Deployment for Multiple Availability Zones. 22 JAN 2019 VMware Validated Design 5.0 VMware Validated Design for Software-Defined Data Center 5.

Transcription

1 Deployment for Multiple Avilility Zones 22 JAN 2019 VMwre Vlite Design 5.0 VMwre Vlite Design for Softwre-Define Dt Center 5.0

2 You n fin the most up-to-te tehnil oumenttion on the VMwre wesite t: If you hve omments out this oumenttion, sumit your feek to ofeek@vmwre.om VMwre, In Hillview Ave. Plo Alto, CA Copyright VMwre, In. All rights reserve. Copyright n tremrk informtion. VMwre, In. 2

3 Contents 1 Aout VMwre Vlite Design 5 2 Prerequisites for Deployment of Seon Avilility Zone 6 VLANs n IP Sunets for Seon Avilility Zone in Region A 6 Host Nmes n IP Aresses 7 3 Deploy n Configure the vsan Witness Host 8 Deploy the vsan Witness Host in Region B 8 Configure Mngement Network on the vsan Witness Host in Region B 10 A the vsan Witness Host s Stnlone Host in Region A 11 Configure NTP n SSH on the Witness Host 12 Configure the vsan Witness Host 13 4 Instll n Configure ESXi Hosts for Avilility Zone 2 in Region A 16 Prerequisites for Instlltion of ESXi Hosts for Avilility Zone 2 16 Instll ESXi Intertively on All Hosts in Avilility Zone 2 17 Configure Mngement Network on All Hosts in Avilility Zone 2 18 Configure SSH n NTP on the First ESXi Host in Avilility Zone Configure the Mngement Cluster in Region A for Avilility Zone 2 21 Deth Host Profile from the Mngement Cluster n Atth It to All Hosts in Avilility Zone 1 21 Crete Host Groups n Rules for Avilility Zone 1 22 A All the ESXi Hosts in Avilility Zone 2 to the Mngement Cluster in Region A 23 Chnge Avne Options on the First ESXi Host of Avilility Zone 2 25 Configure vsphere Distriute Swith for Avilility Zone 2 26 Crete Port Groups for Mngement Trffi in Avilility Zone 2 26 Connet the First ESXi Host in Avilility Zone 2 to vsphere Distriute Swith 27 Crete vsan Disk Groups for All Hosts in Avilility Zone 2 30 A Stti Routes for Both Avilility Zones n the vsan Witness Host 30 Upte the Host Profile in Avilility Zone 1 32 Crete n Apply Host Profile for All Hosts in Avilility Zone Configure vsan Strethe Cluster for the Mngement Cluster in Region A 37 Enle n Configure vsan Strethe Cluster in Region A 37 Upte the vsphere Avilility s of the Mngement Cluster in Region A 38 Upte the vsan Defult Storge Poliy of the Mngement Cluster in Region A 39 Reeploy NSX Eges n NSX Controllers in the Mngement Cluster 40 Reeploy All NSX Ege Virtul Mhines 40 VMwre, In. 3

4 Reeploy All NSX Controller Virtul Mhines 41 Upte Host Profiles to Cpture the vsan Strethe Cluster Configurtion 44 A All NSX Eges n Controllers to the VM Group of Avilility Zone Configure NSX Dynmi Routing for Avilility Zone 2 in Region A 46 Deploy NSX Ege Devies for North-South Routing in Avilility Zone 2 46 Disle the Firewll Servie for Avilility Zone 2 49 Configure Routing for Avilility Zone 2 50 Enle n Configure Routing on NSX Ege Servies Gtewys 50 Configure Dynmi Routing on Universl Distriute Logil Router 53 Verify Peering n Estlishment of BGP for Avilility Zone 2 54 Crete Host Groups n Rules for Avilility Zone Configure vsphere Replition Network Trffi for Avilility Zone 2 in Region A 59 VMwre, In. 4

5 Aout VMwre Vlite Design Deployment for Multiple Avilility Zones 1 VMwre Vlite Design provies step-y-step instrutions for instlling n onfiguring multiple vilility zones in the Softwre-Define Dt Center (SDDC). VMwre Vlite Design oes not ontin instrutions for performing ll the require post-onfigurtion tsks euse they often epen on ustomer requirements. Intene Auiene The VMwre Vlite Design oument is intene for lou rhitets, infrstruture ministrtors, n lou ministrtors who re fmilir with n wnt to use VMwre softwre to eploy in short time n mnge n SDDC tht meets the requirements for pity, slility, kup n restore, n extensiility for isster reovery support. Require VMwre Softwre VMwre Vlite Design is omplint n vlite with ertin prout versions. See VMwre Vlite Design Relese Notes for more informtion out supporte prout versions. Before You Apply This Guine The sequene of the oumenttion of VMwre Vlite Design follows the stges for implementing n mintining n SDDC. See Doumenttion Mp for VMwre Vlite Design. To use VMwre Vlite Design, you must e quinte with the following guine: Introuing VMwre Vlite Designs Optionlly VMwre Vlite Design Arhiteture n Design VMwre Vlite Design Deployment of Region A VMwre Vlite Design Deployment of Region B VMwre, In. 5

6 Prerequisites for Deployment of 2 Seon Avilility Zone Finish the eployment in oth Region A n Region B efore you egin eploying seon vilility zone. You set up nother environment tht hs speifi ompute, storge, n network onfigurtion for the Avilility Zone 2 in Region A. This hpter inlues the following topis: VLANs n IP Sunets for Seon Avilility Zone in Region A Host Nmes n IP Aresses VLANs n IP Sunets for Seon Avilility Zone in Region A Use the following VLANs n IP sunets in Avilility Zone 2. You must onfigure your physil network oring to the following requirements. Streth the ESXi mngement VLAN of Avilility Zone 1 over Avilility Zone 2. Configure n use the sme VLAN ID for NSX VXLAN trffi s this VLAN ID oes not streth ross the two vilility zones. Configure routing on the physil swith for vsan VLANs of Avilility Zone 1, Avilility Zone 2, n Region B. Tle 2 1. VLAN n IP Sunet Configurtion in Avilility Zone 2 Cluster in Region A VLAN Funtion VLAN ID Sunet Gtewy Mngement Cluster Avilility Zone 1 Mngement 1611 (Strethe L2) / Avilility Zone 2 Mngement / vsphere vmotion / vsan / VXLAN (NSX VTEP) / vsphere Replition vsphere Replition NFC / VMwre, In. 6

7 Tle 2 1. VLAN n IP Sunet Configurtion in Avilility Zone 2 (Continue) Cluster in Region A VLAN Funtion VLAN ID Sunet Gtewy Uplink / Uplink / Note Use these VLAN IDs n IP sunets s smples. Configure the tul VLAN IDs n IP sunets oring to your environment. Host Nmes n IP Aresses Define the host nmes n IP resses require for Avilility Zone 2. You must lso onfigure some of these host nmes in DNS with fully qulifie omin nmes (FQDNs) tht mp the hostnmes to the IP resses. Allote host nmes n IP resses to ll omponents you eploy for the virtul infrstruture lyer of the SDDC oring to this VMwre Vlite Design. Tle 2 2. Host Nmes n IP Aresses for the Virtul Infrstruture Lyer Compon ent Group Host Nme DNS Zone IP Aress Desription vsan witness host sfo03m01vsnw01 sfo01.rinpol e.lol vsan witness host in Region B vsphere sfo02m01esx01 sfo01.rinpol e.lol ESXi hosts in Avilility Zone 2. sfo02m01esx02 sfo02m01esx03 sfo02m01esx04 sfo01.rinpol e.lol sfo01.rinpol e.lol sfo01.rinpol e.lol NSX for vsphere sfo02m01esg sfo02m01esg ECMP-enle NSX Ege evies for the North-South mngement trffi VMwre, In. 7

8 Deploy n Configure the vsan 3 Witness Host vsan strethe luster requires witness host eploye in thir lotion, ifferent from the lotion of oth vilility zones. You eploy the vsan witness ppline inste of using eite physil ESXi host s witness host. Unlike generl purpose ESXi host, the witness ppline oes not run virtul mhines n its only purpose is to serve s vsan witness. 1 Deploy the vsan Witness Host in Region B Strt the eployment of multiple vilility zones y eploying the vsan witness host in Region B. 2 Configure Mngement Network on the vsan Witness Host in Region B After the initil oot, use the ESXi Diret Console User Interfe (DCUI) for the vsan witness host mngement network onfigurtion. 3 A the vsan Witness Host s Stnlone Host in Region A To use the witness ppline s vsan strethe luster witness host, you the witness host s stnlone host in Region A Mngement vcenter Server. 4 Configure NTP n SSH on the Witness Host Prevent time synhroniztion prolems y onfiguring the NTP servie on the vsan witness host. Enle SSH to stti routes tht llow rehing Avilility Zone 1 n Avilility Zone 2 networks. 5 Configure the vsan Witness Host Configure the witness network on the vsan witness host to enle the vsan t network ommunition to oth vilility zones. Deploy the vsan Witness Host in Region B Strt the eployment of multiple vilility zones y eploying the vsan witness host in Region B. Prerequisites Downlo the vsan witness host virtul ppline.ov file to the mhine where you use the vsphere Client. VMwre, In. 8

