Thursday, February 17, 2011

Cloud storage

Client software for mounting cloud storage to OS as a local drive
http://www.gladinet.com/p/moreaboutDesktop.htm

Tech Wiki http://www.gladinet.com/gladwiki/moin.cgi/Install_Cloud_Desktop_2_0

Cloud storage can be from simple FTP, through Google Docs, up to EMC Atmos.

Wednesday, February 16, 2011

PowerGUI

PowerGUI is an extensible graphical administrative console for managing systems based on Windows PowerShell. These include Windows OS (XP, 2003, Vista), Exchange 2007, Operations Manager 2007 and other new systems from Microsoft. The tool allows to use the rich capabilities of Windows PowerShell in a familiar and intuitive GUI console.

Introduction to PowerGUI demo
http://www.powergui.org/shares/powergui/sbin/docs/PowerGUI_Overview/PowerGUI_Overview.html

PowerGUI Library » Virtualization
http://powergui.org/kbcategory.jspa?categoryID=290

PowerGUI and VMware vCenter Virtual Machine attributes
http://vcommunity.vizioncore.com/monitoring/vfoglight/b/weblog/archive/2011/02/07/easily-create-vfoglight-services-based-on-vcenter-custom-attributes.aspx

EATON Intelligent Power Software Suite

Eaton’s Intelligent Power® Software Suite gives you all the tools you need to monitor and manage power devices on your network, even in a virtualized environment. This innovative software solution combines the most critical applications in ensuring system uptime and data integrity: not only power monitoring and management, but also graceful shutdown during an extended power outage. Both software programs in this suite, Intelligent Power Manager and Intelligent Power Protector, can be downloaded free of charge.

http://powerquality.eaton.com/products-services/power-management/software-drivers/intelligent-pm.asp

Tuesday, February 15, 2011

GroupDrive Collaboration Suite

GroupDrive Collaboration Suite
http://webdrive.com/products/groupdrive/index.html
http://webdrive.com/products/webdrive/

Shared network disk as a service.

Monday, January 24, 2011

32 bit DSN on 64 bit Windows Server

c:\windows\SysWOW64\odbcad32.exe

Synchronize the Time Server for the Domain Controller with an External Source

Original article: Synchronize the Time Server for the Domain Controller with an External Source
Updated: March 28, 2003

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

By default, the primary domain controller (PDC) emulator gets its time from the BIOS clock. In a network with a single DC, that DC automatically has this role.

The PDC emulator establishes the time and date settings for all computers within its domain. If the time is not accurately set in the PDC emulator’s BIOS, all computers in the domain have incorrect time and date settings.

To prevent this, you can synchronize the domain controller with an external time source such as the time servers provided by the National Institute of Standards and Technology (NIST). For a list of the names and IP addresses of NIST time servers for your area, see the National Institute of Standards and Technology (NIST) Internet Time Servers link on the Web Resources page at http://www.microsoft.com/windows/reskits/webresources.

Note

* Be aware that the Network Time Protocol (NTP) is unauthenticated, and unencrypted, and it is possible for an intruder to spoof the time root source, causing the wrong time to be set on the DC. You can avoid this possibility by using IPSec to secure the transmission, by accessing the time root source by its IP address rather than its fully qualified domain name, or by purchasing an NTP-capable hardware clock for your DC time synchronization.

To synchronize the domain controller with an external time source

1. Click Start, and then click Command Prompt.

2. In the Command Prompt window, type the following line, where peers is a comma-separated list of IP addresses of the appropriate time sources, and press ENTER:
w32tm /config /manualpeerlist:peers /syncfromflags:MANUAL
The time sources you choose depend on your time zone. For example, if your domain controller is located in the Pacific Time zone, this line might read:
w32tm /config /manualpeerlist:131.107.1.10 /syncfromflags:MANUAL
In this example, the IP address of the timeserver is used instead of the fully qualified domain name for security purposes.

3. Press ENTER. You should get a message that the command completed successfully.

4. Type w32tm /config /update

5. Press ENTER. You should get a message that the command completed successfully.

W32time uses a variable poll interval based on the quality of timesync with the server. On DCs, this interval defaults to between 64 and 1024 seconds.

6. To immediately synchronize with the external time server, type w32tm /resync and press ENTER. You should get a message that the command completed successfully.

