. A real failure, the MTBF is probably 4 or 5 years old, and I say this because the SX300 was not of the most and I've honestly never seen a die with the exception of power problems (storms, power surges, etc.). I saw ports to die only once and a while but that does not matter much because the switches are hardware to life with replacement free advanace...

  If you plan to use these switches as a Ridge with high throughput, especially in layer 2, I seriously doubt you'll break this thing.

  I am not yet sold on the robustness in environments of layer 3 but as a core for sub 300 people is a good switch. In response to another concept, the SX500X switches supports VRRP.

  -Tom
  Please mark replied messages useful

• FabricPath or OTV between two data center using Direct fiber cable

  Hello

  I have two data center both of them has the same equipment N7k, N5k and N2k, and we want the dataCenter being active/active, I'm really confused to use OTV or FabricPath characteristic, if someone can help me with my scenario and explain to me what is the best solution and advantage and disadvantage between OTV and PabrcPath.

  Many thanks in advance

  Hi Steven,

  No problem, I'll go through your points as completely as possible. I advise you to read more about these protocols, maybe if you have access to INE or similar, see their videos on this. I would also like to say again that I have not seen all documentation Cisco indicating that FabricPath to be used as a DCI.

  With regard to the way fabric you ask what follows...

   1. only can use it between two datacenters of you have more we can't, please correct me?

  No, you can use the path of fabric with more than two data centers, but even with OTV, you can use it with more than two data centers.

   2. HSRP localization can not be implemented as OTV. However You can have two differnet Gateways at the Data Center 1 and 2 using two different HSRP groups. If server is moved dynamically from, (i didn't understand this point can you please explain with example?

  OK, so this is a GREAT topic. Location of HSRP CAN be implemented with OTV, but cannot be implemented with fabric path. First hop redundancy protocols can be localized and is supported by Cisco with OTV, this basically allows the same default gateway to reside in two of your data centers providing the ACTIVE/ACTIVE configuration. So no matter where your VM is, they did not change their default, even if gateway your servers to move to the other datacenter.

  If we didn't have this, we would have only an active member of HSRP divided between DC and things would be extremely troublesome in regard to traffic flows. A virtual machine in DC2 VLAN needs to talk to host in VLAN B. But the default gateway is completely in DC1. So frame is sent to the ICD in DC1, then the gateway by default, routes packets VLAN B. This VLAN B lies in fact in DC2, so now it has to go all the way back to DC2. You get my point...? :)

  With localization happen only local to the domain controller. If all servers / VMS in the domain controller can speak locally to its "own" default gateway.

   3. unknown unicast flooding (can you give me an example?)

  Unknown unicast traffic is unicast packets/images with unknown destination mac address. By default, switches are flooding this type of traffic to all ports in the VLAN. With path of fabric that would take place during your DCI, but with OTV, it is all taken care locally, so massive savings on bandwidth here and it is much more effective.

   4. ARP optimization between Data Center (can you give an example regarding ARP optimization?)

  There is another function of OTV, which makes it far superior on the way of tissue. Essentially, we are reducing the volume of traffic passing through the transport infrastructure (i.e. ICD)

  When ARP, host in DC1 to host that responds in DC2, we use links and there is travel time of package that might be minimal, but is not the most optimal. OTV AED - or edge device spy ARP response and subsequently knows that this mapping exists from there. ARP takes place after the first Protocol, the EDA almost proxy ARP to DC1 so the ARP request locally does not have to travel to DC2.

   5. Typically two flows (Odd VLANs by OTV-VDC-1 and even vlans by OTV-VDC-2) carry the entire layer 2 traffic flow between the two Data Centes. Hence the load balancing the links is not efficient. ( (can you explain compare with FabricPath if you have example?)

  IMHO, it's bad and good. Balance the workload of the OTV if you have more than an AED on site. VLAN strange appointment via an AED, even numbered VLAN go through the other. Depending on traffic on VLANs, this could become unbalanced. Fabric used by all its links to mac addresses 'route' to the respective SID - ID switch she needs to do. So perhaps a better uniformity of split here.

