Site Protection and Recovery. 30 OCT 2018 VMware Validated Design 4.3 VMware Validated Design for Software-Defined Data Center 4.3

Transcription

1 Site Protetion n Reovery 30 OCT 2018 VMwre Vlite Design 4.3 VMwre Vlite Design for Softwre-Define Dt Center 4.3

2 Site Protetion n Reovery You n fin the most up-to-te tehnil oumenttion on the VMwre wesite t: If you hve omments out this oumenttion, sumit your feek to ofeek@vmwre.om VMwre, In Hillview Ave. Plo Alto, CA Copyright VMwre, In. All rights reserve. Copyright n tremrk informtion. VMwre, In. 2

3 Contents Aout VMwre Vlite Design Site Protetion n Reovery 5 1 Filover n Filk Cheklist for the SDDC Mngement Applitions 6 2 Prerequisites for SDDC Filover or Filk 8 3 Filover of the SDDC Mngement Applitions 9 Configure Filover of the SDDC Mngement Applitions 10 Configure Filover of the Opertions Mngement Applitions 10 Configure Filover of the Clou Mngement Pltform 19 Test Filover of the SDDC Mngement Applitions 30 Test Filover of the Opertions MngementApplitions 30 Test Filover of the Clou Mngement Pltform 31 Perform Plnne Migrtion of the SDDC Mngement Applitions 32 Initite Plnne Migrtion of the Opertions MngementApplitions 33 Initite Plnne Migrtion of the Clou Mngement Pltform 34 Perform Disster Reovery of the SDDC Mngement Applitions 35 Reonfigure the NSX Instne for the Mngement Cluster in Region B 36 Reover the Control VM of the Universl Distriute Logil Router in Region B 39 Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region B 40 Verify Estlishment of BGP for the Universl Distriute Logil Router in Region B 42 Enle Network Connetivity for the NSX Lo Blner in Region B 43 Initite Disster Reovery ofthe Opertions MngementApplitions in Region B 44 Initite Disster Reovery of the Clou Mngement Pltform in Region B 45 Post-Filover Configurtion of the SDDC Mngement Applitions 46 4 Filk of the SDDC Mngement Applitions 58 Test Filk of the SDDC Mngement Applitions 59 Test Filk of the Opertions MngementApplitions 59 Test Filk of the Clou Mngement Pltform 60 Perform Filk s Plnne Migrtion of the SDDC Mngement Applitions 62 Initite Filk s Plnne Migrtion of theopertions MngementApplitions 62 Initite Filk s Plnne Migrtion of the Clou Mngement Pltform 63 Perform Filk s Disster Reovery of the SDDC Mngement Applitions 64 Reonfigure the NSX Instne for the Mngement Cluster in Region A 66 Reover the Control VM of the Universl Distriute Logil Router in Region A 68 VMwre, In. 3

4 Site Protetion n Reovery Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region A 70 Verify the Estlishment of BGP for the Universl Distriute Logil Router in Region A 72 Enle Network Connetivity for the NSX Lo Blner in Region A 72 Upte the vsan Defult Storge Poliy of the Mngement Cluster in Region A 73 Initite Disster Reovery ofthe Opertions MngementApplitions in Region A 74 Initite Disster Reovery of the Clou Mngement Pltform in Region A 75 Post-Filk Configurtion of the SDDC Mngement Applitions 76 5 Reprotet of the SDDC Mngement Applitions 86 Prerequisites for Performing Reprotet 86 Reprotet the Opertions MngementApplitions 87 Reprotet the Clou Mngement Pltform 88 VMwre, In. 4

5 Aout VMwre Vlite Design Site Protetion n Reovery VMwre Vlite Design Site Protetion n Reovery provies step-y-step instrutions for performing isster reovery of VMwre mngement omponents in the softwre-efine t enter (SDDC). Use VMwre Site Reovery Mnger n VMwre vsphere Replition to perform site protetion n reovery of the Clou Mngement Pltform tht onsists of vrelize Automtion with emee vrelize Orhestrtor, vrelize Business, vrelize Opertions Mnger nlytis luster, n vrelize Suite Lifeyle Mnger. VMwre Vlite Design Site Protetion n Reovery overs oth filover to the reovery region n filk to the protete region. Intene Auiene The VMwre Vlite Design Site Protetion n Reovery oumenttion is intene for lou rhitets, infrstruture ministrtors, lou ministrtors, n lou opertors who re fmilir with n wnt to use VMwre softwre to eploy in short time n mnge n SDDC tht meets the requirements for pity, slility, kup n restore, n isster reovery. Require VMwre Softwre The VMwre Vlite Design Site Protetion n Reovery oumenttion is omplint n vlite with ertin prout versions. See VMwre Vlite Design Relese Notes for more informtion out supporte prout versions. Verifying the SDDC Opertionl Stte After filover or filk omponents of the Clou Mngement Pltform, vrelize Opertions Mnger or vrelize Suite Lifeyle Mnger, verify whether they re operting oring to esign ojetives. For more informtion, see the VMwre Vlite Design Opertionl Verifition oumenttion. VMwre, In. 5

6 Filover n Filk Cheklist for the SDDC Mngement Applitions 1 Use the following heklist to verify tht you hve fulfille ll the requirements to initite isster reovery or plnne migrtion of the SDDC mngement pplitions n omplete the onfigurtion of these pplitions. Tle 1 1. Cheklist for Filover n Filk in Vlite SDDC Cheklist Tsks Ativtion n Assessment Verify tht the isster filover or filk is require: For exmple, n pplition filure might not e use to perform filover or filk, while n extene region outge is vli use. Pln for usiness ontinuity events suh s sheule uiling mintenne or the proility of nturl isster. Approvl Sumit the require oumenttion for pprovl to the following roles: IT mngement stff CTO Business users Other stkeholers Ativtion Logistis Verify tht ll the require filities n personnel re ville for the omplete urtion of the isster reovery proess. Verify tht Site Reovery Mnger is ville in the reovery region. Verify the replition sttus of the pplitions. Verify the stte of the NSX Ege in the reovery region: Verify tht the NSX Eges re ville. Verify tht the IP resses for VXLAN ke networks re orret. Verify tht the lo lner on the NSX Ege is orretly onfigure oring to the esign. Verify tht the firewll on the NSX Ege is orretly onfigure oring to the esign. VMwre, In. 6

7 Site Protetion n Reovery Tle 1 1. Cheklist for Filover n Filk in Vlite SDDC (Continue) Cheklist Tsks Communition, Initition, n Filover or Filk Vlition In se of plnne migrtion: Notify ll stkeholers for the plnne outge n the expete urtion of the mintenne winow. At the sheule time, initite the filover or filk proess. In se of isster reovery filover or filk: Before inititing filover or filk, notify ll stkeholers for the event. After ompleting filover or filk: Test pplitions vilility. Notify ll stkeholers for the omplete event. Multiple Avilility Zones Configurtion After Filover or Filk In se your environment onsists of multiple Avilility Zones, perform the following itionl onfigurtions for isster reovery filk. In se of isster reovery filk in whih Region B remins unville, the witness vsan ppline is no longer ville, whih might impt storge poliies. Upte the fore provisioning setting of the storge poliy to Yes (sets FTT=0 for ll newly provisione VMs) to llow for reovery of the vrelize omponents. Revert the storge poliy one the reovery is omplete. In se of plnne migrtion in whih Region A n Region B re still opertionl, you o not nee to upte the storge poliy s the witness vsan ppline remins ville. In se of isster reovery filover or filk, perform the following itionl onfigurtion: Upte the kup jos to inlue the pplitions tht re now running in Region B. For informtion out the onfigure kup jos, see the VMwre Vlite Design Bkup n Restore oumenttion. Configure the NSX Controllers n the UDLR Control VM to forwr events to vrelize Log Insight in the reovery region. Reiret the log t from the file over or file k pplitions to vrelize Log Insight in the reovery region. Complete post-reovery ssessment: Note whih items worke n whih i not work, n ientify improvements tht you n inlue in the reovery pln. VMwre, In. 7

8 Prerequisites for SDDC Filover 2 or Filk For fultless filover or filk to the reovery region, verify tht your environment fulfills the requirements for filover or filk ple SDDC onfigurtion. Tle 2 1. Filover or Filk Prerequisites Prerequisite Compute Vlue The ompute infrstruture in the reovery region must mirror the ompute infrstruture in the protete region. Storge The storge onfigurtion n pity in the reovery region must mirror the storge onfigurtion n pity in the protete region. Dtstore spe on the mngement po with suffiient pity must e ville for ll the virtul mhines of vrelize Automtion, vrelize Opertions Mnger, n vrelize Suite Lifeyle Mnger. Externl servies Provie the following servies in the reovery region. See Externl Servie Depenenies from the Plnning n Preprtion oumenttion. Ative Diretory DNS NTP SMTP Syslog Virtul infrstruture Verify tht ESXi, vcenter Server, n NSX for vsphere re mirrore in the protete region. Verify tht Site Reovery Mnger n vsphere Replition re eploye in oth regions n pire. Verify tht the NSX lo lner is eploye n onfigure in oth regions. Verify tht NSX Ege evies for North-South routing re eploye n onfigure in oth regions. Verify tht UDLR is eploye n onfigure. VMwre, In. 8

9 Filover of the SDDC 3 Mngement Applitions Configure n perform filover of the mngement pplitions in the SDDC from the protete region, Region A, to the reovery region, Region B. Filing over these pplitions mintins the opertionl stte of the SDDC. You fil over the following mngement pplitions: vrelize Suite Lifeyle Mnger Anlytis luster of vrelize Opertions Mnger The remote olletor noes of vrelize Opertions Mnger o not fil over. Deploy seprte pir of remote olletors in eh region in the pplition virtul network tht is eite to the region. Primry omponents of vrelize Automtion with emee vrelize Orhestrtor n vrelize Business vsphere Proxy Agents of vrelize Automtion n the vrelize Business t olletor o not fil over. Deploy seprte pir of gents n t olletor in eh region in n pplition isolte network. Tle 3 1. Support for Filover of the SDDC Mngement Applitions Mngement Component vrelize Suite Lifeyle Mnger vrelize Opertions Mnger nlytis noes vrelize Opertions Mnger remote olletors vsphere proxy gents vrelize Business t olletors vrelize Automtion ppline vrelize Business server Mirosoft SQL server IS Components Supports Filover Yes Yes No No No Yes Yes Yes Yes VMwre, In. 9

10 Site Protetion n Reovery 1 Configure Filover of the SDDC Mngement Applitions Prepre the mngement pplitions in the SDDC for filover or plnne migrtion. Replite pplition-speifi VMs y using vsphere Replition n rete reovery plns for them y using Site Reovery Mnger. 2 Test Filover of the SDDC Mngement Applitions You n ientify potentil prolems uring future filover y testing the reovery pln for the mngement pplitions in the SDDC. 3 Perform Plnne Migrtion of the SDDC Mngement Applitions After you hve suessfully onfigure n teste filover of the mngement pplitions, you n initite migrtion proess from Region A to Region B. The plnne migrtion of the SDDC mngement omponents keeps the SDDC opertionl, for exmple, when upgring the hrwre or hnging the network onfigurtion in Region A. 4 Perform Disster Reovery of the SDDC Mngement Applitions Prepre networking in Region B n perform filover of vrelize Automtion, vrelize Orhestrtor, vrelize Business, vrelize Opertions Mnger, n vrelize Suite Lifeyle Mnger to Region B if Region A eomes unville. Configure Filover of the SDDC Mngement Applitions Prepre the mngement pplitions in the SDDC for filover or plnne migrtion. Replite pplition-speifi VMs y using vsphere Replition n rete reovery plns for them y using Site Reovery Mnger. Configure Filover of the Opertions Mngement Applitions You replite the vrelize Suite Lifeyle Mnger VM n prepre vrelize Opertions Mnger for filover y repliting the VMs of the nlytis luster n rete reovery pln for them in Site Reovery Mnger. Configure Filover of the Clou Mngement Pltform Prepre vrelize Automtion, n vrelize Business for filover. Replite the virtul mhines of the primry vrelize Automtion omponents, n of vrelize Business Server. Crete reovery pln for these pplition omponents in Site Reovery Mnger. Configure Filover of the Opertions Mngement Applitions You replite the vrelize Suite Lifeyle Mnger VM n prepre vrelize Opertions Mnger for filover y repliting the VMs of the nlytis luster n rete reovery pln for them in Site Reovery Mnger. VMwre, In. 10

