Www.thalesgroup.com THALES GROUP INTERNAL What’s New in vSphere 5.1 Module 1.

www.thalesgroup.com

THALES GROUP INTERNAL

What’s New in vSphere 5.1

Module 1

THALES GROUP INTERNALTRN : 0001-0007610082 rev 001 – date 05/11/2013

Thales Global Services / Modèle : 83150233-DOC-TGS-EN-001

Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

2 /2 /

vSphere 5.1 offers only the ESXi hypervisor architecture.

vSphere 5.1 does not include the legacy ESX server. The service console no longer exists.

VMware vSphere® Command-Line Interface and VMware vSphere® PowerCLI are available for command-line administration.

vCenter Server 5.1 can still manage ESX hosts of 4.0 and above

The upgrade process upgrades ESX/ESXi 4.x to ESXi 5.1.

What’s New in vSphere 5.1?

vCenter Server 5.1



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

3 /3 /

New for ESXi 5.1:

2TB host memory Up to 160 logical

CPUs 512 virtual

machines per host 2,048 virtual CPUs

per host

New ESXi Hardware Maximums

2TB160 LCPUs

2048 vCPUs512 VMs



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

4 /4 /

Reclaim storage from files deleted in the guest OS

Hardware-accelerated 3-D graphics

Larger virtual machines

New virtual machine format

Virtual Machine Virtual Hardware Version 9

64 vCPUs 1TB RAM

Virtualize larger workloads

Run high-performance 3-D graphics apps

Storage efficiency

Enhancements Benefits

2x



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

5 /5 /

Installing or upgrading to ESXi 5.1:

For RAM, a minimum of 2GB is required.

Installation and boot device options:

USB devices Disks larger than 2TB

See the VMware Compatibility Guide at http://www.vmware.com/resources/compatibility.

ESXi 5.1 Requirements



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

6 /6 /

vSphere 5.1 introduces the following changes to the ESXi interactive installation process:

A graphical installer is no longer available. The installer can be used for new installations or upgrades. New installations use the GUID Partition Table instead of the Master

Boot Record partition format. New installations create a 4GB scratch partition.

Changes to the ESXi Interactive Installation Process



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

7 /7 /

vSphere 5.1 introduces the following enhancements to the ESXi scripted installation:

Adding the location of the installation media in the installation script is no longer required.

The installation image is loaded directly into the host RAM when the host boots.

The table describes command changes to scripted installations.

Enhancements to the ESXi Scripted Installation Process

Command changes Commands

Commands that have been deprecated

autopart, esxlocation

Commands no longer supported

auth/authconfig, bootloader, firewall, firewallport, timezone, virtualdisk, zerombr, %packages



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

8 /8 /

When the ESXi installer screen appears, press Shift+O to edit boot options.

Type ks=<location_of_installation_script> <boot_command-line_options>.

Example:

ks=nfs://192.168.0.101/FS2/isos/esxi-B.cfg nameserver=192.168.0.57 ip=192.168.0.3 netmask=255.255.255.0 gateway=192.168.0.254

Performing an ESXi Scripted Installation



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

9 /9 /

The requirements are specific to a vCenter Server system.

An alternative to the vCenter Server system introduced: VMware vCenter Server Appliance.

The vCenter Server Appliance has its own set of requirements. The vCenter Server Appliance is discussed in module 8, “New

Alternatives for Deploying VMware vSphere.”

vCenter Server Requirements

Component Requirement vCenter Server 5.1

Hardware

Memory4GB minimum, 10GB (If SSO and vCenter Inventory Service also installed)

Disk storage4GB minimum, 40GB (If SSO and vCenter Inventory Service also installed )

Software

Default database Microsoft SQL Server 2008 R2 Express

Operating systemsWindows Server 2003 and 2003 R2; Windows Server 2008 and 2008 R2

Database operator (DBO) rights No longer required for installation or upgrade



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

10 /10 / vCenter Installer



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

11 /11 /

Benefits of Single Sign-On:

Faster operations and less complexity Support for multiple or non-AD user repositories Trust between components Support for an open standard

Introducing vCenter Single Sign-On

vCD

vCenter

MgmtApp

directoryserver(AD)



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

12 /12 / How Single Sign-On Functions

vSphereplatformservices

Customeridentity sources

vSphere solutions

authentication(single sign-on)

vCOInventory Service

vCenter

ActiveDirectory

authorization auditing

vSphereWeb Client

OpenLDAP

NISlocal OS

users



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

13 /13 /

Support is included for autodiscovery of vCenter 5.1 Server systems in the vSphere environment.

vCenter 5.0 Server systems require one-time manual registration. The user can see all vCenter instances. Linked mode is no longer required for unified views of vCenter

Server.

Single Sign-On Server: Features



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

14 /14 /

Identity source is a directory service that authenticates vCenter users. Supported identity sources are:

OpenLDAP

Active Directory

OS users that are local to the system where SSO installed

SSO uses default domains to authenticate users when a username is provided without a domain name.

Only users with SSO administrator privileges can configure the identity source.

Configuring SSO: Identity Source



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

15 /15 / Configuring SSO: Password Policy



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

16 /16 / Configuring SSO: Lockout Policy



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

17 /17 /

The vSphere Web Client offers the following:

An alternative to using the VMware vSphere® Client™ A Web-based interface to vCenter Server or a VMware ESXi™ host Support for Firefox and Internet Explorer browsers on multiple

operation system platforms An interface that is customizable by the user Advanced search functionality available in vSphere 5.1

The vSphere Web Client includes extensible functionality.

Partners and users can add features and capabilities.

What Is the vSphere Web Client?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

18 /18 /

vSphere WebClient

vSphere Client

Concurrent sessions 150 sessions 50 sessions

Platforms Windows, Linux, Macintosh Windows only

Extensibility Rich extensioncapabilities

Limited HTMLplug-in

User experience Flexible, modern,and consistent UIs Rigid and static

vSphere Web Client and vSphere Client comparison

vSphere Web Client Advantages



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

19 /19 / vSphere Web Client: Object Navigator

Breaks the traditional hierarchy view of an object. Objects are linked and displayed by relationships.

The Home screen retains its original appearance.

Allows an administrator to view objects by solutions.

Enables administrators to jump to crucial elements faster through relationships and object search.

Reduces client clutter and repetitive information by simplifying display of objects.

Only displayed objects are communicated between server and browser.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

20 /20 /

To upgrade vCenter Server, vSphere Client, Update Manager, and ESX/ESXi hosts:

1. Verify requirements.

2. Back up.

3. Upgrade to vCenter Server 5.1.

4. Upgrade to Update Manager 5.1.

5. Install vSphere Client 5.1 and install the Update Manager plug-in.

6. Use Update Manager to upgrade to ESXi 5.1.

7. Upgrade VMFS-3 datastores.(Discussed in module 5, “Storage Management”)

8. Upgrade virtual machine hardware and VMware Tools.(Discussed in module 3, “Virtual Machine Management”)

Overview of the Upgrade Process



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

21 /21 /

To upgrade a 64-bit system, perform an in-place upgrade.

