Site Protection and Recovery. 26 SEP 2017 VMware Validated Design 4.1 VMware Validated Design for Software-Defined Data Center 4.1

Transcription

1 Site Protetion n Reovery 26 SEP 2017 VMwre Vlite Design 4.1 VMwre Vlite Design for Softwre-Define Dt Center 4.1

2 Site Protetion n Reovery You n fin the most up-to-te tehnil oumenttion on the VMwre wesite t: If you hve omments out this oumenttion, sumit your feek to ofeek@vmwre.om VMwre, In Hillview Ave. Plo Alto, CA Copyright VMwre, In. All rights reserve. Copyright n tremrk informtion. VMwre, In. 2

3 Contents Aout VMwre Vlite Design Site Protetion n Reovery 5 1 Filover n Filk Cheklist for the SDDC Mngement Applitions 6 2 Prerequisites for SDDC Filover or Filk 8 3 Filover of the SDDC Mngement Applitions 9 Configure Filover of Mngement Applitions 10 Configure Filover of vrelize Opertions Mnger 10 Configure Filover of the Clou Mngement Pltform 17 Test the Filover of Mngement Applitions 27 Test Filover of vrelize Opertions Mnger 27 Test Filover of the Clou Mngement Pltform 28 Perform Plnne Migrtion of Mngement Applitions 30 Initite Plnne Migrtion of vrelize Opertions Mnger 30 Initite Plnne Migrtion of the Clou Mngement Pltform 31 Perform Disster Reovery of Mngement Applitions 32 Reonfigure the NSX Instne for the Mngement Cluster in Region B 33 Reover the Control VM of the Universl Distriute Logil Router in Region B 36 Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region B 37 Verify Estlishment of BGP for the Universl Distriute Logil Router in Region B 40 Enle Network Connetivity for the NSX Lo Blner in Region B 40 Initite Disster Reovery of vrelize Opertions Mnger in Region B 41 Initite Disster Reovery of the Clou Mngement Pltform in Region B 42 Post-Filover Configurtion of Mngement Applitions 43 Configure the NSX Controllers n UDLR Control VM to Forwr Events to vrelize Log Insight in Region B 44 Upte the vrelize Log Insight Logging Aress fter Filover 48 Reonfigure the NSX Instne for the Mngement Cluster in Region A fter Filover 48 4 Filk of the SDDC Mngement Applitions 53 Test the Filk of Mngement Applitions 54 Test the Filk of vrelize Opertions Mnger 54 Test Filk of the Clou Mngement Pltform 55 Perform Filk s Plnne Migrtion of Mngement Applitions 57 Initite Filk s Plnne Migrtion of vrelize Opertions Mnger 57 Initite Filk s Plnne Migrtion of the Clou Mngement Pltform 58 VMwre, In. 3

4 Site Protetion n Reovery Perform Filk s Disster Reovery of Mngement Applitions 59 Reonfigure the NSX Instne for the Mngement Cluster in Region A 60 Reover the Control VM of the Universl Distriute Logil Router in Region A 62 Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region A 64 Verify the Estlishment of BGP for the Universl Distriute Logil Router in Region A 66 Enle Network Connetivity for the NSX Lo Blner in Region A 67 Initite Disster Reovery of vrelize Opertions Mnger in Region A 67 Initite Disster Reovery of the Clou Mngement Pltform in Region A 68 Post-Filk Configurtion of Mngement Applitions 70 Configure the NSX Controllers n the UDLR Control VM to Forwr Events to vrelize Log Insight in Region A 70 Reonfigure the NSX Instne for the Mngement Cluster in Region B fter Filk 75 5 Reprotet of the SDDC Mngement Applitions 79 Prerequisites for Performing Reprotet 79 Reprotet vrelize Opertions Mnger 80 Reprotet the Clou Mngement Pltform 81 VMwre, In. 4

5 Aout VMwre Vlite Design Site Protetion n Reovery VMwre Vlite Design Site Protetion n Reovery provies step-y-step instrutions out performing isster reovery of VMwre mngement omponents in the softwre-efine t enter (SDDC). You use VMwre Site Reovery Mnger n VMwre vsphere Replition to perform site protetion n reovery of the Clou Mngement Pltform tht onsists of vrelize Automtion with emee vrelize Orhestrtor, n vrelize Business, n of the vrelize Opertions Mnger nlytis luster. The oumenttion overs oth filover to the reovery region n filk to the protete region. Intene Auiene The VMwre Vlite Design Site Protetion n Reovery oumenttion is intene for lou rhitets, infrstruture ministrtors, lou ministrtors n lou opertors who re fmilir with n wnt to use VMwre softwre to eploy in short time n mnge n SDDC tht meets the requirements for pity, slility, kup n restore, n isster reovery. Require VMwre Softwre The VMwre Vlite Design Site Protetion n Reovery oumenttion is omplint n vlite with ertin prout versions. See VMwre Vlite Design Relese Notes for more informtion out supporte prout versions. Verifying the SDDC Opertionl Stte After you filover or filk the omponents of the Clou Mngement Pltform or vrelize Opertions Mnger, verify if they re operting oring to esign ojetives. For more informtion, see the VMwre Vlite Design Opertionl Verifition oumenttion. VMwre, In. 5

6 Filover n Filk Cheklist for the SDDC Mngement Applitions 1 Use heklist to verify tht you hve stisfie ll the requirements to initite isster reovery n plnne migrtion of the SDDC mngement pplitions n omplete the onfigurtion of these pplitions. Tle 1 1. Cheklist for Filover n Filk in Vlite SDDC Cheklist Ativtion n Assessment Approvl Tsks Verify tht the isster filover or filk is relly require. For exmple, n pplition filure might not e use to perform filover or filk, while n extene region outge is vli use. Also, onsier usiness ontinuity events suh s plnne uiling mintenne or the possiility of hurrine. Sumit require oumenttion for pprovl to the following roles: IT mngement Business users CTO Ativtion Logistis Ensure tht ll require filities n personnel re ville to strt n omplete the isster reovery proess. Verify tht Site Reovery Mnger is ville in the reovery region. Verify the replition sttus of the pplitions. Verify the stte of the NSX Ege in the reovery region. Are the NSX Eges ville? Are the IP resses for VXLAN ke networks orret? Is lo lner on the NSX Ege onfigure oring to the esign? Is the firewll on the NSX Ege orretly onfigure oring to the esign? VMwre, In. 6

7 Site Protetion n Reovery Tle 1 1. Cheklist for Filover n Filk in Vlite SDDC (Continue) Cheklist Communition, Initition n Filover or Filk Vlition Tsks In the se of plnne migrtion, Notify the users of the outge. At the sheule time initite the filover or filk proess. In the se of isster reovery filover or filk, notify ll stkeholers efore you initite the filover or filk proess. Test the pplition vilility fter the ompletion of filover or filk. Notify ll stkeholers of omplete filover or filk. Configurtion After Filover or Filk In the se of isster reovery filover or filk, perform the following onfigurtion: Upte the kup jos to inlue the pplitions tht re now running in Region B. For informtion out the onfigure kup jos, see the VMwre Vlite Design Bkup n Restore oumenttion. Configure the NSX Controllers n the UDLR Control VM to forwr events to vrelize Log Insight in the reovery region. Reiret the log t from the file over or file k pplitions to vrelize Log Insight in the reovery region. Complete post-reovery ssessment. For exmple, note whih items worke n whih i not work, n ientify ples for improvement tht you n inorporte k in the reovery pln. VMwre, In. 7

8 Prerequisites for SDDC Filover 2 or Filk For fultless filover or filk to the reovery region, verify tht your environment stisfies the requirements for n SDDC onfigurtion tht is ple of filover or filk. Tle 2 1. Filover or Filk Prerequisites Prerequisite Compute Vlue The ompute infrstruture in the reovery region must mirror the ompute infrstruture in the protete region. Storge The storge onfigurtion n pity in the reovery region must mirror the storge onfigurtion n pity in the protete region. Shre tstore spe on the mngement po with enough pity must e ville for ll VMs of vrelize Automtion n vrelize Opertions Mnger. Externl servies Provie the following servies in the reovery region. See Externl Servie Depenenies from the Plnning n Preprtion oumenttion. Ative Diretory DNS NTP SMTP Syslog Virtul infrstruture ESXi, vcenter Server n NSX for vsphere mirrore in the protete region Site Reovery Mnger n vsphere Replition eploye in oth regions n pire NSX Ege evies for North-South routing eploye n onfigure in oth regions Universl istriute logil router eploye n onfigure NSX lo lner eploye n onfigure in oth regions VMwre, In. 8

9 Filover of the SDDC 3 Mngement Applitions Configure n perform filover of the mngement pplitions in the SDDC from the protete region, Region A, to the reovery region, Region B. Fling over these pplitions keeps the SDDC opertionl. You fil over the following mngement omponents: Anlytis luster of vrelize Opertions Mnger The remote olletor noes of vrelize Opertions Mnger re not file over. You eploy seprte pir of remote olletors in eh region in the pplition virtul network tht is eite to the region. Primry omponents of vrelize Automtion with emee vreize Orhestrtor n vrelize Business The vsphere Proxy Agents of vrelize Automtion n the vrelize Business t olletor re not file over. You eploy seprte pir of gents n olletor in eh region in n pplition isolte network. Tle 3 1. SDDC Mngement Components Tht Are File Over Mngement Component File Over or File Bk vrelize Opertions Mnger Anlytis noes X Remote olletors Clou Mngement Pltform vrelize Automtion Appline X IS Components Mirosoft SQL Server X X vsphere Proxy Agents vrelize Business server X vrelize t olletors 1 Configure Filover of Mngement Applitions Prepre the mngement pplitions in the SDDC for filover or plnne migrtion. Replite pplition-speifi virtul mhines y using vsphere Replition n rete reovery plns for these virtul mhines y using Site Reovery Mnger. VMwre, In. 9

10 Site Protetion n Reovery 2 Test the Filover of Mngement Applitions Test the reovery pln for the mngement pplitions in the SDDC to ientify potentil prolems uring future filover. 3 Perform Plnne Migrtion of Mngement Applitions After you hve suessfully onfigure n teste filover of the mngement pplitions, you n strt migrtion proess from Region A to Region B. Plnne migrtion of the SDDC mngement omponents helps you keep the SDDC opertionl, for exmple, when you upgre the hrwre or hnge the network onfigurtion in Region A. 4 Perform Disster Reovery of Mngement Applitions Prepre networking in Region B n perform filover of Relize Automtion, vrelize Orhestrtor, vrelize Business, n vrelize Opertions Mnger to Region B if Region A eomes unville in the event of isster or if you pln greful migrtion. 5 Post-Filover Configurtion of Mngement Applitions After filover of the lou mngement pltform n vrelize Opertions Mnger, you must perform ertin tsks to ensure tht pplitions perform s expete. Configure Filover of Mngement Applitions Prepre the mngement pplitions in the SDDC for filover or plnne migrtion. Replite pplition-speifi virtul mhines y using vsphere Replition n rete reovery plns for these virtul mhines y using Site Reovery Mnger. Configure Filover of vrelize Opertions Mnger Prepre vrelize Opertions Mnger for filover y repliting the virtul mhines of the nlytis luster n reting reovery pln for them in Site Reovery Mnger. Configure Filover of the Clou Mngement Pltform Prepre vrelize Automtion, n vrelize Business for filover. Replite the virtul mhines of the primry vrelize Automtion omponents, n of vrelize Business Server. Crete reovery pln for them in Site Reovery Mnger. Configure Filover of vrelize Opertions Mnger Prepre vrelize Opertions Mnger for filover y repliting the virtul mhines of the nlytis luster n reting reovery pln for them in Site Reovery Mnger. 1 Replite the Anlytis VMs of vrelize Opertions Mnger Configure the replition of the virtul mhines tht prtiipte in the nlytis luster of the vrelize Opertions Mnger to support filover of vrelize Opertions Mnger to Region B. Repli virtul mhines eome tive upon filover. After you onfigure the replition, you rete protetion group to protet the replite virtul mhines together. VMwre, In. 10