11 Site Protetion n Reovery Proeure 1 Replite the vrelize Opertions Mnger Anlytis VMs Configure the replition of the virtul mhines tht prtiipte in the nlytis luster of the vrelize Opertions Mnger to support filover of vrelize Opertions Mnger to Region B. Repli virtul mhines eome tive upon filover. After you onfigure the replition, you rete protetion group to protet the replite virtul mhines together. 2 Replite the vrelize Suite Lifeyle Mnger Appline in Region A To support filover to Region B, you onfigure the replition of the vrelize Suite Lifeyle Mnger virtul ppline. The repli virtul mhine eomes tive upon filover. After you onfigure the replition, you rete protetion group to protet the replite virtul mhine. 3 Crete Protetion Group for the Opertions Mngement Applitions After you onfigure the replition for the nlytis virtul mhines of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger, you rete protetion group n inlue the virtul mhines in the protetion group. Site Reovery Mnger protets the virtul mhines together. 4 Crete Reovery Pln for the Opertions Mngement Applitions After you rete protetion group for the virtul mhines of the vrelize Opertions Mnger nlytis luster n vrelize Suite Lifeyle Mnger, rete reovery pln. You then use this pln to onfigure epenenies etween the virtul mhines. 5 Customize the Reovery Pln for the Opertions Mngement Applitions After you rete the reovery pln, onfigure the strtup priority n the strtup n shutown options for the virtul mhines of the nlytis luster n vrelize Suite Lifeyle Mnger. The mster noe of vrelize Opertions Mnger must strt first fter filover. 6 Crete n Anti-Affinity Rule for vrelize Opertions Mnger in Region B Anti-ffinity rules o not persist ross regions uring reovery using Site Reovery Mnger. You must rete the nti-ffinity rules for the nlytis virtul mhines in Region B so tht the rules still pply fter filover of vrelize Opertions Mnger. Replite the vrelize Opertions Mnger Anlytis VMs Configure the replition of the virtul mhines tht prtiipte in the nlytis luster of the vrelize Opertions Mnger to support filover of vrelize Opertions Mnger to Region B. Repli virtul mhines eome tive upon filover. After you onfigure the replition, you rete protetion group to protet the replite virtul mhines together. VMwre, In. 11

12 Site Protetion n Reovery Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet VMs n Templtes. 3 Nvigte to the sfo01-m01f-vrops VM foler. Ojet vcenter Server Dt enter Foler Vlue sfo01m01v01.sfo01.rinpole.lol sfo01-m01 sfo01-m01f-vrops 4 On the sfo01-m01f-vrops pge, lik the VMs t, lik Virtul Mhines, n selet the virtul mhines of the nlytis luster. Nme vrops01svr01 vrops01svr01 Role Mster noe Mster repli noe vrops01svr01 Dt noe 1 5 Right-lik the selete VMs n selet All vsphere Replition Ations > Configure Replition. 6 In the ilog ox for onfiguring replition for ll ojets, lik Yes. The Configure Replition for 3 Virtul Mhines wizr opens. 7 On the Vlition pge of the Configurtion Replition ilog ox, wit until the vlition ompletes n lik Next. 8 On the Replition type pge, selet Replite to vcenter Server n lik Next. 9 On the Trget site pge, selet the lx01m01v01.lx01.rinpole.lol vcenter Server n lik Next. 10 On the Replition server pge, selet Auto-ssign vsphere Replition server n lik Next. VMwre, In. 12

13 Site Protetion n Reovery 11 On the Trget lotion pge, set the lotion on the vsan tstore in Region B to store replite VM files. Clik the Eit for ll link. In the Selet Trget Lotion ilog ox, from the tstore list in the upper prt of the ilog ox, selet the lx01-m01-vsn01 tstore s the tstore for replite files. In the Selet trget lotion pne, selet the lx01-m01-vsn01 root foler unerneth n lik OK. vsphere Replition retes foler in the root tstore foler for eh vrelize Opertions Mnger VM. Bk on the Trget lotion pge, lik Next. 12 On the Replition options pge, selet only the Enle network ompression for VR t hek ox n lik Next. Importnt Do not enle guest OS quiesing euse some of the vrelize Opertions Mnger tses o not support quiesing. Quiesing might result in luster filure euse virtul isks remin in frozen stte for too long. Compression requires extr resoures. Do not enle it if the hosts re over-utilize. 13 On the Reovery settings pge, enter the following settings n lik Next. Reovery Point Ojetive (RPO) Vlue 15 minutes Point in time instnes Enle Selete Keep 3 instnes per y for the lst 1 ys. 14 On the Rey to omplete pge, review the onfigurtion n lik Finish. 15 (Optionl) Monitor the replition progress. From the Home menu, selet Hosts n Clusters. Clik the sfo01m01v01.sfo01.rinpole.lol vcenter Server ojet n lik the Monitor t. Clik the vsphere Replition t n selet Outgoing Replitions to see etils out the replition of the nlytis noes of vrelize Opertions Mnger from this site. Replite the vrelize Suite Lifeyle Mnger Appline in Region A To support filover to Region B, you onfigure the replition of the vrelize Suite Lifeyle Mnger virtul ppline. The repli virtul mhine eomes tive upon filover. After you onfigure the replition, you rete protetion group to protet the replite virtul mhine. VMwre, In. 13

14 Site Protetion n Reovery Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik VMs n Templtes. 3 Nvigte to the sfo01-m01f-mgmt VM foler. Ojet vcenter Server Dt enter Foler Vlue sfo01m01v01.sfo01.rinpole.lol sfo01-m01 sfo01-m01f-mgmt 4 Right-lik vrslm01svr01, n selet All vsphere Replition Ations > Configure Replition. 5 On the Replition type pge, selet Replite to vcenter Server n lik Next. 6 On the Trget site pge, selet the lx01m01v01.lx01.rinpole.lol vcenter Server n lik Next. 7 On the Replition server pge, selet Auto-ssign vsphere Replition server n lik Next. 8 On the Trget lotion pge, set the lotion on the vsan tstore in Region B to store replite virtul mhine files. Clik the Eit link. In the Selet Trget Lotion ilog ox, from the tstore list in the upper prt of the ilog ox, selet lx01-m01-vsn01 s the tstore for replite files. In the Selet trget lotion pne, selet lx01-m01-vsn01 to selet the root foler of the tstore n lik OK. vsphere Replition retes foler in the root tstore foler the virtul mhine. On the Trget lotion pge, lik Next. 9 On the Replition options pge, uner Network Compresion only selet the Enle network ompression for VR t hek ox n lik Next. VMwre, In. 14

15 Site Protetion n Reovery 10 On the Reovery settings pge, enter the following settings n lik Next. Reovery Point Ojetive (RPO) Vlue 15 minutes Point in time instnes Enle Selete Keep 3 instnes per y for the lst 1 ys. 11 On the Rey to omplete pge, review the onfigurtion n lik Finish. Replition onfigurtion for the virtul mhines from the opertions mngement pltform strts. 12 (Optionl) Monitor the replition progress. From the Home menu of the vsphere We Client, selet Hosts n Clusters. Clik the sfo01m01v01.sfo01.rinpole.lol vcenter Server ojet n lik the Monitor t. Clik the vsphere Replition t n selet Outgoing Replitions to see etils for the replition of the virtul mhines of the opertions mngement lyer from this site. Crete Protetion Group for the Opertions MngementApplitions After you onfigure the replition for the nlytis virtul mhines of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger, you rete protetion group n inlue the virtul mhines in the protetion group. Site Reovery Mnger protets the virtul mhines together. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n selet the sfo01m01v01.sfo01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, reuthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Reuthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Protetion Groups t n lik Crete Protetion Group. The Crete Protetion Group wizr ppers. VMwre, In. 15

16 Site Protetion n Reovery 6 On the Nme n lotion pge, onfigure the following settings n lik Next. Nme Desription Site pir Vlue SDDC Opertions Mngement PG Protetion Group for vrelize Opertions Mnger Cluster n vrelize Suite Lifeyle Mnger sfo01m01v01.sfo01.rinpole.lol - lx01m01v01.lx01.rinpole.lol 7 On the Protetion group type pge, onfigure the following settings n lik Next. Diretion of protetion Protetion group type Vlue sfo01m01v01.sfo01.rinpole.lol -> lx01m01v01.lx01.rinpole.lol Iniviul VMs 8 On the Virtul mhines pge, selet the vrelize Opertions Mnger nlytis luster virtul mhines n vrelize Suite Lifeyle Mnger ppline from the list of replite virtul mhines n lik Next. Component Anlytis luster mster noe Anlytis luster mster repli noe Anlytis luster t noe vrelize Suite Lifeyle Mnger Virtul Mhine vrops01svr01 vrops01svr01 vrops01svr01 vrslm01svr01 9 On the Rey to omplete pge, review the protetion group settings n lik Finish. The SDDC Opertions Mngement PG protetion group ppers in the list of protetion groups in Site Reovery Mnger. You use it to ssign reovery pln for the nlytis n vrelize Suite Lifeyle Mnger virtul mhines. Crete Reovery Pln for the Opertions MngementApplitions After you rete protetion group for the virtul mhines of the vrelize Opertions Mnger nlytis luster n vrelize Suite Lifeyle Mnger, rete reovery pln. You then use this pln to onfigure epenenies etween the virtul mhines. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor VMwre, In. 16

17 Site Protetion n Reovery 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the Crete Reovery Pln ion. The Crete Reovery Pln wizr ppers. 5 On the Nme n Lotion pge, onfigure the following settings n lik Next. Nme Desription Site pir Vlue SDDC Opertions Mngement RP Reovery Pln for vrelize Opertions Mnger Cluster n vrelize Suite Lifeyle Mnger sfo01m01v01.sfo01.rinpole.lol - lx01m01v01.lx01.rinpole.lol 6 On the Reovery Site pge, selet lx01m01v01.lx01.rinpole.lol s the reovery site n lik Next. 7 On the Protetion groups pge, selet the protetion group for the reovery pln n lik Next. Group type Protetion group Vlue VM protetion groups SDDC Opertions Mngement PG 8 On the Test networks pge, leve the efult vlues n lik Next. The efult option retes n isolte test network. 9 On the Rey to omplete pge, lik Finish. The SDDC Opertions Mngement RP reovery pln ppers in the list of ville reovery plns in Site Reovery Mnger. Customize the Reovery Pln for the Opertions MngementApplitions After you rete the reovery pln, onfigure the strtup priority n the strtup n shutown options for the virtul mhines of the nlytis luster n vrelize Suite Lifeyle Mnger. The mster noe of vrelize Opertions Mnger must strt first fter filover. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor VMwre, In. 17

18 Site Protetion n Reovery 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 5 Chnge the strtup priority of the virtul mhine of the mster noe. On the reovery pln pge, lik the Monitor t n lik the Reovery Steps t. Uner Power on priority 3 VMs, right-lik vrops01svr01 n selet All Priority Ations > 1 > (Highest). In the Chnge Priority ilog ox, lik Yes to onfirm. 6 Configure strtup n shutown options for the mster noe. On the SDDC Opertions Mngement RP pge, right-lik vrops01svr01 n selet Configure Reovery. In the VM Reovery Properties ilog ox, expn Shutown Ation n inrese the Shutown guest OS efore power off timeout to 10 minutes. Expn Strtup Ation, inrese the Wit for VMwre tools timeout to 10 minutes, n lik OK. 7 Repet Step 5 n Step 6 for the other virtul mhines. Virtul Mhine Strtup Priority Orer Upte Timeout Vlues for Shutown n Strtup? vrops01svr01 2 No vrops01svr01 3 Yes vrslm01svr01 4 No Crete n Anti-Affinity Rule for vrelize Opertions Mnger in Region B Anti-ffinity rules o not persist ross regions uring reovery using Site Reovery Mnger. You must rete the nti-ffinity rules for the nlytis virtul mhines in Region B so tht the rules still pply fter filover of vrelize Opertions Mnger. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor VMwre, In. 18

19 Site Protetion n Reovery 2 From the Home menu of the vsphere We Client, selet Hosts n Clusters n nvigte to the lx01m01v01.lx01.rinpole.lol vcenter Server ojet. 3 Expn the lx01m01v01.lx01.rinpole.lol > lx01-m01 tree n lik lx01-m01-mgmt01. 4 Clik the Configure t, uner Configurtion, selet VM/Host Rules. 5 In the VM/Host Rules list, lik A to rete n nti-ffinity rule. 6 In the Crete VM/Host Rule ilog ox, n nti-ffinity rule for the VMs of the mster, mster repli, n t noes, n lik OK. Nme Enle Rule Type Memers Vlue nti-ffinity-rule-vropsm Selete Seprte Virtul Mhines vrops01svr01.rinpole.lol vrops01svr01.rinpole.lol vrops01svr01.rinpole.lol Configure Filover of the Clou Mngement Pltform Prepre vrelize Automtion, n vrelize Business for filover. Replite the virtul mhines of the primry vrelize Automtion omponents, n of vrelize Business Server. Crete reovery pln for these pplition omponents in Site Reovery Mnger. Proeure 1 Replite the Primry VMs of vrelize Automtion n vrelize Business Тo support filover to Region B, enle the replition of the virtul mhines tht onstitute the primry funtionlity of the Clou Mngement Pltform. After you onfigure the replition, you rete protetion group to protet the replite virtul mhines. 2 Crete Protetion Group for the Clou Mngement Pltform After you onfigure the replition for the Clou Mngement Pltform VMs, rete n onfigure eite protetion group so tht Site Reovery Mnger protets them together. 3 Crete Reovery Pln for the Clou Mngement Pltform After you rete protetion group for the lou mngement pltform VMs, you rete reovery pln. Use this pln to onfigure epenenies etween the virtul mhines. 4 Customize the Reovery Pln for the Clou Mngement Pltform After you rete the reovery pln for the Clou Mngement Pltform VMs, onfigure the strtup priority, n the strtup n shutown options for the virtul mhines. 5 Crete Anti-Affinity Rules for vrelize Automtion in Region B Anti-ffinity rules o not persist ross regions uring reovery using Site Reovery Mnger. In Region B, you must rete the nti-ffinity rules for the omponents of the Clou Mngement Pltform tht re file over from Region A so tht the rules pply fter filover. VMwre, In. 19