An in-place upgrade:

Requires downtime of vCenter Server Does not require that you power off hosts or virtual machines

Performing a vCenter Server In-Place Upgrade

vCenter Server 4.1While the upgrade

is in progress,VMware vSphere®

Distributed Resource

Scheduler stops working but

VMware vSphere® High Availability

continues to work.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

22 /22 /

To upgrade a 32-bit system to vCenter Server 5.1 (64-bit), migrate the vCenter Server database and configuration to a 64-bit machine (physical or virtual).

Back up the vCenter Server database. Move the database to the new machine, if the database is local. Back up vCenter Server configuration settings.

Use the data migration tool.

Create a 64-bit data source name (DSN) that points to the database (for nonbundled databases.)

On the new 64-bit machine, install vCenter Server, and restore the vCenter Server database and configuration settings.

Upgrading to vCenter Server on a Different Machine



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

23 /23 /

The data migration tool is used to back up the following:

vCenter Server configuration settings: Lightweight Directory Access Protocol (LDAP) data

Port settings (for example, HTTP, HTTPS, Web services)

SSL certificates

Licenses

vCenter Server database, local SQL Server Express database only

The data migration tool can also be used to install vCenter Server and restore data.

The data migration tool is on the vCenter installation media.

Using the Data Migration Tool



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

24 /24 /

Update Manager 5.1 has the following enhancements:

Remediation of multiple servers simultaneously Scheduling of reboot after a VMware® Tools/virtual hardware

upgrade ESX to ESXi migration

Guest operating system patching is no longer available.

To upgrade Update Manager, use the vCenter Installer.

After upgrading Update Manager:

Install vSphere Client 5.1. Install the Update Manager plug-in.

Upgrading Update Manager



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

25 /25 / Migrating ESX and Upgrading ESXi

Two main scenarios:

Migrate an ESX host to ESXi 5.1. Upgrade an ESXi host to ESXi 5.1.

Most standard configurations are preserved, but not all, such as:

Information that is not applicable to ESXi: /etc/sysconfig/mouse or /etc/sudoers

Custom configuration files: Scripts added to /etc/rc.d

Most third-party software is not preserved:

Supported components are Cisco Nexus 1000v and EMC PowerPath.

All other components must be replaced after the host is upgraded.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

26 /26 /

Partial list of configuration files and whether they are migrated during the upgrade

See vSphere Upgrade Guide for the complete list.

Configuration Files Preserved During the Migration/Upgrade

Configuration files Action/etc/vmware/esx.conf Migrated

/etc/ntp.conf, ntp.drift, ntp.keys Migrated

/etc/krb.*, /etc/krb5.* Migrated

/etc/hosts, /etc/resolv.conf Migrated

/etc/pam.d/* Migrated

/etc/vmware/vmkiscsid/* Migrated

/etc/passwd, /etc/shadow Partially migrated; root and vpxuser accounts

/etc/yp.conf Not migrated; NIS not supported in ESXi

/etc/syslog.conf Migrated for ESXi, not migrated for ESX



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

27 /27 /

Firewall configuration:

Rule set files and customized firewall rules are not preserved.

Resource pool settings:

Settings might be insufficient to start all virtual machines.

Networking changes:

If migrating ESX: Service console network interface cards (NICs)

are converted to VMkernel NICs.

The service console port group is removed.

Partitioning changes:

The ESXi 5.1 partition scheme differs from ESX and earlier ESXi versions.

Configuration Settings Affected by the Migration/Upgrade

For more details, seevSphere 5.1

Upgrade Guide.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

28 /28 / Migration/Upgrade Methods

Migration/upgrade method ESX 3.5* ESX/

ESXi 4.x Use case

Use Update Manager. XFor sites that already use vCenter Server and Update Manager

Interactively use the ESXi installer.

XFor a small number of hosts

Perform a scripted migration/upgrade.

XFor an efficient way to deploy multiple hosts

Perform a new installation. X XFor upgrading ESX 3.5 hosts or for use in your own custom upgrade plan

After you upgrade or migrate to ESXi 5.1,you cannot roll it back to the previous version.

See upgrade path : http://kb.vmware.com/kb/2037630



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

29 /29 /

With Update Manager 5.1, you can migrate an ESX host to ESXi 5.1.

An ESX limitation:

The /boot partition must be greater than 350MB. If it is not, use an interactive or scripted upgrade, instead.

To use Update Manager to upgrade an ESX/ESXi host to ESXi 5.1:

1. Import the ESXi 5.1 image.

2. Create the ESXi 5.1 upgrade baseline.

3. Attach the baseline to the host.

4. Remediate the host.

Use Image Builder to create a custom ESXi 5.1 ISO image, containing third-party agents and device drivers.

Image Builder is discussed in module 8, “New Alternatives for Deploying VMware vSphere.”

Using Update Manager to Migrate/Upgrade to ESXi 5.1



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

30 /30 /

Use the interactive ESXi installer to migrate ESX or upgrade ESXi.

The following changes have been made to the interactive ESXi installer:

No graphical installer

Single installer wizard for newinstallations and upgrades

Interactive and Scripted Migration or Upgrade

The scripted upgrade is similar to performing a scripted installation in ESX and ESXi. The default upgrade script is ks.cfg.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

31 /31 /

With ESXi 5.x, the following changes have been made to the direct console user interface (DCUI) and the esxcli commands.

The DCUI can be accessed remotely, using an SSH session. The esxcli command set has been revised and expanded. The local and remote versions of esxcli are now identical.

Managing ESXi Through the DCUI and esxcli Commands

www.thalesgroup.com


Virtual Machine Management

Module 2



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

33 /33 / New Virtual Machine Capabilities

64 vCPUs per virtual machine

1TB RAM per virtual machine`

Virtual machinescalability

Richer desktopexperience

Broader device coverage

Othernew features

Hardware 3-D graphics

HD audio

USB 3.0 devices

Smart-card readers

UI for multicore vCPUs

VMDirectPath I/O version 2

E1000e network adapter

Client-connected USB devices

Extended VMware® Tools compatibility



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

34 /34 /

What is snapshot consolidation?

Method used to commit a chain of snapshots to the original virtual machine when the Snapshot Manager window does not match the snapshot status of the virtual machine

Snapshot consolidation is intended to resolve known issues with snapshot management:

The snapshot descriptor file is committed correctly, but the Snapshot Manager window incorrectly shows that all the snapshots are deleted.

The snapshot files (-delta.vmdk) are still part of the virtual machine. Snapshot files continue to expand until the virtual machine runs

out of datastore space.

Snapshot Consolidation



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

35 /35 /

The Snapshot Manager shows no snapshots. But a warning on the Summary tab of the virtual machine notifies the user that a consolidation is required.

