From ESX to RHV

8/11/2019 From ESX to RHV

1/75

Migrating from VMware ESXi 5 to

Red Hat Enterprise Virtualization

(RHEV) 3

John Herr Senior Software Engineer

RH!" RH!V"

Version #$%

June &%#&


2/75

1801 Varsity DriveRaleigh NC 27606-2072 USAPhone !1 "1" 7#$ %700Phone 888 7%% $281&a' !1 "1" 7#$ %701P( )o' 1%#88Resear*h +riangle Par, NC 2770" USA

in.' is a registere/ tra/ear, o in.s +orval/s Re/ 3at4 Re/ 3at 5nterrise in.' an/ the Re/ 3atSha/oan logo are registere/ tra/ear,s o Re/ 3at4 9n* in the Unite/ States an/ other*o.ntries

V:are4 V:are +ools4 an/ 5S;i are registere/ tra/ear,s o V:are4 9n*

:i*rosot an/ si/iaries in theUnite/ States an/ other *o.ntries

All other tra/ear,s reeren*e/ herein are the roerty o their rese*tive oners

? 2012 >y Re/ 3at4 9n* +his aterial ay >e /istri>.te/ only s.>@e*t to the ters an/ *on/itions setorth in the (en P.>li*ation i*ense4 V10 or later the latest version is resently availa>le athttBBoen*ontentorgBoen.>B

+he inoration *ontaine/ herein is s.>@e*t to *hange itho.t noti*e Re/ 3at4 9n* shall not >e lia>leor te*hni*al or e/itorial errors or oissions *ontaine/ herein

Distri>.tion oo/iie/ versions o this /o*.ent is rohi>ite/ itho.t the e'li*it erission o Re/3at 9n*

Distri>.tion o this or, or /erivative o this or, in any stan/ar/ aer >oo, or or *oer*ial.roses is rohi>ite/ .nless rior erission is o>taine/ ro Re/ 3at 9n*

+he =P= ingerrint o the se*.rityre/hat*o,ey isCA 20 86 86 2) D6 "D &C 6# &6 5C C$ 21 "1 80 CD D) $2 A6 05

Sen/ ee/>a*, torear*h-ee/>a*,re/hat*o

www$redhat$'om ii refar'hfeeda'*+redhat$'om
http://www.opencontent.org/openpub/mailto:[email protected]:[email protected]?subject=Feedback%20on%20Migrating%20from%20VMware%20ESXi%205%20to%20Red%20Hat%20Enterprise%20Virtualization%20(RHEV)%203mailto:[email protected]?subject=Feedback%20on%20Migrating%20from%20VMware%20ESXi%205%20to%20Red%20Hat%20Enterprise%20Virtualization%20(RHEV)%203mailto:[email protected]:[email protected]?subject=Feedback%20on%20Migrating%20from%20VMware%20ESXi%205%20to%20Red%20Hat%20Enterprise%20Virtualization%20(RHEV)%203http://www.opencontent.org/openpub/


3/75

Table of Contents

1 5'e*.tive S.ary 1

2 Re/ 3at 5nterrise Virt.aliEation 2

21 R35V 3yervisor 2

22 Re/ 3at 5nterrise Virt.aliEation %

2% virt-v2v #

% Reeren*e Ar*hite*t.re 5nvironent 6

$ :igration (vervie 12

# :igration Prearation 1%

#1 )a*, U Virt.al :a*hines 1%

#2 :a an/ Create Netor,s 1$

#21 Creating the Netor,s 1#

#22 :aing the Netor,s 1"

#% Create an 5'ort Doain 20

#$ Uloa/ ReF.ire/ 9S(s to the Re/ 3at 5nterrise Virt.aliEation 5nvironent 22

#$1 Re/ 3at 5nterrise in.' )ase/ Virt.al :a*hines 2$

#$2


4/75

6#1 =rahi*al User 9ntera*e %8

6#2 R5S+ AP9 $1

66 Peroring Post :igration +as,s $8

661 &irst )oot $8

662 les #"

Aen/i' ) 5na>ling ssh A**ess to the 5S;i Server 6%

Aen/i' C S*rits 66

Aen/i' D Reeren*es 70

Aen/i' 5 Revision 3istory 71

www$redhat$'om i, refar'hfeeda'*+redhat$'om


5/75

1 Executive SummaryVirt.aliEing inrastr.*t.re4 /eveloent4 an/ other ro/.*tion servers has F.i*,ly >e*oe areF.ireent or any *oanies an/ organiEations /.e to the otential *ost savings rovi/e/>y virt.aliEation Cost saving *an >e noti*e/ /ire*tly >y re/.*ing the n.>er o hysi*alservers reF.ire/ to >e .r*hase/ or in/ire*tly thro.gh energy an/ *ooling savings

:any virt.aliEation sol.tions la*, the eat.res ne*essary to allo the to >e easily /eloye/an/ aintaine/ in enterrise environents (ther sol.tions that ay >e eat.re ri*h are very*ostly to .r*hase an/ ileent

At a 60-80 er*ent loer *ost than other virt.aliEation sol.tions an/ itho.t *oroisingeat.res4 Re/ 3at 5nterrise Virt.aliEation rovi/es a ro>.st an/ anagea>le environentor virt.aliEation Re/ 3at 5nterrise Virt.aliEation is a*,e/ ith eat.res s.*h as highavaila>ility4 live igration4 a.toati* >alan*ing o or,loa/s4 an/ ore

+he .n/erlying (en So.r*e te*hnologies that *orise Re/ 3at 5nterrise Virt.aliEation are

ell teste/ an/ /esigne/ to eet the /ean/s o to/ayGs ission *riti*al enterriseenvironents Virt.al a*hines ro other virt.aliEation sol.tions *an >e igrate/ to Re/ 3at5nterrise Virt.aliEation se*.rely an/ ith *oni/en*e

+his aer /es*ri>es the ro*ess o igrating virt.al a*hines ro a V:are 5S;i server toa Re/ 3at 5nterrise Virt.aliEation server .sing the Re/ 3at 5nterrise Virt.aliEation virt.al-to-virt.al igration tools +he goal is to /eonstrate ho to eror an/ veriy .n*tionalityor the igrate/ virt.al a*hines virt-v2vis .se/ as the riary tool to eror virt.al

a*hine igration or the olloing g.est (erating Systes r.nning on a V:are 5S;ihost


6/75

2 Red Hat Enterprise Virtualization2.1 RHEV HypervisorA hyervisor is a *o.ter sotare lator that allos .ltile Hg.estI oerating systes to

r.n *on*.rrently on a host *o.ter +he g.est virt.al a*hines intera*t ith the hyervisorhi*h translates g.est 9B( an/ eory reF.ests into *orreson/ing reF.ests or reso.r*eson the host *o.ter

R.nning .lly virt.aliEe/ g.ests4 ie4 g.ests ith .no/iie/ g.est oerating systes4 .se/ toreF.ire *ole' hyervisors an/ revio.sly in*.rre/ a eroran*e enalty or e.lation an/translation o 9B( an/ eory reF.ests

(ver the last e years *hi ven/ors 9ntel an/ A:D have >een stea/ily a//ing CPU eat.resthat oer har/are enhan*eents to s.ort virt.aliEation :ost nota>le are

1 &irst-generation har/are assiste/ virt.aliEation Reoves the reF.ireent orhyervisor to s*an an/ rerite rivilege/ ,ernel instr.*tions .sing 9ntel V+

Virt.aliEation +e*hnology an/ A:DGs SVMSe*.re Virt.al :a*hine te*hnology

2 Se*on/-generation har/are assiste/ virt.aliEation (loa/s virt.al to hysi*aleory a//ress translation to CPUB*hi-set .sing 9ntel 5P+ 5'ten/e/ Page +a>lesan/ A:D RV9 Rai/ Virt.aliEation 9n/e'ing te*hnology +his rovi/es signii*antre/.*tion in eory a//ress translation overhea/ in virt.aliEe/ environents

% +hir/-generation har/are assiste/ virt.aliEation Allos PC9 9B( /evi*es to >eatta*he/ /ire*tly to virt.al a*hines .sing 9ntel V+-/ Virt.aliEation +e*hnology or/ire*te/ 9B( an/ A:D 9(::U Also4 SR-9(V Single Root 9B( Virt.aliEation hi*h

allos se*ial PC9 /evi*es to >e slit into .ltile virt.al /evi*es +his rovi/essignii*ant iroveent in g.est 9B( eroran*e

+he great interest in virt.aliEation has le/ to the *reation o several /ierent hyervisors3oever4 any o these re-/ate har/are-assiste/ virt.aliEation4 an/ are thereore soe-

hat *ole' ie*es o sotare ove har/are e'tensions4 riting ahyervisor has >e*oe signii*antly easier an/ it is no ossi>le to en@oy the >eneits ovirt.aliEation hile leveraging e'isting oen so.r*e a*hieveents to /ate

Re/ 3at 5nterrise Virt.aliEation .ses the Jernel->ase/ Virt.al :a*hine JVM14 hi*h t.rnsin.' into a hyervisor Re/ 3at 5nterrise in.' #$ rovi/e/ the irst *oer*ial-strength

ileentation o JVM4 hi*h is /eveloe/ as art o the .strea in.' *o.nity R35V%0 .ses the R35 6 JV: hyervisor4 an/ inherits eroran*e4 s*ala>ility an/ har/ares.ort enhan*eents ro R35 6

1 httBBre/hat*oBrooBF.ranetB

www$redhat$'om & refar'hfeeda'*+redhat$'om
http://www.redhat.com/promo/qumranet/http://www.redhat.com/promo/qumranet/


7/75

2.2 Red Hat Enterprise VirtualizationVirt.aliEation oers treen/o.s >eneits or enterrise 9+ organiEations K server*onsoli/ation4 har/are a>stra*tion4 an/ internal *lo./s /eliver a high /egree o oerationalei*ien*y

Re/ 3at 5nterrise Virt.aliEation R35V *o>ines the JV: hyervisor oere/ >y the Re/

3at 5nterrise in.' ,ernel ith an enterrise gra/e4 .lti-hyervisor anageent latorthat rovi/es ,ey virt.aliEation eat.res s.*h as live igration4 high availa>ility4 oeranageent4 an/ virt.al a*hine lie *y*le anageent Re/ 3at 5nterrise Virt.aliEation/elivers a se*.re4 ro>.st virt.aliEation lator ith .nat*he/ eroran*e an/ s*ala>ilityor Re/ 3at 5nterrise in.' an/ ilities or hosts an/ g.ests

RHEV H.per,isor-A o/ern4 s*ala>le4 high eroran*e hyervisor >ase/ on R35

JVM. It can be deployed as RHEV-H, a small footprint secure hypervisor imageincluded with the RHEV subscription, or as a RHE server !purchased separately"managed by RHEV-M.