7. Type Exit and press ENTER.

=============================
BATCH FOR CZECH REPUBLIC
=============================
Here is quick batch for Czech NTP servers provided by CESNET.
 w32tm /config /manualpeerlist:"195.113.144.204 195.113.144.240" /syncfromflags:MANUAL  
 w32tm /config /update  
 w32tm /resync  


Virtual Machine - Disabling Time Synchronization 

If you are running your Active Directory domain controllers (more specifically PDC emulator) as a virtual machine in VMware vSphere another recommendation is to completely disable VM time synchronization with ESXi host. It is explained in VMware KB 1189 - Disabling Time Synchronization (1189). This will help you to mitigate the problem of Active Directory time issues after several VM operations (vMotion, snapshot, etc.) in case of ESXi host bad time. AD tolerance for time skew is 15 minutes max, at which point things start to fall over. For example during the vMotion operation, the PDC-E's time is adjusted to match the host's time (even though the "synchronize guest time with host" option is not checked on the PDC-E VM). This is a default behavior in ESX, and it should be changed as instructed in VMware KB 1189.

In a nutshell following VM configuration options has to be set to 0.

 tools.syncTime = "0"  
 time.synchronize.continue = "0"  
 time.synchronize.restore = "0"  
 time.synchronize.resume.disk = "0"  
 time.synchronize.shrink = "0"  
 time.synchronize.tools.startup = "0"  
 time.synchronize.tools.enable = "0"  
 time.synchronize.resume.host = "0"   
Note: The value of setting can be 0, false, FALSE, False. All these value have the same effect - not synchronize time after particular VM operation.

You can use following PowerCLI script to set these VM options to particular VMs.

 Clear-Host  
 $o = Add-PSSnapin VMware.VimAutomation.Core  
 $o = Set-PowerCLIConfiguration -InvalidCertificateAction Ignore -Confirm:$false  
 
 # Connect to vCenter  
 Write-Host "Connecting to vCenter ..."  
 $VC = Read-Host "Enter one vCentre Server or multiple vCenter servers delimted by comma."  
 Write-Host "Enter vCenter credentials ..."  
 $CRED = Get-Credential  
 Connect-VIServer -Server $VC -Credential $CRED -ErrorAction Stop | Out-Null  
 
 # Array of virtual machine names   
 #$vm_names = "W2K8R2-test1","W2K8R2-test2"  
 $vm_names = "W2K8R2-test"  
 
 foreach ($vm_name in $vm_names) {  
  Write-Host "VM: [$vm_name]"  
  try {  
   $vm = get-vm -Name $vm_name -ErrorAction Stop  
   New-AdvancedSetting -Entity $vm -Name tools.syncTime -Value 0 -Confirm:$false -Force:$true  
   New-AdvancedSetting -Entity $vm -Name time.synchronize.continue -Value 0 -Confirm:$false -Force:$true  
   New-AdvancedSetting -Entity $vm -Name time.synchronize.restore -Value 0 -Confirm:$false -Force:$true  
   New-AdvancedSetting -Entity $vm -Name time.synchronize.resume.disk -Value 0 -Confirm:$false -Force:$true  
   New-AdvancedSetting -Entity $vm -Name time.synchronize.shrink -Value 0 -Confirm:$false -Force:$true  
   New-AdvancedSetting -Entity $vm -Name time.synchronize.tools.startup -Value 0 -Confirm:$false -Force:$true  
   New-AdvancedSetting -Entity $vm -Name time.synchronize.tools.enable -Value 0 -Confirm:$false -Force:$true  
   New-AdvancedSetting -Entity $vm -Name time.synchronize.resume.host -Value 0 -Confirm:$false -Force:$true  
  } catch {  
   Write-Warning -Message "VM doesn't exist";  
  }  
 }  
 Disconnect-VIserver -Server $VC -Force -Confirm:$false  

Current version of PowerCLI script is available on GitHub here.

Thursday, January 06, 2011

Comparison of Cisco UCS Service profiles vs HP BladeSystem to manage user interface settings

http://www.mseanmcgee.com/wp-content/uploads/2010/08/2010-08-25-Cisco-vs.-HP-Server-Identities.jpg

PPTP VPN in FreeBSD

This post is based on article at
https://www.dan.me.uk/blog/2010/02/07/pptp-vpn-in-freebsd-for-windows-xpvista7-clients/

Here’s a simple guide to setting up a VPN server on FreeBSD so that Windows clients can connect using their built-in VPN clients…

First, make sure your ports collection is up-to-date, then build poptop in /usr/ports/net/poptop:

