Table of Contents · HOL-HBD-1301 - vCloud Hybrid Service Jump Start for vSphere Admins This lab...

Table of ContentsLab Overview .................................................................................................................... 2

HOL-HBD-1301 - vCloud Hybrid Service Jump Start for vSphere Admins ................3Module 1 - vCloud Hybrid Service: Architecture and Consumption Principles ...................5

vCloud Hybrid Service............................................................................................. 6vCloud Hybrid Services User Interface .................................................................... 9Working Within the vDC ........................................................................................ 12

Module 2 - Identifying and Deploying Workloads in vCloud Hybrid Service ....................17Deploy a Virtual Machine from a Catalog .............................................................. 18Migrate an Existing Virtual Machine to the vCloud Hybrid Service........................32

Module 3 - vCloud Hybrid Service: Networking and Security Basics ...............................63Introduction to vCloud Hybrid Service Gateways and Networks ...........................64Introduction to vCloud Hybrid Service NAT and Firewalls ......................................77

HOL-HBD-1301

Lab Overview

HOL-HBD-1301

HOL-HBD-1301 - vCloud Hybrid ServiceJump Start for vSphere AdminsThis lab will provide you the basic skills necessary to successfully navigate the vCloudHybrid Service. After completing this lab, you will be able to:

• Understand the different service offerings of the vCloud Hybrid Service• Navigate your way around the vCloud Hybrid Service user interface• Deploy your first virtual machine in the vCloud Hybrid Service portal• Migrate a virtual machine over from your existing vSphere environment• Understand the basic network and security principles required to connect a

virtual machine to an external network

The tasks above are split up into 3 Lightning Lab modules, each designed to takebetween 15-30 minutes to complete. You will have 90 minutes to complete your labsitting. Depending on how much time you have available to you, you may decide to gothrough this lab all at once, or you may choose to break them up over several labsittings.

The tasks are broken up into the following modules:

Module 1: vCloud Hybrid Service: Architecture and Consumption Principles

Duration: 15-30 minutes

Purpose: Understand the different service offerings, and navigate your way around thevCloud Hybrid Service user interface

Lab Captain: Brian Foley

Module 2: Identifying and Deploying Workloads in vCloud Hybrid Service

Duration: 30 minutes

Purpose: Deploy your first virtual machine in the vCloud Hybrid Service portal

Migrate a virtual machine over from your existing vSphere environment

Lab Captains: Matt Gildenhorn, Nic O'Donovan

HOL-HBD-1301

Module 3: vCloud Hybrid Service: Networking and Security Basics

Duration: 15-30 minutes

Purpose: Understand the basic network and security principles required to connect avirtual machine to an external network

Lab Captain: Josh Gwyther

Next Steps: Upon completion of this lab, you may consider taking one of the followinglabs for additional guidance on vCloud Hybrid Service:

HOL-HBD-1302 – Advanced Networking and Security

HOL-HBD-1303 – Hybrid Cloud Management

** COPY/PASTE NOTE - Please note that you will not be able to copy/paste from the usermanual into the lab console. If you need to copy a username/password to enter into a labexercise, please open and use the 'vPod Password Cheat Sheet.txt' file that is on thedesktop. If that doesn't work, you can also try the "Send Text" button found under theconsole window in the NEE interface.

HOL-HBD-1301

Module 1 - vCloud HybridService: Architecture andConsumption Principles

HOL-HBD-1301

vCloud Hybrid ServicevCloud Hybrid Service is a secure infrastructure-as-a-service cloud owned and operatedby VMware, built on the trusted foundation of vSphere. The service supports existingworkloads and new application development, giving IT administrators and architects acommon platform for seamlessly extending existing data centers to the cloud byleveraging the same tools and processes they use today.

vCloud Hybrid Service has two service offerings.

vCloud Hybrid Service has two service offerings. Dedicated Cloud and Virtual PrivateCloud.

Dedicated Cloud

Dedicated Cloud customers are provided physically isolated pools of vCPU and vRAM.Compute nodes within our Data Centers for Dedicated Cloud are air-gapped. Networkand Storage are logically isolated on modern, high-end multi-tenant infrastructure, withappropriate resource guarantees in place. Dedicated Cloud customers are also provideda segregated cloud management stack, unique to their service and not shared withother customers.