11 Site Protetion n Reovery 2 Crete Protetion Group for vrelize Opertions Mnger After you onfigure replition for the nlytis virtul mhines of vrelize Opertions Mnger, inlue the virtul mhines in protetion group so tht Site Reovery Mnger protets them together. 3 Crete Reovery Pln for vrelize Opertions Mnger After you rete protetion group for the virtul mhines of the vrelize Opertions Mnger nlytis luster, rete reovery pln. You then use this pln to run ommns on Site Reovery Mnger n the nlytis virtul mhines, n onfigure epenenies etween the virtul mhines. 4 Customize the Reovery Pln for vrelize Opertions Mnger After you rete the reovery pln for the vrelize Opertions Mnger filover, onfigure the strtup priority n the strtup n shutown options for the virtul mhines of the nlytis luster. The mster noe must strt first fter filover 5 Duplite the Anti-Affinity Rules for vrelize Opertions Mnger in Region B VM nti-ffinity rules o not persist ross regions uring reovery using Site Reovery Mnger. You must uplite the nti-ffinity rules for the nlytis virtul mhines in Region B so tht the rules still pply fter filover of vrelize Opertions Mnger. Replite the Anlytis VMs of vrelize Opertions Mnger Configure the replition of the virtul mhines tht prtiipte in the nlytis luster of the vrelize Opertions Mnger to support filover of vrelize Opertions Mnger to Region B. Repli virtul mhines eome tive upon filover. After you onfigure the replition, you rete protetion group to protet the replite virtul mhines together. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet VMs n Templtes. VMwre, In. 11

12 Site Protetion n Reovery 3 Nvigte to the sfo01-m01f-vrops VM foler. Ojet vcenter Server Dt enter Foler Vlue sfo01m01v01.sfo01.rinpole.lol sfo01-m01 sfo01-m01f-vrops 4 On the sfo01-m01f-vrops pge, lik the VMs t, lik Virtul Mhines n selet the virtul mhines of the nlytis luster. Nme vrops01svr01 vrops01svr01 Role Mster noe Mster repli noe vrops01svr01 Dt noe 1 5 Right-lik the VM seletion, n selet All vsphere Replition Ations > Configure Replition. 6 Clik Yes in the ilog ox out performing replition for ll ojets. The Configure Replition for 3 Virtul Mhines wizr opens. 7 On the Vlition pge of the Configurtion Replition ilog ox, wit until the vlition ompletes n lik Next. 8 On the Replition type pge, selet Replite to vcenter Server n lik Next. 9 On the Trget site pge, selet the lx01m01v01.lx01.rinpole.lol vcenter Server in Region B n lik Next. 10 On the Replition server pge, selet Auto-ssign vsphere Replition server n lik Next. If the environment ontins severl replitions servers, seleting this option mkes use of ny of these replition servers. 11 On the Trget lotion pge, set the lotion on the vsan tstore in Region B to store replite VM files. Clik the Eit for ll link. In the Selet Trget Lotion ilog ox, from the tstore list in the upper prt of the ilog ox, selet the lx01-m01-vsn01 tstore s the tstore for replite files. In the Selet trget lotion pne, selet the lx01-m01-vsn01 root foler unerneth, n lik OK. vsphere Replition will rete foler in the root tstore foler for eh vrelize Opertions Mnger VM. Bk on the Trget Lotion pge, lik Next. VMwre, In. 12

13 Site Protetion n Reovery 12 On the Replition options pge, selet only the Enle network ompression for VR t hek ox, n lik Next. Importnt Do not enle guest OS quiesing euse some of the vrelize Opertions Mnger tses o not support quiesing. Quiesing might result in luster filure euse virtul isks remin in frozen stte for too long. Compression requires extr resoures. Do not enle it if the hosts re over-utilize. 13 On the Reovery settings pge, enter the following settings n lik Next. Reovery Point Ojetive (RPO) Vlue 15 minutes Point in time instnes Enle Selete Keep 3 instnes per y for the lst 1 ys 14 On the Rey to omplete pge, review the onfigurtion n lik Finish. 15 (Optionl) Monitor the replition progress. From the Home menu, selet Hosts n Clusters. Clik the sfo01m01v01.sfo01.rinpole.lol vcenter Server ojet n lik the Monitor t. On the Monitor t, lik the vsphere Replition t n selet Outgoing Replitions to see etils out the replition of the nlytis noes of vrelize Opertions Mnger from this site. Crete Protetion Group for vrelize Opertions Mnger After you onfigure replition for the nlytis virtul mhines of vrelize Opertions Mnger, inlue the virtul mhines in protetion group so tht Site Reovery Mnger protets them together. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n selet the sfo01m01v01.sfo01.rinpole.lol protete site. VMwre, In. 13

14 Site Protetion n Reovery 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Protetion Groups t n lik Crete Protetion Group. The Crete Protetion Group wizr ppers. 6 On the Nme n lotion pge, onfigure the following settings n lik Next. Nme Desription Site pir Vlue SDDC Opertions Mngement PG vrops Cluster Protetion Group sfo01m01v01.sfo01.rinpole.lol - lx01m01v01.lx01.rinpole.lol 7 On the Protetion group type pge, onfigure the following settings n lik Next. Diretion of protetion Protetion group type Vlue sfo01m01v01.sfo01.rinpole.lol -> lx01m01v01.lx01.rinpole.lol Iniviul VMs 8 On the Virtul mhines pge, selet the nlytis virtul mhines from the list of mhines replite y using vsphere Replition n lik Next. vrops01svr01 vrops01svr01 vrops01svr01 9 On the Rey to omplete pge, review the protetion group settings n lik Finish. The SDDC Opertions Mngement PG protetion group ppers in the list of protetion groups in Site Reovery Mnger. You use it to ssign reovery pln ll nlytis virtul mhines together. Crete Reovery Pln for vrelize Opertions Mnger After you rete protetion group for the virtul mhines of the vrelize Opertions Mnger nlytis luster, rete reovery pln. You then use this pln to run ommns on Site Reovery Mnger n the nlytis virtul mhines, n onfigure epenenies etween the virtul mhines. VMwre, In. 14

15 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery 3 On the Site Reovery home pge, lik Sites n selet sfo01m01v01.sfo01.rinpole.lol. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the Crete Reovery Pln ion. The Crete Reovery Pln wizr ppers. 5 On the Nme n lotion pge, onfigure the following settings n lik Next. Property Nme Desription Site pir Vlue SDDC Opertions Mngement RP Reovery Pln for vrops Cluster sfo01m01v01.sfo01.rinpole.lol - lx01m01v01.lx01.rinpole.lol 6 On the Reovery Site pge, selet lx01m01v01.lx01.rinpole.lol s the reovery site n lik Next. 7 On the Protetion groups pge, selet the protetion group for the reovery pln n lik Next. Protetion Group Option Group type Protetion group Vlue VM protetion groups SDDC Opertions Mngement PG 8 On the Test networks pge, leve the efult vlues n lik Next. The efult option is to utomtilly rete n isolte network. 9 On the Rey to omplete pge, lik Finish. The SDDC Opertions Mngement RP reovery pln ppers in the list of the reovery plns ville in Site Reovery Mnger. Customize the Reovery Pln for vrelize Opertions Mnger After you rete the reovery pln for the vrelize Opertions Mnger filover, onfigure the strtup priority n the strtup n shutown options for the virtul mhines of the nlytis luster. The mster noe must strt first fter filover VMwre, In. 15

16 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 5 Chnge the strtup priority of the virtul mhine of the mster noe. On the reovery pln pge, lik the Monitor t n lik the Reovery Steps t. Uner Power on priority 3 VMs, right-lik vrops01svr01 n selet All Priority Ations > 1 > (Highest). In the Chnge Priority ilog ox, lik Yes to onfirm. 6 Configure strtup n shutown options for the mster noe. On the SDDC Opertions Mngement RP pge, right-lik vrops01svr01 n selet Configure Reovery. In the VM Reovery Properties ilog ox, expn Shutown Ations n inrese Shutown guest OS efore power off to 10 minutes. Expn Strtup Ations, inrese the timeout to 10 minutes, n lik OK. 7 Repet Step 5 n Step 6 for the other virtul mhines of the nlytis luster. Virtul Mhine Strtup Priority Orer Upte Timeout Vlues vrops01svr01 2 No vrops01svr01 3 Yes Duplite the Anti-Affinity Rules for vrelize Opertions Mnger in Region B VM nti-ffinity rules o not persist ross regions uring reovery using Site Reovery Mnger. You must uplite the nti-ffinity rules for the nlytis virtul mhines in Region B so tht the rules still pply fter filover of vrelize Opertions Mnger. VMwre, In. 16

17 Site Protetion n Reovery 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 In the Nvigtor, lik Hosts n Clusters n nvigte to the lx01m01v01.lx01.rinpole.lol vcenter Server ojet. 3 Expn the lx01m01v01.lx01.rinpole.lol > lx01-m01 tree n lik lx01-m01-mgmt01. 4 Clik the Configure t, n uner Configurtion, selet VM/Host Rules. 5 In the VM/Host Rules list, lik A to rete virtul mhine nti-ffinity rule. 6 In the Crete VM/Host Rule ilog ox, new nti-ffinity rule for the virtul mhines of the mster n mster repli noes, n lik OK. Nme Enle Rule Type Vlue nti-ffinity-rule-vropsm Selete Seprte Virtul Mhines Memers vrops01svr01 vrops01svr01 vrops01svr01 Configure Filover of the Clou Mngement Pltform Prepre vrelize Automtion, n vrelize Business for filover. Replite the virtul mhines of the primry vrelize Automtion omponents, n of vrelize Business Server. Crete reovery pln for them in Site Reovery Mnger. 1 Replite the Primry VMs of vrelize Automtion n vrelize Business Enle replition of the virtul mhines tht uil up the primry funtionlity of the Clou Mngement Pltform to support filover to Region B. Repli virtul mhines eome tive upon filover. After you onfigure the replition, you rete protetion group to protet the replite virtul mhines together. 2 Crete Protetion Group for the Clou Mngement Pltform After you onfigure replition for the Clou Mngement Pltform VMs, onfigure eite protetion group so tht Site Reovery Mnger protets them together. VMwre, In. 17

18 Site Protetion n Reovery 3 Crete Reovery Pln for the Clou Mngement Pltform After you rete protetion group for the lou mngement pltform VMs, rete reovery pln. You use this pln to onfigure epenenies etween the virtul mhines. 4 Customize the Reovery Pln for the Clou Mngement Pltform After you rete the reovery pln for the Clou Mngement Pltform VMs, onfigure strtup priority. 5 Duplite the Anti-Affinity Rules for vrelize Automtion from Region A in Region B VM nti-ffinity rules o not persist ross regions uring reovery using Site Reovery Mnger. In Region B, you must uplite the nti-ffinity rules for the omponents of the Clou Mngement Pltform tht re file over from Region A so tht the rules pply fter filover. 6 Crete VM Groups to Define the Strtup Orer of the Clou Mngement Pltform in Region B Use VM groups in vsphere HA to efine the strtup orer of the virtul mhines of the Clou Mngement Pltform fter they re file over to Region B. Replite the Primry VMs of vrelize Automtion n vrelize Business Enle replition of the virtul mhines tht uil up the primry funtionlity of the Clou Mngement Pltform to support filover to Region B. Repli virtul mhines eome tive upon filover. After you onfigure the replition, you rete protetion group to protet the replite virtul mhines together. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik VMs n Templtes. 3 Nvigte to the sfo01-m01f-vr VM foler. Ojet vcenter Server Dt enter Foler Vlue sfo01m01v01.sfo01.rinpole.lol sfo01-m01 sfo01-m01f-vr VMwre, In. 18

