Citrix XenServer 6.0 Administration Citrix Course CXS-203-1I
2©Copyright2012CitrixSystems,Inc.
Citrix XenServer 6.0 Administration Citrix Course CXS-203-1I April 2012 Version 1.1
4©Copyright2012CitrixSystems,Inc.
Table of Contents ModuleModule 1:1: IntroductionIntroduction toto XenServerXenServer ... 1717 Overview...19 XenServerProductLine...20 ProductSimplification...20 ArchitecturalChanges...21 VirtualAppliancesandBroaderVendorSupport...21 MicrosoftSystemCenterIntegration...21 XenDesktopIntegration...21 EnhancedOperatingSystemSupport...22 OtherEnhancementsandImprovements...22 TestYourKnowledge:NewFeaturesinXenServer6.0...22 XenServerArchitectureOverview...24 XenServerArchitecturalComponents...24 TestYourKnowledge:ArchitecturalComponents...25 XenCenterOverview...26 ResourcePools...27 XenServerStorageOverview...28 XenServerNetworkingOverview...29 ProvisioningServicesOverview...29 TestYourKnowledge:XenServerVirtualizationPlatform...30 ModuleModule 2:2: InstallingInstalling andand ConfiguringConfiguring XenServerXenServer ... 3131
Overview...33 XenServerInstallation...34 VirtualMachineStorage...34 InstallingSingleandMultipleDiskSystems...35 InstallingXenServer...36 Pre-InstallationChecklist...36 XenServerInstallationProcess...37 IntelliCache...37 ConfiguringNTP...37 TestYourKnowledge:XenServerInstallation...38 XenCenterInstallationandManagementConsoles...39 XenCenterConsoles...39 XenServerLicensingComponents...40 LicenseFileManagement...40 CitrixLicenseServerVirtualAppliance...40 ObtainingLicenseFiles...41 LicenseManagementConsole...41 TestYourKnowledge:CitrixLicenseServer...42 ManagingXenServerUsers...43 ©Copyright2012CitrixSystems,Inc.5
KeyBenefitsofActiveDirectoryIntegration...43 ConfiguringActiveDirectoryIntegration...44 End-UserAuthenticationUsingActiveDirectory...44 ActiveDirectoryIntegration...44 ExternalAuthenticationProcess...45 TestYourKnowledge:IntegratingXenServerandActiveDirectory...45 Role-BasedAccessControl...46 Roles...46 SecurityLogs...47 TestYourKnowledge:Role-BasedAccessControl...47
ModuleModule 3:3: XenServerXenServer NetworkingNetworking ... 4949
Overview...51 XenServerNetworkingOverview...52 NetworkStacksSupportedbyXenServer...52 NetworkComponentsandArchitecture...54 NetworkArchitectureDiagram...54 NetworkAdapterDrivers...55 Private-ServerandExternalNetworks...56 TestYourKnowledge:NetworkComponents...57 VLANSupportandComponents...58 InitialNetworkSetup...60 TestYourKnowledge:VLANs...60 NICBond...61 NICBondingArchitecture...61 LoadBalancing...61 TestYourKnowledge:NICBondModes...61 NICBondConfigurationforResourcePools...63ModuleModule 4:4: XenServerXenServer StorageStorage RepositoriesRepositories ... 6565
Overview...67 StorageTechnologies...68 VirtualDiskImageFormats...68 StorageTechnologyComparison...69 TestYourKnowledge:StorageTechnologies...70 XenServerStorageArchitecture...71 StorageRepositoryArchitecture...72 MultipleStorageRepositories...74 LocalStorageRepositories...75 VirtualDiskSize...75 TestYourKnowledge:StorageRepositories...76 TestYourKnowledge:LocalStorage...76 StorageCapabilityComparison...78 NFSStorageOverview...79 NFSArchitecture...79 6©Copyright2012CitrixSystems,Inc.NFSVirtualDisks...80 NFSRemoteStorageConfigurationandRecommendations...80 TestYourKnowledge:NFSStorage...80 iSCSIStorageOverview...81 iSCSIArchitecture...82 iSCSIAdapters...83 iSCSISetupConfigurationandRecommendations...83 TestYourKnowledge:iSCSIStorage...83 ResizingaStorageRepository...84 ResizingaStorageRepository-iSCSI...84 ResizingaStorageRepository-HBA...84 FibreChannelSANsOverview...85 FibreChannelArchitecture...85 LUNDevicePath...86 TestYourKnowledge:FibreChannelHBAManagement...86 DedicatedNICBondsforRemoteStorage...87 DedicatedRemoteStorageInterfaceConfiguration...87 StorageMultipathing...88 CitrixStorageLinkOverview...89 CitrixStorageLinkStorageRepository...89 StorageLinkSupportedArrayTypes...89 UpgradingtoStorageLinkwithXenServer6.0...90 TestYourKnowledge:Storage...90
ModuleModule 5:5: CreatingCreating andand ManagingManaging VirtualVirtual MachinesMachines ... 9191
Overview...93 WindowsVirtualMachineArchitecture...94 VirtualMemoryandDiskSizeLimitsforWindowsVirtualMachines...94 VirtualDeviceSupportforWindowsVirtualMachines...95 InstallationfromanISO...96 ISOLibraries...96 ToCreateaWindowsVirtualMachine...96 TestYourKnowledge:CreatinganISOLibraryforaWindowsVirtualMachine...96 LinuxDistributions...98 CreatingLinuxVirtualMachines...99 TestYourKnowledge:UsingaLinuxDemoTemplate...100 XenServerTools...101 XenServerToolsforWindowsVirtualMachines...101 XenServerToolsforLinuxVirtualMachines...101 ToInstallXenServerTools...102 TestYourKnowledge:XenServerTools...102 LifeCycleOperations...103 SuspendandResume...103 DeletingaVirtualMachine...103 TestYourKnowledge:LifeCycleOperations...104 VirtualMachineTemplates...105 ©Copyright2012CitrixSystems,Inc.7VirtualMachineSnapshots...105 ToCreateaTemplatefromaWindowsVirtualMachine...106 CreatingaTemplatefromaLinuxVirtualMachine...106 TestYourKnowledge:DeterminingWhichTemplatetoUse...107 ExportingaVirtualMachine...108 CopyingaVirtualMachine...110 AssigningResourcestoaVirtualMachine...112 ImportingaVirtualMachine...113 ModifyingVirtualMachineorTemplateResources...115 VirtualDisks...115 VirtualDiskSizes...115 VirtualNICs...115 VirtualCPUs...116 Memory...116 VirtualAppliancePackages...117 ToCreateVirtualAppliances...118 ExportinganAppliancePackage...118 ToExportanAppliancePackage...118 ImportinganAppliancePackage...119 ToImportanAppliancePackage...119 XenConvertOverview...120 PhysicalMachineConversion...120 ConvertingfromPhysicaltoVirtualMachine...122 PerformingaP2VConversion...122 DynamicMemoryControl...123 DynamicMemoryControlOptimization...124 StaticMemoryRange...124 DMCBehaviorwhenLaunchingNewVirtualMachines...125 TestYourKnowledge:DynamicMemoryControl...125