Discovering When to Consolidate



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

36 /36 /

Select Consolidate to reconcile snapshots.

Any snapshots found are committed to the virtual machine.

Performing Snapshot Consolidation



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

37 /37 /

The Solutions Manager is a central point from which to monitor and manage installed solutions.

A solution is an extension that adds functionality to VMware vCenter Server™.

Examples: An extension to manage enterprise security

An extension to manage backup and recovery

An extension to manage and configure the cloud environment

Can be developed by VMware and VMware third-party vendors Packaged in Open Virtualization Format

Why use the Solutions Manager?

As more are created for vCenter Server, a central point of control becomes very important for the administrator to be able to monitor and manage each solution.

What Is the vCenter Solutions Manager?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

38 /38 / Solutions Manager Interface

Select Home > Administration > vCenter Solutions Manager.

Select a solution and get detailed information about each solution.

Get a quick overview of the health of the solutions.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

39 /39 /

Installer located on ISO image Install local to vCenter Server or to remote systems

VMware recommends installing to remote systems

Included with vCenter Server Appliance

Installing the vSphere Web Client



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

40 /40 / vSphere Web Client Architecture



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

41 /41 /

Log in with your vCenter Server user credentials.

Starting the vSphere Web Client

Select Start > Programs > VMware > VMware vSphere Web Client > vSphere Web Client.

https://<FQDN or IP Address>:9443/vsphere-client/

Install Client Integration Plugin for console access.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

42 /42 / Viewing the vSphere Web Client

vSphere Web Client Home

page

www.thalesgroup.com


Network Management

Module 3



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

44 /44 / What Is the ESXi Firewall?

ESXi 5.1 has a new firewall engine to provide access

control to the management network.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

45 /45 / Configuring the ESXi Firewall

Enable or disable a rule set.

Define allowed IP addresses or

ranges for a rule set.

Select host > Configuration tab > Security Profile link > firewall Properties link.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

46 /46 /

To add a new service to the ESXi firewall:

Create a file in /etc/vmware/firewall named <service_name>.xml,where <service_name> is the name of the service, for example, MyService.xml. <enabled>: Default status when the service is first loaded

<required>: Indicates whether service is required

Use the esxcli command to load the configuration: esxcli network firewall refresh

Manage the new service with VMware vSphere® Client™.

Adding New Services to the ESXi Firewall



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

47 /47 /New Distributed Virtual Switch Features in

vSphere 5.1

vSphere 5.1 introduces new features for a vSphere distributed virtual switch (dvSwitch):

LLDP, LACP, NetFlow, SR-IOV and port mirroring.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

48 /48 /

LLDP is a switch discovery protocol that helps network administrators determine the capabilities of a network device.

LLDP is similar in functionality to Cisco Discovery Protocol (CDP).

What Is Link Layer Discover Protocol?

The dvSwitch advanced settings allow you to

specify discovery protocol type.

LLDP:

New in vSphere 5.0

For dvSwitch only

Vendor-neutral protocol

CDP:

In vSphere 4.x

For vSwitch and dvSwitch

Specific to Cisco



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

49 /49 / Example of LLDP Information

Example of LLDP output from a physical switch



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

50 /50 /

NetFlow:

A network analysis tool for monitoring the network and for gaining visibility into virtual machine traffic

A tool that can be used for profiling, intrusion detection, networking forensics, and compliance

Supported in vSphere 5.0 on distributed virtual switches (dvSwitches)

What Is NetFlow?

NetFlowcollector

dvSwitchenabled

for NetFlow

ESXihosts

network flow data



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

51 /51 /

A network flow is a unidirectional sequence of packets, each packet sharing a common set of properties.

NetFlow captures two types of flows: Internal flow – Represents intrahost virtual machine traffic

External flow – Represents interhost virtual machine traffic and physical machine–to–virtual machine traffic

Flow records are sent to a NetFlow collector for analysis.

ESXihosts

Network Flows

network flow records

physicalhost

NetFlowcollector

internal flow external flows



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

52 /52 / Network Flow Analysis

Network flow data is sent to a third-party NetFlow collector, which:

Accepts and stores network flow records Includes a storage system for long-term storage of flow-based data:

You can investigate and isolate excessive network bandwidth utilization, bottlenecks, and unexpected application traffic.

You can view historical records to diagnose the cause of these outages or breaches.

Mines, aggregates, and reports on the collected data: You can analyze network traffic by rate, volume, utilization.

You can analyze trends in virtual machine and host traffic.

network flow records

NetFlowcollectordvSwitch IP

address:192.168.10.24

NetFlowcollector IP address:172.20.10.100



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

53 /53 /

1. Configure NetFlow on the dvSwitch.

2. Enable or disable NetFlow on a distributed port group, a specific port, or at the uplink.

Configuring NetFlow on a dvSwitch

Networking inventory view > select dvSwitch >

Configuration tab > Edit Settings

link.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

54 /54 /

Port mirroring is a technology that duplicates network packets of a switch port (source) to another port (destination).

The source’s traffic is monitored at the destination.

Port mirroring is used:

To assist in troubleshooting As input for network analysis

appliances

Many network switch vendors implement port mirroring in their products.

vSphere 5.1 supports port mirroring on a dvSwitch:

Used to monitor virtual machine traffic

What Is Port Mirroring?

VM A VM B VM C

sourceport

destinationport

normal trafficmirrored traffic

dvSwitch

host



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

55 /55 /Creating Port Mirroring Session: General

Properties

To create a port mirroring session, specify general properties and optional session details.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

56 /56 /Creating Port Mirroring Session: Source and

Destination

Traffic direction for the source can be one of the following: Ingress – Traffic from source VM to dvSwitch is mirrored. Egress – Traffic from dvSwitch to source VM is mirrored. Both – Both ingress and egress traffic are mirrored.

For the port mirroring session, select a destination type:

Port – One or more port IDs

Uplink – One or more uplinks



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

57 /57 /Network I/O Control Enhancements in vSphere

5.x

Network I/O control in vSphere 5.x has been enhanced to allow:

User-defined resource pools Quality-of-service (802.1p)

tagging

Mgmt NFS iSCSI

vMotion FT

dvSwitch

port group

10 GigE

port group

user-defined resource pools system resource pools

port group



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

58 /58 / User-Defined Network Resource Pools

Limits, shares, and QoS priority tag are displayed for each network resource pool.

Networking inventory view > select dvSwitch >

Resource Allocation tab.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

59 /59 /Configuring a User-Defined Network Resource

Pool

Select dvSwitch > Resource Allocation tab > New Network

Resource Pool link.

Select dvSwitch > Resource Allocation tab > Manage Port Groups link.