19 Site Protetion n Reovery 4 On the sfo01-m01f-vr pge, lik the VMs t, lik Virtul Mhines, n selet the virtul mhines of vrelize Automtion n vrelize Business Server. vrelize Automtion Component IS Mnger Servie n DEM Orhestrtor IS Mnger Servie n DEM Orhestrtor IS We Server IS We Server Mirosoft SQL Server vrelize Automtion Appline vrelize Automtion Appline vrelize Automtion DEM Worker vrelize Automtion DEM Worker vrelize Business Server VM Nme vr01ims01.rinpole.lol vr01ims01.rinpole.lol vr01iws01.rinpole.lol vr01iws01.rinpole.lol vr01mssql01.rinpole.lol vr01svr01.rinpole.lol vr01svr01.rinpole.lol vr01em01.rinpole.lol vr01em01.rinpole.lol vr01svr01.rinpole.lol 5 Right-lik the VM seletion, n selet All vsphere Replition Ations > Configure Replition. 6 Clik Yes in the ilog ox out performing replition for ll ojets. The Configure Replition for 10 Virtul Mhines wizr opens. 7 On the Vlition pge, wit until the proess ompletes suessfully n lik Next. 8 On the Replition type pge, selet Replite to vcenter Server n lik Next. 9 On the Trget site pge, selet the lx01m01v01.lx01.rinpole.lol vcenter Server in Region B n lik Next. 10 On the Replition server pge, selet Auto-ssign vsphere Replition server n lik Next. If the environment ontins severl replitions servers, seleting this option mkes use of ny of these replition servers. 11 On the Trget lotion pge, set the lotion on the vsan tstore in Region B to store replite VM files. Clik the Eit for ll link. In the Selet Trget Lotion ilog ox, from the tstore list in the upper prt of the ilog ox, selet lx01-m01-vsn01 s the tstore for replite files. In the Selet trget lotion pne, selet lx01-m01-vsn01 to selet the root foler of the tstore n lik OK. vsphere Replition will rete foler in the root tstore foler for eh Clou Mngement VM. On the Trget Lotion pge, lik Next. VMwre, In. 19

20 Site Protetion n Reovery 12 On the Replition options pge, selet only the Enle network ompression for VR t hek ox n lik Next. Importnt Do not enle guest OS quiesing euse some of the vrelize Automtion n vrelize Orhestrtor tse o not support quiesing. Quiesing might result in luster filure euse virtul isks remin in frozen stte for too long. Compression requires extr resoures. Do not enle it if the hosts re over-utilize. 13 On the Reovery settings pge, enter the following settings n lik Next. Reovery Point Ojetive (RPO) Vlue 15 minutes Point in time instnes Enle Selete Keep 3 instnes per y for the lst 1 ys 14 On the Rey to omplete pge, review the onfigurtion n lik Finish. Replition onfigurtion for the virtul mhines from the lou mngement pltform strts. 15 (Optionl) Monitor the replition progress. From the Home menu of the vsphere We Client, selet Hosts n Clusters. Clik the sfo01m01v01.sfo01.rinpole.lol vcenter Server ojet n lik the Monitor t. On the Monitor t, lik the vsphere Replition t, n selet Outgoing Replitions to see etils out the replition of the virtul mhines of the Clou Mngement Pltform from this site. Crete Protetion Group for the Clou Mngement Pltform After you onfigure replition for the Clou Mngement Pltform VMs, onfigure eite protetion group so tht Site Reovery Mnger protets them together. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. VMwre, In. 20

21 Site Protetion n Reovery 3 On the Site Reovery home pge, lik Sites n selet the sfo01m01v01.sfo01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Protetion Groups t n lik Crete Protetion Group. The Crete Protetion Group wizr ppers. 6 On the Nme n lotion pge, onfigure the following settings n lik Next. Nme Desription Site pir Vlue SDDC Clou Mngement PG Clou Mngement Protetion Group sfo01m01v01.sfo01.rinpole.lol - lx01m01v01.lx01.rinpole.lol 7 On the Protetion group type pge, onfigure the following settings n lik Next. Diretion of protetion Protetion group type Vlue sfo01m01v01.sfo01.rinpole.lol -> lx01m01v01.lx01.rinpole.lol Iniviul VMs (vsphere Replition) 8 On the Virtul mhines pge, selet the virtul mhines of vrelize Automtion n the vrelize Business Server from the list of virtul mhines replite y using vsphere Replition, n lik Next. VM Nme vr01ims01.rinpole.lol vr01ims01.rinpole.lol vr01iws01.rinpole.lol vr01iws01.rinpole.lol vr01mssql01.rinpole.lol vr01svr01.rinpole.lol vr01svr01.rinpole.lol vr01em01.rinpole.lol vr01em01.rinpole.lol vr01us01.rinpole.lol 9 On the Rey to omplete pge, review the protetion group settings n lik Finish. The SDDC Clou Mngement PG protetion group ppers in the list of protetion groups for Site Reovery Mnger. VMwre, In. 21

22 Site Protetion n Reovery Crete Reovery Pln for the Clou Mngement Pltform After you rete protetion group for the lou mngement pltform VMs, rete reovery pln. You use this pln to onfigure epenenies etween the virtul mhines. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n selet sfo01m01v01.sfo01.rinpole.lol. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the Crete Reovery Pln ion. The Crete Reovery Pln wizr ppers. 5 On the Nme n lotion pge, onfigure the following settings n lik Next. Property Nme Desription Site pir Vlue SDDC Clou Mngement RP Reovery Pln for Clou Mngement sfo01m01v01.sfo01.rinpole.lol - lx01m01v01.lx01.rinpole.lol 6 On the Reovery Site pge, selet lx01m01v01.lx01.rinpole.lol s the reovery site n lik Next. 7 On the Protetion groups pge, selet the protetion group for the reovery pln n lik Next. Protetion Group Option Group type Protetion group Vlue VM protetion groups SDDC Clou Mngement PG 8 On the Test networks pge, leve the efult vlues n lik Next. The efult option is to utomtilly rete n isolte network. 9 On the Rey to omplete pge, lik Finish. The SDDC Clou Mngement RP reovery pln ppers in the list of the reovery plns ville in Site Reovery Mnger. VMwre, In. 22

23 Site Protetion n Reovery Customize the Reovery Pln for the Clou Mngement Pltform After you rete the reovery pln for the Clou Mngement Pltform VMs, onfigure strtup priority. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Relete Ojets t n lik Virtul Mhines. 6 Chnge the priority of the vr01mssql01.rinpole.lol VM. On the Virtul Mhines t, right-lik vr01mssql01.rinpole.lol n selet All Priority Ations > 1 (Highest). In the Chnge Priority ilog ox, lik Yes to onfirm. 7 Repet the previous step to reonfigure the priorities of the following VMs. VM Nme Priority vr01svr01.rinpole.lol 2 vr01svr01.rinpole.lol 2 vr01iws01.rinpole.lol 3 vr01iws01.rinpole.lol 3 vr01ims01.rinpole.lol 4 vr01ims01.rinpole.lol 4 vr01em01.rinpole.lol 5 vr01em01.rinpole.lol 5 vr01svr01.rinpole.lol 5 VMwre, In. 23

24 Site Protetion n Reovery 8 Configure epenenies etween the virtul mhines tht hve the IS We Server role n itionl strtup ely for the seon IS We Server. e Right-lik the vr01iws01.rinpole.lol virtul mhine in the reovery pln n selet Configure Reovery. In the VM Reovery Properties ilog ox, expn the VM Depenenies setion n lik Configure. Selet vr01iws01.rinpole.lol n lik OK. In the VM Reovery Properties ilog ox, expn the Strtup Ation setion, n uner Aitionl Dely, set Dely to 5 minutes. Clik OK. 9 Repet the step on the vr01ims01.rinpole.lol virtul mhine to onfigure epenenies n itionl strtup ely fter filover for the IS Mnger Servie. VM nme VM epenenies Aitionl ely Vlue vr01ims01.rinpole.lol vr01ims01.rinpole.lol 5 minutes Duplite the Anti-Affinity Rules for vrelize Automtion from Region A in Region B VM nti-ffinity rules o not persist ross regions uring reovery using Site Reovery Mnger. In Region B, you must uplite the nti-ffinity rules for the omponents of the Clou Mngement Pltform tht re file over from Region A so tht the rules pply fter filover. Tle 3 2. Anti-Affinity Rules for the Clou Mngement Pltform Nme Type Memers nti-ffinity-rule-vr-svr Seprte Virtul Mhines vr01svr01.rinpole.lol, vr01svr01.rinpole.lol nti-ffinity-rule-vr-em Seprte Virtul Mhines vr01em01.rinpole.lol, vr01em01.rinpole.lol nti-ffinity-rule-vr-ims Seprte Virtul Mhines vr01ims01.rinpole.lol, vr01ims01.rinpole.lol nti-ffinity-rule-vr-iws Seprte Virtul Mhines vr01iws01.rinpole.lol, vr01iws01.rinpole.lol VMwre, In. 24

25 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 In the Nvigtor, lik Hosts n Clusters n nvigte to the lx01m01v01.lx01.rinpole.lol vcenter Server ojet. 3 Expn the lx01m01v01.lx01.rinpole.lol > lx01-m01 tree n lik lx01-m01-mgmt01. 4 Clik the Configure t, n uner Configurtion, selet VM/Host Rules. 5 Uner VM/Host Rules, lik A to rete virtul mhine nti-ffinity rule. 6 In the Crete VM/Host Rule ilog ox, the first rule for the vrelize Automtion Applines, lik OK, n lik OK. Nme Enle rule Type Vlue nti-ffinity-rule-vr-svr Selete Seprte Virtul Mhines Memers vr01svr01.rinpole.lol vr01svr01.rinpole.lol 7 Repet the proeure to onfigure the remining nti-ffinity rules. Crete VM Groups to Define the Strtup Orer of the Clou Mngement Pltform in Region B Use VM groups in vsphere HA to efine the strtup orer of the virtul mhines of the Clou Mngement Pltform fter they re file over to Region B. VMwre, In. 25

26 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 In the Nvigtor, selet Host n Clusters n expn the lx01m01v01.lx01.rinpole.lol tree. 3 Expn the lx01m01v01.lx01.rinpole.lol > lx01-m01 tree n lik lx01-m01-mgmt01. 4 Clik the Configure t, n uner Configurtion, selet VM/Host Groups. 5 Crete VM group for the vrelize Automtion IS tse. On the VM/Host Groups pge, lik the A utton. In the Crete VM/Host Group ilog ox, onfigure the following settings n lik OK. Nme Type Memers Vlue vrelize Automtion IS Dtse VM Group vr01mssql01.rinpole.lol 6 Repet the step to rete the following VM/host groups. VM/Host Group Nme VM/Host Group Memer vrelize Automtion Applines vr01svr01.rinpole.lol vr01svr01.rinpole.lol vrelize Automtion IS We Servers vr01iws01.rinpole.lol vr01iws01.rinpole.lol vrelize Automtion IS Mngers vr01ims01.rinpole.lol vr01ims01.rinpole.lol vrelize Automtion IS DEM Workers vr01em01.rinpole.lol vr01em01.rinpole.lol vrelize Automtion IS Proxy Agents lx01is01.lx01.rinpole.lol lx01is01.lx01.rinpole.lol vrelize Business Servers vrelize Business Remote Colletors vr01svr01.rinpole.lol lx01vr01.lx01.rinpole.lol VMwre, In. 26