   6. VLAN scalability for OTV is lower than FabricPath as of this content writing. (can you explain what this mean i didn't understand it)

  I completely disagree with this comment. I too do not understand.

   7. Resiliency of FabricPath network is better than OTV in some failure scenarios.(can me an example ?)

  I also disagree with that. Resilience of path of fabric could be same as OTV or perhaps better. However, my personal experience is that OTV fine tuning with things like BFD failover is much faster!

  Fabric is good because the control of aircraft ISIS and its operation is admirable, but could say the same for the OTV.

  Lets say one of the DCI links had to die, the transmission of the tissue path would continue through the other links, then perhaps for low latency, high frequency, environments that would be beneficial. OTV will change the EDA and re - learn mac, announced by other AEDS, addresses, but as I said, the time could be extremely minimal and tuning. This isn't a big deal, unless you need under second time convergence!

  I hope that I have answered your questions, I recommend use for your DCI OTV, use the path of fabric for your inside of local switching in your DC. This has been implemented repeatedly and the links I sent you the models validated Cisco also point out.

  Remember - fabric has been built to be a step towards TRILL, and replacement of protocols spanning-tree, OTV was built especially for the dci. They are both built and examples of specific design. It makes no sense to get these confused or mixed up, unless there is a real and pressing the case.

  Joel conclusion is right, use the right tools for the job. If the use case is good for the FP then OK, if not, OTV.

  Rcmnd - reading http://www.packetmischief.ca/2013/04/23/DCI-series-overlay-transport-vir...

  These are just my thoughts.

  Bilal (CCIE #45032)

• Evolution of the data center: N7k or C6500

  Hello

  I am curretnly studying how our data centers evolve.

  For physical physical architecture:

  -We have 2 data centers, L2 interconnected at 10 Gbps.

  -On each data center, 2 x C6500 serve basic and distribution at the same time.

  -The access layer is to C3750G, connected to the chassis base with 3x1Gbps etherchannels.

  -No server rack blade for the moment.

  For the logical aspect:

  -L2: we use STP lying on the 2 DC

  -L3: Core are connected directly to the MPLS cloud. We use the VRF.

  The next evolution of the server would be to replace the stand-alone servers by blade, connected with 10 Gbps.

  I was hesitant on how to improve the current design, and I'm not sure the + and - 2 (except that Nexus need investment)

  (1) keep the C6500 and:

  -Add maps to 10 Gbps on the C6500 (16-port cards)

  -use VSS on the two site to simplify the design STP (even though we have had no problems with it so far)

  (2) replace C6500 by Nexus7K for greater flexibility with 10 Gbps

  (3) as an option, add a distribution layer N5K which would simplify the wiring and allow a possible evolution FCoE (in this solution, I would keep C6500 as base or evolve N7k).

  What do you think?

  Thank you

  P.

  This is going to be a very controversial topic.

  Let's not talk about budget here because it could become very dark.

  The 6500 Sup720 or Sup2T (I still prefer the latter), is very good when you aggregate a significant amount of some 10 Gbps and 1 Gbps and a handful of 40 Gbit/s.

  The Nexus family is very good when you want to consider a few 100 Gbit/s, but a significant amount of 10 Gbps.  NEXUS is also the way to go if you want to connect your Fibre Channel switch DC as Nexus will support 1, 2, 4 - and 8 Gbps FC.

  Nexus 7 K can support 100 Gbps (two per card online), 40 Gbps (six per card online) and of course 10 Gbit/s (up to 48 by card online).

  Very quickly, the will be some service modules that will be introduced for the Nexus 7 K.  They are WAAS, ASA and a NAM.

  There will be life with the 6500?  In some cases, Yes.  It is still is not clear if ALL the 6500 service modules will evolve into the Nexus.  In my view, the three modules, I have just mentioned is to "test" the waters.  Once the momentum has been achieved, the others could follow.

  There are rumours abound that there could be a possibility of Nexus 2 K which will support the PoE.

  Attached something for your perusal.

