book

VMware vSphere 4 Administration: Instant Reference

Name: VMware vSphere 4 Administration: Instant Reference
ISBN: 9780470520727

by Scott Lowe, Jason W. McCarty, Matthew K. Johnson

December 2009

Intermediate to advanced

432 pages

8h 50m

English

Sybex

Read now

Unlock full access

Copyright
Dear Reader,
Acknowledgments
About the Authors
Introduction
What Is Covered in This BookWho Should Buy This BookHow to Contact the Authors
I. Building a VMware vSphere Environment
1. Introduction to vSphere
1.1. Understand the Legacy Features of vSphere1.1.1. VMotion1.1.2. VMware Cluster1.1.3. Distributed Resource Scheduler1.1.4. High Availability1.1.5. VMware vCenter Converter1.1.6. VMware vCenter Update Manager1.1.7. VMware Capacity Planner1.1.8. VMware Consolidated Backup1.1.9. vSphere Client1.1.10. VMware Service Console1.1.11. vSphere Web Access1.2. Understand the New Features of vSphere1.2.1. 64 Bit1.2.2. Distributed Power Management1.2.3. Enhanced VMotion Compatibility1.2.4. Enhanced Storage VMotion1.2.5. Enhanced High Availability1.2.6. Virtual Machine Scalability1.2.7. vCenter Improvements1.2.8. Fault Tolerance1.2.9. vNetwork Distributed Switch1.2.10. Host Profiles1.2.11. vCenter Linked Mode1.2.12. Virtual Disk Thin Provisioning1.2.13. VMkernel Protection1.2.14. VMware vShield Zones1.2.15. VMware Data Recovery
2. Installing and Configuring ESX and ESXi
2.1. Prepare for Installation2.1.1. Identify Hardware Requirements2.1.2. Partitioning and Sizing2.2. Install ESX and ESXi in Graphical Mode2.2.1. Install the ESX GUI2.2.2. Install the ESXi GUI2.2.2.1. Set Up DNS and Routing2.2.2.2. Change IP Address to Static from DHCP2.2.2.3. Change the ESXi Root Password2.2.2.4. ESXi Licensing2.3. Install ESX Text Mode2.3.1. Navigate Text Mode2.4. Perform a Scripted Installation Using a USB Device2.4.1. Identify the USB Device2.4.2. Format the USB Key2.5. Postinstallation Configurations2.5.1. Configure Network Time Protocol2.5.2. Configure the Firewall2.5.3. Configure the Service Console2.5.3.1. Service Console Memory2.5.3.2. Service Console Networking2.5.3.3. Elevate Privileges to Root Access2.5.3.4. Create an Account with SSH Access2.5.3.5. Permit Root Access via SSH (puTTy)2.5.4. Configure Active Directory Authentication2.5.4.1. vSphere Client Installation for ESX or ESXi
3. Installing and Configuring vCenter Server
3.1. Prepare for Installation3.1.1. Identify Hardware Requirements3.1.2. Identify Operating System Requirements for vCenter Server and vSphere Client3.1.3. Identify Database Requirements3.1.4. Identify Networking Requirements3.1.5. Identify Authentication Requirements3.2. Install a Database3.2.1. Create a vCenter Database in Microsoft SQL Server 20053.2.2. Create a vCenter Database in Oracle3.3. Install vCenter Server3.3.1. Prepare for Installation3.3.2. Install vCenter Server3.3.3. Install Additional Components3.3.3.1. Install vCenter Guided Consolidation3.3.3.2. Install vCenter Converter Enterprise3.3.3.3. Install vCenter Update Manager3.4. Install vSphere Client3.5. Configure vCenter3.5.1. Connect to vCenter Server3.5.2. Install Plug-ins in vSphere Client3.5.3. Configure Advanced vCenter Server Settings3.5.4. Create a Datacenter3.5.5. Add a Cluster3.5.5.1. Configure VMware DRS3.5.5.2. Configure VMware HA3.5.6. Add a Host
4. Understanding Licensing
4.1. Become Familiar with VMware Licensing4.1.1. Review the Versions of vSphere4.1.2. Review the Licensing Method in vSphere4.1.3. Review Licensing of Legacy ESX Hosts4.2. Manage Licenses4.2.1. Install Licenses4.2.2. Assign Licenses4.2.3. Remove Licenses4.2.4. Change Licenses Assigned to Assets4.2.5. Install Licenses for Legacy Hosts4.3. Review Installed Licenses4.3.1. View Licenses by Product4.3.2. View Licenses by License Key4.3.3. View Licenses by Asset