27 Site Protetion n Reovery 7 Crete rule to power on the vrelize Automtion IS tse efore the vrelize Automtion Applines. e On the Configure t, lik VM/Host Rules uner Configurtion. In the Crete VM/Host Rule ilog, enter SDDC Clou Mngement Pltform 01 in the Nme fiel, ensure tht the Enle Rule hek ox is selete, selet Virtul Mhines to Virtul Mhines from the Type rop own. Selet vrelize Automtion IS Dtse for the First restrt VMs in VM group rop own list. Selet vrelize Automtion Virtul Applines for the Then restrt VMs in VM group rop own list Clik OK to sve the rule. 8 Repet Step 7 to rete the following VM/Host rules so tht the virtul mhines of the Clou Mngement Pltform restrt in the orret orer. VM/Host Rule Nme First restrt VMs in VM group Then restrt VMs in VM group SDDC Clou Mngement Pltform 02 vrelize Automtion Virtul Applines vrelize Automtion IS We Servers SDDC Clou Mngement Pltform 03 vrelize Automtion IS We Servers vrelize Automtion IS Mngers SDDC Clou Mngement Pltform 04 vrelize Automtion IS Mngers vrelize Automtion IS DEM Workers SDDC Clou Mngement Pltform 05 vrelize Automtion IS Mngers vrelize Automtion IS Proxy Agents SDDC Clou Mngement Pltform 06 vrelize Automtion IS Mngers vrelize Business Servers SDDC Clou Mngement Pltform 07 vrelize Business Servers vrelize Business Remote Colletors Test the Filover of Mngement Applitions Test the reovery pln for the mngement pplitions in the SDDC to ientify potentil prolems uring future filover. Test Filover of vrelize Opertions Mnger Test the reovery pln for vrelize Opertions Mnger to ientify potentil prolems uring future filover. Site Reovery Mnger runs the nlytis virtul mhines on the test network n on temporry snpshot of replite t in Region B. Test Filover of the Clou Mngement Pltform Test the reovery pln for vrelize Automtion, vrelize Orhestrtor, n vrelize Business to vlite the onfigurtion. Site Reovery Mnger runs the virtul mhines on the test network n on temporry snpshot of replite t in Region B. Test Filover of vrelize Opertions Mnger Test the reovery pln for vrelize Opertions Mnger to ientify potentil prolems uring future filover. Site Reovery Mnger runs the nlytis virtul mhines on the test network n on temporry snpshot of replite t in Region B. VMwre, In. 27

28 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 6 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 7 Clik the Test Reovery Pln ion to run test reovery. The Test wizr ppers. 8 On the Confirmtion options pge, leve the Replite reent hnges to reovery site hek ox selete n lik Next. 9 On the Rey to omplete pge, lik Finish to strt the test reovery. Test filover strts. You n follow the progress on the Reovery Steps pge. 10 After the test reovery is omplete, lik the Clenup Reovery Pln ion to len up ll the rete test VMs. 11 On the Confirmtion options pge of the Clenup wizr, lik Next. 12 On the Rey to omplete pge, lik Finish to strt the len-up proess. Test Filover of the Clou Mngement Pltform Test the reovery pln for vrelize Automtion, vrelize Orhestrtor, n vrelize Business to vlite the onfigurtion. Site Reovery Mnger runs the virtul mhines on the test network n on temporry snpshot of replite t in Region B. VMwre, In. 28

29 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 6 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 7 Clik the Test Reovery Pln ion to run test reovery. The Test wizr ppers. 8 On the Confirmtion options pge, leve the Replite reent hnges to reovery site hek ox selete n lik Next. 9 On the Rey to omplete pge, lik Finish to strt the test reovery. Test filover strts. You n follow the progress on the Reovery Steps pge. Note Beuse reovere VMs re using the test network, VMwre Tools in vr01svr01.rinpole.lol n vr01svr01.rinpole.lol VMs might not eome online in the efult timeout. In the reovery pln, inrese the strtup ely for VMwre Tools for these VMs to omplete the test. See Customize the Reovery Pln for the Clou Mngement Pltform. 10 After the test reovery is omplete, lik the Clenup Reovery Pln ion to len up ll the rete test VMs. 11 On the Confirmtion options pge of the Clenup wizr, lik Next. 12 On the Rey to omplete pge, lik Finish to strt the len-up proess. VMwre, In. 29

30 Site Protetion n Reovery Perform Plnne Migrtion of Mngement Applitions After you hve suessfully onfigure n teste filover of the mngement pplitions, you n strt migrtion proess from Region A to Region B. Plnne migrtion of the SDDC mngement omponents helps you keep the SDDC opertionl, for exmple, when you upgre the hrwre or hnge the network onfigurtion in Region A. Initite Plnne Migrtion of vrelize Opertions Mnger You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of the nlytis luster of vrelize Opertions Mnger from Region A to Region B. You n lso run reovery pln uner unplnne irumstnes if n unforeseen event tht might result in t loss ours in Region A. Initite Plnne Migrtion of the Clou Mngement Pltform You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of vrelize Automtion n vrelize Business from Region A to Region B. You n lso run reovery pln uner unplnne irumstnes if n unforeseen event tht might result in t loss ours in Region A. Initite Plnne Migrtion of vrelize Opertions Mnger You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of the nlytis luster of vrelize Opertions Mnger from Region A to Region B. You n lso run reovery pln uner unplnne irumstnes if n unforeseen event tht might result in t loss ours in Region A. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. VMwre, In. 30

31 Site Protetion n Reovery 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filover of the nlytis luster. The Reovery wizr ppers. 7 On the Confirmtion options pge, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Plnne migrtion 8 On the Rey to omplete pge, lik Finish to initite vrelize Opertions Mnger filover. Wht to o next 1 Verify tht vrelize Opertions Mnger is up n opertionl fter filover. See Vlite vrelize Opertions Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Opertions Mnger for filk y reproteting the virtul mhines of the nlytis luster in Site Reovery Mnger. See Reprotet vrelize Opertions Mnger. Initite Plnne Migrtion of the Clou Mngement Pltform You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of vrelize Automtion n vrelize Business from Region A to Region B. You n lso run reovery pln uner unplnne irumstnes if n unforeseen event tht might result in t loss ours in Region A. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. VMwre, In. 31

32 Site Protetion n Reovery 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filover of the Clou Mngement Pltform. The Reovery wizr ppers. 7 On the Confirmtion options pge, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Plnne migrtion 8 On the Rey to omplete pge, lik Finish to initite filover of the lou mngement pltform. Wht to o next 1 Verify tht vrelize Automtion n vrelize Business VMs re up n is opertionl. See Vlite the Clou Mngement Pltform in thevmwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Automtion n vrelize Business for filk y reproteting their virtul mhines in Site Reovery Mnger. See Reprotet the Clou Mngement Pltform. Perform Disster Reovery of Mngement Applitions Prepre networking in Region B n perform filover of Relize Automtion, vrelize Orhestrtor, vrelize Business, n vrelize Opertions Mnger to Region B if Region A eomes unville in the event of isster or if you pln greful migrtion. 1 Reonfigure the NSX Instne for the Mngement Cluster in Region B In the event of site filure, when Region A eomes unville, prepre the network lyer in Region B for filover of mngement pplitions. Chnge the role of the NSX Mnger to primry, eploy universl ontroller luster, n synhronize the universl ontroller luster onfigurtion. 2 Reover the Control VM of the Universl Distriute Logil Router in Region B Beuse of the filure of Region A, ynmi routing in Region B is not ville. Deploy Control VM for the universl istriute logil router sfo01m01ulr01 in Region B to reover ynmi routing in the environment. You then onfigure the reovere Control VM to provie ynmi routing for the SDDC mngement pplitions tht re file over. 3 Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region B Configure the universl istriute logil router sfo01m01ulr01 n NSX Eges lx01m01esg01 n lx01m01esg02 to support ynmi routing in Region B efore you strt isster reovery from Region A. In this wy, the mngement omponents of the SDDC will ontinue to ommunite using optiml routes in fult-tolernt network. VMwre, In. 32

33 Site Protetion n Reovery 4 Verify Estlishment of BGP for the Universl Distriute Logil Router in Region B Verify tht the UDLR for the mngement pplitions is suessfully peering, n tht BGP routing hs een estlishe in Region B. After you perform isster reovery, they n ontinue ommuniting to keep SDDC opertionl. 5 Enle Network Connetivity for the NSX Lo Blner in Region B Enle the network onnetivity on lx01m01l01 lo lner to support high-vilility n istriute the network trffi lo for vrelize Opertions Mnger n the Clou Mngement Pltform fter isster reovery to Region B. 6 Initite Disster Reovery of vrelize Opertions Mnger in Region B If isster event ours in Region A, initite isster reovery of vrelize Opertions Mnger to fil it over to Region B n keep the monitoring funtionlity of the SDDC running. 7 Initite Disster Reovery of the Clou Mngement Pltform in Region B In the event of isster in Region A, initite isster reovery of the vrelize Automtion n vrelize Business omponents to fil them over to Region B n keep the worklo provisioning funtionlity of the SDDC ville. Reonfigure the NSX Instne for the Mngement Cluster in Region B In the event of site filure, when Region A eomes unville, prepre the network lyer in Region B for filover of mngement pplitions. Chnge the role of the NSX Mnger to primry, eploy universl ontroller luster, n synhronize the universl ontroller luster onfigurtion. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 Promote the NSX Mnger for the mngement luster in Region B to the primry role. You must first isonnet the NSX Mnger for the mngement luster in Region B from the Primry NSX Mnger in Region A. From the Home menu, selet Networking & Seurity. In the Nvigtor, lik Instlltion. On the Mngement t, selet the instne. Clik the Ations menu n lik Disonnet from Primry NSX Mnger. VMwre, In. 33

34 Site Protetion n Reovery e In the Disonnet from Primry NSX Mnger onfirmtion ilog ox, lik Yes. The NSX Mnger gets the Trnsit role. f g h On the Mngement t, selet the instne gin. Clik Ations n selet Assign Primry Role. In the Assign Primry Role onfirmtion ilog ox, lik Yes. 3 Configure n IP pool for the new universl ontroller luster. In the Nvigtor, lik NSX Mngers. Uner NSX Mngers, lik the instne. On the Mnge t, lik Grouping Ojets, lik IP Pools, n lik the A New IP Pool ion. In the A Stti IP Pool ilog ox, enter the following settings, n lik OK. Nme Vlue lx01-mgmt01-nsx01 Gtewy Prefix Length 24 Primry DNS Seonry DNS DNS Suffix lx01.rinpole.lol Stti IP Pool Deploy the universl ontroller luster in Region B. In the Nvigtor, lik Networking & Seurity n lik Instlltion. Uner NSX Controller noes, lik the A ion to eploy three NSX Controller noes with the sme onfigurtion. VMwre, In. 34

35 Site Protetion n Reovery In the A Controller ilog ox, enter the following settings n lik OK. You onfigure psswor only uring the eployment of the first ontroller. The other ontrollers use the sme psswor. Vlue Nme lx01m01nsx01 for ontroller 1 lx01m01nsx02 for ontroller 2 lx01m01nsx03 for ontroller 3 NSX Mnger Dtenter Cluster/Resoure Pool Dtstore Connete To IP Pool Psswor Confirm Psswor lx01-m01 lx01-m01-mgmt01 lx01-m01-vsn01 lx01-m01-vs01-mngement lx01-mgmt01-nsx01 mgmtnsx_ontrollers_psswor mgmtnsx_ontrollers_psswor After the Sttus of the ontroller noe hnges to Connete, eploy the remining two NSX Controller noes lx01m01nsx02 n lx01m01nsx03. Wit until the urrent eployment is finishe efore you strt the next one. 5 Configure DRS ffinity rules for the eploye NSX Controller noes. From the Home menu of the vsphere We Client, selet Hosts n Clusters. Expn the lx01m01v01.lx01.rinpole.lol > lx01-m01 n lik the sfo01-m01- mgmt01. luster Clik the Configure t, uner Configurtion, lik VM/Host Rules, n lik A. In the lx01-m01-mgmt01 - Crete VM/Host Rule ilog ox, enter the following settings n lik OK Nme Enle rule Type Vlue nti-ffinity-rule-nsx Selete Seprte Virtul Mhines Memers lx01m01nsx01 lx01m01nsx02 lx01m01nsx03 VMwre, In. 35