HOL-HBD-1301

Dedicated Cloud Details

The Dedicated Cloud offering includes 30 GHz of Compute (vCPU) capacity, 120 GB ofvRAM, and 6TB of Storage to start. Also, 3 public IPs are provided, as well as a 50 Mbpsnetwork link, burstable to 1 Gbps.

Virtual Private Cloud

Virtual Private Cloud customers are provided pools of vCPU, vRAM Network and Storageusing the same design architecture as Dedicated Cloud, but are logically isolated.Thanks to the power of VMware vSphere, while physical resources are operating in amulti-tenant design, tenants are provided strict guarantees to those resources, and loadis evenly balanced across the infrastructure, ensuring robust and scalable availability toeveryone in the cloud.

HOL-HBD-1301

Virtual Private Cloud Details

The Virtual Private Cloud offering includes 5 GHz of Compute (vCPU) capacity, 20 GB ofvRAM, and 2TB of Storage to start. Also, 2 public IPs are provided, as well as a 10 Mbpsnetwork link, burstable to 50 Mbps.

Virtual Datacenter (vDC)

In both cases vCloud Hybrid Service delivers the concept of a Virtual Datacenter (vDC).In the case of the Dedicated Cloud offering a vCloud Hybrid Service customer couldhave multiple Virtual Datacenters. In the case of a Virtual Private Cloud customer theywould have only 1 Virtual Datacenter. It is via this Virtual Datacenter construct thatresources are deployed and managed.

HOL-HBD-1301

vCloud Hybrid Services User InterfaceThis section will cover how to log in, and the top level vCloud Hybrid Services UI.

Login to vCloud Hybrid Services

IMPORTANT: BEFORE opening Firefox and attempting to login make SURE to check theDesktopInfo tattoo on the desktop… it will say "Not Ready" until the pod is ready to go.

#1 Enter the URL: https://vchs.vmware.com

#2 Username: rpadmin@rainpole.com

#3 Password: VMware1#

#4 Select "Sign In" to login to vCloud Hybrid Services

HOL-HBD-1301

Top Level Dashboard View

This is the main Dashboard view and is what is initially displayed at login time. TheDashboard is divided into several sections.

#1 This is the total resources owned by the vCloud Hybrid Service customer. Note thatdisplays how much of the total resources have been allocated to various VirtualDatacenters (vDC) ( the green indicates allocated amounts).

#2 This is a list of the currently created / available Virtual Datacenters for the Customer.( Note the "Add a Virtual Datacenter" selection to create additional ones).

#3 This shows what "Dedicated Cloud Resources" that this customer has and in whichphysical vCloud Hybrid Service Datacenter those resources reside in.

#4 This is the "global view tab". If you wanted to see all Virtual Machines across allvDCs, or all Gateways you would select one of these tabs.

#5 Should the customer want to add resources to their account this selection takesthem to My VMware to order them.

#6 Users in this customers vCloud Hybrid Service service.

#7 Number of VMs currently in the Customers service

#8 Number of public IPs used and available

Please select the "VDC-DC-RAINPOLE-001-860" Virtual Datacenter to move to the nextsection

HOL-HBD-1301

Working Within the vDCThis will cover features of the Virtual Datacenter UI

Usage & Allocation View

We are now looking at a specific Virtual Datacenter. This section is divided into severalsections.

#1 This displays the resources available as well as consumed in this vDC.

#2 The is the link to go bring up the vCloud Director Interface if the user so desires that.

#3 Tabbed area to access other features of this virtual datacenter.

#4 To change the Name or Description of this virtual datacenter

Please select Virtual Machines from the #3 area.

Virtual Machine View

This view shows us existing Virtual Machines in this vDC.

HOL-HBD-1301

#1 List of current VM's, who owns it, resources etc...

#2 Select here to deploy your first VM. DO NOT SELECT THIS AT THIS TIME. This will becovered

in detail in module #2.

Please select the Gateways tab.