# cd /usr/ports/net/poptop/
# make
# make install

Next we need to create a config file for poptop… create the file /usr/local/etc/pptpd.conf as follows:

nobsdcomp
pidfile /var/run/pptpd.pid
+chapms-v2
mppe-40
mppe-128
mppe-stateless

Next we need to create a PPP configuration file called /etc/ppp/ppp.conf (overwrite the existing file) as follows (edit the IPs to suit your network requirements):

loop:
set timeout 0
set log phase chat connect lcp ipcp command
set device localhost:pptp
set dial
set login
# Server (local) IP address, Range for Clients, and Netmask
set ifaddr 192.168.31.254 192.168.31.120-192.168.31.128 255.255.255.255
set server /tmp/vpn-in-%d “” 0177

loop-in:
set timeout 0
set log phase lcp ipcp command
allow mode direct

pptp:
load loop
disable pap
disable passwdauth
disable ipv6cp
accept dns
enable MSChapV2
enable mppe
disable deflate pred1
deny deflate pred1
set device !/etc/ppp/secure

Every line above except those ending with a colon(:) should be indented or ppp.conf will not work.

Next we need to create a file called /etc/ppp/secure with the following contents:

#!/bin/sh
exec /usr/sbin/ppp -direct loop-in

And set it to be executable with chmod 0755 /etc/ppp/secure – this script will be run automatically during the VPN setup process.

Now we need to add a login for the VPN (you can have multiple username/passwords in this file) called /etc/ppp/ppp.secret like so:

user1 pass1
user2 pass2
user3 pass3

And finally set the VPN server to start on bootup automatically by adding the following into /etc/rc.conf:

pptpd_enable=”YES”

Now startup the VPN server by running:

/usr/local/etc/rc.d/pptpd start

Your VPN server is now ready on your FreeBSD server and you’re ready to configure your Windows clients to connect to it.

Sunday, November 21, 2010

VCDX BrownBags

BrownBags are a series of online webinars held using GotoMeeting and covering various VMware Certification topics. On this page you’ll find a sign-up for the live series, as well as links to past recordings.

http://professionalvmware.com/brownbags/

Open Source VMFS Driver

This driver enables read-only access to files and folders on partitions formatted with the Virtual Machine File System (VMFS). VMFS is a clustered file system that is used by the VMware ESX hosts to store virtual machines and virtual disk files.


http://code.google.com/p/vmfs/

Friday, November 05, 2010

NetApp multitenancy

NetApp’s MultiStore functionality allows storage partitioning for multiple tenants.

It supporst up to 130 vFiler instances (128 vFilers plus 2 vFiler0 instances) but only for NFS, CIFS, iSCSI, HTTP, and NDMP. Fibre Channel is not supported. You can only use Fibre Channel with vFiler0.

More info:
http://blog.scottlowe.org/2009/04/08/3010-a-multistore-primer/

Friday, October 29, 2010

VCAP-DCA and VCAP-DCD Live Lab Tutorials

http://www.linkedin.com/news?viewArticle=&articleID=239190681&gid=51214&type=news&item=239190681&articleURL=http%3A%2F%2Fwww.ntpro.nl%2Fblog%2Farchives%2F1628-VCAP-DCA-Live-Lab-Tutorial.html&urlhash=2XoB&goback=.gde_51214_news_239190681

VCAP-DCA and VCAP-DCD Live Lab Tutorials


VMware has released the VCAP-DCA and VCAP-DCD Live Lab Tutorials which can help you prepare for the actual exam.

The VCAP4-DCA is directed toward System Administrators, Consultants and Technical Support Engineers who can demonstrate their skills in VMware vSphere and VMware vCenter technologies in relation to the datacenter, as well as their knowledge of application and physical-infrastructure services and their integration with the virtual infrastructure.

http://mylearn.vmware.com/courseware/82526/VCAPDCA_Tutorial.swf

The VCAP-DCD is directed toward IT Architects and Consulting Architects who are capable of designing VMware solutions in a multi-site, large enterprise environment. They have a deep understanding both of VMware core components and their relation to storage and networking, and also of datacenter design methodologies. They also possess knowledge of applications and physical infrastructure, as well as their relationship to the virtual infrastructure.

http://mylearn.vmware.com/courseware/82525/VCAPDCD_Tutorial.swf

Wednesday, September 29, 2010

Friday, September 24, 2010

LANAMARK

Another datacenter capacity planning tool
http://www.lanamark.com/

I would like to install it and compare against Platespin Recon.

