VMware VS4-STD-C Evaluator Guide - Page 81

TECHNICAL WHITE PAPER / 81

VMware vSphere 5.0 Evaluation Guide –

Volume One

group called “Company X” on vSwitch0 for each host in the cluster “DemoCluster-01”:

Get-Cluster DemoCluster-01 | Get-VMHost | Get-VirtualSwitch -Name vSwitch0 | New-VirtualPortGroup

“Company X” -VLanId 200

vSphere PowerCLI Summary

In conclusion, you can see that vSphere PowerCLI is a robust command-line tool for automating all aspects of

vSphere management, including host, network, storage, virtual machine, and guest OS management. It can be

used with other PowerShell snap-ins provided by Microsoft or third-party companies to integrate VMware

technologies easily into other products and reach inside the guest OS.

The design of PowerShell and, inherently, vSphere PowerCLI, makes this scripting language easier to learn than

many scripting languages before it. Complex configurations and reporting can be achieved with minimal effort

from the administrator, safe in the knowledge of a repeatable, error-free solution.

Evaluating the ESXi Firewall

Introduction

The ESXi 5.0 management interface is protected by a service-oriented and stateless firewall, which you can

configure using the vSphere Client or at the command line with esxcli interfaces. A new firewall engine

eliminates the use of iptables, and rule sets define port rules for each service. For remote hosts, you can specify

the IP addresses or range of IP addresses that are allowed to access each service.

Evaluation Overview

In this exercise, you will configure the ESXi firewall to allow or deny SSH service to the host. SSH is a service that

can be enabled or stopped on an ESXi host. As part of this exercise, you will stop and start SSH service, and also

configure firewall rules. ESXi firewall configuration can be done through the vSphere Client interface and

through the vCLI. In this example environment, you will configure the firewall rules through vSphere Client UI.

Prerequisites

The evaluation environment consists of the following components:

±²

Three³ESXi³hosts

´²

Virtual³machines³running³on³hosts

µ²

Each³virtual³machine³a³software³tool³installed

a²

PuTTY

Stopping SSH Service to Prevent Access

The SSH service provides a secure shell to manage the ESXi host. By default, this service is enabled. To stop this

service, you have to follow these steps:

±²

Select³the³

Home±>±Inventory±>±Hosts±and±Clusters

³view²³

´²

Choose³the³host³

tm-pod²³-esx²³´tmsb´local

³in³the³left³panel¶³and³select³

Configuration

³tab³on³the³right²

µ²

To³see³the³firewall³and³services³setting¶³select³the³

Security±Profile

³under³the³software³section²³Figure³±±·

±

shows³the³current³Security³Profile³of³the³selected³ESXi³host²³You³can³see³that³the³SSH³service³is³enabled³

and³current³firewall³settings³allow³access³to³the³SSH³server³on³TCP³port³´´²

Section	Page
About This Guide	5
Intended Audience	5
System Requirements	5
Hardware Requirements	5
Servers	5
Storage	5
Networking	5
Software and Licensing Requirements	6
VMware vSphere	6
Guest Operating Systems	6
Evaluation Guide Environment Setup	7
Server Configuration	8
Logical Network Setup	8
Storage Setup	10
Virtual Machine Setup	10
VMware vSphere 5.0 Evaluation Guide, Volume One – Worksheet	11
vSphere Evaluation Tasks	12
High Availability	12
Introduction	12
Prerequisites	12
Enabling HA	12
Connect to Virtual Server	13
Go to Cluster Summary	14
Edit Cluster Settings	15
Wait for Task to Complete	16
Verifying VMware HA Enablement	16
HA Status Screen	16
Virtual Machine Protection State	20
Host Protection State	21
VMware HA Advanced Options	22
Admission Control	24
Virtual Machine Options	25
Virtual Machine Monitoring	27
Storage Heartbeats	29
Validating VMware HA Operation	29
Host Failure	29
Host Isolation	34
Disabling VMware HA	43
Connect to a Virtual Server	43
Go to the Cluster Summary	44
Edit Cluster Settings	45
Wait for Task to Complete	46
Getting Familiar with the New Command-Line Interface	46
Introduction	46
The New esxcli Command	47
esxcli Command-Line Syntax	47
Remote esxcli Command Authentication	49
Enabling Access to the ESXi Shell	50
Enabling the ESXi Shell from the DCUI	50
Enabling the ESXi Shell from the vSphere Client	50
Enabling SSH Access to the ESXi Shell	51
Enabling SSH from the DCUI	51
Enabling the SSH from the vSphere Client	52
vSphere Client Notification When the ESXi Shell and SSH Are Enabled	53
Installing the vCLI	53
Installing the vCLI on Windows	53
Installing the vCLI on Linux	53
Installing the vCLI with the vMA	53
Sample esxcli Commands Run Locally from the ESXi Shell	54
Sample esxcli Commands Run Remotely from the vCLI	56
Formatting esxcli Output	58
The localcli Command	59
Bringing It All Together	60
vSphere PowerCLI by Example	62
Introduction	62
Prerequisites	62
Install vSphere PowerCLI	62
Getting Started with vSphere PowerCLI	69
Connecting to a vSphere Host or vCenter	69
Using vSphere PowerCLI	71
vSphere PowerCLI Summary	81
Evaluating the ESXi Firewall	81
Introduction	81
Evaluation Overview	81
Prerequisites	81
Stopping SSH Service to Prevent Access	81
Testing Access with SSH Service Stopped	85
Creating Firewall Rules to Block SSH Access	86
Testing SSH Firewall Rules	89
Image Builder	91
Introduction	91
Image Builder Prerequisites	92
Preparation Tasks	92
Install vSphere PowerCLI	92
Download the ESXi Offline Bundle	92
Extract the ESXi Offline Bundle	92
Start an Image Builder vSphere PowerCLI Session	92
Import the ESXi Offline Bundle	94
Display Software Depots	94
Display VIBs	95
Display Image Profiles	95
Create a New Image Profile	96
Create a New Image Profile by Manually Selecting Individual VIBs	96
Create a New Image Profile by Cloning an Existing Image Profile	98
Removing VIBs from an Image Profile	98
Compare Image Profiles	99
Export Image Profile	99
Export As an Offline Bundle	99
Export As a Bootable ISO Image	100
Product Documentation	100
Using Storage Performance Statistics	101
Introduction	101
Monitoring Performance Statistics of a Datastore	103
Help and Support During the Evaluation	105
VMware Contact Information	105

VMware VS4-STD-C Evaluator Guide - Page 81

vSphere PowerCLI Summary, Evaluating the ESXi Firewall, Introduction, Evaluation Overview

Page 81 highlights