Documentos de Académico
Documentos de Profesional
Documentos de Cultura
Module 5
Course Introduction Introduction to Virtualization Virtual Machines VMware vCenter Server Configure and Manage Virtual Networks Configure and Manage Virtual Storage Managing Virtual Machines
Data Protection Access & Authentication Control Resource Management and Monitoring High Availability Scalability Patch Management Installing vSphere Components
5-2
2011 VMware Inc. All rights reserved
Importance
VMware ESXi networking features allow virtual machines to communicate with other virtual and physical machines, allow management of the ESXi host, and allow the VMkernel to access IPbased storage and perform VMware vSphere vMotion migrations. Failure to properly configure ESXi networking can negatively affect virtual machine management and storage operation.
5-3
2011 VMware Inc. All rights reserved
Module Lessons
Lesson 1: Lesson 2:
5-4
2011 VMware Inc. All rights reserved
5-5
2011 VMware Inc. All rights reserved
Learner Objectives
After this lesson, you should be able to do the following: Define a virtual network. Describe a virtual switch. Describe the virtual switch connection types. Describe the components of a vNetwork standard switch. Create a vNetwork standard switch.
5-6
2011 VMware Inc. All rights reserved
Directs network traffic between virtual machines and links to external networks. Combines the bandwidth of multiple network adapters and balances traffic among them. It can also handle physical network interface card (NIC) failover. Models a physical Ethernet switch:
Physical NIC
A virtual machines NIC can connect to a port. Each uplink adapter uses one port.
5-7
External World
For example, for IP storage or vMotion migration For the ESXi management network
5-8
2011 VMware Inc. All rights reserved
5-9
2011 VMware Inc. All rights reserved
A virtual network supports two types of virtual switches: vNetwork standard switches:
Virtual switch configuration for a single host Discussed in this module Virtual switches that provide a consistent network configuration for virtual machines as they migrate across multiple hosts
5-10
2011 VMware Inc. All rights reserved
5-11
2011 VMware Inc. All rights reserved
5-12
2011 VMware Inc. All rights reserved
5-13
2011 VMware Inc. All rights reserved
5-14
2011 VMware Inc. All rights reserved
VLANs
ESXi supports 802.1Q VLAN tagging. Virtual switch tagging is one of three tagging policies supported. Packets from a virtual machine are tagged as they exit the virtual switch. Packets are untagged as they return to the virtual machine. Affect on performance is minimal. ESXi provides VLAN support by giving a port group a VLAN ID
5-15
2011 VMware Inc. All rights reserved
Discuss VMware vSphere networking needs with your network administration team. Discuss the following issues: Number of physical switches Network bandwidth required Physical switch support for 802.3AD (for NIC teaming) Physical switch support for 802.1Q (for VLAN trunking) Network port security Cisco Discovery Protocol (CDP) and its operational modes: listen, broadcast, listen and broadcast, and disabled.
5-16
2011 VMware Inc. All rights reserved
Lab 6
In this lab, you will create a standard virtual switch and port group. 1. View the current standard virtual switch configuration. 2. Create a standard virtual switch with a virtual machine port group. 3. Attach your virtual machine to a virtual switch port group.
5-17
2011 VMware Inc. All rights reserved
You should be able to do the following: Define a virtual network. Describe a virtual switch. Describe the virtual switch connection types. Describe the components of a vNetwork standard switch. Create a vNetwork standard switch.
5-18
2011 VMware Inc. All rights reserved
5-19
2011 VMware Inc. All rights reserved
Learner Objectives
After this lesson, you should be able to do the following: Describe the security properties of a standard virtual switch port group:
5-20
2011 VMware Inc. All rights reserved
Network Policies
Three network policies: Security Traffic shaping NIC teaming Policies are defined: At the standard virtual switch level:
Default policies for all the ports on the standard virtual switch Effective policies: Policies defined at this level override the default policies set at the standard virtual switch level.
5-21
2011 VMware Inc. All rights reserved
Security Policy
Administrators can configure layer 2 Ethernet security options at the standard virtual switch and at the port groups.
5-22
2011 VMware Inc. All rights reserved
Traffic-Shaping Policy
Network traffic shaping is a mechanism for controlling a virtual machines network bandwidth. Average rate, peak rate, and burst size are configurable.
5-23
2011 VMware Inc. All rights reserved
Traffic shaping is disabled by default. Parameters apply to each virtual NIC in the standard virtual switch. On a standard switch, traffic shaping controls outbound traffic only.
5-24
2011 VMware Inc. All rights reserved
NIC Teaming settings: Load Balancing (outbound only) Network Failure Detection Notify Switches Failback Failover Order
5-25
2011 VMware Inc. All rights reserved
Virtual switch
Virtual NICs
VMware vSphere 5.0: Install, Configure, Manage Revision A
Physical NICs
5-26
2011 VMware Inc. All rights reserved
Internet
Virtual switch
Physical switch
Virtual NICs
Physical NICs
5-27
2011 VMware Inc. All rights reserved
Internet
Virtual switch
Physical switch
Virtual NICs
Physical NICs
5-28
2011 VMware Inc. All rights reserved
You should be able to do the following: Describe the security properties of a standard virtual switch port group:
5-30
2011 VMware Inc. All rights reserved
Key Points
There are two connection types on a virtual switch: virtual machine and VMkernel. A standard virtual switch is a virtual switch configuration for a single host. Network policies set at the standard virtual switch level can be overridden at the port group level.
5-31
2011 VMware Inc. All rights reserved