Scenarios. 22 AUG 2017 VMware Validated Design 4.1 VMware Validated Design for IT Automating IT 4.1

Transcription

1 Senrios 22 AUG 2017 VMwre Vlidted Design 4.1 VMwre Vlidted Design for IT Automting IT 4.1

2 Senrios You n find the most up-to-dte tehnil doumenttion on the VMwre We site t: The VMwre We site lso provides the ltest produt updtes. If you hve omments out this doumenttion, sumit your feedk to: dofeedk@vmwre.om Copyright 2016, 2017 VMwre, In. All rights reserved. Copyright nd trdemrk informtion. VMwre, In Hillview Ave. Plo Alto, CA VMwre, In.

3 Contents Aout Senrios for VMwre Vlidted Design for IT Automting IT 7 1 Senrios Solution Pths 9 Using Distriuted Logil Router for Your Single-Region Senrios 11 Using Distriuted Logil Router for Your Dul-Region Senrios 13 Using Universl Distriuted Logil Router for Cross-Region Deployment 14 2 Prepring for Region A Senrio Deployment 15 Crete Virtul Mhine Templtes from Content Lirry in Region A 16 Crete Customiztion Speifitions in Region A 18 Crete vsphere Endpoint in vrelize Automtion in Region A 20 Crete n NSX Endpoint in vrelize Automtion in Region A 21 Configure User Roles in vrelize Automtion in Region A 21 Crete Fri Groups in Region A 23 Add Compute Resoures to Fri Group in Region A 24 Crete Business Groups in Region A 25 Crete Logil Swithes in Region A 26 Crete Externl Network Profiles in Region A 27 Configuring Reservtion Poliies nd Network Poliies in Region A 29 Creting Self-Servie Ctlogs nd Entitlements in Region A 33 3 Creting nd Pulishing Single Mhine Blueprints in Region A 41 Crete Mhine Prefixes in Region A 41 Crete Single Mhine Blueprints in Region A 42 4 Creting Blueprints with Dynmi Resoure Tiering in Region A 45 Crete Storge Reservtion Poliies in Region A 46 Apply Storge Reservtion Poliy to Dtstore in Region A 47 Enle Users to Chnge Storge Poliies in Region A 47 Provision Virtul Mhine With Modified Storge Poliy in Region A 48 5 Integrting vrelize Automtion with IPAM in Region A 49 Deploy Infolox vnios Appline in Region A 50 Configure the Appline s Grid Mster in Region A 51 Configure the IPAM Network Profile for the Rinpole Tennt in Region A 52 Crete the Cloud API User in Region A 54 Integrte the IPAM Plug-in With vrelize Orhestrtor in Region A 56 Register the IPAM Endpoint in vrelize Automtion in Region A 57 Crete Logil Swithes in Region A 61 Crete Externl Network Profiles 62 Modify n Existing Blueprint in Region A to Inorporte IPAM 63 VMwre, In. 3

4 Senrios Provision Blueprints in Region A with IPAM nd Vlidte the Blueprints 65 6 Creting Multi-Tier Applitions in Region A 67 Crete Softwre Components for the Multi-Tier Applition in Region A 67 Prepre for Multi-Tier Applition Ptterns in Region A 80 Implement Multi-Tier Applition Ptterns in Region A 85 7 Configuring Miro-Segmenttion for Multi-Tier Applitions in Region A 95 Creting NSX Seurity Poliies in Region A 95 Crete Working We Applition Blueprint in Region A 96 Crete Distriuted Firewll Rules for the Seurity Poliies in Region A 98 8 Mnging Virtul Mhine Lese nd Ownership in Region A 101 Configure Lese nd Ownership on the Blueprint in Region A 101 Set Lese nd Chnge the Ownership of the Provisioned Mhine in Region A 102 Extend the Lese of Provisioned Mhine in Region A Modeling nd Monitoring Cost with vrelize Business in Region A 105 Set up Priing on Per-Blueprint Bsis in Region A 105 Set Up Priing on Per-Reservtion Bsis in Region A Forwrding Log Events to vrelize Log Insight in Region A 113 Instll the vrelize Log Insight Agent in Region A 113 Configure Linux Virtul Mhine to Forwrd Events to vrelize Log Insight in Region A Monitoring Worklod Helth nd Cpity with vrelize Hyperi in Region A 117 Instll the End Point Opertions Monitoring Agent in Region A 118 Configure Worklod Monitoring in Region A 119 Configure Monitoring for Windows Servies in Region A Prepring for Region B Senrio Deployment 125 Crete Virtul Mhine Templtes from Content Lirry 126 Crete Customiztion Speifitions in Compute vcenter Server in Region B 128 Crete vsphere Endpoint in vrelize Automtion for Region B 130 Crete n NSX Endpoint in vrelize Automtion in Region B 131 Crete Fri Groups in Region B 131 Add Compute Resoures to Fri Group in Region B 132 Crete Logil Swithes in Region B 133 Crete Externl Network Profiles in Region B 135 Configuring Reservtion Poliies nd Network Poliies in Region B Creting Single-Mhine Blueprints nd Self-Servie Ctlogues in Region B 141 Creting nd Pulishing Single Mhine Blueprints in Region B 141 Creting Self Servie Ctlogues in Region B VMwre, In.

5 Contents 14 Configure Unified Single Mhine Blueprints for Cross-Region Deployment 147 Crete Logil Swithes for Cross-Region Deployment 148 Crete Externl Network Profiles for Cross-Region Deployment 149 Crete Fri Groups for Cross-Region Deployment 150 Add Dt Center Lotions to the Compute Resoure Menu 151 Assoite Compute Resoures with Lotion 152 Add Property Group nd Property Definition for Dt Center Lotion 153 Crete Reservtion Poliy for the Unified Blueprint 154 Speify Reservtion Informtion for the Unified Blueprint 154 Crete Servie Ctlog for the Unified Blueprint 156 Crete Unified Single Mhine Blueprints 156 Configure Entitlements for Blueprints in the Cross-Region Deployment 159 Test the Cross-Region Deployment of the Single Mhine Blueprints 161 VMwre, In. 5

6 Senrios 6 VMwre, In.

7 Aout Senrios for VMwre Vlidted Design for IT Automting IT The Senrios doumenttion for VMwre Vlidted Design for IT Automting IT provides implementtion steps for set of senrios. Bsed on the VMwre Vlidted Design referene rhiteture, the guide inludes step-y-step instrutions for ommonly exeuted tsks. Eh senrio explins how to implement ommon use se. Informtion on prerequisites is inluded t the eginning of eh hpter. Eh senrio is VMwre Vlidted Design nd is sed on the produts tht re used in the VMwre Vlidted Design for the Softwre-Defined Dt Center. Senrios inlude step-y-step instrutions nd provides sreen shots for omplex steps. Note Some of the senrios inlude some setup tsks tht re lso overed in the Deployment doumenttion for the VMwre Vlidted Design for the Softwre-Defined Dt Center. In those ses, do not duplite the setup to void prolems. Required VMwre Softwre VMwre Vlidted Design for IT Automting IT is omplint nd vlidted with ertin produt versions. See the VMwre Vlidted Design Relese Notes for more informtion out supported produt versions. Intended Audiene The Senrios doumenttion for VMwre Vlidted Design for IT Automting IT is intended for loud rhitets, infrstruture dministrtors, nd loud dministrtors. These users re fmilir with VMwre softwre nd wnt to deploy it using VMwre Vlidted Design. Requirements The senrios in this doument ssume tht you hve instlled nd onfigured single-region design of the VMwre Vlidted Design for the Softwre-Defined Dt Center. See the douments for the VMwre Vlidted Design for the Softwre-Defined Dt Center for detils. This doument n e used for single-region or dul-region deployment. All proedures with Region A in the title re suitle for single-region deployment. All proedures with Region B in the title re for use in dul-region deployment. See Chpter 1, Senrios Solution Pths, on pge 9 for informtion on deployments in single region nd dul region, nd networking onfigurtion supported with eh pth. VMwre, In. 7

8 Senrios 8 VMwre, In.

9 Senrios Solution Pths 1 The senrios in this guide illustrte how n IT orgniztion n utomte provisioning in their Softwre Defined Dt Center using vrelize Automtion. Eh senrio hs set of prerequisites, nd onsists of set of proedures tht you perform in sequene. Your gols determine whih solution pth you follow. If you re working on single-region implementtion, you use Distriuted Logil Router (DLR). In tht se, you first prepre for Region A deployment, nd then perform the proedures for your senrio in sequene. If your gol is dul-region deployment, you must set up the two DLRs or UDLR s prt of the Region A nd Region B foundtion. Then you hve these hoies. If you use UDLR, you must selet existing networking when you deploy the senrio. You nnot use ny on-demnd networking types when you onfigure lueprint. You must selet existing networking. If you use DLRs, you lso set them up s prt of the foundtion deployment, nd selet them during senrio deployment. When you hve deided on implementing senrio, you follow these steps. 1 First you deploy the SDDC foundtion nd loud mngement omponents following the steps in the VMwre Vlidted Design for the Softwre-Defined Dt Center doumenttion. 2 Perform dditionl prerequisite proedures, depending on the senrio nd the deployment type. Note The Distriuted Logil Router (DLR) nd Universl Distriuted Logil Router (UDLR) tht re used in the senrios re reted s prt of the SDDC foundtion setup. VMwre, In. 9

10 Senrios Tle 1 1. Deployment Types nd Solution Pths Deployment Type Solution Pth Single-region deployment using DLR 1 Deploy Region A of the foundtion. 2 Perform ll proedures in Prepring for Region A Deployment. 3 Perform ll proedures listed in the senrio, inluding prerequisites. Dul-region deployment using DLR 1 Deploy Region A nd Region B of the foundtion. 2 Perform ll proedures in Prepring for Region A Deployment. 3 Deploy the Region A senrio 4 Perform ll proedures in Prepring for Region B Deployment. Cross-region deployment using UDLR 1 Deploy the foundtion. 5 Deploy the Region A senrio gin, ut use Region B networking, host nme, nd other informtion. Note Chpter 13, Creting Single-Mhine Blueprints nd Self-Servie Ctlogues in Region B, on pge 141 illustrtes how do deploy Region B senrio. 2 Perform ll proedures, ut use the UDLR for networking. Chpter 14, Configure Unified Single Mhine Blueprints for Cross-Region Deployment, on pge 147 is n exmple of this solution pth. 10 VMwre, In.

11 Chpter 1 Senrios Solution Pths Figure 1 1. Solution Pths for Senrios Complete VVD Foundtion (Inludes DRL nd UDRL setup) Single Region Prepring for Region A (DLR 1) Deployment type Cross Region with UDLR Perform senrio with UDLR Dul Region Senrio A Senrio B Perform All Single Region Tsks Prepring for Region B (DLR 2) 3 5 Senrio A* Senrio B* Complete Region A 1* 2* 2* 4* 3* 5* This hpter inludes the following topis: Using Distriuted Logil Router for Your Single-Region Senrios, on pge 11 Using Distriuted Logil Router for Your Dul-Region Senrios, on pge 13 Using Universl Distriuted Logil Router for Cross-Region Deployment, on pge 14 Using Distriuted Logil Router for Your Single-Region Senrios All VMwre Vlidted Design use ses re sed on the VMwre Vlidted Design for the Softwre- Defined Dt Center. Depending on the use se, you instll ll produts in the foundtion. You n then deploy senrios following the instrutions in this doument. Different use ses might require instlltion of dditionl produts. If you use single-region senrio, you set up Region A of the VMwre Vlidted Design for the Softwre- Defined Dt Center, nd perform dditionl preprtion following the steps in Prepring for Region A Senrio Deployment. After tht, you set up your environment following the detiled instrutions for the senrio. Beuse some senrios do not depend on other senrios, the result is three groups of senrios with three distint DLRs. VMwre, In. 11

12 Senrios For exmple, to rete lueprints with dynmi resoure tiering in single-region deployment, you follow these steps. 1 Deploy the Region A foundtion. 2 Perform ll proedures listed in the Prerequisites in Chpter 4, Creting Blueprints with Dynmi Resoure Tiering in Region A, on pge 45. This inludes the proedures in Prepring for Region A Senrio Deployment 3 Perform ll proedures listed in the senrio. d Crete Storge Reservtion Poliies in Region A Apply Storge Reservtion Poliy to Dtstore in Region A Enle Users to Chnge Storge Poliies in Region A Provision Virtul Mhine With Modified Storge Poliy in Region A The following tle gives n overview. Senrio Perform All s In... Provision Worklod On... Chpter 3, Creting nd Pulishing Single Mhine Blueprints in Region A, on pge 41 Chpter 4, Creting Blueprints with Dynmi Resoure Tiering in Region A, on pge 45 Chpter 5, Integrting vrelize Automtion with IPAM in Region A, on pge 49 Chpter 6, Creting Multi-Tier Applitions in Region A, on pge 67 Chpter 7, Configuring Miro- Segmenttion for Multi-Tier Applitions in Region A, on pge 95 Chpter 8, Mnging Virtul Mhine Lese nd Ownership in Region A, on pge 101 Prepring for Region A Senrio Deployment Configuring Reservtion Poliies nd Network Poliies Creting nd Pulishing Singe Mhine Blueprints Creting Self-Servie Ctlogues Prepring for Region A Senrio Deployment Configuring Reservtion Poliies nd Network Poliies Creting nd Pulishing Single- Mhine Blueprints Creting Self-Servie Ctlogues Creting Blueprints with Dynmi Resoures Tiering Prepring for Region A Senrio Deployment Configuring Reservtion Poliies nd Network Poliies Integrting vrelize Automtion with IPAM Prepring for Region A Senrio Deployment Configuring Reservtion Poliies nd Network Poliies Creting Multi-Tier Applitions Prepring for Region A Senrio Deployment Configuring Reservtion Poliies nd Network Poliies Creting Multi-Tier Applitions Configuring Miro-segmenttion for Multi-Tier Applitions Prepring for Region A Senrio Deployment Mnging Virtul Mhine Lese nd Ownership vpod /24 vpod /24 vpod /24 vpod /29 vpod /29 vpod /24 12 VMwre, In.

13 Chpter 1 Senrios Solution Pths Senrio Perform All s In... Provision Worklod On... Chpter 9, Modeling nd Monitoring Cost with vrelize Business in Region A, on pge 105 Chpter 10, Forwrding Log Events to vrelize Log Insight in Region A, on pge 113 Chpter 11, Monitoring Worklod Helth nd Cpity with vrelize Hyperi in Region A, on pge 117 Prepring for Region A Senrio Deployment Modeling nd Monitoring Cost with vrelize Business Prepring for Region A Senrio Deployment Forwrding Log Events to vrelize Log Insight Prepring for Region A Senrio Deployment Monitoring Worklod Helth nd Cpity with vrelize Hyperi vpod /24 vpod /24 vpod /24 Using Distriuted Logil Router for Your Dul-Region Senrios If your VMwre Vlidted Design foundtion deployment uses Region B, nd if you wnt to implement your senrio to use oth regions, you n use the Distriuted Logil Router (DLR) tht is lredy set up for your dul-region senrio. With DLR, you hve the following enefits nd limittions. Your environment n use on-demnd networking Virtul mhines in your environment nnot migrte from one region to nother. To deploy Region B senrio, perform these proedures. 1 Set up the VMwre Vlidted Design for the Softwre-Defined Dt Center foundtion for Region A nd Region B. 2 Deploy the Region A senrio using DLR. 3 Perform ll proedures in Chpter 12, Prepring for Region B Senrio Deployment, on pge Selet senrio nd perform ll proedures in tht senrio. Follow the steps for Region A, ut use the networking informtion for Region B. This doument inludes two exmple senrios. Creting nd Pulishing Single-Mhine Blueprints in Region B Creting Self-Servie Ctlogues in Region B For ll other senrios, you use the Region A proedure with the Region B networking nd host nme informtion. For exmple, for dul-region deployment of the Dynmi Resoure Tiering senrio, you use the following solution pth. 1 Deploy Region A nd Region B the foundtion. 2 Perform ll proedures listed in the Prerequisites in Chpter 4, Creting Blueprints with Dynmi Resoure Tiering in Region A, on pge 45, inluding those in Prepring for Region A Deployment. 3 Perform ll proedures listed in Chpter 4, Creting Blueprints with Dynmi Resoure Tiering in Region A, on pge 45. d Crete Storge Reservtion Poliies in Region A Apply Storge Reservtion Poliy to Dtstore in Region A Enle Users to Chnge Storge Poliies in Region A Provision Virtul Mhine With Modified Storge Poliy in Region A VMwre, In. 13

14 Senrios 4 Perform ll proedures in Prepring for Region B Deployment. 5 Perform ll proedures listed in Chpter 4, Creting Blueprints with Dynmi Resoure Tiering in Region A, on pge 45, ut use the network nd host nme informtion for Region B. This guide inludes expliit instrutions for implementing the following senrios in Region B using DLR. Senrio Prerequisites Provision Worklod On... Creting nd Pulishing Single Mhine Blueprints in Region B, on pge 141 Creting Self Servie Ctlogues in Region B, on pge 144 Prepring for Region B Deployment Prepring for Region B Deployment Creting nd Pulishing Single Mhine Blueprints in Region B, on pge 141 vpod /24 vpod /24 Using Universl Distriuted Logil Router for Cross-Region Deployment If you wnt to use Universl Distriuted Logil Router (UDLR), you hve to set up networking efore you rete lueprints. If you selet one of the on-demnd networking options during lueprint retion, provisioning of lueprints fils. For the senrios, the UDLR is set up s prt of the deployment of the VMwre Vlidted Design for the Softwre-Defined Dt Center. Using UDLR hs the following dvntges nd limittions. Supports ross-region deployment. You must selet n existing network with when you rete the lueprint. With UDLRs, you n onfigure lueprints with on-demnd networking, ut n error results when you use tht lueprint. See the Cheklist for Prepring NSX nd Seurity Configurtion, whih is prt of the vrelize Automtion 7.2 doumenttion set, for detils. This Senrios doumenttion gives one exmple senrio for using the UDLR. You n deploy other senrios using UDLR insted of DLRs using the sme pproh. Senrio Follow the s In... Provision Worklod On... Chpter 14, Configure Unified Single Mhine Blueprints for Cross-Region Deployment, on pge 147 Configure Unified Single Mhine Blueprints for Cross-Region Deployment Note The UDLR is set up s prt of the foundtion deployment. vpod /24 14 VMwre, In.

15 Prepring for Region A Senrio 2 Deployment The IT Automting IT senrios re sed on the VMwre Vlidted Design for Softwre-Defined Dt Center (SDDC). All the senrios in this guide hve een vlidted with tht rhiteture. Your environment must meet prerequisites efore you n deploy senrio. Before you implement ny senrios in region A or in single-region deployment, follow these steps to deploy the foundtion. 1 Perform ll tsks in Region A Virtul Infrstruture Implementtion in the Deployment for Region A doument of the VMwre Vlidted Design for the Softwre-Defined Dt Center. 2 Perform ll tsks in Region A Cloud Mngement Pltform Implementtion in the Deployment for Region A doument of the VMwre Vlidted Design for the Softwre-Defined Dt Center. 3 Depending on your senrio, you might hve perform some tsks in Region A Opertions Implementtion. For exmple, some senrios use vrelize Log Insight. 4 Depending on your senrio, you might onsider deploying Region B s well. See the Deployment for Region A doumenttion. You n find the douments on the VMwre Vlidted Design Doumenttion pge. After you deploy the foundtion, you perform the tsks in this hpter efore you implement senrios. At the eginning of eh senrio, you might find dditionl setup tsks tht pply to just tht senrio. Note This set of senrio preprtion proedures uses DLR. See Chpter 1, Senrios Solution Pths, on pge 9 for n introdution to the enefits nd disdvntges to using DLR or UDLR. This hpter inludes the following topis: Crete Virtul Mhine Templtes from Content Lirry in Region A, on pge 16 Crete Customiztion Speifitions in Region A, on pge 18 Crete vsphere Endpoint in vrelize Automtion in Region A, on pge 20 Crete n NSX Endpoint in vrelize Automtion in Region A, on pge 21 Configure User Roles in vrelize Automtion in Region A, on pge 21 Crete Fri Groups in Region A, on pge 23 Add Compute Resoures to Fri Group in Region A, on pge 24 Crete Business Groups in Region A, on pge 25 Crete Logil Swithes in Region A, on pge 26 Crete Externl Network Profiles in Region A, on pge 27 VMwre, In. 15

16 Senrios Configuring Reservtion Poliies nd Network Poliies in Region A, on pge 29 Creting Self-Servie Ctlogs nd Entitlements in Region A, on pge 33 Crete Virtul Mhine Templtes from Content Lirry in Region A In eh senrio, you use virtul mhine templtes to rete mhine lueprints nd pulish them in servie tlog in vrelize Automtion. You n use the predefined Linux nd Windows virtul mhine templte tht re ville in the vcenter Server ontent lirry fter you deploy the Softwre-Defined Dt Center (SDDC). Creting virtul mhine templtes from ontent lirry inludes severl tsks. At high level, you first rete virtul mhine y importing it from the ontent lirry. Then you onvert the virtul mhine to virtul mhine templte. Prerequisites Verify tht you hve performed the ontent lirry onfigurtion for Region A ording to the VMwre Vlidted Design Deployment Guide for Region A. Configure Content Lirry in the First Compute vcenter Server Instne Import the Virtul Mhine Templte OVF Files Crete Virtul Mhines Using VM Templtes in the Content Lirry vrelize Automtion nnot diretly ess virtul mhine templtes in the ontent lirry. You must rete virtul mhine using the virtul mhine templtes, then onvert the templte in vcenter Server. Perform this proedure on ll vcenter Server ompute instnes tht you dd to vrelize Automtion, inluding the first vcenter Server ompute instne. Crete virtul mhines from the following Linux nd Windows VM templtes in the ontent lirries. VM Templte Nme redht6-enterprise-64 windows-2012r2-64 Guest OS Red Ht Enterprise Server 6 (64-it) Windows Server 2012 R2 (64-it) 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Nvigte to Home > VMs nd Templtes nd expnd the sfo01w01v01.sfo01.rinpole.lol vcenter Server. 3 Right-lik the sfo01-m01d. 4 dt enter tree ontrol nd selet New Folder > New VM nd Templte Folder. 5 Crete new folder nd lel it VM Templtes. 6 Nvigte to Home > Content Lirries nd lik SFO01-ContentLi01 > Templtes. 16 VMwre, In.