QoS priority

tag

Network priority

Traffic characteristics

1 0 (lowest) Background

None (0) 1 Best Effort

2 2 Excellent Effort

3 3 Critical Applications

4 4 Video, < 100 ms latency

5 5 Voice, < 10 ms latency

6 6 Internetwork Control

7 7 (highest) Network Control



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

60 /60 /

Standards-based link aggregation method Automatic negotiation between virtual and physical switches Key advantages of this feature are:

Plug and play

Detection of link failures and cabling mistakes and automatic reconfiguration of links

Limitations of LACP: Works with only IP Hash load balancing and Link Status Network failover detection

Is incompatible with iSCSI software multipathing

Is affected by vSphere support of only one LACP group per distributed switch, and only one LACP group per host

Does not exist in host profiles

Does not work between two nested ESXi hosts

Does not work with port mirroring

Link Aggregation Control Protocol



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

61 /61 / Enabling LACP



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

62 /62 /

Can be used to Identify and troubleshoot configuration errors in vSphere distributed switches

Available only on ESXi 5.1 distributed switches Prevents common configuration errors:

Mismatched VLAN trunks between virtual switch and physical switch

Mismatched MTU setting between vNIC, virtual switch, physical adapter, and physical switch ports

Mismatched teaming configurations

Network Health Check



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

63 /63 / Enabling Network Health Check

Reports the status of distributed uplink ports and VLAN ranges

Checks configuration mismatch between ESXi and the physical switch used in the teaming policy



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

64 /64 /

Create backups for network configurations and restore it later.

Export : Backup virtual data switch and portgroup configuration asynchronously on disk

Restore: Restore virtual data switch and portgroup from a backup. Saved configuration can be used as template to create VDS in any

other deployment.

Exporting and Restoring



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

65 /65 / Exporting Configurations



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

66 /66 / Restoring Configurations



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

67 /67 /

Introduced in vSphere 5.1 Detects any configuration changes in the management network Does not enable the changes to take effect by rolling back to

previous valid configuration The rollbacks are triggered by:

Host networking misconfigurations

Distributed switch misconfigurations

Automatic Rollback



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

68 /68 /

Beneficial for users who want to offload I/O processing to the adapters and reduce network latency

Standard that enables one PCI express (PCIe) adapter to be presented as multiple, separate logical I/O devices

Support: Adapters: Intel and Emulex

Guest OS: Red Hat Enterprise Linux 6.1, Microsoft Windows Server 2008 R2 Service Pack 1 (SP1)

Limitation: vSphere vMotion, vSphere FT, and vSphere HA features are not available to the customers when this feature is selected.

Single Root I/O Virtualization (SR-IOV) Support



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

69 /69 /

Restricted mobility (limited by smaller broadcast domain ) Multitenancy and scale up is a challenge (VLANs limited to 4096

today) VLAN and IP address

management limitations

VLAN Limitations

VXLAN enables creation of on-demand logical networks independent of physical topology.

Web

app

DB

DMZ

Compute cluster B

Compute cluster A

Web

VXLAN fabric

Web tier needs to expand?Capacity ?

IP address ?Network ?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

70 /70 /

Provides cluster mobility Enables provisioning

workload where compute is available. Avoids operational heaviness of VLANs

Provisions large number of tenants

Enables stateful movement of workloads (vMotion anywhere)

VXLAN: Advantage

VLAN: 100

VXLAN: Dev

VXLAN

Distributed switch

Distributed switch Note: VXLAN is a part of vCloud Networking and Security (vCNS), which is not included in vSphere

www.thalesgroup.com


Storage Management

Module 4



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

72 /72 /

Lesson 1: Enhancements to Storage Functionality

Lesson 2: New Storage Functionality

Module Lessons



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

73 /73 /

Lesson 1:Enhancements to Storage

Functionality



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

74 /74 /

After this lesson, you should be able to do the following:

Discuss vSphere Storage vMotion enhancements. Describe new primitives for VMware vSphere® Storage APIs - Array

Integration (VAAI ). Describe enhancements to solid-state disk (SSD) support.

Learner Objectives



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

75 /75 /

vSphere 5.x supports the Storage vMotion migration of:

A virtual machine that has snapshots A virtual machine that uses linked clones

Storage vMotion is the underlying technology for the vSphere 5.1 feature, Storage DRS.

Storage DRS is further discussed in module 6, “Scalability.”

In vSphere 5.x, Storage vMotion uses a new mirroring architecture.

The changed-block tracking mechanism is not used.

In vSphere 5.x, Storage vMotion performs up to 4 parallel disk migrations per Storage vMotion operation.

What’s New with Storage vMotion?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

76 /76 / Mirroring Architecture of Storage vMotion



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

77 /77 /

In previous versions, Storage vMotion used to copy virtual disks serially. In vSphere 5.1 Storage vMotion performs up to four parallel disk

migrations per Storage vMotion operation. The limitations for concurrent instances of Storage vMotion are:

Two per host

Eight per datastore

Four Parallel Disk Migrations



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

78 /78 /

VAAI was introduced in vSphere 4.1.

The goal of VAAI is to help storage vendors provide hardware assistance to accelerate VMware I/O operations that are more efficiently accomplished in the storage hardware.

In vSphere 5.x, new VAAI primitives are available to storage vendors:

VAAI: Hardware Acceleration for NAS: Allows NAS arrays to integrate with vSphere to transparently offload certain storage operations

to the array

This integration significantly reduces the CPU overhead on the host.

VAAI: Hardware Acceleration for Thin Provisioning: Allows the monitoring of space on thin-provisioned storage arrays

This functionality helps to prevent out-of-space conditions and to perform space reclamation.

What’s New with VAAI?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

79 /79 /

SSD is supported in VMware ESXi™ 4.1. In ESXi 5.x, the VMkernel can automatically detect, tag, and enable an SSD.

Use the VMware vSphere® Client™ to identify an SSD.

What’s New with SSD?

ESXi host’s Storage panelon the Summary tab

By knowing which storage is SSD, you can use that storage for: Quicker Storage

vMotion migrations among hosts that share the sameSSD

Improving a virtual machine’s performance by placing its swap fileon it



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

80 /80 /

Lesson 2:New Storage Functionality



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

81 /81 / Software FCoE Adapter

convergednetworkadapter

network

driver

FCdriver

VMware ESX®/ESXi host

network

driver

softwareFC

ESXi 5.x host

NICwith FCoEsupport

enhancedEthernet

fabric

hardware FCoE(supported in vSphere 4.1)

software FCoE(new in vSphere 5.x)



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

82 /82 / Configuring Software FCoE: Create VMkernel Port

Step 1. Connect the VMkernel to physical FCoE NICs installed on your host.

VMkernel ports

vmnic2 vmnic3

Physical adapter: vmnic2VMkernel label: FCoE-2

VLAN ID: 20IP address: 172.17.12.150

Subnet mask: 255.255.255.0

Physical adapter: vmnic3VMkernel label: FCoE-3

VLAN ID: 30IP address: 172.17.12.151

Subnet mask: 255.255.255.0

NICs withFCoE support



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

83 /83 /

Step 2. Add the software FCoE adapter.