20 Site Protetion n Reovery 6 Crete VM Groups to Define the Strtup Orer of the Clou Mngement Pltform in Region B VM groups llow you to efine the strtup orer of virtul mhines. The strtup orer you efine ensures tht vsphere HA powers on virtul mhines in the orret orer. In Region B, rete the VM groups efining the strtup orer of the Clou Mngement Pltform VMs tht re file over from Region A. Replite the Primry VMs of vrelize Automtion n vrelize Business Тo support filover to Region B, enle the replition of the virtul mhines tht onstitute the primry funtionlity of the Clou Mngement Pltform. After you onfigure the replition, you rete protetion group to protet the replite virtul mhines. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik VMs n Templtes. 3 Nvigte to the sfo01-m01f-vr VM foler. Ojet vcenter Server Dt enter Foler Vlue sfo01m01v01.sfo01.rinpole.lol sfo01-m01 sfo01-m01f-vr 4 On the sfo01-m01f-vr pge, lik the VMs t, lik Virtul Mhines, n selet the virtul mhines of vrelize Automtion n vrelize Business Server. vrelize Automtion Component IS Mnger Servie n DEM Orhestrtor IS Mnger Servie n DEM Orhestrtor IS We Server IS We Server Mirosoft SQL Server vrelize Automtion Appline vrelize Automtion Appline vrelize Automtion Appline VM Nme vr01ims01 vr01ims01 vr01iws01 vr01iws01 vr01mssql01 vr01svr01 vr01svr01 vr01svr01 VMwre, In. 20

21 Site Protetion n Reovery vrelize Automtion Component vrelize Automtion DEM Worker vrelize Automtion DEM Worker vrelize Business Server VM Nme vr01em01 vr01em01 vr01svr01 5 Right-lik the VM seletion n selet All vsphere Replition Ations > Configure Replition. 6 In the ilog ox out performing replition for ll ojets, lik Yes. The Configure Replition for 11 Virtul Mhines wizr opens. 7 On the Vlition pge, wit until the proess ompletes suessfully n lik Next. 8 On the Replition type pge, selet Replite to vcenter Server n lik Next. 9 On the Trget site pge, selet the lx01m01v01.lx01.rinpole.lol vcenter Server n lik Next. 10 On the Replition server pge, selet Auto-ssign vsphere Replition server n lik Next. 11 On the Trget lotion pge, set the lotion on the vsan tstore in Region B to store replite VM files. Clik the Eit for ll link. In the Selet Trget Lotion ilog ox, from the tstore list in the upper prt of the ilog ox, selet lx01-m01-vsn01 s the tstore for replite files. In the Selet trget lotion pne, selet lx01-m01-vsn01 to selet the root foler of the tstore n lik OK. vsphere Replition retes foler in the root tstore foler for eh Clou Mngement VM. On the Trget Lotion pge, lik Next. 12 On the Replition options pge, selet only the Enle network ompression for VR t hek ox n lik Next. Importnt Do not enle guest OS quiesing euse some of the vrelize Automtion n vrelize Orhestrtor tse o not support quiesing. Quiesing might result in luster filure euse virtul isks remin in frozen stte for too long. Compression requires extr resoures. Do not enle it if the hosts re over-utilize. 13 On the Reovery settings pge, enter the following settings n lik Next. Reovery Point Ojetive (RPO) Vlue 15 minutes Point in time instnes Enle Selete Keep 3 instnes per y for the lst 1 ys. VMwre, In. 21

22 Site Protetion n Reovery 14 On the Rey to omplete pge, review the onfigurtion n lik Finish. Replition onfigurtion for the virtul mhines from the lou mngement pltform strts. 15 (Optionl) Monitor the replition progress. From the Home menu of the vsphere We Client, selet Hosts n Clusters. Clik the sfo01m01v01.sfo01.rinpole.lol vcenter Server ojet n lik the Monitor t. Clik the vsphere Replition t, n selet Outgoing Replitions to see etils out the replition of the virtul mhines of the Clou Mngement Pltform from this site. Crete Protetion Group for the Clou Mngement Pltform After you onfigure the replition for the Clou Mngement Pltform VMs, rete n onfigure eite protetion group so tht Site Reovery Mnger protets them together. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n selet the sfo01m01v01.sfo01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, reuthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Reuthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Protetion Groups t n lik Crete Protetion Group. The Crete Protetion Group wizr ppers. 6 On the Nme n lotion pge, onfigure the following settings n lik Next. Nme Desription Site pir Vlue SDDC Clou Mngement PG Protetion Group for vrelize Automtion n vrelize Business sfo01m01v01.sfo01.rinpole.lol - lx01m01v01.lx01.rinpole.lol VMwre, In. 22

23 Site Protetion n Reovery 7 On the Protetion group type pge, onfigure the following settings n lik Next. Diretion of protetion Protetion group type Vlue sfo01m01v01.sfo01.rinpole.lol -> lx01m01v01.lx01.rinpole.lol Iniviul VMs (vsphere Replition) 8 On the Virtul mhines pge, selet the virtul mhines of vrelize Automtion n the vrelize Business Server from the list of virtul mhines replite y using vsphere Replition, n lik Next. Component vrelize Automtion IS Mngers vrelize Automtion IS We Servers vrelize Automtion Dtse vrelize Automtion Virtul Applines vrelize Automtion IS DEM Workers vrelize Business for Clou Server Virtul Mhine vr01ims01 vr01ims01 vr01iws01 vr01iws01 vr01mssql01 vr01svr01 vr01svr01 vr01svr01 vr01em01 vr01em01 vr01svr01 9 On the Rey to omplete pge, review the protetion group settings n lik Finish. The SDDC Clou Mngement PG protetion group ppers in the list of protetion groups for Site Reovery Mnger. Crete Reovery Pln for the Clou Mngement Pltform After you rete protetion group for the lou mngement pltform VMs, you rete reovery pln. Use this pln to onfigure epenenies etween the virtul mhines. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. VMwre, In. 23

24 Site Protetion n Reovery 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the Crete Reovery Pln ion. The Crete Reovery Pln wizr ppers. 5 On the Nme n lotion pge, onfigure the following settings n lik Next. Nme Desription Site pir Vlue SDDC Clou Mngement RP Reovery Pln for vrelize Automtion n vrelize Business sfo01m01v01.sfo01.rinpole.lol - lx01m01v01.lx01.rinpole.lol 6 On the Reovery Site pge, selet lx01m01v01.lx01.rinpole.lol s the reovery site n lik Next. 7 On the Protetion groups pge, selet the protetion group for the reovery pln n lik Next. Group type Protetion group Vlue VM protetion groups SDDC Clou Mngement PG 8 On the Test networks pge, leve the efult vlues n lik Next. The efult option utomtilly retes n isolte test network. 9 On the Rey to omplete pge, lik Finish. The SDDC Clou Mngement RP reovery pln ppers in the list of ville reovery plns in Site Reovery Mnger. Customize the Reovery Pln for the Clou Mngement Pltform After you rete the reovery pln for the Clou Mngement Pltform VMs, onfigure the strtup priority, n the strtup n shutown options for the virtul mhines. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. VMwre, In. 24

25 Site Protetion n Reovery 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Relte Ojets t n lik Virtul Mhines. 6 Chnge the priority of the vr01mssql01 VM. On the Virtul Mhines t, right-lik vr01mssql01 n selet All Priority Ations > 1 (Highest). In the Chnge Priority ilog ox, lik Yes to onfirm. 7 Repet the previous step to reonfigure the priorities of the following VMs. VM Nme Priority vr01svr01 2 vr01svr01 2 vr01svr01 2 vr01iws01 3 vr01iws01 3 vr01ims01 4 vr01ims01 4 vr01em01 5 vr01em01 5 vr01svr Configure epenenies etween the virtul mhines tht hve the vra Server role. Right-lik the vr01svr01 virtul mhine in the reovery pln n selet Configure Reovery. In the VM Reovery Properties ilog ox, expn the VM Depenenies setion n lik Configure. Selet vr01svr01 n lik OK. Clik OK. 9 Configure epenenies etween the virtul mhines tht hve the vra Repli Server role. Right-lik the vr01svr01 virtul mhine in the reovery pln n selet Configure Reovery. In the VM Reovery Properties ilog ox, expn the VM Depenenies setion n lik Configure. VMwre, In. 25

26 Site Protetion n Reovery Selet vr01svr01 n lik OK. Clik OK. 10 Configure itionl strtup ely for the primry vra Server. Right-lik the vr01svr01.rinpole.lol virtul mhine in the reovery pln n selet Configure Reovery. In the VM Reovery Properties ilog ox, expn the Strtup Ation setion, selet Aitionl Dely, n set Dely to 5 minutes. Clik OK. 11 Repet the step on the vr01iws01 n vr01ims01 virtul mhines to onfigure itionl strtup ely. VM nme Aitionl ely Vlue vr01iws01, vr01ims01 5 minutes 12 Configure epenenies etween the virtul mhines tht hve the IS We Server role n itionl strtup ely for the seon IS We Server. e Right-lik the vr01iws01 virtul mhine in the reovery pln n selet Configure Reovery. In the VM Reovery Properties ilog ox, expn the VM Depenenies setion n lik Configure. Selet vr01iws01 n lik OK. In the VM Reovery Properties ilog ox, expn the Strtup Ation setion, selet Aitionl Dely, n set Dely to 5 minutes. Clik OK. 13 Repet the step on the vr01ims01 virtul mhine to onfigure epenenies n itionl strtup ely fter filover for the IS Mnger Servie. VM nme VM epenenies Aitionl ely Vlue vr01ims01 vr01ims01 5 minutes The Reovery Pln hs the following orer: Tle 3 2. Reovery Orer of the Clou Mngement Pltform Priority VM Nme Depeneny Aitionl Strtup Dely 1 vr01mssql vr01svr01-5 VMwre, In. 26

27 Site Protetion n Reovery Tle 3 2. Reovery Orer of the Clou Mngement Pltform (Continue) Priority VM Nme Depeneny Aitionl Strtup Dely 2 vr01svr01 vr01svr01-2 vr01svr01 vr01svr01-3 vr01iws vr01iws01 vr01iws vr01ims vr01ims01 vr01ims vr01em vr01em vr01svr Crete Anti-Affinity Rules for vrelize Automtion in Region B Anti-ffinity rules o not persist ross regions uring reovery using Site Reovery Mnger. In Region B, you must rete the nti-ffinity rules for the omponents of the Clou Mngement Pltform tht re file over from Region A so tht the rules pply fter filover. Tle 3 3. Anti-Affinity Rules for the Clou Mngement Pltform Nme Type Memers nti-ffinity-rule-vr-svr Seprte Virtul Mhines vr01svr01, vr01svr01, vr01svr01 nti-ffinity-rule-vr-em Seprte Virtul Mhines vr01em01, vr01em01 nti-ffinity-rule-vr-ims Seprte Virtul Mhines vr01ims01, vr01ims01 nti-ffinity-rule-vr-iws Seprte Virtul Mhines vr01iws01, vr01iws01 Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Hosts n Clusters n nvigte to the lx01m01v01.lx01.rinpole.lol vcenter Server ojet. 3 Expn the lx01m01v01.lx01.rinpole.lol>lx01-m01 tree n lik the lx01-m01- mgmt01 luster. 4 Clik the Configure t, n uner Configurtion, selet VM/Host Rules. VMwre, In. 27

28 Site Protetion n Reovery 5 Uner VM/Host Rules, lik A to rete virtul mhine nti-ffinity rule. 6 In the Crete VM/Host Rule ilog ox, the first rule for the vrelize Automtion Applines, lik OK, n lik OK. Nme Enle rule Type Memers Vlue nti-ffinity-rule-vr-svr Selete Seprte Virtul Mhines vr01svr01 vr01svr01 vr01svr01 7 Repet the proeure to onfigure the remining nti-ffinity rules. Crete VM Groups to Define the Strtup Orer of the Clou Mngement Pltform in Region B VM groups llow you to efine the strtup orer of virtul mhines. The strtup orer you efine ensures tht vsphere HA powers on virtul mhines in the orret orer. In Region B, rete the VM groups efining the strtup orer of the Clou Mngement Pltform VMs tht re file over from Region A. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Host n Clusters n expn the lx01m01v01.lx01.rinpole.lol tree. 3 Crete VM Group for the vrelize Automtion IS Dtse. Selet the lx01-m01-mgmt01 luster n lik the Configure t. Clik VM/Host Groups n on the VM/Host Groups pge, lik the A utton. In the Crete VM/Host Group ilog ox, enter vrelize Automtion IS Dtse in the Nme text ox, selet VM Group from the Type rop-own menu, n lik the A utton. In the A VM/Host Group Memer ilog ox, selet vr01mssql01, lik OK, n lik OK. VMwre, In. 28