Tuesday, June 29, 2010

Removing orphaned Nexus DVS

http://frankdenneman.nl/2010/03/removing-orphaned-nexus-dvs/

NIMSOFT - flexible monitoring solution

http://www.nimsoft.com/solutions/index.php

Equinix Announces Third Sydney Data Center

Full article at
http://www.datacenterknowledge.com/archives/2010/06/28/equinix-announces-third-sydney-data-center/?utm-source=feedburner&utm-medium=feed&utm-campaign=Feed%3A+DataCenterKnowledge+%28Data+Center+Knowledge%29

How to remove Cisco Nexus 1000V plugin

This is just a copy from original post at http://malaysiavm.com/blog/how-to-remove-cisco-nexus-1000v-plugin/

--- COPY STARTS HERE ---

The Cisco Nexus 1000V switch is a pure software implementation of a Cisco Nexus switch. It resides on a server and integrates with the hypervisor to deliver VN-Link virtual machine-aware network services. The Cisco Nexus 1000V switch takes advantage of the VMware vSphere vNetwork Distributed Switch framework to offer tightly integrated network services as part of both a server virtualization strategy and a broader data center virtualization strategy. In addition, the switch provides operations and management consistency with existing Cisco Nexus and Cisco Catalyst switches.

Here I would like to share how to remove Cisco Nexus 1000V Plugin

1. To view the extension key on the vCenter Server, open an Internet Browser, and enter the URL path http://vcenter-host/mob

2. Authentication dialog box open, Enter the username and password and click OK

3. The Managed Object Browser (MOB) open the Service Instance page, in the value column of the Properties table, click Content

4. In the Value column of the Properties table, Click extensionManager OR you can open browser with URL http://localhost/mob/?moid=ExtensionManager

5. In the Methods table, click UnregisterExtension

6. In the Value of the Parameters table, paste “Cisco_Nexus_1000V_1850055053″ and click Invoke Method.


Note: The actual value of “Cisco_Nexus_1000v_xxxxx” will wary. It should match the extension key from the Cisco_nexus_1000v_extension.xml file.

Enjoy!

Saturday, March 27, 2010

VMware ESX 4 can even virtualize itself

Running VMware ESX inside a virtual machine is a great way to experiment with different configurations and features without building out a whole lab full of hardware and storage. It is pretty common to do this on VMware Workstation nowadays — the first public documentation of this process that I know of was published by Xtravirt a couple of years ago.

But what if you prefer to run ESX on ESX instead of Workstation?

Full article at:
http://www.vcritical.com/2009/05/vmware-esx-4-can-even-virtualize-itself/

Tuesday, March 16, 2010

CFM to BTU formula

Citation from: http://wiki.answers.com/Q/How_many_BTU%27s_are_in_a_CFM

A BTU is a British thermal unit, which is the measure of energy to raise one CC of water one degree Celsius.

But you probably want to know about airflow in CFM (not water), and the amount of cooling (or heating) available in 1 cfm or airflow.

In Houston, we tend to cool things more than heat. We also try to drive moisture out of the air (dehumidify), but I won't discuss that now. The general equation to answer your question is like this: Qsens = cfm * 1.08 * (Tin - Tout) <-- "delta T"

You need to determine what your "delta T" is. For cooling a space to 75degF (23.89 degC), your dT is usually 20degF (-6.67 degC) with your supply air temperature (SA=55degF 12.78degC) and your return air temperature (RA=75degF 23.89 degC). This has been idealized and simplified. For cooling, 1cfm will do about 21.6btu/h of cooling. For heating, (SA=90/32.2, RA=68, 1cfm => 23.76btu/h)

Citaton from: http://forum.onlineconversion.com/showthread.php?t=701
--------------------------------------
CFM * 1.08 * tRise = Btu/hr
--------------------------------------

General information follows.

That factor is based on standard conditions which are at sea level and A standard humidity level which i do not remember off hand. As altitude increases the factor decreases. At 2100 feet it is roughly 1.0.
The humidity also affects this number. Generally the greater the humidity the greater the factor.

1.08 Will be good enough for most applications though.

I'll give an example of the use:

Suppose the room temperature is 65.
We have a 1200 CFM blower. We measure an output temperature of 100.
100 - 65 = 35 tRise.

Now we have all the numbers to get our BUT/hr.

1200 * 1.08 * 35 = 45,360 btu/hr


This particular problem often compilments another, And that is how do we verify the CFM is as cited or measured with an anemometer.