A hostis a hysi*al server hi*h rovi/es the CPU4 eory4 an/ *onne*tivity to storage an/netor,s that are .se/ or the virt.al a*hines VM +he lo*al storage o the stan/alone hostis .se/ or the R35V-3 e'e*.ta>les along ith logs an/ eno.gh sa*e or 9S( .loa/s

A 'lusteris a gro. o hosts o siilar ar*hite*t.re +he reF.ireent o siilar ar*hite*t.reallos a virt.al a*hine to >e igrate/ ro host to host in the *l.ster itho.t having to sh.t/on an/ restart the virt.al a*hine A *l.ster *onsists o one or ore hosts4 >.t a host *anonly >e a e>er o one *l.ster

A data'enteris a *olle*tion o one or ore *l.sters that have reso.r*es in *oonReso.r*es that have >een allo*ate/ to a /ata *enter *an >e .se/ only >y the hosts >elongingto that /ata *enter +he reso.r*es relate to storage an/ netor,s

A storage domainis a share/ or lo*al storage lo*ation or g.est iage iles4 iortBe'ort oror 9S( iages Storage /oain tyes s.orte/ in R35V %0 are N&S4 iSCS94 &i>reChannel4 an/ lo*al /is, storage

+he R35V networ*ar*hite*t.re s.orts >oth g.est trai* an/ trai* aong R35Vhyervisors an/ the R35V-: server All hosts have a netor, intera*e assigne/ to thelogi*al netor, nae/ rhevm +his netor, is .se/ or the *o.ni*ations >eteen thehyervisor an/ the anager A//itional logi*al netor,s are *reate/ on the /ata *enter an/

alie/ to one or ore *l.sters +o >e*oe oerational4 the host atta*hes an intera*e to thelo*al netor, e .se/ >y the *l.sters an/ hosts o the *reating /ata *enter

refar'hfeeda'*+redhat$'om 3 www$redhat$'om


8/75

/igure &$&$#- RHEV En,ironmentrovi/es a grahi*al reresentation o a tyi*al Re/ 3at5nterrise Virt.aliEation environent ith ea*h *oonent liste/

www$redhat$'om 0 refar'hfeeda'*+redhat$'om

Figure 2.2.1: RHEV Environment


9/75

2.3 virt-v2vvirt-v2v*oan/ *onverts virt.al a*hines ro a oreign hyervisor to r.n on Re/ 3at5nterrise Virt.aliEation 22 or later 9t a.toati*ally a*,ages the virt.al a*hines into a ilethat is in the (en Virt.aliEation &orat (V& an/ .loa/s the to a Re/ 3at 5nterrise

Virt.aliEation e'ort storage /oain &ro the e'ort storage /oain4 the (V& iles *an >eiorte/ into Re/ 3at 5nterrise Virt.aliEation .sing the Re/ 3at 5nterrise Virt.aliEation:anager

Virt9( /rivers are se*ial aravirt.aliEe/ /rivers that rovi/e enhan*e/ eroran*e*aa>ilities or virt.al a*hines r.nning ithin the Re/ 3at 5nterrise Virt.aliEationenvironent Using virt-v2v4 the igration ro*ess >e*oes greatly siliie/ as theVirt9( /rivers are in@e*te/ into the virt.al a*hine4 hen ossi>le4 /.ring the igrationro*ess +he in@e*tion o the /rivers is a.toati*ally han/le/ >y the virt-v2v*oan//.ring the e'ort o the virt.al a*hine +he entire ro*ess is not sily @.st a *oy or overo*ess that ta,es la*e ro one hyervisor to another

+he/var/lib/virt-v2v/virt-v2v.dban//etc/virt-v2v.confiles *ontains the *onig.rationinoration or the virt-v2v*oan/ +hese iles allo the aing o netor,s4se*ii*ation o storage otions4 an/ the se*ii*ations o se*ii* iles an/ a*,ages reF.ire/or the vario.s s.orte/ oerating systes +he/var/lib/virt-v2v.dbile *ontains the /ea.lt*onig.rations an/ sho.l/ not >e o/iie/ +he/etc/virt-v2v.confile sho.l/ >e o/iie/ to*ontain *.sto *onig.rations thro.gh the .se o roiles

A//itional inoration regar/ing virt-v2van/ its *onig.ration ile *an >e o.n/ in the virt-v2v an/ virt-v2v*on an ages



10/75

3 Reference Architecture Environment+he environent .se/ in the riting o this Reeren*e Ar*hite*t.re *onsists o >oth hysi*alsystes an/ virt.al a*hines

+he olloing i*t.re /ei*ts the environent .se/ an/ is olloe/ >y a /es*rition o thesystes involve/


Figure 3.1: Reference Architecture Environment


11/75

2nfrastru'ture

RHEL 6 / KVM HYPERVISR- +his syste is a hysi*al server in the la> environentr.nning Re/ 3at 5nterrise in.' 6 an/ the Jernel->ase/ Virt.al :a*hine JV: hyervisor+he systes that are hoste/ are .tility or anageent tye systes an/ are hoste/ as virt.ala*hines to liit the har/are reF.ireents or this Reeren*e Ar*hite*t.re

RHEV M!"!#ER- +his virt.al a*hine r.ns the Re/ 3at 5nterrise Virt.aliEation :anageran/ is .se/ to anage the Re/ 3at 5nterrise Virt.aliEation environent

VSPHERE$LIE"%- +his virt.al a*hine r.ns the V:are vShere *lient that *onne*ts/ire*tly to the 5S;i server an/ to a**ess the R35V :anager e> intera*e

"&S SERVER- +his virt.al a*hine is r.nning Re/ 3at 5nterrise in.' 6 an/ e'orts to/ire*tories via N&S )oth the e'orte/ /ire*tories are .se/ >y the Re/ 3at 5nterriseVirt.aliEation environent an/ Re/ 3at 5nterrise Virt.aliEation :anager (ne e'orte//ire*tory is an 9S( Doain an/ the se*on/ e'orte/ /ire*tory is an 5'ort /oain

Migration S.stem

RHEL 6 V2V- +his is a hysi*al syste .se/ to eror the igration o the virt.ala*hines ro the V:are environent to the Re/ at 5nterrise Virt.aliEation environent+his syste is r.nning R35 6 an/ the virt-v2vtools +his syste has a**ess to the

5'ort Doain via N&S an/ the 5S;i server via ssh

VMware En,ironment

ES'I- +his is a hysi*al syste r.nning the V:are 5S;i hyervisor +his syste r.nsvirt.al a*hines that are igrate/ to the Re/ 3at 5nterrise Virt.aliEation environent /.ring

the riting o this Reeren*e Ar*hite*t.re

(I")(S2**+ )M!I"$"%RLLERVM- +his virt.al a*hine is r.nning y the other virt.al a*hines in thisenvironent

(I")(S, )ESK%PVM- +his is a virt.al a*hine r.nning y the


12/75

+he olloing ta>le lists the se*ii*ations or systes *onsi/ere/ art o the inrastr.*t.re

S.stem Spe'ifi'ations

R35 6 B JV:LDell Poer5/ge R810M

R35 620%Jernel 26%2-220171el6'866$Oe.-,v 01212-220"el62#

2 ' 5ight Core 9ntel ;eon ;7#60 CPUs 226=3E

128 =) :eory

$ ' 1$6 =) SAS internal /is, /rive RA9D #

2 ' )roa/*o =iga>it )AS5-+ :C Server A/aters

1 ' )roa/*o 10=iga>it D.al Port S&P! A/ater

R35V :anagerLVirt.al :a*hineM

R35 620%Jernel 26%2-220171el6'866$

1 ' Virt.al CPUsO5:U Virt.al CPU version *.6$-rhel6 226=3E

$ =) :eory

1 ' Virt9( Dis, ile 8 =)

1 ' Virt9( Netor, A/ater

vShere Client

LVirt.al :a*hineM

:i*rosot


13/75

+he olloing ta>le lists the hysi*al har/are an/ sotare se*ii*ations or the syste.se/ to eror the igration


R35 6 V2VL3P Proiant )$60*=6M

R35 620%Jernel 26%2-220171el6'866$

D.al So*,et4 O.a/ Core Bhyerthrea/ing8 *ores4 16 hyerthrea/s

9ntel;eonCPU ;###0 267=3E

$8 =) :eory

2 ' 1$6 =) SAS internal /is, /rive irrore/

2 ' )roa/*o Net;tree 99 )C:#77115 &le'-10 10=>5thernet Controller

Table 3-2: Migration System

+he olloing ta>le lists the hysi*al har/are an/ sotare se*ii*ations or the syster.nning the Re/ 3at 5nterrise Virt.aliEation hyervisor


Re/ 3at 5nterrise

Virt.aliEation 3yervisorLDell Poer5/ge R810M

R35V 3yervisor-62-2011121#0el62Jernel 26%2-22021el6'866$JV: 01212-220"el621

2 ' 5ight Core 9ntel ;eon ;7#60 CPUs 226=3E

128 =) :eory

$ ' 1$6 =) SAS internal /is, /rive RA9D #

1 ' Oogi* 9SP2#%2->ase/ 8=> &C 3)A1 ' $%0 =) .n

2 ' )roa/*o =iga>it )AS5-+ :C Server A/aters

1 ' )roa/*o 10=iga>it D.al Port S&P! A/ater

Table 3-3: Red Hat Enterprise irtuali!ation En"ironment

refar'hfeeda'*+redhat$'om www$redhat$'om


14/75

+he olloing ta>le lists the hysi*al an/ virt.al har/are an/ sotare se*ii*ations or ea*hsyste in the V:are environent


5S;iL3P Proiant D#80=# M

V:are 5S;i #00).il/ 62%860

$ ' O.a/ Core 9ntel ;eon ;7%#0 CPUs 2"%=3E

6$ =) :eory

$ ' 7% =) internal /is, /rives RA9D #

2 ' )roa/*o Net;tree 99 )C:#708 =iga>it 5thernetControllers

1 ' 9ntel 82#7259 =iga>it 5thernet Controller


15/75

All the Re/ 3at 5nterrise in.' systes r.n the iptablesireall .sing the /ea.lt ireall

r.les e'*et the v2v-nfsyste +his syste has >een *onig.re/ to allo N&S to .se stati*orts an/ the ireall to allo trai* ro the lo*al netor, to ass thro.gh the server See"ppendi6 "- Se'uring 7/S using 289ales

+he v2v-(2K+-)$is a /oain *ontroller an/ rovi/es a /oain .ser a**o.nt *alle/

refarch +his a**o.nt is .se/ or testing the /oain integration o the v2v-(,an/ v2v-rhelvirt.al a*hines

+he Re/ 3at 5nterrise Virt.aliEation environent .se/ is *onig.re/ or a single /ata*enter*alle/ "orth!erica +his /ata *enter *ontains one *l.ster *alle/ Infrastructurethat atta*hesto the v2v-rhevhhyervisor server +he /ata *enter has three storage /oains *onig.re/+he /ata /oain4 nae/ )ata4 is a i>re *hannel /oain +he e'ort an/ the 9S( /oain areN&S shares an/ are nae/ E01ortan/ ISrese*tively

refar'hfeeda'*+redhat$'om ## www$redhat$'om


16/75

4 Migration Overview:igrating virt.al a*hines ro an 5S;i syste to the Re/ 3at 5nterrise Virt.aliEationenvironent *an >e /one easily ith soe sile lanning Jnoing the igration ro*ess*an signii*antly hel in the lanning ro*ess +his allos >etter lanning o syste /onties as ell as reso.r*e availa>ility i iss.es arise /.ring a igration ro*ess +he igrationro*ess is o.tline/ >elo

8reparation- Conig.ration o the 5S;i server an/ the Re/ 3at 5nterrise Virt.aliEationenvironent .st >e erore/ to allo the igrations +he *onig.ration *onsists o theolloing

"etor3 $onfi45rationK Netor,s that e'ist in the 5S;i environent ay not e'ist inthe Re/ 3at 5nterrise Virt.aliEation 5nvironent 5F.ivalent netor,s .st >e*reate/ or ae/

E01ort )oainK An 5'ort Doain .st >e *reate/ an/ /eine/ on the Re/ 3at

5nterrise Virt.aliEation environent +his 5'ort Doain is .se/ or the teorarystorage o the virt.al a*hines /.ring the igration ro*ess