9 1 Log in to vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters. 3 In the Nvigtor pne, expn lx01m01v01.lx01.rinpole.lol > lx01-m01. 4 Right-lik the lx01-m01-mgmt01 luster n lik Deploy OVF Templte. The Deploy OVF Templte wizr ppers. On the Selet n OVF templte pge, selet Lol file n lik Browse. Selet the vsan witness host.ov file on your lol file system, n lik Next. On the Selet nme n foler pge, enter the following settings, n lik Next. Nme Dt enter or foler Vlue sfo03m01vsnw01 lx01-m01f-mgmt e f g h On the Selet ompute resoure pge, selet lx01-m01-mgmt01, n lik Next. On the Review etils pge, lik Next. On the Liense greements pge, selet I ept ll liense greements n lik Next. On the Configurtion pge, selet Meium. On the Selet storge pge, enter the following settings, n lik Next. Selet virtul isk formt VM Storge Poliy Dtstore Vlue Thin provision vsan Defult Storge Poliy lx01-m01-vsn01 i On the Selet networks pge, enter the following settings, n lik Next. Soure Network Witness network Mngement network Destintion lx01-m01-vs01-vsn lx01-m01-vs01-mngement VMwre, In. 9

10 j On the Customize templte pge, expn the options, enter the following settings, n lik Next. Root psswor / Enter psswor Root psswor / Confirm psswor Vlue vsn_witness_root_psswor vsn_witness_root_psswor k On the Rey to Complete pge, review your entries n lik Finish. 5 In the Nvigtor pne, expn lx01m01v01.lx01.rinpole.lol > lx01-m01. 6 Selet the sfo03m01vsnw01 virtul mhine, n lik Power on. Configure Mngement Network on the vsan Witness Host in Region B After the initil oot, use the ESXi Diret Console User Interfe (DCUI) for the vsan witness host mngement network onfigurtion. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters. 3 In the Nvigtor pne, expn lx01m01v01.lx01.rinpole.lol > lx01-m01. 4 Open the DCUI on the sfo03m01vsnw01 vsan witness host. Right-lik the sfo03m01vsnw01 virtul mhine, n lik Open Console. In the remote onsole, wit until the witness host virtul mhine is fully strte. Press F2 to enter the DCUI. Log in using the following reentils. User nme Psswor Vlue root vsn_witness_root_psswor VMwre, In. 10

11 5 Configure the mngement network. Selet Configure Mngement Network n press Enter. Selet IPv4 Configurtion n press Enter. Configure the IPv4 network using the following settings, n press Enter. Set stti IPv4 ress n network onfigurtion Vlue Selete IPv4 Aress Sunet Msk Defult Gtewy e Selet DNS Configurtion n press Enter. Configure the following DNS settings, n press Enter. Use the following DNS Server ress n hostnme. Vlue Selete Primry DNS Server Alternte DNS Server Hostnme sfo03m01vsnw01.sfo01.rinpole.lol f g Selet Custom DNS Suffixes n press Enter. Verify tht the list ontins no suffixes, n press Enter. 6 After ompleting ll host network settings press Espe to exit, n press Y to onfirm the hnges. A the vsan Witness Host s Stnlone Host in Region A To use the witness ppline s vsan strethe luster witness host, you the witness host s stnlone host in Region A Mngement vcenter Server. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters. VMwre, In. 11

12 3 In the Nvigtor pne, expn sfo01m01v01.sfo01.rinpole.lol. 4 Right-lik the sfo01-m01 t enter n lik A Host. The A Host wizr ppers. On the Nme n lotion pge, enter the following settings, n lik Next. Host nme or IP ress Lotion Vlue sfo03m01vsnw01.sfo01.rinpole.lol sfo01-m01 On the Connetion settings pge, enter the following reentils, n lik Next. User nme Psswor Vlue root vsn_witness_root_psswor In the Seurity Alert ilog ox, lik Yes. e f g On the Host summry pge, review the host informtion, n lik Next. On the Assign liense pge, keep the efult liense, n lik Next. On the Lokown moe pge, lik Next. On the VM lotion pge, lik Next. On the Rey to omplete pge, review the entries, n lik Finish. Configure NTP n SSH on the Witness Host Prevent time synhroniztion prolems y onfiguring the NTP servie on the vsan witness host. Enle SSH to stti routes tht llow rehing Avilility Zone 1 n Avilility Zone 2 networks. 1 Log in to vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters. 3 In the Nvigtor pne, expn sfo01m01v01.sfo01.rinpole.lol > sfo01-m01. 4 Clik the sfo03m01vsnw01.sfo01.rinpole.lol host. 5 Clik the Configure t. VMwre, In. 12

13 6 Configure the NTP lient on the vsan witness host. Uner the System setion, lik Time Configurtion n lik the Eit utton. The Eit Time Configurtion ilog ox ppers. Selet Use Network Time Protool (Enle NTP lient). Enter the following settings, n lik OK. NTP Servers Strt NTP Servie. NTP Servie Strtup Poliy Vlue ntp.lx01.rinpole.lol, ntp.sfo01.rinpole.lol Selete Strt n stop with host. 7 Enle the SSH servie on the vsan witness host. Uner the System setion, lik Servies n selet SSH. Clik the Eit Strtup Poliy utton. The Eit Strtup Poliy ilog ox ppers. Selet Strt n stop with host n lik OK. Configure the vsan Witness Host Configure the witness network on the vsan witness host to enle the vsan t network ommunition to oth vilility zones. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters. 3 In the Nvigtor pne, expn sfo01m01v01.sfo01.rinpole.lol > sfo01-m01. 4 Selet the sfo03m01vsnw01.sfo01.rinpole.lol host, n lik the Configure t. VMwre, In. 13

14 5 Configure the VMkernel pter of the vsan witness host. On the Configure t, uner Networking, lik VMkernel pters. Selet vmk1 whih hs witnesspg s Network Lel, n lik the Eit utton. The vmk1 - Eit s ilog ox ppers. Clik IPv4 settings, enter the following settings, n lik OK. Use stti IPv4 settings. Vlue Selete IPv4 ress Sunet msk Defult gtewy Deselete 6 Provision swp files on vsan s thin for the vsan witness host. On the Configure t, uner System, lik Avne System s. Clik the Eit utton. In the Filter text ox, enter vsn.swp. Chnge the vlue of VSAN.SwpThikProvisionDisle to 1 n lik OK. 7 Crete IP Sets n Seurity Groups on the NSX Mnger for the vsan witness host. e f From the Home menu, selet Networking & Seurity. In the Nvigtor pne, lik Groups n Tgs. From the NSX Mnger rop-own menu, selet n lik IP Sets. Selet SDDC, n lik the Eit IP Set ion. In the Eit IP Set ilog ox, oth witness host mngement IP ress n witness network IP ress, , s IP Aresses n lik Sve. Clik the A ion, in the New IP Set ilog ox, enter the following settings n lik A. Nme Vlue vsan Witness IP Aresses Universl Synhroniztion Inheritne Selete Deselete VMwre, In. 14

15 g Clik Seurity Group, lik the A ion, enter the following settings, n lik Next. Nme Universl Synhroniztion. Inheritne Vlue vsan Witness Selete Deselete h Selet the vsan Witness IP Set, move it to the Selete olumn n lik Finish. 8 Enle n ministrtive SSH ess to the vsan witness host. From the Home menu, selet Networking & Seurity. In the Nvigtor pne, lik Firewll From the NSX Mnger rop-own menu, selet e f Selet the Allow SSH to mins rule, n lik the Eit ion in the Destintion olumn. Chnge the Ojet Type to Seurity Groups, vsan Witness to the Selete Ojets list, n lik Sve. Clik Pulish Chnges. VMwre, In. 15