Configuring Software FCoE: Activate Software FCoE Adapter

Select host > Configuration tab > Storage Adapters link > Add.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

84 /84 /

Host can boot from an FCoE LUN without requiring a dedicated FCoE HBA.

Assists diskless blade servers to boot from SAN. Most of the configuration is done in the Option ROM of the Network

Interface Card. Suitable NICs contain one of the following:

FCoE Boot Firmware Table (FBFT), Intel proprietary

FCoE Boot Parameter Table (FBPT), VMware proprietary

The previous tables enable the VMkernel to access FCoE boot parameters set in the BIOS of the Network Interface Card.

Boot Support for Software FCoE



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

85 /85 /

VMware vSphere® Storage Appliance (VSA) is a virtual appliance that provides small and medium businesses with the benefits of VMware vSphere® vMotion® and VMware vSphere High Availability without requiring shared storage.

VSA runs on an ESXi host. A VSA cluster is a group of ESXi hosts, each running its own VSA instance.

A VSA cluster enables the following features: Shared datastores for all hosts in the cluster vMotion and vSphere HA Datastore replication Hardware and software failover capabilities

VSA is an alternative to SAN storage. A SAN system provides a centralized array of storage. A VSA cluster provides a distributed array of storage.

VMware vSphere Storage Appliance



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

86 /86 / VSA Architecture

VMware vCenter Server™ 5.1

datastore1

datastore2

VOL 1replica

VOL 2replica

VOL 1 VOL 2

VSA cluster with two ESXi hosts

ESXi hosts(VSA cluster

members)

VSA cluster leader

VSA VSA

VSA Manager VSA cluster service



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

87 /87 /

VMware vSphere® VMFS-5 is a new version of the virtual machine file system that offers improved scalability and performance.

The datastore and a single extent can be greater than 2TB. The maximum datastore size is 64TB.

Pass-through raw device mappings (RDMs) can be greater than 2TB. Maximum size is 64TB.

The maximum file size remains at 2TB.

Newly created VMFS-5 datastores use a 1MB file block size only. The file system subblock size is 8KB. Data of small files (less than or equal to 1KB) is stored directly in

the file descriptor. GUID Partition Table replaces Master Boot Record.

GPT provides the ability to create VMFS-5 volumes greater than 2TB.

VMFS-5



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

88 /88 / Creating a VMFS-5 Datastore

Select host > Configuration tab > Storage link > Add Storage.

New in ESXi 5.x, you can choose between version 5 and version

3.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

89 /89 / Upgrading to a VMFS-5 Datastore

Select host > Configuration tab > select VMFS-3 datastore > click Upgrade to

VMFS-5 link.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

90 /90 /

In vSphere 5.1, the maximum number of hosts that can share a file on a VMFS has been increased from 8 to 32.

This increase makes VMFS-5 as scalable as NFS for VDI deployments and vCloud Director deployments.

Increasing VMFS File Sharing Limits

VMFS-5



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

91 /91 /

VASA allows a storage vendor to develop a software component (a VASA provider) for its storage arrays.

A VASA provider gets information from the storage array about available storage topology, capabilities, and state.

VASA

storagedevice

vCenterServer

5.1

VASAprovider

vSphereClient

vCenter Server connects to a VASA

provider.

Information from the VASA provider

is displayed in the VMware vSphere®

Client™.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

92 /92 /

VASA providers benefit vSphere administrators by:

Allowing administrators to be aware of the topology, capabilities, and state of the physical storage devices on which their virtual machines are located

Allowing them to monitor the health and usage of their physical storage devices

Assisting administrators in choosing the right storage in terms of space, performance, and service-level agreement requirements: Done by using virtual machine storage profiles

Benefits Provided by VASA Providers



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

93 /93 / Configuring a VASA Provider

Select Home > Administration > Storage Providers.

After adding a storage provider,the VASA provider is listed

in the Vendor Providers pane.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

94 /94 /

Profile-driven storage enables the creation of datastores that provide varying levels of service.

Profile-driven storage can be used to do the following:

Categorize datastores based on system-defined or user-defined levels of service: For example, user-defined

levels might be gold, silver, and bronze.

Provision a virtual machine’s disks on “correct” storage

Check that virtual machines comply with user-defined storage requirements

Profile-Driven Storage

gold silver bronze uncategorized

not compliantcompliant



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

95 /95 /

Storage capabilities:

System defined – From VASA providers User-defined

Storage Capabilities

VASAprovider 2 –

SYSTEMCAPABILITIES

datastore A –USER-DEFINEDCAPABILITIES

vCenter Server 5.1

VASAprovider 1 –

SYSTEM CAPABILITIES



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

96 /96 /

Virtual machine storage profiles:

Contain one or more storage capabilities

Are associated with one or more virtual machines

Can be used to test that virtual machines reside on compliant storage

Virtual Machine Storage Profiles

VASAprovider 2 –

SYSTEMCAPABILITIES

datastore A –USER-DEFINEDCAPABILITIES

VASAprovider 1 –

SYSTEM CAPABILITIES

virtual machinestorage profiles

compliantnot

compliantcompliant



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

97 /97 /

To configure profile-driven storage:

View existing storage capabilities. (Optional) Create user-defined storage capabilities. Associate user-defined storage capabilities with a datastore or

datastore cluster. Enable the VM Storage Profiles function on a host or cluster. Create a virtual machine storage profile. Associate a virtual machine storage profile with a virtual machine.

Overview of Steps for Configuring Profile-Driven Storage



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

98 /98 /

Use the virtual machine storage profile when you create, clone, or migrate a virtual machine.

Using the Virtual Machine Storage Profile



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

99 /99 / Checking Virtual Machine Storage Compliance

After clicking the Check Compliance Now link



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

100 /100 /

The latency thresholds for the SIOC is set by using the injector-based models. Through device modeling, SIOC determines the peak throughput.

It then measures the peak latency value when the throughput is at its peak.

The threshold is then set by default to 90 percent of this value.

The administrator still has the option to manually set the congestion threshold.

Storage I/O Control (SIOC): Automatic Threshold

www.thalesgroup.com


Scalability and Security

Module 5



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

102 /102 /

Lesson 1:Scalability



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

103 /103 /

In previous vSphere versions, when a resource pool is created directly on a VMware ESXi™ host, that host alone holds the resource pool settings.

In vSphere 5.1, VMware vCenter Server™ has complete control over resource pools, regardless of where the resource pool is created.

The change in control allows an autodeployed host to use resource pools. If vCenter Server is down, the host can get its configuration from a VMware vSphere® Auto Deploy server.

What’s New with Resource Pools?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

104 /104 /

New features in vMotion include: Multi-NIC support of up to:

Four 10Gbps NICs

Sixteen 1Gbps NICs

Support for higher latency links: Up to 10 milliseconds

Improved error reporting Reduced application overhead:

When a guest operating system writes to a memory page during a vMotion operation, the virtual machine is forced to sleep.

The goal is to keep changed memory as small as possible when performing a vMotion operation.