5. Upgrading from VI3 to vSphere
5.1. Prepare for the Upgrade5.2. Upgrade vCenter Server5.2.1. Upgrade to vCenter Server 4.0 on the Same System5.2.2. Upgrade to vCenter Server 4.0 on a Different System5.2.3. Perform Postupgrade Tasks5.2.3.1. Upgrade Additional vCenter Modules5.2.3.2. Upgrade vSphere Client5.2.3.3. Verify License Settings5.3. Upgrade ESX/ESXi Hosts5.3.1. Upgrade ESX/ESXi Using vCenter Update Manager5.3.2. Perform a Manual In-Place Upgrade5.3.3. Upgrade with a Fresh ESX/ESXi Installation5.4. Perform Postupgrade Tasks5.4.1. Upgrade VMware Tools5.4.2. Upgrade Virtual Machine Hardware
II. Configuring Your vSphere Environment
6. Creating and Managing Virtual Networking
6.1. Understand the Basics6.1.1. Work with Virtual Switches6.1.2. Understand Network Services6.1.3. Use NIC Teaming6.1.4. Configure VLANs6.1.5. Use VLAN Tagging6.1.6. View Networking Configuration and Network Adapter Information6.2. Network with vSwitches6.2.1. NIC Team the Service Console6.2.2. Assign Static IP Addresses for the Service Console6.2.3. Create a vSwitch for Virtual Machine Networking6.2.3.1. Network Labels6.2.3.2. Port Groups6.2.3.3. Add a VMkernel and Enable VMotion6.3. Network with vNetwork Distributed Switches6.3.1. Configure a vNetwork Distributed Switch6.3.2. Add Additional Hosts and Adapters to a DVS6.3.3. Edit General and Advanced DVS Settings6.3.4. Manage Physical and Virtual Network Adapters6.3.4.1. Manage Physical Network Adapters6.3.4.2. Managing Virtual Network Adapters6.3.5. Migrate Existing Virtual Adapters into DVS6.3.6. Add a dvPort Group6.3.7. Edit a dvPort Group6.3.8. Create a Private VLAN6.3.9. Migrate VMs to a DVS6.4. Understand Advanced Networking6.4.1. Customize MAC Addresses6.4.2. Create a VMkernel Port for Software iSCSI6.4.3. Configure a Service Console Connection for Software iSCSI6.4.4. Troubleshoot Using the Command Line6.4.5. Enable Cisco Discovery Protocol6.4.6. Enable IPv6
7. Configuring and Managing Storage
7.1. Become Familiar with Storage Concepts7.1.1. Learn the Basics of Storage in vSphere7.1.2. Learn the Types of Supported Storage7.1.3. Learn the Benefits of Remote Storage7.2. Implement Storage7.2.1. Configure Fibre Channel SAN Storage7.2.1.1. Connect Fibre Channel Storage to an ESX or ESXi Host7.2.1.2. Manage Fibre Channel Storage on an ESX or ESXi Host7.2.1.2.1. Modify the LUN Scanning Parameters7.2.1.2.2. Rescan Storage Adapters7.2.1.2.3. Review and Configure Device Paths7.2.1.2.4. Create a New FC VMFS Datastore7.2.1.3. Configure NPIV for Virtual Machines7.2.2. Configure iSCSI SAN Storage7.2.2.1. Become Familiar with ESX/ESXi iSCSI SAN Requirements7.2.2.2. Configure Hardware iSCSI Initiators if Present7.2.2.2.1. Modify iSCSI Name and IP Information7.2.2.3. Configure Software iSCSI Initiators7.2.2.3.1. Create a VMkernel Port for Software iSCSI7.2.2.3.2. Configure Software iSCSI with Multipathing7.2.2.3.3. Configure iSCSI Targets for VMFS Datastores7.2.2.3.4. Configure CHAP Authentication7.2.2.3.5. Set Up Per-Discovery and Per-Target CHAP Credentials7.2.2.3.6. Create a New iSCSI VMFS Datastore7.2.3. Configure NFS Storage7.2.3.1. Configure NFS Storage with ESX and ESXI7.2.3.1.1. Create a VMkernel Port to Connect to NFS Storage7.2.3.1.2. Attach a NFS Mount as a Datastore
8. High Availability and Business Continuity
8.1. Minimize Planned Downtime8.1.1. Configure and Use VMotion8.1.1.1. Configure an ESX/ESXi Host for VMotion8.1.1.2. Use VMotion to Migrate a Virtual Machine8.1.1.3. Troubleshooting VMotion8.1.2. Migrate Virtual Disks with Storage VMotion8.1.2.1. Troubleshooting Storage VMotion8.2. Protect Against Host Failure8.2.1. Set Up VMware High Availability8.2.1.1. Enabling VMware HA on a Cluster8.2.1.2. Configuring VMware HA Failover and Capacity Settings8.2.1.3. Setting VM Restart Priority and Isolation Response8.2.1.4. Setting Advanced Options for VMware HA8.2.1.5. Troubleshooting VMware HA8.2.2. Set Up VMware Fault Tolerance8.2.2.1. Examining VMware FT Requirements8.2.2.2. Configuring an ESX/ESXi Host for VMware FT8.2.2.3. Enabling VMware FT for a Virtual Machine8.2.2.4. Troubleshooting VMware FT8.3. Guard Against VM Failure8.3.1. Enable VM Monitoring8.3.2. Install and Use VMware Consolidated Backup8.3.2.1. Understanding VCB Backup Modes8.3.2.2. Configuring Windows for VCB8.3.2.3. Configuring the Storage Area Network for VCB8.3.2.4. Verifying Network Connectivity8.3.2.5. Installing VCB8.3.2.6. Using VCB with Your Third-Party Backup Product