HOL-HBD-1301

Gateways View

This is where you view and manage any of the vCloud Networking & Security Edgegateways that are deployed. These gateways provide all the firewall, NATing, LoadBalancing, DHCP and VPN tunneling services. By default a single Edge gateway will bedeployed, however this can grow as your needs grow. To actually adjust settings in thisgateway you need to use the vCloud Director interface which can be started at #1.

Please select Networks to continue.

HOL-HBD-1301

Networks View

This is the Networks view. Initially all new virtual datacenters in vCloud Hybrid Serviceget by default one (1) network that is isolated and one (1) network that is connected tothe Edge Gateway. Here you can see the details of each networks configuration. If youneed to change settings that is done using the vCloud Director interface which can bestarted at #1.

HOL-HBD-1301

Users View

This is the list of allowed users to this virtual datacenter. New users are first created"globally" at #1 and then granted access to the virtual datacenter at #2

This completes your introduction to the vCloud Hybrid Services User Interface.

In Module #2 and #3 you will use this to deploy new VM's, migrate workload as well asNetworking and Security basics.

HOL-HBD-1301

Module 2 - Identifyingand Deploying Workloadsin vCloud Hybrid Service

HOL-HBD-1301

Deploy a Virtual Machine from aCatalogIntroduction

This lab is going to walk you through the steps of deploying your very first virtualmachine in the vCloud Hybrid Service.

Launch the vCloud Hybrid Service Portal

1. Double Click on the Mozilla Firefox icon on the desktop.

Log in to the vCloud Hybrid Service Portal

Once Mozilla Firefox has launched, check that the following information has alreadybeen pre-populated:

HOL-HBD-1301

1. URL: https://vchs.vmware.com2. Userid: rpadmin@rainpole.com3. Password: VMware1#4. Once the information has been verified, click Sign In to login

HOL-HBD-1301

Select the "Virtual Machines" Tab

1. At the top of the screen click on the Virtual Machines tab.

HOL-HBD-1301

Deploy a Virtual Machine

1. Click the Deploy a Virtual Machine button.

HOL-HBD-1301

Select the Destination Virtual Data Center

1. At the New Virtual Machine Pop-Up Window under Available Resources, select theVDC-DC-RAINPOLE-001-860 Radio Button.

2. Click the Green Continue button.

HOL-HBD-1301

Select the Virtual Machine From the Catalog

1. Select the My Catalog tab.2. Select the Small Linux Radio button.3. When you select the Radio Button the Green Continue button will display. Click

the Green Continue button.

Note: In the vCloud Hybrid Service you have the option to choose a virtual machinetemplate that is available in your catalog or use one of the templates provided byVMware. Certain templates supplied by VMware may incur a monthly usage charge.

HOL-HBD-1301

Configure your Virtual Machine

1. In the Name field type in the name for your virtual machine: MyFirstVM.2. Leave the Allocated Resources as default.3. Click the Green Deploy This Virtual Machine button.

HOL-HBD-1301

Wait for the Virtual Machine to Deploy

1. You will notice the status box on the top of the screen indicating the VirtualMachine is being created.

2. You will also notice the status circle to the left of the name of the Virtual Machine.

Note: After a virtual machine has been deployed, you can always adjust the size of thevirtual machine by simply clicking on the "View & Edit Details" option within the VirtualMachine settings

HOL-HBD-1301

Wait for the Virtual Machine Created Message

1. Wait for the Virtual Machine to finish creating. The status will show a check markwith the message: "Virtual Machine MyFirstVM created successfully".

2. When the minus sign and the banner indicating the virtual machine has beencreated successfully appear, proceed to the next step.

HOL-HBD-1301

Power On the Virtual Machine

There are two ways you can power on the Virtual Machine you just created.

1. Look to the left of the VM name and click the Power Button once to power onthe VM -- OR --

2. To the right of the VDC-DC-RAINPOLE-001-860, you can also use the drop downmenu indicated by the small black triangle, to select the Power On for themachine.