29 Site Protetion n Reovery 4 Repet Step 3 to rete the following VM/Host groups. VM/Host Group Nme vrelize Automtion Virtul Applines VM/Host Group Memer vr01svr01 vr01svr01 vr01svr01 vrelize Automtion IS We Servers vr01iws01 vr01iws01 vrelize Automtion IS Mngers vr01ims01 vr01ims01 vrelize Automtion IS DEM Workers vr01em01 vr01em01 vrelize Automtion IS Proxy Agents sfo01is01 sfo01is01 vrelize Business for Clou Servers vrelize Business for Clou Dt Colletors vr01svr01 sfo01vr01 5 Crete rule to power on the vrelize Automtion tse efore vrelize Automtion virtul pplines. e Selet the lx01-m01-mgmt01 luster n lik the Configure t. Clik VM/Host Rules n on the VM/Host Rules pge, lik the A utton. In the Crete VM/Host Rule ilog ox, enter SDDC Clou Mngement Pltform 01 in the Nme text ox, ensure the Enle Rule hek ox is selete, n selet Virtul Mhines to Virtul Mhines from the Type rop-own menu. Selet vrelize Automtion IS Dtse from the First restrt VMs in VM group rop-own menu. Selet vrelize Automtion Virtul Applines from the Then restrt VMs in VM group ropown menu, n lik OK. 6 Repet Step 5 to rete the following VM/Host rules for the orret restrt orer of the Clou Mngement Pltform. VM/Host Rule Nme First Restrt VMs in VM Group Then Restrt VMs in VM Group SDDC Clou Mngement Pltform 02 SDDC Clou Mngement Pltform 03 vrelize Automtion Virtul Applines vrelize Automtion IS We Servers vrelize Automtion IS We Servers vrelize Automtion IS Mngers SDDC Clou Mngement Pltform 04 vrelize Automtion IS Mngers vrelize Automtion IS DEM Workers SDDC Clou Mngement Pltform 05 vrelize Automtion IS Mngers vrelize Automtion IS Proxy Agents VMwre, In. 29

30 Site Protetion n Reovery VM/Host Rule Nme First Restrt VMs in VM Group Then Restrt VMs in VM Group SDDC Clou Mngement Pltform 06 vrelize Automtion IS Mngers vrelize Business for Clou Servers SDDC Clou Mngement Pltform 07 vrelize Business for Clou Servers vrelize Business for Clou Dt Colletors Test Filover of the SDDC Mngement Applitions You n ientify potentil prolems uring future filover y testing the reovery pln for the mngement pplitions in the SDDC. Test Filover of the Opertions Mngement Applitions Vlite the onfigurtion y testing the reovery pln for vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger. Test Filover of the Clou Mngement Pltform Vlite the onfigurtion y testing the reovery pln for vrelize Automtion n vrelize Business. Test Filover of the Opertions MngementApplitions Vlite the onfigurtion y testing the reovery pln for vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger. Site Reovery Mnger runs the nlytis virtul mhines n vrelize Suite Lifeyle Mnger on the test network n on temporry snpshot of replite t in Region B. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. VMwre, In. 30

31 Site Protetion n Reovery 5 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 6 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 7 Clik the Test Reovery Pln ion to run test reovery. The Test wizr ppers. 8 On the Confirmtion options pge, leve the Replite reent hnges to reovery site hek ox selete n lik Next. 9 On the Rey to omplete pge, lik Finish to strt the test reovery. Test filover strts. You n follow the progress on the Reovery Steps pge. 10 After the test reovery is omplete, lik the Clenup Reovery Pln ion to len up ll the rete test VMs. 11 On the Confirmtion options pge of the Clenup wizr, lik Next. 12 On the Rey to omplete pge, lik Finish to strt the len-up proess. After the len-up proess finishes, mke sure tht Pln sttus shows Rey stte. Test Filover of the Clou Mngement Pltform Vlite the onfigurtion y testing the reovery pln for vrelize Automtion n vrelize Business. Site Reovery Mnger runs the vrelize Automtion n vrelize Business virtul mhines on the test network n on temporry snpshot of replite t in Region B. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. VMwre, In. 31

32 Site Protetion n Reovery 5 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 6 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 7 Clik the Test Reovery Pln ion to run test reovery. The Test wizr ppers. 8 On the Confirmtion options pge, leve the Replite reent hnges to reovery site hek ox selete n lik Next. 9 On the Rey to omplete pge, lik Finish to strt the test reovery. Test filover strts. You n follow the progress on the Reovery Steps pge. Note Beuse reovere virtul mhines re using the test network, VMwre Tools in the vr01svr01, vr01svr01, n vr01svr01 virtul mhines might not eome online within the efult timeout. In the reovery pln, inrese the strtup ely for VMwre Tools for these virtul mhines to omplete the test. 10 After the test reovery is omplete, lik the Clenup Reovery Pln ion to len up ll the rete test VMs. 11 On the Confirmtion options pge of the Clenup wizr, lik Next. 12 On the Rey to omplete pge, lik Finish to strt the len-up proess. After the len-up proess finishes, mke sure tht Pln sttus shows Rey stte. Perform Plnne Migrtion of the SDDC Mngement Applitions After you hve suessfully onfigure n teste filover of the mngement pplitions, you n initite migrtion proess from Region A to Region B. The plnne migrtion of the SDDC mngement omponents keeps the SDDC opertionl, for exmple, when upgring the hrwre or hnging the network onfigurtion in Region A. Initite Plnne Migrtion of the Opertions Mngement Applitions You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of the nlytis luster of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger from Region A to Region B. You n lso run reovery pln uner unplnne irumstnes in se Region A suffers n unforeseen event tht results in t loss. Initite Plnne Migrtion of the Clou Mngement Pltform You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of vrelize Automtion n vrelize Business from Region A to Region B. You n lso run reovery pln uner unplnne irumstnes in se Region A suffers n unforeseen event tht results in t loss. VMwre, In. 32

33 Site Protetion n Reovery Initite Plnne Migrtion of the Opertions MngementApplitions You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of the nlytis luster of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger from Region A to Region B. You n lso run reovery pln uner unplnne irumstnes in se Region A suffers n unforeseen event tht results in t loss. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filover of the nlytis luster. The Reovery wizr ppers. 7 On the Confirmtion options pge, onfigure the following settings n lik Next. I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters. Reovery type Vlue Selete Plnne migrtion 8 To initite the filover of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger, lik Finish on the Rey to omplete pge. Wht to o next 1 Verify tht fter filover oth vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger re up n opertionl. See Verifition of vrelize Opertions Mnger n Verifition of vrelize Suite Lifeyle Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. VMwre, In. 33

34 Site Protetion n Reovery 2 Prepre vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger for filk y reproteting the virtul mhines of the nlytis luster n vrelize Suite Lifeyle Mnger in Site Reovery Mnger. See Reprotet the Opertions Mngement Applitions. Initite Plnne Migrtion of the Clou Mngement Pltform You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of vrelize Automtion n vrelize Business from Region A to Region B. You n lso run reovery pln uner unplnne irumstnes in se Region A suffers n unforeseen event tht results in t loss. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filover of the Clou Mngement Pltform. The Reovery wizr ppers. 7 On the Confirmtion options pge, onfigure the following settings n lik Next. I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters. Reovery type Vlue Selete Plnne migrtion 8 To initite the filover of the Clou Mngement Pltform, on the Rey to omplete pge lik Finish. VMwre, In. 34

35 Site Protetion n Reovery Wht to o next 1 Verify tht vrelize Automtion n vrelize Business VMs re up n opertionl. See Opertionl Verifition of the Clou Mngement Lyer in the VMwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Automtion n vrelize Business for filk y reproteting their VMs in Site Reovery Mnger. See Reprotet the Clou Mngement Pltform. Perform Disster Reovery of the SDDC Mngement Applitions Prepre networking in Region B n perform filover of vrelize Automtion, vrelize Orhestrtor, vrelize Business, vrelize Opertions Mnger, n vrelize Suite Lifeyle Mnger to Region B if Region A eomes unville. Proeure 1 Reonfigure the NSX Instne for the Mngement Cluster in Region B If Region A eomes unville, prepre the network lyer in Region B for filover of the mngement pplitions. Chnge the role of the NSX Mnger to primry, eploy the universl ontroller luster, n synhronize the universl ontroller luster onfigurtion. 2 Reover the Control VM of the Universl Distriute Logil Router in Region B In the event of site filure in Region A, ynmi routing in Region B might not e ville. Deploy Control VM for the universl istriute logil router sfo01m01ulr01 in Region B to reover ynmi routing in the environment. You then onfigure the reovere Control VM to provie ynmi routing for the SDDC mngement pplitions tht re file over. 3 Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region B To support ynmi routing in Region B efore you strt isster reovery from Region A, onfigure the universl istriute logil router sfo01m01ulr01 n NSX Eges lx01m01esg01 n lx01m01esg02. This onfigurtion ensures tht the mngement omponents of the SDDC ontinue to ommunite using optiml routes in fult-tolernt network. 4 Verify Estlishment of BGP for the Universl Distriute Logil Router in Region B Verify tht the UDLR for the mngement pplitions is suessfully peering, n tht BGP routing hs een estlishe in Region B. After you perform isster reovery, they n ontinue ommuniting to keep the SDDC opertionl. 5 Enle Network Connetivity for the NSX Lo Blner in Region B Enle the network onnetivity on lx01m01l01 lo lner to support high-vilility n istriute the network trffi lo for vrelize Opertions Mnger, vrelize Suite Lifeyle Mnger, n the Clou Mngement Pltform fter isster reovery to Region B. VMwre, In. 35

36 Site Protetion n Reovery 6 Initite Disster Reovery of the Opertions Mngement Applitions in Region B In the event of site filure in Region A, initite isster reovery of vrelize Suite Lifeyle Mnger n of vrelize Opertions Mnger to keep the monitoring funtionlity of the SDDC running. 7 Initite Disster Reovery of the Clou Mngement Pltform in Region B In the event of site filure in Region A, initite isster reovery of the vrelize Automtion n vrelize Business omponents to keep the worklo provisioning funtionlity of the SDDC ville. 8 Post-Filover Configurtion of the SDDC Mngement Applitions After filover of the Clou Mngement Pltform, vrelize Opertions Mnger, n vrelize Suite Lifeyle Mnger, you must perform itionl tsks to ensure tht the pplitions perform s expete. Reonfigure the NSX Instne for the Mngement Cluster in Region B If Region A eomes unville, prepre the network lyer in Region B for filover of the mngement pplitions. Chnge the role of the NSX Mnger to primry, eploy the universl ontroller luster, n synhronize the universl ontroller luster onfigurtion. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 Promote the NSX Mnger for the mngement luster in Region B to the primry role. You must first isonnet the NSX Mnger for the mngement luster in Region B from the Primry NSX Mnger in Region A. e From the Home menu, selet Networking & Seurity. In the Nvigtor pne, lik Instlltion n Upgre. On the Mngement t, lik NSX Mngers t n selet the instne. Clik the Ations menu n lik Disonnet from Primry NSX Mnger. In the Disonnet from Primry NSX Mnger ilog ox, lik Yes. The NSX Mnger gets the Trnsit role. VMwre, In. 36

37 Site Protetion n Reovery f g h On the NSX Mngers t, selet the instne gin. Clik Ations n selet Assign Primry Role. In the Assign Primry Role ilog ox, lik Yes. 3 Configure n IP pool for the new universl ontroller luster. In the Nvigtor pne, lik Groups n Tgs. Clik the IP Pools t n selet the instne. On the IP Pools t, lik + ADD. In the New IP Pool ilog ox, enter the following settings, n lik A. Nme Vlue lx01-mgmt01-nsx01 Gtewy Prefix Length 24 Primry DNS Seonry DNS DNS Suffix lx01.rinpole.lol IP Pool Rnge You enter the IP pool rnge y liking + ADD elow IP Pool Rnge. 4 Deploy the universl ontroller luster in Region B. In the Nvigtor pne, lik Instlltion n Upgre. On the Mngement t, uner NSX Controller noes, lik the A ion to eploy three NSX Controller noes with the sme onfigurtion. In the A Controller ilog ox, enter the following settings n lik Next. Vlue NSX Mnger Psswor Confirm Psswor mgmtnsx_ontrollers_psswor mgmtnsx_ontrollers_psswor You onfigure psswor only uring the eployment of the first ontroller. The other ontrollers use the sme psswor. VMwre, In. 37

38 Site Protetion n Reovery In the A Controller ilog ox, uner Deployment & Connetivity, enter the following settings n lik Finish. Vlue Nme lx01m01nsx01 for ontroller 1 lx01m01nsx02 for ontroller 2 lx01m01nsx03 for ontroller 3 Dt enter Cluster/Resoure Pool Dtstore Foler Connete To Selet IP Pool lx01-m01 lx01-m01-mgmt01 lx01-m01-vsn01 lx01-m01f-nsx lx01-m01-vs01-mngement lx01-mgmt01-nsx01 e After the Sttus of the ontroller noe hnges to Connete, eploy the remining two NSX Controller noes lx01m01nsx02 n lx01m01nsx03. Wit until the urrent eployment finishes efore you strt with the next ontroller. 5 Configure DRS ffinity rules for the eploye NSX Controller noes. From the Home menu of the vsphere We Client, selet Hosts n Clusters. Expn the lx01m01v01.lx01.rinpole.lol>lx01-m01 n lik the lx01-m01- mgmt01 luster. Clik the Configure t, uner Configurtion, lik VM/Host Rules, n lik A. In the Crete VM/Host Rule ilog ox, enter the following settings n lik OK. Nme Enle rule Type Vlue nti-ffinity-rule-nsx Selete Seprte Virtul Mhines Memers lx01m01nsx01 lx01m01nsx02 lx01m01nsx03 6 Synhronize the stte of the newly eploye ontrollers y using the Upte Controller Stte mehnism on the NSX Mnger. Upte Controller Stte pushes the urrent VXLAN n universl istriute logil router onfigurtion from NSX Mnger to the Controller luster. From the Home menu of the vsphere We Client, selet Networking & Seurity. In the Nvigtor pne, lik Instlltion n Upgre. On the Mngement t, uner NSX Mngers, selet the instne. VMwre, In. 38