16 Instll n Configure ESXi Hosts for Avilility Zone 2 in Region A 4 Begin the eployment of Avilility Zone 2 in Region A y instlling n onfiguring ll the ESXi hosts. This hpter inlues the following topis: Prerequisites for Instlltion of ESXi Hosts for Avilility Zone 2 Instll ESXi Intertively on All Hosts in Avilility Zone 2 Configure Mngement Network on All Hosts in Avilility Zone 2 Configure SSH n NTP on the First ESXi Host in Avilility Zone 2 Prerequisites for Instlltion of ESXi Hosts for Avilility Zone 2 Instll n onfigure the ESXi hosts for Avilility Zone 2. Before you egin the instlltion, perform the following steps. Ensure tht you hve Winows host with ess to your t enter. You use this host to onnet to the ESXi hosts n perform the onfigurtion steps. Downlo the ESXi ISO instller. Crete ootle USB rive tht ontins the ESXi instlltion. See Formt USB Flsh Drive to Boot the ESXi Instlltion or Upgre in the vsphere Instlltion n Setup oumenttion. IP Aresses, Hostnmes, n Network Configurtion The following tle ontins the vlues neessry for hosts onfigurtion. Tle 4 1. Avilility Zone 2 Hosts in Region A FQDN IP Mngement VLAN Defult Gtewy NTP Server sfo02m01esx01.sfo01.rinpole.lol ntp.sfo01.rinpole.lol ntp.lx01.rinpole.lol sfo02m01esx02.sfo01.rinpole.lol ntp.sfo01.rinpole.lol ntp.lx01.rinpole.lol VMwre, In. 16

17 Tle 4 1. Avilility Zone 2 Hosts in Region A (Continue) FQDN IP Mngement VLAN Defult Gtewy NTP Server sfo02m01esx03.sfo01.rinpole.lol ntp.sfo01.rinpole.lol ntp.lx01.rinpole.lol sfo02m01esx04.sfo01.rinpole.lol ntp.sfo01.rinpole.lol ntp.lx01.rinpole.lol Instll ESXi Intertively on All Hosts in Avilility Zone 2 Instll ll ESXi hosts for ll lusters intertively. 1 Power on the sfo02m01esx01 host in Region A. 2 Mount the USB rive ontining the ESXi ISO file, n oot from tht USB rive. 3 On the Welome to the VMwre Instlltion sreen, press Enter to strt the instlltion. 4 On the En User Liense Agreement (EULA) sreen, press F11 to ept the EULA. 5 On the Selet Disk to Instll or Upgre sreen, selet the USB rive or SD r uner lol storge to instll ESXi, n press Enter to ontinue. 6 Selet the keyor lyout, n press Enter. 7 Enter the esxi_root_user_psswor, onfirm, n press Enter. 8 On the Confirm Instll sreen, press F11 to strt the instlltion. 9 After the instlltion hs omplete suessfully, unmount the USB rive, n press Enter to reoot the host. VMwre, In. 17

18 10 Repet this proeure for ll hosts in the t enter, using the respetive vlues for eh host you onfigure. Configure Mngement Network on All Hosts in Avilility Zone 2 After the initil oot, use the ESXi Diret Console User Interfe (DCUI) for the initil host network onfigurtion n ministrtive ess. Perform the following tsks to onfigure the host network settings. Set network pter (vmk0) n VLAN ID for the mngement network. Set IP ress, sunet msk, gtewy, DNS server, n FQDN for the ESXi host. Repet this proeure for ll ESXi hosts in the mngement luster in Avilility Zone 2. Enter the vlues from Tle 4 1 for eh host tht you onfigure. 1 Open the DCUI on the sfo02m01esx01 physil ESXi host. Open onsole winow to the host. Press F2 to enter the DCUI. Log in using the following reentils. User nme Psswor Vlue root vsn_witness_root_psswor 2 Configure the mngement network. e Selet Configure Mngement Network n press Enter. Selet VLAN (Optionl) n press Enter. Enter 1621 s the VLAN ID for the Mngement Network n press Enter. Selet IPv4 Configurtion n press Enter. Configure IPv4 network using the following settings, n press Enter. Set stti IPv4 ress n network onfigurtion Vlue Selete IPv4 Aress Sunet Msk Defult Gtewy f Selet DNS Configurtion n press Enter. VMwre, In. 18

19 g Configure the following DNS settings, n press Enter. Use the following DNS Server ress n hostnme. Vlue Selete Primry DNS Server Alternte DNS Server Hostnme sfo02m01esx01.sfo01.rinpole.lol h i Selet Custom DNS Suffixes n press Enter. Ensure tht there re no suffixes liste, n press Enter. 3 After ompleting ll host network settings, press Es to exit, n press Y to onfirm the hnges. 4 Repet this proeure for the remining hosts in Avilility Zone 2. Configure SSH n NTP on the First ESXi Host in Avilility Zone 2 Time synhroniztion issues n result in serious prolems with your environment. Configure NTP for eh of the ESXi hosts in Avilility Zone 2. 1 Log in to the sfo02m01esx01 ESXi host. Open We rowser n go to User nme Psswor Vlue root esxi_root_user_psswor 2 Configure SSH options. In the Nvigtor pne, lik Mnge, n lik the Servies t. Selet the TSM-SSH servie, lik the Ations menu, selet Poliy, n lik Strt n stop with host. Clik Strt to strt the servie. VMwre, In. 19

20 3 Configure the NTP emon (ntp) options. In the Nvigtor pne, lik Mnge, lik the System t, lik Time & te, n lik Eit s. In the Eit time onfigurtion ilog ox, selet the Use Network Time Protool (enle NTP lient) rio utton, enter the following settings, n lik Sve. NTP servie strtup poliy NTP servers Vlue Strt n stop with host. ntp.sfo01.rinpole.lol, ntp.lx01.rinpole.lol Strt the servie y liking Ations, point to NTP servie, n hoose Strt. VMwre, In. 20

21 Configure the Mngement Cluster in Region A for Avilility Zone 2 5 You onfigure the mngement luster in Region A n ll the ESXi hosts in Avilility Zone 2. This hpter inlues the following topis: Deth Host Profile from the Mngement Cluster n Atth It to All Hosts in Avilility Zone 1 Crete Host Groups n Rules for Avilility Zone 1 A All the ESXi Hosts in Avilility Zone 2 to the Mngement Cluster in Region A Chnge Avne Options on the First ESXi Host of Avilility Zone 2 Configure vsphere Distriute Swith for Avilility Zone 2 Crete vsan Disk Groups for All Hosts in Avilility Zone 2 A Stti Routes for Both Avilility Zones n the vsan Witness Host Upte the Host Profile in Avilility Zone 1 Crete n Apply Host Profile for All Hosts in Avilility Zone 2 Deth Host Profile from the Mngement Cluster n Atth It to All Hosts in Avilility Zone 1 The hosts in the two vilility zones use ifferent VLANs n sunets, n you nnot use the sme host profile for oth vilility zones. Deth the originl host profile from the mngement luster in Region A n tth it only to the ESXi hosts in Avilility Zone 1. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Poliies n Profiles. VMwre, In. 21

22 3 In the Nvigtor pne, lik Host Profiles. 4 Deth the sfo01-m01hp-mgmt01 host profile from the mngement luster in Region A. Right-lik sfo01-m01hp-mgmt01 n selet Atth/Deth Hosts n Clusters. On the Selet hosts/lusters pge, selet the sfo01-m01-mgmt01 luster n lik Deth. On the Customize hosts pge, lik Finish. 5 Atth the sfo01-m01hp-mgmt01 host profile to the ESXi hosts in Avilility Zone 1. Right-lik sfo01-m01hp-mgmt01 n selet Atth/Deth Hosts n Clusters. On the Selet hosts/lusters pge, expn the sfo01-m01-mgmt01 luster, selet ll the ESXi hosts in Avilility Zone 1, n lik Atth. Host 1 Host 2 Host 3 Host 4 Vlue sfo01m01esx01.sfo01.rinpole.lol sfo01m01esx02.sfo01.rinpole.lol sfo01m01esx03.sfo01.rinpole.lol sfo01m01esx04.sfo01.rinpole.lol Selet Skip Host Customiztion n lik Finish. Crete Host Groups n Rules for Avilility Zone 1 Crete rules to ensure tht ll virtul mhines tht re rete in Avilility Zone 1 run on ESXi hosts in the sme zone. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters. 3 In the Nvigtor pne, expn sfo01m01v01.sfo01.rinpole.lol > sfo01-m01. 4 Selet the sfo01-m01-mgmt01 luster n lik the Configure t. 5 Crete host group ontining ll ESXi hosts of Avilility Zone 1. Uner Configurtion, lik VM/Host Groups. On the VM/Host Groups pge, lik the A utton. VMwre, In. 22