3. Use one of these methods to power on the Virtual Machine.

HOL-HBD-1301

Validate Virtual Machine Status

1. Once the Virtual Machine is powered on, the icon to the left of the VM wil turnGreen.

2. Note that under the MY VMS AT A GLANCE section, you can see the totalnumber of VMs that are powered on.

HOL-HBD-1301

Navigate to the Virtual Machine Menu to Launch theConsole

1. Click on the small black triangle to the right of the VDC-DC-RAINPOLE-001-860 toexpand the virtual machine menu.

HOL-HBD-1301

Launch the Virtual Machine Console

1. From the previous step, expand the Virtual Machine menu and select the LaunchConsole.

HOL-HBD-1301

Verify the Console Has Launched

1. Note how the Console for the MyFirstVM has launched.2. If you happen to click inside the VM console to explore, the way to escape out of

the console is to press CTRL+ALT together.

Congratulations!! You have deployed your first virtual machine from a catalogin the vCloud Hybrid Service.

HOL-HBD-1301

Migrate an Existing Virtual Machine tothe vCloud Hybrid ServiceIntroduction

This lab is going to walk you through the steps of migrating a virtual machine that existsin your private vSphere environment over to the vCloud Hybrid Service.

Launch the VMware vSphere Client and Log On to the "vc-l-01a" vCenter

1. From the desktop double click on the VMware vSphere Client icon to launchthe client.

2. Ensure the vc-l-01a.corp.local is selected from the drop down box.3. Ensure the UseWindows Session Credentials check box is selected.4. Click the Login button.

HOL-HBD-1301

Launch VMware vCloud Connector

1. At the top left of the screen click the Home button.2. On the home page, click the vCloud Connector icon in the Solutions and

Applications area.3. If you receive a warning. Ignore it and accept the link.4. The vCloud Connector Client will launch

HOL-HBD-1301

Prepare to Add the Local vSphere to vCloud Connector

1. In the Browser panel on the left, click on Clouds to select it.

2. In the Objects panel, click the Add (green plus) icon.

HOL-HBD-1301

Add the Local vSphere to vCloud Connector

The Add Cloud dialog box appears.

1. In the Name field use the drop down box to select Local vSphere.2. In the Username field type: corp\administrator3. In the Password field type: VMware1!4. Click the Add button.

The Local vSphere will display in the Clouds tree in the Browser panel.

HOL-HBD-1301

Verify the Local vSphere has been added to vCloudConnector

Verify that the Local vSphere has been successfully added.

HOL-HBD-1301

Prepare to Add the Rainpole vDC Organization to vCloudConnector

1. In the Browser panel on the left, click on Clouds to select it.

2. In the Objects panel, click the Add (green plus) icon.

HOL-HBD-1301

Add the Rainpole vDC Organization to vCloud Connector

The Add Cloud dialog box appears.

1. In the Name field use the drop down box to select Rainpole vDC on vCHS2. In the Username field type: rpadmin@rainpole.com3. In the Password field type: VMware1#4. Click the Add button

HOL-HBD-1301

Verify that the Rainpole vDC Organization has been addedto vCloud Connector

Verify that the Rainpole vDC on vCHS has been successfully added.

HOL-HBD-1301

Verify That Both Clouds Display in vCloud Connector

1. In the Browser panel both the Local vSphere and the Rainpole vDC on vCHSclouds should display.

HOL-HBD-1301

Update and Browse the Clouds Inventory

1. It is very important to update the inventory for both the newly added clouds. Todo so, click the Black Triangle to the left of the Local vSphere Cloud, and tothe left of the Rainpole vDC on vCHS Cloud to expand the clouds.

2. You will have to click these twice each, once to connect and once to drop downthe inventory.

3. Collapse these trees by clicking on the Black Triangle again.

HOL-HBD-1301

Prepare to Migrate a Virtual Machine From "Local vSphere"to the vCloud Hybrid Service

1. Click on the Local vSphere Cloud in the left panel.2. In the inventory panel click the Virtual Machines tab.3. Select by clicking once on the Small Linux VM. This is a powered down virtual

machine in the local vSphere environment.

HOL-HBD-1301

Migrate a Virtual Machine From "Local vSphere" to thevCloud Hybrid Service

1. Ensure the Small Linux VM is selected. You will know this when the Small LinuxVM is highlighted in blue.

2. Hover the mouse over the Actions menu (the one with the gear icon). This willcause a drop down list to appear with appropriate Virtual Machine actions. Clickon the Copy action.