• [OEM CC 12r4] Multi data center facility

  Hi all

  I am designing a new Enterprise Manager Cloud Control (r4) environment. We want (in the Center) manage about 40 groups CARS with global data protection. Approximately 30 clusters are located in Europe (spread over 2 data centers), 15 United States and 5 in Asia. Currently, we only use OEM for the administration database and monitoring (patch management, backup, etc.). We will not use the LCM pack deployment and automation still. I have a few questions:

  1. Is it possible to manage all clusters in all parts of a central OEM environment? Or with a single panel of glass with decentralized OEM case?
  2. Is it possible to configure the agent on a cluster of CARS to have a primary and a secondary OEM?
  3. Is there information available of the amount of traffic that will be generated for alerts and performance indicators? Why I ask this question is because two data centers are within a radius of 10 miles and we want to know what the charge will be between our data centers.

  Kind regards

  Bart

  Hi Bart,.

  I had quite similar requirements for a comprehensive implementation of Enterprise Manager. It is not a problem to manage targets in different parts of a central Enterprise Manager. Using servers in decentralized with a repository management central is not a good idea, because latency between the database server and the application should not be more than 1 m, application servers and the database must be in the same data center.

  You cannot configure Oracle Agents to work with two different OEM. Theoretically, you could have two agents Installations on a single server, using two directories of different base Agent and two different ports that are configured for two different SGD servers. But this cause configuration would increase consumption of resources for the follow-up on the server and could have strange side effects. For example, some of the events for the databases are collected directly from database (metric push) views and the Agent Oracle insert the thresholds required for monitoring directly in the database. If the two OEMS have different threshold settings, an OEM could view events without thresholds or unable to get events, even if the thresholds are set for the metric. It is that Agent did the last update for the thresholds in the database.

  There is no generic answer for traffic between the Agent and the management server. The amount of data depends on your settings. You can turn off the metric collections or increase the interval between two collections to reduce traffic.

  I hope my answer will help a little to find the right design for you Enterprise Manager environment.

  Kind regards

  Tom

• Report on the use of data store based on cluster (not data center)

  Hello

  I want to create separate HTML reports for each cluster I have in my virtual Center. I've created a script, but it doesn't seem to work. This script creates outputs separated from HTML based on clusters, but all the files have the same data, i.e. all data that are available in the Vcenter stores. How can I separate them with regard to the cluster in which they are assigned to the place?

  ===========================================================

  # Functions for math operations.

  usedspace {} function

  Param ($datastore)

  [math]: round (($datastore.)) CapacityMB - $datastore. (FreeSpaceMB) / 1024,2)

  }

  function dscapacity {}

  Param ($datastore)

  [math]: Round ($datastore. CapacityMB/1024,2)

  }

  freespace {} function

  Param ($datastore)

  [math]: Round ($datastore. FreeSpaceMB/1024,2)

  }

  function {percentage

  Param ($datastore)

  [math]: Round ((($datastore.)) FreeSpaceMB/1024) /($datastore.) CapacityMB/1024) * 100) / 1.2)

  }

  #Connect to Vcenter

  to connect-viserver-Server < myservername >

  # CSS stylesheet

  $a = '< style >.

  $a = $a + "BODY {background-color: Gainsboro ;}}.

  $a = $a + "TABLE {border-width: 1px;}. border-style: solid; border-color: black; border-collapse: collapse ;} »

  $a = $a + "TH {border-width: 1px;}. padding: 5px; border-style: solid; border-color: black; "{background-color: Blue}".

  $a = $a + "TD {border-width: 1px;}. padding: 5px; border-style: solid; border-color: black; "{background-color: PaleTurquoise}.

  $a = $a + ' * {do-family: Verdana, Arial, Helvetica, without serif;} '. font size: small ;} »

  $a = $a + ' < / style >.