17 Chpter 2 Prepring for Region A Senrio Deployment 7 Right-lik the VM templte nd lik New VM from This Templte. The New Virtul Mhine from Content Lirry wizrd opens. 8 On the Selet nme nd lotion pge, use the sme templte nme. Note Use the sme templte nme to rete ommon servie tlog tht works ross different vcenter Server instnes within your dtenter environment. 9 Selet VM Templtes s the folder for this virtul mhine, nd lik Next. 10 On the Selet resoure pge, selet the ompute luster tht you wnt to deploy the virtul mhine to. 11 On the Review detils pge, verify the templte detils nd lik Next. 12 On the Selet storge pge, selet the sfo01-m01-li01 dtstore nd selet Thin Provision from the Selet virtul disk formt drop-down menu. 13 On the Selet networks pge, selet VM Network s the Destintion Network, nd lik Next. Note vrelize Automtion will hnge the network ording to the lueprint onfigurtion. 14 On the Redy to omplete pge, review the onfigurtions tht you mde for the virtul mhine, nd lik Finish. A new tsk for reting the virtul mhine ppers in the Reent Tsks pne. After the tsk is omplete, the new virtul mhine is reted. 15 Repet this proedure for the other VM Templtes in the ontent lirry. Convert the Virtul Mhine to VM Templte You n onvert virtul mhine diretly to templte insted of mking opy y loning. Repet this proedure for eh of the VM templtes in the ontent lirry. The tle elow lists the VM templtes nd the guest OS tht eh templte uses to rete virtul mhine. VM Templte Nme redht6-enterprise-64 windows-2012r2-64 Guest OS Red Ht Enterprise Server 6 (64-it) Windows Server 2012 R2 (64-it) VMwre, In. 17

18 Senrios 1 Log in to vcenter Server using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Nvigte to Home > VMs nd Templtes. 3 In the Nvigtor pne, expnd sfo01w01v01.sfo01.rinpole.lol > SFO > VM Templtes. 4 Right-lik the redht6-enterprise-64 virtul mhine loted in the VM Templtes folder, nd lik Templte > Convert to Templte. 5 Clik Yes to onfirm the templte onversion. 6 Repet this proedure for ll of the VM Templtes in the ontent lirry, verifying tht eh VM Templte ppers in the VM Templtes folder. Crete Customiztion Speifitions in Region A For your senrios, you rete two ustomiztion speifitions, one for Linux guest operting system nd one for Windows guest operting system, for use on the virtul mhines you deploy from vrelize Automtion. When you pply speifition to guest operting system during virtul mhine loning or deployment, you prevent onflits tht might result if you deploy virtul mhines with identil settings, suh s duplite omputer nmes. You lter use the ustomiztion speifitions when you rete lueprints for use with vrelize Automtion. Crete Linux Customiztion Speifition in Region A For your senrios, you rete Linux guest operting system speifition tht you n pply when you rete lueprints for use with vrelize Automtion. This ustomiztion speifition n e used to ustomize virtul mhine guest operting systems when provisioning new virtul mhines from vrelize Automtion. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Nvigte to Home > Opertions nd Poliies > Customiztion Speifition Mnger. 3 Selet the vcenter Server sfo01w01v01.sfo01.rinpole.lol from the drop-down menu. 4 Clik the Crete new speifition ion. The Guest Customiztion wizrd ppers. 18 VMwre, In.

19 Chpter 2 Prepring for Region A Senrio Deployment 5 On the Speify Properties pge, selet Linux from the Trget VM Operting System drop-down menu, enter it-linux-ustom-spe for the speifition nme, nd lik Next. 6 On the Set Computer Nme pge, selet Use the virtul mhine nme, enter sfo01.rinpole.lol in the Domin Nme text ox nd lik Next. 7 On the Time Zone pge, speify the time zone s shown in the tle elow for the virtul mhine, nd lik Next. Are Lotion Hrdwre Clok Set To Vlue Ameri Los Angeles Lol Time 8 On the Configure Network pge, lik Next. 9 On the Enter DNS nd domin settings pge, leve the defult settings, nd lik Next. 10 Clik Finish to sve your hnges. The ustomiztion speifition tht you reted is listed in the Customiztion Speifition Mnger. Crete Customiztion Speifition for Windows in Region A For your senrios, you rete Windows guest operting system speifition. You n pply the speifition when you rete lueprints for use with vrelize Automtion. When you provision new virtul mhines from vrelize Automtion, the ustomiztion speifition ustomizes the virtul guest operting system. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Nvigte to Home > Opertions nd Poliies > Customiztion Speifition Mnger. 3 Selet the vcenter Server sfo01w01v01.sfo01.rinpole.lol from the drop-down menu. 4 Clik the Crete new speifition ion. The Guest Customiztion wizrd ppers. 5 On the Speify Properties pge, selet Windows from the Trget VM Operting System drop-down menu, enter it-windows-joindomin-ustom-spe for the speifition nme, nd lik Next. 6 On the Set Registrtion Informtion pge, enter Rinpole for the virtul mhine owner s nme nd orgniztion, nd lik Next. 7 On the Set Computer Nme pge, selet Use the virtul mhine nme, nd lik Next. The operting system uses this nme to identify itself on the network. 8 On the Enter Windows Liense pge, provide liensing informtion for the Windows operting system, enter the volume_liense_key, nd lik Next. 9 Speify the dministrtor pssword for use with the virtul mhine, nd lik Next. VMwre, In. 19

20 Senrios 10 On the Time Zone pge, selet (GMT-08:00) Pifi Time(US & Cnd), nd lik Next. 11 On the Run One pge, lik Next. 12 On the Configure Network pge, lik Next. 13 On the Set Workgroup or Domin pge, selet Windows Server Domin, onfigure the following settings, nd lik Next. Domin User nme Pssword Vlue sfo01.rinpole.lol RAINPOLE\dministrtor dmin_pwd 14 On the Set Operting System Options pge, selet Generte New Seurity ID (SID), nd lik Next. 15 Clik Finish to sve your hnges. The ustomiztion speifition tht you reted is listed in the Customiztion Speifition Mnger. Crete vsphere Endpoint in vrelize Automtion in Region A In the IT Automting IT use se, IS dministrtors rete endpoints nd onfigure user redentils for those endpoints. These endpoints llow vrelize Automtion to mnge the infrstruture. After retion of the endpoint for vsphere, vrelize Automtion n ommunite with the vcenter Server environment nd disover ompute resoures, ollet dt, nd provision mhines. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Endpoints > Endpoints nd lik New > Virtul > vsphere (vcenter). 3 On the Generl pge, onfigure the vrelize Automtion Endpoint with the following settings. Nme Address User Nme Pssword Vlue for vsphere VSPHERE-SFO Note The vsphere Endpoint Nme must e identil to the nme tht you used to instll the proxy gent. rinpole\sv-vr sv_vr_pssword 4 Clik Test Connetion. 5 On the Seurity Alert window, lik OK. 6 Clik OK to rete the endpoint. 20 VMwre, In.

21 Chpter 2 Prepring for Region A Senrio Deployment Crete n NSX Endpoint in vrelize Automtion in Region A When you rete n endpoint for NSX, vrelize Automtion n ommunite with NSX Mnger to disover networking resoures. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Endpoints > Endpoints nd lik New > Network nd Seurity > NSX. 3 On the Generl pge, onfigure the vrelize Automtion Endpoint with the following settings. Nme Address User Nme Pssword Vlue NSXEndpoint dmin dmin_pssword 4 Clik the Assoitions t to ssoited the endpoint with NSX. Clik New. Choose VSPHERE-SFO from the Nme drop-down menu. Clik OK. 5 Clik Test Connetion. 6 On the Seurity Alert window, lik OK. 7 Clik OK to rete the endpoint. Configure User Roles in vrelize Automtion in Region A Before you implement senrios, you must ssign roles with the privileges tht re required for to the tennt dministrtors nd tennt rhitets (lueprint rhitets) to perform their responsiilities using vrelize Automtion. This proedure steps you through ssigning roles to the ug-itac-tenntadmins nd ug-itac- TenntArhitets users nd groups. Roles re sets of privileges tht you ssoite with users to determine wht tsks they n perform. Bsed on their responsiilities, individuls might hve one or more roles ssoited with their user ount. All user roles re ssigned within the ontext of speifi tennt. However, some roles in the defult tennt n mnge system-wide onfigurtion settings tht pply to multiple tennts. VMwre, In. 21

22 Senrios 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue ITAC-LolRinpoleAdmin it-lolrinpoledmin_pssword vsphere.lol 2 Clik the Administrtion t. 3 Nvigte to Users & Groups > Diretory Users nd Groups. 4 Enter ug-itac-tenntadmins in the serh ox nd press Enter. 5 Clik the user group nme ug-itac-tenntadmins. 6 In the Add Roles to this Group item list, selet the Approvl Administrtor, Business Mngement Administrtor, Infrstruture Arhitet, Softwre Arhitet, Tennt Administrtor, nd XS Arhitet hek oxes, nd lik Finish. 7 Enter ug-itac-tenntarhitets in the Tennt Administrtors serh ox nd press Enter. 8 Clik the user group nme ug-itac-tenntarhitets. 9 In the Add Roles to this Group list, selet the Softwre Arhitet hek ox, nd lik Finish. 22 VMwre, In.

23 Chpter 2 Prepring for Region A Senrio Deployment Crete Fri Groups in Region A You n orgnize virtuliztion ompute resoures nd loud endpoints into fri groups y type nd intent. One or more fri dministrtors mnge the resoures in eh fri group. Before you implement senrio, Fri dministrtors must rete reservtions on the ompute resoures in their groups. The reservtions llote fri resoures to speifi usiness groups. Fri groups re reted in speifi tennt, ut their resoures n e mde ville to users who elong to usiness groups in ll tennts. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet Infrstruture > Endpoints > Fri Groups. 3 Clik New Fri Group, enter the following settings nd lik OK. Nme Fri dministrtors Vlue SFO Fri Group ug-itac-tenntadmins@rinpole.lol 4 Log out of the vrelize Automtion portl. VMwre, In. 23

24 Senrios Add Compute Resoures to Fri Group in Region A Before you implement senrio, you llote ompute resoures to fri groups so tht vrelize Automtion n use the resoures in tht ompute resoure for tht fri group when provisioning virtul mhines. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > End Points > Fri Groups. 3 In the Nme olumn, hover the mouse pointer over the fri group nme SFO Fri Group, nd lik Edit. 4 On the Edit Fri Group pge, selet sfo01-w01-omp01 (ompute luster) from the Compute Resoures tle, nd lik OK. Note It might tke severl minutes for vrelize Automtion to onnet to the Compute vcenter Server system nd ssoited lusters. If you re not le to see the ompute luster fter suffiient time hs pssed, restrt oth proxy gent servies in the virtul mhines sfo01is01.sfo01.rinpole.lol nd sfo01is01.sfo01.rinpole.lol. 5 Nvigte to Infrstruture > Compute Resoures > Compute Resoures. 6 In the Compute Resoure olumn, hover the mouse pointer over the ompute luster sfo01-w01- omp01, nd lik Dt Colletion on the edit menu. 7 Wit for dt olletion to omplete nd verify tht the Sttus for oth Inventory nd Network nd Seurity Inventory shows Sueeded. 24 VMwre, In.

25 Chpter 2 Prepring for Region A Senrio Deployment Crete Business Groups in Region A Tennt dministrtors rete usiness groups to ssoite set of servies nd resoures with set of users. The set of users often orresponds to line of usiness, deprtment, or other orgniztionl unit. Users must elong to usiness group to request mhines. For this senrio implementtion, rete only Prodution usiness group. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Administrtion > Users nd Groups > Business Groups. 3 Clik the New ion. 4 On the Generl t, enter the following vlues nd lik Next. Nme Send Mnger emils to Vlue Prodution ITAC-TenntAdmin@rinpole.lol 5 On the Memers t, enter ug-itac-tenntadmins@rinpole.lol in the Group mnger role text ox, nd lik Next. VMwre, In. 25

26 Senrios 6 On the Infrstruture t, lik Finish. Crete Logil Swithes in Region A Before you n strt with senrios, you hve to rete logil swithes for usiness groups. Severl senrios require logil swith for the Prodution usiness group. This proedure retes nd onfigures the following logil swith Logil Swith Nme Prodution-VXLAN Desription Logil swith for the Prodution usiness group Note You n onnet the swith for prodution worklods to either the Distriuted Logil Router or the Universl Distriuted Logil Router. If the swith is onneted to Universl Distriuted Logil Router, worklod deployment in Region B will fil euse only the primry NSX Mnger n rete nd mnge universl ojets. The NSX mnger in Region B is not the primry NSX Mnger. Thus the deision is to onnet the swith to the Distriuted Logil Router. As result of this deision, deployed worklods n no longer move etween Region A nd Region B. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Crete logil swith. Clik Networking & Seurity. In the Nvigtor, selet Logil Swithes. From the NSX Mnger drop-down menu, selet s the NSX Mnger. 26 VMwre, In.

27 Chpter 2 Prepring for Region A Senrio Deployment d Clik the New Logil Swith ion. The New Logil Swith dilog ox ppers. e In the New Logil Swith dilog ox, enter the following settings, nd lik OK. Nme Desription Trnsport Zone Replition Mode Enle IP Disovery Enle MAC Lerning Vlue Prodution-VXLAN Logil swith for Prodution Business Group Comp Glol Trnsport Zone Hyrid Seleted Deseleted 3 Connet Prodution-VXLAN to the Distriuted Logil Router. d On the Logil Swithes pge, selet the Prodution-VXLAN Logil Swith. Clik the Connet Edge ion. On the Connet n Edge pge, selet sfo01w01dlr01 nd lik Next. On the Edit NSX Edge Interfe pge, enter the following settings nd lik Next. Option Nme Type Connetivity Sttus s Prodution-VXLAN Internl Conneted Primry IP Address Sunet Prefix Length 24 e On the Redy to Complete pge, lik Finish. Crete Externl Network Profiles in Region A Before memers of usiness group n request virtul mhines, fri dministrtors must rete network profiles. The network profiles define the sunet nd routing onfigurtion for the virtul mhines. Before you strt senrio implementtion, you rete Prodution Group Externl network profile. Eh network profile is onfigured for speifi network port group or virtul network. The network profile speifies the IP ddress nd routing onfigurtion for virtul mhines tht re provisioned to tht network. Prerequisites Crete logil swithes for usiness groups. See Crete Logil Swithes in Region A, on pge 26. VMwre, In. 27

28 Senrios 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Network Profiles nd lik New > Externl. 3 On the New Network Profile - Externl pge, speify the network profiles on the Generl t. Add the vlues for the Prodution Group Externl network profile. Nme Desription IPAM endpoint Prodution Vlue Ext-Net-Profile-Prodution Externl Network profile for Prodution Business Group vrelize Automtion IPAM Sunet msk Gtewy Clik the DNS t nd enter the following vlues. Vlue Primry DNS Seondry DNS DNS Suffix DNS serh suffixes rinpole.lol rinpole.lol 5 Clik the Network Rnges t nd follow these steps. Clik the New utton. Enter the following vlues for the Prodution Business IP Rnge profile. Clik OK. Nme Desription Prodution Vlue Prodution Stti IP rnge for Prodution Group Strting IP ddress Ending IP ddress Verify tht ll the stti IP ddresses re dded to the profile nd lik OK. 28 VMwre, In.

29 Chpter 2 Prepring for Region A Senrio Deployment Configuring Reservtion Poliies nd Network Poliies in Region A Senrios use vrelize Automtion reservtion poliies to group similr reservtions. Tht mens, for exmple, tht you n ssign different resoures to prodution environment thn to development environment. Crete the reservtion poliy tg first, then ssign the poliy to reservtions to llow tennt dministrtor or usiness group mnger to use the reservtion poliy in lueprint. Note Only some of the senrios require tht you onfigure reservtion poliies nd network poliies. Configure them only if instruted on the first pge of the senrio. Crete Reservtion Poliies in Region A Senrios use reservtion poliies to group similr reservtions. Crete the reservtion poliy tg first so tht you n ssign the poliy to reservtions. A tennt dministrtor or usiness group mnger to use the reservtion poliy in lueprint. You rete reservtion poliy for virtul mhine provisioning in prodution environment. When you request mhine, it n e provisioned on ny reservtion of the pproprite type tht hs suffiient pity for the mhine. You n pply reservtion poliy to lueprint to restrit the mhines provisioned from tht lueprint to suset of ville reservtions. You n use reservtion poliy to ollet resoures into groups for different servie levels, or to mke speifi type of resoure esily ville for prtiulr purpose. You n dd multiple reservtions to reservtion poliy, ut reservtion n elong to only one poliy. You n ssign single reservtion poliy to more thn one lueprint, however, eh lueprint n hve only one reservtion poliy. A reservtion poliy n inlude reservtions of different types, ut only reservtions tht mth the lueprint type re onsidered when seleting reservtion for prtiulr request. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtion > Reservtion Polies. 3 Clik the New ion, onfigure the following settings, nd lik Sve. Nme Desription Vlue SFO-Prodution-Poliy Reservtion poliy for Prodution Business Group in SFO VMwre, In. 29

30 Senrios 4 Clik the New ion, onfigure the following settings, nd lik Sve. Nme Desription Vlue SFO-Edge-Poliy Reservtion poliy for Tennt Edge resoures in SFO Crete Reservtions for the Compute Cluster in Region A Before memers of usiness group n request mhines, fri dministrtors must llote resoures to them y reting reservtion. Eh reservtion is onfigured for speifi usiness group to grnt them ess to request mhines on speified ompute resoure. For the senrios, you perform this proedure twie to rete reservtions for oth the Prodution nd Development usiness groups. Group Prodution Development Nme SFO01-Comp01-Prod-Res01 SFO01-Comp01-Dev-Res01 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Reservtions, nd lik New > vsphere (vcenter). 3 On the New Reservtion - vsphere (vcenter) pge, lik the Generl t nd onfigure the following vlues. Prodution Group Vlue Development Group Vlue Nme SFO01-Comp01-Prod-Res01 SFO01-Comp01-Dev-Res01 Tennt rinpole rinpole Business Group Prodution Development Reservtion Poliy SFO-Prodution-Poliy SFO-Development-Poliy Priority Enle This Reservtion Seleted Seleted 4 On the New Reservtion - vsphere (vcenter) pge, lik the Resoures t. Selet sfo01-w01-omp01(sfo01w01v01.sfo01.rinpole.lol) from the Compute resoure dropdown menu. In the This Reservtion olumn of the Memory (GB) tle, enter VMwre, In.

31 Chpter 2 Prepring for Region A Senrio Deployment In the Storge (GB) tle, selet the DS-NFS-Primry-HIGH dtstore, enter the following vlues, nd lik OK. Vlue This Reservtion Reserved 2000 Priority 1 d In the Storge (GB) tle, selet the DS-NFS-Primry-MED dtstore, enter the following vlues, nd lik OK. Vlue This Reservtion Reserved 2000 Priority 2 e In the Storge (GB) tle, selet the DS-NFS-Primry-LOW dtstore, enter the following vlues, nd lik OK. Vlue This Reservtion Reserved 2000 Priority 3 f Selet sfo01-w01rp-user-vm from the Resoure pool drop-down menu. 5 On the New Reservtion - vsphere (vcenter) pge, lik the Network t. 6 On the Network t, selet network pth hek oxes from the Network Pths list, nd selet the orresponding network profile from the Network Profile drop-down menu, s follows. Configure the Prodution Business Group with the following vlues. Prodution Network Pth vxw-dvs-xxxxx-prodution-we-vxlan vxw-dvs-xxxxx-prodution-db-vxlan vxw-dvs-xxxxx-prodution-app-vxlan Prodution Group Network Profile Ext-Net-Profile-Prodution-We Ext-Net-Profile-Prodution-DB Ext-Net-Profile-Prodution-App Configure the Development Business Group with the following vlues. Development Network Pth vxw-dvs-xxxxx-development-we-vxlan vxw-dvs-xxxxx-development-db-vxlan vxw-dvs-xxxxx-development-app-vxlan Development Group Network Profile Ext-Net-Profile-Development-We Ext-Net-Profile-Development-DB Ext-Net-Profile-Development-App 7 Clik OK to sve the reservtion. VMwre, In. 31

32 Senrios Crete Reservtions for Edge Resoures in Region A In your senrio implementtion, fri dministrtors must llote resoures to usiness groups y reting reservtion. Eh reservtion is onfigured for speifi usiness group to grnt them ess to request virtul mhines on speified ompute resoure. Memers of usiness group n then request virtul mhines. By reting reservtions for the Edge resoures, ny onverge lueprint (or multi-mhine lueprint) tht deploys n NSX Edge devie on-demnd n utomtilly e pled in dtstore, luster, or resoure pools for Edge resoures. Tht mens Edge devies re seprted from the worklod virtul mhine resoures. By seprting the worklod ompute resoure nd the network Edge resoure, you n ssign more relile nd higher performne resoures to the infrstruture tht is in use y worklod virtul mhines. Perform this proedure to rete Edge reservtions for the Prodution usiness group. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Reservtions, nd lik New > vsphere (vcenter). 3 On the New Reservtion - vsphere (vcenter) pge, lik the Generl t, nd onfigure the following vlues for your usiness group. Nme Tennt Business Group Reservtion Poliy Prodution Group Vlue SFO01-Edge01-Prod-Res01 rinpole Prodution SFO-Edge-Poliy Priority 100 Enle This Reservtion Seleted 4 On the New Reservtion - vsphere (vcenter) pge, lik the Resoures t. d Selet sfo01-w01-omp01 (sfo01w01v01.sfo01.rinpole.lol) from the Compute resoure dropdown menu. Enter 200 in the This Reservtion olumn of the Memory (GB) tle. In the Storge (GB) tle, selet the hek ox for dtstore sfo01-w01-vsn01, enter 2000 in the This Reservtion Reserved text ox, enter 1 in the Priority text ox, nd lik OK. Selet sfo01-w01rp-user-edge from the Resoure pool drop-down menu. 5 On the New Reservtion - vsphere (vcenter) pge, lik the Network t. 32 VMwre, In.

33 Chpter 2 Prepring for Region A Senrio Deployment 6 On the Network t, mp the network pth to the network profile for the usiness group. Selet the network pth hek oxes listed in the tle elow from the Network Pths list. Selet the orresponding network profile from the Network Profile drop-down menu. Prodution Network Pth vxw-dvs-xxxxx-prodution-vxlan Prodution Group Network Profile Ext-Net-Profile-Prodution 7 If network pth is not listed, resynhronize dt olletion from the NSX ojets in the Compute vcenter Server inventory. Go k to Infrstruture > Compute Resoures. Highlight sfo01-w01-omp01, selet Dt Colletion, sroll down to Network nd Seurity Inventory, nd lik Request now. Wit for synhroniztion to omplete. 8 Clik OK to sve the reservtion. Creting Self-Servie Ctlogs nd Entitlements in Region A For some of the IT Automting IT senrios, you rete self-servie tlog nd orresponding entitlements efore you strt. A servie tlog provides ommon interfe for onsumers of IT servies to request servies, trk their requests, nd to mnge their provisioned servie items. Servie rhitets nd dministrtors n define new servies nd pulish them to the ommon tlog. When defining servie, the rhitet n speify whih items n e requested, nd wht whih request options re onfigurle. Users who re responsile for mnging the tlog, suh s tennt dministrtors nd servie rhitets, n mnge the presenttion of tlog items. For exmple, tlog mngers n group items into servie tegories for esier nvigtion nd highlight new servies to onsumers on the portl home pge. Note Only some of the senrios require tht you rete self-servie tlogs nd the orresponding entitlements. Crete the self-servie tlogs only if instruted on the first pge of the senrio. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge Perform the tsks in Configuring Reservtion Poliies nd Network Poliies in Region A, on pge Perform the tsks in Chpter 3, Creting nd Pulishing Single Mhine Blueprints in Region A, on pge 41. VMwre, In. 33

34 Senrios Crete Servie Ctlog in Region A A servie tlog provides ommon interfe for onsumers of IT servies to request servies, trk their requests, nd mnge their provisioned servie items. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to the Administrtion t, lik Ctlog Mngement > Servies, nd lik New. The New Servie pge ppers. 3 In the New Servie pge, onfigure the following settings nd lik OK. Nme Desription Sttus Ion Sttus Hours Owner Support Tem Chnge Window Vlue SFO Servie Ctlog Defult setting (lnk) Ative Defult setting (lnk) Defult setting (lnk) Defult setting (lnk) Defult setting (lnk) Defult setting (lnk) Defult setting (lnk) Crete Entitlements for Business Groups You dd servie, tlog item, or tion to n entitlement, llowing the users nd groups identified in the entitlement to request provisionle items in the servie tlog. Entitlements llow memers of usiness group suh s the Prodution usiness group to use the lueprint. Without the entitlement, users nnot use lueprint. Perform this proedure to rete n entitlement for the Prodution usiness group. Entitlement Nme Sttus Business Group User & Groups Prod-SingleVM-Entitlement Ative Prodution ug-itac-tenntadmins 34 VMwre, In.