HOL-HBD-1301

Configure the Virtual Machine Properties

1. From the Cloud drop down ensure the the Rainpole vDC on vCHS Cloud isselected.

2. In the Name field, enter MySecondVM for the virtual machine name.3. In the "Select a Catalog" area, highlight by clicking once on the the Rainpole

catalog.4. Click the Next button.

HOL-HBD-1301

Select the Virtual Datacenter where the Virtual Machinewill be Deployed

1. Next to the Select VDC drop down box select the VDC-DC-RAINPOLE-001-860vDC.

2. Click the Next button.

Select Deployment Options

1. Select the Deploy vApp after copy (in fenced mode) checkbox. Make sure the"VDC-DC-RAINPOLE-001-860-default-isolated" network configuration eventuallygets selected by you. This can happen only when the list of values gets populatedautomatically, and "Select a network" is shown in the drop down.

2. Select Power on vApp after deployment checkbox.

3. Select Remove temporary vApp template in destination vCloud catalogcheckbox.

HOL-HBD-1301

Click Next to continue

HOL-HBD-1301

In the Ready to Complete Page, Review the Selections toContinue

1. Review the selections.2. Click Finish to continue.

HOL-HBD-1301

Monitor the Copy Task within vCloud Connector

1. Once the copy task has started it is important to monitor the progress of the task.Note of the status of the copy will move quickly up to 60% and appear to pause.

2. Take note of the recent tasks. Even though the export shows completed, themigration is still working in the background. To view the current status of thetask, proceed to the next step.

HOL-HBD-1301

Launch the vCloud Hybrid Service Portal

HOL-HBD-1301

Log into the vCloud Hybrid Service portal

HOL-HBD-1301

Select the 'VDC-DC-RAINPOLE-001-860' Virtual Datacenter

Press the 'VDC-DC-RAINPOLE-001-860' button.

HOL-HBD-1301

Open the vCloud Director Associated with this VirtualDatacenter

To open a new Firefox tab, and go into the Rainpole organization in vCloud Director, clickon the 'Manage Catalogs in vCloud Director' link.

HOL-HBD-1301

Check the Status in 'Recent Tasks'

Click on the '1 Running' to bring up the Recent Tasks for the Rainpole organization andsee what the status of the migration is.

HOL-HBD-1301

Refresh the 'Recent Tasks' Until Completed

1. Continue to click on the refresh button to update the status of the migrationactivities.

2. When you see the activityDeleted Virtual Application Templatein the 'RecentTasks', the migration has finished. To verify this further, continue to the next step.

HOL-HBD-1301

Go Back to the "vc-l-01a" vCenter and Look for the GreenCheckmark

1. Note the completed Green checkmark next to the Copy Virtual Machine task. Thisconfirms the migration is complete.

HOL-HBD-1301

Launch the vCloud Hybrid Service Portal (If Not AlreadyLogged Into It)

If you are already logged into vCloud Hybrid Service, you can skip this step.

HOL-HBD-1301

Log into the vCloud Hybrid Service portal (If Not AlreadyLogged Into It)

If you are already logged into vCloud Hybrid Service, you can skip this step.

HOL-HBD-1301

Select the "Virtual Machines" Tab

1. Select the Virtual Machines tab to open the Virtual Machines page.

HOL-HBD-1301

Validate that the "MySecondVM" has Migrated andPowered On Successfully

1. Verify the Virtual Machine is powered by confirming the green icon to the left ofthe VM is green.

2. Note that under the MY VMS AT A GLANCE section, you can see the totalnumber of VMs that are powered on.

HOL-HBD-1301

Navigate to the Virtual Machine Menu to Launch theConsole

1. Next to the MySecondVM. Click on the small black triangle to the right of theVDC-DC-RAINPOLE-001-860 to expand the virtual machine menu.

HOL-HBD-1301

Launch the Virtual Machine Console

1. Continuing from the previous step, expand the Virtual Machine menu for theMySecondVM and select the Launch Console.

HOL-HBD-1301

Verify the Console Has Launched

1. Note how the Console for the MySecondVM has launched.2. If you happen to click inside the VM console to explore, the way to escape out of

the console is to press CTRL+ALT together.