ModuleModule 6:6: InstallingInstalling andand ConfiguringConfiguring ProvisioningProvisioning ServicesServices ... 127127
Overview...129 ProvisioningServicesTechnology...130 ProvisioningServicesforXenServer...130 CitrixProvisioningServicesComponents...130 CitrixProvisioningServicesInfrastructure...132 ProvisioningServicesAdministration...133 AdministrativeRoles...134 KeyServices...135 DHCPDeploymentOptions...137 DHCPConfiguration...138 TestYourKnowledge:KeyServices...139 InstallationPlanning...140 ProvisioningServicesFarmDesign...140 Farms...140 SQLDatabaseServer...141 8©Copyright2012CitrixSystems,Inc.SQLDatabaseAuthenticationandConfiguration...141 ConfigurationWizardUserPermissions...141 ServiceAccountPermissions...142 Sites...143 Stores...144 StorageRequirements...146 SamplevDiskStorageRequirements...147 ProvisioningServicesInstallation...148 ProvisioningServicesConfiguration...148 BootstrapServerConfiguration...149 StoreConfiguration...150 ProvisioningServicesHostsintheConsole...152 TargetDeviceConnections...152 ServerProperties...152 TestYourKnowledge:ProvisioningServicesInstallationandConfiguration...152 TargetDeviceCollection...154 TargetDeviceTemplate...154 TargetDeviceProperties...154 TargetDeviceAdditionstotheDatabase...155 Auto-AddWizard...155 TestYourKnowledge:TargetDevices...155 ActiveDirectoryIntegration...157 DomainPasswordValidationProcess...158 AutomaticPasswordRenegotiation...158 ToIntegrateActiveDirectory...159 ToResetComputerAccountsforTargetDevices...159 TestYourKnowledge:ActiveDirectory...160
ModuleModule 7:7: ManagingManaging vDisksvDisks andand TargetTarget DevicesDevices ... 161161
Overview...163 vDiskImageModes...164 StandardImageMode...164 PrivateImageMode...165 WriteCaches...166 Write-CacheTypes...166 CacheonServerDisk...167 CacheonServerDisk:LocalStorage...168 CacheonServerDisk:SharedStorage...168 CacheonTargetDeviceHardDrive...169 CacheonTargetDeviceHardDrive:LocalStorage...169 CacheonTargetDeviceHardDrive:SharedStorage...170 TargetDevice-basedRAMCache...171 TargetDeviceRAM...171 CachePersistentonServer...172 TestYourKnowledge:vDiskImageModesandWriteCache...172 MicrosoftLicensingforProvisioningServices...174 ©Copyright2012CitrixSystems,Inc.9MasterTargetDevice...175 PreparingaMasterTargetDevice...175 PreparingtheHardDiskoftheMasterTargetDevice...175 ConfiguringtheBIOSofaMasterTargetDevice...176 ToConfiguretheBIOSofaMasterTargetDevice...176 InstallingMasterTargetDeviceSoftware...176 ImagingaWindowsTargetDevicewithXenConvert...177 TestYourKnowledge:MasterTargetDevice...178 vDiskFileCreation...179 vDiskLifecycleOperations...179 VHDFormats...180 CreatevDisksAutomaticallyUsingImagingWizard...181 ToCreateaNewvDiskAutomaticallyUsingtheImagingWizard...181 CreatingavDiskManually...182 vDiskManagement...183 AssigningvDiskstoTargetDevices...183 ToAssignavDisktoaSingleTargetDevice...184 vDiskVersions...184 vDiskBackup...184 vDiskUpdates...185 AutoupdateTool...186 vDiskUpdateManagementRequirements...186 ToInstallUpdatesAutomatically...187 IncrementalUpdateRollback...188 vDiskReplication...188 vDiskInventoryService...188 HighAvailabilityOverview...189 ProvisioningServicesFailover...190 ConfiguringtheBootFileforHighAvailability...191 AddingProvisioningServicesHoststotheBootFile...191 EnablingHighAvailabilityonvDisks...191 ToProvideProvisioningServicesHostswithAccesstoStores...192 ConsiderationsforOfflineDatabaseSupport...192 ToEnableOfflineDatabaseSupport...193 StreamLogging...194 ToEnableLogging...194 TroubleshootvDiskImages...195 TestYourKnowledge:ManagingvDisks...197
ModuleModule 8:8: ImplementingImplementing ResourceResource PoolsPools ... 199199
Overview...201 ResourcePools...202 PoolMemberTypes...202 ResourcePoolCommunication...203 HomogeneousPools...203 HeterogeneousPools...204 10©Copyright2012CitrixSystems,Inc.TestYourKnowledge:ResourcePools...204 SharedConfigurations...206 AddingaHosttoaResourcePool...206 ToAddaMembertoaResourcePool...206 ToRemoveaSecondaryMemberfromaResourcePool...207 XenMotion...207 MigratingaVirtualMachineorTemplate...208 TestYourKnowledge:PoolMemberTypes...208 PoolMemberFailureOverview...210 FailureDetectionProcess...210 ToPromoteaSecondaryMembertoaMaster...210 TestYourKnowledge:ResourcePoolRequirements...212
ModuleModule 9:9: DistributedDistributed VirtualVirtual SwitchingSwitching ... 213213
Overview...215 DistributedVirtualSwitchingFeatures...216 DistributedVirtualSwitchingComponents...217 TestYourKnowledge:DistributedVirtualSwitchFeaturesandComponents...218 vSwitchControllerVirtualApplianceDeployment...219 AccessingthevSwitchController...219 TestYourKnowledge:vSwitchControllerAccess...219 vSwitchControllerConfiguration...220 HighAvailability...220 TestYourKnowledge:DistributedVirtualSwitchConfiguration...221 MonitoringNetworkActivity...222 ViewingFlowStatistics...223 ExportingNetFlowStatistics...223 ManagingAddressGroupsandVirtualMachineGroups...224 TestYourKnowledge:MonitoringNetworkingActivity...224 DistributedVirtualSwitchingPolicyConfigurationHierarchy...225 AccessControlListPolicies...225 AccessControlPoliciesHierarchy...226 DefiningAccessControlListRules...226 AccessControlListRuleEnforcementOrder...227 ConfiguringFailModes...227 TestYourKnowledge:AccessControlListRuleEnforcement...228 SettingUpPortConfigurationPolicies...229 ConfiguringQoS...229 ConfiguringRSPAN...230 ToConfigureRSPAN...230 ConfiguringMACAddressSpoofChecking...230 TestYourKnowledge:PortConfigurations...231 Cross-ServerPrivateNetworks...232 Cross-ServerPrivateNetworkRequirements...232 XenMotionwithCross-ServerPrivateNetworks...232 RecoveringfromaFailedvSwitchController...233 ©Copyright2012CitrixSystems,Inc.11ModuleModule 10:10: WorkloadWorkload BalancingBalancing ... 235235
