VMware vsphere. Administration VMware Inc. All rights reserved

Transcription

1 VMware vsphere Administration 2010 VMware Inc. All rights reserved

2 Permissions Privileges Hierarchical by category Roles Defined set of one or more privileges System and sample roles provided Privileges customizable in a role Permissions Apply role to user/group and inventory object Users in groups inherit roles Windows group permissions override user S-2

3 Default Roles Role Role Type Attempted Action No Access System Cannot view or change assigned object vsphere Client tabs associated with object appear without content Default role for all users except users in Administrators group Read Only System Can view the state and details of assigned object Can view all tab panels in vsphere Client except Console tab Cannot perform any actions through menus or toolbars Administrator System All privileges for all objects Add, remove, and set access rights and privileges for all vcenter users and all virtual objects in VMware vsphere inventory Default role for all members in Administrators group Resource Pool Administrator Sample A set of privileges to allow user to create child resource pools but not modify parent All privileges for folder, VM, alarms, and scheduled task privileges groups Select privileges for global items, datastore, resource, and permissions privileges groups No privileges for datacenter, network, host, sessions, or performance privileges groups Usually granted on a cluster or resource pool Role is available only through VMware vcenter Server (not directly with VMware ESX /ESXi) S-3

4 Default Roles Role Role Type Attempted Action Virtual Machine Power User Virtual Machine User Sample Sample A set of privileges to allow interaction with VMs Interact with VMs (console, insert media) and change most VM settings Perform actions on VMs and resource objects, including VM snapshots All privileges for scheduled task privileges groups Select privileges for global items, datastore, and VMs privileges groups No privileges for folder, datacenter, network, host, resource, alarms, sessions, performance, and permissions privileges groups Usually granted on a folder that contains VMs or on individual VMs Role is available only through vcenter Server (not directly with ESX/ESXi) A set of privileges to allow basic interaction with a VM Interact with VMs (console, insert media), but cannot change VM settings All privileges for scheduled task privileges groups Select privileges for global items and VMs privileges groups No privileges for folder, datacenter, datastore, network, host, resource, alarms, sessions, performance, and permissions privileges groups Usually granted on a folder that contains VMs or on individual VMs Role is available only through vcenter Server (not directly with ESX/ESXi) S-4

5 Default Roles Role Role Type Attempted Action VMware Consolidated Backup User Datastore Consumer Network Consumer Sample Sample Sample Role for use by VMware Consolidated Backup (VCB) and should not be modified Privileges necessary to facilitate a VCB backup (file or VM level) of a VM Role is available only through VMware vcenter Server (not directly with ESX/ ESXi) A set of privileges to allow a user to consume space on specified datastores Ability to allocate space on a datastore to a VM (for example, to create a virtual disk or VM snapshot) Role is available only through vcenter Server (not directly with ESX/ESXi) User must also have appropriate VM privileges as necessary A set of privileges to allow a user to assign VMs or hosts to networks Right to assign network to VM, ESX host service console, or VM kernel network connections Role is available only through vcenter Server (not directly with ESX/ESXi) User must also have appropriate VM privileges as necessary S-5

6 Scheduled Tasks vcenter Activities Change power state of VM Clone a VM Deploy a VM Migrate a VM Create a VM Initiate a VM snapshot Add host Change power state of host Change resource settings of resource pool or VM Check compliance of a Host Profile Enable/Disable DPM (vsphere 4.1) Run once in future or recurring Requires vcenter Server S-6

7 Scheduled Tasks vcenter Options and Plug-Ins Host Profiles Check compliance Update Manager Scan for updates Remediate Converter Import a machine Run once in future or recurring Requires vcenter Server S-7

8 Monitoring Tasks and Events (History) User initiated System: info, warning, error Requires vcenter Server S-8

9 Monitoring Alarms Triggers Condition or state (VM, host, datastore) - is equal to or is not equal to - is above or is below Event (vcenter objects) Trigger thresholds Normal green Warning yellow Alert red Requires vcenter Server S-9