What’s New with vMotion?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

105 /105 /

Enhanced vMotion capabilities

Merging vMotion and Storage vMotion into a single operation Migrating between hosts and clusters without shared storage

Enhanced vMotion

VMware ESXi VMware ESXi

layer 2 network

vCenter

Server



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

106 /106 /

Single migration for changing both host and datastore

Hosts must be managed by the same vCenter Server. Hosts must be part of the same datacenter. Hosts must be on the same layer-2 network (and the same switch if

VDS is used).

Operational considerations

Enhanced vMotion is a manual process. DRS and SDRS do not leverage enhanced vMotion.

A maximum of two concurrent enhanced vMotion instances can be enabled per host. Enhanced vMotion instances count when you are considering concurrent limitations

for both vMotion and Storage vMotion.

Enhanced vMotion leverages multi-NIC when available.

Enhanced vMotion Considerations



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

107 /107 /

Enhanced vMotion is available only in the vSphere Web Client.

Enhanced vMotion and the vSphere Client



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

108 /108 /

A datastore cluster is a collection of datastores that are grouped together without functioning together.

A datastore cluster enabled for Storage DRS is a collection of datastores working together to balance: Capacity IOPS latency

What Is a Datastore Cluster?

datastorecluster

2TB

500GB 500GB 500GB 500GB



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

109 /109 /

General rules for datastore clusters (with or without Storage DRS): Datastores from different arrays can be added to the same datastore

cluster. LUNs from arrays of different types can adversely affect performance if they are not

equally performing LUNs.

Datastore clusters must contain “like” or interchangeable datastores.

A datastore cluster can contain one or more NFS datastores. Datastore clusters support only ESXi 5.x hosts.

Rules specific to datastore clusters enabled for Storage DRS: Do not mix VMware vSphere® VMFS and NFS datastores in the same

datastore cluster. Do not mix replicated datastores with nonreplicated datastores. You can mix VMFS-3 and VMFS-5 datastores in the same datastore

cluster.

Datastore Cluster Rules



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

110 /110 /

The relationship between a VMware vSphere® High Availability/VMware vSphere® Distributed Resource Scheduler cluster and a datastore cluster can be one to one, one to many, or many to many.

Relationship of Host Cluster to Datastore Cluster

datastore cluster datastore clusters datastore clusters

host cluster host cluster host clustershost host

one to one one to many many to many



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

111 /111 /

Storage DRS provides the following functions: Initial placement of virtual machines based on storage capacity Use of vSphere Storage vMotion to migrate virtual machines based

on storage capacity Use of Storage vMotion to migrate virtual machines based on I/O

latency Configuration in either manual or fully automated modes Use of affinity and anti-affinity rules to govern virtual disk location Use of fully automated, storage maintenance mode to clear a LUN

of virtual machine files

Storage DRS Overview



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

112 /112 /

When virtual machines are created, cloned, or migrated: You select a datastore cluster, rather than a single datastore.

Storage DRS selects a member datastore based on capacity and on I/O operations per second (IOPS) load.

By default, a virtual machine’s VMDK files are placed on the same datastore in the datastore cluster. Storage DRS affinity and anti-affinity rules can be created to

change this behavior.

Initial Disk Placement



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

113 /113 /

Migration recommendations are executed: When the IOPS response time is exceeded When the space utilization threshold is exceeded

Space utilization is checked every five minutes.

IOPS load history is checked every eight hours.

Storage DRS selects a datastore based on utilization and IOPS load.

Load balancing is based on IOPS workload, which ensures that no datastore exceeds a particular VMkernel IOPS latency level.

Migration Recommendations



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

114 /114 /Configuration of Storage DRS Migration

Thresholds

Option for including

IOPS latency in balancing

Advancedsettings

for latency

thresholds

Configuration settings for utilized space and

latency thresholds

Datastores and Datastore Clusters inventory view > right-click datacenter > New Datastore Cluster.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

115 /115 / Storage DRS Affinity Rules

datastore cluster

Intra-VM VMDK affinity

Keep a virtual machine’s

VMDKs together on the same

datastore.

Maximize virtual machine

availability when all disks are

needed in order to run.

Rule is on by default for all

virtual machines.

Intra-VM VMDKanti-affinity

Keep a virtual machines’s

VMDKs on different

datastores.

Rule can be applied to all

or a subset of a virtual

machine’s disks.

datastore cluster

VM anti-affinity

Keep virtual machines on

different datastores.

Rule is similar to the DRS

anti-affinity rule.

Maximize availability of a

set of redundant virtual

machines.

datastore cluster



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

116 /116 /

Select the host cluster that will use the datastore cluster. If no host clusters are created, the user can select individual ESXi

hosts to use the datastore cluster.

Adding Hosts to a Datastore Cluster

Datastores and Datastore Clusters inventory view > right-click datacenter >

New Datastore Cluster.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

117 /117 /

Select the datastores to add to the datastore cluster.

Adding Datastores to the Datastore Cluster

VMware recommends selecting datastores

that all hosts can access.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

118 /118 /

A panel on the datastore cluster’s Summary tab displays the Storage DRS settings.

Storage DRS Summary Information



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

119 /119 /

Use the Storage DRS tab to monitor for migration recommendations.

Storage DRS Migration Recommendations



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

120 /120 /

Storage DRS maintenance mode allows you to take a datastore out of use in order to service it.

Storage DRS maintenance mode: Evacuates virtual machines from a datastore placed in maintenance

mode. Registered virtual machines (on or off) are moved. Templates and unregistered virtual machines are not moved.

Storage DRS Maintenance Mode



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

121 /121 /

Backing up virtual machines can add latency to a datastore.

You can schedule a task to disable Storage DRS behavior for the duration of the backup.

Backups and Storage DRS



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

122 /122 / Storage DRS Compatibility

Feature or product Supported/Not supported

VMware snapshots Supported

RDM pointer files Supported

NFS Supported

ESXi 3.x and 4.x hosts Not supported



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

123 /123 /

Storage I/O Control allows clusterwide storage I/O prioritization. Storage I/O Control was introduced in vSphere 4.1. In vSphere 5.0, Storage I/O Control is supported on NFS

datastores. Storage I/O Control is used when I/O load balancing is enabled in a

datastore cluster enabled for Storage DRS.

What’s New with Storage I/O Control?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

124 /124 /

Storage DRS and Storage I/O Control are complementary solutions:

Storage I/O Control is enabled by default on datastore clusters enabled for Storage DRS. Storage DRS works to avoid I/O bottlenecks.

Storage I/O Control manages unavoidable I/O bottlenecks.

Storage I/O Control works in real time. Storage DRS does not use real-time latency to calculate load

balancing. Storage DRS and Storage I/O Control provide you with the

performance that you need in a shared environment, without having to massively overprovision storage.

Storage DRS and Storage I/O Control



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

125 /125 /

If datastores are backed by the same physical spindles, Storage DRS can detect the datastore correlation.