#5et %ool IS K +he =.est +ools 9S( .st >e .loa/e/ into the Re/ 3at 5nterriseVirt.aliEation environent

#ather Virt5al Machine Inforation K 9noration a>o.t the virt.al a*hine4 its.n*tion4 an/ any servi*es it oers sho.l/ >e note/ +his hels ith the igrationlanning as ell as ens.ring the virt.al a*hine .n*tions as reF.ire/ ater igration

Commit SnapshotsK Any snashots on the virt.al a*hines .st >e *oitte/ >eore thee'ort ro*ess starts

Uninstall VMare !oolsK V:are +ools .st >e .ninstalle/ ro the virt.al a*hines rior

to starting the igration ro*ess

E6port Virtual Ma'hineK 5'orting the virt.al a*hine is /one .sing the virt-v2v*oan/ an/ tools +his *oan/ is e'e*.te/ on a Re/ 3at 5nterrise in.' server

2mport Virtual Ma'hineK 9orting the virt.al a*hines is /one .sing the Re/ 3at5nterrise Virt.aliEation :anager intera*e

8ost MigrationK Ater the virt.al a*hines are iorte/ into the ne environent a eore ost igrations stes .st >e erore/

&irt oot K &or ase/ virt.al a*hines it is reF.ire/ to re*onig.re thenetor, inoration sin*e a ne netor, a/ater is resente/ an/ the e teste/ or .n*tionality

$leanin4 51K +he virt.al a*hines still e'ist in the original 5S;i environent an/*oies o the e'ist on the 5'ort Doain +hese .st >e a//resse/ an/ reove/

www$redhat$'om #& refar'hfeeda'*+redhat$'om


17/75

5 Migration Preparation+he igration ro the V:are environent to the Re/ 3at 5nterrise Virt.aliEationenvironent reF.ires soe rearation in or/er to a,e the igration ro*ess r.n soothly+his se*tion /is*.sses these rearations

+his aer ass.es that a *.rrently installe/ an/ .n*tioning Red Hat EnterpriseVirtuali#ationenvironent is the /estination or the igrate/ virt.al a*hines 9 this is not the*ase4 a Red Hat Enterprise Virtuali#ationenvironent .st >e installe/ an/ *onig.re/ riorto starting the igrations 9 an aroriate environent is not *onig.re/4 lease reer to"ppendi6 :- Referen'esor lin,s on ho to set . an/ *onig.re an environent

".1 #a$% Up Virtual Ma$hines9t is alays re*oen/e/ to have a goo/ >a*,. an/ restore lan in la*e in *ase o any.noreseen iss.es that ay *a.se /ata loss +he igration o virt.al a*hines is no /ierent:a,e s.re there are ,non goo/ >a*,.s o the systes involve/ in this igration an/ a

roven ro*ess to restore the systes

+here are any tools to a**olish these tas,s that in*l./e >asi* in.' *oan/s to .lleat.re/ >a*,. an/ restore ali*ations oere/ >y the *o.nity an/ a@or sotareven/ors +he >a*,. an/ restoration o the /ata is not ithin the s*oe o this aer3oever4 the R35V %0 )a*,. an/ Re*overy .sing A*ronis2Reeren*e Ar*hite*t.re/is*.sses the s.>@e*t

2 httsBBa**essre/hat*oB,nole/geBrear*hB2012-rhev-%0->a*,.-re*overy-.sing-a*ronis

refar'hfeeda'*+redhat$'om #3 www$redhat$'om
https://access.redhat.com/knowledge/refarch/2012-rhev-30-backup-recovery-using-acronishttps://access.redhat.com/knowledge/refarch/2012-rhev-30-backup-recovery-using-acronishttps://access.redhat.com/knowledge/refarch/2012-rhev-30-backup-recovery-using-acronishttps://access.redhat.com/knowledge/refarch/2012-rhev-30-backup-recovery-using-acronis


18/75

".2 Map and Create &etor%sNetor,s that are .se/ >y the virt.al a*hines in the 5S;i environent ay not e'ist in theRe/ 3at 5nterrise Virt.aliEation environent +hese netor,s .st >e *reate/4 ae/ tone netor,s4 or >oth

A netor, .st >e *reate/ i there are no netor,s /eine/ in the Re/ 3at 5nterriseVirt.aliEation environent that at*h or eet the reF.ireents o the virt.al a*hines/eine/ netor, R.nning netor,s ith VANs or having .ltile netor,s *o.l/ >e areason or this

9 a s.ita>le netor, /oes e'ist >.t is *alle/ a /ierent nae4 then a netor, aing *an >e*reate/ >y e/iting the/etc/virt-v2v.confile 9 the netor, /einitions are sile4 then a*oan/ line otion to the virt-v2vigration *oan/ *an >e se*iie/ +his etho/allos the /eining o a single /ea.lt o all>a*, netor, nae to .se

Creating aings >eteen the to environents *an hel avoi/ netor, iss.es ith thevirt.al a*hines +his *an easily >e /one >y *reating a ta>le siilar to 9ale 5$- 7etwor*

Mappings +his ta>le is irst o.late/ ith the virt.al netor, inoration ro the 5S;ienvironent4 then the naes o the virt.al netor,s /eine/ in the Re/ 3at 5nterrise5nvironent are la*e/ into the ta>le i they at*h the netor, an/ VAN inorationalrea/y entere/ +he ta>le *an easily >e viee/ to see hat aings *an >e a/e or i nevirt.al netor,s .st >e *reate/ in the Re/ 3at 5nterrise Virt.aliEation environent

7etwor* V;"7 ESXi 7etwor*

7ameRHEV 7etwor*

7ame 7otes

10161%60B21 V: Netor, inrastr.*t.re Netor, or9nrastr.*t.reServers

0000B0any netor,

rhev Dea.lt R35VNetor,

Table %&2-1: 'et$or( Mappings

+he /ata in the a>ove ta>le shos that the VM "etor3netor, on the on the 5S;i server.st >e ae/ to the infratr5ct5renetor, in the Re/ 3at 5nterrise Virt.aliEation5nvironent +he VM "etor3*o.l/ also or, i *onne*te/ to the rhevnetor, sin*e therhevnetor, is *onig.re/ to ass trai* on any netor, 0000B0

9 a ro in the ta>le ha/ a netor, that as .se/ an/ *ontaine/ an entry in the ES'i "etor3"ae*ol.n >.t not the RHEV "etor3 "ae*ol.n4 then a ne netor, .st >e *reate/

in the Re/ 3at 5nterrise Virt.aliEation environent

www$redhat$'om #0 refar'hfeeda'*+redhat$'om


19/75

5.2.1 Creating the Networks

9n the Re/ 3at 5nterrise Virt.aliEation :anager intera*e4 sele*t the Data Centersta>

+he /ata *enters /eine/ in the environent are liste/

Sele*t the NorthAmerica/ata *enter A Detailane aears at the >otto o the

in/o Sele*t Logical Networks in the Detailane an/ sele*t on the New>.tton

A ne in/o oens *alle/ New Logical Network

refar'hfeeda'*+redhat$'om #5 www$redhat$'om

Figure 5.2.1.1: New Logical Networ


20/75

+he Namean/ Descriptionor the ne logi*al netor, is entere/ as shon in the olloingig.re (n*e the inoration is entere/4 *he*, the >o' ne't to Infrastructureto assign thenely *reate/ netor, to the Infratr5ct5re*l.ster Sele*t the OK>.tton to *olete the tas,+he ne netor, is no *reate/ an/ liste/ .n/er the Logical Networksta> o the Detailsane

+he netor, no shos . in the Logical Networko the Detailsane +he netor, has ani*on ne't to it that loo,s li,e a >ro,en ren*h +his is ine or no4 the netor, .st >e

assigne/ to a hysi*al netor, intera*e


Figure 5.2.1.2: Logical Networ


21/75

Reer to the olloing ig.re hile assigning a hysi*al intera*e to the logi*al netor, Sele*t

the Hoststa> an/ sele*t the server 4 a Detailsane oens . Sele*t the Network

Interfacesta> an/ sele*t an .n.se/intera*e 4 this Reeren*e Ar*hite*t.re .ses the

eth1intera*e Sele*t the Add / dit>.tton to oen the dit Network Interfacein/o

refar'hfeeda'*+redhat$'om # www$redhat$'om

Figure 5.2.1.3: A!!ign "nterface


22/75

+he olloing ig.re /ei*ts the dit Network Interfacein/o 9n the dit Network Interfacein/o4 a,e s.re the ne netor, *alle/ infrastructureis sele*te/ or the Networkotionan/ the ra/io >o' *alle/ Noneis sele*te/ DHC!or "tatic*o.l/ >e sele*te/ to rovi/e theintera*e ith an 9P a//ress +his allos the Re/ 3at 5nterrise Virt.aliEation server to >ea**esse/ ro this intera*e +his is not reF.ire/ or this Reeren*e Ar*hite*t.re :a,e s.rethe "a#e network configuration*he*, >o' is *he*,e/ Sele*t the OK>.tton to aly the

*hanges

+he intera*es i*on in the Network Interfacesta> *hanges to a green arro ointing . +hisin/i*ates the intera*e is . an/ a*tive


Figure 5.2.1.#: E$it "nterface


23/75

5.2.2 Mapping the Networks+he/etc/virt-v2v.conf*onig.ration ile allos the aing o netor,s ro the original virt.alenvironent to the ne virt.al environent +his *onig.ration ile *ontains neste/ netor,se*tions in the olloing orat

+he o.tsi/e netor, se*tion /eines the netor, on the environent >eing igrate/ ro+he insi/e /einition /eines hat netor, to a to on the /estination environent

+he aing .se/ in this aer to a the V: Netor, virt.al netor, on the 5S;i systeto the virt.al netor, *alle/ inrastr.*t.re in the Re/ 3at 5nterrise Virt.aliEation environentloo,s as ollos

+he 5S;i virt.al netor,s are treate/ as >ri/ges >y the virt-v2v*oan/ an/ theaings in the virt-v2v.confile sho.l/ .se a netor, tye o >ri/ge

refar'hfeeda'*+redhat$'om # www$redhat$'om


24/75

".3 Create an E'port (omain(en the Re/ 3at 5nterrise Virt.aliEation :anager Sele*t the New Domain>.tton in the"torageta> +his >rings . a New Domainin/o as seen in /igure 5$3$#- 7ew :omain

=ive the ne storage /oain a Nameo Export Sele*t NorthAmericaas the Data Center

Sele*t $port / N%"as the /oain .n*tion an/ sele*t #'(rhe#has the host to .se ora**ess to the ne e'ort /oain

&inally4 se*iy v2v3-nfs.cloud.lab.eng.bos.redhat.com:/exports/Exportas

the e'ort ath .sing an N&S UR9 +he &ODN .st >e .se/ hen se*iying the lo*ationSele*t the OK>.tton an/ the ne 5'ort Doain is /islaye/ in the "torageta> ith a stat.so Inacti#e.

www$redhat$'om &% refar'hfeeda'*+redhat$'om

Figure 5.3.1: New %omain


25/75

+he ne e'ort /oain .st >e a*tivate/ Sele*t the Data Centersta> then sele*t the

NorthAmerica/ata *enter :a,e s.re the "torageta> is sele*te/ .n/er the Details

ane Sele*t on the Acti#ate>.tton +he stat.s o the e'ort /oain *hanges ro

Inacti#eto Locked)Ater a e oents4 the stat.s *hanges to Acti#e

refar'hfeeda'*+redhat$'om www$redhat$'om

Figure 5.3.2: Activating the E&'ort %omain


26/75

".) Upload Re*uired +S,s to the Red Hat EnterpriseVirtualization EnvironmentD.ring the igration ro*ess4 the virt-v2v*oan/ or the Re/ 3at 5nterrise