Overview...237 WorkloadBalancingOverview...238 WorkloadBalancingKeyConcepts...238 WorkloadBalancingComponents...239 ToDownloadtheWorkloadBalancingVirtualAppliance...239 ImportConsiderationsfortheWorkloadBalancingVirtualAppliance...240 WorkloadBalancingConfiguration...241 ToUpdateWorkloadBalancingCredentials...241 TestYourKnowledge:ImportingWorkloadBalancingConsiderations...241 ConnectingtotheWorkloadBalancingVirtualAppliance...243 WorkloadBalancingAccessControlPermissions...243 WorkloadBalancingSettings...245 CriticalThresholds...245 CriticalThresholdEvaluationandEdit...245 MetricWeighting...246 FixedandScheduledOptimizationModes...246 OptimizationRecommendations...247 WorkloadBalancingPowerManagement...248 PowerManagementBehavior...249 PowerManagementandVirtualMachineConsolidation...250 ToApplyOptimizationRecommendationsAutomatically...250 OptimalServerSelection...250 TestYourKnowledge:PowerManagement...251 HostExclusionfromRecommendations...251ModuleModule 11:11: ConfiguringConfiguring HighHigh AvailabilityAvailability ... 253253
Overview...255 HighAvailabilityRequirements...256 HighAvailabilityConsiderations...256 RestartPriorities...258 ServerFailureTolerance...258 Overcommitting...259 HostFencing...259 TestYourKnowledge:HighAvailabilityRequirements...259 DisasterRecovery...261 DisasterPreparednessandResponse...261 TestYourKnowledge:DisasterRecovery...262 BackupandRecoveryofXenServerHostsandVirtualMachines...263 Metadata...264 BackingUpaPoolInstallation...264 ToRestoreaPoolInstallation...265 BackingUpVirtualMachinesasSnapshots...265 ToTakeaSnapshotofaVirtualMachine...266 ToRestoreaRunningXenServerHost...266 ListingSnapshotsUsingtheCommand-lineInterface...266 12©Copyright2012CitrixSystems,Inc.DeletingaSnapshot...267 RestoringaVirtualMachinefromaSnapshot...267 TestYourKnowledge:CreatingSnapshots...267 TestYourKnowledge:BackupandRestore...268
ModuleModule 12:12: ManagingManaging andand TroubleshootingTroubleshooting XenServerXenServer ... 269269
Overview...271 Command-lineInterfaceOverview...272 Command-lineInterfaceOperationsTargets...272 Command-lineInterfaceBasics...272 Command-lineInterfaceShortcuts...273 XenServerMenu-DrivenTextConsole...274 TestYourKnowledge:XenServerCommands...274 MonitoringXenServer...276 UsingtheXenTopUtilitytoMonitorHostandVirtualMachinePerformance...276 LoggingtoaRemoteSyslogServer...278 ToLogUsingaRemoteSyslogServer...278 TestYourKnowledge:MonitoringXenServer...278 EventsandAlerts...279 AlertCustomization...279 PersistentXenServerPerformanceStatistics...280 PerformanceStatisticsinXenCenter...280 TestYourKnowledge:XenServerAlerts...281 XenServerLogsandReports...282 XenCenterEventLogs...282 ServerStatusReports...282 Xen-BugtoolUtility...282 XenServerCrashdumpOverview...283 GeneratingtheCrashdumpFileintheCommand-LineInterface...283 TestYourKnowledge:ViewingandGeneratingReportsandLogs...284 RunningaNetworkTraceandTriggeringaMemoryDump...285 TestYourKnowledge:TroubleshootingXenServer...286 XenServerUpdatesandHotfixes...287 UpdateorHotfixConsiderations...287 ToUpdateXenServerHostsUsingXenCenter...288 ToUpdateHostsoraPoolUsingtheCommand-lineInterface...288 RollingPoolUpgrade...290 PlanningaRollingUpgrade...290 WorkloadBalancingReportsOverview...291 WorkloadBalancingReports...291 ©Copyright2012CitrixSystems,Inc.13Notices
CitrixSystems,Inc.(Citrix)makesnorepresentationsorwarrantieswithrespecttothecontentor useofthispublication.Citrixspecificallydisclaimsanyexpressedorimpliedwarranties, merchantability,orfitnessforanyparticularpurpose.Citrixreservestherighttomakeanychanges inspecificationsandotherinformationcontainedinthispublicationwithoutpriornoticeand withoutobligationtonotifyanypersonorentityofsuchrevisionsorchanges. ©Copyright2012CitrixSystems,Inc.AllRightsReserved. Nopartofthispublicationmaybereproducedortransmittedinanyformorbyanymeans, electronicormechanical,includingphotocopying,recording,orinformationstorageandretrieval systems,foranypurposeotherthanthepurchaser’spersonaluse,withoutexpresswritten permissionof: CitrixSystems,Inc. 851WestCypressCreekRoad FortLauderdale,FL,33309USA www.citrix.com Thefollowingmarksareservicemarks,trademarksorregisteredtrademarksoftheirrespective ownersintheUnitedStatesandothercountries.Mark Owner
ActiveDirectory®,Microsoft®,MicrosoftInternetMicrosoftCorporation Explorer®,Windows®, AMD®AdvancedMicroDevices,Inc. Citrix®,CitrixProvisioningServices™,XenApp™,CitrixSystems,Inc. XenDesktop™,XenServer™,XenCenter™, XenMotion™, Dell™,NetEqualLogic™DellInc. Emulex®EmulexCorporation IBM®InternationalBusinessMachinesCorporation Intel®IntelCorporation Linux®LinusTorvalds NetApp®NetworkAppliance,Inc.Mark Owner
PuTTY®SimonTatham,OpenSourceCertified QLogic®QLogicCorporation Realtek™RealtekSemiconductorCorporation RedHat®RedHat,Inc. Sun™SunMicrosystems,Inc. Suse®Novell,Inc. Toolwire®Toolwire Unix®TheOpenGroup Otherproductandcompanynamesmentionedhereinmightbetheservicemarks,trademarksor registeredtrademarksoftheirrespectiveownersintheUnitedStatesandothercountries.Credits
InstructionalDesigners:RachelWhite,OrlandoA.Martinez,Raymond Kung,OmidMirshafiei ProductSpecialist:AndrewGarfield,GeorgeKomoto GraphicArtists:NathanJackson,JoshuaJack Manager:GinaAlesse Editor:KathrynMorris TranslationCoordinator:YashicaBurgess CCIStakeholderJeffApsley SubjectMatterExperts:ChristopherCampbell,JoelStocker,Mark Simmons,ShaneBroomhall,BlaineAnaya,Nick Kieffer,PeterSvoboda,PatrickCarey,Elisabeth TeixeiraModule 1 Introduction to XenServer
18©Copyright2012CitrixSystems,Inc.