9. Managing Virtual Machines
9.1. Create Virtual Machines9.1.1. Create a New Virtual Machine9.1.2. Clone an Existing Virtual Machine9.1.3. Deploy a Virtual Machine from a Template9.1.4. Create a Template9.1.4.1. Convert an Existing Virtual Machine to a Template9.1.4.2. Clone an Existing Virtual Machine to a Template9.2. Modify Virtual Machines9.2.1. Reconfigure the Hardware of a Virtual Machine9.2.1.1. Attach or Detach a CD/DVD Drive9.2.1.2. Connect or Disconnect a Network Interface Card9.2.1.3. Change the Network to Which a Network Interface Card Connects9.2.2. Add Hardware to a Virtual Machine9.2.2.1. Add a Network Adapter to a Virtual Machine9.2.2.2. Add a Virtual Hard Disk to a Virtual Machine9.2.2.3. Add Memory to a Virtual Machine9.2.2.4. Add a CPU to a Virtual Machine9.2.3. Remove Hardware from a Virtual Machine9.3. Manage Virtual Machine Hardware Versions9.3.1. Determine the Virtual Machine Hardware Version9.3.2. Upgrade Virtual Machine Hardware9.4. Perform Other Virtual Machine Management Tasks9.4.1. Change the Virtual Machine Power State9.4.2. Work with Virtual Machine Snapshots9.4.2.1. Taking a Snapshot9.4.2.2. Deleting a Snapshot9.4.2.3. Reverting to a Snapshot9.4.3. Install or Upgrade the VMware Tools
10. Importing and Exporting Virtual Machines
10.1. Understand the Migration Process10.1.1. Understand the Types of Migrations10.1.2. Review the Components in a Migration10.1.2.1. vCenter Converter10.1.2.2. vCenter Converter Plug-In10.1.2.3. vCenter Converter Agent10.1.2.4. vCenter Converter Boot CD10.2. Perform a Physical-to-Virtual Migration10.2.1. Perform a Hot Migration10.2.2. Perform a Cold Migration10.2.3. Clean Up After a Migration10.2.4. Troubleshoot Physical-to-Virtual Migrations10.3. Perform a Virtual-to-Virtual Migration10.3.1. Migrate to or from a Different VMware Platform10.3.1.1. Import VMs from a Different VMware Platform10.3.1.2. Export VMs to a Different VMware Platform10.3.2. Migrate from a Competing Product10.3.3. Use a Virtual-to-Virtual Migration for Reconfiguration10.3.4. Troubleshoot Virtual-to-Virtual Migrations10.4. Import an Open Virtualization Format Template10.4.1. Understand OVF Templates10.4.2. Deploy an OVF Template
11. Configuring Security
11.1. Configure vCenter Server Access Control11.1.1. Understand vCenter Server's Predefined Roles11.1.2. Customize Roles11.1.2.1. Create a New Role11.1.2.2. Edit an Existing Role11.1.2.3. Clone an Existing Role11.1.2.4. Remove a Role11.1.3. Manage Permissions11.2. Secure vCenter Server11.2.1. Harden the vCenter Server Computer11.2.2. Remove Default Administrative Access to vCenter Server11.3. Secure Your ESX and ESXi Hosts11.3.1. Control Network Access to the Service Console11.3.2. Isolate the Management Network11.3.3. Authenticate via a Directory Service11.3.4. Enforce a Password Policy for Local Accounts11.3.5. Delete Unnecessary Local Accounts11.3.6. Enable Lockdown Mode11.4. Secure Your Virtual Machines11.4.1. Configure Virtual Machine Isolation11.4.1.1. Disable Copy and Paste11.4.1.2. Don't Allow a Virtual Machine User or Process to Disconnect Devices11.4.2. Harden the Guest Operating System
12. Managing Resources and Performance
12.1. Understand Resource Allocation12.2. Allocate Resources to Virtual Machines12.2.1. Allocate Resources in the VM Configuration12.2.2. Guarantee Resources with Reservations12.2.3. Constrain Resource Usage with Limits12.2.4. Control Resource Allocation Using Shares12.3. Use Resource Pools12.3.1. Create a Resource Pool12.3.2. Control CPU Allocation with a Resource Pool12.3.2.1. Use CPU Reservations with a Resource Pool12.3.2.2. Use CPU Limits with a Resource Pool12.3.2.3. Use CPU Shares with a Resource Pool12.3.3. Control Memory Allocation with a Resource Pool12.4. Monitor Performance12.4.1. Identify a Resource-Constrained ESX/ESXi Host12.4.2. Identify a Resource-Constrained Virtual Machine12.4.2.1. Identify a CPU-Constrained VM12.4.2.2. Identify a RAM-Constrained VM
A. Fundamentals of the Command-Line Interface
A.1. Navigate and Gather Information Through the Service ConsoleA.2. Manage Directories, Files, and Disks in the Service ConsoleA.3. Use the esxcfg CommandsA.4. Use the vicfg Commands