Virt.aliEation :anager ay install ne a*,ages or /rivers into the virt.al a*hines ase an/ sho.l/ not >e o/iie/ Ne entries sho.l/ >e*reate/ in the/etc/virt-v2v.confile 5ntries in the/etc/virt-v2v.confile have re*e/en*e overthe/var/lib/virt-v2v/virt-v2v.dbile +he a*,ages an/ /rivers are rovi/e/ >y the Red Hat

Network4 the virtio-wina*,age4 or the Guest Tools ISO

+he olloing is a artial/var/lib/virt-v2v/virt-v2v.dbile

[ ... output abbreviated ... ]


27/75

+he !PPtags also /eine the oerating systes an/ ini. a*,age versions reF.ire/ +hea*,ages liste/ .n/er the !PPtags ill >e installe/ ro the lo*al /ire*tories lo*ate/ on thesyste r.nning the virt-v2v*oan/

+he P!%Htag /eines the lo*ation o the ile on the syste 9 the ile lo*ation is not se*iie/.sing its a>sol.te ath4 the P!%H-R%tag .st e'ist an/ the ile is lo*ate/ .n/er the /ire*tory

it se*iies[ ... output abbreviated ... ]

rhel"#"$ernel-%&6&(-%(&el#&i6(6&rp

[ ... output abbreviated ... ]

+he a>ove e'ale shos the ,ernel a*,age or Re/ 3at 5nterrise in.' # is /var/lib/virt-v2v/oftare/rhel/7/3ernel-2.6.8+-82+.el2.i6+6.r1 +he )EPtag shos that Re/ 3at5nterrise in.' # also reF.ires the ecrypt!s-utilsa*,age installe/ Another set o !PP

an/ P!%Htags sho the lo*ation o the reF.ire/ ecrypt!s-utilsa*,age

refar'hfeeda'*+redhat$'om &3 www$redhat$'om


28/75

5.4.1 Red Hat Enterprise Linux Based Virtual Machines+he virt-v2v*oan/ ay install a ne ,ernel an/ /rivers in the virt.al a*hine +his

haens i the e'isting ,ernel /oes not r.n the Virt9( /rivers +his >ehavior *an >e *ontrolle/>y installing a ,ernel that is *aa>le o s.orting the Virt9( /rivers rior to e'e*.ting thevirt-v2v*oan/ A Re/ 3at 5nterrise in.' #2 ,ernel /oes not s.ort the Virt9(

/rivers4 in this *ase the virt-v2v *oan/ installs a later ,ernel as in/i*ate/ in the virt-v2v.conf ile

+he ,ernel a*,ages .st >e availa>le /.ring the e'e*.tion o the virt-v2v*oan/ +he

a*,ages ill >e installe/ .sing the virt.al a*hines ./ate agent 9 the a*,ages *annot >einstalle/ .sing the ./ate agent4 the a*,ages .st >e an.ally /onloa/e/ an/ la*e/ inthe aroriate lo*ation as /eine/ in the/etc/virt-v2v.confan//var/lib/virt-v2v/virt-v2v.db*onig.ration iles

+he an age or the virt-v2v.confile an/ the ile itsel *an >e reerre/ to hen *onig.ringany o the a>ove

5.4.2 Windows Based Virtual Machines+he virt-v2v*oan/ installs ne /rivers that allo the virt.al a*hine to >oot +he

virtio-winan/ libuest!s-winsupporta*,ages .st >e installe/ to rovi/e the

ne*essary iles (n*e the ne /rivers are installe/4 the virt.al a*hine *an >oot in the nevirt.aliEation environent 3oever4 the virt.al a*hine /oes not have all the /rivers reF.ire/to oerate *orre*tly in the ne environent

+he reaining reF.ire/ /rivers are rovi/e/ >y the Guest Tools ISOhen the virt.al

a*hine is iorte/ into the Re/ 3at 5nterrise Virt.aliEation environent

www$redhat$'om &0 refar'hfeeda'*+redhat$'om


29/75

5.4.3 Guest Tools ISO+he rhev-iso-.loa/er *oan/ on the Re/ 3at 5nterrise Virt.aliEation :anager .loa/siles to the 9S( storage /oains /eine/ in the environent +he --iso-domainotion

se*iies the 9S( storage /oain or the .loa/e/ iles See the an age or the rhev-iso-

.loa/er *oan/ or ore inoration a>o.t the *oan/ an/ its otionsUloa/ the =.est +ools 9S( to the storage /oain *alle/ 9S( .sing the olloing *oan/S.ly the a/in assor/ hen as,e/

7 r"evm-iso-uploader --iso-domain ISO upload #usr#s"are#r"ev-uest-tools-iso#r"ev-tools-setup$iso/lease provide the RE18 ./4 password or the adin9internal RHE3-0 user:;8RL to abort?

+he Guest Tools ISOis no .loa/e/ an/ availa>le to >e .se/ in the environent

refar'hfeeda'*+redhat$'om &5 www$redhat$'om


30/75

"." ather Virtual Ma$hine +normationNe storage /rivers4 netor, /rivers4 an/ vi/eo /rivers are installe/ /.ring the igrationro*ess +his *an ae*t the *onig.ration o the virt.al a*hines in the ne environentA/@.stent o the vi/eo resol.tion ight >e reF.ire/ or the netor, a/aters ight *hange

naes ater the igrate/ syste >ootsSoe oerating systes eg e*a.se the a/ater is viee/ as a ne a/ater in the g.estoerating syste instea/ o a rela*eent a/ater )e*a.se o this4 it is a goo/ i/ea to a,enote o any iortant netor, inoration +he olloing ta>le *ontains inoration a>o.t thevirt.al a*hines .se/ in this aer +he ta>le re*or/s soe o the ore *oon*onig.ration araeters



31/75

Virtual Ma'hine !onfiguration

v2v%-


32/75

6 Migrating the Virtual Machines+he igration o the virt.al a*hines *an >e a slo ro*ess /een/ing on the siEe o thevirt.al /is,s an/ ho any virt.al a*hines are >eing igrate/ )eore the virt.al a*hines*an >e igrate/4 all the snashots .st >e *oitte/4 V:are +ools .st >e .ninstalle/4an/ the virt.al a*hine .st >e oere/ o (n*e these tas,s are /one4 the igrationro*ess *an >egin

/.1 Committin0 SnapshotsVirt.al a*hines r.nning on the 5S;i server ay have snashots o the /is, iages +hesesnashots .st >e *oitte/ to the original /is, iage >eore the virt.al a*hine ise'orte/ .sing the #irt(#*oan/ +he #irt(#*oan/ only igrates the original /is,iage iles an/ not the snashot /eltas

+o *oit snashots4 .se the right o.se >.tton to sele*t the virt.al a*hine nae an/*hoose "napshot "napshot *anager As seen in the ig.re >elo


Figure (.1.1: )na'!hot!


33/75

A in/o oens . that lists the snashots that have >een a/e on a virt.al a*hineChoose the latest snashot an/ sele*t the Delete All>.tton +his *oits all the snashots

A *oniration in/o os . as,ing i *onsoli/ating an/ reoving all the snashots isinten/e/ to >e /one Sele*t the +es>.tton to *oit an/ reove the snashots

refar'hfeeda'*+redhat$'om & www$redhat$'om

Figure (.1.2: )na'!hot *anager


34/75

/.2 Uninstallin0 VMare !ools%&ware Tools.st not >e installe/ in the virt.al a*hines hen the e'ort ro*ess is

starte/ 9 a virt.al a*hine is e'orte/ hile %&ware Toolsis installe/4 it ay not .n*tion

*orre*tly in the ne environent% 9 %&ware Toolsare .ninstalle/4 it is a goo/ i/ea to

re>oot the virt.al a*hine to a,e s.re the virt.al a*hine still .n*tions *orre*tly >eore thee'ort ro*ess is starte/

Uninstall %&ware Toolsro the y

sele*ting the "tart ,utton Control !anel !rograms !rograms and %eatures Sele*t -*ware.oolsan/ an ninstall>.tton aears in the >ar a>ove the sotare sele*tions Sele*t theninstall>.tton +he %&ware Toolssotare is .ninstalle/

+he virt.al a*hine is re>oote/ >y tying the 0Alt(%2,ey *o>ination at the virt.ala*hines *onsole an/ sele*ting 3estartro the /ro /on en. that is title/ 4hat do 5ouwant the computer to do6 Sele*ting the Comment>o' allos se*iying a reason or there>oot4 this is reF.ire/ 5nter a!ing sure the s"stem functions correctl"

after #$are %ools are uninstalled.in the Coent >o' Sele*t the OK>.ttonstart the re>oot ro*ess

Uninstall %&ware Toolsro the


35/75

/.3 Shuttin0 (on the Virtual Ma$hinesA virt.al a*hine .st >e oere/ o >eore it *an >e e'orte/ .sing the virt-v2v*oan/ ling sshon the 5S;i server allos a**ess to the vim-cmd*oan/ on the 5S;iserver +his *oan/ rovi/es a eans to F.ery an/ *ontrol the oer state o the virt.ala*hines

+he oer state o the virt.al a*hines *an >e /islaye/ .sing the ssh*lient an/ the 5S;isystes vim-cmd*oan/ 9n or/er to F.ery the virt.al a*hines oer state4 the Virt.al:a*hines Vi/ is reF.ire/ +he vim-cmd/islays this as ell +he irst *oan/ in theolloing e'ale /islays the virt.al a*hine naes an/ their rese*tive Vi/s +hese*on/ *oan/ /islays the oer state or one o the virt.al a*hines .sing its Vi/

7 ss" v2v(-esxi vim-cmd vmsvc#etallvms /awk 01print , 3 3 240

3id Bae v%v,-C%D(-;% v%v,-C, v%v,-rhel

7 ss" v2v(-esxi vim-cmd vmsvc#power$etstate (

Retrieved runtie ino/owered on

Re/ 3at 5nterrise in.' >ase/ virt.al a*hines *an >e oere/ o reotely .sing the ssh*oan/ line *lient an/ ase/ virt.al a*hines *an >e oere/ o reotely .singthe in.' net*oan/ that is rovi/e/ >y the samba-commona*,age +he virt.al

a*hines ay also >e oere/ o .sing the vim-cmd*oan/ on the 5S;i server 9 thevim-cmd*oan/ is .se/4 the virt.al a*hines on the 5S;i server ay not eror agra*e.l sh.t/on sin*e %&ware Toolsare not installe/ Use the vim-cmdetho/ ith

*a.tion sin*e a non-gra*e.l sh.t/on o a virt.al a*hine is not re*oen/e/

refar'hfeeda'*+redhat$'om 3# www$redhat$'om


36/75

Sh.t/on the virt.al a*hines reotely .sing the aroriate *oan/s +he olloingo.t.t shos all the virt.al a*hines sh.tting /on s.**ess.lly e'*et the .tton to start a gra*e.l sh.t/on

Ater aiting a e in.tes to allo the virt.al a*hines to sh.t/on roerly4 the vim-cmd*oan/ is .se/ to *he*, the oer state o the Virt.al :a*hines

7 ss" v2v(-esxi vim-cmd vmsvc#etallvms / awk 01print , 3 3 2403id Bae v%v,-C%D(-;% v%v,-C, v%v,-rhel