Overview
CitrixXenServerisacompleteservervirtualizationplatform,optimizedforbothWindowsand Linuxvirtualservers,withallthecapabilitiesrequiredtocreateandmanageavirtualinfrastructure.Timings XenServerisahypervisorthatrunsonthephysicalorhostservertoprovideavirtualcomputer•Module:60minutes environment.XenServerworksbyvirtualizingthehardware.Hardwarevirtualizationabstracts •Totaltime:60minutes ©Copyright2012CitrixSystems,Inc.Module1:IntroductiontoXenServer19 systemcomponents,suchasharddrives,resources,andports,andallocatesthemtothevirtualized serversrunningonthesystem.Thesevirtualizedserversareknownasvirtualmachines.Theyrun operatingsystemsandapplicationsthatareknownasguestsoftware.Objectives
Aftercompletingthismodule,youwillbeableto: •DescribetheXenServervirtualizationplatform. •DescribethenewfeaturesinXenServer6.0. •IdentifyXenServerarchitectureandkeycomponents. •DescriberesourcepoolcommunicationwithinaXenServerenvironment. •DescribetheXenServerstoragearchitecture. •DescribethenetworkarchitectureforXenServer.XenServer Product Line
XenServerisavailableinfoureditionstomeettheneedsofanyorganization. FreeXenServerFreeisadownloadablevirtualizationplatformthat includesfeatureslikelivemigration,virtualmachinedisksnapshots, ActiveDirectoryintegration,sharedstoragesupport,andcentralized multiservermanagement,plusphysical-to-virtualandvirtual-to- virtualconversiontools. AdvancedXenServerAdvancedincludesspecificadministrationfeatureswithin XenCenter,includingadvancedalertingandperformancehistory, automatedvirtualmachineprotectionandrecovery,anddynamic memorycontrol. EnterpriseXenServerEnterpriseaddsRole-basedAccessControl(RBAC), integratedStorageLinkconfiguration,livememorysnapshots, automatedWorkloadBalancing,andremotepowermanagementto thesetofavailablefeatures. PlatinumXenServerPlatinumaddsfeaturesthatareadministeredfrom outsideofXenServer,suchasProvisioningServicesandSite RecoverywithStorageLink. FormoreinformationabouttheXenServereditions,seethewww.citrix.comWebsite.Product Simplification
XenServerhasbeensimplifiedforeasier,fastersetup: •XenServernolongerrequiresWindows-basedvirtualmachinesforfeaturessuchas StorageLink,SiteRecovery,andWorkloadBalancing.Infact,forStorageLinkandSite Recovery,noadditionalmanagementinfrastructureisrequired. •WorkloadBalancinganditshistoricalreportingfeatureshavebeenmovedtoaLinux-based virtualapplianceforeasyinstallationandmanagement. •TheLinuxSupplementalPackhasbeenremoved,leavingonlyonebaseinstallationISO.The DemoLinuxvirtualmachinefunctionalityhasbeenmovedtoavirtualapplianceformat,soit 20Module1:IntroductiontoXenServer©Copyright2012CitrixSystems,Inc.canbeeasilyimportedintoahostorresourcepool.YoucandownloadtheDemoLinuxvirtual appliancefromthemycitrix.comWebsite.
Architectural Changes
XenServer6.0streamlinestheproductarchitectureandenhancesperformance: •TheXenServer6.0releaseisbasedontheXen4.1hypervisor. •TheOpenvSwitchisnowthedefaultnetworkstackfortheproduct.Improvementsto DistributedVirtualSwitchingincludeafail-safeoptionandvariousimprovementsbasedon customerfeedbackfromXenServer5.6FeaturePack1. •Generalnetworkperformancehasbeenimproved,particularlyaggregatehostnetwork throughput. •Supportforhardware-assistedSingleRouteI/OVirtualizationnetworkperformance optimizationshasbeenimproved,particularlyforusewiththeNetScalerVPXandSDX products.Virtual Appliances and Broader Vendor Support
WithinXenCenter,youcancreatemulti-virtual-machinevirtualappliances,withrelationships betweenthevirtualmachines,suchasstartupsequence,forusewithhighavailabilityandSite Recovery.VirtualappliancescanbeeasilyimportedandexportedusingtheOpenVirtualization Format(OVF)standard. ImportingoftheVMwareVirtualMachineDisk(VMDK)andMicrosoftVirtualHardDisk(VHD) imageformatsisnowintegratedintoXenCenter.Microsoft System Center Integration
XenServer6.0supportsSystemCenterVirtualMachineManager(SCVMM)2012formanaging XenServerhostsandvirtualmachines.Toenablethesemanagementcapabilities,installa supplementalpackfromCitrix. FormoreinformationaboutSCVMM,visit:http://www.microsoft.com.XenDesktop Integration
XenServer6.0isthefirstXenServerreleasetoincludeHighDefinitionUserExperience(HDX) enhancementsforanoptimizedenduserexperiencewithvirtualdesktops. HDXtechnologyisasetofcapabilitiesthatdeliversahighdefinitiondesktopvirtualizationuser experiencetoendusersforanyapplication,device,ornetwork.HDXtechnologyprovidesnetwork andperformanceoptimizationstodeliverthebestenduserexperienceoveranynetwork,including low-bandwidthandhigh-latencyWANconnections. ©Copyright2012CitrixSystems,Inc.Module1:IntroductiontoXenServer21Withversion6.0,aphysicalGraphicsProcessingUnit(GPU)canbeassignedtoavirtualmachine, sotheapplicationsrunningintheguestoperatingsystemcanuseGPUinstructions(GPUPass- Through).ThisfeatureprovidessignificantTotalCostofOwnership(TCO)benefitsforthe XenDesktopHDX3DProtechnologyusedforthedeliveryofCADandothergraphical applicationsusingvirtualdesktops.WithGPUPass-Through,eitherasingleGPUcardoraGPU onamultiGPUcardcanbeassignedtoavirtualmachine.