  # get a list of clusters

  $clusters = get-cluster

  # Create HTML report for each cluster

  foreach ($cluster in $clusters)

  {

  $datastores = get-Datastore. where {$_.name - notcontains 'local'} | Sort the name

  $Report = @)

  {ForEach ($datastore to $datastores)

  $row = "" | Select-object Datastore, Datacenter, CapacityGB, UsedGB, FreeSpaceGB, PercentFree

  $row. Data store is $datastore. Name

  $row. Datacenter = $datastore. Data Center

  $row. CapacityGB = dscapacity $datastore

  $row. UsedGB = usedspace $datastore

  $row. FreeSpaceGB = freespace $datastore

  $row. PercentFree = % $datastore

  $Report += $row

  }

  $Report | Tri-objet-property PercentFree | ConvertTo-Html-head $a | Set-Content "D:\VMware\Scripts\Reports\Storage\$cluster.html".

  }

  ===============================================================

  To recover the cluster data warehouses, you must change the line:

  $datastores = get-Datastore. where {$_.name - notcontains 'local'} | Sort the name

  in:

  $datastores = $cluster | Get-Datastore. where {$_.name - notcontains 'local'} | Sort the name

• Failed to create the gateway for virtual data center edge

  Hello

  I'm new to the vCD, when I tried to create a "bridge of edge" for the virtual data center, it failed, saying:

  Deployment of edge gateway PALEdgeGateway has failed.

  com.vmware.vcloud.fabric.nsm.error.VsmException: error response VSM (10105): could not publish configuration on vShield Edge. Has no power on VM vse-PALEdgeGateway (66b92dc1-c973-4744-8c0e-88e2d2211eae)-0. (No host is compatible with virtual machine).

  then I found this KB, suspecting that vShield that Manager is not synchronized with vCD:

  http://kb.vmware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 2060542

  I followed the steps in this KB resolution, but still did not work.

  Does anyone have an idea? Thank you very much!

  (We use vCloud Director 5.5.0 1323688, vSphere Client 5.5.0 1281650)

  Hi FredrickGu,

  Really sorry for the late reply. Our working hours doesn't seem to be the same.

  You are right that VShield Manager & POSSIBLE are the same. You will be able to deploy the Cluster edges & host view,

  Select a resource of data centers in the inventory tree, click the visualization of network tab and click the + to add edges. Ensure that we test the edge deployment against a successful VCD Host.If deployment works, it confirms the deployment of edge is certainly intact and communication POSSIBLE-host is very well.

• can we do vMotion between two data center

  Dear team,

  Can we do vMotion between two data center (esxi5, x)

  Can we do SVMotion between two data center (esxi5, x)

  Note: it is not a physical data center, it is a virtual data center

  can we do vMotion between clusters (esxi5.x)

  can we do SVMotion between clusters (esxi5.x)

  concerning

  Mr. VMware

  Can we do vMotion between two data center (esxi5, x)

  NO, you can't.

  Can we do SVMotion between two data center (esxi5, x)

  Yes, as long as data warehouses are shared.

  can we do vMotion between clusters (esxi5.x)

  Yes, as they perform the same CPU families.

  can we do SVMotion between clusters (esxi5.x)

  Yes, as long as data warehouses are shared.

• Getting the data center of VirtualMachine with Get-View information

  Hello

  Y at - it a faster way to get the name of data using Get-View and the viewtype VirtualMachine Center.

  I found the following:

  Get-View -ViewType VirtualMachine -filter @{ "name" = "mtl1fsit02" } | Select-Object -Property Name, 
  @{ Label = "GuestOSName"; Expression = { $_.summary.guest.guestfullname } }, 
  @{ Label = "Datacenter"; Expression = { (Get-view (Get-View (Get-view $_.parent).parent).Parent).name } }
  

  Thank you guys

  I think that the property calculated for the data center does not work in all situations.

  It assumes that your virtual machines are 3 levels down from the data center, which is not always the case.

  I personally use a loop, passing up through the parents, until he finds an object data center.

  something like that

  @{N = 'Center'; E = {}

  $parentObj = get-view $_. Parent

  While ($parentObj - isnot [VMware.Vim.Datacenter]({))

  $parentObj = get-view $parentObj.Parent

  }

  $parentObj.Name

  }