Congratulations!! You Have Successfully Migrated an Existing Virtual Machineto the vCloud Hybrid Service.

HOL-HBD-1301

Module 3 - vCloud HybridService: Networking and

Security Basics

HOL-HBD-1301

Introduction to vCloud Hybrid ServiceGateways and NetworksWelcome! In this lab you'll be introduced to Gateways and Networks of vCloud HybridService.

Access vCloud Hybrid Service

To access vCloud Hybrid Service you'll first need to launch a web browser. Click on theFirefox icon located on the desktop.

Login to vCloud Hybrid Service

Enter the URL:https://vchs.vmware.com

Username: rpadmin@rainpole.com

Password: VMware1#

HOL-HBD-1301

Then click on the "Sign in" button.

Select Virtual Datacenter

From the main Dashboard click on the Virtual Datacenter labeled "VDC-DC-RAINPOLE-001-860".

HOL-HBD-1301

Select Gateway

From the Virtual Datacenter Details Dashboard click on the Gateway tab.

HOL-HBD-1301

Select Networks

By default, whenever you create a Virtual Datacenter a Gateway is automaticallycreated. Here you can see the details of the Gateway.

Notice a few of the details.

For starters you can see the Gateway's IP address. Normally this would be a publiclyroutable IP address, but here in the lab at VMworld it's going to be a private IP address.

You'll also notice that High Availability is enabled by default.

Next click on the Network tab and let's take a look at your Virtual Datacenter'sNetworks.

HOL-HBD-1301

Manage in vCloud Director

Along with the Gateway, when a new Virtual Datacenter is created two default networksare also created. One network is Internally isolated, while the other is routed. In order toperform any additional configuration on the Networks or Gateways you'll need tomanage it within vCloud Director.

Click on the "Manage in vCloud Director" button.

HOL-HBD-1301

View Org VDC Networks

You are now in the vCloud Director portal where you're presented with our two networksonce again. From here we'll take a look at the available services to an Isolated andRouted network.

View Isolated Network Services

Select the first Isolated network by clicking on it. Then right-click and select "ConfigureServices".

HOL-HBD-1301

View DHCP

Here you'll notice the only feature available is DHCP and that it's enabled by default.DHCP is the only feature because this is an Isolated network. Click on the "Cancel"button below.

View Routed Network Services

Select the Routed network by clicking on it. Then right-click and select "ConfigureServices".

HOL-HBD-1301

View DHCP

With a Routed network you'll have additional features available for configuration.

Due to the nature of a network that is routed DHCP is disabled by default. You couldenable it, but for most environments you'll want IP addresses to be manually assignedand stay constant so that NAT, Firewall, and Load Balancing rules stay functional.

Go ahead and click on the "NAT" tab to view the default settings.

HOL-HBD-1301

View NAT

By default no NAT rules exist.

Click on the "Firewall" tab to see the default Firewall settings.

View Firewall

By default the Firewall on a Routed network is enabled. The default action of the Firewallis to Deny all traffic.

Next click on the "Static Routing" tab to view the default settings.

HOL-HBD-1301

View Static Routing

By default no static rules exist. This is where you would configure routes betweennetworks within vCloud Hybrid Service.

Click on the "VPN" tab to take a look at the VPN default settings.

View VPN

By default VPN is disabled. This is where you would configure Site-to-Site edge gatewayVPN tunnels.

Click on the "Load Balancer" to see the default settings.

HOL-HBD-1301

View Load Balancer

By default no Load Balancing rules are configured. Within the Load Balancing tab youcan setup virtual Pool Servers that distribute load to a collection of Virtual Machines.

Click on the "Cancel" button below to exit Configure Services.

View Edge Gateway

Now let's take a look at the Edge Gateway configuration. Click on the "Edge Gateway"tab.

HOL-HBD-1301

View Edge Properties

Select the Edge Gateway by clicking on it. Then right-click and select "Properties".

NOTE: Dont mind the warning, that's due to the lab configuration.