Enhanced Operating System Support
XenServer6.0bringsbroadersupportforthefollowingguestoperatingsystems: •FormalsupportforUbuntu10.04 •UpdatesforsupportofRedHatEnterpriseLinux(RHEL)5.6,CentOS5.6,andSUSELinux EnterpriseServer(SLES)10ServicePack4 •ExperimentalvirtualmachinetemplatesforSolarisandUbuntu10.10Other Enhancements and Improvements
Enhancementshavebeenmadetoreliability,capacity,andlocalization: •ARollingPoolUpgradewizardisprovidedinXenCentertoenablemorereliableupgrades fromXenServer5.6,5.6FeaturePack1,and5.6ServicePack2. •HighavailabilitynowsupportsNetworkFileSystem(NFS)forstorageoftheheartbeatdisk;the heartbeatdiskprovidesawaytocheckforcommunicationbetweenhosts. •HostRAMsupporthasbeenincreasedto1TB. •VirtualmachinesvirtualCPU(vCPU)andvirtualRAM(vRAM)supportisincreased,upto16 vCPUsand128GBvRAMforWindows;increasedLinuxvCPUandvRAMsupportlevelsvary byLinuxdistribution. •XenServer6.0improvesNetworkInterfaceCard(NIC)bondingreliabilityandaddsformal supportforactive/passivebonding.Test Your Knowledge: New Features in XenServer 6.0
Matchthefollowingtermswiththecorrectdescriptions. •OpenvSwitch •SCVMM •HDX •PhysicalGPU •WorkloadBalancing(WLB) •HighAvailability 22Module1:IntroductiontoXenServer©Copyright2012CitrixSystems,Inc.•StorageLink,SiteRecovery •IntelliCache
Term Description
WorkloadBalancing(WLB)IsaLinux-basedvirtualappliance. HDXProvidesanoptimizedenduserexperiencewith virtualdesktops. SCVMMManagesXenServerhostsandvirtualmachines. HighAvailabilitySupportsNFSforstorageoftheheartbeatdisk. IntelliCacheRequiresathin-provisioned,localstorage repository. OpenvSwitchIsthedefaultnetworkstack. PhysicalGPUCanbeassignedtoavirtualmachinesoapps runningintheguestoperatingsystemcanuse GPUPass-Thru. StorageLink,SiteRecoveryRequirenoadditionalmanagementstructure. ©Copyright2012CitrixSystems,Inc.Module1:IntroductiontoXenServer23XenServer Architecture Overview
TheXenServervirtualizationplatformusestwotechnologies: Hardware-assistedXenServerisdesignedtousehardware-assistedvirtualization virtualizationtechnologiesdeliveredbybothIntelandAMD.Withhardware- assistedvirtualization,theguestoperatingsystemonthevirtual machinedoesnotrequiremodificationsinordertohavedirect accesstotheserverresources. ParavirtualizationParavirtualizationisaccomplishedbyallowingaguestoperating system,suchasWindows,tocommunicatewiththehypervisor.This directcommunicationimprovesperformanceandisenabledon WindowsvirtualmachinerunningonXenServerbyinstalling XenServerTools.XenServer Architectural Components
ThefollowinglistprovidesdescriptionsoftheXenServerarchitecturalcomponents: HardwareLayerThehardwarelayercontainsthephysicalservercomponents, includingmemory,CPU,anddiskdrives. 24Module1:IntroductiontoXenServer©Copyright2012CitrixSystems,Inc.XenHypervisorTheXenhypervisorisathinlayerofsoftwarethatrunsontopof thehardware.Xenprovidesanabstractionlayerthatallowseach physicalservertorunoneormorevirtualmachines,effectively decouplingtheoperatingsystemanditsapplicationsfromthe underlyinghardware. ControlDomainThecontroldomainisaLinuxvirtualmachinewithhigherpriority tothehardwarethanguestoperatingsystems.Thecontroldomain managesthenetworkandstorageI/Oofallvirtualmachines. BecausethecontroldomainusesLinuxdevicedrivers,abroad rangeofphysicaldevicesissupported. GuestOperatingSystemTheguestoperatingsystemistheoperatingsystemthatisinstalled onthevirtualmachine. LinuxVirtualMachineTheLinuxvirtualmachinesincludeparavirtualizedkernelsand drivers.Storageandnetworkresourcesareaccessedthroughthe controldomain,whileCPUandmemoryareaccessedthroughXen tothehardware. WindowsVirtualMachineTheWindowsvirtualmachinesuseparavirtualizeddriverstoaccess storageandnetworkresourcesthroughthecontroldomain. XenServerisdesignedtousethevirtualizationofIntelVT-and AMD-V-enabledprocessors.
