.vsphere(创建和管理虚拟网络)

现任明教教主VMware vSphere 5作者：现任明教教主马海波现任明教教主北京Yeslab 安全实验室出品 1.vSphere 5.0简介2.安装部署VMware ESXi 5.03.安装vCenter 4.创建配置FC 存储设备以及SAN Boot 5.创建和管理虚拟网络6.创建和管理iSCSI 存储7.创建和管理VM 8.安全访问控制9.管理资源分配10.高可用性11.监控vSphere 性能12.VMware View 桌面虚拟化系统13.VSA Cluster 部署与应用内容简介第一部分:术语介绍第二部分:配置标准交换机第三部分:配置分布式交换机第四部分:Cisco Nexus 1000v介绍内容简介创建和管理虚拟网络内容简介现任明教教主/heymo vSphere 5.0第一部分术语介绍第一部分术语介绍现任明教教主/heymo vSphere 5.0虚拟网络第一部分术语介绍现任明教教主/heymo vSphere 5.0虚拟网络是由虚拟和物理网络适配器，虚拟和物理交换机组成。

第一部分现任明教教主/heymo vSphere 5.0术语介绍术语介绍（1）vNetwork Standard Switch (vSwitch)：A software-based switch that resides in the VMkernel and provides traffic management for virtual machines. Users must manage vSwitches independently on each ESXi host.vNetwork Distributed Switch：A software-based switch that resides in the VMkernel and provides traffic management for virtual machines the VMkernel. Distributed vSwitches are shared by and managed across entire clusters of ESXi hosts.第一部分现任明教教主/heymo vSphere 5.0术语介绍术语介绍（2）Port/port group：A logical object on a vSwitch that provides specialized services for the VMkernel or VMs. A virtual switch can contain a VMkernel port or a VM port group. On a vSphere Distributed Switch, these are called dvPort groups.第一部分现任明教教主/heymo vSphere 5.0术语介绍术语介绍（3）VMkernel port ：A specialized virtual switch port type that is configured with an IP address to allow vMotion, iSCSI storage access, network attached storage (NAS) or Network File System (NFS) access, or vSphere Fault Tolerance (FT) logging. Now that vSphere 5 includes only VMware ESXi hosts, a VMkernel port also provides management connectivity for managing the host. A VMkernel port is also referred to as a vmknic.Virtual machine port group ：A group of virtual switch ports that share a common configuration and allow virtual machines to access other virtual machines or the physical network.第一部分现任明教教主/heymo vSphere 5.0术语介绍术语介绍（4）Virtual LAN：A logical LAN configured on a virtual or physical switch that provides efficient traffic segmentation, broadcast control, security, and efficient bandwidth utilization by providing traffic only to the ports configured for that particular VLAN.Trunk port (Trunking) ：A port on a physical switch that listens for and knows how to pass traffic for multiple VLANs. It does this by maintaining the VLAN tags for traffic moving through the trunk port to the connected device(s). Trunk ports are typically used for switch-to-switch connections to allow VLANs to pass freely between switches. Virtual switches support VLANs, and using VLAN trunks allows the VLANs to pass freely into the virtual switches.第一部分现任明教教主/heymo vSphere 5.0术语介绍术语介绍（5）Access port：A port on a physical switch that passes traffic for only a single VLAN. Unlike a trunk port, which maintains the VLAN identification for traffic moving through the port, an access port strips away the VLAN information for traffic moving through the port.Network interface card team：The aggregation of physical network interface cards (NICs) to form a single logical communication channel. Different types of NIC teams provide varying levels of traffic load balancing and fault tolerance.第一部分现任明教教主/heymo vSphere 5.0术语介绍术语介绍（6）vmxnet adapter：A virtualized network adapter operating inside a guest operating system. The vmxnet adapter is a high-performance, 1Gbps virtual network adapter that operates only if the VMware Tools have been installed. The vmxnet adapter is sometimes referred to as a paravirtualized driver. The vmxnet adapter is identified as Flexible in the virtual machine properties.vlance adapter：A virtualized network adapter operating inside a guest operating system. The vlance adapter is a 10/100Mbps network adapter that is widely compatible with a range of operating systems and is the default adapter used until the VMware Tools installation is completed.第一部分现任明教教主/heymo vSphere 5.0术语介绍术语介绍（7）e1000 adapter：A virtualized network adapter that emulates the Intel e1000 network adapter. The Intel e1000 is a 1Gbps network adapter. The e1000 network adapter is most common in 64-bit virtual machines.