: ss" v2v(-esxi vim-cmd vmsvc#power$etstate ,

Retrieved runtie ino/owered o

: ss" v2v(-esxi vim-cmd vmsvc#power$etstate 2


: ss" v2v(-esxi vim-cmd vmsvc#power$etstate (


www$redhat$'om 3& refar'hfeeda'*+redhat$'om


37/75

/.) E'portin0 the Virtual Ma$hines5'orting the virt.al a*hines is /one >y e'e*.ting the virt-v2v*oan/ ro a Re/ 3at

5nterrise in.' 6 syste that *ontains the virt-v2v4 virtio-win4 an/ libuest!s

a*,ages installe/ +hese a*,ages are availa>le .n/er the Red Hat .nterprise ;inux

Server Supplementaryan/ Red Hat .nterprise ;inux Server %2% Tools !or

7indows*hannels o the Red Hat Network

7 r"n-c"annel -u admin -p [&ass$ord]-a -c r"el-x8o.t the synta' o the .netrcile +he a*hine nae in the ile .st >ei/enti*al to the one .se/ on the *oan/ line 9 an internet roto*ol 9P a//ress or a .llyF.aliie/ /oain nae are .se/ on the *oan/ line4 then they .st aear in the .netrcile )e*a.se the *oan/ line in this aer is .sing the short DNS nae4 that is the nae.se/ in the ile +he root .ser is .se/ to e'e*.te the virt-v2v*oan/ in this aer4 sothe *olete ath to the .netrcile .se/ in this aer is/root/.netrc +he .netrcile .se/ orthis aer is liste/ >elo

achine v%v,-esxilo+in rootpassword password



38/75

1$0$#$& e .se/ +his etho/ isalso the /ea.lt etho/ an/ is not reF.ire/ to >e se*iie/ on the *oan/ line 3oever4 itis se*iie/ or the riting o this aer in or/er to hel rea/a>ility

+he lo*ation o the hyervisor .st >e se*iie/ as ell +his is /one .sing the -ic otion +helo*ation is se*iie/ .sing the UR9 orat +o *onne*t to an 5S;i server4 the UR9 se*ii*ationis in the orat o e0;//erverles *ertii*ate *he*,ing

+he in*olete *oan/ >.ilt so ar loo,s li,e the olloing

7 virt-v2v -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+,

+he etho/ in hi*h to store the e'orte/ iage .st >e se*iie/ as ell +his is /one.sing the -ootion +he virt-v2v*oan/ *an store the iages as either a li>virt g.est -o libvirt or as an iage to >e iorte/ into a Re/ 3at 5nterrise Virt.aliEation environent -o rhev Sin*e the virt.al a*hines are >eing iorte/ into a Re/ 3at 5nterrise Virt.aliEationenvironent4 the -o rhevotion is .se/ +his otion also reF.ires the -o otion to >ese*iie/ +he -o otion /eines the lo*ation o the 5'ort Doain that is /eine/ in the Re/3at 5nterrise Virt.aliEation environent

+he *oan/ line is alost *olete an/ no loo,s li,e

7 virt-v2v -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, -o r"ev -os v2v(-n!s'#exports#.xport

+he virt-v2v*oan/ allos a /ea.lt netor, or >ri/ge to >e /eine/ i a netor, *annot

>e ae/ >eteen the virt.aliEation environents +he -b otion se*iies a /ea.lt >ri/gean/ the -n otion se*iies a /ea.lt netor, (nly one o these otions *an >e se*iie/ at atie an/ >oth ta,e a single arg.ent that i/entiies the >ri/ge or netor,

Altho.gh the netor,s are ae/ in the/etc/virt-v2v.confile4 it is a goo/ i/ea to se*iy a

/ea.lt >ri/ge or netor, in *ase a aing as isse/+he /ea.lt netor, on a Re/ 3at 5nterrise Virt.aliEation environent is *alle/ rhevUsing this as a /ea.lt netor, hels revent virt.al a*hines that have netor,s that erenot ae/ to *ontin.e to have soe or o netor, a**ess



39/75

+he inal arg.ent to the virt-v2v*oan/ is the virt.al a*hine nae +he virt.ala*hine naes are /islaye/ in the vShere *lient intera*e or they *an >e liste/ ro the5S;i *oan/ line +he *oan/ in the olloing e'ale /islays the Virt.al :a*hines9/entiier Vi/ an/ the Virt.al :a*hines nae .sing the 5S;i *oan/ line

7 ss" v2v(-esxi vim-cmd vmsvc#etallvms / awk 01print , 3 3 240

3id Bae v%v,-C%D(-;% v%v,-C, v%v,-rhel

+he olloing *oan/ line *o.l/ >e .se/ to igrate the virt.al a*hines in this Reeren*eAr*hite*t.re4 hoever this Reeren*e Ar*hite*t.re .ses PR&ILES*reate/ in the/etc/virt-v2v.confile to shorten the *oan/ line

7 virt-v2v -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, -o r"ev -os v2v(-n!s'#exports#.xport --network r"evm [#'E]



40/75

1$0$#$3 8rofiles

+he virt-v2v*oan/ allos the .se o roiles to se*iy the etho/ to .se to get thevirt.al a*hine inoration4 netor, aings4 an/ o.t.t storage lo*ations Proiles arese*iie/ in the/etc/virt-v2v.confile +he olloing is the *ontents o the *onig.ration ile.se/ or this Reeren*e Ar*hite*t.re

rhev

+he etho/T tag se*iies the o.t.t etho/

+he storageT tag se*iies the storage lo*ation an/ *an also se*iy the orat o the/estination /is, ile an/ i the /is, sho.l/ >e a sarse or reallo*ate/ tye +he /estination/is, iles ill have the sae orat an/ allo*ation as the original iles sin*e this *onig.rationile /oes not se*iy the orat an/ allo*ation tye

+o netor,s are *onig.re/ in the ile +he irst netor, /einition as the >ri/ge/ netor,*alle/ V: Netor, on the 5S;i server to the inrastr.*t.re netor, in the Re/ 3at 5nterriseVirt.aliEation environent +he se*on/ /einition as all other netor,s on the 5S;i serverto the rhev netor, in the Re/ 3at 5nterrise Virt.aliEation environent

ove roile4 the *oan/ line .se/ to igrate the virt.al a*hines/.ring the riting o this aer is

7 virt-v2v -p v2v(-r"ev -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, [#'E]



41/75

6.4.2 Exporte e'orte/ ro the 5S;i server

+he virt.al a*hines are e'orte/ .sing the virt-v2v*oan/

7 virt-v2v -p v2v(-r"ev -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, v2v(-r"elv%v,-rhelv%v,-rhel? ))I J==========================================K)h)*(svirt-v%v? v%v,-rhel coni+ured with virtio drivers&

7 virt-v2v -p v2v(-r"ev -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, v2v(-72>8-6?v%v,-C%D(-;v%v,-C%D(-;? ))I J====================================K)h%6Fsvirt-v%v? v%v,-C%D(-; coni+ured with virtio drivers&

7 virt-v2v -p v2v(-r"ev -i libvirt -ic esx'##v2v(-esxi#)no*veri!y+, v2v(-79v%v,-Cv%v,-C? ))I J==============================================K)h%6*svirt-v%v? v%v,-C coni+ured with virtio drivers&



42/75

/." +mportin0 the Virtual Ma$hines+he virt.al a*hines *an >e iorte/ .sing either the Re/ 3at 5nterrise Virt.aliEation:anager grahi*al .ser intera*e or the R5S+ AP9 intera*e )oth etho/s are e'laine/>elo

6.5.1 Graphical User Interface9orting virt.al a*hines .sing the grahi*al intera*e is sile to /o an/ allos iorting.ltile virt.al a*hines at the sae tie (en the anageent *onsole on the Re/ 3at5nterrise Virt.aliEation :anager an/ .se /igure 1$5$#$#- 2mport Sele'tionas a reeren*e to*hoose the virt.al a*hines to iort

Sele*t on the "torageta> to vie the storage /oains Choose the $porte'ort

/oain in the /oain list an/ a Detailsane oens Sele*t on the -* Importta> in

the Detailsane an/ a list o virt.al a*hines is /islaye/ +hese virt.al a*hines are

rea/y to >e iorte/ Sele*t all the virt.al a*hines >y hol/ing /on the 0ctrl2,ey hilesele*ting ea*h virt.al a*hine

+he Import>.tton >e*oes visi>le Sele*t the Import>.tton to oen . the Import -*

in/o4 as seen in /igure 1$5$#$3- 2mport 7otifi'ation



43/75

+he Import -irtual *achine7s8in/o lists the virt.al a*hines that are sele*te/ or iort+his is seen in the olloing ig.re Choose Infrastructureas the Destination Clusteran/ Dataas the Destination "torage +hese are highlighte/ in the ig.re >elo Sele*t the OK>.tton tostart the iort ro*ess



44/75

A in/o aears in/i*ating the virt.al a*hines are >eing iorte/ +his in/o is shon>elo Sele*t the Close>.tton to *lose the in/o

+he stat.s o the iort ro*ess is viee/ >y .sing the #ents+a> as shon in /igure1$5$#$5- Virtual Ma'hine Status


45/75

D.ring the iort ro*ess4 the "tatuso the virt.al a*hines is set to Locked (n*e thero*ess is *olete4 the "tatus*hanges to Downas shon in /igure 1$5$#$5- VirtualMa'hine Status

6.5.2 REST API+he Re/ 3at 5nterrise Virt.aliEation :anager rovi/es a RES% !PIintera*e that allosa**ess to a >roa/ set o eat.res ithin the Re/ 3at 5nterrise Virt.aliEation :anagerA**essing the RES% !PI*an >e /one .sing the curl*oan/

+his aer /is*.sses the R5S+ AP9 only >riely in an attet to rovi/e the inorationreF.ire/ to .n/erstan/ its .se ithin this aer An in-/eth /is*.ssion o the R5S+ AP9 an/ho to a**ess it is o.t o the s*oe o this aer Rea/ the Red Hat Enter1rie Virt5ali@ation.* A RES% !PI #5ideBor ore inoration on the RES% !PI

Port 8$$% on the Re/ 3at 5nterrise Virt.aliEation :anager is a se*.re *onne*tion +he*ertii*ate ile or the server .st >e /onloa/e/ an/ .se/ ith the curl*oan/

+he curl*oan/ *an >e .se/ to /onloa/ the *ertii*ate

: curl -o ca$crt "ttp'##v2v(-r"evm'8@8@#ca$crt

I 8otal I Received I erd .vera+e 1peed 8ie 8ie 8ie ;urrentload @pload 8otal 1pent Let 1peed

)% ,# )% ,# ) ) ,#$ ) --?--?-- --?--?-- --?--?-- ,*($

$ httBB/o*sre/hat*oB/o*sBen-USBRe/3at5nterriseVirt.aliEationB%0BhtlBR5S+AP9=.i/eBin/e'htl

http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.html


46/75

+he R5S+ AP9 is a**esse/ .sing a UR9 +he olloing synta' is .se/ or the UR9

https://[+E#01,]:3/api/[E%+4&*5%]


47/75

Reso.r*es ithin the environent are assigne/ a UU9D +he UU9D o the storage /oainsan/ virt.al a*hine iles are nee/e/ to iort the virt.al a*hines +he olloing *oan/retrieves the UU9Ds o the storage /oains

7 curl --silent --cacert ca$crt --"eader 3?ontent-Type' application#xml3 A --user 3adminBinternal'[&ass$ord]3 A --reCuest 3G.T3

A "ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains A / rep -. 3domain id/name3

Using the UU9D o the 5'ort /oain4 the UU9Ds o the virt.al a*hines rea/y to >e iorte/are retrieve/