Test Your Knowledge: Architectural Components
Matchthefollowingtermswiththecorrectdescriptions. •ControlDomain •XenHypervisor •HardwareLayer •LinuxVirtualMachine •WindowsVirtualMachine ©Copyright2012CitrixSystems,Inc.Module1:IntroductiontoXenServer25Description Term
Useshardwarevirtualizationtoenablethehigh-WindowsVirtualMachine performancevirtualizationcapabilitiesofthe hostOSkernelwithoutusinglegacyemulation technology. RunsontopofthehardwareasathinXenHypervisor abstractionlayerofsoftware,decouplingtheOS anditsapplicationsfromtheunderlying hardware. IsaLinuxvirtualmachinewithhigherpriorityControlDomain tothehardwarethantheprioritiesoftheguest operatingsystemstothehardware. Containsparavirtualizedkernelsanddrivers.LinuxVirtualMachine Storageandnetworkresourcesareaccessed throughthecontroldomain,whileCPUand memoryareaccessedthroughXentothe hardware. Containsthephysicalservercomponents,HardwareLayer includingmemory,CPU,anddiskdrives.XenCenter Overview
XenCenterisagraphical,Windows-baseduserinterface.XenCenterallowsyoutomanage XenServerhosts,resourcepoolsandsharedstorage,andtodeploy,manageandmonitorvirtual machinesfromyourWindowsdesktopmachine. MultipleXenCenterconsolescanbeusedtomanageasingleresourcepool.Theevent mechanismkeepseachclientupdated. 26Module1:IntroductiontoXenServer©Copyright2012CitrixSystems,Inc.Resource Pools
XenCenterrequiresaminimumof1GBofRAM.2GBor moreofRAMisrecommended. ©Copyright2012CitrixSystems,Inc.Module1:IntroductiontoXenServer27 XenServerallowsyoutomanagemultipleXenServerhostsasasingleentitythroughtheuseof resourcepools.Resourcepoolsprovideyouwiththeabilitytomoveandrunvirtualmachineson differentXenServerhosts.ThisabilityallowsyoutomovevirtualmachinesfromoneXenServer hosttoanother: •Intheeventofahostfailure •InpreparationforupgradeaXenServerhost •ToconsolidatevirtualmachinestoaselectnumberofXenServerhostsinordertoreduce powerconsumptionXenServer Storage Overview
Topicstodiscuss: •VirtualmachineiconsinXenCenter.Discussthe differentstatesofavirtualmachineandtheir correspondingiconsdisplayedinXenCenter. •TheLogstab.DemotheLogstabanddiscussthe informationdisplayed. 28Module1:IntroductiontoXenServer©Copyright2012CitrixSystems,Inc.XenServerstoragetargetsarecalledstoragerepositories.Astoragerepositorystoresvirtualdisk images,whichcontainthecontentsofavirtualdisk.Thevirtualdiskimagesarethefundamental unitofvirtualizedstorageinXenServer. XenServerhostscanhavemultiplestoragerepositories,andstoragerepositoriescanbeshared betweenXenServerhosts.
XenServer Networking Overview
OnenetworkiscreatedforeachphysicalNetworkInterfaceCard(NIC)onthephysicalmachine duringtheXenServerinstallation.Thesenetworksareusedtoprovidecommunicationbetweenthe physicalnetworkandvirtualmachinesrunningonXenServerhosts. TherearethreenetworkobjectsinXenServer: •PhysicalNIC,thephysicalnetworkcardontheXenServerhost •Virtualinterface,thevirtualnetworkinterfaceonavirtualmachinerunningontheXenServer host •Network,thevirtualEthernetswitchusedtoroutenetworktrafficonaXenServerhostProvisioning Services Overview
TheProvisioningServicesinfrastructureisbasedonsoftware-streamingtechnology.This technologyallowscomputerstobeprovisionedinreal-timefromasingleshared-diskimage.By streamingasingleshareddiskimage(vDisk)ratherthancopyingimagestoindividualmachines, ProvisioningServicesenablesorganizationstoreducethenumberofsystemsthattheymanage, evenasthenumberofenduserscontinuestogrow.Theadministratorscancompletelyeliminate theneedtomanageandupdateindividualsystems.Instead,allimagemanagementisdoneonthe masterimagethatisstreamed. ©Copyright2012CitrixSystems,Inc.Module1:IntroductiontoXenServer29Test Your Knowledge: XenServer Virtualization Platform
1.WhichtwotechnologiesdoesXenServeruse?(Choosetwo.) a.Emulation b.Fullvirtualization c.Paravirtualization d.Hardware-assistedvirtualization Answer:candd 2.NetworkingoptionscanbeconfiguredwithXenCenterbutnotthexeCLI. a.True b.False Answer:b 3.Allthreetypesofserver-sidenetworkingentitieshaveagloballyuniqueUUID. a.True b.False Answer:a 30Module1:IntroductiontoXenServer©Copyright2012CitrixSystems,Inc.Module 2 Installing and Configuring XenServer
32©Copyright2012CitrixSystems,Inc.
Overview
TheXenServerinstallerusesagraphicaltextinterfaceandisdesignedtoaskaminimumsetof questionstoconfiguretheinstallation.YoucaninstallXenServerfromtheproductCDsorfromaTimings networklocation. •Module:90minutes XenCenterisaWindowsapplicationthatprovidesagraphicalmanagementconsoleformanaging •Exercises:20minutes anddeployingXenServerhostsandvirtualmachines.FromXenCenter,youcanassignshared •Total:110minutesstorageandcreateresourcepools. ©Copyright2012CitrixSystems,Inc.Module2:InstallingandConfiguringXenServer33Objectives
Aftercompletingthismodule,youwillbeableto: •DescribetheXenServerinstallationprocess. •ImporttheCitrixLicenseServerVirtualAppliance. •IntegrateXenServerandActiveDirectorytosupportenduserauthentication. •SecureaXenServerhostbyconfiguringRole-basedAccessControl.XenServer Installation
TheXenServerhostconsistsofaXen-enabledLinuxoperatingsystem,amanagementagent,virtual machinetemplates,andalocalstoragerepositoryreservedforvirtualmachines.TheXenServerhost mustbeinstalledonadedicated64-bitx86server. YoucanconfigurelocaldiskstoragerepositoriesduringtheinitialXenServerinstallation.When morethanonephysicaldiskisavailable,additionalinstallationoptionsareavailable.After installation,youcancreateadditionallocaldiskandremotestoragerepositories. Donotinstallanyotheroperatingsysteminadual-startconfigurationwiththeXenServer host;thisconfigurationisnotsupported.Virtual Machine Storage
