Server Configuration Guide - VMware

1 Server Configuration Guide ESX Server and VirtualCenter Server Configuration Guide Server Configuration Guide Revision: 20090814. Item: VI-ENG-Q206-215. You can find the most up-to-date technical documentation on the VMware Web site at: The VMware Web site also provides the latest product updates. If you have comments about this documentation, submit your feedback to: 2007 2009 VMware , Inc. All rights reserved. This product is protected by and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at VMware , the VMware boxes logo and design, Virtual SMP, and VMotion are registered trademarks or trademarks of VMware , Inc.

2 In the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies. VMware , Inc. 3401 Hillview Ave. Palo Alto, CA 94304. 2 VMware , Inc. Contents Preface 11. 1 Introduction 15. Networking 15. Storage 16. Security 16. Appendixes 17. Networking 2 Networking 21. Networking Concepts 22. Concepts Overview 22. Virtual Switches 23. Port Groups 26. Network Services 27. Viewing Networking Information in the VI Client 27. Networking Tasks 29. Virtual Network Configuration for Virtual Machines 29.

3 VMkernel Configuration 33. TCP/IP Stack at the Virtual Machine Monitor Level 34. Implications and Guidelines 34. Service Console Configuration 37. Basic Service Console Configuration Tasks 37. Using DHCP for the Service Console 43. 3 Advanced Networking 45. Advanced Networking Tasks 46. Virtual Switch Configuration 46. Virtual Switch Properties 46. Editing Virtual Switch Properties 46. VMware , Inc. 3. Server Configuration Guide Virtual Switch Policies 53. Layer 2 Security Policy 53. Traffic Shaping Policy 55. Load Balancing and Failover Policy 56. Port Group Configuration 60.

4 DNS and Routing 62. Setting Up MAC Addresses 64. MAC Addresses Generation 65. Setting MAC Addresses 66. Using MAC Addresses 66. Networking Tips and Best Practices 67. Networking Best Practices 67. Mounting NFS Volumes 67. Networking Tips 68. 4 Networking Scenarios and Troubleshooting 69. Networking Configuration for Software iSCSI Storage 70. Configuring Networking on Blade Servers 76. Troubleshooting 80. Troubleshooting Service Console Networking 80. Troubleshooting Network Adapter Configuration 82. Troubleshooting Physical Switch Configuration 82.

5 Troubleshooting Port Group Configuration 82. Storage 5 Introduction to Storage 87. Storage Concepts 88. Storage Overview 89. Datastores and File Systems 90. File System Formats 91. Types of Storage 91. Supported Storage Adapters 92. How Virtual Machines Access Storage 92. Viewing Storage Information in the Virtual Infrastructure Client 93. Displaying Datastores 94. Viewing Storage Adapters 95. understanding Storage Device Naming in the Display 96. 4 VMware , Inc. Contents VMware File System 97. VMFS Versions 97. Creating and Growing VMFS 98. Considerations when Creating VMFS 98.

6 VMFS Sharing Capabilities 99. Storing Multiple Virtual Machines on a VMFS Volume 99. Sharing a VMFS Volume Across ESX Servers 100. Configuring and Managing Storage 101. 6 Configuring Storage 103. Local SCSI Disk Storage 104. Adding Local SCSI Storage 104. Fibre Channel Storage 106. Adding Fibre Channel Storage 108. iSCSI Storage 110. About iSCSI Storage 110. iSCSI Initiators 110. Naming Requirements 112. Discovery Methods 112. iSCSI Security 112. Configuring Hardware Initiated iSCSI Storage 113. Installing iSCSI Hardware Initiator 113. Viewing iSCSI Hardware Initiator 113.

7 Configuring iSCSI Hardware Initiator 115. Adding Hardware Initiated iSCSI Storage 120. Configuring Software Initiated iSCSI Storage 121. Viewing Software iSCSI Initiator 122. Configuring iSCSI Software Initiator 124. Adding Software Initiated iSCSI Storage 129. Performing a Rescan 131. Network Attached Storage 132. Shared Storage Capabilities 133. How Virtual Machines Use NFS 133. NFS Volumes and Virtual Machine Delegate Users 134. Configuring ESX Server to Access NFS Volumes 135. Creating an NFS Based Datastore 135. VMware , Inc. 5. Server Configuration Guide 7 Managing Storage 137.

8 Managing Datastores and File Systems 138. Adding New Datastores 138. Removing Existing Datastores 139. Editing Existing VMFS based Datastores 139. Upgrading Datastores 139. Changing the Names of Datastores 140. Adding Extents to Datastores 141. Managing Paths for Fibre Channel and iSCSI 143. Viewing the Current Multipathing State 145. Active Paths 146. Setting Multipathing Policies for LUNs 147. Disabling and Enabling Paths 148. Setting the Preferred Path (Fixed Path Policy Only) 149. The vmkfstools Commands 150. 8 Raw Device Mapping 151. About Raw Device Mapping 152.

9 Terminology 153. Benefits of Raw Device Mapping 153. Limitations of Raw Device Mapping 156. Raw Device Mapping Characteristics 156. Virtual Compatibility Mode Versus Physical Compatibility Mode 157. Dynamic Name Resolution 158. Raw Device Mapping with Virtual Machine Clusters 160. Comparing Raw Device Mapping to Other Means of SCSI Device Access 160. Managing Mapped LUNs 161. VMware Virtual Infrastructure Client 161. Mapping a SAN LUN 161. Managing Paths for a Mapped Raw LUN 163. The vmkfstools Utility 164. File System Operations 164. Security 9 Security for ESX Server Systems 167.

10 ESX Server Architecture and Security Features 168. Security and the virtualization Layer 168. Security and Virtual Machines 168. 6 VMware , Inc. Contents Security and the Service Console 171. Security and the Virtual Networking Layer 173. Security Resources and Information 179. 10 Securing an ESX Server Configuration 181. Securing the Network with Firewalls 181. Firewalls for Configurations with a VirtualCenter Server 182. Firewalls for Configurations Without a VirtualCenter Server 185. TCP and UDP Ports for Management Access 187. Connecting to VirtualCenter Server Through a Firewall 189.