View IP Settings

You are now presented with the Edge Gateway Properties page. From here we canConfigure IP settings, IP Pools, Rate Limits and Syslog. Click on "Configure IP Settings".

HOL-HBD-1301

View External IP

Here you can see the Subnets and IP addresses assigned to the Gateway.Congratulations you've just completed the Introduction to vCloud Hybrid ServiceGateways and Networks.

HOL-HBD-1301

Introduction to vCloud Hybrid ServiceNAT and FirewallsWelcome! In this Lab you'll be introduced to vCloud Hybrid Service NAT and Firewalls.

Introduction

You will be creating a NAT and Firewall rule that would enable a virtual web server tocommunicate over an external network.

You won't be creating an actual web server in this lab, we'll only be creating the NAT andFirewall rules that would allow a fictitious web server with an IP address of 10.0.0.1 tocommunicate.

HOL-HBD-1301

Access vCloud Hybrid Service

To access vCloud Hybrid Service you'll first need to launch a web browser. Click on theFirefox icon located on the desktop.

HOL-HBD-1301

Login to vCloud Hybrid Service

Enter the URL:https://vchs.vmware.com

Username: rpadmin@rainpole.com

Password: VMware1#

Then click on the "Sign in" button.

HOL-HBD-1301

Select Virtual Datacenter

From the main Dashboard click on the Virtual Datacenter labeled "VDC-DC-RAINPOLE-001-860".

Select Gateways

From the VDC-DC-RAINPOLE-001-860 Dashboard click on the "Gateways" tab.

HOL-HBD-1301

Manage in vCloud Director

You'll need to configure NAT and Firewalls within vCloud Director. Click on the "Managein vCloud Director" button to access the vCloud Director Portal.

Identify External IP Address

In order to setup NAT and Firewall rules for our web server you'll first need to verify theExternal IP address of the Edge Gateway. Select the Edge Gateway by clicking on it.Then right-click and select "External IP Allocations".

HOL-HBD-1301

Note External IP Address

You can see here that the Gateway is using 192.168.210.100. Normally this would be apublic IP address, but here in the lab we are using a private address.

Click the "Cancel" button below.

HOL-HBD-1301

Configure Edge Gateway

To configure NAT and Firewall rules you'll first need to click on the "Org VDC Networks".

Select the Routed network by clicking on it. Then right-click and select "ConfigureServices".

Select NAT

Select the "NAT" tab by clicking on it.

HOL-HBD-1301

Add DNAT

On the NAT pane you have two choices, "Add SNAT" and "Add DNAT". SNAT is for sourcebased rules, and DNAT is for destination based rules.

Destination and Source are from the prospective of vCloud Hybrid Service. For example,a source NAT rule means from a source within vCloud Hybrid Service to an externaldestination, while a destination NAT rule means from an outside source to a destinationwithin vCloud Hybrid Service.

In order to create a NAT rule that would allow external traffic to talk to an internal webserver we need to create a DNAT rule.

Click on the "Add DNAT" button.

HOL-HBD-1301

Select Network

First we want to select a network to apply this rule. Click the down arrow in the "Appliedon" field and select the "VDC-DC-RAINPOLE-001-860-default-routed".

HOL-HBD-1301

Edit DNAT Rule

From here we are going to configure the DNAT rule.

In the "Original (External) IP/range" field we are going to enter the external IP address ofthe gateway we discovered earlier. Enter "192.168.210.100". Remember normally thiswould be a public IP address, but due to limitations of the lab this is a private IP address.

In the "Protocol" field click on the dropdown arrow and select "TCP".

In the "Original port" field click the dropdown arrow and select "80".

In the "Translated (Internal) IP/range" field type the IP address "10.0.0.1". This is the IPaddress of our fictitious web server.

In the "Translated Port" field click on the dropdown arrow and select "80".

Click the "OK" button to apply the DNAT rule.

HOL-HBD-1301

Select Firewall

Your NAT rule has now been created and enabled. Next we'll need to create a firewallrule to allow port 80 traffic to pass through the firewall.

Click on the "Firewall" tab.

Add Firewall Rule

To add a Firewall rule click the "Add" button.