23 In the Crete VM/Host Group ilog ox, enter vilility-zone-1-hosts in the Nme text ox, selet Host Group from the Type rop-own menu, n lik the A utton. In the A VM/Host Group Memer ilog ox, selet ll the ESXi hosts in Avilility Zone 1 n lik OK. Host 1 Host 2 Host 3 Host 4 Vlue sfo01m01esx01.sfo01.rinpole.lol sfo01m01esx02.sfo01.rinpole.lol sfo01m01esx03.sfo01.rinpole.lol sfo01m01esx04.sfo01.rinpole.lol e Clik OK to rete the host group. 6 Crete VM group ontining ll virtul mhines of Avilility Zone 1. e Uner Configurtion, lik VM/Host Groups. On the VM/Host Groups pge, lik the A utton. In the Crete VM/Host Group ilog ox, enter vilility-zone-1-vms in the Nme text ox, selet VM Group from the Type rop-own menu, n lik the A utton. In the A VM/Host Group Memer ilog ox, selet ll the VMs of Avilility Zone 1, n lik OK. Clik OK to rete the VM group. 7 Crete rule to run virtul mhines in Avilility Zone 1 on hosts in the sme zone. Uner Configurtion, lik VM/Host Rules. On the VM/Host Rules pge, lik the A utton. In the Crete VM/Host Rule ilog ox, enter the following settings, n lik OK. Nme Enle rule. Type VM Group Vlue hostgroup-vilility-zone-1 Selete Virtul Mhines to Hosts vilility-zone-1-vms Shoul run on hosts in group. Host Group vilility-zone-1-hosts A All the ESXi Hosts in Avilility Zone 2 to the Mngement Cluster in Region A You must now ll ESXi hosts in Avilility Zone 2 into the Region A mngement luster. VMwre, In. 23

24 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters. 3 In the Nvigtor pne, expn sfo01m01v01.sfo01.rinpole.lol > sfo01-m01. 4 A ll the ESXi hosts in Avilility Zone 2 to the mngement luster in Region A. Right-lik the sfo01-m01-mgmt01 luster, n lik A Hosts. On the A new n existing hosts to your luster pge, enter the following vlues n lik Next. IP ress or FQDN User nme Psswor sfo02m01esx01.sfo01.rinpole.lol root esxi_root_user_psswor sfo02m01esx02.sfo01.rinpole.lol root esxi_root_user_psswor sfo02m01esx03.sfo01.rinpole.lol root esxi_root_user_psswor sfo02m01esx04.sfo01.rinpole.lol root esxi_root_user_psswor e f In the Seurity Alert ilog ox, lik Yes. On the Host summry pge, review the host informtion n lik Next. On the Resoure pool pge, lik Next. On the Rey to omplete pge, review your entries n lik Finish. 5 A n ESXi host to the Ative Diretory omin. Selet the sfo02m01esx01.sfo01.rinpole.lol host n lik the Configure t. Uner System, lik Authentition Servies. In the Authentition Servies pnel, lik the Join Domin utton. In the Join Domin ilog ox, enter the following settings n lik OK. Domin Using reentils User nme Psswor Vlue sfo01.rinpole.lol Selete sv-omin-join@rinpole.lol sv-omin-join_psswor VMwre, In. 24

25 6 Set the Ative Diretory Servie to strt n stop with host. On the Configure t, uner System, lik Servies. Selet the Ative Diretory Servie, hnge Eit Strtup Poliy to Strt n stop with host, n lik OK. Chnge Avne Options on the First ESXi Host of Avilility Zone 2 Chnge the efult ESX Amins group to SDDC-Amins to improve seurity n enle vsan to provision virtul mhine swp files s thin to sve spe in the vsan tstore. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters. 3 In the Nvigtor pne, expn sfo01m01v01.sfo01.rinpole.lol. 4 Selet the sfo02m01esx01.sfo01.rinpole.lol host n lik the Configure t. 5 Chnge the efult ESX Amins group. Uner System, lik Avne System s, n lik the Eit utton. In the Filter text ox, enter esxamins. Chnge the vlue of Config.HostAgent.plugins.hostsv.esxAminsGroup to SDDC-Amins, n lik OK. 6 Provision virtul mhine swp files on vsan s thin. Uner System, lik Avne System s, n lik the Eit utton. In the Filter text ox, enter vsn.swp. Chnge the vlue of VSAN.SwpThikProvisionDisle to 1, n lik OK. 7 Disle the SSH wrning nner. Uner System, lik Avne System s, n lik the Eit utton. In the Filter text ox, enter ssh. Chnge the vlue of UserVrs.SuppressShellWrning to 1, n lik OK. VMwre, In. 25

26 Configure vsphere Distriute Swith for Avilility Zone 2 After you ll ESXi hosts in Avilility Zone 2 to the mngement luster in Region A, you must rete port groups to hnle the mngement trffi in Avilility Zone 2. You must lso migrte the ESXi host mngement VMkernel pters to the vsphere Distriute Swith. Crete Port Groups for Mngement Trffi in Avilility Zone 2 After you e ll ESXi hosts to the luster, rete the istriute swith port groups require for Avilility Zone 2. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Networking n expn the sfo01m01v01.sfo01.rinpole.lol tree. 3 Crete port groups in the sfo01-m01-vs01 istriute swith for Avilility Zone 2. Right-lik sfo01-m01-vs01, n selet Distriute Port Group > New Distriute Port Group. Crete port groups with the following settings n lik Next. Port Group Nme Port Bining VLAN Type VLAN ID sfo02-m01-vs01-mngement Ephemerl ining VLAN 1621 sfo02-m01-vs01-vmotion Stti ining VLAN 1622 sfo02-m01-vs01-vsn Stti ining VLAN 1623 sfo02-m01-vs01-replition Stti ining VLAN 1626 sfo02-m01-vs01-uplink01 Stti ining VLAN 1650 sfo02-m01-vs01-uplink02 Stti ining VLAN 1651 On the Rey to omplete pge, review your entries, n lik Finish. Repet this step for eh port group. VMwre, In. 26

27 4 Configure the port groups to use the Route Bse on Physil NIC Lo teming lgorithm. Right-lik the sfo01-m01-vs01 istriute swith n selet Distriute Port Group > Mnge Distriute Port Groups. e On the Selet port group poliies pge, selet Teming n filover n lik Next. Clik the Selet istriute port groups utton, ll port groups exept sfo02-m01-vs01- uplink01 n sfo02-m01-vs01-uplink02, lik OK n lik Next. On the Teming n filover pge, selet Route se on physil NIC lo from the Lo lning rop-own menu n lik Next. Clik Finish. 5 Configure the uplinks for the sfo02-m01-vs01-uplink01 n sfo02-m01-vs01-uplink02 port groups. e f Right lik the sfo02-m01-vs01-uplink01 port group, n lik Eit s. Selet Teming n Filover. Move Uplink2 to Unuse uplinks n lik OK. Right lik the sfo02-m01-vs01-uplink02 port group, n lik Eit s. Selet Teming n Filover. Move Uplink1 to Unuse uplinks n lik OK. Connet the First ESXi Host in Avilility Zone 2 to vsphere Distriute Swith After you rete the port groups for Avilility Zone 2, tth the first ESXi host in Avilility Zone 2 to the istriute swith. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Networking n expn the sfo01m01v01.sfo01.rinpole.lol tree. VMwre, In. 27

28 3 Connet the sfo02m01esx01.sfo01.rinpole.lol ESXi host to the sfo01-m01-vs01 istriute swith y migrting its VMkernel network pters. e f g h Right-lik sfo01-m01-vs01, n selet A n Mnge Hosts. On the Selet tsk pge, selet A hosts n lik Next. On the Selet hosts pge, lik New hosts. In the Selet new hosts ilog ox, selet sfo02m01esx01.sfo01.rinpole.lol n lik OK. On the Selet hosts pge, lik Next. On the Mnge physil network pters pge, lik vmni1 n lik Assign uplink. In the Selet n Uplink ilog ox, selet Uplink2 n lik OK. On the Mnge physil network pters pge, lik Next. 4 Assign the VMkernel existing network pters. On the Mnge VMkernel pters pge, lik vmk0 n lik Assign port group. Selet sfo02-m01-vs01-mngement, n lik OK. On the Migrte VM networking pge, lik Finish. On the Rey to omplete pge, review your entries n lik Finish. 5 Configure the VMkernel network pters. e From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. Selet sfo02m01esx01.sfo01.rinpole.lol, lik the Configure t, n uner Networking lik VMkernel pters. Clik the A host networking ion, selet VMkernel Network Apter, n lik Next. On the A Networking pge, lik Selet n existing network, rowse to selet the sfo02- m01-vs01-vsn port group, lik OK, n lik Next. On the Port properties pge, selet the following settings hek ox n lik Next. Vlue for sfo02-m01-vsn Vlue for sfo02-m01- vmotion Vlue for sfo02-m01-vs01- replition Network lel sfo02-m01-vs01-vsn(sfo01- m01-vs01) sfo02-m01-vmotion (sfo01-m01-vs01) sfo02-m01-vs01-replition (sfo01-m01-vs01) IP settings IPv4 IPv4 IPv4 MTU TCP/IP stk Defult Defult Defult Enle servies vsan vmotion vsphere Replition vsphere Replition NFC For the MTU use 9000, or get the MTU from the swith. VMwre, In. 28