Assuming we have electric heat and the temperature probe is not in line of site of the heating elements (to be sure we are not measuring the IR radiation) All you need to know is the power consumption. Either measure it with an amp meter. Or go with cited figure(not as accurate).


CFM = btu / (1.08 * tRise)


For reference: 1 kw/hr = 3412.14 btu


assume we have a 15kw heater and a tRise of 22

15kw * 3412.14 = 51182.12 btu

now we can solve for CFM

51182.12 / (1.08 * 22) = 2154.

In that example our result is 2,154 CFM.

If that conflicts with a suspected figure An investigation is required.

Keep in mind the factor is based on standard conditions. As a rule of thumb the result should be within 10% of the calculation. Anything out of this range is a trouble spot. Most likely to be a dirty air filter, or incorrect power factoring.

Tuesday, January 19, 2010

Storage fundamentals

Throughput part 1: The Basics
http://www.vmdamentals.com/?p=266

Throughput part 2: RAID types and segment sizes
http://www.vmdamentals.com/?p=296

RAID 10 or RAID 5

This is a common question in every storage consultation. Right answers for such questions is - It depends. Lot of people don't like RAID 5 and they have good reasons ... Look at BAARF (http://www.baarf.com/) initiative Battle Agains Any RAID Five, Four, F(T)hree. Very nice RAID5 versus RAID10 comparison is at http://www.miracleas.com/BAARF/RAID5_versus_RAID10.txt

I think that good choice depends on required performance, capacity, and data value stored on protected disks. RAID is just one type of protection and other protections should be used. Other data protections are:
  • Backup
  • Local Disk Replication (Volume Clones - Business Continous Volumes like i.e. EMC SnapView)
  • Remote Disk Replications (EMC SAN Copy, EMC SRDF, IBM Metro Mirror, etc.)

So sometimes RAID 5 or 6 makes sense.

Wednesday, December 09, 2009

Sunday, November 29, 2009

Good film about how to install PowerPath/VE

Got an excellent film about how to install PowerPath on ESX or ESXi from friends at EMC and thought it would be good to share…
http://www.youtube.com/watch?v=hDC0EQ-jM_I

Tuesday, November 24, 2009

VMware Converter - P2V

Your conversion speed will vary depending on options you select during the conversion process.

VMware converter uses two types of “cloning” methods during the P2V process:

File level cloning : Performed when you make the volume smaller then original (slowest conversion speed)

Block level cloning : Performed when you maintain or make drives larger (fastest conversion speed)


If you need to see the conversion rate use the VMware Standalone. It will now report the conversion rate as well as conversion type it is using to get your data into the virtual environment.

On my last project conversion speed varied from 144GB/Hr (or 2.4GB/min block lvl copy) to 36GB/Hr (.6GB/min file lvl copy).

Sunday, November 22, 2009

Installing dell openmanage 6.1 on esxi 4.0

This introduction was originally published at http://communities.vmware.com/thread/220783;jsessionid=BDA548B9B81DA124C2F62A75BC7775C6?start=30&tstart=0

...

Here are the exact steps for installing dell openmanage on ESXi 4.0. This is provided in their support site.

1) Download the appropriate RCLI (Remote Command Line Interface) package from http://www.vmware.com/http://www.vmware.com/support/developer/vcli/ depending on whether your system is running on Microsoft Windows or Linux.
2) Copy the Dell OpenManage bundle to a directory on your system.
3) Use the vihostupdate command. If you are using Microsoft Windows, navigate to the folder where you have installed the RCLI utilities to use this command. If you are using Linux, this command is installed when you install the RCLI RPM .
4) Execute the command vihostupdate --server -i -b
5) The command output displays a successful or a failed update.

You must enable CIM OEM providers on the VMware ESXi 4 system after installing the Dell OpenManage bundle to manage a system with Dell OpenManage Server Administrator.

Using vSphere Client to Enable CIM OEM Providers:
To enable CIM OEM providers using VMware vSphere Client, you need to have the vSphere Client tool installed. You can download and install the tool from https:// where is the IP address of the VMware ESXi 4 system.

To enable CIM OEM providers on the VMware ESXi 4 system using vSphere Client:
1) Log on to the VMware ESXi 4 system in which vSphere Client is installed.
2) Click the Configuration tab.
3) Under the Software section on the left side, click Advanced Settings.
4) In the Advanced Settings dialog box, click “UserVars” on the left pane.
5) Change the value of the “CIMOEMProvidersEnabled” field to 1.
6) Click OK.
7) Restart your system for the change to take effect. Use the Summary tab in vSphere Client to restart the system.