35 Chpter 2 Prepring for Region A Senrio Deployment 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Clik the Administrtion t, nd lik Ctlog Mngement > Entitlement. 3 Clik New. The New Entitlement pge ppers. 4 On the New Entitlement pge, selet the Detils t, onfigure the following vlues, nd lik Next. Nme Desription Expirtion Dte Sttus Business Group Users & Groups Prodution Vlue Prod-SingleVM-Entitlement Defult setting (lnk) Defult setting (lnk) Ative Prodution ug-itac-tenntadmins VMwre, In. 35

36 Senrios 5 Clik the Items & Approvls t. On the Entitled Ations pge, lik the Add Ation ion, dd the following tions, nd lik OK. Connet using RDP (Mhine) Power Cyle (Mhine) Power Off (Mhine) Power On (Mhine) Reoot (Mhine) Shutdown (Mhine) Clik Finish. Configure Entitlements for Blueprints in Region A You entitle users to the tions nd items tht elong to the servie tlog y ssoiting eh lueprint with n entitlement. Repet this proedure to ssoite the following lueprints with their entitlement. Blueprint Nme VM Templte Reservtion Poliy Servie Ctlog Add to Entitlement Windows Server 2012 R2 - SFO Prod windows-2012r2-64 (sfo01w01v01.sfo01.rinpole.lol) SFO-Prodution- Poliy SFO Servie Ctlog Prod- SingleVM- Entitlement Windows Server 2012 R2 - SFO Dev windows-2012r2-64 (sfo01w01v01.sfo01.rinpole.lol) SFO- Development- Poliy SFO Servie Ctlog Dev- SingleVM- Entitlement Windows Server 2012 R2 With SQL SFO Prod windows-2012r2-64- sql2012(sfo01w01v01.sfo01.rinpole.lol) SFO-Prodution- Poliy SFO Servie Ctlog Prod- SingleVM- Entitlement Windows Server 2012 R2 With SQL SFO Dev windows-2012r2-64- sql2012(sfo01w01v01.sfo01.rinpole.lol) SFO- Development- Poliy SFO Servie Ctlog Dev- SingleVM- Entitlement Redht Enterprise Linux 6 - SFO Prod redht6- enterprise-64(sfo01w01v01.sfo01.rinpole.lol) SFO-Prodution- Poliy SFO Servie Ctlog Prod- SingleVM- Entitlement Redht Enterprise Linux 6 - SFO Dev redht6- enterprise-64(sfo01w01v01.sfo01.rinpole.lol) SFO- Development- Poliy SFO Servie Ctlog Dev- SingleVM- Entitlement 36 VMwre, In.

37 Chpter 2 Prepring for Region A Senrio Deployment 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Selet the Administrtion t nd nvigte to Ctlog Mngement > Ctlog Items. 3 On the Ctlog Items pne, selet the Windows Server 2012 R2 - SFO Prod lueprint in the Ctlog Items list nd lik Configure. 4 On the Generl t of the Configure Ctlog Item dilog ox, selet SFO Servie Ctlog from the Servie drop-down menu, nd lik OK. VMwre, In. 37

38 Senrios 5 Assoite the lueprint with the Prod-SingleVM-Entitlement entitlement. Clik Entitlements nd selet Prod-SingleVM-Entitlement. The Edit Entitlement pne ppers. Selet the Items & Approvls t nd dd the Windows Server 2012 R2 - SFO Prod lueprint to the Entitled Items list. Clik Finish. 6 Selet the Ctlog t nd verify tht the lueprints re listed in the Servie Ctlog. 7 Clik the Request utton to request virtul mhine tht uses the Windows Server 2012 R2 - SFO Prod lueprint. 8 Clik the Request t to monitor the sttus of the provision request nd verify tht the request ompletes suessfully. 9 Repet this proedure to ssoite ll of the lueprints with their entitlements. Provision Blueprints nd Vlidte the Configurtion in Region A After the lueprints for your senrio hve een reted, you n ssoite them with the servie tlog nd perform optionl ustomiztion. After provisioning is omplete, you verify tht the nming prefixes nd IP ddresses re orret. Beuse entitlements re lredy in ple, the orret set of users n then use the servie tlog item. 38 VMwre, In.

39 Chpter 2 Prepring for Region A Senrio Deployment 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to the Ctlog t nd lik SFO-Servie-Ctlog. 3 Clik Request for the lueprint nmed Windows Server 2012 R2 - SFO Prod nd, optionlly, ustomize the lueprint. (Optionl) Selet Windows Server 2012 R2 - SFO Prod nd, under Generl, enter vlues for Desription, Reson for Request, nd Lese dys. (Optionl) Selet vsphere_mhine_1 nd, under Generl, enter vlues for the CPUs nd Memory options. (Optionl) Selet vsphere_mhine_1 nd under Storge, lik Edit nd selet the Storge Reservtion Poliy option ville from the drop-down menu. 4 Clik Sumit nd lik OK. 5 Repet the steps to deploy the lueprint nmed Redht Enterprise Linux 6 - SFO Prod. 6 Clik the Requests t nd hek the sttus of the new requests until Sttus is Suessful. Provisioning might tke some time. 7 One provisioning is omplete, lik the Infrstruture t, lik Reservtions, nd lik Network Profiles. 8 Clik Ext-Net-Profile-Prodution, lik the IP Addresses t to verify tht the lueprints re deployed orretly. Verify tht two virtul mhines exist with the mhine nme pttern Prod-xxxxx. This is the prefix tht you defined ording to Crete Mhine Prefixes in Region A, on pge 41. Verify tht the two virtul mhines re using the IP ddresses defined on Crete Externl Network Profiles in Region A, on pge 27. Clik Cnel when verifition is omplete. VMwre, In. 39

40 Senrios 40 VMwre, In.

41 Creting nd Pulishing Single 3 Mhine Blueprints in Region A A lueprint speifies the workflow tht is used to provision virtul mhine nd inludes informtion suh s CPU, memory, nd storge. This senrio explins how to pulish lueprints for the Prodution usiness group. Mhine lueprints inlude dditionl provisioning informtion suh s the lotions of required disk imges or virtuliztion pltform ojets. Blueprints lso speify poliies suh s the lese period nd n inlude networking nd seurity omponents suh s seurity groups, poliies, or tgs. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge Perform the tsks in Configuring Reservtion Poliies nd Network Poliies in Region A, on pge 29. This hpter inludes the following topis: Crete Mhine Prefixes in Region A, on pge 41 Crete Single Mhine Blueprints in Region A, on pge 42 Crete Mhine Prefixes in Region A As fri dministrtor, you rete mhine prefixes tht re used to rete nmes for mhines provisioned through vrelize Automtion. Tennt dministrtors nd usiness group mngers selet these mhine prefixes nd ssign them to provisioned mhines through lueprints nd usiness group defults. For the Senrios doumenttion, you set up mhine prefix for the Prodution usiness group. Mhine prefixes re shred ross ll tennts. Every usiness group hs defult mhine prefix. Every lueprint must hve mhine prefix or use the group defult prefix. Fri dministrtors re responsile for mnging mhine prefixes. A prefix onsists of se nme to e followed y ounter of speified numer of digits. When the digits re ll used, vrelize Automtion rolls k to the first numer. VMwre, In. 41

42 Senrios 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet Infrstruture > Administrtion > Mhine Prefixes. 3 Clik the New ion to rete defult mhine prefix for the Prodution group using the following settings nd lik Sve. Mhine Prefix Vlue Prod- Numer of Digits 5 Next Numer 1 Crete Single Mhine Blueprints in Region A To prepre for IT Automtion IT senrios, you rete lueprint for provisioning the Linux nd Windows virtul mhines. The lueprint uses resoures on the Compute vcenter Server. Tennts n lter use this lueprint for utomti provisioning. A lueprint is the omplete speifition for virtul, loud, or physil mhine. Blueprints determine mhine's ttriutes, the mnner in whih it is provisioned, nd its poliy nd mngement settings. Repet this proedure to rete the following lueprints. Blueprint Nme VM Templte Customiztion Speifition Windows Server 2012 R2 - SFO Prod windows-2012r2-64 it-windows-joindomin-ustom-spe Redht Enterprise Linux 6 - SFO Prod redht6-enterprise-64 it-linux-ustom-spe 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Clik New. 42 VMwre, In.

43 Chpter 3 Creting nd Pulishing Single Mhine Blueprints in Region A 4 In the New Blueprint dilog ox, onfigure the following settings on the Generl t nd lik OK. Nme Vlue Windows Server 2012 R2 - SFO Prod Arhive (dys) 15 Minimum 30 Mximum Selet nd drg the vsphere Mhine ion to the Design Cnvs. 6 Clik the Generl t, onfigure the following settings, nd lik Sve. ID Desription Disply lotion on request Reservtion poliy Mhine prefix Minimum Mximum Defult Defult setting (vsphere_mhine_1) Defult setting (lnk) Deseleted SFO-Prodution-Poliy Prod- Defult setting Defult setting 7 Clik the Build Informtion t, onfigure the following settings, nd lik Sve. Blueprint type Ation Provisioning workflow Clone from Customiztion spe Vlue for Windows Server Clone CloneWorkflow windows-2012r2-64 it-windows-joindomin-ustom-spe 8 Clik the Mhine Resoures t, onfigure the following settings, nd lik Sve. Minimum Mximum CPU 2 4 Memory (MB): Storge Defult setting Defult setting 9 Set the network. Clik the Network t. Selet Network & Seurity in the Ctegories setion to disply the list of ville network nd seurity omponents. Selet the Existing Network omponent nd drg it onto the design nvs. VMwre, In. 43

44 Senrios d Clik in the Existing network text ox nd selet the Ext-Net-Profile-Prodution network profile. Blueprint Nme Windows Server 2012 R2 - SFO Prod Redht Enterprise Linux 6 - SFO Prod Existing network Ext-Net-Profile-Prodution Ext-Net-Profile-Prodution e Clik Sve. f g Selet vsphere_mhine properties from the design nvs. Selet the Network t, lik New, nd onfigure the following settings. For Existing Network Network Assignment Type Address Ext-Net-Profile-Prodution ExtNetProfileProdution Stti IP Leve lnk h i Clik Sve. Clik Finish to sve the lueprint. 10 Selet the lueprint nd lik Pulish. 11 Repet this proedure to rete the lueprint for Linux. Blueprint type Ation Provisioning workflow Clone from Customiztion spe Vlue for Linux Server Clone CloneWorkflow redht6-enterprise-64 it-linux-ustom-spe 44 VMwre, In.

45 Creting Blueprints with Dynmi 4 Resoure Tiering in Region A Resoure tiering llows you to provision lueprints depending on demnd. After you provision deployment, you n djust to hnging worklod demnds y inresing or deresing the numer of instnes of virtul or loud mhines in your deployment. In this senrio, you rete severl different storge reservtion poliies. Depending on the usiness requirements, you n then hnge the storge for the lueprint. For exmple, ssume tht deployed three-tiered pplition with lustered pplition server node, dtse node, nd lod lner node. Demnd inreses, nd you find tht the two instnes of your pplition server node nnot hndle ll the trffi. Beuse your lueprint supports up to ten instnes of the pplition server, nd you re entitled to sle tions, you n sle out your pplition. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge Perform the tsks in Configuring Reservtion Poliies nd Network Poliies in Region A, on pge Perform the tsks in Chpter 3, Creting nd Pulishing Single Mhine Blueprints in Region A, on pge 41. This hpter inludes the following topis: Crete Storge Reservtion Poliies in Region A, on pge 46 Apply Storge Reservtion Poliy to Dtstore in Region A, on pge 47 Enle Users to Chnge Storge Poliies in Region A, on pge 47 Provision Virtul Mhine With Modified Storge Poliy in Region A, on pge 48 VMwre, In. 45

46 Senrios Crete Storge Reservtion Poliies in Region A Tennt dministrtors rete storge reservtion poliies to group dtstores tht hve similr hrteristis, suh s speed or prie. After you rete storge reservtion poliy, you n populte it with dtstores to use the poliy in lueprint in your senrio. 1 Log in to the vrelize Automtion onsole. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin vra_tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtion > Reservtion Polies. 3 Crete high-performne storge reservtion poliy. d Clik New nd hoose Storge Reservtion Poliy. Type Gold-Storge-Poliy in the Nme text ox. Type High performne storge in the Desription text ox. Clik the Sve ion. 4 Crete medium-performne storge reservtion poliy. d Clik New nd hoose Storge Reservtion Poliy. Type Silver-Storge-poliy in the Nme text ox. Type Medium performne storge in the Desription text ox. Clik the Sve ion. 5 Crete low-performne storge reservtion poliy. d Clik New nd hoose Storge Reservtion Poliy. Type Bronze-storge-poliy in the Nme text ox. Type Low performne storge in the Desription text ox. Clik the Sve ion. 46 VMwre, In.

47 Chpter 4 Creting Blueprints with Dynmi Resoure Tiering in Region A Apply Storge Reservtion Poliy to Dtstore in Region A When you implement senrio with dynmi resoure tiering, you first rete storge poliy. You n then pply the poliy to dtstore so tht tennt dministrtors nd usiness group mngers n use the poliy in lueprint. 1 Log in to the vrelize Automtion onsole. Open We rowser nd go to Log in using the following redentils. Options User nme Pssword Domin Desription it-tenntdmin vra_tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Compute Resoures > Compute Resoures. 3 Clik Edit on the ompute resoure sfo01-w01-omp01. 4 Clik the Configurtion t nd lik the Edit ion to pply the proper storge poliy for eh dtstore, ording to their performne. Dtstore DS-NFS-Primry-HIGH DS-NFS-Primry-MED DS-NFS-Primry-LOW Storge poliy Gold-Storge-Poliy Silver-Storge-Poliy Bronze-Storge-Poliy 5 Clik OK to sve the storge poliy onfigurtion. Enle Users to Chnge Storge Poliies in Region A When you implement senrio with dynmi resoure tiering, you enle users to hnge storge poliies in eh lueprint. You set the option for oth the Windows nd the Linux lueprint. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Clik the Windows Server 2012 R2 - SFO Prod lueprint 4 Selet the vsphere Mhine ion in the Design Cnvs. 5 Clik the Storge t, selet Disk 0,nd lik the Edit ion. VMwre, In. 47

48 Senrios 6 Configure the following settings on the Storge t, nd lik Sve. Storge Reservtion Poliy Allow user to see nd hnge storge reservtion poliies Gold-Storge-Poliy heked 7 Clik Finish. 8 Repet the sme steps for the lueprint nmed Redht Enterprise Linux 6 - SFO Prod. Provision Virtul Mhine With Modified Storge Poliy in Region A In the dynmi resoure tiering senrio, you n selet storge poliy in the lueprint eh time you provision virtul mhine. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Clik the Ctlog t nd lik the Request utton for Windows Server 2012R2 - SFO Prodution. 3 Clik the vsphere_mhine_1 ion in the left pne. 4 Selet the Storge t. 5 Selet the disk 0, nd lik Edit. 6 Selet Silver-storge-poliy from the Storge Reservtion Poliy drop-down menu nd lik OK. 7 Clik Sve on the vsphere Mhine: vsphere_mhine_1 t. 8 Clik the Request utton for the Windows Server 2012R2 - SFO Prodution tlog item gin nd lik Sumit. 9 Clik OK nd monitor the sttus of the request. 10 One the deployment is suessful, verify tht the virtul mhine is in the DS-NFS-Primry-MED dtstore. 48 VMwre, In.

49 Integrting vrelize Automtion with 5 IPAM in Region A IP ddress mngement (IPAM) supports plnning, trking, nd mnging the IP ddress spe of network. You n integrte n IPAM module, suh s the Infolox vnois ppline, with vrelize Automtion to rete n IPAM network for the Rinpole tennt. In this senrio, you strt with n existing lueprint with vrelize Automtion network profile nd modify the lueprint to work with IPAM. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. Prerequisites 1 Prepre for the senrio. See Chpter 2, Prepring for Region A Senrio Deployment, on pge Perform the tsks in Configuring Reservtion Poliies nd Network Poliies in Region A, on pge Downlod the Infolox DDI (DNS, DHCP, nd IPAM) from the Infolox Wesite. Infolox DDI provides the Infolox vnois ppline. This senrio uses version Downlod the VMwre Cloud Adpter from the Infolox Wesite. This senrio uses version 4.0 of this dpter. This hpter inludes the following topis: Deploy Infolox vnios Appline in Region A, on pge 50 Configure the Appline s Grid Mster in Region A, on pge 51 Configure the IPAM Network Profile for the Rinpole Tennt in Region A, on pge 52 Crete the Cloud API User in Region A, on pge 54 Integrte the IPAM Plug-in With vrelize Orhestrtor in Region A, on pge 56 Register the IPAM Endpoint in vrelize Automtion in Region A, on pge 57 Crete Logil Swithes in Region A, on pge 61 Crete Externl Network Profiles, on pge 62 Modify n Existing Blueprint in Region A to Inorporte IPAM, on pge 63 Provision Blueprints in Region A with IPAM nd Vlidte the Blueprints, on pge 65 VMwre, In. 49

50 Senrios Deploy Infolox vnios Appline in Region A Infolox DDI inludes n IP ddress mngement (IPAM) omponent tht integrtes with vrelize Automtion to provide n IP ddress solution for virtul mhine provisioning. In this senrio, you use this funtionlity in your environment. First you deploy the Infolox vnios ppline on the mngement vcenter Server nd then you integrte the ppline with vrelize Automtion. Prerequisites Downlod the Infolox DDI softwre pkge from the Infolox wesite. 1 Downlod nd instll VMwre OVF Tool from VMwre wesite. See for detils. 2 Run the ommnd to import the Infolox NIOS ppline using OVF Tool: ":\Progrm Files\VMwre\VMwre OVF Tool\ovftool.exe" "--dtstore=sfo01-nfs01-mgmt01" "--nme=mgmt01vnios01" "--network=sfo01-m01-vds01-mngement" --poweron nios g-820.ov "vi://dministrtor@vsphere.lol:psswd@sfo01m01v01.sfo01.rinpole.lol/sfo01- m01d/host/sfo01-m01-mgmt01" 3 Using the vsphere We Client, log in to the Infolox vnios ppline onsole with the initil preonfigured user nme nd pssword. User Pssword Vlue dmin infolox You hnge this user nme nd pssword lter. 4 Configure temporry liense for 60 dys d e f g h At the Infolox vnios ppline onsole, enter set temp_liense. Type the numer 2, then press Enter. Enter set temp_liense. Type the numer 8, then press Enter. Enter set temp_liense. Type the numer 15, then press Enter. Enter y to generte temporry 60-dy liense for the DNSone with Grid produt. Enter y to restrt the UI, nd y gin to onfirm. 5 At the Infolox vnios ppline onsole, enter set network nd enter the following network onfigurtion. Vlue Host IP Netmsk Gtewy Configure IPv6 Network s? No 50 VMwre, In.

51 Chpter 5 Integrting vrelize Automtion with IPAM in Region A Beome grid memer? Vlue No 6 Enter y to ept the new onfigurtion, nd y gin to ept the onfigurtion hnge. 7 On the Ative Diretory server, dd the following DNS nme for the NIOS ppline. mgmt01vnios01.rinpole.lol Configure the Appline s Grid Mster in Region A In n environment tht uses IPAM, grid mster holds nd mintins the entrl dtse of the grid. You n onfigure the Infolox vnios ppline to e the grid mster. 1 Log in to the Infolox vnios ppline. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dmin infolox 2 (Optionl) If the Setup Wizrd does not strt, strt it mnully. d Clik the Grid t nd selet Grid Mnger > Memers Expnd the Toolr on the right. Clik the Grid Properties drop-down menu. Clik Setup Wizrd. 3 Clik I Aept to ept the liense greement. 4 In the Grid Setup wizrd, selet the Configure Grid Mster rdio utton nd lik Next. VMwre, In. 51

52 Senrios 5 Enter the following grid properties. Grid Nme Shred Seret Host Nme Type of Network Is the grid mster n HA pir? Vlue VVD-Grid ny_pssphrse mgmt01vnios01.rinpole.lol IPv4 No 6 Keep the IP Address settings s is nd lik Next. 7 Chnge the defult dmin pssword to pssword of your hoie nd lik Next. 8 Configure the time zone nd NTP server nd lik Next. Time Zone Would you like to enle NTP? NTP Server Vlue (UTC-8:00) Pifi Time (US nd Cnd), Tihun Yes ntp.rinpole.lol 9 In the Prtiipte in the Infolox Customer Experiene Improvement Progrm dilog ox, leve the defult nd lik Next. 10 Review the finl onfigurtion nd lik Finish. 11 In the Wrning dilog ox, lik Yes. Configure the IPAM Network Profile for the Rinpole Tennt in Region A Before you n tke dvntge of the IPAM funtionlity, you onfigure network profile nd the DNS servie to e onsumed y vrelize Automtion lueprint nd you strt the DNS servie. 1 Log in to the vnios mngement interfe. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dmin vnios_dmin_pssword 2 Clik the Dt Mngement t. 3 Crete n IPAM network for the Rinpole tennt. Clik the IPAM sumenu. In the defult network view, lik the Add ion. In the Add IPv4 Network wizrd, selet Add Network, selet the Mnully option, nd lik Next. 52 VMwre, In.

53 Chpter 5 Integrting vrelize Automtion with IPAM in Region A d Enter the following network informtion nd lik Next. Vlue Netmsk 24 Networks e f On the Memers pge, lik the Add ion, dd mgmt01vnios01.rinpole.lol, nd lik Next. Override the following prmeters nd lik Next. Vlue Routers Domin Nme rinpole.lol DNS Servers g h On the Extensile Attriutes pge, lik Next. In the Crete IPv4 Network pne, selet Now nd lik Sve & Close. 4 Crete DNS zone for the Rinpole tennt. d e Clik the DNS sumenu. Clik Zones. Clik the Add ion nd selet Authorittive Zone. In the Add Authorittive Zone wizrd, selet Add n uthorittive forwrd-mpping zone, nd lik Next. Enter the following prmeters nd lik Sve & Close. Nme Vlue rinpole.lol 5 To prevent IPAM from using the IP ddress tht is lredy ssigned to the gtewy, reserve tht ddress. Clik the newly-reted rinpole.lol zone. On the Reords pge, lik the drop down menu next to the ion "+", move down to selet Reord nd selet A Reord. VMwre, In. 53

54 Senrios In the Add A Reord wizrd, enter the following prmeters nd lik Sve & Close. Nme Vlue dlr01 IP Address d In the Wrning dilog ox, lik Yes. 6 Strt the DNS servie. Clik the DNS sumenu nd lik Memers. Selet the mgmt01vnios01.rinpole.lol hek ox, lik Strt, nd lik Yes. Crete the Cloud API User in Region A In this senrio, vrelize Automtion hs to onnet to IPAM through n endpoint. To mke this possile, user must hve proper permission to ess Infolox Restful We API (WAPI). The user is prt of Infolox loud-pi-only group, with permission to query nd updte loud ttriutes using WAPI. 1 Log in to the vnios mngement interfe. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dmin vnios_dmin_pssword 2 Clik the Administrtion t nd lik Administrtors. 3 Verify tht the Cloud API group exists nd rete it if neessry. Clik the Groups sumenu. Verify tht group nmed loud-pi-only exists. 54 VMwre, In.