29 f On the IPv4 settings pge, enter the following settings, lik Next, n lik Finish. Vlue for sfo02-m01-vsn Vlue for sfo02-m01- vmotion Vlue for sfo02-m01-vs01- replition Use stti IPv4 settings Selete Selete Selete IPv4 ress Sunet msk g Repet steps 5-5g n rete the remining VMkernel network pters for remining hosts of AZ2. 6 Configure the vmotion TCP/IP stk. Clik TCP/IP onfigurtion. Selet vmotion n lik the Eit TCP/IP stk onfigurtion ion. Clik Routing n enter for the VMkernel gtewy n lik OK. 7 Migrte the lst physil pter from the stnr swith to the sfo01-m01-vs01 istriute swith. e f g h i j From the Home menu, selet Networking n expn the sfo01m01v01.sfo01.rinpole.lol tree. Right-lik sfo01-m01-vs01, n selet A n Mnge Hosts. On the Selet tsk pge, selet Mnge host networking, n lik Next. On the Selet hosts pge, lik Atthe hosts. In the Selet memer hosts ilog ox, selet sfo02m01esx01.sfo01.rinpole.lol, lik OK, n lik Next. On the Mnge physil network pters pge, selet vmni0, n lik Assign uplink. In the Selet n Uplink for vmni1 ilog ox, selet Uplink1, lik OK, n lik Next. On the Mnge VMkernel pters pge, lik Next. On the Migrte VM networking pge, lik Next. On the Rey to omplete pge, review your entries n lik Finish. 8 Remove the efult vswith0 stnr swith. From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. Selet sfo02m01esx01.sfo01.rinpole.lol n lik the Configure t. Uner Virtul swithes, ollpse Distriute Swith, expn vswith0 n lik Remove. In the Remove Stnr Swith ilog ox, lik Yes to onfirm the removl. VMwre, In. 29

30 Crete vsan Disk Groups for All Hosts in Avilility Zone 2 Crete vsan isk groups on eh ESXi host in Avilility Zone 2 tht is ontriuting storge to the vsan tstore. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn sfo01m01v01.sfo01.rinpole.lol. 3 Selet the sfo01-m01-mgmt01 luster n lik the Configure t. 4 Uner vsan, lik Disk Mngement. 5 Clik sfo02m01esx01.sfo01.rinpole.lol n lik the Crete New Disk Group utton. 6 In the Crete Disk Group winow, selet flsh isk for the he tier, two hr isk rives for the pity Type, n lik OK. 7 Repet steps Step 5 n Step 6 for the remining ESXi hosts in Avilility Zone 2. Host 2 Host 3 Host 4 Vlue sfo02m01esx02.sfo01.rinpole.lol sfo02m01esx03.sfo01.rinpole.lol sfo02m01esx04.sfo01.rinpole.lol A Stti Routes for Both Avilility Zones n the vsan Witness Host Configure stti routes on the first ESXi hosts in Avilility Zone 1 n Avilility Zone 2, n the vsan witness host to enle network ommunition for the vsan kernel trffi. VMwre, In. 30

31 1 Configure stti routes on the first ESXi host of Avilility Zone 1 y using Seure Shell (SSH) lient. Open n SSH onnetion to sfo01m01esx01.sfo01.rinpole.lol. Log in using the following reentils. User nme Psswor Vlue root esxi_root_user_psswor A stti route to the Avilility Zone 2 vsan network y running the following ommn. esxli network ip route ipv4 -n /24 -g A stti route to the vsan witness host witness network y running the following ommn. esxli network ip route ipv4 -n /24 -g Configure stti routes on the first ESXi host of Avilility Zone 2 y using Seure Shell (SSH) lient. Open n SSH onnetion to sfo02m01esx01.sfo01.rinpole.lol. Log in using the following reentils. User nme Psswor Vlue root esxi_root_user_psswor A stti route to the Avilility Zone 1 vsan network y running the following ommn. esxli network ip route ipv4 -n /24 -g A stti route to the vsan witness host witness network y running the following ommn. esxli network ip route ipv4 -n /24 -g Configure stti routes on the vsan witness host y using Seure Shell (SSH) lient. Open n SSH onnetion to sfo03m01vsnw01.sfo01.rinpole.lol. Log in using the following reentils. User nme Psswor Vlue root vsn_witness_root_psswor VMwre, In. 31

32 A stti route to the Avilility Zone 1 vsan network y running the following ommn. esxli network ip route ipv4 -n /24 -g A stti route to the Avilility Zone 2 vsan network y running the following ommn. esxli network ip route ipv4 -n /24 -g Upte the Host Profile in Avilility Zone 1 To pture the stti route onfigurtion, you upte the host profile of Avilility Zone 1 n remeite the remining ESXi hosts in Avilility Zone 1. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Poliies n Profiles. 3 In the Nvigtor pne, lik Host Profiles. 4 Upte the host profile from the sfo01m01esx01.sfo01.rinpole.lol ESXi host. Right-lik sfo01-m01hp-mgmt01 n selet Copy s from Host. In the Copy s from Host ilog ox, selet the sfo01m01esx01.sfo01.rinpole.lol host n lik OK. 5 Remeite ll the ESXi hosts in Avilility Zone 1. Doule-lik sfo01-m01hp-mgmt01, lik the Monitor t, n lik Compline. Selet ll hosts in Avilility Zone 1 n lik the Chek Host Profile Compline ion. Host 1 Host 2 Host 3 Host 4 Vlue sfo01m01esx01.sfo01.rinpole.lol sfo01m01esx01.sfo01.rinpole.lol sfo01m01esx03.sfo01.rinpole.lol sfo01m01esx04.sfo01.rinpole.lol Note In the Host Profile Compline olumn the sfo01m01esx01.sfo01.rinpole.lol host shows s Complint, ut the remining hosts s Not Complint. VMwre, In. 32

33 Selet ll the non-omplint hosts in Avilility Zone 1 n lik Remeite. In the Remeite wizr, selet Automtilly reoot hosts tht require remeition, n lik OK. Note All hosts show s Complint. Crete n Apply Host Profile for All Hosts in Avilility Zone 2 Crete seprte host profile n pply it to ll ESXi hosts in Avilility Zone 2 so they hve the sme onfigurtion. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn sfo01m01v01.sfo01.rinpole.lol. 3 Crete host profile from the sfo02m01esx01.sfo01.rinpole.lol ESXi host. Right-lik sfo02m01esx01.sfo01.rinpole.lol n selet Host Profiles > Extrt Host Profile. In the Extrt Host Profile winow, enter sfo02-m01hp-mgmt01 s the Nme of the host profile n lik OK. 4 Atth the host profile to ll the ESXi hosts in Avilility Zone 2. From the Home menu, selet Poliies n Profiles. In the Nvigtor pne, lik Host Profiles. VMwre, In. 33

34 Right-lik the sfo02-m01hp-mgmt01 host profile n selet Atth/Deth Hosts n Clusters. On the Atth/Deth Hosts n Clusters pge, expn the sfo01-m01-mgmt01 luster, selet ll the ESXi hosts in Avilility Zone 2 n lik Sve. Host 1 Host 2 Host 3 Host 4 Vlue sfo02m01esx01.sfo01.rinpole.lol sfo02m01esx02.sfo01.rinpole.lol sfo02m01esx03.sfo01.rinpole.lol sfo02m01esx04.sfo01.rinpole.lol 5 Eit the host ustomiztion profile for the hosts in Avilility Zone 2. Right-lik the sfo02-m01hp-mgmt01 host profile n selet Eit Host Customiztions. On the Selet hosts pge, selet ll hosts in Avilility Zone 2 n lik Next. VMwre, In. 34