36 Site Protetion n Reovery 6 Use the Upte Controller Stte mehnism on the NSX Mnger to synhronize the stte of the newly eploye ontrollers. Upte Controller Stte pushes the urrent VXLAN n universl istriute logil router onfigurtion from NSX Mnger to the ontroller luster. e From the Home menu of the vsphere We Client, selet Networking & Seurity. In the Nvigtor, lik Instlltion. On the Mngement t, selet the instne. From the Ations menu, selet Upte Controller Stte. In the Upte Controller Stte onfirmtion ilog ox, lik Yes. Reover the Control VM of the Universl Distriute Logil Router in Region B Beuse of the filure of Region A, ynmi routing in Region B is not ville. Deploy Control VM for the universl istriute logil router sfo01m01ulr01 in Region B to reover ynmi routing in the environment. You then onfigure the reovere Control VM to provie ynmi routing for the SDDC mngement pplitions tht re file over. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik Networking & Seurity. 3 In the Nvigtor, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik sfo01m01ulr01. 6 Re-eploy the Control VM of the universl istriute logil router n enle high vilility. Clik the Mnge t n lik s. Selet Configurtion, n uner Logil Router Applines lik the A ion. VMwre, In. 36

37 Site Protetion n Reovery In the A NSX Ege Appline ilog ox, enter the following settings n lik OK. Dt enter Cluster/Resoure Pool Dtstore Vlue lx01-m01 lx01-m01-mgmt01 lx01-m01-vsn01 Clik the A ion to eploy nother NSX Ege evie with the sme onfigurtion. 7 Configure high vilility for the Control VM. On the Configurtion pge for sfo01m01ulr01, lik Chnge uner HA Configurtion, onfigure the following settings, n lik OK. HA Sttus Connete To Enle Logging Vlue Enle lx01-m01-vs01-mngement Selete In the Chnge HA onfigurtion ilog ox, lik Yes. 8 Configure the CLI Creentils for the Control VM. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Right-lik sfo01m01ulr01 n selet Chnge CLI Creentils. In the Chnge CLI Creentils ilog ox, onfigure the following settings n lik OK. User Nme Psswor Enle SSH ess Vlue min ulr_min_psswor Selete Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region B Configure the universl istriute logil router sfo01m01ulr01 n NSX Eges lx01m01esg01 n lx01m01esg02 to support ynmi routing in Region B efore you strt isster reovery from Region A. In this wy, the mngement omponents of the SDDC will ontinue to ommunite using optiml routes in fult-tolernt network. VMwre, In. 37

38 Site Protetion n Reovery 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Networking & Seurity. 3 In the Nvigtor, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Verify the routing onfigurtion for the universl istriute logil router. Doule-lik sfo01m01ulr01. Clik the Mnge t, lik Routing n verify the following settings. Glol Configurtion > ECMP Vlue Enle Dynmi Routing Configurtion > Router ID On the left sie, selet BGP to verify the protool settings n onfigure BGP peering etween the UDLR evie n the NSX Ege evies for the ECMP-enle North/South routing in Region A. On the BGP pge, verify the following settings. Sttus Vlue Enle Lol AS Greful Restrt Enle Selet whih represents the onnetion settings for the lx01m01esg01 neighor n lik Eit ion. VMwre, In. 38

39 Site Protetion n Reovery In the Eit Neighour ilog ox, upte the Weight vlue to 60, enter the BGP psswor tht ws onfigure uring the initil setup of the UDLR, n lik OK. lx01m01esg01 Vlue lx01m01esg02 Vlue IP Aress Forwring Aress Protool Aress Remote AS Weight Keep Alive Time 1 1 Hol Down Time 3 3 Psswor BGP_psswor BGP_psswor e On the BGP pge, repet the steps for the neighor whih represents the lx01m01esg02 evie. Clik Pulish Chnges. 7 On the left sie, selet Route Reistriution to verify reistriution sttus. Ctegory Vlue Route Reistriution Sttus OSPF Deselete BGP Selete Route Reistriution tle Lerner BGP From Prefix Ation Connete Any Permit 8 Reonfigure the routing n weight vlue of lx01m01esg01 n lx01m01esg02 eges. e f g h In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik lx01m01esg01 to open its onfigurtion interfe. Clik the Mnge t n lik the Routing t. On the left sie, selet BGP, selet the neighor uner Neighors, n lik the Eit ion. In the Eit Neighour ilog ox, hnge the Weight vlue to 60 n lik OK. Clik Pulish Chnges. Repet the step for the lx01m01esg02 ege. VMwre, In. 39

40 Site Protetion n Reovery Verify Estlishment of BGP for the Universl Distriute Logil Router in Region B Verify tht the UDLR for the mngement pplitions is suessfully peering, n tht BGP routing hs een estlishe in Region B. After you perform isster reovery, they n ontinue ommuniting to keep SDDC opertionl. 1 Log in to the UDLR virtul ppline y using Seure Shell (SSH) lient. Open n SSH onnetion to sfo01m01ulr01. Log in using the following reentils. User nme Psswor Vlue min ulr_min_psswor 2 Verify tht the UDLR n peer with the ECMP-enle NSX Ege servies gtewys. Run the show ip gp neighors ommn to isply informtion out the BGP n TCP onnetions to the UDLR neighors. In the ommn output, verify tht the BGP stte is Estlishe, up for (lx01m01esg01) n (lx01m01esg02). 3 Verify tht the UDLR reeives routes y using BGP n tht multiple routes re estlishe to BGPlerne networks. Run the show ip route ommn. In the ommn output, verify tht the routes to the networks re mrke with the letter B n severl routes to eh jent network exist. The letter B in front of eh route inites tht the route is estlishe over BGP. Enle Network Connetivity for the NSX Lo Blner in Region B Enle the network onnetivity on lx01m01l01 lo lner to support high-vilility n istriute the network trffi lo for vrelize Opertions Mnger n the Clou Mngement Pltform fter isster reovery to Region B. VMwre, In. 40

41 Site Protetion n Reovery 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Networking & Seurity. 3 In the Nvigtor, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik the lx01m01l01 evie. 6 Clik the Mnge t n lik the s t. 7 Clik Interfes, selet the OneArmLB vnic, n lik Eit. 8 In the Eit NSX Ege Interfe ilog ox, set Connetivity Sttus to Connete n lik OK. Initite Disster Reovery of vrelize Opertions Mnger in Region B If isster event ours in Region A, initite isster reovery of vrelize Opertions Mnger to fil it over to Region B n keep the monitoring funtionlity of the SDDC running. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. VMwre, In. 41

42 Site Protetion n Reovery 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filover of the nlytis luster. The Reovery wizr ppers. 7 On the Confirmtion options pge of the Reovery wizr, onfigure the following settings n lik Next. I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Disster reovery 8 On the Rey to omplete pge, lik Finish to initite vrelize Opertions Mnger filover. Site Reovery Mnger runs the reovery pln. After isster reovery, the Pln sttus of the reovery pln hnges to Disster reovery omplete. Wht to o next 1 Verify tht vrelize Opertions Mnger is up n funtions flwlessly fter filover. See Vlite vrelize Opertions Mnger in thevmwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Opertions Mnger for filk y reproteting the virtul mhines of the nlytis luster in Site Reovery Mnger.See Reprotet vrelize Opertions Mnger. Initite Disster Reovery of the Clou Mngement Pltform in Region B In the event of isster in Region A, initite isster reovery of the vrelize Automtion n vrelize Business omponents to fil them over to Region B n keep the worklo provisioning funtionlity of the SDDC ville. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. VMwre, In. 42

43 Site Protetion n Reovery 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filover of the lou mngement pltform. 7 On the Confirmtion options pge of the Reovery wizr, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhinesn infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Disster reovery 8 On the Rey to omplete pge, lik Finish to initite the filover of the lou mngement pltform. Site Reovery Mnger runs the reovery pln. After isster reovery, the Pln sttus of the reovery pln hnges to Disster reovery omplete. Wht to o next 1 Verify tht vrelize Automtion n vrelize Business VMs re up n opertionl fter filover. See Vlite the Clou Mngement Pltform in thevmwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Automtion n vrelize Business for filk y reproteting their virtul mhines in Site Reovery Mnger. See Reprotet the Clou Mngement Pltform. Post-Filover Configurtion of Mngement Applitions After filover of the lou mngement pltform n vrelize Opertions Mnger, you must perform ertin tsks to ensure tht pplitions perform s expete. 1 Configure the NSX Controllers n UDLR Control VM to Forwr Events to vrelize Log Insight in Region B Configure the NSX Controllers n UDLR Control VM instnes for the mngement luster to forwr log informtion to vrelize Log Insight in Region B. Use the NSX REST API to onfigure the NSX Controllers. To enle log forwring, you n use REST lient, suh s the Postmn pplition for Google Chrome. VMwre, In. 43

44 Site Protetion n Reovery 2 Upte the vrelize Log Insight Logging Aress fter Filover After you fil over the mngement pplitions in the SDDC to Region B, upte the ress onfigure on the mngement pplitions for vrelize Log Insight. All mngement pplitions re still onfigure to sen logs to the vrelize Log Insight instne in Region A. 3 Reonfigure the NSX Instne for the Mngement Cluster in Region A fter Filover After Region A omes k online, you must perform itionl onfigurtion of the networking lyer to voi onflits. Configure the NSX Controllers n UDLR Control VM to Forwr Events to vrelize Log Insight in Region B Configure the NSX Controllers n UDLR Control VM instnes for the mngement luster to forwr log informtion to vrelize Log Insight in Region B. Use the NSX REST API to onfigure the NSX Controllers. To enle log forwring, you n use REST lient, suh s the Postmn pplition for Google Chrome. 1 Log in to the Winows host tht hs ess to your t enter. 2 In Chrome rowser, strt the Postmn pplition n log in. 3 Speify the request heers for requests to the NSX Mnger. On the Authoriztion t, onfigure the following uthoriztion settings n lik Upte Request. s Type User nme Psswor Vlue Bsi Auth min lx01m01nsx01_min_psswor The Authoriztion:Bsi XXX heer ppers in the Heers pne. On the Heers t, enter the following heer etils. Key Vlue Vlue Content-Type pplition/xml The Content-Type:pplition/xml heer ppers in the Heers pne. VMwre, In. 44

45 Site Protetion n Reovery 4 Contt the NSX Mnger to retrieve the IDs of the ssoite NSX Controllers. Selet GET from the rop-own menu tht ontins the HTTP request methos. In the URL text ox next to the selete metho, enter the following URL, n lik Sen. NSX Mnger NSX Mnger for the mngement luster URL The Postmn pplition sens query to the NSX Mnger out the instlle NSX ontrollers. After the NSX Mnger sens response k, lik the Boy t in the response pne. The response oy ontins root <ontrollers> XML element tht groups the etils out the three ontrollers tht form the ontroller luster. Within the <ontrollers> element, lote the <ontroller> element for eh ontroller n write own the ontent of the <i> element. Controller IDs hve the ontroller-i formt where i represents the sequene numer of the ontroller in the luster. VMwre, In. 45