55 Chpter 5 Integrting vrelize Automtion with IPAM in Region A 4 Crete new user for the Cloud API group. Clik Admins. Clik the Add ion, enter the following prmeters, nd lik Sve & Close. Authentition Type Login Pssword Admin Group Vlue Lol loudpi loudpi_pssword Clik Selet nd selet loud-pi-only. 5 Give the proper permissions to the loudpi user. d Clik Permissions. In the Groups window, selet the loud-pi-only group nme nd lik Add. In the Mnge Glol Permissions wizrd, selet loud-pi-only s the Group Permission. For the purpose of this senrio, give the user loudpi full Red/Write privileges for the following permission types. Cloud Permissions DHCP Permissions DNS Permissions Grid Permissions IPAM Permissions Vlue Chek ll oxes. Chek ll oxes exept All IPv4 Lese History nd All IPv6 Lese History. Chek ll oxes. Chek ll oxes. Chek ll oxes. e Clik Sve & Close. 6 Add extensile ttriutes required for integrtion with vrelize Automtion. Clik the Extensile Attriutes menu. Clik the Add ion, dd the VMwre Resoure ID ttriute, nd lik Sve & Close. Nme Type Vlue VMwre resoure ID String Clik the Add ion, dd the VMwre NIC index ttriute, nd lik Sve & Close. Nme Type Vlue VMwre NIC index Integer VMwre, In. 55

56 Senrios Integrte the IPAM Plug-in With vrelize Orhestrtor in Region A To integrte the IPAM plug-in with vrelize Orhestrtor, you mnully dd the vnios ppline ertifites to vrelize Orhestrtor, import the vnios ppline s plug-in, nd vlidte the onfigurtion. 1 Log in to the vrelize Orhestrtor Control Center. Open We rowser nd go to Clik vrelize Orhestrtor Control Center Log in to vrelize Orhestrtor Control Center using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Add the vnios ppline ertifite to vrelize Orhestrtor. In the Mnge setion, lik Certifites. Clik Import nd selet Import from URL. Enter the following URL nd lik Import. d At the onfirmtion prompt, lik Import gin. 3 Uplod the vnios ppline s plug-in to vrelize Orhestrtor. d Clik the Home ion. In the Plug-ins setion, lik Mnge Plug-Ins. Clik Browse, selet the 011nplugin-ipm.dr file, nd lik Instll. Clik Instll gin for onfirmtion. 4 Restrt the vrelize Orhestrtor server servie to pply the new onfigurtion. Clik the Home ion. Clik Strtup Options nd lik Restrt. 56 VMwre, In.

57 Chpter 5 Integrting vrelize Automtion with IPAM in Region A 5 After the vrelize Orhestrtor servie reoots, vlidte the onfigurtion. Clik the Home ion. Under Mnger, lik Vlidte Configurtion nd verify tht ll hek mrks re green. Register the IPAM Endpoint in vrelize Automtion in Region A You n use vrelize Orhestrtor to lunh the Infolox setup wizrd. To do so, you onnet vrelize Automtion nd IS to Infolox IPAM, rete group properties, nd enle n IPAM endpoint in vrelize Automtion. 1 Log in to vrelize Orhestrtor. d Open We rowser nd go to Clik vrelize Orhestrtor Client to downlod the vrelize Orhestrtor Client file. Clik the downlod nd lik Continue on the seurity wrning prompt In the VMwre vrelize Orhestrtor Login wizrd, speify the following redentils nd lik Login. Host nme User nme Pssword Vlue vr01svr01.rinpole.lol:443 sv-vr@rinpole.lol sv-vr_pssword VMwre, In. 57

58 Senrios 2 Lunh the Setup Wizrd workflow from vrelize Orhestrtor. In the VMwre vrelize Orhestrtor window, lik the Workflows ion. Go to sv-vra@vr01svr01.rinple.lol > Lirry > Infolox > vra > Instlltion. Right lik Setup Wizrd nd selet Strt Workflow. 3 In Strt Workflow: Setup Wizrd, enter the following vlues for the vra host. Enter the following vra host properties nd lik Next. Crete vra host Host nme Host URL Automtilly instll SSL ertifites Connetion timeout Opertion timeout Vlue Yes vr01svr01 Yes Defult Defult Enter the following user redentils for the vra host. Session mode Tennt Authentition usernme Authentition pssword Vlue Shred Session vsphere.lol dministrtor@vsphere.lol vsphere_dmin_pssword Clik Next. 58 VMwre, In.

59 Chpter 5 Integrting vrelize Automtion with IPAM in Region A 4 Still in the Strt Workflow: Setup Wizrd, enter the following IS host properties. Enter the following the host properties nd lik Next. Crete IS host Host nme Host URL Automtilly instll SSL ertifites Connetion timeout Opertion timeout User proxy Vlue Yes vr01iws01 Yes Defult Defult No Enter the following user redentils nd lik Next. Host's uthentition type Authentition user nme Authentition pssword Vlue NTLM sv-vr pssword for sv-vr@rinpole.lol Enter domin nd worksttion prmeters nd lik Next. Worksttion for NTLM uthentition Domin for NTLM uthentition Vlue Leve lnk rinpole.lol 5 Still in the Strt Workflow: Setup Wizrd, enter the following Property group prmeters nd lik Sumit. Nme Desription Visiility Vlue VVD-Infolox-Group-Properties VVD-Infolox-Group-Properties All tennts Numer of virtul network interfes 1 Updte existing property definitions Yes VMwre, In. 59

60 Senrios 6 Configure n IPAM endpoint in vrelize Automtion. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol Selet Infrstruture > Endpoints > Endpoints. 60 VMwre, In.

61 Chpter 5 Integrting vrelize Automtion with IPAM in Region A d e Clik New, selet IPAM from the drop-down menu, nd lik Infolox. Enter the following settings nd lik OK. Nme Desription Address User nme Pssword Vlue IPAM-01 vnios Appline loudpi loudpi_pssword Crete Logil Swithes in Region A In the IPAM senrio, you hve to rete logil swithes for the IPAM IP pool. This proedure retes nd onfigures Prodution-IPAM-VXLAN logil swith for the Prodution usiness group using IPAM. 1 Log in to the Compute vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Crete logil swith. Clik Networking & Seurity. In the Nvigtor, selet Logil Swithes. From the NSX Mnger drop-down menu, selet s the NSX Mnger. VMwre, In. 61

62 Senrios d e Clik the New Logil Swith ion. In the New Logil Swith dilog ox, enter the following vlues, nd lik OK. Nme Desription Trnsport Zone Replition Mode Enle IP Disovery Enle MAC Lerning Vlue Prodution-IPAM-VXLAN Logil swith for Prodution Business Group using IPAM Comp Glol Trnsit Network Hyrid Seleted Deseleted 3 Connet Prodution-IPAM-VXLAN to the Glol Distriuted Logil Router. d On the Logil Swithes pge, selet the Prodution-IPAM-VXLAN logil swith. Clik the Connet Edge ion. On the Connet n Edge pge, selet sfo01w01dlr01 nd lik Next. On the Edit NSX Edge Interfe pge, enter the following settings, lik Next, nd lik Finish. Option Nme Type Connetivity Sttus s Prodution-IPAM-VXLAN Internl Conneted Primry IP Address Sunet Prefix Length 24 Crete Externl Network Profiles In the IPAM use se, fri dministrtors must rete network profiles to define the sunet nd routing onfigurtion for virtul mhines. Eh network profile is onfigured for speifi network port group or virtul network nd speifies the IP ddress nd routing onfigurtion for virtul mhines tht re provisioned to tht network. Memers of usiness group n request virtul mhines. Prerequisites Verify tht the logil swithes for usiness groups hve een reted. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Network Profiles nd lik New > Externl. 62 VMwre, In.

63 Chpter 5 Integrting vrelize Automtion with IPAM in Region A 3 On the New Network Profile - Externl pge, dd the vlues for the prodution group externl network profile on the Generl t. Nme Desription IPAM endpoint Prodution Vlue Ext-Net-Profile-Prodution-IPAM Externl Network profile for Prodution Business Group using IPAM IPAM-01 4 Clik the Network Rnges t nd follow these steps. From the Address spe drop-down menu, selet defult. Clik Add. In the Selet Network Rnge wizrd, lik on the hek ox next to the /24 network rnge nd lik OK. If this network rnge is not displyed, lik the refresh ion in the ottom. 5 Clik OK to omplete the network profile. Modify n Existing Blueprint in Region A to Inorporte IPAM After you integrte the vnios ppline with vrelize Automtion nd perform the required extr onfigurtion, you n modify n existing lueprint to use IPAM. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol VMwre, In. 63

64 Senrios 2 Modify the existing reservtion to use the IPAM network profile. d e f g Nvigte to Infrstruture > Compute Resoures > Compute Resoures, hover the mouse over sfo01-w01-omp01 nd lik Dt Colletion. Under Inventory, lik Request Now. Nvigte to Infrstruture > Reservtions > Reservtions nd lik SFO01-Comp01-Prod-Res01. On the Edit Reservtion - vsphere pge, lik the Network t. In the Network Pth olumn, lik the hek ox for vxw-dvs-xxxxx-prodution-ipam-vxlan. In the Network Profile olumn, lik the drop-down menu nd selet Ext-Net-Profile-Prodution- IPAM. Clik OK. 3 Modify the existing lueprint to use the IPAM network profile, s follows. Blueprint Nme Windows Server 2012 R2 - SFO Prod Redht Enterprise Linux 6 - SFO Prod New network Ext-Net-Profile-Prodution-IPAM Ext-Net-Profile-Prodution-IPAM d e f g Nvigte to Design > Blueprints nd lik Windows Server 2012 R2 - SFO Prod. On the design nvs, lik the ExtNetProfileProd network. In the Generl t, in the Existing network pne, rowse to Ext-Net-Profile-Prodution-IPAM nd lik Sve. On the design nvs, lik vsphere_mhine. Clik the Properties t. Under Property Groups, lik Add, selet VVD-Infolox-Group-Properties, nd lik Ok, nd lik Finish. Repet the steps for the seond lueprint (Redht Enterprise Linux 6 - SFO Prod). 64 VMwre, In.

65 Chpter 5 Integrting vrelize Automtion with IPAM in Region A Provision Blueprints in Region A with IPAM nd Vlidte the Blueprints After you omplete ll setup tsks, you n provision lueprints nd perform some ustomiztion. After provisioning is omplete, you verify tht the nming prefixes nd IP ddresses re orret. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to the Ctlog t nd lik SFO-Servie-Ctlog. 3 Clik Request for the lueprint nmed Windows Server 2012 R2 - SFO Prod nd, optionlly, ustomize the lueprint. (Optionl) Selet Windows Server 2012 R2 - SFO Prod nd, under Generl, enter vlue for Desription, Reson for Request, nd Lese dys. (Optionl) Selet vsphere_mhine_1 nd enter CPU nd Memory options under Generl. (Optionl) Selet vsphere_mhine_1 nd under Storge, lik Edit nd selet the Storge Reservtion Poliy option ville from the drop-down menu. 4 Clik Sumit nd lik OK. 5 Repet the steps to deploy lueprint nmed Redht Enterprise Linux 6 - SFO Prod. 6 Clik the Requests t nd hek the sttus of the new requests until Sttus is Suessful. Provisioning might tke some time. 7 Vlidte IP llotion y IPAM. Open We rowser nd go to Log in using the user nme nd pssword for the vnios ppline. User nme Pssword Vlue dmin vnios_dmin_pssword d Clik the Cloud t nd lik the VMs t. Verify tht the IP ddress tht is lloted to the newly provision virtul mhine is orret. VMwre, In. 65

66 Senrios 66 VMwre, In.

67 Creting Multi-Tier Applitions in Region A 6 A multi-tier pplition is ny pplition with more thn one lyer. The numer of lyers depends on usiness nd pplition requirements. A multi-tier pplition pttern simplifies lueprint uthoring for oth infrstruture nd pplitions. Applition ptterns n e used y developers or deployed in mture stges of the relese pipeline. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge Perform the tsks in Configuring Reservtion Poliies nd Network Poliies in Region A, on pge 29. This hpter inludes the following topis: Crete Softwre Components for the Multi-Tier Applition in Region A, on pge 67 Prepre for Multi-Tier Applition Ptterns in Region A, on pge 80 Implement Multi-Tier Applition Ptterns in Region A, on pge 85 Crete Softwre Components for the Multi-Tier Applition in Region A Softwre omponents re the uilding loks of softwre provisioning proess tht is exeuted y softwre instlltion gents. vrelize Automtion onfigures softwre omponent dynmilly with prespeified input prmeters nd sripts. Softwre rhitets, IS rhitets, nd pplition rhitets n then ustomize nd pulish the softwre omponents to ssemle pplition lueprints. VMwre, In. 67

68 Senrios Instll the vrelize Automtion Applition Authoring Agent in Region A You n instll the Applition Authoring Agent on ny templte tht you wnt to leverge through the vrelize Automtion design nvs. The Authoring Agent enles you to leverge the softwre omponent spets of vrelize Automtion. 1 Log in to the vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Right-lik the linux-se-03 virtul mhine nd power on the virtul mhine. 3 Open Seure Shell (SSH) prompt nd log in to the virtul mhine s the root user. 4 Instll wget on the virtul mhine. yum instll wget If the yum ommnd does not work, mke sure tht the virtul mhine n ping live site on the Internet. 5 Downlod the instlltion sript from your vrelize Automtion virtul ppline y running the following ommnd. wget --no-hek-ertifite 68 VMwre, In.

69 Chpter 6 Creting Multi-Tier Applitions in Region A 6 Mke the prepre_vr_templte.sh sript exeutle y running the following ommnd. hmod +x prepre_vr_templte.sh 7 Run the prepre_vr_templte.sh instller sript../prepre_vr_templte.sh 8 Follow the prompts to omplete the instlltion. Prompt CloudProvider vrelize Appline Mnger Servie Server Do you ept this for the Mnger Servie (yes/no)? Do you ept this for the vrelize Appline (yes/no)? Response vsphere vr01svr01.rinpole.lol vr01ims01.rinpole.lol yes yes Timeout 300 Jv Strt the instlltion? y y VMwre, In. 69

70 Senrios You see onfirmtion messge when the instlltion ompletes suessfully. 9 If you see n error messge nd logs in the onsole, resolve the errors nd run the instller sript gin. 10 When instlltion is omplete, shut down the virtul mhine nd tke snpshot nmed Applition Authoring Snp of the virtul mhine. 70 VMwre, In.

71 Chpter 6 Creting Multi-Tier Applitions in Region A Run Inventory Colletion in Region A Before you uild softwre omponents for your multi-tier pplition, run luster inventory olletion to ensure tht the snpshot tht you reted erlier is ville for use. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Go to Infrstruture > Compute Resoures > Compute Resoures. 3 Hover over SFO01-Comp01 nd selet Dt Colletion. 4 Clik Request Now in the Inventory pne. VMwre, In. 71

72 Senrios 5 Clik Refresh to refresh the olletion sttus until the inventory sttus shows Sueeded. 6 Clik OK. Crete the Aphe Softwre Component in Region A Before you n rete multi-tier pplition ptterns, you hve to rete the softwre omponents. This tsk retes servie tht instlls nd onfigures n Aphe we server on Linux virtul mhine. 1 Nvigte to Design > Softwre Components. 2 Clik New to rete new servie. 3 Under Generl, enter the following vlues. Nme Desription Continer Vlue Aphe Servie Instll nd onfigure Aphe Servie on Linux systems. Mhine 4 Clik Next on the Properties pge. 72 VMwre, In.

73 Chpter 6 Creting Multi-Tier Applitions in Region A 5 Set the tions for this servie in the Ations pne. In the Instll row, selet Bsh s the Sript Type. Still in the Instll row, selet Clik Here to edit nd pste the following ode into the Edit Sript text ox. /usr/in/yum -y instll httpd /sin/hkonfig httpd on /sin/servie httpd strt 6 Clik Next nd lik Finish. 7 Selet the new servie nd lik Pulish. Crete MySQL Softwre Component in Region A A multi-tier pplition pttern might require dtse. This tsk retes servie tht instlls nd onfigures MySQL server on Linux virtul mhine. 1 Clik New to rete new softwre omponent. VMwre, In. 73

74 Senrios 2 Under Generl enter the following vlues nd lik Next. Nme Desription Continer Vlue MySQL MySQL Servie Instlltion nd Configurtion Mhine 3 Under Properties lik New, enter the following vlues, lik OK, nd then lik Next. Nme Desription Type Vlue Enrypted Overridle Required Computed Vlue dpssword Root Pssword String gogo123 Yes Yes No No 4 Clik OK nd then Next. 74 VMwre, In.

75 Chpter 6 Creting Multi-Tier Applitions in Region A 5 Set the tions for this servie in the Ations pne. In the Instll row, selet Bsh s the Sript Type. Still in the Instll row, selet Clik Here to edit nd pste the following ode into the Edit Sript text ox. #!/in/sh /usr/in/yum -y instll mysql-server mysql-lient /sin/hkonfig mysqld on /sin/servie mysqld strt In the Configure row, selet Clik here to Edit nd pste the following ode into the text ox. #!/in/sh /usr/in/mysql -e "UPDATE mysql.user SET Pssword=PASSWORD('$dpssword') WHERE User='root';" /usr/in/mysql -e "DELETE FROM mysql.user WHERE User='';" /usr/in/mysql -e "DROP DATABASE test;" /usr/in/mysql -e "FLUSH PRIVILEGES;" 6 Clik Next nd lik Finish. 7 Selet the new MySQL servie nd lik Pulish. Crete PHP Softwre Component in Region A A multi-tier pplition pttern might require PHP omponent. This tsk retes servie tht instlls nd runs PHP servie on Linux virtul mhine. 1 Clik New to rete new servie. 2 Under Generl, enter the following vlues. Nme Desription Continer Vlue PHP Servie Add PHP Servie Mhine 3 Clik Next to skip the Properties pne. 4 Set the tions for this servie in the Ations pne. In the Instll row, selet Bsh s the Sript Type. Still in the Instll row, selet Clik Here to edit nd pste the following ode into the Edit Sript text ox. /usr/in/yum -y instll php php-mysql VMwre, In. 75

76 Senrios In Strt row, selet Clik here to Edit nd pste the following ode into the Edit Sript text ox. /sin/servie httpd restrt d Clik OK. 5 Clik Next nd lik Finish. 6 Selet the new servie nd lik Pulish. Crete System Configurtion Softwre Component in Region A A multi-tier pplition pttern might require system onfigurtion omponent. This tsk retes stndlone servie tht n disle nd stop IP tles nd IPv6 tles. 1 Clik New to rete new servie. 2 Under Generl enter the following vlues. Nme Desription Continer Vlue System Configurtion Linux System Level Configurtion Mhine 3 Clik Next to skip the Properties pge. 4 Set the tions for this servie in the Ations pne. In the Instll row, selet Bsh s the Sript Type. Still in the Instll row, selet Clik Here to edit, pste the following ode into the Edit Sript text ox, nd lik OK. #!/in/sh /sin/hkonfig iptles off /sin/hkonfig ip6tles off /sin/servie iptles stop /sin/servie ip6tles stop 5 Clik Next nd lik Finish. 6 Selet the new servie nd lik Pulish. Crete Wordpress Dtse Softwre Component in Region A A multi-tier pplition pttern might require Wordpress dtse. This tsk retes servie tht retes the Wordpress dtse inside the MySQL omponent. 76 VMwre, In.

77 Chpter 6 Creting Multi-Tier Applitions in Region A 1 Clik New to rete new servie. 2 Under Generl enter the following vlues nd lik Next. Nme Desription Continer Vlue Wordpress Dtse Crete Wordpress Dtse on MySQL MySQL 3 Under Properties, lik New nd enter the following vlues. Nme Desription Type Vlue Enryped Overridle Required Computed Vlue dpssword Root Pssword String gogo123 Yes Yes No No 4 Clik OK. 5 Under Properties, lik New gin nd enter the following vlues. Nme Desription Type Vlue Enryped Overridle Required Computed Vlue duser Root User String root No Yes No No 6 Clik OK nd lik Next. VMwre, In. 77

78 Senrios 7 Set the tions for this servie in the Ations pne. In the Instll row, selet Bsh s the Sript Type. Still in the Instll row, selet Clik Here to edit pste the following ode into the Edit Sript text ox, nd lik OK. /usr/in/mysql -e "CREATE DATABASE wordpress;" --user=$duser --pssword=$dpssword /usr/in/mysql -e "CREATE USER 'wordpressuser'@'%';" --user=$duser --pssword= $dpssword /usr/in/mysql -e "SET PASSWORD FOR 'wordpressuser'@'%'=password('$dpssword');" --user= $duser --pssword=$dpssword /usr/in/mysql -e "GRANT ALL PRIVILEGES ON wordpress.* TO 'wordpressuser'@'%'identified BY '$dpssword';" --user=$duser --pssword=$dpssword /usr/in/mysql -e "FLUSH PRIVILEGES;" --user=$duser --pssword=$dpssword 8 Clik Next nd lik Finish. 9 Selet the new servie nd lik Pulish. Crete Wordpress Servie Softwre Component in Region A A multi-tier pplition pttern might require Wordpress servie. This tsk retes servie tht instlls Wordpress pplition inside the Aphe omponent. 1 Clik New to rete new servie. 2 Under Generl, enter the following vlues nd lik Next. Nme Desription Continer Vlue Wordpress Servie Instll nd onfigure Wordpress servies inside the Aphe servie. Aphe Servie 3 Under Properties, lik New to dd property for the Wordpress user. Nme Type Vlue Enrypted Overridle Required Computed Vlue WP_DB_USER String wordpressuser No Yes No No 4 Under Properties lik New to dd property for the Wordpress pssword. Nme Type Vlue Vlue WP_DB_PASSWORD String gogo VMwre, In.