10 Monitoring Alarm Actions Send a notification via SMTP or SNMP notification trap Run a command/script (on vcenter Server) Enter/exit maintenance/standby mode for host Power on/off/reset, suspend/resume, reboot/shutdown guest, or migrate VM Requires vcenter Server S-10

11 Monitoring Performance Charts CPU, disk, memory, network, system Real-time, past day, week, month, year, custom By VM, host, cluster, management agent S-11

12 Maps Inventory Maps Hosts VMs Networks Datastores Fault Tolerance relationships VMware Motion Resource Maps Per VM Requires vcenter Server S-12

13 Storage Management Monitoring Capacity Storage Views vcenter plug-in Datastore disk overallocation alarm Adding Storage VMFS volume grow Requires growing LUN first Add VMFS extent S-13

14 Storage Management New vsphere 4.1 Statistics Inventory Object Per Component Statistic FC/NFS/ iscsi vcenter Server ESXtop Host Datastore Throughput, latency All Storage adapter Throughput, latency FC Already in vsphere 4.0 Storage path Throughput, latency FC Already in vsphere 4.0 LUN Throughput, latency FC, iscsi Already in vsphere 4.0 Already in vsphere 4.0 VM Datastore Throughput, latency All VMDK Throughput, latency All Not available yet: Aggregation at cluster level in vcenter (possible through APIs) ESXtop publishes throughput and latency for LUN; if datastore has only one LUN, then LUN is equal to datastore S-14

15 Host Profiles Configuration Policies Memory reservation Storage Network Date and time Firewall Security Services User/user group Enforcement Compliance check Remediation Requires vcenter Server S-15

16 vcenter Plugin Update Manager Release and Patch Management Hosts Releases and patches VMs/Virtual Appliances Virtual hardware version VMware Tools Third party updates - Guest OS - Applications Components VUM Download Service VUM Update Service S-16

17 vcenter Plugin Update Manager Release and Patch Management Steps Create baseline Scan for compliance Remediate Hosts - Upgrade support starting with ESX 3.x and ESXi 3.5 hosts - Hosts placed into maintenance mode - Works in conjunction with DRS to prevent VM downtime VMs and Virtual Appliances - VMs can be running or powered off/suspended - VM snapshot can be taken prior to remediation S-17

18 ESXi Scripted Installation (vsphere 4.1 only) Scripted Installation Numerous choices for installation Installer booted from - CD-ROM (default) - Preboot Execution Environment (PXE) ESXi Installation image on - CD-ROM (default), HTTP, HTTPS, FTP, NFS Script can be stored and accessed - Within the ESXi Installer ramdisk (default) - On the installation CD-ROM - HTTP, HTTPS, FTP, NFS Configuration script (ks.cfg) can include other scripts - Preinstall - Postinstall - First boot S-18

19 Tech Support Mode (vsphere 4.1) SSH Capable with Active Directory Authentication Tech Support Timeout Automatic logout after a defined period of inactivity Recommended Uses Support, troubleshooting, and break-fix Scripted deployment preinstall, postinstall, and first boot scripts Can enable in vcenter or DCUI Discouraged Uses Any other scripts Running commands/scripts periodically (cron jobs) Leaving open for routine access or permanent SSH connection S-19

20 Active Directory Support (Improved in vsphere 4.1) Provides Authentication for All Local Services vsphere Client Other access based on vsphere API DCUI Tech Support Mode (local and remote) Has Nominal Active Directory Groups Functionality Members of ESX Admins AD group have Administrative privilege Administrative privilege includes Full Administrative role in vsphere Client and vsphere API clients DCUI access Tech Support Mode access (local and remote) S-20

21 Troubleshooting System Logs Administration panel > System Logs vcenter Service Status Administration panel > vcenter Service Status S-21

22 VMware Technical Support Resources VMware.com Documentation Release notes Detailed guides Compatibility and support Discussion forums and search Knowledge base Technical papers Downloads Support Log a Support Request (SR) case at S-22

23 VMware Knowledge Resources VMware Professional Services Consulting Services Education Services Technical Account Management (TAM) Program VMware Partner Network VMware Accredited Delivery Partners VMware Community VMware User Groups (VMUG) S-23