Wednesday, November 11, 2009

vCenter and MSSQL

To prepare a SQL Server database to work with vCenter Server, you generally need to create a SQL Server database user with database operator (DBO) rights. When you do this, make sure that the database user login has the db_owner fixed database role on the vCenter Server database and on the MSDB database. The db_owner role on the MSDB database is required for installation and upgrade only, and you can revoke it after installation.

If you are using SQL 2008, make sure you go to the “CMD” line and change the default ODBC from 32 to 64 Bit

Should read: If you are using Windows 2008 64 bit OS and vCenter with SQL, launch the 32 bit ODBC connector.

Create a 32-Bit DSN on a 64-Bit Operating System
You can install or upgrade to vCenter Server on both 32-bit and 64-bit operating systems.
Even though vCenter Server is supported on 64-bit operating systems, the vCenter Server system must have
a 32-bit DSN. This requirement applies to all supported databases. By default, any DSN created on a 64-bit
system is 64 bit.
Procedure
1 Install the ODBC drivers.
n For Microsoft SQL Server database servers, install the 64-bit database ODBC drivers on your Microsoft
Windows system. When you install the 64-bit drivers, the 32-bit drivers are installed automatically.
n For Oracle database servers, install the 32-bit database ODBC drivers on your Microsoft Windows
system.
NOTE The default install location on 64-bit operating systems is C:\VMware.
2 Run the 32-bit ODBC Administrator application, located at [WindowsDir]\SysWOW64\odbcad32.exe.
3 Use the application to create your DSN.
You now have a DSN that is compatible with vCenter Server. When the vCenter Server installer prompts you
for a DSN, select the 32-bit DSN.

Tuesday, November 10, 2009

vSphere 4 Default and CTRL-ALT-DEL

If you hit CTRL-ALT-DEL on ESX 4 console, the server will reboot even if there are running VMs and it doesn't matter if the server is not in Maintenance Mode.

To disable this yourself:

1. Edit /etc/inittab. Any text editors will do- I like nano but vi works just as well.
2. Search for "CTRL-ALT-DELETE" or "ctrlaltdel"
3. Comment out the line "ca::ctrlaltdel:/sbin/shutdown -t3 -r now" with a # symbol.
It should look like:
# Trap CTRL-ALT-DELETE

# ca::ctrlaltdel:/sbin/shutdown -t3 -r now

4. Save and exit the file.
5. To make this take effect without a reboot, run the command:

init q

Tuesday, October 27, 2009

VMware vSwitch and Cisco switch configuration

These are field configurations that have been in-use for years and have their origin from both VMware and Cisco Best Practice documents regarding VMware integration. We use these configurations as reference when working with customer’s network teams in setting up any new Cisco network equipment for VMware.

Standard trunk port Best Practice switchport configuration:

interface GigabitEthernet#/#
description <<** ESX Host #/# **>>
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,#,#,#
switchport mode trunk
switchport nonegotiate
spanning-tree portfast trunk
exit

Standard ether-channel Best Practice switchport configuration:

IMPORTANT NOTE: Etherchannel is only applicable if all the interfaces bound to the channel are going to the same physical switch OR that all of the interfaces are going to different physical switches which are stacked together (with an actual stacking cable, not an ISL.) If you are running these interfaces to two separate network switches, you cannot Etherchannel them and they should be configured as above rather than the example below.

interface port-channel #
description <<** ESX EC# **>>
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,#,#,#
switchport mode trunk
interface GigabitEthernet#/#
description <<** EC#/INT# **>>
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,#,#,#
switchport mode trunk
channel-group # mode on
interface GigabitEthernet#/#
description <<** EC#/INT# **>>
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,#,#,#
switchport mode trunk
channel-group # mode on
exit

NOTE: It is also worth mentioning that it is assumed the member ports (those with channel-group # mode on as above) will inherit their configuration from the channel-group but it is sometimes necessary to replicate that configuration to their individual switchport configurations as above.

Capacity Planning Tools

Platespin Recon
VMware Capacity Planner
CIRBA
LANAMARK

Monday, October 19, 2009

FreeBSD and multiple gateways

Question: How to add multiple gateways to a FreeBSD?
Answer: No you can not do this (at least directly) on FreeBSD. FreeBSD don't support multiple gateways.
Workaround solution: If you have a server with 2 set of IPs and each set have there own gateway.