79 Chpter 6 Creting Multi-Tier Applitions in Region A Enrypted Overridle Required Computed Vlue Yes Yes No No 5 Under Properties lik New to dd property for the Wordpress dtse. Nme Type Vlue Enrypted Overridle Required Computed Vlue WP_DB_NAME String wordpress No Yes No No 6 Under Properties lik New to dd property for the Wordpress dtse host. Nme Type Vlue Enrypted Overridle Required Computed Vlue WP_DB_HOST String lolhost No Yes No No 7 Clik Next. 8 Set the tions for this servie in the Ations pne. In the Instll row, selet Bsh s the Sript Type. Still in the Instll row, selet Clik Here to edit, pste the following ode into the Edit Sript text ox, nd lik OK. d /tmp /usr/in/wget --output-doument=/tmp/ltest.tr.gz /in/tr -xzvf /tmp/ltest.tr.gz mv /tmp/wordpress/* /vr/www/html/ In Configure lifeyle row, lik Clik here to Edit nd pste the following sript frgment. p /vr/www/html/wp-onfig-smple.php /vr/www/html/wp-onfig.php /in/sed -i "s/dtse_nme_here/$wp_db_name/g" /vr/www/html/wp-onfig.php /in/sed -i "s/usernme_here/$wp_db_user/g" /vr/www/html/wp-onfig.php /in/sed -i "s/pssword_here/$wp_db_password/g" /vr/www/html/wp-onfig.php /in/sed -i "s/lolhost/$wp_db_host/g" /vr/www/html/wp-onfig.php 9 Clik OK, lik Next nd lik Finish. 10 Selet the new servie nd lik Pulish. VMwre, In. 79

80 Senrios Prepre for Multi-Tier Applition Ptterns in Region A Before you n deploy multi-tier pplition using vrelize Automtion onverged lueprints, you hve to prepre for it. A multi-tier pplition pttern does not require two regions. However, if you re setting up dul region setup, you repet these tsks twie to rete onverged lueprints for Region A nd Region B. You must sustitute IP ddresses, x eomes x, x.x eomes x.x nd the DNS sfo01.rinpole.lol eomes lx01.rinpole.lol. Crete Routed Network Profile for the Multi-Tier We Applition in Region A Before memers of usiness group n request virtul mhines, fri dministrtors must rete network profiles to define the sunet nd routing onfigurtion for those virtul mhines. Eh network profile is onfigured for speifi network port group or virtul network to speify IP ddress nd routing onfigurtion for virtul mhines provisioned to tht network. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Network Profiles nd lik New > Routed. 3 On the Generl t, on the New Network Profile - Routed pge, enter the following vlues for the profile tht you re reting. Nme Desription Externl network profile Vlue Routed Multi-Tier We App Routed Network profile used for the Multi-Tier We Applition Ext-Net-Profile-Prodution Sunet msk Rnge sunet msk Bse IP On the DNS t, enter the following vlues for the profile tht you re reting. Vlue Primry DNS Seondry DNS DNS suffix DNS serh suffix rinpole.lol rinpole.lol 5 Clik the IP Rnges t nd lik Generte Rnges. 80 VMwre, In.

81 Chpter 6 Creting Multi-Tier Applitions in Region A 6 Go k to the Generl t nd lik OK. Modify Reservtions for Use y the Glol Trnsport Zone in Region A When tennt dministrtors nd usiness group mngers rete new lueprint, the option to dd reservtion poliy eomes ville. To dd reservtion poliy to n existing lueprint, you must edit the lueprint. Repet this proedure to rete reservtions for eh reservtion listed in the following tle. Reservtion Network Pth Network Profile Trnsport Zone Routed Gtewys Nme Routed Gtewys Network Profile SFO01-Comp01- Prod-Res01 Glol Trnsit Network Ext-Net-Profile- Prodution Comp Glol Trnsport Zone sfo01w01dlr01 Ext-Net-Profile- Prodution SFO01-Edge01- Prod-Res01 Glol Trnsit Network Ext-Net-Profile- Prodution Comp Glol Trnsport Zone sfo01w01dlr01 Ext-Net-Profile- Prodution 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Reservtions. d e f Selet the SFO01-Comp01-Prod-Res01 reservtion poliy nd lik Edit. Clik the Network t. In the Network setion, selet the vxw-dvs-xxx-virtulwire-1-sid-xxx-glol Trnsit Network hek ox for Network Pth, nd selet Ext-Net-Profile-Prodution s the Network Profile. In the Advned s setion, selet Comp Glol Trnsport Zone from the Trnsport Zone drop-down menu. Selet the sfo01w01dlr01 hek ox for Routed gtewys. Selet Ext-Net-Profile-Prodution from the Network Profile drop-down menu. 3 Clik OK. 4 Repet this proedure to modify the remining reservtions. Crete Servie Ctlog for Converged Blueprints in Region A In the multi-tier pplition senrio, the servie tlog provides ommon interfe for users of IT servies. Users n request nd mnge the servies nd resoures they need. Users n rowse the tlog to request servies, trk their requests, nd mnge their provisioned servie items. After the servie tlog is reted, usiness group mngers n rete entitlements for servies, tlog items, nd resoure tions to groups of users. The entitlement llows memers of usiness group, for exmple, the Prodution usiness group, to use the lueprint. Without n entitlement, users nnot use the lueprint. VMwre, In. 81

82 Senrios 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Clik the Administrtion t, nd selet Ctlog Mngement > Servies. 3 Clik New nd mke the following hnges in the New Servie dilog ox. Enter Converged Blueprint Ctlog in the Nme text ox. Selet Ative from the Sttus drop-down menu. Clik OK. Crete Entitlements for the Converged Blueprint Ctlog in Region A You dd servie, tlog item, or tion to n entitlement to enle the users nd groups identified in the entitlement to request provisionle items from the servie tlog. An entitlement llows memers of prtiulr usiness group (for exmple, the Prodution usiness group) to use the lueprint. Without the entitlement, users nnot use the lueprint. Perform this proedure to rete the following entitlements for the Prodution usiness group. Entitlement Nme Sttus Business Group User & Group Prod-ConvergedBlueprint-Entitlement Ative Prodution ug-itac-tenntadmins 82 VMwre, In.

83 Chpter 6 Creting Multi-Tier Applitions in Region A 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Clik the Administrtion t, nd lik Ctlog Mngement > Entitlement. 3 Clik New. The New Entitlement pge ppers. 4 On the New Entitlement pge, selet the Detils t, onfigure the following vlues, nd lik Next. Nme Desription Expirtion Dte Sttus Business Group Users & Groups Prodution Vlue Prod-ConvergedBlueprint-Entitlement Defult setting (lnk) Defult setting (lnk) Ative Prodution ug-itac-tenntadmins VMwre, In. 83

84 Senrios 5 Clik the Items & Approvls t. On the Entitled Servies pge lik the Add ion. Selet the Converged Blueprint Ctlog hekox nd lik OK. Clik the Add Ation ion on the Entitlement Ations pge, nd dd the following Entitled Ations. Power Cyle (Mhine) Power Off (Mhine) Power On (Mhine) Reoot (Mhine) Shutdown (Mhine) d Clik Finish. 84 VMwre, In.

85 Chpter 6 Creting Multi-Tier Applitions in Region A Implement Multi-Tier Applition Ptterns in Region A The implementtion of multi-tier pplition inludes retion of multi-tier nd multi-node lueprints nd ddition of dependenies nd property indings etween omponents. Configure the We Tier Blueprint in Region A When you onfigure the lueprint for the We tier of the pplition, you speify the NSX settings, uild settings, nd other ttriutes of the lueprint. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Clik New. 4 On the Generl t of the New Blueprint dilog ox, onfigure the following settings. Nme Vlue Multi-Tier We App Arhive (dys) 15 Minimum 30 Mximum Clik the NSX s t nd onfigure the following settings. Trnsport zone Routed gtewy reservtion poliy Vlue Comp Glol Trnsport Zone SFO-Edge-Poliy 6 Clik OK. 7 In the New Blueprint design nvs, lik Mhine Types under Ctegories. 8 Selet nd drg the vsphere Mhine ion to the design nvs. 9 On the Generl t, onfigure the following settings, nd lik Sve. ID Reservtion Poliy Vlue We SFO-Prodution-Poliy VMwre, In. 85

86 Senrios Mhine Prefix Vlue Defult setting Instnes Minimum: 2 Mximum: 4 10 Clik the Build Informtion t, onfigure the following settings, nd lik Sve. Blueprint Type Ation Provisioning Workflow Clone from Clone from snpshot Customiztion spe Vlue Server Linked Clone CloneWorkflow linux-se-03 Applition Authoring Snp it-linux-ustom-spe 11 Clik the Mhine Resoures t, onfigure the following settings, nd lik Sve. Minimum Mximum CPU 1 4 Memory (MB) Storge Clik Network & Seurity under Ctegories. 86 VMwre, In.

87 Chpter 6 Creting Multi-Tier Applitions in Region A 13 Selet nd drg the On-Demnd Routed Network ion to the design nvs. 14 On the Generl t, selet the Routed Multi-Tier We App for Prent Network profile. 15 Selet the vsphere_mhine ion of the We tier on the design nvs. 16 Selet the Network t, lik New, onfigure the following settings, nd lik OK. Network Assignment Type Address Vlue RoutedMultiTierWeApp Stti IP Defult setting (lnk) 17 Clik Sve. VMwre, In. 87

88 Senrios Configure Lod Blning for the We Tier in Region A Lod lners distriute work mong servers in high-vilility deployments. You onfigure the servies in the We pplition to distriute network trffi ross the pplition in lod-lned fshion. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Selet the Multi-Tier We App lueprint nd lik Edit. 4 Clik Network & Seurity under Ctegories. 5 Selet nd drg the On-Demnd Lod Blner ion to the Design Cnvs. 6 On the Generl t, mke the following hnges. Speify the following settings. ID VIP Network Mhine IP Address Vlue We-Tier-Lod-Blner RoutedMultiTierWeApp We Defult setting (lnk) NIC RoutedMultiTierWeApp (NIC 0) Selet New under Virtul servers. 88 VMwre, In.

89 Chpter 6 Creting Multi-Tier Applitions in Region A On the Generl t, selet HTTP nd lik OK. d Under Virtul servers, dd the HTTPS nd TCP protools in the sme wy. 7 Clik Sve. Configure the Dtse Tier Blueprint in Region A When you onfigure the lueprint for the dtse tier, you speify the uild informtion, mhine informtion, nd network settings. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Selet the Multi-Tier We App lueprint nd lik Edit. 4 Clik Mhine Types under Ctegories. 5 On the Generl t, onfigure the following settings, nd lik Sve. ID Reservtion Poliy Vlue Dtse SFO-Prodution-Poliy VMwre, In. 89

90 Senrios Mhine Prefix Vlue Defult setting Instnes Minimum: 1 Mximum: 1 6 Clik the Build Informtion t, onfigure the following settings, nd lik Sve. Blueprint Type Ation Provisioning Workflow Clone from Clone from snpshot Customiztion spe Vlue Server Linked Clone CloneWorkflow linux-se-03 Applition Authoring Snp it-linux-ustom-spe 7 Clik the Mhine Resoures t, onfigure the following settings, nd lik Sve. Minimum Mximum CPU 1 4 Memory (MB): Storge Selet the Network t, lik New, onfigure the following settings, nd lik OK. Network Assignment Type Address Vlue RoutedMultiTierWeApp Stti IP Defult setting (lnk) 9 Clik Sve. Add Softwre Components to Blueprint in Region A To dd onfigured nd pulished softwre omponents to lueprint in your multi-tier senrio, you n drg drop the softwre omponents to lueprint. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Selet the Multi-Tier We App lueprint nd lik Edit. 4 In the Ctegories re of the design nvs, selet Softwre Components. 90 VMwre, In.

91 Chpter 6 Creting Multi-Tier Applitions in Region A 5 Drg the System Configurtion softwre omponent onto oth the We vsphere mhine nd the Dtse vsphere mhine. The System Configurtion omponent is now ville on oth the We nd Dtse virtul mhines tht you rete using this lueprint. The System Configurtion omponent hs mhine dependeny n therefore e diretly pled on the vsphere mhine. 6 Drg the Aphe Servie onto the We vsphere Mhine. The Aphe Servie omponent is now ville on ll the We virtul mhines tht you rete with this lueprint. The Aphe omponent hs mhine dependeny nd n therefore e diretly pled on the vsphere mhine. 7 Drg the MySQL softwre omponent onto the Dtse vsphere Mhine. The MySQL omponent is now ville on Dtse virtul mhines tht you rete with this lueprint. The MySQL omponent hs mhine dependeny nd n therefore e diretly pled on the vsphere mhine. 8 Drg the PHP Servie onto the We vsphere Mhine nd position it elow the Aphe Servie. The PHP Servie omponent is now ville on ll the We virtul mhines tht you rete with this lueprint. The ssoited sript is on the sme virtul mhines s the Aphe Servie sript. 9 Drg the Wordpress Dtse inside the MySQL softwre omponent within the Dtse vsphere Mhine. The Wordpress Dtse omponent is now ville on the Dtse virtul mhines tht you rete with this lueprint. The Wordpress Dtse hs dtse prent dependeny on MySQL. It is therefore pled inside the MySQL softwre omponent. 10 Drg the Wordpress Servie inside the Aphe Servie within the We vsphere Mhine. The Wordpress Servie omponent is now ville on We virtul mhines tht you rete with this lueprint. The Wordpress Servie hs prent dependeny on Aphe Servie nd is therefore pled inside the Aphe Servie softwre omponent. 11 Selet the Wordpress Servie softwre omponent inside the Aphe Servie softwre omponent VMwre, In. 91

92 Senrios 12 Clik the Properties t, selet WP_DB_HOST, nd then lik Edit. 13 Clik the Binding hek ox, hnge the WP_DB_HOST vlue to _resoure~dtse~ip_ddress, nd lik Sve. Configure Dependenies Between Applition Components in Region A To ount for dependenies etween pplition omponents, you onfigure the lueprint to stgger the uild proess. You perform tht onfigurtion y mpping the dependenies diretly on the design nvs. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Selet the Multi-Tier We App lueprint nd lik Edit. 4 Crete two dependeny lines. Hover over the upper left orner of the We tier ion on the nvs until the the lue irle ppers nd lik nd drg the dependeny inditor to the edge of Dtse tier ion. A dotted dependeny line ppers. Hover over the PHP Servie on the nvs until the lue irle ppers, lik nd drg the dependeny inditor to the edge of Aphe Servie. A short line ppers. You hve to dd this dependeny euse you n only run single yum proess t time while reting the softwre omponents. The dependeny helps lign the retion of softwre omponents in order nd ind relted omponents. 5 Clik Finish. This sves the lueprint you hve onfigured for use with the We pplition. 92 VMwre, In.

93 Chpter 6 Creting Multi-Tier Applitions in Region A Pulish the Multi-Tier Blueprint in Region A You pulish lueprint to provision virtul mhine. You n then hek tht the lueprint meets ll requirements. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Selet the lueprint Multi-Tier We App nd lik Pulish. 4 Nvigte to Administrtion > Ctlog Mngement > Ctlog Items nd dd the lueprint to the Converged Blueprint tlog. In the Ctlog Items list, lik the lueprint lelled Multi-Tier We App. In the Configure Ctlog Items dilog ox, set Servie to Converged Blueprint Ctlog, nd lik OK. VMwre, In. 93

94 Senrios 94 VMwre, In.

95 Configuring Miro-Segmenttion for 7 Multi-Tier Applitions in Region A Miro-Segmenttion n mke the dt enter network more seure y isolting relted groups of virtul mhines onto distint logil network segment. You n use the Distriuted Firewll (DFW) omponent of VMwre NSX to implement miro-segmenttion. Administrtors n then seprte trffi tht is trveling from one segment of the dt enter to nother (est-west trffi) y using firewlls. Distriuted firewlls prevent ttkers from moving lterlly in the dt enter. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge Perform the tsks in Chpter 6, Creting Multi-Tier Applitions in Region A, on pge 67. This hpter inludes the following topis: Creting NSX Seurity Poliies in Region A, on pge 95 Crete Working We Applition Blueprint in Region A, on pge 96 Crete Distriuted Firewll Rules for the Seurity Poliies in Region A, on pge 98 Creting NSX Seurity Poliies in Region A Before you n use NSX seurity poliies in your multi-tier pplition, you hve to rete the poliies. This senrio uses We Server poliy, Dtse Server poliy, Applition Server poliy, nd Defult We Applition poliy. 1 Log in to the Compute vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. Options User nme Pssword Desription dministrtor@vsphere.lol vsphere_dmin_pssword 2 From the vcenter Home pge, selet Networking & Seurity. 3 On the left pnel, selet Servie Composer. VMwre, In. 95

96 Senrios 4 In the min pnel, selet the Seurity Poliies t. 5 Choose the NSX Mnger for the Edge/Compute luster from the drop down list. 6 Configure the seurity poliy for the We server. Selet the Crete Seurity Poliy ion, smll yellow doument with green plus. Speify the nme We Server Poliy nd lik Finish. 7 Configure the seurity poliy for the dtse server. Selet the Crete Seurity Poliy ion, smll yellow doument with green plus. Speify the nme Dtse Server Poliy nd lik Finish. 8 Configure the seurity poliy for the pplition server. Selet the Crete Seurity Poliy ion, smll yellow doument with green plus. Speify the nme Applition Server Poliy nd lik Finish. 9 Configure the seurity poliy for ll servers in the We pplition. Selet the Crete Seurity Poliy ion, smll yellow doument with green plus. Speify the nme Defult We Applition Poliy nd lik Finish. 10 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 11 Go to Infrstruture > Compute Resoures > Compute Resoures. 12 Hover over sfo01-w01-omp01, selet Dt Colletion, nd sroll to the ottom of the Dt Colletion pge. 13 Under Network nd Seurity Inventory lik Request now. 14 Clik Refresh t the ottom of the sreen until the inventory sttus shows Sueeded nd lik OK. Crete Working We Applition Blueprint in Region A After you rete the seurity poliies for your senrio, you n pply them to multi-tier We pplition. You opy n existing lueprint nd dd the seurity groups to the lueprint. In this tsk, you opy lueprint tht is reted in Chpter 6, Creting Multi-Tier Applitions in Region A, on pge 67. You n insted rete lueprint from srth, nd pply seurity poliies to tht lueprint. 96 VMwre, In.

97 Chpter 7 Configuring Miro-Segmenttion for Multi-Tier Applitions in Region A 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to the Design t nd selet the Multi-Tier We App lueprint tht is reted in Chpter 6, Creting Multi-Tier Applitions in Region A, on pge Clik Copy nd enter the following informtion. Nme Desription Multi-Tier We App - DFW Multi-tier We pplition deployment proteted y VMwre NSX Miro-Segmenttion 4 Clik OK nd lik Sve to sve the lueprint 5 Add seurity groups to the Wordpress lueprint Selet Network & Seurity under Ctegories. Drg the On-Demnd seurity group to the design nvs. Repet this step two more times for totl of three On-Demnd groups. 6 Configure the We_Tier_Group seurity group d Clik on the first On-Demnd seurity group Under Generl, enter We_Tier_Group in the ID text field Under Seurity Poliies, lik Add. Selet We Server Poliy nd Defult We Applition Poliy nd lik OK. 7 Configure the DB_Tier_Group seurity group d Clik on the seond On-Demnd seurity group. Under Generl, enter DB_Tier_Group in the ID text field Under Seurity Poliies, lik Add. Selet Dtse Server Poliy nd Defult We Applition Poliy nd lik OK. 8 Configure the App_Tier_Group seurity group d Clik on the third On-Demnd seurity group Under Generl, enter App_Tier_Group in the ID text field. Under Seurity Poliies, lik Add. Selet Applition Server Poliy nd lik OK. 9 Assign virtul mhines to seurity groups Clik the We vsphere Mhine type in the design nvs. Clik the Seurity t. VMwre, In. 97

98 Senrios d e f Selet We_Tier_Group nd App_Tier_Group euse oth the we tier nd the pp tier re instlled in the sme virtul mhines nd lik Sve. Clik on the Dtse vsphere Mhine type in the design nvs. Clik the Seurity t Selet DB_Tier_Group, lik Sve, nd lik Finish. 10 Pulish the multi-tier lueprint. d Selet Multi-Tier We App - DFW nd lik Pulish. Nvigte to Administrtion > Ctlog Mngement > Ctlog Items. In the Ctlog Items list, lik the lueprint lelled Multi-Tier We App - DFW. In the Configure Ctlog Items dilog ox, set Servie to Converged Blueprint Ctlog, nd lik OK. Crete Distriuted Firewll Rules for the Seurity Poliies in Region A After you hve pplied the seurity poliies to the lueprint in your senrio, you n rete the distriuted firewlls nd ssoite them with the seurity poliies. Distriuted firewll rules llow only network trffi tht is required y the we pplition, thus mking the environment more seure. By defult ll inoming nd outgoing trffi is loked. For instlling softwre pkges nd for other speil situtions, you n open ports. The senrios in this guide use yum nd wget. This tsk opens ports for HTTP, HTTPS, nd DNS-UDP for looking up proxy server nd the port for onneting to the proxy server. Your firewll rule depends entirely on your environment. 1 Log in to the Compute vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. Options User Nme Pssword Desription dministrtor@vsphere.lol vsphere_dmin_pssword 2 From the vcenter home sreen, selet Networking & Seurity. 3 On the left pnel, selet Servie Composer. 4 In the min pnel, selet the Seurity Poliies t. 5 Choose the NSX Mnger for the Compute/Edge luster from the drop down list 6 Crete firewll rules for the Defult We Applition Poliy. Right-lik Defult We Applition Poliy nd lik Edit. Expnd Advned options nd hnge Weight to 300. Clik Firewll Rules in the left pnel. 98 VMwre, In.

99 Chpter 7 Configuring Miro-Segmenttion for Multi-Tier Applitions in Region A d Clik the Add ion, nd dd firewll rule with following vlues, nd lik OK. Nme Desription/Comments Ation Soure Destintion Servie Allow outgoing http nd https Allow outgoing http nd https so we n instll softwre with yum Allow Poliy's Seurity Groups Any HTTP, HTTPS, DNS-UDP e Clik the Add ion, dd firewll rule with the following vlues, nd lik OK. Nme Ation Soure Destintion Servie Blok ll inoming trffi Blok Any Poliy's Seurity Groups Any f Clik the Add ion, dd firewll rule with the following vlues, lik OK, nd lik Finish. Nme Ation Soure Destintion Servie Blok ll outgoing trffi Blok Poliy's Seurity Groups Any Any 7 Crete firewll rules for the Applition Server Poliy Right-lik Applition Server Poliy nd lik Edit. Clik Firewll Rules in the left pnel Clik the Add ion to dd firewll rule with the following vlues. Nme Servie Allow outgoing MySQL MySQL d Clik OK nd lik Finish. 8 Crete firewll rules for the Dtse Server Poliy. Right-lik Dtse Server Poliy nd lik Edit. Clik Firewll Rules in the left pnel. Clik the Add ion to dd firewll rule with the following vlues. Nme Destintion Servie Allow intr-group MySQL Poliy's Seurity Groups MySQL d Clik OK nd lik Finish. 9 Crete firewll rules for the We Server Poliy Right-lik We Server Poliy nd lik Edit. Clik Firewll Rules in the left pnel. VMwre, In. 99

100 Senrios Clik the Add ion to dd firewll rule with the following vlues nd lik OK. Nme Ation Destintion Servie Blok Internl We Blok Poliy's Seurity Groups HTTP, HTTPS d Clik the Add ion to dd nother firewll rule with following informtion, lik OK, nd lik Finish. Nme Soure Destintion Servie Allow inoming We Any Poliy's Seurity Groups HTTP, HTTPS e Clik OK nd lik Finish. 100 VMwre, In.