Detection of the datastore correlation was previously performed by VASA, but these results are now augmented with the automatically detected conditions.

Helps Storage DRS determine where to move a virtual machine.

Storage DRS: Datastore Correlation Detector



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

126 /126 /

A new metric for I/O latency monitoring for each datastore. I/O latency is measured as the time between:

I/O leaving ESX host and response coming back: vSphere 5.1

Receiving an I/O request from the VM and getting I/O response back from the datastore, and includes queuing delay (wait time) in the host.: vSphere 5.1

This metric also is included in the SIOC performance charts in the vSphere UI.

Storage DRS: VMobservedLatency



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

127 /127 /

Lesson 2:Security



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

128 /128 /

Securing datacenters: vShield Edge

Securing OS: vShield Endpoint

Securing application: vShield App

Securing platform:VMware Platform Security

VMware Security Strategy

vSphere 5.1

private cloud public cloud



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

129 /129 / vShield Endpoint Overview

USE

Overview

Benefits

• ESXi service installed on host• Offloads AV, DLP, and IDS processing to

a dedicated security virtual appliance• Leverages third-party solutions

• Improved performance and antivirus storms eliminated

• Rapid provisioning: deploy and patch • Reduced risk by eliminating agents

susceptible to attack• Lower cost and complexity to protect

virtual machines

Cloud Infrastructure(vSphere, vCenter, vShield, vCloud Director)

AVPartnerProduct

Agent Agent Agent Agent Agent Agent

Agent Agent Agent Agent Agent Agent

USEUSEUse

vShield Endpoint



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

130 /130 /

Installing and configuring vShield Manager overview

Obtain the vShield Manager OVA File.

Install the vShield Manager Virtual Appliance.

Configure the Network Settings of the vShield Manager.

Log in to the vShield Manager User Interface.

Synchronize vShield Manager with vCenter Server.

Register the vShield Manager plug-in with the vSphere Client.

Change the password of the default account for the vShield Manager user interface.

Installing and Configuring vShield Manager

See the vShield Quick Start Guide for details.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

131 /131 / vShield Endpoint Alarms

Home > Hosts and Clusters > <Object> > Alarms > Definitions36



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

132 /132 /

Home > Hosts and Clusters > <Host> > Tasks & Events > Events

Example of vShield Endpoint Events and Alarms



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

133 /133 / vShield Endpoint Dashboard

www.thalesgroup.com


High AvailabilityModule 6



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

135 /135 / vSphere 5.x Enhancements to FT

New CPU support

IntelWestmere-EX

Sandy Bridge (SNB-DT, SNB-EP, and SNB-EN)

AMD Bulldozer

New guest operating system support

Windows 7, SP1 (32-bit and 64-bit): Enterprise, Professional, Ultimate

Windows Vista, SP3 (32-bit and 64-bit): Enterprise, Business, Ultimate

Windows Server 2008 (32-bit and 64-bit)

RHEL 4.9 (32-bit and 64-bit): AS, ES, WS

RHEL 5.5 (32-bit and 64-bit): Advanced Platform

RHEL 6.0 (32-bit and 64-bit)

RHEL 6.1 (32-bit and 64-bit)

SLES 11, SP1 (32-bit and 64-bit)

SLES 10, SP4 (32-bit and 64-bit)



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

136 /136 /

Enhancements to EVC include:

Support for new Intel and AMD processor groups

Ability to support future processors

Ability to change EVC mode when host is disconnected

Validation checks run at reboot to check for BIOS changes.

vSphere 5.x Enhancements to EVC



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

137 /137 /

New vSphere HA infrastructure:

Improved functionality and greater scalability Uses both network and storage as communication channels Deploys and reconfigures within seconds, regardless of cluster size Removes dependencies on commonly misconfigured services, for

example, DNS Master/slave concept, which replaces primary/secondary roles

New and improved vSphere HA features:

Management network partition support (new) Single log file for operational, day-to-day logging (improved) Syslog integration (new) Host isolation response (improved) Admission control (improved) Error and status reporting (improved)

vSphere 5.x Enhancements to vSphere HA



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

138 /138 /

Master agent: Ensures the protection of virtual machines that are protected by vSphere

HA Maintains the current state of protected virtual machines and slaves:

Restarts virtual machines on slave hosts when a slave fails

Manages the list of hosts that are members of the cluster and manages the list of protected virtual machines

Informs the slaves of changes in the cluster configuration Sends heartbeats to slaves so that slaves know that the master is alive

Slave agent: Monitors on its own host the virtual machines protected by vSphere HA:

Slaves can reset virtual machines on their own host.

Slaves inform the master of power state changes.

Monitors the health of the master, and if the master should fail, the slaves participate in a new master election

Responsibilities of the Master and Slave Agents



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

139 /139 /vSphere HA Architecture: Master and Slave

Agents



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

140 /140 /vSphere HA Architecture: Virtual Machine

Protection

VM A (protected)

TMPL 1

VM B

VM D (protected)

VM C

VM E (protected)

slavehost

slavehost

masterhost

management network

vCenterServer

shareddatastores

list of protected virtual machines

powered on by a user

powered off by a user

vSphereHA

cluster



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

141 /141 / vSphere HA Architecture: Network Heartbeats

slavehost

slavehost

masterhost

managementnetworks

vCenterServer

shareddatastores

TMPL 1

VM A

VM E

VM C

VM D

VM B

vSphereHA

cluster



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

142 /142 / vSphere HA Architecture: Datastore Heartbeats

slavehost

slavehost

masterhost

managementnetworks

vCenterServer

heartbeat datastores

TMPL 1

VM A

VM E

VM C

VM D

VM B

NAS/NFS VMFS VMFS

vSphereHA

cluster



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

143 /143 / Scenario 1: Failed Slave Host

vCenterServer

VM A (protected)

TMPL 1

VM B (protected)

VM D (protected)

VM C (protected)

VM E (protected)

slavehost

slavehost

masterhost??


NAS/NFS VMFS VMFS

managementnetworks



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

144 /144 / Scenario 2: Failed Master Host

vCenterServer


NAS/NFS VMFS VMFS

managementnetworks

A new master host is elected.

The new master host

restarts VM C and VM E on

other hosts in the cluster.

VM A (protected)

TMPL 1

VM B (protected)

VM D (protected)

VM C (protected)

VM E (protected)

master host(moid = 100)

slave host(moid = 99)

slave host(moid = 98) ?