HOL-HBD-1301

Edit Firewall Rule

Here you will edit the firewall rule to allow traffic from the gateway IP address to thefictitious web server.

In the "Name" field enter "WWW".

In the "Source" field enter "192.168.210.100". This is the IP address of the gateway thatwould be accessed externally.

In the "Source port" click on the down arrow and select "80".

In the "Destination" enter "10.0.0.1". This is the IP address of the web server.

In the "Destination port" field click on the down arrow and select "80".

In the "Protocol" field click on the down arrow and select "TCP".

Leave everything else as is.

Click on the "OK" button.

Congratulations you've completed the lab and you've just setup a NAT and Firewall rulethat would allow external communication to a virtual web server.

HOL-HBD-1301

ConclusionThank you for participating in the VMware Hands-on Labs. Be sure to visithttp://hol.vmware.com/ to continue your lab experience online.

Lab SKU: HOL-HBD-1301

Version: 20141126-104707

HOL-HBD-1301

Table of Contents · HOL-HBD-1301 - vCloud Hybrid Service Jump Start for vSphere Admins This lab...

Documents

Using vCloud Connector - vCloud Connector 2.7pubs.vmware.com/.../PDF/vCloudConnector_27_UsingvCC.pdfUsing vCloud Connector Using vCloud Connector provides information on using VMware

vCloud Architecture Toolkit: VMware, Inc. · Architecting a VMware vCloud . Version 2.0.1 . October 2011 . VMware vCloud Architecture Toolkit ... 2.3 vCloud Infrastructure Logical

vCloud Director Installation and Configuration Guide - vCloud

vCloud Director User's Guide - vCloud Director 5.5

HBD Transmission Monitor Update VIII: HBD Gas Transmittance + Systematic Error HBD Working Group Meeting 1/23/06 B.Azmoun, S.Stoll Brookhaven National

Hbd sweety

THERMOID INDUSTRIAL RUBBER PRODUCTS · HBD Industries, Inc. HBD/Thermoid, Inc. is a subsidiary of HBD Industries, Inc. HBD manufactures quality, application-engineered, custom designed

Introduction to vCloud Architecture Toolkit for Service ...vmware360.com/files/pdf/products/vcloud/Introduction to vCloud... · Introduction to vCloud Architecture Toolkit for Service

vCloud SDK for Java Developer's Guide - vCloud Director 8pubs.vmware.com/vcd-80/topic/com.vmware.ICbase/PDF/... · 30.08.2010 · vCloud SDK for Java Developer's Guide vCloud Director

MANUAL HBD 2100

vCloud Director User's Guide - vCloud Director 5 - VMwarepubs.vmware.com/vcd-55/topic/com.vmware.ICbase/PDF/vcd_55_user... · vCloud Director User's Guide vCloud Director 5.5 This

vCloud Air - Virtual Private Cloud OnDemand Getting …pubs.vmware.com/vca/topic/com.vmware.ICbase/PDF/vcloud...vCloud Air - Virtual Private Cloud OnDemand Getting Started vCloud Air

vCloud Director 설치 및 업그레이드 설명서 - vCloud Director 5 · vCloud Director 설치, 구성 및 업그 레이드 개요 1 VMware vCloud®는 vCloud Director 서버

vCloud API Programming Guide - vCloud Director 5 - …pubs.vmware.com/vcd-56/topic/com.vmware.ICbase/PDF/vcd_56_api... · vCloud API Programming Guide vCloud Director 5.6 This document

VMware vCloud Architecture Toolkit Architecting a VMware vCloud

HBD Operation in Run 9 Thomas K Hemmick for the HBD Crew

What’s New in VMware vCloud Automation Center 5...What’s New in VMware vCloud Automation Center 5.1 VMware vCloud Director Integration Combined with VMware vCloud Director®, vCloud

Hbd 2 limojimo

Table of Contents - VMwaredocs.hol.vmware.com/HOL-2016/hol-hbd-1684_pdf_en.pdf · Table of Contents Lab Overview ... vCloud Air Student Check-in ... copy available for recovery through

vCloud Availability for Installation and Configuration Guide › en › vCloud-Availability-for... · The vCloud Availability for vCloud Director Installation and Configuration Guide