101 Mnging Virtul Mhine Lese nd Ownership in Region A 8 VMwre vrelize Automtion supports severl workflows for hnging virtul mhine ownership nd lese. This inludes hnging the lese nd ownership y hnging the entitlement on lueprint, hnging lese nd ownership on provisioned virtul mhine, nd extending the lese of provisioned virtul mhine. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge 15 This hpter inludes the following topis: Configure Lese nd Ownership on the Blueprint in Region A, on pge 101 Set Lese nd Chnge the Ownership of the Provisioned Mhine in Region A, on pge 102 Extend the Lese of Provisioned Mhine in Region A, on pge 102 Configure Lese nd Ownership on the Blueprint in Region A As tennt dministrtor, you n set up lueprint with Owner nd Lese entitled tions. The users you ssoite with the entitlement n then hnge the lese nd ownership of the provisioned VMs. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. s User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet the Administrtion t nd nvigte to Ctlog Mngement > Entitlement. 3 In the Entitlements pne, selet Prod-SingleVM-Entitlement nd lik Edit. 4 Type Chnge Owner in the Entitled Ations text ox nd selet Chnge Owner (Deployment) from the drop-down menu. VMwre, In. 101

102 Senrios 5 Type Chnge Lese in the Entitled Ations text ox nd selet Chnge Lese (Deployment) from the drop-down menu. 6 Clik Finish. Set Lese nd Chnge the Ownership of the Provisioned Mhine in Region A As usiness group mnger, you n request n entitled virtul mhine nd onfigure the provisioned mhine. After onfigurtion, you n set the lese nd hnge the ownership of the virtul mhine to one of the usiness users. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. s User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Clik Items t nd under Deployments selet the Windows Server 2012 R2 - SFO Prod-xxx virtul mhine. 3 Selet Chnge Lese from the Ations menu. 4 In the Chnge Lese dilog ox, set the lese expirtion dte nd time, lik Sumit, nd lik OK. 5 Selet Chnge Owner from the Ations menu. 6 In the Chnge Owner dilog ox, type rhitet in the New Owner text ox nd lik the serh glss, selet ITAC-TenntArhitet, lik Sumit, nd lik OK. The ITAC-TenntArhitet is now the owner of tht virtul mhine. Extend the Lese of Provisioned Mhine in Region A As usiness user, you n extend the lese of provisioned mhine. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. s User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Clik the Items t nd under Deployments selet the Windows Server 2012 R2 - SFO Prod-xxx virtul mhine. 3 Selet Chnge Lese from the Ations menu. 102 VMwre, In.

103 Chpter 8 Mnging Virtul Mhine Lese nd Ownership in Region A 4 In the Chnge Lese dilog ox, set the lese expirtion dte nd time, lik Sumit, nd lik OK. VMwre, In. 103

104 Senrios 104 VMwre, In.

105 Modeling nd Monitoring Cost with 9 vrelize Business in Region A vrelize Business is n IT finnil mngement tool tht provides trnspreny nd ontrol over the osts nd qulity of IT servies, enling lignment with the usiness nd elertion of IT trnsformtion. This senrio explins how to set up ost model. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. Note You hve to selet one strtegy, per-lueprint priing or per-reservtion priing. If you lter wnt to hnge strtegy, you reset the ost model. Deide on the strtegy efore setting up the ost model. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge 15 2 Instll vrelize Business nd integrte it with vrelize Automtion This hpter inludes the following topis: Set up Priing on Per-Blueprint Bsis in Region A, on pge 105 Set Up Priing on Per-Reservtion Bsis in Region A, on pge 108 Set up Priing on Per-Blueprint Bsis in Region A As usiness mngement dministrtor, you n set up ost model for lueprint nd monitor the ost. Every mhine tht is deployed using the lueprint is ssigned the ost tht is predefined in the lueprint. You n set up the ost model to hrge ustomers on per-lueprint sis. Prerequisites If you set up priing on per-lueprint sis, you must rete single-mhine lueprint first. VMwre, In. 105

106 Senrios 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Selet the Business Mngement t nd, under Consumption, selet Priing nd Chrges > Priing. 3 Selet Edit > Edit Priing. 4 Under vrelize Automtion, lik the penil ion to edit 5 Among the prie grouping strtegy, selet vrelize Automtion Blueprint s the Compute grouping strtegy nd lik Sve. 6 Set priing for the Compute Rtes for vcpu nd per GB RAM nd Storge Rtes. 106 VMwre, In.

107 Chpter 9 Modeling nd Monitoring Cost with vrelize Business in Region A 7 Under Additionl Servies, lik Edit nd selet servie with its ssoited preset rte. 8 Add more servies if you wnt nd lik Sve. 9 On the grouping strtegy pge, lik Sve to finlize the hnges for the lueprint. 10 Selet the Ctlog t nd lik Request to request the lueprint whose priing ws set up in the previous step. 11 At the ottom of the request notie the Totl Cost nd the View Cost Detils fields, lik Updte to lulte the urrent osts, nd lik Sumit to send the request. VMwre, In. 107

108 Senrios 12 One the deployment is suessful, selet the Items t nd see the osts under Deployments. The system lultes osts dynmilly. When you dd more virtul mhines or more CPUs, the system updtes the ost. The system updtes the per-dy ost every 24 hours. Set Up Priing on Per-Reservtion Bsis in Region A As usiness dministrtor, you n set up ost model for prtiulr reservtion nd monitor the ost. The ost of the mhines deployed using this reservtion poliy is lulted sed on the ost setup. Prerequisites If you set up priing on per-reservtion sis, you must first onfigure reservtion poliies. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet the Business Mngement t nd, under Consumption, selet Priing nd Chrges > Priing. 3 Selet Edit > Edit Priing. 108 VMwre, In.

109 Chpter 9 Modeling nd Monitoring Cost with vrelize Business in Region A 4 Under vrelize Automtion, lik the penil ion to edit. 5 Set the Compute grouping strtegy to vrelize Automtion Reservtion nd lik Sve. 6 Set priing for the Compute Rtes per vcpu, per GB RAM nd for the Storge Rte. 7 Under Additionl Servies, lik Edit 8 Selet n ville servie, set rtes, nd lik Sve fter dding ll servies tht you wnt to mke ville. VMwre, In. 109

110 Senrios 9 On the grouping strtegy pge, lik Sve to finlize the hnges for the lueprint. 10 Selet the vrelize Automtion Ctlog t nd lik Request for the lueprint whose priing you set up. 11 At the ottom of the request notie the Totl Cost nd the View Cost Detils, then lik Updte to lulte the urrent osts nd lik Sumit to send the request. 12 One the deployment is suessful, selet the Items t nd hek the ost under Deployments. The system lultes osts dynmilly. When you dd more virtul mhines or more CPUs, the system updtes the ost. The system updtes the per-dy ost every 24 hours. 110 VMwre, In.

111 Chpter 9 Modeling nd Monitoring Cost with vrelize Business in Region A VMwre, In. 111

112 Senrios 112 VMwre, In.

113 Forwrding Log Events to vrelize 10 Log Insight in Region A vrelize Log lnsight delivers heterogeneous nd highly slle log mngement tht inludes tionle dshords nd nlytis. It provides opertionl visiility nd fster trouleshooting ross physil, virtul nd loud environments. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. This senrio illustrtes how to set up vrelize Log Insight for Windows virtul mhine nd Linux virtul mhine. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge 15. This hpter inludes the following topis: Instll the vrelize Log Insight Agent in Region A, on pge 113 Configure Linux Virtul Mhine to Forwrd Events to vrelize Log Insight in Region A, on pge 114 Instll the vrelize Log Insight Agent in Region A The first tsk of the senrio is instlling vrelize Log Insight nd the vrelize Log Insight Content Pk for Windows on the Windows mhine. 1 Open Remote Desktop Protool (RDP) onnetion to the Windows VM. 2 Log in to vrelize Log Insight. Open We rowser nd go to Log in using the following redentils. s User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 3 Clik the onfigurtion ion nd selet Administrtion. 4 Under Mngement, lik Agents. VMwre, In. 113

114 Senrios 5 On the Agents pge, sroll down to the ottom of the pge nd lik the Downlod Log Insight Agent x.x.x link. 6 In the Downlod Log Insight Agent dilog ox, lik Windows MSI (32-it/64-it) nd sve the.msi file on your omputer. 7 Instll the gent. d Doule-lik the file to run the instller nd lik Run in the Open File - Seurity Wrning dilog. In the VMwre vrelize Log Insight Agent Setup wizrd, ept the liense greement nd lik Next. With the Log Insight host nme (sfo01vrli01.sfo01.rinpole.lol) shown in the Host text ox, lik Instll. When instlltion is omplete, lik Finish. 8 Instll the vrelize Log Insight Content Pk for Windows. In the vrelize Log Insight user interfe, lik the onfigurtion ion nd selet Content Pks. Under Content Pk Mrketple, selet Mrketple. In the list of ontent pks, lote the Mirosoft - Windows ontent pk, lik its ion, nd lik Instll. Configure Linux Virtul Mhine to Forwrd Events to vrelize Log Insight in Region A As the seond tsk in the senrio, you onfigure Linux VM to reeive ll event logs in the vrelize Log Insight Server. You n then explore the events in the vrelize Log Insight dshords. Prerequisites Enle SSH on the Linux virtul mhine tht you wnt to forwrd logs from. 1 Downlod the Log Insight Agent for Linux to jump host. Clik the onfigurtion ion nd selet Administrtion. d Under Mngement, lik Agents. On the Agents pge, lik the Downlod Log Insight Agent link. In the Downlod Log Insight Agent dilog ox, lik the link for the Linux distriution of your VM. 2 Copy the Log Insight Agent for Linux file from your jump host to the Linux VM. 3 Instll the Log Insight Agent on the Linux virtul mhine Open n SSH onnetion to the Linux VM. Instll the Log Insight Agent pkge using the ommnd for your Linux distriution. For exmple, rpm -ivh VMwre-Log-Insight-Agent norh_ rpm. Stop the Log Insight gent. /et/init.d/ligentd stop d Edit the ligent.ini file using text editor suh s vi. vi /vr/lid/loginsight-gent/ligent.ini 114 VMwre, In.

115 Chpter 10 Forwrding Log Events to vrelize Log Insight in Region A e Add the following informtion in the [server] setion. [server] hostnme = sfo01vrli01.sfo01.rinpole.lol proto = fpi port = 9000 ssl = no [server] hostnme = sfo01vrli01.sfo01.rinpole.lol proto = fpi port = 9000 ssl = no f g Press ESC nd enter :wq! to sve the file. Strt the Log Insight gent. /et/init.d/ligentd strt h Verify tht the Log Insight gent is running. /et/inti.d/ligentd sttus 4 Instll the vrelize Log Insight Content Pk for Linux. In the vrelize Log Insight user interfe, lik the onfigurtion ion nd selet Content Pks. d Under Content Pk Mrketple, selet Mrketple. In the list of ontent pks, lote the Linux ontent pk nd lik its ion. In the Instll Content Pk dilog ox, lik Instll. 5 Configure Log Insight Linux Agents from the vrelize Log Insight We user interfe. On the Log Insight We user interfe, lik the onfigurtion ion nd selet Administrtion. d Under Mngement, lik Agents. From the drop-down menu t the top, selet Linux from the Aville Templtes setion. Clik Copy Templte. VMwre, In. 115

116 Senrios e f In the Copy Agent Group dilog ox, enter Linux Agent Group in the nme text ox nd lik Copy. In the gent filter text oxes, use the following seletions nd lik SAVE NEW GROUP. Filter Opertor Vlue OS strts with CentOS 6 Verify tht the vrelize Log Insight server is getting the log events from the Linux VM. d Clik Dshords. In the vrelize Log Insight user interfe, selet Generl from the Content Pk Dshords dropdown menu. Clik Log Insight Agents in the left pne (Optionl) Generte speifi host events y seleting hostnme nd riteri strts with nd entering the host nme. 116 VMwre, In.

117 Monitoring Worklod Helth nd Cpity with vrelize Hyperi in Region A 11 vrelize Hyperi is vrelize Opertions omponent. With vrelize Hyperi, you n get detiled view of your environment y using the vrelize Opertions mngement interfe. You n exmine your environment ll the wy down to servies, proesses, nd the pplition lyer. You n rete ustomized dshords to monitor the helth, pity, nd risk of the worklod tht is running in your SDDC deployment. This senrio gives detiled informtion on the proedures for single-region deployment. You n lso use these proedures for Region A of dul-region deployment. If you wnt to use the proedures for Region B in dul-region deployment, you hve to use different IP ddress nd mhine nmes nd might hve to mke some other hnges. This senrio explins how to monitor worklod virtul mhines from vrelize Opertions. Prerequisites 1 Prepre for the deployment. See Chpter 2, Prepring for Region A Senrio Deployment, on pge Perform the tsks in Configuring Reservtion Poliies nd Network Poliies in Region A, on pge Perform the tsks in Chpter 3, Creting nd Pulishing Single Mhine Blueprints in Region A, on pge 41. This hpter inludes the following topis: Instll the End Point Opertions Monitoring Agent in Region A, on pge 118 Configure Worklod Monitoring in Region A, on pge 119 Configure Monitoring for Windows Servies in Region A, on pge 121 VMwre, In. 117

118 Senrios Instll the End Point Opertions Monitoring Agent in Region A As the first tsk, you rete Windows Server 2012 R2 virtul mhine from the lueprint nd instll End Point Opertions (EPO) monitoring gent in the virtul mhine. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Request tlog item. Nvigte to Ctlog. Clik Request under Windows Server 2012 R2 - SFO Prod. 3 Nvigte to Requests, monitor the sttus of the request, nd wit until the sttus hnges to Suessful. 4 Nvigte to Items, expnd the new deployment, nd lik the nme of the provisioned virtul mhine. 5 Clik Connet using RDP to log in to the virtul mhine s lol dministrtor. Note If you hve prolems onneting to the virtul mhine, verify tht RDP is enled in the templte. 6 Downlod vrelize Opertions Mnger. From We rowser, go to VMwre.om. Selet Downlods > All Downlods > Infrstruture & Opertions Mngement > VMwre vrelize Opertions > Downlod Produt. Selet 6.4. d e Clik Go to Downlods. Find the End Point Opertions Windows Agent - 64 it EXE file nd downlod it to the virtul mhine. 7 Doule-lik the file to run the instller nd lik Next. 8 In the Server Address text ox, enter vrops01svr01 nd lik Next. 118 VMwre, In.

119 Chpter 11 Monitoring Worklod Helth nd Cpity with vrelize Hyperi in Region A 9 Enter the ertifite thumprint. Otin the vrelize Opertions Mnger luster ertifite thumprint s instruted. Insert the thumprint in the Certifite thumprint text ox, nd lik Next. 10 Enter the following redentil nd lik Next. Options User Nme Pssword Desription dmin vrops_dmin_pssword 11 Aept the liense greement, lik Next, nd lik Next gin to let the instlltion strt nd omplete. Configure Worklod Monitoring in Region A vrelize Opertions Mnger llows you to rete dshord for heking the overll helth, risk, nd effiieny of worklods nd to monitor CPU nd memory use. 1 Log in to vrelize Opertions Mnger. Open We rowser nd go to Log in using the following redentils. Authentition Soure User nme Pssword Vlue Lol Users dmin vrops_dmin_pssword 2 Nvigte to Environment > Operting Systems > Operting Systems World > Windows nd selet the virtul mhine you wnt to monitor. 3 Clik the Summry t, lik the Bdge ion, nd verify tht ll dges re green. If ll dges re green, there re no issues or lerts with Helth, Risk, nd Effiieny. VMwre, In. 119

120 Senrios 4 Clik the All Metris t, expnd All Metris, expnd UTILIZATION, nd lik Cpu Usge (%) nd Perent Userd Memory (%). 5 Clik the Generte Dshord ion (the lst ion t the top), enter the virtul mhine nme s the nme of the dshord nd lik OK. 6 Clik the Home ion to nvigte to the Home pge nd lik the nme of the dshord you just reted. The dshord shows the informtion out the virtul mhine tht you seleted. 120 VMwre, In.

121 Chpter 11 Monitoring Worklod Helth nd Cpity with vrelize Hyperi in Region A Configure Monitoring for Windows Servies in Region A vrelize Opertions supports monitoring ny servie running inside Windows virtul mhine. The tsk uses the End Point Opertions Mngement Agent s n exmple. 1 Log in to vrelize Opertions Mnger. Open We rowser nd go to Log in using the following redentils. Authentition Soure User nme Pssword Vlue Lol Users dmin vrops_dmin_pssword 2 Nvigte to Environment > Operting Systems > Operting Systems World > Windows nd selet the virtul mhine tht you wnt to monitor. 3 Clik Ations, lik Monitor OS Ojet, nd lik Monitor Windows Servie. VMwre, In. 121

122 Senrios 4 Enter the following informtion nd lik OK. Disply Nme Vlue EPOM Agent Servie servie_nme End Point Opertions Mngement Agent To otin the servie nme, you n open the servie in the Windows virtul mhine. 5 Expnd the virtul mhine nd selet EPOM Agent Servie. 122 VMwre, In.

123 Chpter 11 Monitoring Worklod Helth nd Cpity with vrelize Hyperi in Region A 6 Selet All Metris > Resoure Avilility. If you see no dt, lik the Refresh utton until you see them. 7 Edit the dshord. Go k to the Home pge. In Dshord List, lik the dshord for the virtul mhine. Clik Edit Dshord. 8 Expnd the Widget List in the left pne, drg nd drop Soreord widget onto the dshord, nd lik Sve. VMwre, In. 123

124 Senrios 9 Clik the Edit utton for the Soreord widget nd edit the widget s follows. Enter EPOM Agent in the Title text ox. Selet Adpter types > EP Ops Adpter, nd selet EPOM Agent Servie. Expnd Avilility, doule-lik Resoure Avilility, nd lik Sve. 10 Explore the vilility sttus of the servie. Clik the Home ion. In Dshord List, lik the dshord for the virtul mhine. Expnd the soreord. 124 VMwre, In.

125 Prepring for Region B Senrio 12 Deployment Most of the senrios in the Senrios doumenttion for the VMwre Vlidted Design for IT Automting IT re region gnosti. Eh vrelize Automtion deployment n only provision lueprints in its region. You n, set up dul region environment using DLR or UDLR. If you wnt to deploy to Region B using DLR, you follow these steps: 1 Perform ll tsks in Region B Virtul Infrstruture Implementtion in the Deployment for Region B doument of the VMwre Vlidted Design for the Softwre-Defined Dt Center. 2 Perform ll tsks in Region B Cloud Mngement Pltform Implementtion in the Deployment for Region B doument of the VMwre Vlidted Design for the Softwre-Defined Dt Center. 3 Depending on your senrio, you might hve perform some tsks in Region B Opertions Implementtion. For exmple, some senrios use vrelize Log Insight. 4 Follow the instrutions in this setion, Prepring for Region B Deployment. You n find the douments on the VMwre Vlidted Design Doumenttion pge. Note This set of senrio preprtion proedures uses DLR tht is ssoited with the NSX Mnger in Region B. Virtul mhines tht re reted from one of the lueprints nnot migrte to region A. See Chpter 1, Senrios Solution Pths, on pge 9 for disussion of the dvntges nd disdvntges of using DLR or UDLR. This hpter inludes the following topis: Crete Virtul Mhine Templtes from Content Lirry, on pge 126 Crete Customiztion Speifitions in Compute vcenter Server in Region B, on pge 128 Crete vsphere Endpoint in vrelize Automtion for Region B, on pge 130 Crete n NSX Endpoint in vrelize Automtion in Region B, on pge 131 Crete Fri Groups in Region B, on pge 131 Add Compute Resoures to Fri Group in Region B, on pge 132 Crete Logil Swithes in Region B, on pge 133 Crete Externl Network Profiles in Region B, on pge 135 Configuring Reservtion Poliies nd Network Poliies in Region B, on pge 136 VMwre, In. 125

126 Senrios Crete Virtul Mhine Templtes from Content Lirry You use virtul mhine templtes to rete mhine lueprints nd pulish them in servie tlog in vrelize Automtion. You n use the predefined Linux nd Windows virtul mhine templte tht re ville in the vcenter Server ontent lirry fter you deploy the VMwre Vlidted Design for the Softwre-Defined Dt Center. Creting virtul mhine templtes from ontent lirry inludes severl tsks. At high level, you first rete virtul mhine y importing it from the ontent lirry. Then you onvert the virtul mhine to virtul mhine templte. Prerequisites Verify tht you hve performed the ontent lirry onfigurtion for Region B ording to the VMwre Vlidted Design Deployment Guide for Region B. Configure Content Lirry in the First Compute vcenter Server Instne Import the Virtul Mhine Templte OVF Files Crete Virtul Mhines Using Content Lirry VM Templtes in Region B When you implement senrios for region B, vrelize Automtion nnot diretly ess virtul mhine templtes in the ontent lirry. You must rete virtul mhine using the virtul mhine templtes, then onvert the templte in vcenter Server. Perform this proedure on ll vcenter Server ompute instnes tht you dd to vrelize Automtion, inluding the first vcenter Server ompute instne. Crete virtul mhines from the following Linux nd Windows VM templtes in the ontent lirry. VM Templte Nme redht6-enterprise-64 windows-2012r2-64 Guest OS Red Ht Enterprise Server 6 (64-it) Windows Server 2012 R2 (64-it) 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Nvigte to Home > VMs nd Templtes nd expnd the lx01w01v01.lx01.rinpole.lol vcenter Server. 3 Right-lik the lx01-m01d dt enter tree nd selet New Folder > New VM nd Templte Folder. 4 Crete new folder nd lel it VM Templtes. 5 Nvigte to Home > Content Lirries nd lik LAX01-ContentLi01 > Templtes VMwre, In.

127 Chpter 12 Prepring for Region B Senrio Deployment 6 Right-lik the VM templte nd lik New VM from This Templte. Provide the informtion in the New Virtul Mhine from Content Lirry wizrd, s follows. On the Selet nme nd lotion pge, use the sme templte nme. Note Use the sme templte nme to rete ommon servie tlog tht works ross different vcenter Server instnes within your dt enter environment. d e f g Selet VM Templtes s the folder for this virtul mhine, nd lik Next. On the Selet resoure pge, selet the ompute luster tht you wnt to deploy the virtul mhine to. On the Review detils pge, verify the templte detils nd lik Next. On the Selet storge pge, selet the lx01-m01-li01 dtstore nd selet Thin Provision from the Selet virtul disk formt drop-down menu. On the Selet networks pge, selet VM Network for the Destintion Network, nd lik Next. vrelize Automtion hnges the network ording to the lueprint onfigurtion. h On the Redy to omplete pge, review the virtul mhine onfigurtion nd lik Finish. A new tsk for reting the virtul mhine ppers in the Reent Tsks pne. After the tsk is omplete, the new virtul mhine is reted. 7 Repet this proedure for the other VM Templtes in the ontent lirry. Convert the Virtul Mhine to VM Templte in Region B If your senrio inludes Region B, you n onvert virtul mhine diretly to templte insted of mking opy y loning. Repet this proedure for eh of the VM templtes in the ontent lirry. The tle elow lists the VM templtes nd the guest OS tht eh templte uses to rete virtul mhine. VM Templte Nme redht6-enterprise-64 windows-2012r2-64 Guest OS Red Ht Enterprise Server 6 (64-it) Windows Server 2012 R2 (64-it) 1 Log in to vcenter Server using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Nvigte to Home > VMs nd Templtes. 3 In the Nvigtor pne, expnd lx01w01v01.lx01.rinpole.lol > lx01-m01d > VM Templtes. 4 Right-lik the redht6-enterprise-64 virtul mhine loted in the VM Templtes folder, nd lik Templte > Convert to Templte. 5 Clik Yes to onfirm the templte onversion. VMwre, In. 127

128 Senrios 6 Repet this proedure for ll of the VM Templtes in the ontent lirry, verifying tht eh VM Templte ppers in the VM Templtes folder. Crete Customiztion Speifitions in Compute vcenter Server in Region B As prt of the Region B senrio implementtion you rete two ustomiztion speifitions for use on the virtul mhines you deploy from vrelize Automtion. One speifition is for Linux guest operting system nd one is for Windows guest operting system. When you pply speifition to guest operting system during virtul mhine loning or deployment, you prevent onflits tht might result if you deploy virtul mhines with identil settings, suh s duplite omputer nmes. You lter use the ustomiztion speifitions when you rete lueprints for use with vrelize Automtion. Crete Customiztion Speifition for Linux in Region B When you implement senrios for region B, you hve to rete Linux guest operting system speifition tht you n pply when you rete lueprints for use with vrelize Automtion. You n use this ustomiztion speifition when provisioning new virtul mhines from vrelize Automtion. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Nvigte to Home > Opertions nd Poliies > Customiztion Speifition Mnger. 3 Selet the vcenter Server lx01w01v01.lx01.rinpole.lol from the drop-down menu. 4 Clik the Crete new speifition ion. 5 On the Speify Properties pge, selet Linux from the Trget VM Operting System drop-down menu, enter it-linux-ustom-spe for the speifition nme, nd lik Next. 6 On the Set Computer Nme pge, selet Use the virtul mhine nme, enter lx01.rinpole.lol in the Domin Nme text ox, nd lik Next. 7 On the Time Zone pge, speify the time zone for the virtul mhine, nd lik Next. Are Lotion Hrdwre Clok Set To Vlue Ameri Los Angeles Lol Time 8 On the Configure Network pge, lik Next. 9 On the Enter DNS nd domin settings pge, leve the defult settings, nd lik Next. 10 Clik Finish to sve your hnges. The ustomiztion speifition tht you reted is listed in the Customiztion Speifition Mnger. 128 VMwre, In.