  • First, you must select one of the gateway to be a default gateway.
  • Then, You need ipfw (or any FreeBSD firewall solution),
    Check that your kernel support ipfw, if not, recompile your kernel with the following options(IPDIVERT and DUMMYNET is not required, but if you add IPFW/IPFW2 it better to also add these two options)
    #Firewall & NAT & DummyNet 
    options IPFIREWALL
    options IPDIVERT
    options IPFIREWALL_DEFAULT_TO_ACCEPT
    options IPFIREWALL_VERBOSE
    options IPFIREWALL_VERBOSE_LIMIT=100
    options DUMMYNET
    options IPFW2
    add the following rule to your ipfw rules set.
     ipfw add rule_no fwd second_gateyway_ip ip from ip_of_this_gateway to not me
    For example, I have 2 ip set (10.0.0.100,10.0.0.101,10.0.0.102 for gateway 10.0.0.254) and (192.168.0.77,192.168.0.78 for gateways 192.168.0.254). I chose 10.0.0.254 as the default gateway. So, my ipfw rules are
     ipfw add 100 fwd 192.168.0.254 ip from 192.168.0.77 to not me
    ipfw add 110 fwd 192.168.0.254 ip from 192.168.0.78 to not me
Source: http://freebie.miraclenet.co.th/server/

Thursday, October 08, 2009

Články o administraci CISCO switchů

http://www.samuraj-cz.com/clanky-kategorie/cisco-admin/

Článek o konfiguraci CISCO a ESX teamingu
http://www.samuraj-cz.com/clanek/vmware-esxi-a-nic-teaming-aneb-pripojeni-pres-vice-sitovek/

Thursday, September 24, 2009

Configure BIND DNS to Answer Active Directory Queries

How to configure BIND DNS to Answer Active Directory Queries ...
http://www.linuxquestions.org/linux/answers/Networking/Configure_BIND_DNS_to_Answer_Active_Directory_Queries

Quick Setup:
If you have an Address Record (A) that identifies your server name like this:

dc1.example.com. A 111.222.333.444

Then your SRV records for this DC would be as follows

_ldap._tcp.example.com. SRV 0 0 389 dc1.example.com.
_kerberos._tcp.example.com. SRV 0 0 88 dc1.example.com.
_ldap._tcp.dc._msdcs.example.com. SRV 0 0 389 dc1.example.com.
_kerberos._tcp.dc._msdcs.example.com. SRV 0 0 88 dc1.example.com.

Tuesday, September 01, 2009

HA “Deepdive”

Article at http://www.yellow-bricks.com/vmware-high-availability-deepdiv/ very deeply describe VMware HA functionality.

Article clearly explains:
  • Primary and Secondary nodes
  • Isolation Response
  • Slot sizes/Admission Control
  • Advanced settings

Thursday, July 02, 2009

A “Multivendor Post” to help our mutual iSCSI customers using VMware

Very nice article explaining iSCSI in ESX environment
http://virtualgeek.typepad.com/virtual_geek/2009/01/a-multivendor-post-to-help-our-mutual-iscsi-customers-using-vmware.html

Platespin Recon 3.6 - bugs and issues

Platespin Recon 3.6 have big issues with hardware inventory of some servers. It can hang your server during CPU model checking!!! Platespin released hotfix for that. But that's not all. When you use database PostgreSQL 8.3 which is bundled with Recon it has significant performance issues. I was waiting for some reports several hours!!! I have troubleshooted and realized that there is some problem with SQL communication between Plaspin Recon application server and PostgreSQL. You can find error messages in PostgreSQL log file. It says something about abnormal client termination. If you use MS SQL Server it works like a sharm.

MS Windows Virtual Memory Management on consolidated virtual workloads

When you virtualize lot of MS Window workloads you can observe lot of "Memory Pages/s" from virtual machines to physical disk subsystem (system swaping inactive memory pages to hard drive) . If you haven't enough IO performance in your storage your virtual machines becomes slow. For virtualization is normaly used SAN environment. Don't forget design capacity and performance on your storage for page files. If you want to tune your MS Windows and optimize page file IOs to your storage try disable (if you have enough RAM) or optimize Windows Page File.