Content preview from VMware vSphere 4 Administration: Instant Reference

Chapter 11. Configuring Security

IN THIS CHAPTER, YOU WILL LEARN TO:

CONFIGURE VCENTER SERVER ACCESS CONTROL (Pages 332–339)
- Understand vCenter Server's Predefined Roles (Page 332)
- Customize Roles (Page 334)
- Manage Permissions (Page 338)
SECURE VCENTER SERVER (Pages 339–350)
- Harden the vCenter Server Computer (Page 339)
- Remove Default Administrative Access to vCenter Server (Page 340)
SECURE YOUR ESX AND ESXI HOSTS (Pages 342–350)
- Control Network Access to the Service Console (Page 342)
- Isolate the Management Network (Page 344)
- Authenticate via a Directory Service (Page 346)
- Enforce a Password Policy for Local Accounts (Page 347)
- Delete Unnecessary Local Accounts (Page 348)
- Enable Lockdown Mode (Page 349)
SECURE YOUR VIRTUAL MACHINES (Pages 349–352)
- Configure ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

VMware vSphere® 5 Administration: Instant Reference

Publisher Resources

ISBN: 9780470520727Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

VMware vSphere 4 Administration: Instant Reference

by Scott Lowe, Jason W. McCarty, Matthew K. Johnson

Chapter 11. Configuring Security

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.