129 Chpter 12 Prepring for Region B Senrio Deployment Crete Customiztion Speifition for Windows in Region B When you implement senrios for Region B, you hve to rete Windows guest operting system speifition. This ustomiztion speifition n e used to ustomize virtul mhine guest operting systems when provisioning new virtul mhines from vrelize Automtion. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Nvigte to Home > Opertions nd Poliies > Customiztion Speifition Mnger. 3 Selet the vcenter Server lx01w01v01.lx01.rinpole.lol from the drop-down menu. 4 Clik the Crete new speifition ion. 5 On the Guest Customiztion wizrd's Speify Properties pge. Selet Windows from the Trget VM Operting System drop-down menu. Enter it-windows-joindomin-ustom-spe s the speifition nme, nd lik Next. 6 On the Set Registrtion Informtion pge, enter Rinpole s the virtul mhine owner s nme nd orgniztion, nd lik Next. 7 On the Set Computer Nme pge, selet Use the virtul mhine nme, nd lik Next. The operting system uses this nme to identify itself on the network. 8 On the Enter Windows Liense pge, provide liensing informtion for the Windows operting system, enter the volume_liense_key, nd lik Next. 9 Speify the dministrtor pssword for use with the virtul mhine, nd lik Next. 10 On the Time Zone pge, selet (GMT-08:00) Pifi Time(US & Cnd), nd lik Next. 11 On the Run One pge, lik Next. 12 On the Configure Network pge, lik Next. 13 On the Set Workgroup or Domin pge, selet Windows Server Domin, onfigure the following settings, nd lik Next. Domin User nme Pssword Vlue lx01.rinpole.lol RAINPOLE\dministrtor dmin_pwd 14 On the Set Operting System Options pge, selet Generte New Seurity ID (SID), nd lik Next. 15 Clik Finish to sve your hnges. The ustomiztion speifition tht you reted is listed in the Customiztion Speifition Mnger. VMwre, In. 129

130 Senrios Crete vsphere Endpoint in vrelize Automtion for Region B For the IT Automting IT use se, IS dministrtors rete endpoints nd onfigure user redentils for those endpoints. The endpoints llow vrelize Automtion to mnge the vsphere infrstruture. When you rete vsphere endpoint, vrelize Automtion n ommunite with the vcenter Server environment nd disover ompute resoures, ollet dt, nd provision mhines. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Endpoints > Endpoints nd lik New > Virtul > vsphere (vcenter). 3 On the Generl pge, onfigure the vrelize Automtion Endpoint with the following settings. Nme Address User Nme Pssword Vlue for vsphere VSPHERE-LAX rinpole\sv-vr sv_vr_pssword 4 Clik Test Connetion. 5 In the Seurity Alert window, lik OK. 6 Clik OK to rete the endpoint. Note The vsphere Endpoint Nme must e identil to the nme tht you used to instll the proxy gent. 130 VMwre, In.

131 Chpter 12 Prepring for Region B Senrio Deployment Crete n NSX Endpoint in vrelize Automtion in Region B For the IT Automting IT use se, you rete n NSX Endpoint in vrelize Automtion. When you rete n endpoint for NSX, vrelize Automtion n ommunite with NSX Mnger to disover networking resoures. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Endpoints > Endpoints nd lik New > Network nd Seurity > NSX. 3 On the Generl pge, onfigure the vrelize Automtion Endpoint with the following settings Nme Address User Nme Pssword Vlue NSXEndpoint rinpole\sv-vr sv_vr_pssword 4 Clik the Assoitions t. 5 On the Assoitions t, lik New, selet VSPHERE-LAX from the Nme drop-down menu, nd lik OK. 6 Clik Test Connetion. 7 On the Seurity Alert window, lik OK. 8 Clik OK to rete the endpoint. Crete Fri Groups in Region B In your IT Automting IT deployment, IS dministrtors n orgnize virtuliztion ompute resoures nd loud endpoints into fri groups y type nd intent. One or more fri dministrtors mnge the resoures in eh fri group. Fri dministrtors re responsile for reting reservtions on the ompute resoures in their groups to llote fri resoures to speifi usiness groups. Fri groups re reted in speifi tennt, ut their resoures n e mde ville to users who elong to usiness groups in ll tennts. VMwre, In. 131

132 Senrios 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet Infrstruture > Endpoints > Fri Groups. 3 Clik New Fri Group, enter the following settings nd lik OK. Nme Fri dministrtors Vlue LAX Fri Group ug-itac-tenntadmins@rinpole.lol 4 Log out of the vrelize Automtion portl. Add Compute Resoures to Fri Group in Region B As prt of senrio implementtion, you llote ompute resoures to fri groups so tht vrelize Automtion n use the resoures in tht ompute resoure for tht fri group when provisioning virtul mhines. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > End Points > Fri Groups. 3 In the Nme olumn, hover the mouse pointer over the fri group nme LAX Fri Group, nd lik Edit. 132 VMwre, In.

133 Chpter 12 Prepring for Region B Senrio Deployment 4 On the Edit Fri Group pge, selet lx01-w01-omp01 (ompute luster) from the Compute Resoures tle, nd lik OK. Note It might tke severl minutes for vrelize Automtion to onnet to the Compute vcenter Server system nd ssoited lusters. If you re still not le to see the ompute luster fter suffiient time hs pssed, try to restrt oth proxy gent servies in the virtul mhines lx01is01.lx01.rinpole.lol nd lx01is02.lx01.rinpole.lol. 5 Nvigte to Infrstruture > Compute Resoures > Compute Resoures. 6 In the Compute Resoure olumn, hover the mouse pointer over the ompute luster lx01-w01- omp01. This shows up menu list nd lik Dt Colletion. 7 Wit for the dt olletion proess to omplete nd verify tht the Sttus for oth Inventory nd Network nd Seurity Inventory shows Sueeded. Crete Logil Swithes in Region B Before you n strt with senrios, you hve to rete logil swithes for usiness groups. Severl senrios require logil swith for the Prodution usiness group. This proedure retes nd onfigures the following logil swith. Logil Swith Nme Prodution-VXLAN Desription Logil swith for the Prodution usiness group Note You n onnet the swith for prodution worklods to either the Distriuted Logil Router (DLR) or the Universl Distriuted Logil Router (UDLR). However, if you onnet the swith to the UDLR, worklod deployment in region B fils euse only the primry NSX Mnger n rete nd mnge universl ojets. The NSX mnger in region B is not the primry NSX Mnger. For dul-region deployment, you therefore onnet the swith to the DLR. However, s result of this deision, deployed worklods n no longer move etween region A nd region B. VMwre, In. 133

134 Senrios 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Crete logil swith. d Clik Networking & Seurity. In the Nvigtor, selet Logil Swithes. From the NSX Mnger drop-down menu, selet s the NSX Mnger. Clik the New Logil Swith ion. The New Logil Swith dilog ox ppers. e In the New Logil Swith dilog ox, enter the following settings, nd lik OK. Nme Desription Trnsport Zone Replition Mode Enle IP Disovery Enle MAC Lerning Vlue Prodution-VXLAN Logil swith for Prodution Business Group Comp Glol Trnsport Zone Hyrid Seleted Deseleted 3 Connet Prodution-VXLAN to the Distriuted Logil Router. d On the Logil Swithes pge, selet the Prodution-VXLAN Logil Swith. Clik the Connet Edge ion. On the Connet n Edge pge, selet lx01w01dlr01 nd lik Next. On the Edit NSX Edge Interfe pge, enter the following settings nd lik Next. Option Nme Type Connetivity Sttus s Prodution-VXLAN Internl Conneted Primry IP Address Sunet Prefix Length 24 e On the Redy to Complete pge, lik Finish. 134 VMwre, In.

135 Chpter 12 Prepring for Region B Senrio Deployment Crete Externl Network Profiles in Region B In your senrio implementtion, fri dministrtors must rete network profiles efore memers of usiness group n request virtul mhines. The network profiles define the sunet nd routing onfigurtion for the virtul mhines. Eh network profile is onfigured for speifi network port group or virtul network. The network profile speifies the IP ddress nd routing onfigurtion for virtul mhines tht re provisioned to tht network. Prerequisites Crete logil swithes for usiness groups. See Crete Logil Swithes in Region A, on pge Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Network Profiles nd lik New > Externl. 3 On the New Network Profile - Externl pge, speify the network profiles on the Generl t. Add the vlues for the Prodution Group Externl network profile. Nme Desription IPAM endpoint Prodution Vlue Ext-Net-Profile-Prodution-B Externl Network profile for Prodution Business Group vrelize Automtion IPAM Sunet msk Gtewy Clik the DNS t nd enter the following vlues. Vlue Primry DNS Seondry DNS DNS Suffix DNS serh suffixes rinpole.lol rinpole.lol VMwre, In. 135

136 Senrios 5 Clik the Network Rnges t nd follow these steps. Clik the New utton. Enter the following vlues for the Prodution Business IP Rnge profile. Clik OK. Nme Desription Prodution Vlue Prodution Stti IP rnge for Prodution Group Strting IP ddress Ending IP ddress Verify tht ll the stti IP ddresses re dded to the profile nd lik OK. Configuring Reservtion Poliies nd Network Poliies in Region B vrelize Automtion reservtion poliies llow you to group similr reservtions. Tht mens, for exmple, tht you n ssign different resoures to prodution environment thn to development environment. Crete the reservtion poliy tg first, then ssign the poliy to reservtions to llow tennt dministrtor or usiness group mnger to use the reservtion poliy in lueprint. Prerequisites Prepre for the deployment. See Chpter 12, Prepring for Region B Senrio Deployment, on pge 125. Crete Reservtion Poliies in Region B In your senrio implementtion, you use reservtion poliies to group similr reservtions together. Crete the reservtion poliy tg first so tht you n ssign the poliy to reservtions. A tennt dministrtor or usiness group mnger to use the reservtion poliy in lueprint. You rete reservtion poliy for virtul mhine provisioning in prodution environment. When you request mhine, it n e provisioned on ny reservtion of the pproprite type tht hs suffiient pity for the mhine. You n pply reservtion poliy to lueprint to restrit the mhines provisioned from tht lueprint to suset of ville reservtions. You n use reservtion poliy to ollet resoures into groups for different servie levels, or to mke speifi type of resoure esily ville for prtiulr purpose. You n dd multiple reservtions to reservtion poliy. However, reservtion n elong to only one poliy. You n ssign single reservtion poliy to more thn one lueprint. However, eh lueprint n hve only one reservtion poliy. A reservtion poliy n inlude reservtions of different types, ut only reservtions tht mth the lueprint type re onsidered when seleting reservtion for prtiulr request. 136 VMwre, In.

137 Chpter 12 Prepring for Region B Senrio Deployment 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtion > Reservtion Polies. 3 Clik the New ion, onfigure the following settings, nd lik Sve. Nme Desription Vlue LAX-Prodution-Poliy Reservtion poliy for Prodution Business Group in LAX 4 Clik the New ion, onfigure the following settings, nd lik Sve. Nme Desription Vlue LAX-Edge-Poliy Reservtion poliy for Tennt Edge resoures in LAX Crete Reservtions for the Compute Cluster in Region B In your senrio implementtion, fri dministrtor must llote resoures to usiness group y reting reservtion. After tht, memers of usiness group n request virtul mhines. You n onfigure eh reservtion for speifi usiness group to grnt the users in tht group ess to request mhines on speified ompute resoure. Prerequisites Configure the dtstore for the shred ompute luster. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Reservtions nd lik New > vsphere. VMwre, In. 137

138 Senrios 3 On the New Reservtion - vsphere (vcenter) pge, lik the Generl t nd set the following vlues. Nme Tennt Business Group Reservtion Poliy Prodution Group Vlue LAX01-Comp01-Prod-Res01 rinpole Prodution LAX-Prodution-Poliy Priority 100 Enle This Reservtion Seleted 4 On the New Reservtion - vsphere (vcenter) pge, llote resoures for the new reservtion. Clik the Resoures t. Selet lx01-w01-omp01(lx01w01v01.lx01.rinpole.lol) from the Compute resoure dropdown menu. In the This Reservtion olumn of the Memory tle, enter 200. d In the Storge tle, selet the vsndtstore hek ox nd enter the following vlues. Text ox Vlue This Reservtion Reserved 2000 Priority 1 e f Clik OK. Selet lx01-w01rp-user-vm from the Resoure pool drop-down menu. 5 On the New Reservtion - vsphere (vcenter) pge, lik the Network t. 6 On the Network t, selet the network pth hek oxes listed in the tle elow from the Network Pths list. 7 Selet the network profile from the Network Profile drop-down menu for the Prodution usiness group whose reservtion you re onfiguring. Prodution Network Pth vxw-dvs-xxxxx-prodution-vxlan Prodution Group Network Profile Ext-Net-Profile-Prodution-B 8 (Optionl) If network pth is not listed, re-synhronize dt olletion from the NSX ojets in the Compute vcenter Server inventory. Go k to Infrstruture > Compute Resoures. d Highlight lx01-w01-omp01 nd selet Dt Colletion Sroll down to Network nd Seurity Inventory, nd lik Request now. Wit for synhroniztion to omplete. 9 Clik OK to sve the reservtion. 138 VMwre, In.

139 Chpter 12 Prepring for Region B Senrio Deployment Crete Reservtions for the User Edge Resoures in Region B In your senrio implementtion, fri dministrtors must llote resoures to tht usiness group y reting reservtion. Memers of usiness group n then request virtul mhines. Eh reservtion is onfigured for speifi usiness group to grnt memers of tht group ess to request virtul mhines on speified ompute resoure. Perform this proedure to rete Edge reservtions for the Prodution usiness groups. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Reservtions, nd lik New > vsphere (vcenter). 3 On the New Reservtion - vsphere (vcenter) pge, lik the Generl t, nd onfigure the following vlues for your usiness group. Nme Tennt Business Group Reservtion Poliy Prodution Group Vlue LAX01-Edge01-Prod-Res01 rinpole Prodution LAX-Edge-Poliy Priority 100 Enle This Reservtion Seleted 4 On the New Reservtion - vsphere (vcenter) pge, ssign resoures to the new reservtion. d e Clik the Resoures t. Selet lx01-w01-omp01(lx01w01v01.lx01.rinpole.lol) from the Compute resoure dropdown menu. Enter 200 in the This Reservtion olumn of the Memory (GB) tle. In the Storge (GB) tle, selet the hek ox for dtstore lx01-w01-vsn01, enter 2000 in the This Reservtion Reserved text ox, enter 1 in the Priority text ox, nd lik OK. Selet lx01-w01rp-user-edge from the Resoure pool drop-down menu. 5 On the New Reservtion - vsphere (vcenter) pge, lik the Network t. 6 On the Network t, mp the network pth to the network profile for the usiness group. Selet the network pth hek oxes listed in the tle elow from the Network Pths list. Selet the orresponding network profile from the Network Profile drop-down menu. Prodution Network Pth vxw-dvs-xxxxx-prodution-vxlan Prodution Group Network Profile Ext-Net-Profile-Prodution-B VMwre, In. 139

140 Senrios 7 If network pth is not listed, resynhronize dt olletion from the NSX ojets in the Compute vcenter Server inventory. d Go k to Infrstruture > Compute Resoures. Highlight lx01-w01-omp01. Selet Dt Colletion nd sroll down to Network nd Seurity Inventory. Clik Request now nd wit for synhroniztion to omplete. 8 Clik OK to sve the reservtion. 140 VMwre, In.

141 Creting Single-Mhine Blueprints nd Self-Servie Ctlogues in Region B 13 After you prepre your senrio environment for region B, the tsk workflows re very similr to the region A tsks. In ll ses, you use the region B speifi IP ddresses nd the nmes of region B omponents. The two exmples show reting lueprints nd self-servie tlogues, ut you n implement other senrios, suh s integrting with IPAM, s well. This hpter inludes the following topis: Creting nd Pulishing Single Mhine Blueprints in Region B, on pge 141 Creting Self Servie Ctlogues in Region B, on pge 144 Creting nd Pulishing Single Mhine Blueprints in Region B A lueprint speifies the workflow tht is used to provision virtul mhine nd inludes informtion suh s CPU, memory, nd storge. In your senrio, you n rete lueprint for provisioning the Linux nd Windows virtul mhines using resoures speified on the Compute vcenter Server. Tennts n lter use this lueprint for utomti provisioning. This senrio explins how to pulish lueprints for the Prodution usiness group in Region B. Mhine lueprints inlude dditionl provisioning informtion suh s the lotions of required disk imges or virtuliztion pltform ojets. Blueprints lso speify poliies suh s the lese period nd n inlude networking nd seurity omponents suh s seurity groups, poliies, or tgs. A lueprint is the omplete speifition for virtul, loud, or physil mhine. Blueprints determine mhine's ttriutes, the mnner in whih it is provisioned, nd its poliy nd mngement settings. Repet this proedure to rete the following lueprints. Blueprint Nme VM Templte Customiztion Speifition Windows Server 2012 R2 - LAX Prod windows-2012r2-64 it-windows-joindomin-ustom-spe Redht Enterprise Linux 6 - LAX Prod redht6-enterprise-64 it-linux-ustom-spe VMwre, In. 141

142 Senrios 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Design > Blueprints. 3 Clik New. 4 In the New Blueprint dilog ox, onfigure the following settings on the Generl t nd lik OK. Nme Vlue Windows Server 2012 R2 - LAX Prod Arhive (dys) 15 Minimum 30 Mximum Selet nd drg the vsphere Mhine ion to the design nvs. 6 Clik the Generl t, onfigure the following settings, nd lik Sve. ID Desription Disply lotion on request Reservtion poliy Mhine prefix Minimum Mximum Defult Defult setting (vsphere_mhine_1) Defult setting (lnk) Deseleted LAX-Prodution-Poliy Prod- Defult setting Defult setting 7 Clik the Build Informtion t, onfigure the following settings, nd lik Sve. Blueprint type Ation Provisioning workflow Clone from Customiztion spe Vlue for Windows Server Clone CloneWorkflow windows-2012r2-64 (Endpoint lx01w01v01.lx01.rinpole.lol) it-windows-joindomin-ustom-spe 142 VMwre, In.

143 Chpter 13 Creting Single-Mhine Blueprints nd Self-Servie Ctlogues in Region B 8 Clik the Mhine Resoures t, onfigure the following settings, nd lik Sve. Minimum Mximum CPU 2 4 Memory (MB): Storge Defult setting Defult setting 9 Set the network. d Clik the Network t. Selet Network & Seurity in the Ctegories setion to disply the list of ville network nd seurity omponents. Selet the Existing Network omponent nd drg it onto the design nvs. Clik in the Existing network text ox nd selet the Ext-Net-Profile-Prodution-B network profile. Blueprint Nme Windows Server 2012 R2 - LAX Prod Redht Enterprise Linux 6 - LAX Prod Existing network Ext-Net-Profile-Prodution-B Ext-Net-Profile-Prodution-B e Clik Sve. f g Selet vsphere_mhine properties from the design nvs. Selet the Network t, lik New, nd onfigure the following settings. For Existing Network Network Assignment Type Address Ext-Net-Profile-Prodution-B ExtNetProfileProdution Stti IP Leve lnk h i Clik Sve. Clik Finish to sve the lueprint. 10 Selet the lueprint nd lik Pulish. VMwre, In. 143

144 Senrios 11 Repet this proedure to rete the lueprint for Linux. Blueprint type Ation Provisioning workflow Clone from Customiztion spe Vlue for Linux Server Clone CloneWorkflow redht6-enterprise-64 it-linux-ustom-spe Creting Self Servie Ctlogues in Region B A servie tlog provides ommon interfe for onsumers of IT servies to request servies, trk their requests, nd mnge their provisioned servie items. Servie rhitets nd dministrtors n define new servies nd pulish them to the ommon tlog. When defining servie, the rhitet n speify the kind of item tht n e requested, nd wht options re ville to the onsumer s prt of sumitting the request. Users who re responsile for mnging the tlog, suh s tennt dministrtors nd servie rhitets, n mnge the presenttion of tlog items to the onsumers of IT servies. For exmple, tlog mngers n group items into servie tegories for esier nvigtion nd highlight new servies to onsumers on the portl home pge. Prerequisites 1 Prepre for the deployment. See Chpter 12, Prepring for Region B Senrio Deployment, on pge Perform the tsks in Creting nd Pulishing Single Mhine Blueprints in Region B, on pge 141. Crete Ctlog Servie in Region B The first step in reting servie tlog is reting servie. After tht, dministrtors n ssoite entitlements nd lueprints with the servie to omplete servie tlog onfigurtion. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to the Administrtion t, lik Ctlog Mngement > Servies, nd lik New. The New Servie pge ppers. 3 On the New Servie pge, onfigure the following settings nd lik OK. Nme Desription Vlue LAX Servie Ctlog Defult setting (lnk) 144 VMwre, In.

