First off I am a newb to certificates and for that I apologize. In our view environment we have 1 security server and 2 connection brokers. One of our brokers are for internal users (no tunneling) and the other is for External users. When it comes to certificates Do I need to generate two different certs or do I just need one??? Any help clearing up this confusion is appreciated. thanks.
Perry
sì se prendi le licenze standard il vcenter non è compreso e va acquistato a parte.
per fare i test potevi anche usare le versioni "a pagamento" e usarle per 60 gg in evaluation mode
scaricati Veeam Backup& Replication in versione free. Fra i vari, c'è anche un tool perfetto per fare quello che ti serve.
I do not have direct experience with VXRAIL but my understanding is it is essentially a marketing name for Dell VSAN-Ready nodes that were designed and optimized specifically for VMware HCI.
a) As far as I know yes
b) Not sure this but should be easy to find an answer in VXRAIL documentation
c) Yes 4-node is recommended but this is not a hard limit, we run a 3-node cluster in our DR datacenter (HPE gear not VXRAIL) and it functions fine. Maintenance can be a little tricky as there are not enough members to maintain duplicate objects plus a witness if one node needs to be evacuated but VSAN can rebuild the mirror objects once full membership is restored. For a primary site I would not recommend as you lose redundancy temporarily (but not availability).
d) Yes, FTT=1 will duplicate all VSAN objects within the cluster resulting in 1/2 usable capacity compared to raw.
e) FTT is configured within a storage policy which is then applied at VSAN datastore level (a second policy with different FTT can be created and set for individual VMs if required). You will have a single VSAN datastore the spans the cluster, this is where your VMs will live. Disk groups are created at the host level. Given your disk layout you will have one disk group per host comprised of your single 400GB SSD plus 3x 2TB HDD.
Hope that helps.
Matt
Hi all,
Using Workstation 12.5, I am trying to set up a test environment with two VMs that can communicate both internally with each other and externally with the internet. I found the following two articles that describe how to do this:
http://www.vkernel.ro/blog/building-an-active-directory-ad-test-lab-using-vmware-workstation
Setting up a basic Test Lab using VMware Workstation - Virtualization - Spiceworks
Both articles suggest that in order to enable internet access in a test environment, you add two network adapters to the domain controller (one for internal communication, one for external communication) and use Windows's Remote and Routing Access Services (RRAS) to have the domain controller function as a virtual router. Unfortunately, I have not been successful in doing this.
Here is where I stand. I created two VMs - let's call them servers 1 and 2 -, both running Win Server 2008 R2. Their configuration is as follows:
Server 1
Server 2
With this configuration, server 1 is not able to access the internet. Only when I change adapter two to use NAT (instead of Bridged) does server 1 have internet access. In either scenario, server 2 does not have internet access. Any idea what I might be doing wrong?
Thanks
I failed to mention that when I saved a Microsoft Word document, OneDrive for Business opened to the cloud without any credential prompting.
I also stopped OneDrive for personal use using UEM.
i still think you have to have common datatstores for vRops to do the rebalancing... as far as i remember rebalance container is only looking at CPU and MEM workloads and will not move the storage (hence the failure)
VMware vRealize Operations Manager 6.2 Release Notes
Migration may fail if datastore is not accessible to network
VM migration across clusters may fail during a rebalance action with the message "Unable to access the virtual machine configuration: Unable to access file".
Workaround: Ensure that all hosts in every cluster participating in a rebalance action share the same datastores that every VM in every cluster participating in the rebalance action resides on.
Are both the clusters in the same datacenter in vCenter? or do the clusters belong to different datacenters?
ThinApp does not bundle cscript.exe or wscript.exe and it relies on the native OS for calling them.
I am setting up a new vSphere 6 environment with 2 ESXi servers and for the shared storage I am using a Windows Server 2016 box with Starwinds Virtual SAN. Each server has a quad 1Gb NIC in it which is dedicated to iSCSI traffic and is connected to a single Cisco SG300-28 switch. I have a VLAN created for the iSCSI storage traffic and have Round Robin MPIO enabled/configured.
The problem is I'm getting awful storage performance. To troubleshoot this I ended up connecting the 4 x 1Gb NICs in the ESXi server directly into the SAN server. Here are the results:
ESXi server connected to Cisco SG300-28 switch:
Running cables directly between the ESXi server and SAN:
As you can see there is a huge difference in performance! When the ESXi host is directly connected to the SAN I can also see that file copies in the VM and general copy operations work quite quickly but when connected to the switch again drop to well under 80MB/s.
Is there any reason for the poor performance with the Cisco SG300-28 switch? I'm not using jumbo frames but is there anything I need to configure on the switch or in vCenter to get iSCSI performance working like it should? I'm using network port binding for iSCSI.
This is a home lab so there is literally no load on this switch and I only have two VMs running at the moment, vCenter and a test Windows VM.
I am totally baffled as to why the iSCSI performance would be so bad when I have read such good things about this switch being used in home labs!