39 Site Protetion n Reovery e From the Ations menu, selet Upte Controller Stte. In the Upte Controller Stte ilog ox, lik Yes. Reover the Control VM of the Universl Distriute Logil Router in Region B In the event of site filure in Region A, ynmi routing in Region B might not e ville. Deploy Control VM for the universl istriute logil router sfo01m01ulr01 in Region B to reover ynmi routing in the environment. You then onfigure the reovere Control VM to provie ynmi routing for the SDDC mngement pplitions tht re file over. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik Networking & Seurity. 3 In the Nvigtor pne, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik sfo01m01ulr01. 6 Reeploy the Control VM of the universl istriute logil router n enle HA. Clik the Mnge t n lik s. Selet Configurtion, uner Logil Router Applines lik the A ion. In the A NSX Ege Appline ilog ox, enter the following settings n lik OK. Dt enter Cluster/Resoure Pool Dtstore Vlue lx01-m01 lx01-m01-mgmt01 lx01-m01-vsn01 To eploy nother NSX Ege evie with the sme onfigurtion, lik the A ion n repet this step. VMwre, In. 39

40 Site Protetion n Reovery 7 Configure high vilility for the Control VM. On the Configurtion pge for sfo01m01ulr01, lik Chnge uner HA Configurtion, onfigure the following settings, n lik OK. HA Sttus Connete To Enle Logging Vlue Enle lx01-m01-vs01-mngement Selete In the Chnge HA onfigurtion ilog ox, lik Yes. 8 Configure the CLI Creentils for the Control VM. In the Nvigtor pne, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Right-lik sfo01m01ulr01 n selet Chnge CLI Creentils. In the Chnge CLI Creentils ilog ox, onfigure the following settings n lik OK. User Nme Psswor Enle SSH ess Vlue min ulr_min_psswor Selete Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region B To support ynmi routing in Region B efore you strt isster reovery from Region A, onfigure the universl istriute logil router sfo01m01ulr01 n NSX Eges lx01m01esg01 n lx01m01esg02. This onfigurtion ensures tht the mngement omponents of the SDDC ontinue to ommunite using optiml routes in fult-tolernt network. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Networking & Seurity. 3 In the Nvigtor pne, lik NSX Eges. VMwre, In. 40

41 Site Protetion n Reovery 4 Selet from the NSX Mnger rop-own menu. 5 Verify the routing onfigurtion for the universl istriute logil router. Doule-lik sfo01m01ulr01. Clik the Mnge t, lik Routing, n verify the following settings. Glol Configurtion > Routing Configurtion > ECMP Vlue Strte Glol Configurtion > Dynmi Routing Configurtion > Router ID On the left sie, selet BGP to verify the protool settings n onfigure BGP peering etween the UDLR evie n the NSX Ege evies for the ECMP-enle North/South routing in Region A. On the BGP pge, verify the following settings. Sttus Vlue Strte Lol AS Greful Restrt Strte Uner Neighors, selet whih represents the onnetion settings for the lx01m01esg01 neighor n lik the Eit ion. In the Eit Neighor ilog ox, hnge the Weight vlue to 60, enter the BGP psswor tht ws onfigure uring the initil setup of the UDLR, n lik OK. lx01m01esg01 Vlue lx01m01esg02 Vlue IP Aress Forwring Aress Protool Aress Remote AS Weight Keep Alive Time 1 1 Hol Down Time 3 3 Psswor BGP_psswor BGP_psswor e On the BGP pge, repet the steps for the neighor whih represents the lx01m01esg02 evie. Clik Pulish Chnges. VMwre, In. 41

42 Site Protetion n Reovery 7 On the left sie, selet Route Reistriution to verify reistriution sttus. Ctegory Vlue Route Reistriution Sttus Route Reistriution tle OSPF BGP Lerner From Prefix Ation Deselete Selete BGP Connete Any Permit 8 Reonfigure the routing n weight vlues of lx01m01esg01 n lx01m01esg02 eges. e f g h In the Nvigtor pne, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik lx01m01esg01 to open its onfigurtion interfe. Clik the Mnge t n lik the Routing t. On the left sie, selet BGP, selet the neighor uner Neighors, n lik the Eit ion. In the Eit Neighor ilog ox, hnge the Weight vlue to 60 n lik OK. Clik Pulish Chnges. Repet the steps for the lx01m01esg02 ege. Verify Estlishment of BGP for the Universl Distriute Logil Router in Region B Verify tht the UDLR for the mngement pplitions is suessfully peering, n tht BGP routing hs een estlishe in Region B. After you perform isster reovery, they n ontinue ommuniting to keep the SDDC opertionl. Proeure 1 Log in to the UDLR virtul ppline y using Seure Shell (SSH) lient. Open n SSH onnetion to sfo01m01ulr01. Log in using the following reentils. User nme Psswor Vlue min ulr_min_psswor VMwre, In. 42

43 Site Protetion n Reovery 2 Verify tht the UDLR n peer with the ECMP-enle NSX Ege servies gtewys. Run the show ip gp neighors ommn to isply informtion out the BGP n TCP onnetions to the UDLR neighors. In the ommn output, verify tht the BGP stte is Estlishe, up for (lx01m01esg01) n (lx01m01esg02). 3 Verify tht the UDLR reeives routes y using BGP n tht multiple routes re estlishe to BGPlerne networks. Run the show ip route ommn. In the ommn output, verify tht the routes to the networks re mrke with the letter B n severl routes to eh jent network exist. The letter B in front of eh route inites tht this route is estlishe over BGP. Enle Network Connetivity for the NSX Lo Blner in Region B Enle the network onnetivity on lx01m01l01 lo lner to support high-vilility n istriute the network trffi lo for vrelize Opertions Mnger, vrelize Suite Lifeyle Mnger, n the Clou Mngement Pltform fter isster reovery to Region B. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Networking & Seurity. 3 In the Nvigtor pne, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik the lx01m01l01 evie. 6 Clik the Mnge t n lik the s t. 7 Clik Interfes, selet the OneArmLB vnic, n lik Eit. 8 In the Eit NSX Ege Interfe ilog ox, set Connetivity Sttus to Connete n lik OK. VMwre, In. 43

44 Site Protetion n Reovery Initite Disster Reovery ofthe Opertions MngementApplitions in Region B In the event of site filure in Region A, initite isster reovery of vrelize Suite Lifeyle Mnger n of vrelize Opertions Mnger to keep the monitoring funtionlity of the SDDC running. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filover of the nlytis luster of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger. The Reovery wizr ppers. 7 On the Confirmtion options pge of the Reovery wizr, onfigure the following settings n lik Next. I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters. Reovery type Vlue Selete Disster reovery 8 Оn the Rey to omplete pge, lik Finish to initite the filover of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger. Site Reovery Mnger runs the reovery pln. After isster reovery, the Pln sttus of the reovery pln hnges to Disster reovery omplete. VMwre, In. 44

45 Site Protetion n Reovery Wht to o next Verify tht vrelize Suite Lifeyle Mnger is up n opertes orretly fter filover. See Verifition of vrelize Suite Lifeyle Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. Verify tht vrelize Opertions Mnger is up n opertes orretly fter filover. See Verifition of vrelize Opertions Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. Perform the proeures in hpter Post-Filover Configurtion of the SDDC Mngement Applitions. Prepre vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger for filk y reproteting the virtul mhines of the nlytis luster n the vrelize Suite Lifeyle Mnger in Site Reovery Mnger. See Reprotet the Opertions Mngement Applitions. Initite Disster Reovery of the Clou Mngement Pltform in Region B In the event of site filure in Region A, initite isster reovery of the vrelize Automtion n vrelize Business omponents to keep the worklo provisioning funtionlity of the SDDC ville. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filover of the lou mngement pltform. VMwre, In. 45

46 Site Protetion n Reovery 7 On the Confirmtion options pge of the Reovery wizr, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Disster reovery 8 On the Rey to omplete pge, lik Finish to initite the filover of the lou mngement pltform. Site Reovery Mnger runs the reovery pln. After isster reovery, the Pln sttus of the reovery pln hnges to Disster reovery omplete. Wht to o next Verify tht vrelize Automtion n vrelize Business VMs re up n opertionl fter filover. See Opertionl Verifition of the Clou Mngement Lyer in the VMwre Vlite Design Opertionl Verifition oumenttion. Perform the proeures in hpter Post-Filover Configurtion of the SDDC Mngement Applitions. Prepre vrelize Automtion n vrelize Business for filk y reproteting their virtul mhines in Site Reovery Mnger. See Reprotet the Clou Mngement Pltform. Post-Filover Configurtion of the SDDC Mngement Applitions After filover of the Clou Mngement Pltform, vrelize Opertions Mnger, n vrelize Suite Lifeyle Mnger, you must perform itionl tsks to ensure tht the pplitions perform s expete. Proeure 1 Configure the NSX Controllers n UDLR Control VM to Forwr Events to vrelize Log Insight in Region B Configure the NSX Controllers n UDLR Control VM instnes for the mngement luster to forwr log informtion to vrelize Log Insight in Region B. Use the NSX REST API to onfigure the NSX Controllers. To enle log forwring, you n use REST lient, suh s the Postmn pplition for Google Chrome. 2 Upte the vrelize Log Insight Logging Aress After Filover After you fil over the mngement pplitions in the SDDC to Region B, upte the ress onfigure on the mngement pplitions for vrelize Log Insight. All mngement pplitions re still onfigure to sen logs to the vrelize Log Insight instne in Region A. VMwre, In. 46

47 Site Protetion n Reovery 3 Connet vrelize Opertions Mnger to vrelize Log Insight in Region B Reonfigure the vrelize Log Insight Apter to integrte vrelize Log Insight with vrelize Opertions Mnger in your environment. 4 Reonfigure the NSX Instne for the Mngement Cluster in Region A After Filover After you hve suessfully omplete filover of the mngement pplitions to Region B n you hve restore the Region A environment, you must perform itionl onfigurtions to voi onflits in the network lyer. These steps must e performe efore you reprotet the SDDC Mngement Applitions from Region B to Region A. 5 Connet vrelize Opertions Mnger to vrelize Log Insight in Region A After you hve suessfully omplete filover of the mngement pplitions to Region B n you hve restore the Region A environment, to ontinue log olletion from Region A, you reonfigure the vrelize Log Insight Apter to integrte vrelize Log Insight with vrelize Opertions Mnger. Configure the NSX Controllers n UDLR Control VM to Forwr Events to vrelize Log Insight in Region B Configure the NSX Controllers n UDLR Control VM instnes for the mngement luster to forwr log informtion to vrelize Log Insight in Region B. Use the NSX REST API to onfigure the NSX Controllers. To enle log forwring, you n use REST lient, suh s the Postmn pplition for Google Chrome. Proeure 1 Log in to the Winows host tht hs ess to your t enter. 2 In Chrome rowser, strt the Postmn pplition n log in. 3 Speify the request heers for requests to the NSX Mnger. On the Authoriztion t, onfigure the following uthoriztion settings n lik Upte Request. s Type User nme Psswor Vlue Bsi Auth min lx01m01nsx01_min_psswor The Authoriztion:Bsi XXX heer ppers in the Heers pne. On the Heers t, enter the following heer etils. Key Vlue Vlue Content-Type pplition/xml The Content-Type:pplition/xml heer ppers in the Heers pne. VMwre, In. 47

48 Site Protetion n Reovery 4 Contt the NSX Mnger to retrieve the IDs of the ssoite NSX Controllers. Selet GET from the rop-own menu tht ontins the HTTP request methos. In the URL text ox next to the selete metho, enter the following URL, n lik Sen. NSX Mnger NSX Mnger for the mngement luster URL The Postmn pplition sens query to the NSX Mnger out the instlle NSX ontrollers. After the NSX Mnger sens response k, lik the Boy t in the response pne. The response oy ontins root <ontrollers> XML element tht groups the etils out the three ontrollers tht form the ontroller luster. Within the <ontrollers> element, lote the <ontroller> element for eh ontroller n write own the ontent of the <i> element. Controller IDs hve the ontroller-i formt where i represents the sequene numer of the ontroller in the luster. VMwre, In. 48

49 Site Protetion n Reovery 5 For eh NSX Controller, sen request to onfigure vrelize Log Insight s remote syslog server. In the request pne t the top, selet POST from the rop-own menu tht ontins the HTTP request methos, n in the URL text ox, enter the following URL. Reple ontroller-id with the ontroller IDs you hve written own. NSX Mnger NSX Mnger for the mngement luster NSX Controller in the Controller Cluster NSX Controller 1 NSX Controller 2 NSX Controller 3 POST URL er-1/syslog er-2/syslog er-3/syslog In the Request pne, lik the Boy t, selet Rw, n using the rop-own menu, selet XML (Applition/XML). Pste the following request oy in the Boy text ox n lik Sen. <ontrollersyslogserver> <syslogserver> </syslogserver> <port>514</port> <protool>udp</protool> <level>info</level> </ontrollersyslogserver> Repet the steps for the other NSX Controllers in the mngement luster. VMwre, In. 49