145 Chpter 13 Creting Single-Mhine Blueprints nd Self-Servie Ctlogues in Region B Sttus Ion Sttus Hours Owner Support Tem Chnge Window Vlue Ative Defult setting (lnk) Defult setting (lnk) Defult setting (lnk) Defult setting (lnk) Defult setting (lnk) Defult setting (lnk) Configure Entitlements of Blueprints in Region B You entitle users to the tions nd items tht elong to the servie tlog y ssoiting eh lueprint with n entitlement. In this senrio, you ssoite n entitlement with eh lueprint. Repet this proedure to ssoite the following lueprints with their entitlement. Blueprint Nme VM Templte Reservtion Poliy Servie Ctlog Add to Entitlement Windows Server 2012 R2 - LAX Prod windows-2012r2-64 (omp01v51.lx01.rinpole.lol) LAX- Prodution- Poliy LAX Servie Ctlog Prod- SingleVM- Entitlement Redht Enterprise Linux 6 - LAX Prod redht6- enterprise-64(omp01v51.lx01.rinpole.lol) LAX- Prodution- Poliy LAX Servie Ctlog Prod- SingleVM- Entitlement 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet the Administrtion t nd nvigte to Ctlog Mngement > Ctlog Items. 3 On the Configure Ctlog Items pne, selet the Windows Server 2012 R2 - LAX Prod lueprint in the Ctlog Items list nd lik Configure. 4 On the Generl t of the Configure Ctlog Items wizrd, selet LAX Servie Ctlog from the Servie drop-down menu, nd lik OK. 5 Assoite the lueprint with the Prod-SingleVM-Entitlement entitlement. Clik Entitlements nd selet Prod-SingleVM-Entitlement. Clik the Items & Approvls t nd dd the Windows Server 2012 R2 - LAX Prod lueprint to the Entitled Items list nd lik OK. Clik Finish. 6 Clik the Ctlog t nd verify tht the lueprint is listed in the Servie Ctlog. VMwre, In. 145

146 Senrios 7 Repet this proedure to ssoite the other lueprint with its entitlement. Provision Blueprints nd Vlidte the Configurtion After the lueprints hve een reted, you n ssoite them with the servie tlog nd perform optionl ustomiztion. After provisioning is omplete, you verify tht the nming prefixes nd IP ddresses re orret. Beuse entitlements re lredy in ple, the orret set of users n use the servie tlog item. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to the Ctlog t nd lik LAX-Servie-Ctlog. 3 Clik Request for the lueprint nmed Windows Server 2012 R2 - LAX Prod nd, optionlly, ustomize the lueprint. (Optionl) Selet Windows Server 2012 R2 - LAX Prod nd, under Generl, enter vlues for Desription, Reson for Request, nd Lese dys. (Optionl) Selet vsphere_mhine_1 nd, under Generl, enter vlues for the CPUs nd Memory options. (Optionl) Selet vsphere_mhine_1 nd under Storge, lik Edit nd selet the Storge Reservtion Poliy option ville from the drop-down menu. 4 Clik Sumit nd lik OK. 5 Repet the steps to deploy the lueprint nmed Redht Enterprise Linux 6 - LAX Prod. 6 Clik the Requests t nd hek the sttus of the new requests until Sttus is Suessful. Provisioning might tke some time. 7 One provisioning is omplete, lik the Infrstruture t, lik Reservtions, nd lik Network Profiles. 8 Clik Ext-Net-Profile-Prodution-B, lik the IP Addresses t to verify tht the lueprints re deployed orretly. Verify tht two virtul mhines exist with the mhine nme pttern Prod-xxxxx. Verify tht the two virtul mhines re using the IP ddresses defined on Crete Externl Network Profiles in Region B, on pge 135. Clik Cnel when verifition is omplete. 146 VMwre, In.

147 Configure Unified Single Mhine Blueprints for Cross-Region Deployment 14 If you wnt to provision mhine lueprints ross multiple regions you n use universl trnsport zone nd Universl Distriuted Logil Router (UDLR). You set up the UDLR s prt of the deployment of the VMwre Vlidted Design for the Softwre-Defined Dt Center, nd n then use it in the senrios. If you use UDLR, you nnot selet one of the on-demnd networking options during lueprint retion. You must set up networking in your environment first, nd n then selet the existing network when you rete the lueprint. You n insted use DLR in onjuntion with on-demnd networking. However, eh lueprint is tied to one region in tht se. See Chpter 1, Senrios Solution Pths, on pge 9 for kground on the enefits nd limittions of eh solution pth. See the Cheklist for Prepring NSX nd Seurity Configurtion, whih is prt of the vrelize Automtion 7.2 doumenttion set, for detils. Note This senrio illustrtes how to use UDLR with senrio. To use UDLR with other senrios, follow the steps for Region A ut hnge the networking informtion. This hpter inludes the following topis: Crete Logil Swithes for Cross-Region Deployment, on pge 148 Crete Externl Network Profiles for Cross-Region Deployment, on pge 149 Crete Fri Groups for Cross-Region Deployment, on pge 150 Add Dt Center Lotions to the Compute Resoure Menu, on pge 151 Assoite Compute Resoures with Lotion, on pge 152 Add Property Group nd Property Definition for Dt Center Lotion, on pge 153 Crete Reservtion Poliy for the Unified Blueprint, on pge 154 Speify Reservtion Informtion for the Unified Blueprint, on pge 154 Crete Servie Ctlog for the Unified Blueprint, on pge 156 Crete Unified Single Mhine Blueprints, on pge 156 Configure Entitlements for Blueprints in the Cross-Region Deployment, on pge 159 Test the Cross-Region Deployment of the Single Mhine Blueprints, on pge 161 VMwre, In. 147

148 Senrios Crete Logil Swithes for Cross-Region Deployment Before you n strt with senrios, you hve to rete logil swithes for usiness groups. Severl senrios require logil swith for the Prodution usiness group. For ross-region deployment of virtul mhine, logil swithes re sed on the Universl Trnsport Zone nd use Universl Distriuted Router (UDLR). This proedure retes nd onfigures the following logil swith. Logil Swith Nme Prodution-Unified-VXLAN Desription Logil swith for the Prodution usiness group This senrio uses Universl Distriuted Logil Router (UDLR). In senrios tht use UDLR, the singlemhine lueprints tht re used to provision virtul mhines nnot use NSX onstruts suh s NSX firewlls or NSX seurity poliies. If the lueprint does use NSX onstruts, nd you use UDLR, you n no longer move the deployed worklods etween Region A nd Region B. In tht se, using Distriuted Logil Router (DLR) is etter solution. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol vsphere_dmin_pssword 2 Crete logil swith. d e Clik Networking & Seurity. In the Nvigtor, selet Logil Swithes. From the NSX Mnger drop-down menu, selet s the NSX Mnger. Clik the New Logil Swith ion. In the New Logil Swith dilog ox, enter the following settings, nd lik OK. Nme Desription Trnsport Zone Replition Mode Enle IP Disovery Enle MAC Lerning Vlue Prodution-Unified-VXLAN Logil swith for Prodution Business Group Comp Universl Trnsport Zone Hyrid Seleted Deseleted 3 Connet the Prodution-Unified-VXLAN to the Universl Distriuted Logil Router. On the Logil Swithes pge, selet the Prodution-Unified-VXLAN Logil Swith. Clik the Connet Edge ion. On the Connet n Edge pge, selet sfo01w01udlr01 nd lik Next. 148 VMwre, In.

149 Chpter 14 Configure Unified Single Mhine Blueprints for Cross-Region Deployment d On the Edit NSX Edge Interfe pge, enter the following settings nd lik Next. Option Nme Type Connetivity Sttus s Prodution-Unified-VXLAN Internl Conneted Primry IP Address Sunet Prefix Length 24 e On the Redy to Complete pge, lik Finish. Crete Externl Network Profiles for Cross-Region Deployment Before memers of usiness group n request virtul mhines, fri dministrtors must rete network profiles. The network profiles define the sunet nd routing onfigurtion for the virtul mhines. Eh network profile is onfigured for speifi network port group or virtul network. The network profile speifies the IP ddress nd routing onfigurtion for virtul mhines tht re provisioned to tht network. Prerequisites Crete logil swithes for usiness groups. See Crete Logil Swithes in Region A, on pge Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Network Profiles nd lik New > Externl. 3 On the New Network Profile - Externl pge, speify the network profiles on the Generl t. Add the vlues for the Prodution Group Externl network profile. Nme Desription IPAM endpoint Prodution Vlue Ext-Net-Profile-Prodution-Unified Externl Network profile for Prodution Business Group vrelize Automtion IPAM Sunet msk Gtewy Clik the DNS t nd enter the following vlues. Vlue Primry DNS Seondry DNS VMwre, In. 149

150 Senrios DNS Suffix DNS serh suffixes Vlue rinpole.lol rinpole.lol 5 Clik the Network Rnges t nd follow these steps. Clik the New utton. Enter the following vlues for the Prodution Business IP Rnge profile nd lik OK. Nme Desription Prodution Vlue Prodution Stti IP rnge for Prodution Group Strting IP ddress Ending IP ddress Verify tht ll the stti IP ddresses re dded to the profile nd lik OK. Crete Fri Groups for Cross-Region Deployment IS dministrtors n orgnize virtuliztion ompute resoures nd loud endpoints into fri groups y type nd intent. One or more fri dministrtors mnge the resoures in eh fri group. Fri dministrtors re responsile for reting reservtions on the ompute resoures in their groups to llote fri resoures to speifi usiness groups. Fri groups re reted in speifi tennt, ut their resoures n e mde ville to users who elong to usiness groups in ll tennts. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet Infrstruture > Endpoints > Fri Groups. 3 Clik New Fri Group, enter the following settings, nd lik OK. Nme Fri dministrtors Compute resoures Vlue Unified Fri Group ug-itac-tenntadmins@rinpole.lol sfo01-w01-omp01, lx01-w01-omp01 4 Log out of the vrelize Automtion portl. 150 VMwre, In.

151 Chpter 14 Configure Unified Single Mhine Blueprints for Cross-Region Deployment Add Dt Center Lotions to the Compute Resoure Menu In your ross-region deployment, you n onfigure new dt enter lotions nd resoures in the Compute Resoure menu of the vrelize Automtion deployment seletion sreen. Users n then more esily selet new ompute resoures for deployment. To dd new lotion to the Compute Resoure menu, you edit n XML file on the vrelize Automtion server. Perform this proedure for the two IS We server virtul mhines vr01iws01 nd vr01iws01, whih re prt of the initil Region A vrelize Automtion deployment. 1 Log in to the vsphere We Client. Open We rowser nd go to Log in using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol venter_dmin_pssword 2 Edit the DtCenterLotions.xml file to dd the dt enter lotions. d Open VM onsole to the IS We server virtul mhine vr01iws01. Log in using dministrtor redentils. Open the file C:\Progrm Files (x86)\vmwre\vcac\server\wesite\xmldt\dtcenterlotions.xml in text editor. Updte the Dt Nme nd Desription ttriutes to use the following settings. Dt Nme SFO LAX Desription Sn Frniso DtCenter Los Angeles DtCenter e Sve nd lose the file. VMwre, In. 151

152 Senrios 3 Restrt the IS We server virtul mhine vr01iws01. Wit until the virtul mhine restrts nd is suessfully running. 4 Repet this proedure for the IS We server virtul mhine vr01iws01. Assoite Compute Resoures with Lotion In your ross-region deployment, eh dt enter lotion hs its own ompute resoures, whih you ssoite with tht site for its dedited use. Repet this proedure twie, one for eh vcenter Server ompute luster. Lotion SFO LAX vcenter Server Compute Cluster sfo01-w01-omp01 lx01-w01-omp01 Prerequisites You n perform this proedure only if you dded the lotions expliitly. See Add Dt Center Lotions to the Compute Resoure Menu, on pge Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Selet Infrstruture > Compute Resoures > Compute Resoures. 3 Selet the ompute resoure sfo01-w01-omp01 nd lik Edit. 4 Selet the SFO dt enter lotion from the Lotions drop-down menu. This will e the dt enter lotion for the sfo01-w01-omp01 ompute luster. 5 Clik OK. 6 Repet this proedure to set the dt enter lotion for the lx01-w01-omp01 ompute luster. 152 VMwre, In.

153 Chpter 14 Configure Unified Single Mhine Blueprints for Cross-Region Deployment Add Property Group nd Property Definition for Dt Center Lotion In your ross-region deployment senrio, you use property definitions to more esily ontrol where lueprint is deployed. The lotion of the lueprint determines storge nd network resoures to use with tht lueprint. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Selet Administrtion > Property Ditionry > Property Definitions. 3 Clik New to rete property definition nd follow these steps. Enter Vrm.DtCenter.Lotion in the Nme text ox. Note The property definition nme is se sensitive, nd must extly mth the property nme tht is used in the lueprint or the uild profile. Enter Selet Region in the Lel text ox. In the Visiility setion, selet the All Tennts rdio utton nd speify to whih tennt the property is ville. d (Optionl) Enter property desription in the Desription text ox. Desrie the intent of the property nd ny informtion tht might help the onsumer est use the property. e f g h i j k Leve defult setting for Disply order. Selet String from the Dt type drop-down menu. Selet Yes from the Required drop-down menu. Selet Dropdown from the Disply s drop-down menu. Selet Stti list from the Vlues rdio utton. Deselet Enle ustom vlue entry. Clik New in the Stti list re nd enter property nme nd vlue from the following tle. Nme Sn Frniso Los Angeles Vlue SFO LAX l m Clik OK to sve oth predefined vlues. Clik OK to sve the property definition. The property is reted nd ville on the Property Definitions pge. VMwre, In. 153

154 Senrios 4 Selet Administrtion > Property Ditionry > Property Groups nd lik New. 5 Enter Selet Lotion in the Nme text ox. 6 If you enter the Nme vlue first, the ID text ox is populted with the sme vlue. 7 In the Visiility setion, selet the All Tennts rdio utton to speify with whih tennt the property is to e ville. 8 (Optionl) Enter desription of the property group. 9 Add property to the group y using the Properties ox. d e Clik New. Selet Vrm.DtCenter.Lotion s the property nme. Deselet the Enrypted hek ox. Selet theshow in Request hek ox. Clik OK to dd the property to the group. 10 Clik OK to sve the property group. Crete Reservtion Poliy for the Unified Blueprint When tennt dministrtors nd usiness group mngers rete lueprint, they n dd the reservtion poliy during lueprint retion. To dd reservtion poliy to n existing lueprint in your ross-region deployment, you n edit the lueprint. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Reservtion Polies. 3 Clik New. 4 Type Unified-Prodution-Poliy in the Nme text ox. 5 Selet Reservtion Poliy from the Type drop-down menu. 6 Type Reservtion poliy for Unified Blueprint in the Desription text ox. 7 Clik OK. Speify Reservtion Informtion for the Unified Blueprint In your ross-region deployment, eh reservtion is onfigured for speifi usiness group to grnt them ess to request speifi physil mhines. Before memers of usiness group n request virtul mhines, fri dministrtors must llote resoures for them y reting reservtion. Eh reservtion is onfigured for speifi usiness group, nd grnts ess to request mhines on speified ompute resoure. 154 VMwre, In.

155 Chpter 14 Configure Unified Single Mhine Blueprints for Cross-Region Deployment Repet this proedure twie to rete reservtions on the Region A Compute vcenter Cluster nd the Region B Compute vcenter Cluster. In this senrio, you rete reservtions only for the Prodution usiness group. Region Business Group Reservtion Nme Reservtion Poliy Compute Resoure Region A Prodution SFO01-Comp01- Prod-Unified01 Region B Prodution LAX01-Comp01- Prod-Unified01 Unified- Prodution-Poliy Unified- Prodution-Poliy sfo01-w01-omp01 (sfo01w01v01.sfo01.rinpole.lol) lx01-w01-omp01 (lx01w01v01.lx01.rinpole.lol) 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Infrstruture > Reservtions > Reservtions nd lik New > vsphere. 3 On the New Reservtion - vsphere (vcenter) pge, lik the Generl t, nd speify the following vlues. Nme Tennt Business Group Reservtion Poliy Prodution Group Vlue SFO01-Comp01-Prod-Unified01 rinpole Prodution Unified-Prodution-Poliy Priority 100 Enle This Reservtion Seleted 4 On the New Reservtion - vsphere pge, lik the Resoures t nd speify the reservtion. d Selet sfo01-w01-omp01(sfo01w01v01.sfo01.rinpole.lol) from the Compute Resoure dropdown menu. Enter 200 in the This Reservtion olumn of the Memory (GB) tle. In the Storge (GB) tle, selet the hek ox for dtstore sfo01-w01-vsn01, enter 4000 in the This Reservtion Reserved text ox, enter 1 in the Priority text ox, nd lik OK. Selet lx01-w01rp-user-vm from the Resoure Pool drop-down menu. 5 On the New Reservtion - vsphere (vcenter) pge, lik the Network t. VMwre, In. 155

156 Senrios 6 On the Network t, speify the network informtion. Selet the following network pth hek oxes listed from the Network Pths list. Prodution Network Pth vxw-dvs-xxxxx-prodution-unified-vxlan Prodution Group Network Profile Ext-Net-Profile-Prodution-Unified Selet the orresponding network profile from the Network Profile drop-down menu for the usiness group whose reservtion you re onfiguring. 7 Clik OK to sve the reservtion. 8 Repet the proedure to rete the reservtion for Region B. Crete Servie Ctlog for the Unified Blueprint The servie tlog provides ommon interfe for onsumers of IT servies to request nd mnge the servies nd resoures they need. Users n rowse the tlog to request servies, trk their requests, nd mnge their provisioned servie items. After the servie tlog is reted, usiness group mngers n rete entitlements for servies, tlog items, nd resoure tions to groups of users. The entitlement llows memers of prtiulr usiness group, for exmple, the Prodution usiness group, to use the lueprint. Without n entitlement, users nnot use the lueprint. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Clik the Administrtion t, nd selet Ctlog Mngement > Servies. 3 Clik New nd rete the servie tlog. In the New Servie dilog ox type Unified Single Mhine Ctlog in the Nme text ox. Selet Ative from the Sttus drop-down menu. Clik OK. Crete Unified Single Mhine Blueprints A lueprint is the omplete speifition for virtul, loud, or physil mhine. Blueprints determine mhine's ttriutes, the mnner in whih it is provisioned, nd its poliy nd mngement settings. Tennts use these lueprints to provision virtul mhines utomtilly. This proedure retes ross-region lueprints for the virtul mhine. The proedure uses pre-onfigured resoures on the vcenter Server ompute luster in oth Region A nd Region B. Repet this proedure to rete one unified single mhine lueprint for eh lueprint nme listed in the following tle. 156 VMwre, In.

157 Chpter 14 Configure Unified Single Mhine Blueprints for Cross-Region Deployment Blueprint Nme VM Templte Customiztion Speifition Windows Server 2012 R2 - Unified windows-2012r2-64 it-windows-joindomin-ustom-spe Redht Enterprise Linux 6 - Unified redht6-enterprise-64 it-linux-ustom-spe 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword rinpole.lol 2 Nvigte to Design > Blueprints. 3 Clik New. 4 In the New Blueprint dilog ox, onfigure the following settings on the Generl t. Nme Vlue Windows Server 2012 R2 - Unified Arhive (dys) 15 Deployment limit Defult setting (lnk) Minimum 30 Mximum Clik the Properties t. Clik Add on the Property Groups sut. Selet the property group Selet Lotion nd lik OK. VMwre, In. 157

158 Senrios 6 Clik OK. 7 Selet nd drg the vsphere Mhine ion onto the design nvs. 8 Clik the Generl t, onfigure the following settings, nd lik Sve. ID Reservtion Poliy Mhine Prefix Minimum Mximum Vlue Unified_Win2012R2_VM Unified-Prodution-Poliy Prod- Defult setting Defult setting 9 Clik the Build Informtion t, onfigure the following settings, nd lik Sve. Blueprint Type Ation Provisioning Workflow Clone from Customiztion spe Vlue Server Clone CloneWorkflow windows-2012r2-64 it-windows-joindomin-ustom-spe 10 Clik the Mhine Resoures t, onfigure the following settings, nd lik Sve. Minimum Mximum CPU 2 4 Memory (MB): Storge Defult setting Defult setting 11 Clik the Network t. d Selet Network & Seurity in the Ctegories setion to disply the list of ville network nd seurity omponents. Selet the Existing Network omponent nd drg it onto the design nvs. Clik in the Existing network text ox nd selet the Ext-Net-Profile-Prodution-Unified network profile. Clik Sve. 158 VMwre, In.

159 Chpter 14 Configure Unified Single Mhine Blueprints for Cross-Region Deployment e f Selet vsphere_mhine properties from the design nvs. Selet the Network t, lik New, onfigure the following settings, nd lik OK. Network Assignment Type Address Vlue ExtNetProfileProdutionUnified Stti IP Defult setting (lnk) 12 Clik Sve nd lik Finish. 13 Selet the lueprint nd lik Pulish. 14 Repet this proedure to rete the lueprint for Linux. Configure Entitlements for Blueprints in the Cross-Region Deployment You entitle users to the tions nd items tht elong to the servie tlog y ssoiting eh lueprint with n entitlement. Repet this proedure to ssoite the following lueprints with their entitlement. Blueprint Nme VM Templte Reservtion Poliy Servie Ctlog Add to Entitlement Windows Server 2012 R2 -Unified windows-2012r2-64 (sfo01w01v01.sfo01.rinpole.lol) Prodution- Unified-Poliy Unified Single Mhine Ctlog Prod-SingleVM- Entitlement Redht Enterprise Linux 6 - Unified redht6-enterprise-64 (sfo01w01v01.sfo01.rinpole.lol) Prodution- Unified-Poliy Unified Single Mhine Ctlog Prod-SingleVM- Entitlement 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet the Administrtion t nd nvigte to Ctlog Mngement > Ctlog Items. 3 On the Configure Ctlog Items pne, selet the Windows Server 2012 R2 - Unified lueprint in the Ctlog Items list nd lik Configure. 4 On the Generl t of the Configure Ctlog Items wizrd, selet Unified Single Mhine Blueprint Ctlog from the Servie drop-down menu, nd lik OK. VMwre, In. 159

160 Senrios 5 Assoite the lueprint with the Prod-SingleVM-Entitlement entitlement. Clik Entitlements nd selet Prod-SingleVM-Entitlement. Clik the Items & Approvls t, dd the Windows Server 2012 R2 - Unified lueprint to the Entitled Items list, nd lik OK. Clik Finish. 6 Clik the Ctlog t nd verify tht the lueprint is listed in the Servie Ctlog. 160 VMwre, In.

161 Chpter 14 Configure Unified Single Mhine Blueprints for Cross-Region Deployment 7 Repet this proedure to ssoite the other lueprint with its entitlement. Blueprint Nme VM Templte Reservtion Poliy Servie Ctlog Add to Entitlement Redht Enterprise Linux 6 - Unified redht6-enterprise-64 (sfo01w01v01.sfo01.rinpole.lol) Prodution- Unified-Poliy Unified Single Mhine Ctlog Prod-SingleVM- Entitlement Test the Cross-Region Deployment of the Single Mhine Blueprints The dt enter environment is now redy for the multi-site deployment of virtul mhines using vrelize Automtion. Test your environment nd onfirm the suessful provisioning of virtul mhines using the lueprints you reted to oth Region A nd Region B. Repet this proedure twie to provision virtul mhines in oth the Region A nd the Region B Compute vcenter Server instnes. Region Sn Frniso Los Angeles Compute vcenter Server sfo01w01v01.sfo01.rinpole.lol lx01w01v01.lx01.rinpole.lol 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following redentils. User nme Pssword Domin Vlue it-tenntdmin it-tenntdmin_pssword Rinpole.lol 2 Selet the Ctlog t nd selet Unified Single Mhine Ctlog from the tlog of ville servies. 3 Clik the Request utton for the Windows Server 2012 R2 - Unified lueprint. 4 Selet Sn Frniso from the Selet Region drop-down menu, nd lik Sumit. VMwre, In. 161

162 Senrios 5 Verify the request finishes suessfully. Selet the Requests t. Selet the request you sumitted nd wit severl minutes for the request to omplete. Clik the Refresh ion every few minutes until Suessful messge ppers under Sttus. d Clik View Detils. Under Sttus Detils, verify tht the virtul mhine suessfully provisioned. 6 Verify the virtul mhine provisions in the Region A vcenter Server ompute luster. Open We rowser nd go to Log in s the vcenter Server dministrtor using the following redentils. User nme Pssword Vlue dministrtor@vsphere.lol venter_dmin_pssword d Selet Home > VMs nd Templtes. In the Nvigtor pnel, expnd the vcenter Server ompute luster sfo01w01v01.sfo01.rinpole.lol > sfo01-m01d > VRM, nd verify tht the virtul mhine exists. 7 Repet the proedure for Region B. Provision virtul mhines to the Region B vcenter Server ompute luster. Verify tht the request finishes suessfully nd tht the virtul mhine is provisioned in the Region B vcenter Server ompute luster. You hve suessfully performed ross-region deployment of vrelize Automtion single mhine lueprints, nd hve provisioned virtul mhines in oth Region A nd Region B. 162 VMwre, In.