35 On the Eit Host Customiztions pge, enter the following vlues. ESXi Host Networking onfigurtion>host virtul NIC sfo01-m01-vs01:sfo02- m01-vs01- mngement:mngement->ip ress settings Host IPv4 ress Host virtul NIC sfo01-m01- vs01:sfo02-m01-vs01- mngement:mngement->ip ress settings SunetMsk sfo02m01esx01.sfo01.rinpole.lol sfo02m01esx02.sfo01.rinpole.lol sfo02m01esx03.sfo01.rinpole.lol sfo02m01esx04.sfo01.rinpole.lol ESXi Host Host virtul NIC sfo01-m01- vs01:sfo02-m01-vs01-vsn:vsn- >IP ress settings Host IPv4 ress Host virtul NIC sfo01-m01- vs01:sfo02-m01-vs01- vsn:vsn->ip ress settings SunetMsk sfo02m01esx01.sfo01.rinpole.lol sfo02m01esx02.sfo01.rinpole.lol sfo02m01esx03.sfo01.rinpole.lol sfo02m01esx04.sfo01.rinpole.lol ESXi Host Ative Diretory Configurtion Psswor Ative Diretory Configurtion user nme Networking onfigurtion>netstk instne>efulttpipstk>dns onfigurtion >Host nme sfo02m01esx01.sfo01.rinpole.lol sv-ominjoin_psswor sfo02m01esx01 sfo02m01esx02.sfo01.rinpole.lol sv-ominjoin_psswor sfo02m01esx02 sfo02m01esx03.sfo01.rinpole.lol sv-ominjoin_psswor sfo02m01esx03 sfo02m01esx04.sfo01.rinpole.lol sv-ominjoin_psswor sfo02m01esx04 ESXi Host Host virtul NIC sfo01-m01- vs01:sfo02-m01-vs01- replition:vspherereplition, vspherereplitionnfc->ip ress settings Host IPv4 ress Host virtul NIC sfo01-m01- vs01:sfo02-m01-vs01- replition:vspherereplition, vspherereplitionnfc->ip ress settings SunetMsk sfo02m01esx01.sfo01.rinpole.lol sfo02m01esx02.sfo01.rinpole.lol sfo02m01esx03.sfo01.rinpole.lol sfo02m01esx04.sfo01.rinpole.lol VMwre, In. 35

36 ESXi Host Host virtul NIC sfo01-m01- vs01:sfo02-m01-vs01- vmotion:vmotion->ip ress settings Host IPv4 ress Host virtul NIC sfo01-m01- vs01:sfo02-m01-vs01- vmotion:vmotion->ip ress settings SunetMsk sfo02m01esx01.sfo01.rinpole.lol sfo02m01esx02.sfo01.rinpole.lol sfo02m01esx03.sfo01.rinpole.lol sfo02m01esx04.sfo01.rinpole.lol Clik Finish. 6 Remeite ll ESXi hosts in Avilility Zone 2. Clik the sfo02-m01hp-mgmt01 host profile, lik the Monitor t, n lik Compline. Selet ll four hosts sfo02m01esx01.sfo01.rinpole.lol to sfo02m01esx04.sfo01.rinpole.lol in the Host olumn n lik Chek Compline. In the Host Profile Compline olumn the sfo02m01esx01.sfo01.rinpole.lol host shows s Complint, ut the remining hosts s Not Complint Selet eh of the non-omplint hosts n lik Remeite. Selet the Automtilly reoot hosts tht require remeition hek ox n lik OK. All hosts show s Complint. 7 Sheule nightly ompline heks. On the Monitor t for the sfo02-m01hp-mgmt01 host profile, lik Sheule Tsks. Clik New sheule tsk n selet Chek Compline. In the Sheule New Tsks (Chek Compline) ilog ox, enter the following settings. Tsk nme Run Strt on En Vlue sfo02-m01hp-mgmt01 - Chek Compline Dily 10:00 PM Never Clik the Sheule the tsk utton. VMwre, In. 36

37 Configure vsan Strethe Cluster for the Mngement Cluster in Region A 6 After prepring ll the ESXi hosts n the network for multiple vilility zones, you onfigure the vsan strethe luster on the mngement luster in Region A. This hpter inlues the following topis: Enle n Configure vsan Strethe Cluster in Region A Upte the vsphere Avilility s of the Mngement Cluster in Region A Upte the vsan Defult Storge Poliy of the Mngement Cluster in Region A Reeploy NSX Eges n NSX Controllers in the Mngement Cluster Upte Host Profiles to Cpture the vsan Strethe Cluster Configurtion A All NSX Eges n Controllers to the VM Group of Avilility Zone 1 Enle n Configure vsan Strethe Cluster in Region A On the mngement luster in Region A, you enle the vsan strethe luster. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn sfo01m01v01.sfo01.rinpole.lol. 3 Selet the sfo01-m01-mgmt01 luster n lik the Configure t. 4 Uner vsan, lik Fult Domins n lik the Configure utton. 5 On the Configure fult omins pge, enter Preferre s the Nme of Preferre fult omin n enter Seonry s the Nme of Seonry fult omin. VMwre, In. 37

38 6 Selet ll the ESXi hosts of Avilility Zone 2, lik the Move utton tht moves them to Seonry fult omin n lik Next. Host 1 Host 2 Host 3 Host 4 Vlue sfo02m01esx01.sfo01.rinpole.lol sfo02m01esx02.sfo01.rinpole.lol sfo02m01esx03.sfo01.rinpole.lol sfo02m01esx04.sfo01.rinpole.lol 7 On the Selet witness host pge, expn the sfo01-m01 t enter, selet the sfo03m01vsnw01.sfo01.rinpole.lol host, n lik Next. 8 On the Clim isks for witness host pge, selet the following isks for eh tier, lik Next, n lik Finish. Lol VMwre Disk (mpx.vmh1:c0:t2:l0) Lol VMwre Disk (mpx.vmh1:c0:t1:l0) Vlue he tier pity tier Upte the vsphere Avilility s of the Mngement Cluster in Region A Chnge the vsphere vilility settings of the Region A mngement luster for support of high vilility (HA) filover if there is n vilility zone filure. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. 3 Selet the sfo01-m01-mgmt01 luster, n lik the Configure t. 4 Uner Servies, lik vsphere Avilility, n lik Eit. 5 On the Amission Control pge of the Eit Cluster s ilog ox, set Host filures luster tolertes to 4 n lik OK. VMwre, In. 38

39 6 On the Avne Options pge, lik the A utton, the following settings, n lik OK. Vlue s.isoltionress s.isoltionress s.useefultisoltionress flse Upte the vsan Defult Storge Poliy of the Mngement Cluster in Region A To tolerte n vilility zone filure, upte the vsan efult storge poliy for seonry level of filures. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. 3 Selet the sfo01-m01-mgmt01 luster, n lik the Configure t. 4 Uner vsan, lik Servies. 5 Expn Performne Servie n lik Eit. 6 In the vsan Performne Servie s ilog ox, enter the following settings n lik Apply. Enle vsan Performne Servie Storge poliy Verose moe Network ignosti moe Vlue Selete vsan Defult Storge Poliy Deselete Deselete 7 Uner the expne Performne Servie, lik vsan Defult Storge Poliy. 8 On the VM Storge Poliies pge, selet vsan Defult Storge Poliy n lik Eit s. 9 In the Eit VM Storge Poliy ilog ox, lik Next. VMwre, In. 39

40 10 On the Poliy struture pge, selet the following settings n lik Next. Enle host se rules Enle rules for "vsan" storge Enle tg se replement rules Vlue Deselete Selete Deselete 11 On the vsan pge, uner Avilility enter the following vlues n lik Next. Site isster tolerne Fult omin filures to tolerte Filures to tolerte Vlue None-stnr luster with neste fult omins 1 filure - RAID-1 (Mirroring) 1 filure - RAID-1 (Mirroring) 12 On the Storge omptiility pge, lik Next. 13 On the Review n finish pge, lik Finish. 14 From the Repply to VMs rop-own menu selet Now, lik Yes, n wit for the reonfigurtion of ll the existing virtul mhines to finish. Reonfigurtion of the NSX Controller virtul mhines n NSX Ege virtul mhines fils. You must mnully reeploy them. Reeploy NSX Eges n NSX Controllers in the Mngement Cluster To use the upte vsan efult storge poliy of the Mngement Cluster in Region A n tolerte n vilility zone filure, you must reeploy NSX Controller n NSX Ege virtul mhines. Reeploy All NSX Ege Virtul Mhines To use the upte vsan storge poliy, you reeploy ll the NSX Ege virtul mhines. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor VMwre, In. 40