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

145 /145 / Scenario 3: Isolated Host

VM A (protected)

TMPL 1

VM B (protected)

VM D (protected)

VM C (protected)

VM E (protected)

default gateway(isolation address)


NAS/NFS VMFS VMFS

management networks

masterhost

slavehost

slavehost



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

146 /146 / Scenario 4: Network Partition

default gateway(isolation address)

VM A

TMPL 1

masterhost 1

VM C

VM D

slavehost 1

VM E

VM F

slavehost 2

VM G

VM H

slavemaster 2

vCenterServer

Only one master host communicates with vCenter Server.

partition A

partition B



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

147 /147 / vSphere HA Cluster Information



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

148 /148 /Changes to vSphere HA Admission Control

Policies

Percentage of cluster resources per CPU and per

memory

Multiple failover hosts

allowed



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

149 /149 / vSphere HA System Files

System file Description File location

fdm.cfg FDM configuration file

On each host: /etc/opt/vmware/fdm

hostlist List of hosts participating in the cluster

compatlist Host–to–virtual machine compatibility matrix

clusterconfig Configuration file for the cluster

host-X-hb Lock file for detecting host liveness On each heartbeat

datastorehost-X-poweron Used for host isolation response

to virtual machines

protectedlist List of protected virtual machinesOn all datastores with protected virtual machines

fdm.log vSphere HA log file On each host: /var/log/fdm.log



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

150 /150 / vSphere Replication

vSphere vSphere

source target

vSphere replication



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

151 /151 / Replication Appliance

Standard OVF virtual

appliance

Delivered with the vSphere

platform

Bundled with most vSphere

editions

vSphere Replication Appliance



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

152 /152 / Full Integration with vSphere Web Client

Single interface and common management

Designed to integrate with other products

Does not require “console hopping”



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

153 /153 /

Only vSphere 5.x can be replicated by using VR. VR is managed only by vSphere 5.1 Web Client. vSphere Replication cannot co-exist with the vSphere Replication

pieces originally shipped with SRM 5.0. Although both Storage DRS and Storage vMotion are supported, they

can cause certain scenarios that must be managed.

Supported Product Versions



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

154 /154 / How Replication Works

Deploy and configure VR components

Pair with a destination

Configure VR for a single VM*

* RPO, Target Datastore, and Target Folder or Resource pool must be defined.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

155 /155 / Only Changed Blocks Replicated

After ensuring that data is consistent on both sites

VR Agent tracks all changing blocks by way of vSCSI filter

Changed blocks replicated as per RPO

AII B CI DI E A B C D E

Source disk

Target disk

A C D

tcp/44046

Disks are always consistent.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

156 /156 /

VSS writer integration

Works by way of VMware Tools

Quiescent Applications with vSphere Replication

Integrates with VSS and application writers for consistent applications.

]

Creates quiescent copies of virtual machines including apps.



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

157 /157 / Single-Site vSphere Replication Architecture

Storage

vSphere Client

Storage

VMDK1 (VMDK1)

VR Appliance

vCenter Server

Delta

NFC

Replication configured by way of

client

Agents track changes and send blocks to the VR appliance

VR Appliance

writes blocks to

disk by way of NFC

vSphere

VR Agent

vSphere

VR Agent



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

158 /158 / Remote Offices Replicating with a Single VC

storageStorage

vSphere Client

storage

VR Applianc

e

vCenter Server

vSphere

VRA

vSpherevSphere

VRA

vSphere

storage

VMDK3

vSpherevSphere

VRA VRA

VRA VRA

(VMDK1) (VMDK2) (VMDK3)

VMDK1

VMDK2

VR Server

VR Server

NFC NFC



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

159 /159 / Main Datacenter Replicating to Remote Offices

storageStorage

vSphere Client

storage

VR Applianc

e

vCenter Server

vSphere

VRA

vSphere

vSphere

VRA

vSphere

storage

VMDK3

vSphere

vSphere

NFC NFC

NFC NFC

(VMDK1)

(VMDK2) (VMDK3)VMDK1 VMDK2

VR Server

VR Server



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

160 /160 / Four Steps for Full Recovery

Right-click, select “Recover”

Select a target folder

Select a target resource

Click Finish

Validates your choices as you go



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

161 /161 / vSphere Replication and SRM

SRM users can choose to use array

replication and vSphere Replication.

If VR is already installed and

configured, SRM will use it when it is

installed.

Alternately you can install VR as part of

the SRM install.

Choice of replication options for SRM



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

162 /162 /Building a Foundation for Disaster Recovery with

SRM

vSphere Replication is simply protection. SRM is disaster recovery.

Common functionality

Replication engine

Application quiescence

VR unique functions

Next-generation web client

SRM specific functions

Full DR Orchestration Recovery planning

Repeatable, nonintrusive testing

Grouping of protected VMs

Parallel recovery of VMs or groups of VMs

Full site or partial site failover

Reprotection and failback Automation and APIs

Works with array replication Reporting and more



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

163 /163 /

Easy, disk-based backup and recovery solution for VMs

Preconfigured virtual machine appliance Agent-less, Web-based backup and recovery management Patented deduplication technology Entire virtual machine and file-level restores Included with all versions of VMware vSphere (except vSphere

Essentials)

VMware vSphere Data Protection



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

164 /164 /

Virtual Machine Appliance

Linux VM .ova package Easy, fast deployment

vSphere infrastructure

Changed block tracking VSS in VMware Tools

Appliance storage sizes

.5TB, 1TB, 2TB

vCenter integration

Manage by way of Web client

vSphere Data Protection Key Components

VMware vSphere VMware vSphere

vCenter ServervSphere Web

Client



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

165 /165 /

VDP Appliance

4 vCPUs, 4GB RAM 850GB, 1.6TB, or 3.1TB SLES 11 64-bit

vCenter Server 5.1

vSphere 4.0 or later

VDP Architecture

Deduplication store (.vmdk files)

VMware vSphere

vCenter Server

vSphere Data Protection

vSphere Web Client



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

166 /166 /

After installation, the VDP-configure utility is in maintenance mode.

Status - Services and logs Configuration - Network, vCenter and system settings Rollback - Roll back repository of backups (more on this later) Upgrade - Upgrade VDP appliance

VDP Deployment and Configuration



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

167 /167 / Create Backup Job

Select objects - containers (data

center, folder, clusters, and so on) and individual VMs



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

168 /168 / Restoring a Virtual Machine



Th

is d

ocu

men

t is

not

to b

e r

epro

du

ced,

mod

ifie

d, a

dap

ted,

pu

blis

hed

, tr

ansl

ate

d in

an

y m

ater

ial f

orm

in w

hole

or

in p

art

nor

dis

clo

sed

to a

ny t

hird

par

ty

with

out t

he p

rior

wri

tten

perm

issi

on

of T

hale

s.©

TH

ALE

S 2

013

– A

ll rig

hts

rese

rve

d.

169 /169 /

Restore individual files from backup.

vSphere Data Protection Restore Client http://<VDP ip address>:8580/flr

VMware Tools must be installed. Windows NTFS and Linux LVM, ext2, ext3 supported (basic disks)

File Level Restore (FLR)

View all restore points or filter by date

Www.thalesgroup.com THALES GROUP INTERNAL What’s New in vSphere 5.1 Module 1.

Documents

Transcript of Www.thalesgroup.com THALES GROUP INTERNAL What’s New in vSphere 5.1 Module 1.