Theamountofstoragerequiredforvirtualmachinesdependsontheoperatingsystemandthe optionsselectedduringinstallationofthevirtualmachine.Duringinitialsetup,onlylocalandSAN storageoptionsareavailable.InstallingtheXenServerhostenablesothervirtualmachinestorage repositoryoptions. Withmultiplephysicaldisks,thefollowingvirtualmachinestoragerepositoryoptionsareavailable: •ThevirtualmachinestoragerepositoryonthesamediskastheXenServerhost,spanning multipledisks •ThevirtualmachinestoragerepositoryandtheXenServerhostonseparatedisks 34Module2:InstallingandConfiguringXenServer©Copyright2012CitrixSystems,Inc.Installing Single and Multiple Disk Systems
TheXenServerhostcanbeinstalledoneitherasinglelocalormultiplelocaldisks.Inasingledisk configuration,boththeXenServerhostandthelocalstoragerepositoryresideonthesamedisk. Wheninstalledonmultipledisks,theXenServerhostisinstalledononediskandthevirtual machinestoragerepositoryisinstalledonaseparatedisk.Thestoragerepositorycanbeinstalledin fullononeormultipledisksoronaSAN-attachedLUN. Twoconfigurationsarerecommendedforamultiplelocaldiskenvironment:configuringthe XenServerdiskinaRAID1formatandconfiguringthestoragerepositoryinaRAID5setupfor performanceandreliability. ©Copyright2012CitrixSystems,Inc.Module2:InstallingandConfiguringXenServer35Installing XenServer
TherearethreeXenServerinstallationmethods: •InstallfromaCD. Downloadtheinstaller(ISOfileformat)andburnittoaCD.Todownloadtheinstaller,visit www.citrix.com/xenserver. •Setupanetwork-accessibleTrivialFileTransferProtocol(TFTP)servertostartupusinga Pre-BootExecutionEnvironment(PXE). •InstallXenServertoaremotediskonaSANtoenablestartupfromSAN. FormoreinformationaboutInstallingXenServer,seeCitrixarticleCTX130421on http://support.citrix.com.Pre-Installation Checklist
TheXenServerhostcomputerisdedicatedentirelytothetaskofrunningvirtualmachinesandis notusedforotherapplications.TheXenServerhostrunsanoptimizedandhardenedLinux partitionwithaXen-enabledkernel,whichcontrolstheinteractionbetweenthevirtualdevices,seen byvirtualmachinesandthephysicalhardware. BeforeinstallingXenServer: •VerifythattheservermeetstheCPU,memory,andnetworkingrequirements. •VerifyavailabilityofawholephysicaldiskorLogicalUnitNumber(LUN)withatleast16GB ofspace.Theinstallerwilllistonlythosediskswithenoughspace. •Ifinstallingonaremotedisk,testtheconnectionbeforeinstalling. FormoreinformationabouttheHardwareCompatibilityList(HCL),seewww.hcl.vmd.citrix.com. Youcanalsoe-mailCitrixatxenserver.hcl@citrix.comwithspecificquestions. •TheXenServerinstallationprocessdestroysanyexistingoperatingsystemordataon theselecteddisk. •TheXenServerhostgivesanSSLerrorandfailstoconnectifthereisatime differencebetweentheXenCenterconsoleandtheXenServerhost.NetworkTime Protocol(NTP)synchronizestheLinuxsystemclockwithanaccuratetimesource. ForinformationabouthowtosetupanNTPserverforaXenServernetwork,referto CitrixarticleCTX116307onhttp://support.citrix.com. 36Module2:InstallingandConfiguringXenServer©Copyright2012CitrixSystems,Inc.XenServer Installation Process
IfvirtualizationtechnologiesarenotenabledattheBIOS, Duringtheinstallationprocess,theinstaller: youwillreceiveanerrormessage;however,the installationwillproceed.1.Preparesthedisksforstartupdata,thecontroldomain,andvirtualmachinestorage. ©Copyright2012CitrixSystems,Inc.Module2:InstallingandConfiguringXenServer37 2.InstallsanEXTLINUXbootloader. 3.Detectshardware. 4.Createsthecontroldomain: a.InstallstheXenServerhostpackages b.Configuresthedevicedrivers c.Configuresthenetwork/storageoptions 5.Initializesthevirtualmachinestoragerepository(optional). 6.RestartstheXenServerhost.IntelliCache
UsingXenServerwithIntelliCachemakeshostedXenDesktopdeploymentsmorecosteffectiveby enablingtheuseofacombinationofsharedstorageandlocalstorage.IntelliCacheistheintelligent managementofwrite-cache. IntelliCacheworksbycachingdatafromavirtualmachine'sparentVDIinlocalstorageonthe virtualmachinehost.ThislocalcacheisthenpopulatedasdataandreadfromtheparentVDI. WhenmanyvirtualmachinesshareacommonparentVDI,thedatapulledintothecachefromon virtualmachinecanbeusedbyanothervirtualmachine.Therefore,furtheraccesstothemaster imageonsharedstorageisnotrequired. ThisfeatureisonlysupportedwhenusingXenServerwithXenDesktop. TherequirementsforusingIntelliCacheare: •Athin-provisioned,localstoragerepository,whichisconfiguredduringXenServerinstallation byselectingOptimizedstorageonXenDesktopforthinprovisioning •AnNFS-orEXT-basedsharedstoragetohostthesourcevirtualdiskimage FormoreinformationaboutIntelliCache,seeCitrixarticleCTX130421onsupport.citrix.com.Configuring NTP
YoucanuseNTPtoenabletheservertodeterminelocaltime.Windows
IfchoosingNTPovermanualentrytodeterminelocaltime,eitherselectNTPisconfiguredbymy DHCPserversothatDHCPwillsetthetimeontheserver,oratleastenteroneNTPservernameorIPaddress.ClickOK.Makesureport123usingtheUDPprotocolisopenonyourfirewall.For moreinformationaboutconfiguringNTP,seeCitrixarticleCTX130422onsupport.citrix.com. XenServerassumesthatthetimesettingintheBIOSoftheserveristhecurrenttimein UniversalTimeClock(UTC).XenServercomparestheUTCtime,sotheXenServerhosts caneachbeindifferenttimezones.Toensurethatsynchronizationiscorrect,youcan choosethesameNTPserversforyourXenServerresourcepoolandtheActiveDirectory server.