第一部分现任明教教主/heymo vSphere 5.0术语介绍设计网络前需要考虑的问题1.Do you have or need a dedicated network for management traffic, such as for the management of physical switches? （是否需要设计专用的管理网络）2.Do you have or need a dedicated network for vMotion traffic?（是否需要专用的网络来做vMotion）3.Do you have an IP storage network? Is this IP storage network a dedicated network? Are you running iSCSI or NAS/NFS?（是否需要一个IP存储网络，是否需要专用的存储网络，使用iSCSI还是NAS/NFS技术）4.How many NICs are standard in your ESXi host design?（ESXi主机有多少个网卡）5.Do the NICs in your hosts run 1 Gb Ethernet or 10 Gb Ethernet?（网卡是1Gb还是10Gb以太网）6.Is there a need for extremely high levels of fault tolerance for VMs?（是否需要为VM启用FT功能）7.Is the existing physical network composed of VLANs?（物理网络是否使用VLAN技术）8.Do you want to extend the use of VLANs into the virtual switches?（是否在虚拟交换机中使用VLAN）第一部分/heymo vSphere 5.0现任明教教主术语介绍第二部分配置标准交换机第二部分配置标准交换机现任明教教主/heymo vSphere 5.0第二部分现任明教教主/heymo vSphere 5.0配置标准交换机Virtual switches介绍Virtual switches分为两种类型：1.vNetwork Standard Switches2.vNetwork Distributed SwitchesVirtual switches能够提供如下通讯：1. between virtual machines within an ESXi host2. between virtual machines on different ESXi hosts3. between virtual machines and physical machines on the network4. for VMkernel access to networks for VMotion, iSCSI, NFS, or fault tolerance logging (and management on ESXi)第二部分现任明教教主/heymo vSphere 5.0配置标准交换机vSwitch和物理Switch的区别（1）vSwitches do have some differences from physical switches.A vSwitch does not support the use of dynamic negotiation protocols for establishing 802.1q trunks or port channels, such as Dynamic Trunking Protocol (DTP) or Port Aggregation Protocol (PAgP). A vSwitch cannot be connected to another vSwitch, thereby eliminating a potential loop configuration. Because there is no possibility of looping, the vSwitches do not run Spanning Tree Protocol (STP). Looping can be a common network problem, so this is a real benefit of vSwitches.总结：不支持DTP和PAgP，不运行STP第二部分现任明教教主/heymo vSphere 5.0配置标准交换机vSwitch和物理Switch的区别（2）1. A vSwitch authoritatively knows the MAC addresses of the virtual machines connected to that vSwitch, so there is no need to learn MAC addresses from the network.（无需学习MAC）2. Traffic received by a vSwitch on one uplink is never forwarded out another uplink. This is yet another reason why vSwitches do not run STP.（不会把一个uplink的流量发送给另一个uplink）3. A vSwitch does not need to perform Internet Group Management Protocol (IGMP) snooping because it knows the multicast interests of the virtual machines attached to that vSwitch.（不需要执行IGMP）第二部分现任明教教主/heymo vSphere 5.0配置标准交换机Uplink介绍就不能和物理网络进行通讯如果没有Uplink第二部分现任明教教主/heymo vSphere 5.0配置标准交换机两种不同的Port和Port Group1. VMkernel port2. Virtual Machine port group第二部分配置标准交换机现任明教教主/heymo vSphere 5.0Virtual switches alone can't provide connectivity,they need ports or port groups and uplinksPort and Port Group第二部分现任明教教主/heymo vSphere 5.0配置标准交换机Vmkernel网络VMkernel ports are used for VMotion, iSCSI, NAS/NFS access, and VMware FT. With ESXi,VMkernel ports are also used for management.第二部分现任明教教主/heymo vSphere 5.0配置标准交换机）添加Vmkernel （1第二部分现任明教教主/heymo vSphere 5.0配置标准交换机）添加Vmkernel （2第二部分现任明教教主/heymo vSphere 5.0配置标准交换机Virtual Machine网络The virtual machine port group is quite different from a VMkernel port. Both of the other ports have a one-to-one relationship with an interface.A virtual machine port group, on the other hand, does not have a one-to-one relationship, and.it does not require an IP address第二部分现任明教教主/heymo vSphere 5.0配置标准交换机）添加Virtual Machine网络（1第二部分现任明教教主/heymo vSphere 5.0配置标准交换机）添加Virtual Machine网络（2第二部分现任明教教主/heymo vSphere 5.0配置标准交换机）添加Virtual Machine网络（3第二部分现任明教教主/heymo vSphere 5.0配置标准交换机NIC Teaming介绍NIC teaming involves connecting multiple physical network adapters to single vSwitch. NIC teaming provides redundancy and load balancing of.network communications to VMkernel, and virtual machines第二部分现任明教教主/heymo vSphere 5.0配置标准交换机）配置NIC Teaming（1第二部分现任明教教主/heymo vSphere 5.0配置标准交换机）配置NIC Teaming（2第二部分现任明教教主/heymo vSphere 5.0配置标准交换机）配置NIC Teaming（3第二部分现任明教教主/heymo vSphere 5.0配置标准交换机NIC Teaming已有vSwitch配置第二部分现任明教教主/heymo vSphere 5.0配置标准交换机配置负载均衡第二部分现任明教教主/heymo vSphere 5.0配置标准交换机三种负载均衡方式1.Virtual Switch Port Load Balancing2.Source MAC Load Balancing3.IP Hash Load BalancingPort和Source Mac负载均衡能够连接多个物理交换机，802.3ad的link aggregation却不行。