Articles about this topic:
http://www.techarp.com/showarticle.aspx?artno=143
http://www.petri.co.il/pagefile_optimization.htm
http://www.instantfundas.com/2008/07/disable-windows-page-file-save-your.html
http://www.windowsdevcenter.com/pub/a/windows/2004/04/27/pagefile.html
http://smallvoid.com/article/windows-page-file.html

Tuesday, June 23, 2009

PERL Getopt and GetOptions

When you code unix program first of all you need to get user options. Two Perl modules (Getopt and Getoptions::Long) work to extract program flags and arguments much like Getopt and Getopts do for shell programming. The Perl modules, especially GetOptions::Long, are much more powerful and flexible.

See full article at http://aplawrence.com/Unix/perlgetopts.html

Ultimate Deployment Appliance

Unattended OS installations (Windows, Linux, ESX, Solaris) over the network set-up in minutes! Look at http://www.ultimatedeployment.org/

Thursday, May 14, 2009

How to shutdown windows from linux

If you have samba you can use "net rpc SHUTDOWN -C "some comment here" -f -I x.x.x.x -U user_name%password"

Saturday, May 09, 2009

How to copy (backup) files from ESX3i?

You can use RCLI and vifs command. More info at
http://www.vm-help.com/esx/esx3i/esx_3i_rcli/vifs.php

Examples:
List files in datastore directory:
vifs --server 192.168.4.4 --username root --password ***** --dir "[Datastore1]/win2k3"

Download file from ESX3i Datastore:
vifs --server 192.168.4.4 --username root --dc ha-datacenter --password ***** --get "[Datastore1] /win2k3/win2k3-flat.vmdk" my-clone.vmdk

Notes:
File write speed around 1MBps only

Saturday, March 14, 2009

On demand VNC server with GDM

Each user can login (via ssh) to *nix server and start vncserver. Then he can login to X11 desktop via VNC viewer with defined vnc password. But it's far far away from nice solution. Much better solution is to setup vncserver as xinetd service.

First of all you have to define new service in particular port. Add line bellow into /etc/services
vnc1024         5901/tcp                        # VNC & GDM
now create service description for xinetd. Go to directory /etc/xinetd.d
cd /etc/xinetd.d
and create file vnc1024
service vnc1024
{
disable = no
socket_type = stream
protocol = tcp
wait = no
user = nobody
server = /usr/bin/Xvnc
server_args = -inetd -query localhost -geometry 1024x800 -depth 16 -once -fp unix/:7100 -securitytypes=none
}
Move to runlevel 3
init 3
Restart xinetd
/etc/init.d/xinetd
Move back to runlevel 5
init 5
And that's it. Now try connect via VNCviewer to port 6901

Wednesday, February 18, 2009

DR & BC of virtualized datacenters

Virtualization significantly helps to implement Disaster Recovery and Business Continuity scenarios. But some one can think that he can install VMware SRM software and DR&BC solution is ready. It's common mistake. VMware SRM is just arround 5% of DR&BC solution. You have to concider right technology and proper proceses with respect of your particular environment. Right technology means storage replications, network high availabaility across datacenters, automation, etc.

Nice article about VMware implementation conciderations is at http://searchvmware.techtarget.com/tip/0,289483,sid179_gci1347066_mem1,00.html?track=NL-915&ad=689280&asrc=EM_NLN_5870851

Tuesday, February 17, 2009

Configuration Point-to-Point OpenVPN link

I like OpenVPN because it's simple and it does what you need - VPN.

Let's assume that we have two un*x like servers with OpenVPN software and regular OS user openvpn in group openvpn. One server has IP address 192.168.4.10 and second 192.168.4.100.

In server 192.168.4.10 use following configuration file (openvpn.conf):
remote 192.168.4.100
ifconfig 10.0.0.1 10.0.0.2
dev tun0
port 5001
proto udp
secret /usr/local/etc/openvpn/secret.key
ping 10
comp-lzo
verb 5
mute 10
user openvpn
group openvpn

In server 192.168.4.100 use following configuration file (openvpn.conf):
remote 192.168.4.10
ifconfig 10.0.0.2 10.0.0.1
dev tun0
port 5001
proto udp
secret /usr/local/etc/openvpn/secret.key
ping 10
comp-lzo
verb 5
mute 10
user openvpn
group openvpn

In one of this two servers create secret.key by issuing following command:
openvpn --genkey --secret /usr/local/etc/openvpn/secret.key

Finaly:
Somehow (for example scp) copy secret key to second server into correct location and run openvpn daemons on both servers. On servers new network interface appears (tap) with IP addresses (10.0.0.1 and 10.0.0.2) and you can ping these 10.0.0.1-2 IP addresses over secure VPN link.

Here we go.