46 Site Protetion n Reovery 5 For eh NSX Controller, sen request to onfigure vrelize Log Insight s remote syslog server. In the request pne t the top, selet POST from the rop-own menu tht ontins the HTTP request methos, n in the URL text ox, enter the following URL. Reple ontroller-id with the ontroller IDs you hve written own. NSX Mnger NSX Mnger for the mngement luster NSX Controller in the Controller Cluster NSX Controller 1 NSX Controller 2 NSX Controller 3 POST URL ol/pi/2.0/vn/ontroller/ontroller -1/syslog ol/pi/2.0/vn/ontroller/ontroller -2/syslog ol/pi/2.0/vn/ontroller/ontroller -3/syslog In the Request pne, lik the Boy t, selet Rw, n using the rop-own menu, selet XML (Applition/XML). Pste the following request oy in the Boy text ox n lik Sen. <ontrollersyslogserver> <syslogserver> </syslogserver> <port>514</port> <protool>udp</protool> <level>info</level> </ontrollersyslogserver> Repet the steps for the other NSX Controllers in the mngement luster. VMwre, In. 46

47 Site Protetion n Reovery 6 Verify the syslog onfigurtion on eh NSX Controller. In the Request pne, from the Metho rop-own menu, selet GET, in the URL text ox, enter the ontroller-speifi syslog URL from the previous step, n lik the SEND utton. After the NSX Mnger sens response k, lik the Boy t uner Response. The response oy ontins root <ontrollersyslogserver> element, whih represents the settings for the remote syslog server on the NSX Controller. Verify tht the vlue of the <syslogserver> element is Repet the steps for the other NSX Controllers to verify the syslog onfigurtion. 7 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 8 Configure the newly-eploye Control VM of the UDLR in Region B to forwr events to vrelize Log Insight in Region B. From the Home menu of the vsphere We Client, lik Networking & Seurity. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01ulr01 to open its onfigurtion interfe. VMwre, In. 47

48 Site Protetion n Reovery e f g On the NSX Ege evie pge, lik the Mnge t, lik s, n lik Configurtion. In the Detils pne, lik Chnge next to Syslog servers. In the Eit Syslog Servers Configurtion ilog ox, enter the following settings n lik OK. Vlue Syslog Server Protool up Upte the vrelize Log Insight Logging Aress fter Filover After you fil over the mngement pplitions in the SDDC to Region B, upte the ress onfigure on the mngement pplitions for vrelize Log Insight. All mngement pplitions re still onfigure to sen logs to the vrelize Log Insight instne in Region A. You upte the DNS entry for sfo01vrli01.sfo01.rinpole.lol to point to the IP ress of lx01vrli01.lx01.rinpole.lol in Region B. 1 Log in to the DNS server 51rpl.rinpole.lol tht resies iin Region B. 2 Open the Winows Strt menu, enter ns in the Serh text ox n press Enter. The DNS Mnger ilog ox ppers. 3 In the DNS Mnger ilog ox, uner Forwr Lookup Zones, selet the sfo01.rinpole.lol omin y expning the tree n lote the sfo01vrli01 reor on the right sie. 4 Doule-lik the sfo01vrli01 reor, hnge the IP ress of the reor from to n lik OK. Fully qulifie omin nme (FQDN) Vlue sfo01vrli01.sfo01.rinpole.lol IP Aress Upte ssoite pointer (PTR) reor Selete Reonfigure the NSX Instne for the Mngement Cluster in Region A fter Filover After Region A omes k online, you must perform itionl onfigurtion of the networking lyer to voi onflits. You emote the NSX Mnger to the seonry role, elete the universl ontroller luster, isle the lo lner, n perform itionl onfigurtion on the NSX Eges. VMwre, In. 48

49 Site Protetion n Reovery 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Networking & Seurity. 3 In the Nvigtor, lik Instlltion n lik the Mngement t. You see tht oth NSX Mngers n re ssigne the primry role. 4 Fore the removl of the registere seonry NSX Mnger efore removing the primry role from the NSX Mnger in Region A. Selet the instne, n selet Ations > Remove Seonry NSX Mnger. Selet the Perform opertion even if the NSX mnge is inessile hek ox n lik OK. 5 Demote the originl primry site NSX Mnger in Region A to the trnsit role. Selet the instne, lik Ations > Remove Primry Role. Clik Yes in the onfirmtion ilog ox. 6 Delete the NSX Controllers in the protete site. Selet the sfo01m01nsx01 noe n lik Delete. In the Delete Controller onfirmtion ilog ox, lik Yes. Repet the step to elete the remining two NSX Controller noes. Selet Forefully Delete n Chek here to knowlege the wrning option when you elete the lst ontroller. 7 Delete the UDLR ege in the protete site. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Selet the sfo01m01ulr01 n lik Delete. In the Delete NSX Ege onfirmtion ilog ox, lik Yes. VMwre, In. 49

50 Site Protetion n Reovery 8 Assign the NSX Mnger for the mngement luster in Region A the seonry role to the lrey promote primry NSX Mnger in Region B. In the Nvigtor, lik Instlltion. On the Mngement t selet the primry instne. Selet Ations > A Seonry NSX Mnger. In the A seonry NSX Mnger ilog ox, enter the following settings n lik OK. Vlue NSX Mnger User Nme Psswor Confirm Psswor min mgmtnsx_min_psswor mgmtnsx_min_psswor e In the Trust Certifite onfirmtion ilog ox, lik Yes. 9 Disle network onnetivity for the NSX lo lner in Region A. e f In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik the sfo01m01l01 evie. Clik the Mnge t n lik the s t. Clik Interfes, selet the OneArmLB vni, n lik Eit. In the Eit NSX Ege Interfe ilog ox, selet Disonnete s Connetivity Sttus n lik OK. 10 Configure the routing on the universl istriute logil router in Region B. e In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01ulr01. Clik the Mnge t n lik Routing. On the left, selet BGP. VMwre, In. 50

51 Site Protetion n Reovery f Selet the following NSX Ege evies, lik Eit, onfigure the following settings, n lik OK. sfo01m01esg01 Vlue sfo01m01esg02 Vlue IP Aress Forwring Aress Protool Aress Remote AS Weight Keep Alive Time 1 1 Hol Down Time 3 3 Psswor BGP_psswor BGP_psswor g h i j Clik Pulish Chnges. On the left, selet Stti Routes. On the Stti Routes pge, lik the existing stti route (Network: /24) n lik Eit utton. In the Eit Stti Route ilog ox, upte the following vlues n lik OK. Vlue Network /24 Next Hop , MTU 9000 Amin Distne 1 k Clik Pulish Chnges. 11 Reonfigure the weight vlue of sfo01m01esg01 n sfo01m01esg02 eges. e f g h In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01esg01. Clik the Mnge t n lik Routing. On the left, selet BGP, selet the neighour n lik Eit. In the Eit Neighour ilog ox, hnge the Weight vlue to 10 n lik OK. Clik Pulish Chnges. Repet the step for the sfo01m01esg02 ege. VMwre, In. 51

52 Site Protetion n Reovery 12 Verify tht the NSX Ege evies re suessfully peering, n tht BGP routing hs een estlishe. Log in to the sfo01m01esg01 NSX Ege evie using Seure Shell (SSH) lient with the following reentils. User nme Psswor Vlue min ege_min_psswor Run the show ip gp neighors ommn to isply informtion out the BGP onnetions to neighors. The BGP Stte will isply Estlishe UP if you hve suessfully peere with UDLR. Run the show ip route ommn to verify tht you re reeiving routes using BGP. Repet the step for the sfo01m01esg02 NSX Ege evie. 13 After Region A omes k online, you hnge k the DNS entry for sfo01vrli01.sfo01.rinpole.lol to point to the its originl IP ress Open Remote Desktop Protool (RDP) onnetion.log in to the DNS server 01rpl.rinpole.lol tht resies in Region A. Log in using the following reentils. Option User nme Psswor Desription Ative Diretory ministrtor _min_psswor e Open the Winows Strt menu, enter ns in the Serh text ox n press Enter. In the DNS Mnger ilog ox, uner Forwr Lookup Zones, expn the tree n selet the sfo01.rinpole.lol omin. Doule-lik the sfo01vrli01 reor on the right, hnge the IP ress of the reor from to , n lik OK. Fully qulifie omin nme (FQDN) Vlue sfo01vrli01.sfo01.rinpole.lol IP Aress Upte ssoite pointer (PTR) reor Selete VMwre, In. 52

53 Filk of the SDDC 4 Mngement Applitions Configure n perform filk of the mngement pplitions in the SDDC from the protete region, Region B, to the reovery region, Region A. In this wy, you restore the pre-reovery onfigurtion of the SDDC efore plnne migrtion or isster reovery. You fil k the following mngement omponents: Anlytis luster of vrelize Opertions Mnger The remote olletor noes of vrelize Opertions Mnger re not file k. You eploy seprte pir of remote olletors in eh region in the pplition virtul network tht is eite to the region. Primry omponents of vrelize Automtion with emee vreize Orhestrtor n vrelize Business The vsphere Proxy Agents of vrelize Automtion n the vrelize Business t olletor re not file k. You eploy seprte pir of gents n olletor in eh region in n pplition isolte network. Tle 4 1. SDDC Mngement Components Tht Are File Bk Mngement Component File Over or File Bk vrelize Opertions Mnger Anlytis noes X Remote olletors Clou Mngement Pltform vrelize Automtion Appline X IS Components Mirosoft SQL Server X X vsphere Proxy Agents vrelize Business server X vrelize t olletors 1 Test the Filk of Mngement Applitions Test the reovery pln for the mngement pplitions in the SDDC to ientify potentil prolems uring future filk. VMwre, In. 53

54 Site Protetion n Reovery 2 Perform Filk s Plnne Migrtion of Mngement Applitions After you hve restore the infrstruture of Region A n hve suessfully teste filk of the SDDC mngement pplitions, strt the migrtion proess from Region B k to Region A. 3 Perform Filk s Disster Reovery of Mngement Applitions Prepre the network n NSX network evies in Region A. Then perform filk of vrelize Automtion n vrelize Business, n of vrelize Opertions Mnger to Region A if Region B eomes unville in the event of isster. 4 Post-Filk Configurtion of Mngement Applitions After filk of the Clou Mngement Pltform n vrelize Opertions Mnger, you must perform ertin tsks to ensure tht pplitions perform s expete. Test the Filk of Mngement Applitions Test the reovery pln for the mngement pplitions in the SDDC to ientify potentil prolems uring future filk. Test the Filk of vrelize Opertions Mnger Test the reovery pln for vrelize Opertions Mnger to prevent potentil prolems uring future filk. Site Reovery Mnger runs the nlytis virtul mhines on the test network n on temporry snpshot of replite t in Region A. Test Filk of the Clou Mngement Pltform Test the reovery pln for vrelize Automtion n vrelize Business to vlite the onfigurtion. Site Reovery Mnger runs the virtul mhines on the test network n on temporry snpshot of replite t in Region A. Test the Filk of vrelize Opertions Mnger Test the reovery pln for vrelize Opertions Mnger to prevent potentil prolems uring future filk. Site Reovery Mnger runs the nlytis virtul mhines on the test network n on temporry snpshot of replite t in Region A. Site Reovery Mnger runs the nlytis virtul mhines on the test network n on temporry snpshot of replite t in Region A. VMwre, In. 54