7 curl --silent --cacert ca$crt --"eader 3?ontent-Type' application#xml3 A --user 3adminBinternal'[&ass$ord]3 A --reCuest 3G.T3 A"ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains#2a88e=8


48/75

+he olloing *oan/s start the iort o the virt.al a*hines +he o.t.t ret.rne/ rothe RES% !PIin/i*ates a state o pending

7 curl --silent --cacert ca$crt A --"eader 3?ontent-Type' application#xml3 A --user 3adminBinternal'[&ass$ord]3

A --reCuest 3FOST3 A --data 3A actionAA storae*domainAA nameA6ata#nameAA #storae*domainAAA clusterAA nameAIn!rastructure#nameAA #clusterAA #actionAA 3 A

"ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains#2a88e=8

true

7 curl --silent --cacert ca$crt A --"eader 3?ontent-Type' application#xml3

A --user 3adminBinternal'[&ass$ord]3 A --reCuest 3FOST3 A --data 3A actionAA storae*domainAA nameA6ata#nameAA #storae*domainAAA clusterA



49/75

A nameAIn!rastructure#nameAA #clusterAA #actionAA 3 A"ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains#2a88e=8

true

7 curl --silent --cacert ca$crt A --"eader 3?ontent-Type' application#xml3 A --user 3adminBinternal'[&ass$ord]3 A --reCuest 3FOST3 A --data 3A actionAA storae*domainAA nameA6ata#nameAA #storae*domainAAA clusterAA nameAIn!rastructure#nameAA #clusterAA #actionAA 3 A

"ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#storaedomains#2a88e=8


50/75

ata

4nrastructure

pendin


51/75

+he stat.s o the iort ro*ess is liste/ as the stat.s o the virt.al a*hine +he virt.ala*hine UU9D is .se/ to F.ery the stat.s o the iort ro*ess

7 curl --silent --cacert ca$crt --"eader 3?ontent-Type' application#xml3 A --user 3adminBinternal'[&ass$ord]3 A --reCuest 3G.T3 A"ttps'##v2v(-r"evm$cloud$lab$en$bos$red"at$com'8==(#api#vms#!9(9=8bb-@2a!-

=@,2-a!,E-9@c!EEDcbE@b / rep -v link

4ported with virt-v%vserver

alse

%)%-)6-(8F?#?**&6,#-)#?))alse



52/75

/./ erormin0 ost Mi0ration !as%sA e ore tas,s are reF.ire/ to >e erore/ ater the virt.al a*hines are iorte/ intothe Re/ 3at 5nterrise Virt.aliEation environent +hese in*l./e >ooting the virt.al a*hinesthe irst tie in the ne environent4 testing the .n*tionality o the virt.al a*hines4 an/*leaning . any teorary iles that ere *reate/ an/ reoving the virt.al a*hines or the

ol/ environent

6.6.1 First BootAter the iort ro*ess is *olete an/ the virt.al a*hines are oere/ on or the irsttie4 the virt.al a*hine oerating syste ay eror a//itional tas,s /.ring its irst >oot inthe ne environent

ase/ virt.al a*hines ay reF.ire a re>oot ie/iately ater the irst ost-igration >oot +his is /.e to the VirtI/rivers >eing installe/ +he g.est oerating systein/i*ates i a re>oot is reF.ire/ Netor, *onig.ration ay reF.ire re*onig.ration sin*ele that thevirt.al a*hine .st >e re-a*tivate/ ith :i*rosot

6.6.2 Windows Virtual Machines9n the -irtual *achinesta> on the Re/ 3at 5nterrise Virt.aliEation :anager4 .se the righto.se >.tton to sele*t the #'(4&K:(DCvirt.al a*hine an/ *hoose 3un Ater a eoents4 .se the right o.se >.tton to sele*t the #'(4&K:(DCvirt.al a*hine again an/*hoose Console

et the virt.al a*hine oer . an/ then log into it .sing the a/inistrator a**o.nt +hevirt.al a*hine in/i*ates it is eroring soe *onig.ration Ater a e oents4 it in/i*atesit reF.ires a restart Restart the syste no

Ater re>oot4 the netor, *onig.ration reF.ires re*onig.ration sin*e the a/ater *hange/

Sele*t on the "tart>.tton Control !anel Network and Internet Network "haring CenterSele*t on the Change adapter settingslin, A ne a/ater is /islaye/ *alle/ Local AreaConnection & Use the right o.se >.tton to sele*t the ne a/ater an/ *hoose !ropertiesro the /ro /on en.

Using the inoration gathere/ in 9ale 5$5#- Virtual Ma'hine 7otes4 veriy an/ i' thenetor, *onig.ration A in/o ay aear in/i*ating another a/ater is *onig.re/ to .sethis 9P a//ress +he sae in/o as,s i the *onig.ration or the other a/ater sho.l/ >e

reove/ 9 this o**.rs4 sele*t the +es>.tton to reove the other a/ater *onig.ration an/ to*ontin.e Close the in/os an/ re>oot the syste i any netor, *hanges ere a/e or ithe syste in/i*ates a re>oot is ne*essary



53/75

+he netor,ing sho.l/ no >e oerational Use the ping*oan/ ro a *oan/ rotto test the >asi* netor,ing an/ nslookupto veriy DNS

;?N> pin #n ( ,@$,.tton an/ .se the right o.se >.tton to sele*t Computer Choose !ropertiesro the /ro /on en. +he roerties in/o has a se*tion title/ 4indows Acti#ation+his in/i*ates hether the virt.al a*hine reF.ires rea*tivation an/ ho long .ntil the *.rrenta*tivation e'ires Sele*t the Acti#ate 4indowslin, an/ ollo the instr.*tions to rea*tivatethe virt.al a*hine

+he /ate an/ tie as reorte/ >y the virt.al a*hine is veriie/ to >e *orre*t +his isne*essary or roer .n*tionality ithin the /oain

+he a>ove stes are also .se/ to oer on an/ *onig.re the #'(4;virt.al a*hine theirst tie &or >revity4 these stes are not reeate/

http://c/http://c/


54/75

6.6.3 Red Hat Enterprise Linux Virtual MachinesRe/ 3at 5nterrise in.' >ase/ virt.al a*hines eror an S5in.' rela>el o the ilesystes i S5in.' is ena>le/ +he netor, inoration sho.l/ not reF.ire re-entry Re/ 3at5nterrise in.' sho.l/ ove the netor, *onig.ration over to the ne a/ater

Start the v2v3-rhelvirt.al a*hine an/ oen its *onsole Uon >oot4 the Re/ 3at5nterrise in.' virt.al a*hine initiates an S5in.' rela>eling o the ile systes +his isnoral an/ .st >e alloe/ to inish

+he netor,ing in the Re/ 3at 5nterrise in.' virt.al a*hine /oes not reF.irere*onig.ration +his is veriie/ .sing the pingan/ nslookup*oan/s

7 pin -c ( ,@$,


55/75

6.6.4 Testing+he virt.al a*hines sho.l/ >e teste/ to a,e s.re they are still .n*tioning as /esire/

+he v2v%->HE.ER


56/75

wildcard&redhat&co&ed+e$ey&net& #((, 4B ;B.0Ewildcard&redhat&co&ed+e$ey&net&+lobalredir&a$adns&net&

wildcard&redhat&co&ed+e$ey&net&+lobalredir&a$adns&net& ,, 4B ;B.0Ee(F)&b&a$aaied+e&net&e(F)&b&a$aaied+e&net& %) 4B . %,&%,&%*

QQ uery tie? ( sec

QQ 1ER3ER? )&6&,6&6(7#,:)&6&,6&6(QQ CHEB? Gri Pun # #?%(?* %)%QQ 01A 14TE rcvd? F

+he A*tive Dire*tory servi*e is *he*,e/ >y .sing a /oain .ser a**o.nt to log into the v2v%-e /elete/ ro the V:are environent an/ the 5'ortDoain



57/75

7 Automating the ProcessA.toating the igration ro*ess *an >e /one .sing sile >ash s*rits4 having ssha**essto the 5S;i server4 an/ .sing the RES% !PI

Prior to starting the igration4 the virt.al a*hines .st have %mware Tools.ninstalle/an/ they .st >e sh.t /on Ater these are /one4 the vim-cmdis .se/ on the 5S;i servervia sshto a,e s.re the virt.al a*hines are oere/ o

+he .n*tions a**ess an asso*iative array *alle/ configthat *ontains the val.es o the otionsasse/ to the s*rit on the *oan/ line

+he olloing bash.n*tion retrieves the list o virt.al a*hines an/ their rese*tive virt.ala*hine i/s ro the 5S;i server an/ assigns the val.es to an asso*iative array *alle/es$-* +he .n*tion then loos thro.gh the list o virt.al a*hine naes an/ *he*, theoer state 9 the virt.al a*hine is oere/ on4 the *o.nter #ms9onis in*reente/ 9 theor*e otion as asse/ to the .n*tion4 then the .n*tion ill try to oer o the virt.al

a*hine+he .n*tion then ret.rns the n.>er o virt.al a*hines that ere oere/ on hen the.n*tion as *alle/

declare -. coni+ esx30

esxivs: Vstate=U

echo ;hec$in+ power state o virtual achines&7 Aet virtual achine naes and vidswhile read vid vnae extradoesx30JUVvnaeWK=UVvidW

done < "dev"null X +rep -O o

R;=UMi J UR; -ne ) Kthen::vson

i J UVstateW == orce Kthen



58/75

ssh UVconi+JesxsrvKW vi-cd vsvc"power&o UVesx30JUViWKW%>"dev"null

elseecho on

ielseecho o

idone

return UVvsonWW

+he olloing .n*tion loos thro.gh the virt.al a*hine naes an/ e'e*.tes the virt-v2v*oan/ or ea*h virt.al a*hine

v%vvs: Vecho Executin+ virt-v%v a+ainst the virtual achinesor i in UV!esx30J9KW

dovirt-v%v -p UVconi+JproileKW -i libvirt -ic esx?""UVconi+JesxsrvKW"Mnoveriy= UViWdoneW

+he inal .n*tion iorts the virt.al a*hines into the Re/ 3at 5nterrise Virt.aliEationenvironent +he .n*tion ass.es the *ertii*ate ile or the Re/ 3at 5nterrise Virt.aliEation:anager has >een /onloa/e/ +he .n*tion F.eries the RES% !PIto get the UU9D o the5'ort storage /oain +he .n*tion F.eries the RES% !PIor the UU9Ds o the virt.ala*hines in the 5'ort /oain +he .n*tion loos thro.gh the UU9Ds an/ iorts the virt.ala*hines into the Re/ 3at 5nterrise Virt.aliEation environent

rheviport: V

echo 4portin+ the virtual achines&doainid=U: curl --silent --cacert UVconi+JcacertKW N--header ;ontent-8ype? application"xl N--user UVconi+JrhevuserKW?UVconi+JrhevpasswordKW N--reOuest AE8 Nhttps?""UVconi+JrhevsrvKW?(**,"api"stora+edoainsMsearch=nae

I,dExport NX xpath "stora+edoains"stora+edoain"9id %>"dev"null NX sed -e 's"id=""' -e 's"""' -e 's" ""'

uuids=U: curl --silent --cacert UVconi+JcacertKW N--header ;ontent-8ype? application"xl N--user UVconi+JrhevuserKW?UVconi+JrhevpasswordKW N--reOuest AE8 Nhttps?""UVconi+JrhevsrvKW?(**,"api"stora+edoains"UVdoainidW"vs NX xpath "vs"v"9id %>"dev"null NX sed -e 's"id=""+' -e 's"""+'