50 Site Protetion n Reovery 6 Verify the syslog onfigurtion on eh NSX Controller. In the Request pne, from the Metho rop-own menu, selet GET, in the URL text ox, enter the ontroller-speifi syslog URL from the previous step, n lik the SEND utton. After the NSX Mnger sens response k, lik the Boy t uner Response. The response oy ontins root <ontrollersyslogserver> element, whih represents the settings for the remote syslog server on the NSX Controller. Verify tht the vlue of the <syslogserver> element is Repet the steps for the other NSX Controllers to verify the syslog onfigurtion. 7 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 8 Configure the newly eploye Control VM of the UDLR in Region B to forwr events to vrelize Log Insight in Region B. From the Home menu of the vsphere We Client, lik Networking & Seurity. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01ulr01 to open its onfigurtion interfe. VMwre, In. 50

51 Site Protetion n Reovery e f g On the NSX Ege evie pge, lik the Mnge t, lik s, n lik Configurtion. In the Detils pne, lik Chnge next to Syslog servers. In the Eit Syslog Servers Configurtion ilog ox, enter the following settings n lik OK. Vlue Syslog Server Protool UDP Upte the vrelize Log Insight Logging Aress After Filover After you fil over the mngement pplitions in the SDDC to Region B, upte the ress onfigure on the mngement pplitions for vrelize Log Insight. All mngement pplitions re still onfigure to sen logs to the vrelize Log Insight instne in Region A. You upte the DNS entry for sfo01vrli01.sfo01.rinpole.lol to point to the IP ress of lx01vrli01.lx01.rinpole.lol in Region B. Proeure 1 Log in to the DNS server 51rpl.rinpole.lol tht resies in Region B. 2 Open the Winows Strt menu, enter ns in the Serh text ox, n press Enter. The DNS Mnger ilog ox ppers. 3 In the DNS Mnger ilog ox, uner Forwr Lookup Zones, selet the sfo01.rinpole.lol omin y expning the tree n lote the sfo01vrli01 reor on the right sie. 4 Doule-lik the sfo01vrli01 reor, hnge the IP ress of the reor from to n lik OK. Fully qulifie omin nme (FQDN) Vlue sfo01vrli01.sfo01.rinpole.lol IP Aress Upte ssoite pointer (PTR) reor Selete Connet vrelize Opertions Mnger to vrelize Log Insight in Region B Reonfigure the vrelize Log Insight Apter to integrte vrelize Log Insight with vrelize Opertions Mnger in your environment. VMwre, In. 51

52 Site Protetion n Reovery Proeure 1 Log in to vrelize Opertions Mnger y using the ministrtion onsole. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue min vrops_min_psswor 2 On the min nvigtion r, lik Aministrtion. 3 In the left pne of vrelize Opertions Mnger, lik Solutions. 4 On the Solutions pge, selet VMwre vrelize Log Insight, n lik Configure. The Mnge Solution - VMwre vrelize Log Insight ilog ox ppers. 5 Uner Instne s, moify the settings for the onnetion to vrelize Log Insight. Enter the isply nme, esription, n the FQDN of the vrelize Log Insight instne. Disply Nme Desription Log Insight server Vlue Log Insight Apter - lx01vrli01 vrelize Log Insight for lx01 lx01vrli01.lx01.rinpole.lol 6 Expn the Avne s pne n selet the olletor group for the region from the Colletors/Groups rop-own menu. Colletors/Groups Vlue lx01-remote-olletors 7 Clik Test Connetion to vlite the onnetion to vrelize Log Insight n in the Info ilog ox lik OK. 8 Clik Sve s n in the Info ilog ox lik OK. 9 In the Mnge Solution - VMwre vrelize Log Insight ilog ox, lik Close. The vrelize Log Insight Apter is ville on the Solutions pge of the vrelize Opertions Mnger user interfe. The Colletion Stte of the pter is Colleting n the Colletion Sttus is Dt reeiving. VMwre, In. 52

53 Site Protetion n Reovery Reonfigure the NSX Instne for the Mngement Cluster in Region A After Filover After you hve suessfully omplete filover of the mngement pplitions to Region B n you hve restore the Region A environment, you must perform itionl onfigurtions to voi onflits in the network lyer. These steps must e performe efore you reprotet the SDDC Mngement Applitions from Region B to Region A. After the environment in Region A is restore n ll mngement omponents re opertionl in Region B, in Region A you emote the NSX Mnger to the seonry role, elete the universl ontroller luster, isle the lo lner, n perform itionl onfigurtion on the NSX Eges. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Networking & Seurity. 3 In the Nvigtor pne, lik Instlltion n Upgre. 4 On the Mngement t, lik NSX Mngers. Both NSX Mnger instnes n re ssigne with the primry role. 5 Fore the removl of the registere seonry NSX Mnger efore removing the primry role from the NSX Mnger in Region A. Selet the instne, n selet Ations > Remove Seonry NSX Mnger. Selet the Perform opertion even if the NSX mnger is inessile hek ox n lik Remove. 6 Demote the originl primry site NSX Mnger in Region A to the trnsit role. Selet the instne, lik Ations > Remove Primry Role. Clik Yes in the onfirmtion ilog ox. 7 Delete the NSX Controllers in the protete site. On the Mngement t, lik NSX Controller Noes. Selet the sfo01m01nsx01 noe n lik Delete. In the Delete Controller ilog ox, lik Delete. VMwre, In. 53

54 Site Protetion n Reovery e Repet the step to elete the remining two NSX Controller noes. Selet Proee to Fore Delete option when you elete the lst ontroller. 8 Delete the UDLR ege in the protete site. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Selet the sfo01m01ulr01 n lik Delete. In the Delete NSX Ege onfirmtion ilog ox, lik Yes. 9 Assign the NSX Mnger for the mngement luster in Region A the seonry role to the NSX Mnger in Region B. In the Nvigtor pne, lik Instlltion n Upgre. On the Mngement t, lik NSX Mngers, selet the primry instne. Selet Ations > A Seonry Mnger. In the A seonry Mnger ilog ox, enter the following settings n lik A. Vlue NSX Mnger User Nme Psswor Confirm Psswor min mgmtnsx_min_psswor mgmtnsx_min_psswor e In the Thumprint onfirmtion ilog ox, lik Aept. 10 Disle network onnetivity for the NSX lo lner in Region A. e f In the Nvigtor pne, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik the sfo01m01l01 evie. Clik the Mnge t n lik the s t. Clik Interfes, selet the OneArmLB vnic, n lik Eit. In the Eit NSX Ege Interfe ilog ox, selet Disonnete s Connetivity Sttus n lik OK. 11 Configure the routing on the universl istriute logil router in Region B. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01ulr01. Clik the Mnge t n lik Routing. VMwre, In. 54

55 Site Protetion n Reovery e f On the left, selet BGP. Selet the following NSX Ege evies, lik Eit, onfigure the following settings, n lik OK. sfo01m01esg01 Vlue sfo01m01esg02 Vlue IP Aress Forwring Aress Protool Aress Remote AS Weight Keep Alive Time 1 1 Hol Down Time 3 3 Psswor BGP_psswor BGP_psswor g h i j Clik Pulish Chnges. On the left, selet Stti Routes. On the Stti Routes pge, lik the existing stti route (Network: /24) n lik the Eit utton. In the Eit Stti Route ilog ox, upte the following vlues n lik OK. Vlue Network /24 Next Hop , Amin Distne 1 k Clik Pulish Chnges. 12 Reonfigure the weight vlue of the sfo01m01esg01 n sfo01m01esg02 eges. e f g h In the Nvigtor pne, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01esg01. Clik the Mnge t n lik Routing. On the left, selet BGP, selet the neighor, n lik Eit. In the Eit Neighor ilog ox, hnge the Weight vlue to 10 n lik OK. Clik Pulish Chnges. Repet the step for the sfo01m01esg02 ege. VMwre, In. 55

56 Site Protetion n Reovery 13 Verify tht the NSX Ege evies re suessfully peering, n tht BGP routing hs een estlishe. Log in to the sfo01m01esg01 NSX Ege evie using Seure Shell (SSH) lient with the following reentils. User nme Psswor Vlue min ege_min_psswor Run the show ip gp neighors ommn to isply informtion out the BGP onnetions to neighors. The BGP Stte isplys Estlishe UP if you hve suessfully peere with UDLR. Run the show ip route ommn to verify tht you re reeiving routes using BGP. Repet the step for the sfo01m01esg02 NSX Ege evie. 14 Chnge the DNS entry for sfo01vrli01.sfo01.rinpole.lol to point to its originl IP ress Open Remote Desktop Protool (RDP) onnetion n llog in to the DNS server 01rpl.rinpole.lol tht resies in Region A. Log in using the following reentils. Option User nme Psswor Desription Ative Diretory ministrtor _min_psswor e Open the Winows Strt menu, enter ns in the Serh text ox, n press Enter. In the DNS Mnger ilog ox, uner Forwr Lookup Zones, expn the tree n selet the sfo01.rinpole.lol omin. Doule-lik the sfo01vrli01 reor on the right, hnge the IP ress of the reor from to , n lik OK. Fully qulifie omin nme (FQDN) Vlue sfo01vrli01.sfo01.rinpole.lol IP Aress Upte ssoite pointer (PTR) reor Selete Connet vrelize Opertions Mnger to vrelize Log Insight in Region A After you hve suessfully omplete filover of the mngement pplitions to Region B n you hve restore the Region A environment, to ontinue log olletion from Region A, you reonfigure the vrelize Log Insight Apter to integrte vrelize Log Insight with vrelize Opertions Mnger. VMwre, In. 56

57 Site Protetion n Reovery Proeure 1 Log in to the vrelize Opertions Mnger mster noe y using the ministrtion interfe. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue min eployment_min_psswor 2 On the min nvigtion r, lik Aministrtion. 3 In the left pne of vrelize Opertions Mnger, lik Solutions. 4 On the Solutions pge, selet VMwre vrelize Log Insight, n lik Configure. The Mnge Solution - VMwre vrelize Log Insight ilog ox ppers. 5 Uner Instne s, moify the settings for the onnetion to vrelize Log Insight. Enter the isply nme, esription, n the FQDN of the vrelize Log Insight instne. Disply Nme Desription Log Insight server Vlue Log Insight Apter - sfo01vrli01 vrelize Log Insight for sfo01 sfo01vrli01.sfo01.rinpole.lol 6 Expn the Avne s pne n selet the olletor group for the region from the Colletors/Groups rop-own menu. Colletors/Groups Vlue sfo01-remote-olletors 7 Clik Test Connetion to vlite the onnetion to vrelize Log Insight n in the Info ilog ox lik OK. 8 Clik Sve s n in the Info ilog ox lik OK. 9 In the Mnge Solution - VMwre vrelize Log Insight ilog ox, lik Close. The vrelize Log Insight Apter is ville on the Solutions pge of the vrelize Opertions Mnger user interfe. The Colletion Stte of the pter is Colleting n the Colletion Sttus is Dt reeiving. VMwre, In. 57

58 Filk of the SDDC 4 Mngement Applitions Configure n perform filk of the mngement pplitions in the SDDC from the protete region, Region B, to the reovery region, Region A. Filing k these pplitions restores the pre-reovery onfigurtion of the SDDC. You fil k the following mngement omponents: vrelize Suite Lifeyle Mnger Anlytis luster of vrelize Opertions Mnger The remote olletor noes of vrelize Opertions Mnger o not fil k. Deploy seprte pir of remote olletors in eh region in the pplition virtul network tht is eite to the region. Primry omponents of vrelize Automtion with emee vreize Orhestrtor n vrelize Business The vsphere Proxy Agents of vrelize Automtion n the vrelize Business t olletor o not fil k. Deploy seprte pir of gents n olletor in eh region in n pplition isolte network. Tle 4 1. Support for Filk of the SDDC Mngement Components Mngement Component vrelize Suite Lifeyle Mnger Appline vrelize Opertions Mnger nlytis noes vrelize Opertions Mnger remote olletors vsphere Proxy Agents vrelize t olletors vrelize Automtion Appline vrelize Business server Mirosoft SQL Server IS Components Supports Fil Bk Yes Yes No No No Yes Yes Yes Yes VMwre, In. 58

59 Site Protetion n Reovery Proeure 1 Test Filk of the SDDC Mngement Applitions You n ientify potentil prolems uring future filk y testing the reovery pln for the mngement pplitions in the SDDC. 2 Perform Filk s Plnne Migrtion of the SDDC Mngement Applitions After you hve suessfully onfigure n teste filk of the SDDC mngement pplitions n you hve restore the infrstruture of Region A, strt the migrtion proess from Region B k to Region A. 3 Perform Filk s Disster Reovery of the SDDC Mngement Applitions If Region B eomes unville in the event of isster, you perform filk s isster reovery to Region A y prepring the network n NSX omponents in Region A, upting the vsan Defult Storge poliy, n performing filk of the Opertions Mngement Applitions n the Clou Mngement Pltform. Test Filk of the SDDC Mngement Applitions You n ientify potentil prolems uring future filk y testing the reovery pln for the mngement pplitions in the SDDC. Test Filk of the Opertions Mngement Applitions Vlite the onfigurtion y testing the reovery pln for vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger. Test Filk of the Clou Mngement Pltform Vlite the onfigurtion y testing the reovery pln for vrelize Automtion n vrelize Business. Test Filk of the Opertions MngementApplitions Vlite the onfigurtion y testing the reovery pln for vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger. Site Reovery Mnger runs the nlytis virtul mhines n vrelize Suite Lifeyle Mnger on the test network n on temporry snpshot of replite t in Region A. VMwre, In. 59