55 Site Protetion n Reovery 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 6 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 7 Clik the Test Reovery Pln ion to run test reovery. The Test wizr ppers. 8 On the Confirmtion options pge, leve the Replite reent hnges to reovery site hek ox selete n lik Next. 9 On the Rey to omplete pge, lik Finish to strt the test reovery. Test filk strts. You n follow the progress on the Reovery Steps pge. 10 After the test reovery is omplete, lik the Clenup Reovery Pln ion to len up ll the rete test VMs. 11 On the Confirmtion options pge of the Clenup wizr, lik Next. 12 On the Rey to omplete pge, lik Finish to strt the len-up proess. Test Filk of the Clou Mngement Pltform Test the reovery pln for vrelize Automtion n vrelize Business to vlite the onfigurtion. Site Reovery Mnger runs the virtul mhines on the test network n on temporry snpshot of replite t in Region A. VMwre, In. 55

56 Site Protetion n Reovery 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 If the Log In Site ilog ox ppers, re-uthentite y using the sv-srm@rinpole.lol user nme n the sv-srm_psswor psswor. Re-uthentition is require if the network onnetion etween Region A n Region B hs een interrupte fter the lst suessful uthentition. 5 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 6 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 7 Clik the Test Reovery Pln ion to run test reovery. The Test wizr ppers. 8 On the Confirmtion options pge, leve the Replite reent hnges to reovery site hek ox selete n lik Next. 9 On the Rey to omplete pge, lik Finish to strt the test reovery. Test filk strts. You n follow the progress on the Reovery Steps pge. 10 After the test reovery is omplete, lik the Clenup Reovery Pln ion to len up ll the rete test VMs. Note Beuse reovere VMs re using the Test network, VMwre Tools in vr01svr01.rinpole.lol n vr01svr01.rinpole.lol VMs might not eome online within the efult timeout vlue. Inrese the timeout vlue for the VMs to omplete the test. 11 On the Confirmtion options pge of the Clenup wizr, lik Next. 12 On the Rey to omplete pge, lik Finish to strt the len-up proess. VMwre, In. 56

57 Site Protetion n Reovery Perform Filk s Plnne Migrtion of Mngement Applitions After you hve restore the infrstruture of Region A n hve suessfully teste filk of the SDDC mngement pplitions, strt the migrtion proess from Region B k to Region A. Initite Filk s Plnne Migrtion of vrelize Opertions Mnger You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of the nlytis luster of vrelize Opertions Mnger from Region B to Region A. You n lso run reovery pln uner unplnne irumstnes if Region B suffers n unforeseen event tht might result in t loss. Initite Filk s Plnne Migrtion of the Clou Mngement Pltform You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of vrelize Automtion n vrelize Business from Region B to Region A. You n lso run reovery pln uner unplnne irumstnes if Region B suffers n unforeseen event tht might result in t loss. Initite Filk s Plnne Migrtion of vrelize Opertions Mnger You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of the nlytis luster of vrelize Opertions Mnger from Region B to Region A. You n lso run reovery pln uner unplnne irumstnes if Region B suffers n unforeseen event tht might result in t loss. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. VMwre, In. 57

58 Site Protetion n Reovery 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filk of the nlytis luster. The Reovery wizr ppers. 7 On the Confirmtion options pge, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Plnne Migrtion 8 On the Rey to omplete pge, lik Finish to initite vrelize Opertions Mnger filk. Wht to o next 1 Verify tht vrelize Opertions Mnger is up n opertionl fter filk. See Vlite vrelize Opertions Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Opertions Mnger for filover y reproteting the virtul mhines of the nlytis luster in Site Reovery Mnger. See Reprotet vrelize Opertions Mnger. Initite Filk s Plnne Migrtion of the Clou Mngement Pltform You n run reovery pln uner plnne irumstnes to migrte the virtul mhines of vrelize Automtion n vrelize Business from Region B to Region A. You n lso run reovery pln uner unplnne irumstnes if Region B suffers n unforeseen event tht might result in t loss. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the lx01m01v01.lx01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. VMwre, In. 58

59 Site Protetion n Reovery 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filk of the lou mngement pltform. The Reovery wizr ppers. 7 On the Confirmtion options pge, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Plnne Migrtion 8 On the Rey to omplete pge, lik Finish to initite filk of the lou mngement pltform. Wht to o next 1 Verify tht vrelize Automtion n vrelize Business VMs re up n opertionl fter filk. See Vlite the Clou Mngement Pltform in thevmwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Automtion n vrelize Business Server for filover y reproteting the virtul mhines of the vrelize Automtion omponents in Site Reovery Mnger. See Reprotet the Clou Mngement Pltform. Perform Filk s Disster Reovery of Mngement Applitions Prepre the network n NSX network evies in Region A. Then perform filk of vrelize Automtion n vrelize Business, n of vrelize Opertions Mnger to Region A if Region B eomes unville in the event of isster. 1 Reonfigure the NSX Instne for the Mngement Cluster in Region A In the event of site filure, when Region B eomes unville, prepre the network lyer in Region A for filk of mngement pplitions. Chnge the role of the NSX Mnger in Region A to primry, re-eploy the universl ontroller luster, n synhronize the universl ontroller luster onfigurtion. 2 Reover the Control VM of the Universl Distriute Logil Router in Region A In the se of filk, euse of the filure in Region B, ynmi routing in Region A is not ville. Deploy Control VM for the universl ynmi logil router sfo01m01ulr01 in Region A to reover ynmi routing in the environment. You then re-onfigure the reovere Control VM to provie ynmi routing for the SDDC mngement pplitions tht re file k. VMwre, In. 59

60 Site Protetion n Reovery 3 Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region A Configure the universl istriute logil router sfo01m01ulr01, n NSX Eges sfo01m01esg01 n sfo01m01esg02 to support ynmi routing in Region A efore you strt isster reovery from Region B. In this wy, the mngement omponents of the SDDC will ontinue to ommunite using optiml routes in fult-tolernt network. 4 Verify the Estlishment of BGP for the Universl Distriute Logil Router in Region A Verify tht the UDLR for the mngement pplitions is suessfully peering, n tht BGP routing hs een estlishe in Region A. After you perform filk for isster reovery, they n ontinue ommuniting to keep SDDC opertionl. 5 Enle Network Connetivity for the NSX Lo Blner in Region A Enle the network onnetivity on sfo01m01l01 lo lner to support high-vilility n istriute the network trffi lo for vrelize Opertions Mnger n the Clou Mngement Pltform fter isster reovery to Region А. 6 Initite Disster Reovery of vrelize Opertions Mnger in Region A If isster event ours in Region B, initite the isster reovery of vrelize Opertions Mnger in Region A to fil vrelize Opertions Mnger k to Region A. 7 Initite Disster Reovery of the Clou Mngement Pltform in Region A In the event of isster in Region B, initite isster reovery of vrelize Automtion n vrelize Business in Region A to fil the Clou Mngement Pltform k to Region A. Reonfigure the NSX Instne for the Mngement Cluster in Region A In the event of site filure, when Region B eomes unville, prepre the network lyer in Region A for filk of mngement pplitions. Chnge the role of the NSX Mnger in Region A to primry, reeploy the universl ontroller luster, n synhronize the universl ontroller luster onfigurtion. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor VMwre, In. 60

61 Site Protetion n Reovery 2 Promote the NSX Mnger for the mngement luster in Region A to the primry role. You must first isonnet the NSX Mnger for the mngement luster in Region A from the Primry NSX Mnger in Region B. e From the Home menu of the vsphere We Client, lik Networking & Seurity. In the Nvigtor, lik Instlltion. On the Mngement t, selet the instne. Clik the Ations menu n lik Disonnet from Primry NSX Mnger. In the Disonnet from Primry NSX Mnger onfirmtion ilog ox, lik Yes. The NSX Mnger gets the Trnsit role. f g h On the Mngement t, selet the instne gin. Clik Ations n selet Assign Primry Role. In the Assign Primry Role onfirmtion ilog ox, lik Yes. 3 Deploy the universl ontroller luster in Region A. In the Nvigtor, lik Networking & Seurity n lik Instlltion. Uner NSX Controller noes, lik the A ion to eploy three NSX Controller noes with the sme onfigurtion. In the A Controller ilog ox, enter the following settings n lik OK. You onfigure psswor only uring the eployment of the first ontroller. The other ontrollers use the sme psswor. Vlue Nme sfo01m01nsx01 for ontroller 1 sfo01m01nsx02 for ontroller 2 sfo01m01nsx03 for ontroller 3 NSX Mnger Dtenter Cluster/Resoure Pool Dtstore Connete To IP Pool Psswor Confirm Psswor sfo01-m01 sfo01-m01-mgmt01 sfo01-m01-vsn01 sfo01-m01-vs01-mngement sfo01-mgmt01-nsx01 mgmtnsx_ontrollers_psswor mgmtnsx_ontrollers_psswor After the Sttus of the ontroller noe hnges to Connete, eploy the remining two NSX Controller noes sfo01m01nsx02 n sfo01m01nsx03. Wit until the urrent eployment is finishe, efore you strt the next one. VMwre, In. 61

62 Site Protetion n Reovery 4 Configure DRS ffinity rules for the eploye NSX Controller noes. From the Home menu of the vsphere We Client, selet Hosts n Clusters. Expn the sfo01m01v01.sfo01.rinpole.lol > sfo01-m01 tree n lik the sfo01-m01- mgmt01 luster. Clik the Configure t, uner Configurtion, lik VM/Host Rules, n lik A. In the sfo01-m01-mgmt01 - Crete VM/Host Rule ilog ox, enter the following settings n lik OK. Nme Enle rule Type Vlue nti-ffinity-rule-nsx Selete Seprte Virtul Mhines Memers sfo01m01nsx01 sfo01m01nsx02 sfo01m01nsx03 5 Use the Upte Controller Stte mehnism on the NSX Mnger to synhronize the stte of the newly eploye ontrollers. Upte Controller Stte pushes the urrent VXLAN n universl istriute logil router onfigurtion from NSX Mnger to the ontroller luster. e From the Home menu, selet Networking & Seurity. In the Nvigtor, lik Instlltion. On the Mngement t, selet the instne. Clik the Ations menu n selet Upte Controller Stte. In the Upte Controller Stte onfirmtion ilog ox, lik Yes. Reover the Control VM of the Universl Distriute Logil Router in Region A In the se of filk, euse of the filure in Region B, ynmi routing in Region A is not ville. Deploy Control VM for the universl ynmi logil router sfo01m01ulr01 in Region A to reover ynmi routing in the environment. You then re-onfigure the reovere Control VM to provie ynmi routing for the SDDC mngement pplitions tht re file k. VMwre, In. 62

63 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik Networking & Seurity. 3 In the Nvigtor, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik sfo01m01ulr01. 6 Re-eploy the universl istriute logil router ontrol VM n enle HA. Clik the Mnge t n lik s. Selet Configurtion n uner Logil Router Applines lik the A ion. In the A NSX Ege Appline ilog ox, enter the following settings n lik OK. Dt enter Cluster/Resoure Pool Dtstore Vlue sfo01-m01 sfo01-m01-mgmt01 sfo01-m01-vsn01 Clik the A ion to eploy nother NSX Ege evie with the sme onfigurtion. 7 Configure high vilility for the Control VM. On the Configurtion pge for sfo01m01ulr01, lik Chnge uner HA Configurtion, onfigure the following settings, n lik OK. HA Sttus Connete To Enle Logging Vlue Enle sfo01-m01-vs01-mngement Selete In the Chnge HA onfigurtion ilog ox, lik Yes. 8 Configure the CLI Creentils for the Control VM. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. VMwre, In. 63