59/75

or i in UVuuidsWdoecho 4portin+ 30 UViWcurl --silent --cacert ca&crt N--header ;ontent-8ype? application"xl N--user UVconi+JrhevuserKW?UVconi+JrhevpasswordKW N

--reOuest /518 N--data ata4nrastructure


60/75

ata

4nrastructure

pendin

ata

4nrastructure

pendin

ata

4nrastructure

pendin


61/75

+he .n*tions liste/ a>ove an/ the *olete s*rit are sales only an/ are .se/ to shoho sily the igration ro*ess *an >e a.toate/ S*rits in a ro/.*tion environentsho.l/ eror ore error *he*,ing an/ logging



62/75

8 Conclusion+his aer /eonstrate/ the igration o three virt.al a*hines *onig.re/ to .se a*tive/ire*tory a.thenti*ation ith ea*h other +he igrations ere erore/ ro a V:are 5S;iserver to a Re/ 3at 5nterrise Virt.aliEation environent .sing the virt-v2v .tility an/ theRe/ 3at 5nterrise Virt.aliEation :anager

+his aer /eonstrate/ the stes reF.ire/ >eore starting the igration s.*h as aingan/ *reating netor,s4 *reating e'ort /oains4 an/ gathering inoration a>o.t the 5S;ienvironent an/ virt.al a*hines

Coitting snashots an/ .ninstalling V:are +ools as also /eonstrate/ >eore thevirt-v2v.tility as .se/ to e'ort the virt.al a*hines ro the 5S;i server

9orting the virt.al a*hines into the Re/ 3at 5nterrise Virt.aliEation environent an/*onig.ring ater irst >oot in the ne environent as /eonstrate/ +he virt.al a*hines

ere teste/ or *orre*t .n*tionality

Sale s*rits ere also .se/ to sho ho the igration ro*ess *an easily >e a.toate/.sing >ash4 the V:are vi-*/ *oan/4 an/ the R5S+ AP9

As seen ro this aer4 virt.al a*hines *an easily >e igrate/ ro a V:are 5S;i serverto a Re/ 3at 5nterrise Virt.aliEation sol.tion ith the *orre*t tools an/ *are.l lanning )ylanning the igration ro*ess4 the ia*t to the e'isting ro/.*tion systes *an >e liite/



63/75

"ppendi6 "- Se'uring 7/S using 289ales+he N&S version % servi*e .ses .ltile in>o.n/ orts to .n*tion roerly Soe o theseorts are stati* an/ others are ran/o >y /ea.lt +he ran/o orts a,e it /ii*.lt to *reateireall r.les on systes r.nning the N&S servi*e 3oever4 the N&S servi*e *an >e

*onig.re/ to .se stati* orts instea/ o ran/o orts

+his is a**olishe/ >y e/iting the/etc/>confi4/nf*onig.ration ile an/ *hanging o.r*onig.ration otions that *a.se the N&S servi*e to .se stati* orts instea/ o ran/o orts+he olloing ta>le lists the orts an/ *onig.ration otions .se/ >y the N&S servi*e

:aemon 8ort 8roto'ol !onfiguration e i/entiie/ to .se or the ran/o orts liste/ in the a>ove ta>le +henetstat *oan/ *an >e .se/ to list the orts alrea/y in .se >y the syste +he otions .se/are liste/ >elo

!ommand options-

t'p Sho t* so*,ets

udp Sho ./ so*,ets

listening Sho listening so*,ets

numeri' Sho n.eri*al a//resses an/ orts instea/ o ainginoration to host naes an/ servi*e naes

program Sho the ro*ess i/ an/ rogra nae that ons the so*,et



64/75

+he o.t.t >elo shos the orts that are *.rrently in .se Ran/oly *hosen orts #00004#00014 an/ #0002 are ree or >oth UDP an/ +CP trai* +hey are .se/ or the stati* ortsreF.ire/ to hel se*.re ns

7 netstat --tcp --udp --listenin --numeric --proram.ctive 4nternet connections :only servers/roto Recv- 1end- Local .ddress Gorei+n .ddress 1tate /4"/ro+ra nae

tcp ) ) )&)&)&)?%% )&)&)&)?Y L418EB ,#)"sshdtcp ) ) %&)&)&?%# )&)&)&)?Y L418EB *%6"astertcp ) ) )&)&)&)?%)*F )&)&)&)?Y L418EB -tcp ) ) )&)&)&)? )&)&)&)?Y L418EB FF"rpcbindtcp ) ) ???%% ???Y L418EB ,#)"sshdtcp ) ) ???%# ???Y L418EB *%6"astertcp ) ) ??? ???Y L418EB FF"rpcbindudp ) ) )&)&)&)? )&)&)&)?Y FF"rpcbindudp ) ) )&)&)&)?F#) )&)&)&)?Y FF"rpcbindudp ) ) )&)&)&)?6( )&)&)&)?Y "dhclientudp ) ) )&)&)&)?F6 )&)&)&)?Y %%*"rpc&statdudp ) ) ??? ???Y FF"rpcbindudp ) ) ???F#) ???Y FF"rpcbind

5/it the/etc/>confi4/nfile an/ a,e s.re the olloing *onig.ration lines e'ist

7 /ort rpc&ountd should listen on&05@B8/5R8=#))))

7 /ort rpc&statd should listen on&18.8/5R8=#)))

7 8;/ port rpc&loc$d should listen on&L5;D8;//5R8=#)))%

7 @/ port rpc&loc$d should listen on&L5;D@//5R8=#)))%

+he n!san/ n!slockservi*es .st >e restarte/ an/ *onig.re/ to start at >oot

7 service n!slock restart1toppin+ BG1 loc$in+? J 5D K1toppin+ BG1 statd? J 5D K1tartin+ BG1 statd? J 5D K

7 service n!s restart1huttin+ down BG1 ountd? J 5D K1huttin+ down BG1 daeon? J 5D K

1huttin+ down BG1 services? J 5D K1tartin+ BG1 services? J 5D K1tartin+ BG1 daeon? J 5D K1tartin+ BG1 ountd? J 5D K

7 c"kcon!i n!slock on

7 c"kcon!i n!s on

www$redhat$'om 1% refar'hfeeda'*+redhat$'om


65/75

+he netstat*oan/ no shos the N&S servi*es are r.nning on the stati* orts

7 netstat --tcp --udp --listenin --numeric --proram.ctive 4nternet connections :only servers/roto Recv- 1end- Local .ddress Gorei+n .ddress 1tate /4"/ro+ra naetcp ) ) )&)&)&)?%% )&)&)&)?Y L418EB ,#)"sshdtcp ) ) %&)&)&?%# )&)&)&)?Y L418EB *%6"aster

tcp ) ) )&)&)&)?%)*F )&)&)&)?Y L418EB -tcp ) ) )&)&)&)? )&)&)&)?Y L418EB FF"rpcbindtcp ) ) )&)&)&)?#)))) )&)&)&)?Y L418EB ,%*"rpc&ountdtcp ) ) )&)&)&)?#))) )&)&)&)?Y L418EB %%*"rpc&statdtcp ) ) )&)&)&)?#)))% )&)&)&)?Y L418EB -tcp ) ) ???%% ???Y L418EB ,#)"sshdtcp ) ) ???%# ???Y L418EB *%6"astertcp ) ) ???%)*F ???Y L418EB -tcp ) ) ??? ???Y L418EB FF"rpcbindtcp ) ) ???#)))) ???Y L418EB ,%*"rpc&ountdtcp ) ) ???#))) ???Y L418EB %%*"rpc&statdtcp ) ) ???#)))% ???Y L418EB -udp ) ) )&)&)&)? )&)&)&)?Y FF"rpcbind

udp ) ) )&)&)&)?%)*F )&)&)&)?Y -udp ) ) )&)&)&)?F#) )&)&)&)?Y FF"rpcbindudp ) ) )&)&)&)?6( )&)&)&)?Y "dhclientudp ) ) )&)&)&)?#)))) )&)&)&)?Y ,%*"rpc&ountdudp ) ) )&)&)&)?F6 )&)&)&)?Y %%*"rpc&statdudp ) ) )&)&)&)?#))) )&)&)&)?Y %%*"rpc&statdudp ) ) )&)&)&)?#)))% )&)&)&)?Y -udp ) ) ??? ???Y FF"rpcbindudp ) ) ???%)*F ???Y -udp ) ) ???F#) ???Y FF"rpcbindudp ) ) ???#)))) ???Y ,%*"rpc&ountdudp ) ) ???#))) ???Y %%*"rpc&statdudp ) ) ???#)))% ???Y -

No that the N&S servi*es are .sing stati* orts4 the 9P+a>les ireall *an >e *onig.re/ toallo trai* to ass

+he olloing shos the ita>les 9NPU+ *hain +his *hain is not alloing trai* on the orts.se/ >y N&S

7 iptables --numeric --list INF5T;hain 4B/@8 :policy .;;E/8tar+et prot opt source destination.;;E/8 all -- )&)&)&)") )&)&)&)") state REL.8E2E18.ZL41HE.;;E/8 icp -- )&)&)&)") )&)&)&)")

.;;E/8 all -- )&)&)&)") )&)&)&)").;;E/8 tcp -- )&)&)&)") )&)&)&)") state BEC tcp dpt?%%REPE;8 all -- )&)&)&)") )&)&)&)") reect-with icp-host-prohibited



66/75

+he olloing >ash loo a//s entries to the 9NPU+ *hain o ita>les that allo the N&S*onne*tions to .n*tion

7 !or i in D@@@@ D@@@, D@@@2 2@=E ,,,> do> iptables -I INF5T -m udp -p udp --dport i -s ,@$,y N&S

7 iptables Jnumeric Jlist INF5T;hain 4B/@8 :policy .;;E/8tar+et prot opt source destination.;;E/8 tcp -- )&6&,6&)"% )&)&)&)") tcp dpt?.;;E/8 udp -- )&6&,6&)"% )&)&)&)") udp dpt?.;;E/8 tcp -- )&6&,6&)"% )&)&)&)") tcp dpt?%)*F.;;E/8 udp -- )&6&,6&)"% )&)&)&)") udp dpt?%)*F.;;E/8 tcp -- )&6&,6&)"% )&)&)&)") tcp dpt?#)))%.;;E/8 udp -- )&6&,6&)"% )&)&)&)") udp dpt?#)))%

.;;E/8 tcp -- )&6&,6&)"% )&)&)&)") tcp dpt?#)))

.;;E/8 udp -- )&6&,6&)"% )&)&)&)") udp dpt?#)))

.;;E/8 tcp -- )&6&,6&)"% )&)&)&)") tcp dpt?#))))

.;;E/8 udp -- )&6&,6&)"% )&)&)&)") udp dpt?#))))

.;;E/8 all -- )&)&)&)") )&)&)&)") stateREL.8E2E18.ZL41HE.;;E/8 icp -- )&)&)&)") )&)&)&)").;;E/8 all -- )&)&)&)") )&)&)&)").;;E/8 tcp -- )&)&)&)") )&)&)&)") state BEC tcpdpt?%%REPE;8 all -- )&)&)&)") )&)&)&)") reect-withicp-host-prohibited

Ater the ita>les r.les are veriie/4 they are save/ .sing the service iptables save*oan/

7 service iptables saveiptables? 1avin+ irewall rules to "etc"sysconi+"iptables?J 5D K