41 2 Reeploy ll the NSX Ege virtul mhines in Region A mngement luster. From the Home menu, selet Networking n Seurity. In the Nvigtor pne, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Selet sfo01m01esg01, lik Ations, selet Reeploy, n lik Yes. Wit for the eployment of sfo01m01esg01 to finish. e Repet this proeure n reeploy the remining NSX Ege virtul mhines. NSX Ege sfo01m01esg02 sfo01m01ulr01 sfo01m01l01 sfo01ps01 3 Configure DRS nt-ffinity rules for the NSX Ege servies gtewys. From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. Selet the sfo01-m01-mgmt01 luster, n lik the Configure t. Uner Configurtion, lik VM/Host Rules, n lik A. In the Crete VM/Host Rule ilog ox, enter the following settings n lik A. Nme Enle rule Type Vlue nti-ffinity-rule-empeges-01 Selete Seprte Virtul Mhine e f In the A Virtul Mhine ilog ox, selet the hek ox next to sfo01m01esg01-0 n sfo01m01esg02-0, n lik OK. In the Crete VM/Host Rule ilog ox, lik OK. Reeploy All NSX Controller Virtul Mhines To use the upte vsan storge poliy, you reeploy ll the NSX Controller virtul mhines. VMwre, In. 41

42 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 Reeploy ll the NSX Controller noes of Region A mngement luster. From the Home menu, selet Networking & Seurity. In the Nvigtor pne, lik Instlltion n Upgre. On the Mngement t, uner NSX ontroller Noes, selet Uner the NSX Controller noes t, selet sfo01m01nsx01 n lik the Delete ion. Wit for sfo01w01nsx01 ontroller eletion to e omplete. e Uner the NSX Controller noes t, selet sfo01m01nsx02 n lik the Delete ion. Wit for sfo01w01nsx02 ontroller eletion to e omplete. f Uner the NSX Controller noes, sfo01w01nsx03, Selet Proee to Fore Delete, Clik Delete n Delete to the lst ontroller. g Delete gin to Delete the lst Controller sfo01w01nsx03. h i Uner NSX Controller noes, lik the A ion to reeploy the NSX Controller noe. On the A Controller pge, uner Psswor s, enter the following settings, n lik Next. You onfigure psswor only uring the eployment of the first ontroller. The other ontrollers use the sme psswor. Vlue NSX Mnger Psswor Confirm Psswor nsx_ontrollers_psswor nsx_ontrollers_psswor VMwre, In. 42

43 j Uner Deployment & Connetivity, enter the following settings n lik OK. Nme Dtenter Cluster/Resoure Pool Dtstore Foler Connete To Selet IP Pool Vlue sfo01m01nsx01 for ontroller1 sfo01m01nsx02 for ontroller2 sfo01m01nsx03 for ontroller3 sfo01-m01 sfo01-m01-mgmt01 sfo01-m01-vsn01 sfo01-m01f-nsx sfo01-m01-vs01-mngement sfo01-mgmt01-nsx01 k After the Sttus of the ontroller noe hnges to Connete, repet the step to reeploy the remining NSX Controller noes using the sme onfigurtion. Controller Nme sfo01m01nsx02 sfo01m01nsx03 To mintin the NSX vilility uring the reeployment of NSX Controller noes, reeploy only one NSX Controller t time. 3 Configure DRS nti-ffinity rules for the NSX Controller noes. e From the Home menu, selet Hosts n Clusters. In the Nvigtor pne, expn the sfo01m01v01.sfo01.rinpole.lol tree. Selet the sfo01-m01-mgmt01 luster, n lik the Configure t. Uner Configurtion, lik VM/Host Rules, n lik A. In the Crete VM/Host Rule ilog ox, enter the following settings, n lik OK. Nme Enle rule Type Vlue nti-ffinity-rule-nsx Selete Seprte Virtul Mhine f g In the A Virtul Mhine ilog ox, selet the hek ox next to eh of the three NSX Controller virtul mhines n lik OK. In the Crete VM/Host Rule ilog ox, lik OK. VMwre, In. 43

44 Upte Host Profiles to Cpture the vsan Strethe Cluster Configurtion To pture the vsan strethe luster onfigurtion hnges, you upte the host profiles in oth vilility zones. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Poliies n Profiles. 3 In the Nvigtor pne, lik Host Profiles. 4 Upte the sfo01-m01hp-mgmt01 host profile in Avilility Zone 1. Right-lik sfo01-m01hp-mgmt01 n selet Copy s from Host. In the Copy s from host ilog ox, selet the sfo01m01esx01.sfo01.rinpole.lol host n lik OK. 5 Chek the sfo01-m01hp-mgmt01 host profile ompline of the ESXi hosts in Avilility Zone 1. Clik sfo01-m01hp-mgmt01, lik the Monitor t, n lik Compline. Selet ll hosts from sfo01m01esx01.sfo01.rinpole.lol to sfo01m01esx04.sfo01.rinpole.lol n lik Chek Compline. All hosts show s Complint in the Host Compline olumn. 6 Upte the host profile in Avilility Zone 2. Right-lik sfo02-m01hp-mgmt01 n selet Copy s from Host. In the Copy s from Host ilog ox, selet the sfo02m01esx01.sfo01.rinpole.lol host n lik OK. 7 Chek the host profile ompline for the ESXi hosts in Avilility Zone 2. Clik sfo02-m01hp-mgmt01, lik the Monitor t, n lik Compline. Selet ll hosts from sfo02m01esx01.sfo01.rinpole.lol to sfo02m01esx04.sfo01.rinpole.lol n lik Chek Compline. All hosts show s Complint in the Host Compline olumn. VMwre, In. 44

45 A All NSX Eges n Controllers to the VM Group of Avilility Zone 1 Configure VM/Host groups to ensure ll the virtul mhines tht re rete in Avilility Zone 1 run on the ESXi hosts in the sme zone. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. 3 Selet the sfo01-m01-mgmt01 luster n lik the Configure t. 4 Uner Configurtion, lik VM/Host Groups. 5 Uner VM/Host Groups, selet vilility-zone-1-vms. 6 Uner VM/Host Group Memers, lik the A utton. 7 In the A Virtul Mhine ilog ox, selet ll the VMs tht re running in Avilility Zone 1, n lik OK. VMwre, In. 45

46 Configure NSX Dynmi Routing for Avilility Zone 2 in Region A 7 Deploy two ECMP-enle NSX Ege evies n enle North-South routing in Avilility Zone 2. This hpter inlues the following topis: Deploy NSX Ege Devies for North-South Routing in Avilility Zone 2 Disle the Firewll Servie for Avilility Zone 2 Configure Routing for Avilility Zone 2 Verify Peering n Estlishment of BGP for Avilility Zone 2 Crete Host Groups n Rules for Avilility Zone 2 Deploy NSX Ege Devies for North-South Routing in Avilility Zone 2 Deploy two NSX Ege evies for North-South routing. Perform this proeure two times to eploy two NSX Ege evies. Tle 7 1. NSX Ege Devies NSX Ege Devie NSX Ege evie 1 NSX Ege evie 2 Devie Nme sfo02m01esg01 sfo02m01esg02 Tle 7 2. NSX Ege Interfes s Interfe Primry IP Aress sfo02m01esg01 Primry IP Aress sfo02m01esg02 Uplink Uplink sfo01m01ulr VMwre, In. 46

47 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Networking & Seurity. 3 In the Nvigtor pne, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu n lik the A ion. On the Nme n esription pge, enter the following settings n lik Next. s Vlues for sfo02m01esg01 Vlues for sfo02m01esg02 Nme sfo02m01esg01 sfo02m01esg02 Hostnme sfo02m01esg01.sfo01.rinpole.lol sfo02m01esg02.sfo01.rinpole.lol Deploy NSX Ege Selete Selete On the s pge, enter the following settings n lik Next. s User Nme Psswor Confirm psswor Enle SSH ess Enle FIPS moe Enle uto rule genertion Ege Control Level Logging Vlue min ege_min_psswor ege_min_psswor Selete Deselete Selete Info On the Configure eployment pge, selet sfo01-m01 for Dtenter, selet Lrge s Appline Size, n lik the A ion. VMwre, In. 47

48 In the A NSX Ege Appline ilog ox, enter the following settings, lik OK, n lik Next. Cluster/Resoure Pool Dtstore Host Foler Resoure Reservtion Vlue sfo01-m01-mgmt01 sfo01-m01-vsn01 sfo01m01esx01.sfo01.rinpole.lol sfo01-m01f-nsx System Mnge e On the Configure interfes pge, lik the A ion to onfigure the Uplink01 interfe using the following settings, n lik OK. Vlues for sfo02m01esg01 Vlues for sfo02m01esg02 Nme Uplink01 Uplink01 Type Uplink Uplink Connete To sfo02-m01-vs01-uplink01 sfo02-m01-vs01-uplink01 Connetivity Sttus Connete Connete Primry IP Aress Sunet Prefix Length MTU Sen ICMP Reiret Enle Enle f On the Configure interfes pge, lik the A ion to onfigure the Uplink02 interfe using the following settings, n lik OK. Vlues for sfo02m01esg01 Vlues for sfo02m01esg02 Nme Uplink02 Uplink02 Type Uplink Uplink Connete To sfo02-m01-vs01-uplink02 sfo02-m01-vs01-uplink02 Connetivity Sttus Connete Connete Primry IP Aress Sunet Prefix Length MTU Sen ICMP Reiret Enle Enle VMwre, In. 48