64 Site Protetion n Reovery Right-lik sfo01m01ulr01 n selet Chnge CLI Creentils. In the Chnge CLI Creentils ilog ox, onfigure the following settings n lik OK. User Nme Psswor Enle SSH ess Vlue min ulr_min_psswor Selete Reonfigure the Universl Distriute Logil Router n NSX Eges for Dynmi Routing in Region A Configure the universl istriute logil router sfo01m01ulr01, n NSX Eges sfo01m01esg01 n sfo01m01esg02 to support ynmi routing in Region A efore you strt isster reovery from Region B. In this wy, the mngement omponents of the SDDC will ontinue to ommunite using optiml routes in fult-tolernt network. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 In the Nvigtor, lik Networking & Seurity n lik NSX Eges. 3 Selet from the NSX Mnger rop-own menu. 4 Verify the routing onfigurtion for the universl istriute logil router. Doule-lik sfo01m01ulr01. Clik the Mnge t n lik Routing. Glol Configurtion > ECMP Vlue Enle Dynmi Routing Configurtion > Router ID VMwre, In. 64

65 Site Protetion n Reovery 5 On the left sie, selet BGP to verify the protool settings n onfigure BGP peering etween the UDLR evie n the NSX Ege evies for the ECMP-enle North/South routing in Region A. On the BGP pge, verify the following settings. Sttus Vlue Enle Lol AS Greful Restrt Enle Selet whih represents the onnetion settings for the sfo01m01esg01 neighor n lik Eit ion. In the Eit Neighour ilog ox, upte the Weight vlue to 60, enter the BGP psswor tht ws onfigure uring the initil setup of the UDLR, n lik OK. sfo01m01esg01 Vlue sfo01m01esg02 Vlue IP Aress Forwring Aress Protool Aress Remote AS Weight Keep Alive Time 1 1 Hol Down Time 3 3 Psswor BGP_psswor BGP_psswor e On the BGP pge, repet the steps for the entry whih represents the sfo01m01esg02 neighor. Clik Pulish Chnges. 6 On the left sie, selet Route Reistriution to verify reistriution sttus. Ctegory Vlue Route Reistriution Sttus OSPF Deselete BGP Selete Route Reistriution tle Lerner BGP From Prefix Ation Connete Any Permit 7 Reonfigure the routing n weight vlue of sfo01m01esg01 n sfo01m01esg02 ege evies. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. VMwre, In. 65

66 Site Protetion n Reovery e f g h Doule-lik sfo01m01esg01 to open its onfigurtion interfe. Clik the Mnge t n lik the Routing t. On the left sie, selet BGP, selet the neighor, n lik Eit. In the Eit Neighour ilog ox, hnge the Weight vlue to 60 n lik OK. Clik Pulish Chnges. Repet the step for the sfo01m01esg02 ege. Verify the Estlishment of BGP for the Universl Distriute Logil Router in Region A Verify tht the UDLR for the mngement pplitions is suessfully peering, n tht BGP routing hs een estlishe in Region A. After you perform filk for isster reovery, they n ontinue ommuniting to keep SDDC opertionl. 1 Log in to the UDLR virtul ppline y using Seure Shell (SSH) lient. Open n SSH onnetion to sfo01m01ulr01. Log in using the following reentils. User nme Psswor Vlue min ulr_min_psswor 2 Verify tht the UDLR n peer with the ECMP-enle NSX Ege servies gtewys. Run the show ip gp neighors ommn to isply informtion out the BGP n TCP onnetions to the UDLR neighors. In the ommn output, verify tht the BGP stte is Estlishe, up for (sfo01m01esg01) n (sfo01m01esg02). 3 Verify tht the UDLR reeives routes y using BGP n tht multiple routes re estlishe to BGPlerne networks. Run the show ip route ommn. In the ommn output, verify tht the routes to the networks re mrke with the letter B n severl routes to eh jent network exist. The letter B in front of eh route inites tht the route is estlishe over BGP. VMwre, In. 66

67 Site Protetion n Reovery Enle Network Connetivity for the NSX Lo Blner in Region A Enle the network onnetivity on sfo01m01l01 lo lner to support high-vilility n istriute the network trffi lo for vrelize Opertions Mnger n the Clou Mngement Pltform fter isster reovery to Region А. 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, lik Networking & Seurity. 3 In the Nvigtor, lik NSX Eges. 4 Selet from the NSX Mnger rop-own menu. 5 Doule-lik the sfo01m01l01 evie. 6 Clik the Mnge t n lik the s t. 7 Clik Interfes, selet the OneArmLB vnic, n lik Eit. 8 In the Eit NSX Ege Interfe ilog ox, set Connetivity Sttus to Connete n lik OK. Initite Disster Reovery of vrelize Opertions Mnger in Region A If isster event ours in Region B, initite the isster reovery of vrelize Opertions Mnger in Region A to fil vrelize Opertions Mnger k to Region A. VMwre, In. 67

68 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Opertions Mngement RP reovery pln. 5 On the SDDC Opertions Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filk of the nlytis luster. The Reovery wizr ppers. 7 On the Confirmtion options pge of the Reovery wizr, onfigure the following settings n lik Next. I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Disster reovery 8 On the Rey to omplete pge, lik Finish to initite vrelize Opertions Mnger filk. After isster reovery, the sttus of the reovery pln is Disster Reovery Complete. Wht to o next 1 Verify tht vrelize Opertions Mnger is up n funtionl fter filk. See Vlite vrelize Opertions Mnger in the VMwre Vlite Design Opertionl Verifition oumenttion. 2 Prepre vrelize Opertions Mnger for filover y reproteting the virtul mhines of the nlytis luster in Site Reovery Mnger. See Reprotet vrelize Opertions Mnger. Initite Disster Reovery of the Clou Mngement Pltform in Region A In the event of isster in Region B, initite isster reovery of vrelize Automtion n vrelize Business in Region A to fil the Clou Mngement Pltform k to Region A. VMwre, In. 68

69 Site Protetion n Reovery 1 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 2 From the Home menu of the vsphere We Client, selet Site Reovery. 3 On the Site Reovery home pge, lik Sites n oule-lik the sfo01m01v01.sfo01.rinpole.lol protete site. 4 On the Relte Ojets t, lik the Reovery Plns t n lik the SDDC Clou Mngement RP reovery pln. 5 On the SDDC Clou Mngement RP pge, lik the Monitor t n lik Reovery Steps. 6 Clik the Run Reovery Pln ion to run the reovery pln n initite the filk of the Clou Mngement Pltform. 7 On the Confirmtion options pge of the Reovery wizr, onfigure the following settings n lik Next. Confirmtion Option I unerstn tht this proess will permnently lter the virtul mhines n infrstruture of oth the protete n reovery tenters Reovery type Vlue Selete Disster reovery 8 On the Rey to omplete pge, lik Finish to initite the filk of the lou mngement pltform. After isster reovery, the sttus of the reovery pln is Disster Reovery Complete. Wht to o next 1 Verify tht vrelize Automtion n vrelize Business VMs re up n funtionl fter filk. See Vlite the Clou Mngement Pltform in the VMwre Vlite Opertionl Verifition oument. 2 Prepre vrelize Automtion n vrelize Business Server for filover y reproteting the virtul mhines of the vrelize Automtion omponents in Site Reovery Mnger. See Reprotet the Clou Mngement Pltform. VMwre, In. 69

70 Site Protetion n Reovery Post-Filk Configurtion of Mngement Applitions After filk of the Clou Mngement Pltform n vrelize Opertions Mnger, you must perform ertin tsks to ensure tht pplitions perform s expete. 1 Configure the NSX Controllers n the UDLR Control VM to Forwr Events to vrelize Log Insight in Region A Configure the NSX Controllers n UDLR Control VM instnes for the mngement luster to forwr log informtion to vrelize Log Insight in Region A. Use the NSX REST API to onfigure the NSX Controllers. To enle log forwring, you n use REST lient, suh s the Postmn pplition for Google Chrome. 2 Reonfigure the NSX Instne for the Mngement Cluster in Region B fter Filk After Region B omes k online, you must perform itionl onfigurtion of the networking lyer to voi onflits. Configure the NSX Controllers n the UDLR Control VM to Forwr Events to vrelize Log Insight in Region A Configure the NSX Controllers n UDLR Control VM instnes for the mngement luster to forwr log informtion to vrelize Log Insight in Region A. Use the NSX REST API to onfigure the NSX Controllers. To enle log forwring, you n use REST lient, suh s the Postmn pplition for Google Chrome. 1 Log in to the Winows host tht hs ess to your t enter. 2 In Chrome rowser, strt the Postmn pplition n log in. VMwre, In. 70

71 Site Protetion n Reovery 3 Speify the request heers for requests to the NSX Mnger. On the Authoriztion t, onfigure the following uthoriztion settings n lik Upte Request. s Type User nme Psswor Vlue Bsi Auth min sfo01m01nsx01_min_psswor The Authoriztion:Bsi XXX heer ppers in the Heers pne. On the Heers t, enter the following heer etils. Key Vlue Vlue Content-Type pplition/xml The Content-Type:pplition/xml heer ppers in the Heers pne. 4 Contt the NSX Mnger to retrieve the IDs of the ssoite NSX Controllers. Selet GET from the rop-own menu tht ontins the HTTP request methos. In the URL text ox next to the selete metho, enter the following URL, n lik Sen. NSX Mnger NSX Mnger for the mngement luster URL The Postmn pplition sens query to the NSX Mnger out the instlle NSX ontrollers. VMwre, In. 71

72 Site Protetion n Reovery After the NSX Mnger sens response k, lik the Boy t in the response pne. The response oy ontins root <ontrollers> XML element tht groups the etils out the three ontrollers tht form the ontroller luster. Within the <ontrollers> element, lote the <ontroller> element for eh ontroller n write own the ontent of the <i> element. Controller IDs hve the ontroller-i formt where i represents the sequene numer of the ontroller in the luster, for exmple, ontroller-1 in the imge elow. VMwre, In. 72

73 Site Protetion n Reovery 5 For eh NSX Controller, sen request to onfigure vrelize Log Insight s remote syslog server. In the request pne t the top, selet POST from the rop-own menu tht ontins the HTTP request methos, n in the URL text ox, enter the following URL. Reple ontroller-id with the ontroller IDs you hve written own. NSX Mnger NSX Mnger for the mngement luster NSX Controller in the Controller Cluster NSX Controller 1 NSX Controller 2 NSX Controller 3 POST URL ol/pi/2.0/vn/ontroller/ontroller -1/syslog ol/pi/2.0/vn/ontroller/ontroller -2/syslog ol/pi/2.0/vn/ontroller/ontroller -3/syslog In the Request pne, lik the Boy t, selet Rw, n using the rop-own menu, selet XML (Applition/XML). Pste the following request oy in the Boy text ox n lik Sen. <ontrollersyslogserver> <syslogserver> </syslogserver> <port>514</port> <protool>udp</protool> <level>info</level> </ontrollersyslogserver> Repet the steps for the other NSX Controllers in the mngement luster. VMwre, In. 73

74 Site Protetion n Reovery 6 Verify the syslog onfigurtion on eh NSX Controller. In the Request pne, from the Metho rop-own menu, selet GET, in the URL text ox, enter the ontroller-speifi syslog URL from the previous step, n lik thesend utton. After the NSX Mnger sens response k, lik the Boy t uner Response. The response oy ontins root <ontrollersyslogserver> element, whih represents the settings for the remote syslog server on the NSX Controller. Verify tht the vlue of the <syslogserver> element is Repet the steps for the other NSX Controllers to verify the syslog onfigurtion. 7 Log in to the Mngement vcenter Server y using the vsphere We Client. Open We rowser n go to Log in using the following reentils. User nme Psswor Vlue ministrtor@vsphere.lol vsphere_min_psswor 8 Configure the newly-eploye UDLR Control VM to forwr events to vrelize Log Insight in Region A. From the Home menu of the vsphere We Client, lik Networking & Seurity. In the Nvigtor, lik NSX Eges. Selet from the NSX Mnger rop-own menu. Doule-lik sfo01m01ulr01 to open its onfigurtion interfe. VMwre, In. 74