60 Site Protetion n Reovery Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 6 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 7 Clik the Test Reovery Pln ion to run test reovery. The Test wizr ppers. 8 On the Confirmtion options pge, leve the Replite reent hnges to reovery site hek ox selete n lik Next. 9 On the Rey to omplete pge, lik Finish to strt the test reovery. Test filk strts. You n follow the progress on the Reovery Steps pge. 10 After the test reovery is omplete, lik the Clenup Reovery Pln ion to len up ll the rete test VMs. 11 On the Confirmtion options pge of the Clenup wizr, lik Next. 12 On the Rey to omplete pge, lik Finish to strt the len-up proess. After the len-up proess finishes, mke sure tht Pln sttus shows Rey stte. Test Filk of the Clou Mngement Pltform Vlite the onfigurtion y testing the reovery pln for vrelize Automtion n vrelize Business. Site Reovery Mnger runs vrelize Automtion n vrelize Business virtul mhines on the test network n on temporry snpshot of replite t in Region A. VMwre, In. 60

61 Site Protetion n Reovery Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 6 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 7 Clik the Test Reovery Pln ion to run test reovery. The Test wizr ppers. 8 On the Confirmtion options pge, leve the Replite reent hnges to reovery site hek ox selete n lik Next. 9 On the Rey to omplete pge, lik Finish to strt the test reovery. Test filk strts. You n follow the progress on the Reovery Steps pge. 10 After the test reovery is omplete, lik the Clenup Reovery Pln ion to len up ll the rete test VMs. Note Beuse reovere virtul mhines re using the test network, VMwre Tools in the vr01svr01, vr01svr01, n vr01svr01 virtul mhines might not eome online within the efult timeout. Inrese the timeout vlue for these virtul mhines to omplete the test. 11 On the Confirmtion options pge of the Clenup wizr, lik Next. 12 On the Rey to omplete pge, lik Finish to strt the len-up proess. After the len-up proess finishes, mke sure tht Pln sttus shows Rey stte. VMwre, In. 61

62 Site Protetion n Reovery Perform Filk s Plnne Migrtion of the SDDC Mngement Applitions After you hve suessfully onfigure n teste filk of the SDDC mngement pplitions n you hve restore the infrstruture of Region A, strt the migrtion proess from Region B k to Region A. Initite Filk s Plnne Migrtion of the Opertions Mngement Applitions Run reovery pln uner plnne irumstnes to migrte the virtul mhines of the nlytis luster of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger from Region B to Region A. You n lso run reovery pln uner unplnne irumstnes if Region B suffers n unforeseen event tht results in t loss. Initite Filk s Plnne Migrtion of the Clou Mngement Pltform You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of vrelize Automtion n vrelize Business from Region B to Region A. You n lso run reovery pln uner unplnne irumstnes if Region B suffers n unforeseen event tht might result in t loss. Initite Filk s Plnne Migrtion of theopertions MngementApplitions Run reovery pln uner plnne irumstnes to migrte the virtul mhines of the nlytis luster of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger from Region B to Region A. You n lso run reovery pln uner unplnne irumstnes if Region B suffers n unforeseen event tht results in t loss. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. VMwre, In. 62

63 Site Protetion n Reovery 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filk of the nlytis luster. The Reovery wizr ppers. 7 On the Confirmtion options pge, onfigure the following settings n lik Next. I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery t enters. Reovery type Vlue Selete Plnne Migrtion 8 On the Rey to omplete pge, lik Finish to initite vrelize Opertions Mnger filk. Wht to o next Verify tht vrelize Suite Lifeyle Mnger is up n opertes orretly fter filover. See Verifition of vrelize Suite Lifeyle Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. Verify tht vrelize Opertions Mnger is up n opertes orretly fter filover. See Verifition of vrelize Opertions Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. Prepre vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger for filk y reproteting the virtul mhines of the nlytis luster n the vrelize Suite Lifeyle Mnger in Site Reovery Mnger. See Reprotet the Opertions Mngement Applitions. Initite Filk s Plnne Migrtion of the Clou Mngement Pltform You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of vrelize Automtion n vrelize Business from Region B to Region A. You n lso run reovery pln uner unplnne irumstnes if Region B suffers n unforeseen event tht might result in t loss. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. VMwre, In. 63

64 Site Protetion n Reovery 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filk of the lou mngement pltform. The Reovery wizr ppers. 7 On the Confirmtion options pge, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery t enters Reovery type Vlue Selete Plnne Migrtion 8 On the Rey to omplete pge, lik Finish to initite filk of the lou mngement pltform. Wht to o next 1 Verify tht vrelize Automtion n vrelize Business VMs re up n opertionl fter filk. See Vlite the Clou Mngement Pltform in the VMwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Automtion n vrelize Business Server for filover y reproteting the virtul mhines of the vrelize Automtion omponents in Site Reovery Mnger. See Reprotet the Clou Mngement Pltform. Perform Filk s Disster Reovery of the SDDC Mngement Applitions If Region B eomes unville in the event of isster, you perform filk s isster reovery to Region A y prepring the network n NSX omponents in Region A, upting the vsan Defult Storge poliy, n performing filk of the Opertions Mngement Applitions n the Clou Mngement Pltform. Prerequisites You perform filk s isster reovery if the following onitions re met: The SDDC Mngement Applitions resie in Region B fter suessful filover. The SDDC Mngement Applitions re reprotete Region B to Region A. See Reprotet the Opertions Mngement Applitions n Reprotet the Clou Mngement Pltform. VMwre, In. 64

65 Site Protetion n Reovery Proeure 1 Reonfigure the NSX Instne for the Mngement Cluster in Region A In the event of site filure, when Region B eomes unville, prepre the network lyer in Region A for filk of mngement pplitions. Chnge the role of the NSX Mnger in Region A to primry, reeploy the universl ontroller luster, n synhronize the universl ontroller luster onfigurtion. 2 Reover the Control VM of the Universl Distriute Logil Router in Region A In the se of filk, euse of the filure in Region B, ynmi routing in Region A is not ville. Deploy Control VM for the universl ynmi logil router sfo01m01ulr01 in Region A to reover ynmi routing in the environment. You then reonfigure the reovere Control VM to provie ynmi routing for the SDDC mngement pplitions tht re file k. 3 Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region A To support ynmi routing in Region A efore you strt isster reovery from Region B, you onfigure the universl istriute logil router sfo01m01ulr01, n NSX Eges sfo01m01esg01 n sfo01m01esg02. This onfigurtion ensures tht the mngement omponents of the SDDC ontinue to ommunite using optiml routes in fult-tolernt network. 4 Verify the Estlishment of BGP for the Universl Distriute Logil Router in Region A Verify tht the UDLR for the mngement pplitions is suessfully peering, n tht BGP routing hs een estlishe in Region A. After you perform filk of isster reovery, they n ontinue ommuniting to keep SDDC opertionl. 5 Enle Network Connetivity for the NSX Lo Blner in Region A Enle the network onnetivity on sfo01m01l01 lo lner to support high vilility n istriute the network trffi lo for vrelize Opertions Mnger n the Clou Mngement Pltform fter isster reovery to Region А. 6 Upte the vsan Defult Storge Poliy of the Mngement Cluster in Region A In the event of site filure in Region B, the witness VM prt of Region B is not ville. This results in one fult omin eing unville for the vsan strethe luster. To stisfy the provisioning of VM with Site Reovery Mnger, upte the vsan Defult Storge Poliy for the mngement luster. 7 Initite Disster Reovery of the Opertions Mngement Applitions in Region A In the event of site filure in Region B, initite isster reovery of vrelize Suite Lifeyle Mnger n of vrelize Opertions Mnger to keep the monitoring funtionlity of the SDDC running. 8 Initite Disster Reovery of the Clou Mngement Pltform in Region A In the event of site filure in Region B, initite isster reovery of vrelize Automtion n vrelize Business in Region A to fil the Clou Mngement Pltform k to Region A. VMwre, In. 65

66 Site Protetion n Reovery 9 Post-Filk Configurtion of the SDDC Mngement Applitions After filk of the Opertions Mngement pplitions n the Clou Mngement Pltform, you must perform ertin tsks to ensure tht pplitions perform s expete. Reonfigure the NSX Instne for the Mngement Cluster in Region A In the event of site filure, when Region B eomes unville, prepre the network lyer in Region A for filk of mngement pplitions. Chnge the role of the NSX Mnger in Region A to primry, reeploy the universl ontroller luster, n synhronize the universl ontroller luster onfigurtion. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 Promote the NSX Mnger for the mngement luster in Region A to the primry role. You first isonnet the NSX Mnger for the Mngement luster in Region A from the primry NSX Mnger in Region B. e From the Home menu of the vsphere We Client, lik Networking & Seurity. In the Nvigtor, lik Instlltion n Upgre. On the Mngement t, lik NSX Mngers t n selet the instne. Clik the Ations menu n lik Disonnet from Primry NSX Mnger. In the Disonnet from Primry NSX Mnger ilog ox, lik Yes. The NSX Mnger gets the Trnsit role. f g h On the NSX Mngers t, selet the instne gin. Clik Ations n selet Assign Primry Role. In the Assign Primry Role ilog ox, lik Yes. 3 Deploy the universl ontroller luster in Region A. In the Nvigtor pne, lik Instlltion n Upgre. On the Mngement t, uner NSX Controller noes, lik the A ion to eploy three NSX Controller noes with the sme onfigurtion. VMwre, In. 66

67 Site Protetion n Reovery In the A Controller ilog ox, enter the following settings n lik Next. Vlue NSX Mnger Psswor Confirm Psswor mgmtnsx_ontrollers_psswor mgmtnsx_ontrollers_psswor You onfigure psswor only uring the eployment of the first ontroller. The other ontrollers use the sme psswor. In the A Controller ilog ox, uner Deployment & Connetivity, enter the following settings n lik Finish. Vlue Nme sfo01m01nsx01 for ontroller 1 sfo01m01nsx02 for ontroller 2 sfo01m01nsx03 for ontroller 3 Dt enter Cluster/Resoure Pool Dtstore Foler Connete To IP Pool sfo01-m01 sfo01-m01-mgmt01 sfo01-m01-vsn01 sfo01-m01f-nsx sfo01-m01-vs01-mngement sfo01-mgmt01-nsx01 e After the Sttus of the ontroller noe hnges to Connete, eploy the remining two NSX Controller noes sfo01m01nsx02 n sfo01m01nsx03. Wit until the urrent eployment is finishe, efore you strt the next one. 4 Configure DRS ffinity rules for the eploye NSX Controller noes. From the Home menu of the vsphere We Client, selet Hosts n Clusters. Expn the sfo01m01v01.sfo01.rinpole.lol > sfo01-m01 tree n lik the sfo01-m01- mgmt01 luster. VMwre, In. 67

68 Site Protetion n Reovery Clik the Configure t, uner Configurtion, lik VM/Host Rules, n lik A. In the sfo01-m01-mgmt01 - Crete VM/Host Rule ilog ox, enter the following settings n lik OK. Nme Enle rule Type Vlue nti-ffinity-rule-nsx Selete Seprte Virtul Mhines Memers sfo01m01nsx01 sfo01m01nsx02 sfo01m01nsx03 5 Use the Upte Controller Stte mehnism on the NSX Mnger to synhronize the stte of the newly eploye ontrollers. Upte Controller Stte pushes the urrent VXLAN n universl istriute logil router onfigurtion from NSX Mnger to the ontroller luster. e From the Home menu of the vsphere We Client, selet Networking & Seurity. In the Nvigtor pne, lik Instlltion n Upgre. On the Mngement t, uner NSX Mngers t, selet the instne. Clik the Ations menu n selet Upte Controller Stte. In the Upte Controller Stte ilog ox, lik Yes. Reover the Control VM of the Universl Distriute Logil Router in Region A In the se of filk, euse of the filure in Region B, ynmi routing in Region A is not ville. Deploy Control VM for the universl ynmi logil router sfo01m01ulr01 in Region A to reover ynmi routing in the environment. You then reonfigure the reovere Control VM to provie ynmi routing for the SDDC mngement pplitions tht re file k. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik Networking & Seurity. 3 In the Nvigtor pne, lik NSX Eges. VMwre, In. 68

69 Site Protetion n Reovery 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik sfo01m01ulr01. 6 Reeploy the universl istriute logil router ontrol VM n enle HA. Clik the Mnge t n lik s. Selet Configurtion n uner Logil Router Applines lik the A ion. In the A NSX Ege Appline ilog ox, enter the following settings n lik OK. Dt enter Cluster/Resoure Pool Dtstore Vlue sfo01-m01 sfo01-m01-mgmt01 sfo01-m01-vsn01 To eploy nother NSX Ege evie with the sme onfigurtion, lik the A ion n repet the previous step. 7 Configure high vilility for the Control VM. On the Configurtion pge for sfo01m01ulr01, lik Chnge uner HA Configurtion, onfigure the following settings, n lik OK. HA Sttus Connete To Enle Logging Vlue Enle sfo01-m01-vs01-mngement Selete In the Chnge HA onfigurtion ilog ox, lik Yes. 8 Configure the CLI Creentils for the Control VM. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Right-lik sfo01m01ulr01 n selet Chnge CLI Creentils. In the Chnge CLI Creentils ilog ox, onfigure the following settings n lik OK. User Nme Psswor Enle SSH ess Vlue min ulr_min_psswor Selete VMwre, In. 69