Want to partially automate uploading support dumps for specific vmware hosts for tickets, not sure if there is a way to do this but here is what i have so far:
function get-VMhostSupportDump {
param(
[string]$vmhostname,
[System.Automation.PScredential]$credential,
[string]$FullyQualifiedFilePath='c:\temp\test2.tgz'
)
$uri = "https://$vmhostname/cgi-bin/vm-support.cgi"
$supportRequest = Invoke-WebRequest -Uri $uri -credential $credential
if($supportRequest.StatusCode -eq 200){
write-host "Success, writing file to $FullyQualifiedFilePath"
}else{
throw "Cannot get HTTP data from $uri"
}
try{
[io.file]::WriteAllBytes($FullyQualifiedFilePath,($supportRequest.content))
write-host "Sucessfully wrote TGZ to $FullyQualifiedFilePath"
}catch{
throw "Data not written to $FullyQualifiedFilePath : $_"
}
}
The above function writes out a VMhost support dump in the TGZ format, the dump then needs to be uploaded to an FTPsite, FTPsite.vmware.com specifically:
function upload-FTPsite{
param(
$inboundCredential=(Get-Credential),
$ftpSite='ftp://ftpsite.vmware.com',
$FullyQualifiedFilePath
)
# create the FtpWebRequest and configure it
$ftp = [System.Net.FtpWebRequest]::Create($ftpSite)
$ftp = [System.Net.FtpWebRequest]$ftp
$ftp.Method = [System.Net.WebRequestMethods+Ftp]::UploadFile
$ftp.Credentials = new-object System.Net.NetworkCredential(($inboundCred.GetNetworkCredential().username),($inboundCred.GetNetworkCredential().password))
$ftp.UseBinary = $true
$ftp.UsePassive = $true
# read in the file to upload as a byte array
$content = [System.IO.File]::ReadAllBytes($FullyQualifiedFilePath)
$ftp.ContentLength = $content.Length
# get the request stream, and write the bytes into it
$rs = $ftp.GetRequestStream()
$rs.Write($content, 0, $content.Length)
# be sure to clean up after ourselves
$rs.Close()
$rs.Dispose()
}
The above function more or less works, but i cannot get the URI correct even for an existing directory. Anyone got anything on this that they can share / know?
Would like to basically take the one function and foreach into another so i can auto-upload to the site. Anyway to do this?
I do believe I found a solution to this actually. If you download the GPO pack named Horizon 7 GPO Bundle you will have the vdm.client.adm file that you need to put in C:\Windows\PolicyDefinitions, and then import it into gpedit.msc. Import it by opening gpedit.msc and right click on "Administrative Templates" under Computer Configuration. Add/Import Templates, and browse to the file. Close out of that single window after done. Then, go to Computer>Administrative Templates>Classic Administrative Templates (ADM)>VMware Horizon Client Configuration>Security Settings, and configure the below two settings.
Ignore Certificate Revocation Problems - Enabled
Certificate verification mode - Enabled (No Security)
That should be all you need to do to get this working.
Question 1. Yes, cache is needed for all-flash configurations. It behaves a little bit different then in a hybrid configuration but you still need it.
Question 2a. The same link can be used for vSAN and other traffic
Question 2b. QoS best practises can be found in the vSAN Network Design Guide
Question 3. RAID-5/6 doe have a better storage capacity usage but also have a performance penalty compared to RAID-1
Question 4. Yes, it is possible to use the same link for SQL AAG traffic.
Question 5. Yes, this is possible. In a stretched cluster you can have a FTT up to 1.
Question 6. Yes, this is possible but not a best practice when a site failure occures.
Must of you questions are in detail answered in the following documentation:
vSAN Network Design Guide
vSAN Design and Sizing Guide
vSAN Stretched Cluster Guide
I also would advice to read the vSAN articles on Cormac Hogans blog; http://cormachogan.com/vsan/
KMS server is local and it does not require internet connection for activation.
Since you mentioned that your Toolkit uses KMS activation, please mention the same KMS server name in the config.xml file.
It depends how you want the users to access the brokers, with the same dns-name or separate.
I would strongly recommend the same, then the users do not have to change anything when they are on the inside/outside.
Then you also need to put the external name in your internal DNS and point it to the private ip of the internal view broker.
If you do it that way you only need one SSL cert.
// Linjo
I suggest you read the Storage DRS interoperability white paper and a blog article from Cormac Hogan explaining the Storage DRS enhancements in vSphere 6
vSphere 6.0 Storage Features Part 2: Storage DRS and SIOC - CormacHogan.com
These articles provide a lot information for related areas such as storage array snapshots and auto tiering.
Did you get any solution to this or found the root cause?
// Linjo
Sorry.
I have copied all the VMs configuration files and vmdk files into the new vcenter. This should be the same as clone.
Then I have created the same network on the new environment and modified the vmmark configuration file to match the new environment.
I dont understand whats wrong and are totally agree that a clone / copy like this shouldn't make any problems at all
Do you have any ideas ?
Добрый день,
Выможете попробовать следующее:
Чтобы знать имя host esxi
C:\Program Files\VMware\VMware Tools>vmtoolsd.exe --cmd "info-get guestinfo.hypervisor.hostname"
Чтобы знать версию host esxi
C:\Program Files\VMware\VMware Tools>vmtoolsd.exe --cmd "info-get guestinfo.hypervisor.build"
link: VMware tools cmd : Виртуализация. VMware vSphere
RVTools is a windows application which uses the VI SDK to display information about your virtual machines and ESX hosts.
Виртуализация - Search - RVTools
удача.....
I am curious what languages ESXi can process and run as a script. I assume python is one of those?
I ask because I would like to write a script (in a supported ESXi language) that makes modifications to certain files on the hypervisor. Mostly for security hardening. These settings cannot be done via web-client or thick client.
So assuming say python is supported how would I execute the script on the ESXi box? Does the script need to be in a certain directory?
Any advice would be helpful. I have not written in python but I have worked with other programming languages I just am unsure of the process to actually get the script to run on ESXi. I would be running the script manually via an SSH session.
Thx!
I am running vCenter 6.5RC on a ESXi 6.5 host.
I have external storage connected via iSCSI
After I present my volume to ESX, I try to create a datastore.
During the datastore creation I get the following error message:
Cannot change the host configuration.
Does anyone know why this may be happening?
What logs should I loook at.
Thank you