67/75

"ppendi6 =- Enaling ssh "''ess to theESXi Ser,er+he a>ility to a**ess the 5S;i server .sing ssh*an >e ena>le/ on the 5S;i server +hisallos inoration a>o.t the virt.al a*hines an/ the 5S;i environent to >e easilya**esse/ an/ the virt.al a*hine environent to >e re*onig.re/ +his is not ne*essary orthe e'ort ro*ess to or, *orre*tly

+he ssha**ess *an >e ena>le/ >y .sing the root *re/entials an/ logging into the 5S;i

server .sing the vSp"ere client Conne*t to the 5S;i hyervisor .sing the vShere *lient4

.sing the login *re/entials or the root a**o.nt

Ater the vShere Client oens4 a in/o layo.t siilar to /igure 1$#$#- Snapshotsis

/islaye/ +he server nae/ v2v0-e0ithat reF.ires ssh a**ess ena>le/ is sele*te/

Ater the server is sele*te/4 the *onig.ration settings are a**esse/ >y sele*ting on the

Configurationta>

+he "ecurit5 !rofilelin, .n/er the "oftwarese*tion lists the servi*es on the 5S;i server

)y sele*ting the !ropertieslin, 4 a "er#ice !ropertiesin/o oens an/ the settings or

the servi*es *an >e a/@.ste/



68/75

+he ""Hservi*e *ontrols the ssh/aeon Sele*ting this servi*e an/ then sele*ting theOptions>.tton oens the SS37."*(""H8 Optionsin/o Sele*t Start and stop with hostan/ sele*t the Start >.tton Ater the servi*e starts4 sele*t the OK>.tton to *lose the in/oan/ ret.rn to the ain vShere in/o



69/75

+esting the nely ena>le/ ssh*onne*tion is /one >y *onne*ting to the 5S;i server .sing thessh*oan/

7 ss" rootBv2v(-esxiCarnin+? /eranently added 'v%v,-esxi&cloud&lab&en+&bos&redhat&co2)&6&,6&6)' :R1. to the list o $nownhosts&

/assword? [&'(()*+,]8he tie and date o this lo+in have been sent to the syste lo+s&

30ware oers supported2 powerul syste adinistration tools& /leasesee www&vware&co"+o"sysadintools or details&

8he E1i 1hell can be disabled by an adinistrative user& 1ee thev1phere 1ecurity docuentation or ore inoration&[ 7

+he assor/ or the root .ser a**o.nt on the 5S;i server .st >e entere/ ea*h tie thessh*oan/ is .se/ to *onne*t to the server +his >ehavior *an >e stoe/ >y *reating an/

.sing a rivateB.>li* ,ey air ith ssh

A ,ey air is generate/ an/ then the .>li* ortion o the ,ey is la*e/ in on the 5S;i serverA ,ey length o 20$8 >its is *reate/ .sing the ssh-keygen*oan/ an/ se*iying the -botion ith an arg.ent o 20$8 +he ssh-copy-id*oan/ is .se/ to *oy the .>li* ,eyto the 5S;i syste +he -iotion is .se/ ith the ssh-copy-id*oan/ to se*iy the.>li* ,ey to *oy to the 5S;i syste

7 ss"-keyen -b 2@=8Aeneratin+ public"private rsa $ey pair&Enter ile in which to save the $ey :"root"&ssh"idrsa? [E%E+]Enter passphrase :epty or no passphrase? [E%E+]Enter sae passphrase a+ain? [E%E+]Sour identiication has been saved in "root"&ssh"idrsa&Sour public $ey has been saved in "root"&ssh"idrsa&pub&8he $ey in+erprint is?d)?d?)?(?e%?#c?6)?(,?,e?#F?F6?(,?,b?e?(?%d root9v%v,-v%v&cloud&lab&en+&bos&redhat&co8he $ey's randoart ia+e is?--J R1. %)*(K----X o& XX oo=o & XX &&=o&o & XX Y & & XX & o XX & o & XX E o XX o X-----------------

7 cat $ss"#id*rsa$pub / ss" rootBv2v(-esxi 3cat - AA #etc#ss"#keys-root#aut"oriKed*keys3Carnin+? /eranently added 'v%v,-esxi2)&6&,6&6)' :R1. to the list o$nown hosts&/assword? [&'(()*+,]



70/75

"ppendi6 !- S'ripts+he olloing s*rit *an >e /onloa/e/ ro the Re/ 3at C.stoer Portal6

7! "bin"bash

7 8his script i+rates virtual achines ro an E1i server i

7 to a Red Hat Enterprise 3irtuali\ation environent&o77 8he perl-0L-/ath pac$a+e is reOuired as is ssh access to the E1iserver&7 . netrc ile ust be coni+ured or access to the E1i server&7 8he Red Hat Enterprise 3irtuali\ation 0ana+ers certiicate ust be7 downloaded or use with the RE18 ./4&77 8his script appears in the7 0i+ratin+ to Red Hat Enterprise 3irtuali\ation , - 30ware E1i7 Reerence .rchitecture&

declare -. coni+ esx30count=)

esxivs: Vstate=U

echo ;hec$in+ power state o virtual achines&7 Aet virtual achine naes and vidswhile read vid vnae extradoesx30JUVvnaeWK=UVvidW

done < "dev"null X +rep -O o

R;=UMi J UR; -ne ) Kthen::vson

i J UVstateW == orce Kthenssh UVconi+JesxsrvKW vi-cd vsvc"power&o UVesx30JUViWKW

6 httsBBa**essre/hat*oBsitesB/ea.ltBilesBigratees'2rhevtgE

https://access.redhat.com/sites/default/files/migrate_esx2rhev.tgzhttps://access.redhat.com/sites/default/files/migrate_esx2rhev.tgzhttps://access.redhat.com/sites/default/files/migrate_esx2rhev.tgzhttps://access.redhat.com/sites/default/files/migrate_esx2rhev.tgz


71/75

%>"dev"nullelseecho on

ielseecho o

i

done

return UVvsonWW

v%vvs: Vecho Executin+ virt-v%v a+ainst the virtual achinesor i in UV!esx30J9KWdovirt-v%v -p UVconi+JproileKW -i libvirt -ic esx?""UVconi+JesxsrvKW"M

noveriy= UViWdone

W

rheviport: V

echo 4portin+ the virtual achines&doainid=U: curl --silent --cacert UVconi+JcacertKW N--header ;ontent-8ype? application"xl N--user UVconi+JrhevuserKW?UVconi+JrhevpasswordKW N--reOuest AE8 Nhttps?""UVconi+JrhevsrvKW?(**,"api"stora+edoainsMsearch=nae

I,dExport NX xpath "stora+edoains"stora+edoain"9id %>"dev"null NX sed -e 's"id=""' -e 's"""' -e 's" ""'

uuids=U: curl --silent --cacert UVconi+JcacertKW N--header ;ontent-8ype? application"xl N--user UVconi+JrhevuserKW?UVconi+JrhevpasswordKW N--reOuest AE8 Nhttps?""UVconi+JrhevsrvKW?(**,"api"stora+edoains"UVdoainidW"vs NX xpath "vs"v"9id %>"dev"null NX sed -e 's"id=""+' -e 's"""+'

or i in UVuuidsW

doecho 4portin+ 30 UViWcurl --silent --cacert ca&crt N--header ;ontent-8ype? application"xl N--user UVconi+JrhevuserKW?UVconi+JrhevpasswordKW N--reOuest /518 N--data ata


72/75

N

https?""UVconi+JrhevsrvKW?(**,"api"stora+edoains"UVdoainidW"vs"UViW"iport

doneW

usa+e: Vecho usa+e? U) optionsecho -e NnChere?echo -e esxsrv GB o E1i serverecho -o proile /roile ro "etc"virt-v%v&conecho -c cacert ;ertiicate ile ro RHE3 0ana+erecho -r rhevsrv GB o RHE3 0ana+er 1erverecho -u rhevuser @ser or RHE3 0ana+erecho -p rhevpassword /assword or RHE3 0ana+er

echo - Gorce shutdown virtual achines :5ptional

exitW

77 0ain7

while +etopts ?e?o?c?r?u?p? optdocase UVoptW in

e coni+JesxsrvK=UV5/8.RAW

::count=QQ

o coni+JproileK=UV5/8.RAW::count=%QQ

c coni+JcacertK=UV5/8.RAW::count=*QQ

r coni+JrhevsrvK=UV5/8.RAW::count=(QQ

u coni+JrhevuserK=UV5/8.RAW::count=6QQ

p coni+JrhevpasswordK=UV5/8.RAW::count=,%QQ

coni+JorceK=orceQQ

Y usa+eQQ

esac



73/75

done

i J UVcountW -ne 6, Kthenusa+e

i

esxivs UVconi+JorceKWsleep #

v%vvs

rheviport



74/75

"ppendi6 :- Referen'es+he olloing are so.r*es .se/ or reeren*e /.ring the riting o this aer

#$ :eplo.ing Red Hat Enterprise Virtualization(RHEV) for Ser,ers

httsBBinF.iriesre/hat*oBgoBre/hatBrhev-or-servers

&$ Red Hat Enterprise Virtualization 3$% "dministration >uidehttBB/o*sre/hat*oB/o*sBen-USBRe/3at5nterriseVirt.aliEationB%0BhtlBA/inistration=.i/eBin/e'htl

3$ Red Hat Enterprise Virtualization 3$% RES9 "82 >uidehttBB/o*sre/hat*oB/o*sBen-USBRe/3at5nterriseVirt.aliEationB%0BhtlBR5S+AP9=.i/eBin/e'htl

0$ Red Hat Enterprise ;inu6 1 Se'urit. >uidehttBB/o*sre/hat*oB/o*sBen-USBRe/3at5nterrisein.'B6BhtlBSe*.rity=.i/eB

5$ Red Hat Enterprise Virtualization 8rodu't 8agehttBBre/hat*oBvirt.aliEationBrhevB

1$ Red Hat Enterprise ;inu6 1 V&V >uidehttBB/o*sre/hat*oB/o*sBen-USBRe/3at5nterrisein.'B6BhtlBV2V=.i/eBin/e'htl

$ RHEV 3$% =a'*up ? Re'o,er. using "'ronishttsBBa**essre/hat*oB,nole/geBrear*hB2012-rhev-%0->a*,.-re*overy-.sing-a*ronis

4$ =ug 14&3& ,irt,&, 'on,ert windows guest with ,mwaretools from es6it willshow the ,mwaretools error msghttsBB>.gEillare/hat*oBsho>.g*giQi/6782%2

www$redhat$'om % refar'hfeeda'*+redhat$'om
https://inquiries.redhat.com/go/redhat/rhev-for-servershttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Administration_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Administration_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/http://www.redhat.com/virtualization/rhev/http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/V2V_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/V2V_Guide/index.htmlhttps://access.redhat.com/knowledge/refarch/2012-rhev-30-backup-recovery-using-acronishttps://access.redhat.com/knowledge/refarch/2012-rhev-30-backup-recovery-using-acronishttps://bugzilla.redhat.com/show_bug.cgi?id=678232https://inquiries.redhat.com/go/redhat/rhev-for-servershttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Administration_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Administration_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/REST_API_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/http://www.redhat.com/virtualization/rhev/http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/V2V_Guide/index.htmlhttp://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/V2V_Guide/index.htmlhttps://access.redhat.com/knowledge/refarch/2012-rhev-30-backup-recovery-using-acronishttps://access.redhat.com/knowledge/refarch/2012-rhev-30-backup-recovery-using-acronishttps://bugzilla.redhat.com/show_bug.cgi?id=678232


75/75

"ppendi6 E- Re,ision Histor.

Revision 10 :on/ay .ne 184 2012 ohn 3err

9nitial Release

Documents

From ESX to RHV