70 Site Protetion n Reovery Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region A To support ynmi routing in Region A efore you strt isster reovery from Region B, you onfigure the universl istriute logil router sfo01m01ulr01, n NSX Eges sfo01m01esg01 n sfo01m01esg02. This onfigurtion ensures tht the mngement omponents of the SDDC ontinue to ommunite using optiml routes in fult-tolernt network. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 In the Nvigtor, lik Networking & Seurity n lik NSX Eges. 3 Selet from the NSX Mnger rop-own menu. 4 Verify the routing onfigurtion for the universl istriute logil router. Doule-lik sfo01m01ulr01. Clik the Mnge t n lik Routing. Glol Configurtion > Routing Configurtion > ECMP Vlue Strte Glol Configurtion > Dynmi Routing Configurtion > Router ID On the left sie, selet BGP to verify the protool settings n onfigure BGP peering etween the UDLR evie n the NSX Ege evies for the ECMP-enle North/South routing in Region A. On the BGP pge, verify the following settings. Sttus Vlue Strte Lol AS Greful Restrt Strte Uner Neighors, selet whih represents the onnetion settings for the sfo01m01esg01 neighor n lik the Eit ion. VMwre, In. 70

71 Site Protetion n Reovery In the Eit Neighor ilog ox, upte the Weight vlue to 60, enter the BGP psswor tht ws onfigure uring the initil setup of the UDLR, n lik OK. sfo01m01esg01 Vlue sfo01m01esg02 Vlue IP Aress Forwring Aress Protool Aress Remote AS Weight Keep Alive Time 1 1 Hol Down Time 3 3 Psswor BGP_psswor BGP_psswor e On the BGP pge, repet the steps for the entry whih represents the sfo01m01esg02 neighor. Clik Pulish Chnges. 6 On the left sie, selet Route Reistriution to verify reistriution sttus. Ctegory Vlue Route Reistriution Sttus OSPF Deselete BGP Selete Route Reistriution tle Lerner BGP From Prefix Ation Connete Any Permit 7 Reonfigure the routing n weight vlue of sfo01m01esg01 n sfo01m01esg02 ege evies. e f g h In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01esg01 to open its onfigurtion interfe. Clik the Mnge t n lik the Routing t. On the left sie, selet BGP, selet the neighor, n lik Eit. In the Eit Neighor ilog ox, hnge the Weight vlue to 60 n lik OK. Clik Pulish Chnges. Repet this step for the sfo01m01esg02 ege. VMwre, In. 71

72 Site Protetion n Reovery Verify the Estlishment of BGP for the Universl Distriute Logil Router in Region A Verify tht the UDLR for the mngement pplitions is suessfully peering, n tht BGP routing hs een estlishe in Region A. After you perform filk of isster reovery, they n ontinue ommuniting to keep SDDC opertionl. Proeure 1 Log in to the UDLR virtul ppline y using Seure Shell (SSH) lient. Open n SSH onnetion to sfo01m01ulr01. Log in using the following reentils. User nme Psswor Vlue min ulr_min_psswor 2 Verify tht the UDLR n peer with the ECMP-enle NSX Ege servies gtewys. Run the show ip gp neighors ommn to isply informtion out the BGP n TCP onnetions to the UDLR neighors. In the ommn output, verify tht the BGP stte is Estlishe, up for (sfo01m01esg01) n (sfo01m01esg02). 3 Verify tht the UDLR reeives routes y using BGP n tht multiple routes re estlishe to BGPlerne networks. Run the show ip route ommn. In the ommn output, verify tht the routes to the networks re mrke with the letter B n severl routes to eh jent network exist. The letter B in front of eh route inites tht the route is estlishe over BGP. Enle Network Connetivity for the NSX Lo Blner in Region A Enle the network onnetivity on sfo01m01l01 lo lner to support high vilility n istriute the network trffi lo for vrelize Opertions Mnger n the Clou Mngement Pltform fter isster reovery to Region А. VMwre, In. 72

73 Site Protetion n Reovery Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik Networking & Seurity. 3 In the Nvigtor, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik the sfo01m01l01 evie. 6 Clik the Mnge t n lik the s t. 7 Clik Interfes, selet the OneArmLB vnic, n lik Eit. 8 In the Eit NSX Ege Interfe ilog ox, set Connetivity Sttus to Connete n lik OK. Upte the vsan Defult Storge Poliy of the Mngement Cluster in Region A In the event of site filure in Region B, the witness VM prt of Region B is not ville. This results in one fult omin eing unville for the vsan strethe luster. To stisfy the provisioning of VM with Site Reovery Mnger, upte the vsan Defult Storge Poliy for the mngement luster. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. 3 Selet the sfo01-m01-mgmt01 luster n lik the Configure t. 4 Expn the vsan menu n lik Helth n Performne. VMwre, In. 73

74 Site Protetion n Reovery 5 Uner Performne Servie is Turne ON, lik vsan Defult Storge Poliy. The vsan Defult Storge Poliy pge ppers. 6 Clik the Mnge t, n lik Eit. 7 In the Eit VM Storge Poliy ilog ox, selet Rule-set 1, from the rop-own menu for Fore provisioning selet Yes, n lik OK. The vsan Defult Storge Poliy: VM Storge Poliy in Use ilog ox ppers. 8 In the VM Defult Storge Poliy: vsan Storge Poliy in Use ilog ox, from the rop-own menu selet Mnully lter n lik Yes. Initite Disster Reovery ofthe Opertions MngementApplitions in Region A In the event of site filure in Region B, initite isster reovery of vrelize Suite Lifeyle Mnger n of vrelize Opertions Mnger to keep the monitoring funtionlity of the SDDC running. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filk of the nlytis luster of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger. The Reovery wizr ppers. VMwre, In. 74

75 Site Protetion n Reovery 7 On the Confirmtion options pge of the Reovery wizr, onfigure the following settings n lik Next. I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters. Reovery type Vlue Selete Disster reovery 8 On the Rey to omplete pge, lik Finish to initite the filk of vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger. After isster reovery, the Pln sttus of the reovery pln hnges to Disster reovery omplete. Wht to o next 1 Verify tht vrelize Suite Lifeyle Mnger is up n opertes orretly fter filk. See Verifition of vrelize Suite Lifeyle Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. 2 Verify tht vrelize Opertions Mnger is up n funtionl fter the filk. See Verifition of vrelize Opertions Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. 3 Perform the proeures in hpter Post-Filk Configurtion of the SDDC Mngement Applitions. 4 Prepre vrelize Opertions Mnger n vrelize Suite Lifeyle Mnger for filover y reproteting the virtul mhines of the nlytis luster n the vrelize Suite Lifeyle Mnger in Site Reovery Mnger. See Reprotet the Opertions Mngement Applitions. Initite Disster Reovery of the Clou Mngement Pltform in Region A In the event of site filure in Region B, initite isster reovery of vrelize Automtion n vrelize Business in Region A to fil the Clou Mngement Pltform k to Region A. Proeure 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor VMwre, In. 75

76 Site Protetion n Reovery 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filk of the Clou Mngement Pltform. 7 On the Confirmtion options pge of the Reovery wizr, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Disster reovery 8 On the Rey to omplete pge, lik Finish to initite the filk of the lou mngement pltform. After isster reovery, the sttus of the reovery pln is Disster Reovery Complete. Wht to o next 1 Verify tht vrelize Automtion n vrelize Business VMs re up n funtionl fter filk. See Vlite the Clou Mngement Pltform in the VMwre Vlite Opertionl Verifition oument. 2 Perform the proeures in hpter Post-Filk Configurtion of the SDDC Mngement Applitions. 3 Prepre vrelize Automtion n vrelize Business Server for filover y reproteting the virtul mhines of the vrelize Automtion omponents in Site Reovery Mnger. See Reprotet the Clou Mngement Pltform. Post-Filk Configurtion of the SDDC Mngement Applitions After filk of the Opertions Mngement pplitions n the Clou Mngement Pltform, you must perform ertin tsks to ensure tht pplitions perform s expete. Proeure 1 Revert the vsan Defult Storge Poliy of the Mngement Cluster in Region A Revert the vsan Defult Storge Poliy of the Mngement Cluster in Region A fter filk of the Opertions Mngement Applitions n Clou Mngement Pltform is omplete. VMwre, In. 76

77 Site Protetion n Reovery 2 Configure the NSX Controllers n the UDLR Control VM to Forwr Events to vrelize Log Insight in Region A Configure the NSX Controllers n UDLR Control VM instnes for the mngement luster to forwr log informtion to vrelize Log Insight in Region A. Use the NSX REST API to onfigure the NSX Controllers. To enle log forwring, you n use REST lient, suh s the Postmn pplition for Google Chrome. 3 Reonfigure the NSX Instne for the Mngement Cluster in Region B After Filk After Region B omes k online, you must perform itionl onfigurtions within the network lyer to voi onflits. These steps must e performe efore you reprotet the SDDC Mngement Applitions from Region A to Region B. Revert the vsan Defult Storge Poliy of the Mngement Cluster in Region A Revert the vsan Defult Storge Poliy of the Mngement Cluster in Region A fter filk of the Opertions Mngement Applitions n Clou Mngement Pltform is omplete. Proeure 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. 3 Selet the sfo01-m01-mgmt01 luster n lik the Configure t. 4 Expn the vsan menu n lik Helth n Performne. 5 Uner Performne Servie is Turne ON, lik vsan Defult Storge Poliy. The vsan Defult Storge Poliy pge ppers. 6 Clik the Mnge t n lik Eit. 7 In the Eit VM Storge Poliy ilog ox, selet Rule-set 1, from the rop-own menu for Fore provisioning selet No, n lik OK. The vsan Defult Storge Poliy: VM Storge Poliy in Use ilog ox ppers. VMwre, In. 77

78 Site Protetion n Reovery 8 In the VM Defult Storge Poliy: vsan Storge Poliy in Use ilog ox, from the rop-own menu selet Now for Repply to VMs n lik Yes. During this opertion, vsan performne might e ffete s ojets re rerete to mth the Storge Poliy. Configure the NSX Controllers n the UDLR Control VM to Forwr Events to vrelize Log Insight in Region A Configure the NSX Controllers n UDLR Control VM instnes for the mngement luster to forwr log informtion to vrelize Log Insight in Region A. Use the NSX REST API to onfigure the NSX Controllers. To enle log forwring, you n use REST lient, suh s the Postmn pplition for Google Chrome. Proeure 1 Log in to the Winows host tht hs ess to your t enter. 2 In Chrome rowser, strt the Postmn pplition n log in. 3 Speify the request heers for requests to the NSX Mnger. On the Authoriztion t, onfigure the following uthoriztion settings n lik Upte Request. s Type User nme Psswor Vlue Bsi Auth min sfo01m01nsx01_min_psswor The Authoriztion:Bsi XXX heer ppers in the Heers pne. On the Heers t, enter the following heer etils. Key Vlue Vlue Content-Type pplition/xml The Content-Type:pplition/xml heer ppers in the Heers pne. 4 Contt the NSX Mnger to retrieve the IDs of the ssoite NSX Controllers. Selet GET from the rop-own menu tht ontins the HTTP request methos. In the URL text ox next to the selete metho, enter the following URL, n lik Sen. NSX Mnger NSX Mnger for the mngement luster URL The Postmn pplition sens query to the NSX Mnger out the instlle NSX ontrollers. VMwre, In. 78

79 Site Protetion n Reovery After the NSX Mnger sens response k, lik the Boy t in the response pne. The response oy ontins root <ontrollers> XML element tht groups the etils out the three ontrollers tht form the ontroller luster. Within the <ontrollers> element, lote the <ontroller> element for eh ontroller n write own the ontent of the <i> element. Controller IDs hve the ontroller-i formt where i represents the sequene numer of the ontroller in the luster, for exmple, ontroller-1 in the imge elow. VMwre, In. 79

80 Site Protetion n Reovery 5 For eh NSX Controller, sen request to onfigure vrelize Log Insight s remote syslog server. In the request pne t the top, selet POST from the rop-own menu tht ontins the HTTP request methos, n in the URL text ox, enter the following URL. Reple ontroller-id with the ontroller IDs you hve written own. NSX Mnger NSX Mnger for the mngement luster NSX Controller in the Controller Cluster NSX Controller 1 NSX Controller 2 NSX Controller 3 POST URL er-1/syslog er-2/syslog er-3/syslog In the Request pne, lik the Boy t, selet Rw, n using the rop-own menu, selet XML (Applition/XML). Pste the following request oy in the Boy text ox n lik Sen. <ontrollersyslogserver> <syslogserver> </syslogserver> <port>514</port> <protool>udp</protool> <level>info</level> </ontrollersyslogserver> Repet the steps for the other NSX Controllers in the mngement luster. VMwre, In. 80

81 Site Protetion n Reovery 6 Verify the syslog onfigurtion on eh NSX Controller. In the Request pne, from the Metho rop-own menu, selet GET, in the URL text ox, enter the ontroller-speifi syslog URL from the previous step, n lik the SEND utton. After the NSX Mnger sens response k, lik the Boy t uner Response. The response oy ontins root <ontrollersyslogserver> element, whih represents the settings for the remote syslog server on the NSX Controller. Verify tht the vlue of the <syslogserver> element is Repet the steps for the other NSX Controllers to verify the syslog onfigurtion. 7 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 8 Configure the newly eploye UDLR Control VM to forwr events to vrelize Log Insight in Region A. From the Home menu of the vsphere We Client, lik Networking & Seurity. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01ulr01 to open its onfigurtion interfe. VMwre, In. 81