49 g On the Configure interfes pge, lik the A ion to onfigure the UDLR interfe, enter the following settings, n lik OK. Vlues for sfo02m01esg01 Vlues for sfo02m01esg02 Nme sfo01m01ulr01 sfo01m01ulr01 Type Internl Internl Connete To Universl Trnsit Network Universl Trnsit Network Connetivity Sttus Connete Connete Primry IP Aress Sunet Prefix Length MTU Sen ICMP Reiret Enle Enle h i j On the Defult gtewy settings pge, isle the Configure Defult Gtewy hek ox n lik Next. On the Firewll n HA pge, lik Next. On the Rey to omplete pge, review the onfigurtion settings n lik Finish. Repet this step n onfigure the seon NSX Ege using the settings for sfo02m01esg02. 5 Configure DRS ffinity rules for the NSX Ege servies gtewys. e From the Home menu, selet Hosts n Clusters. In the Nvigtor pne, expn the sfo01m01v01.sfo01.rinpole.lol tree n selet the sfo01-m01-mgmt01 luster. Clik the Configure t n uner Configurtion, lik VM/Host Rules. Clik the A utton. In the Crete VM/Host Rule ilog ox, enter the following settings n lik the A utton. Nme Enle rule Type Vlue nti-ffinity-rule-empeges-02 Selete Seprte Virtul Mhine f g In the A Rule Memer ilog ox, selet sfo02m01esg01 n sfo02m01esg02 n lik OK. In the Crete VM/Host Rule ilog ox, lik OK. Disle the Firewll Servie for Avilility Zone 2 For the equl-ost multi-pth (ECMP) to operte orretly, isle the firewll of the NSX Ege evies. You perform this proeure for eh NSX Ege evie in Avilility Zone 2. VMwre, In. 49

50 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 Disle the firewll on oth NSX Ege evies. e f g From the Home menu, selet Networking & Seurity. In the Nvigtor pne, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik the sfo02m01esg01 NSX Ege evie. Clik the Mnge t n lik Firewll. Clik the Stop utton n lik Pulish Chnges. Repet the steps for the sfo02m01esg02 NSX Ege evie. Configure Routing for Avilility Zone 2 You enle n onfigure ynmi routing on oth North-South NSX Ege servies gtewys n NSX Universl Logil Router to enle routing to Avilility Zone 2. Enle n Configure Routing on NSX Ege Servies Gtewys Enle Borer Gtewy Protool (BGP) to exhnge the routing informtion etween the NSX Ege servies gtewys. Repet this proeure two times to enle BGP for oth NSX Ege evies: sfo02m01esg01 n sfo02m01esg02. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor VMwre, In. 50

51 2 From the Home menu, selet Networking & Seurity. 3 In the Nvigtor pne, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik the sfo02m01esg01 NSX Ege evie. 6 Clik the Mnge t, n lik Routing. 7 On the Glol Configurtion pge, perform the following tions. Uner ECMP, lik Strt. Uner Dynmi Routing Configurtion, lik Eit. Selet Uplink01 s the Router ID n lik OK. Clik Pulish Chnges. 8 On the Routing t, lik Stti Routes. Clik the A ion, enter the following settings, n lik OK. Vlue Network /24 Next Hop Interfe sfo01m01ulr01 Amin Distne 210 Clik the A ion, enter the following settings, n lik OK. Vlue Network /24 Next Hop Interfe sfo01m01ulr01 Amin Distne 210 Clik the A ion, enter the following settings, n lik OK. Vlue Network /24 Next Hop Interfe sfo01m01ulr01 Amin Distne 210 Clik Pulish Chnges. VMwre, In. 51

52 9 On the Routing t, lik BGP. Clik Eit, enter the following settings, n lik OK. Enle BGP Enle Greful Restrt Enle Defult Originte Vlue Selete Deselete Deselete Lol AS On the BGP pge, lik the A ion n neighor. In the New Neighor ilog ox, onfigure the first top-of-rk swith using the following vlues n lik OK. Vlue IP Aress Remote AS Remote Privte AS Selete Weight 60 Keep Alive Time 4 Hol Down Time 12 Psswor BGP_psswor e Clik the A ion n nother neighor. In the New Neighor ilog ox, onfigure the seon top-of-rk swith using the following vlues n lik OK. Vlue IP Aress Remote AS Remote Privte AS Selete Weight 60 Keep Alive Time 4 Hol Down Time 12 Psswor BGP_psswor f Clik the A ion n nother neighor. VMwre, In. 52

53 g In the New Neighor ilog ox, onfigure the universl istriute logil router (UDLR) s neighor using the following vlues, n lik OK. Vlue IP Aress Remote AS Remote Privte AS Selete Weight 40 Keep Alive Time 1 Hol Down Time 3 Psswor BGP_psswor h Clik Pulish Chnges. The three neighors you e pper in the Neighors tle. 10 On the Routing t, lik Route Reistriution. On the Route Reistriution pge, lik the Eit utton. In the Chnge reistriution settings ilog ox, selet the BGP hek ox n lik OK. Uner the Route Reistriution tle, lik the A ion. In the New Reistriution riteri ilog ox, enter the following settings n lik OK. Prefix Lerner Protool OSPF Stti routes Connete Ation Vlue Any BGP Deselete Selete Selete Permit e Clik Pulish Chnges. The route reistriution onfigurtion ppers in the Route Reistriution tle. 11 Repet this proeure for the sfo02m01esg02 NSX Ege evie. Configure Dynmi Routing on Universl Distriute Logil Router Configure the universl istriute logil router (UDLR) to estlish BGP peering with oth North-South NSX Ege servies gtewys. VMwre, In. 53

54 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Networking & Seurity. 3 In the Nvigtor pne, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 A the two NSX Ege gtewys s BGP neighors. Doule-lik the sfo01m01ulr01 NSX Ege evie. Clik the Mnge t, lik Routing, n lik BGP. Clik the A ion n neighor. In the New Neighor ilog ox, enter the following vlues for oth NSX Ege evies n lik OK. sfo02m01esg01 Vlues sfo02m01esg02 Vlues IP Aress Forwring Aress Protool Aress Remote AS Weight Keep Alive Time 1 1 Hol Down Time 3 3 Psswor BGP_psswor BGP_psswor e Clik Pulish Chnges. Verify Peering n Estlishment of BGP for Avilility Zone 2 The Universl Distriute Logil Router (UDLR) nees to estlish onnetion to NSX Ege servies gtewy efore BGP uptes n e exhnge. Verify tht the North-South NSX Eges servies gtewy is suessfully peering, n tht BGP routing hs een estlishe. VMwre, In. 54

55 1 Log in to the UDLR y using Seure Shell (SSH) lient. Open n SSH onnetion to sfo02m01esg01. Log in using the following reentils. User nme Psswor Vlue min ege_min_psswor 2 Run the show ip gp neighors ommn to isply informtion out the BGP n TCP onnetions to neighors. The BGP Stte isplys Estlishe, UP if you hve suessfully peere with the following routers. Vlue First Top of Rk Swith Seon Top of Rk Swith sfo01m01ulr VMwre, In. 55

56 VMwre, In. 56

57 3 Run the show ip route ommn to verify tht you re reeiving routes using BGP, n tht multiple routes to BGP lerne networks exist. You verify multiple routes to BGP lerne networks y loting the sme route using ifferent IP ress. The IP resses re liste fter the wor vi in the right-sie olumn of the routing tle output. In the imge elow there re two ifferent routes to the following BGP networks: /0, /24, /24, n /24. You n ientify BGP networks y the letter B in the left-sie olumn. Lines eginning with C (onnete) hve only single route. 4 Repet this proeure to verify routing on the sfo02m01esg02 NSX Ege servies gtewy. Crete Host Groups n Rules for Avilility Zone 2 Ensure tht ll the virtul mhines tht re rete in Avilility Zone 2 run on ESXi hosts in the sme zone y reting rule. 1 Log in to the Mngement vcenter Server y using the vsphere Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu, selet Hosts n Clusters n expn the sfo01m01v01.sfo01.rinpole.lol tree. 3 Selet the sfo01-m01-mgmt01 luster n lik the Configure t. VMwre, In. 57