Test Your Knowledge: XenServer Installation
PlacetheXenServerinstallationstepsinthecorrectorder. 1Formatthedisksforstartupdata,control domain,andvirtualmachinestorage 3Detecthardware 5Optionallyinitializethevirtualmachinestorage repository 2Installabootloader 6RestarttheXenServerhost 4Createthecontroldomain 38Module2:InstallingandConfiguringXenServer©Copyright2012CitrixSystems,Inc.XenCenter Installation and Management Consoles
XenCenterisinstalledonaremotemachineandconnectstotheXenServerhostthroughthe networktomanagetheXenServerenvironment.XenCenterisinstalledusingtheBaseInstallation ISOorbylocatingthelatestXenCenterversionfromthewww.citrix.comorwww.mycitrix.comWeb sites. Uninstallanypreviousversionbeforemovingforward.IfinstallingfromaCDorDVD,openthe client_installfolderandruntheXenCenter.msifile. XenCenterisbackwardscompatible.XenCenter Consoles
XenServerprovidesXenCentermanagementconsolesforWindowsandLinuxvirtualmachines.Windows Console
XenCenterusesagraphicalconsoletointeractwithWindowsvirtualmachines.Virtualmachines writetheirscreenstoaCirrusVGAadapter,whichisthenconvertedbythecontroldomaintoa VirtualNetworkComputing(VNC)stream.ThisdataissentoverthedefaultSSLlinkonport443 toXenCenter. XenCenterincludesaremotemanagementfeaturethatstartsthebuilt-inWindowsRemoteDesktop Protocol(RDP)clientandsendsitthevirtualmachinehostnameifRDPandnetworkinginsidethe virtualmachineareenabled.ThisremotemanagementmethoduseslessbandwidththantheVNC console.TheRDPdataiscarriedoveraseparatenetworkconnectiontotheXenCenterclient.Linux Console
AtextconsoleisavailablewithLinuxvirtualmachines. ThegraphicalconsolerequiresastandardVNCserverrunningwithinthevirtualmachine. XenCenterconnectstotheVNCserverusingthe5900defaultportandtheIPaddressesreturned fromXenServerTools.ThisconnectionismadeoutsideoftheSSLconnection.ClickSwitchtoX ConsoletoaccessthegraphicalVNCconsole. IftheSwitchtoXConsolebuttonisdimmed,thenVNCislikelynotconfiguredonport 5900,afirewallisblockingtraffic,ornetworkingisnotfunctionalwithinthevirtual machine. ©Copyright2012CitrixSystems,Inc.Module2:InstallingandConfiguringXenServer39XenServer Licensing Components
Youmustconsiderthreecomponentsinordertodeploylicensingcorrectly. LicenseServerThelicenseserverstoreslicensefiles. LicenseFileThelicensefilekeepsthelicenseinformationfortheproduct.It containsvitalinformationsuchastheproducteditionandany applicableexpirationdates. LicenseAdministrationThelicenseadministrationconsoleallowsyoutomaintainthe ConsolelicenseserverandlicensefilesoveraWeb-basedinterface.Licensing Communication Overview
Citrixproductsdependoncommunicationwiththelicenseserver.Youmustperformthefollowing tasksforalicenseservertoacceptconnectionandlicenserequests: •Addalicensefiletothelicenseserver •ConfiguretheproducttouseaspecificlicenseserverLicense File Management
CitrixrequireseachorganizationthatusesCitrixproductstopurchaselicensesfortheproduct.The licensesallowforaconnectiontotheproductandenabletheuseoffeaturesintheproductedition.Duringthelicensingsection,pleaserefertotheCitrix LicensefilesstorethecompanylicenseinformationinaplaintextformatwithauthenticatedarticleCTX128013XenDesktopLicensingFAQ. content.Eachlicensefilecanstoreinformationforoneormorelicenses.http://support.citrix.com 40Module2:InstallingandConfiguringXenServer©Copyright2012CitrixSystems,Inc.Citrix License Server Virtual Appliance
XenServer6.0Advanced,Enterprise,andPlatinumeditionssupportaCitrixLicenseServerVirtual Appliance(11.6.1orhigher)andaXenServer6.0license.ACitrixLicenseServerVirtualAppliance isavailablefordownloadfromtheCitrixXenServer6.0downloadpage.TouseanexistingCitrix LicenseServerVirtualAppliance,youmustinstallaXenServer6.0license.Formoreinformation aboutdownloadingandinstallingtheCitrixLicenseServerVirtualAppliance,seeCitrixarticle CTX124501onsupport.citrix.com.Obtaining License Files
Thewww.mycitrix.comWebsiteissueslicensefiles.Youcanallocatesomeorallofthelicensesto oneormorelicenseservers.Therefore,youarenotobligatedtoallocatealllicensessimultaneously andcanchoosewheretousetheremainderatalaterdate. Thisadministrationdesignallowscompaniestopurchaselicensesinbulkanddistributethemas neededforvariouslicensesservers,productionfarms,testfarms,orotherschemathatfitthe environment.Forexample,ifyoupurchaseasingle100-countlicenseyoucouldallocateitto severallicensefiles.License Management Console
•Askstudentsiftheyknowhowtodownloadalicense ThelicensemanagementconsoleisaWeb-basedinterfacethatallowsyoutomaintainthelicense file.Ifnotdemothisprocedure. serverandmanagelicensefilesforthatlicenseserver. •ThelicenseforXenServerFreeisnotdownloaded fromwww.mycitrix.com.Whenyouattemptto Youcannotinstallthelicensemanagementconsoleonaserverotherthanthelicense activatethelicenseinXenCenter,youaretakentoa server,butyoucanaccessitremotelythroughaWebbrowser. Webform.ThelicenseforXenServerFreewillbee- mailedtoyouwhentheformhasbeensubmitted. Thefollowinglistprovidesabriefdescriptionofthelicensingfeaturesavailableusingthelicense •Formoreinformationaboutlicensefiles,seeCitrix managementconsole. articleCTX125301onhttp://support.citrix.com ©Copyright2012CitrixSystems,Inc.Module2:InstallingandConfiguringXenServer41 TrackingLicenseUsageTracksconcurrentlicenseinformation. ReportingCreatesreportsbasedoncurrentlicenseusage. ConfiguringAlertsCreatesandviewsalertsbasedonlicenseusageandexpirationdates. ConfiguringDelegatedAssignsrightstoadministratorstolimitcapabilitiesandensure Administratorsproperlicensemanagement. Considerthefollowing: •CitrixrecommendsthatyouconfigureSecureSocketsLayer(SSL)andconfigureSecure HTTP(S)whenaccessingthelicensemanagementconsoleusingabrowseronaUNIX workstation,orinanunsecuredenvironment. •Ifthevendordaemonstopsrunning,youcanrestartvendordaemonservicesinthelicense managementconsole,whichislessintrusivethanrestartingtheserver. •CitrixrecommendsthatyouuseaVirtualPrivateNetwork(VPN)whenaccessingthelicense managementconsolefromoutsidethenetwork.•TheLicenseServerisWeb-based. AuthenticationisnotrequiredtoviewtheDashboard,butisrequiredtoadministera license.Installationcreatesadefault"Admin"accountandconfiguresapassword.Ifyou forgetthepassword,youmustreinstallthelicenseserver.
Test Your Knowledge: Citrix License Server
1.WhichthreeoptionsdoesCitrixrecommendforsettingupsecureaccesstoalicenseserver? (Choosethree.) a.SSL b.HTTPS c.RDP d.VPN Answer:A,B,D 42Module2:InstallingandConfiguringXenServer©Copyright2012CitrixSystems,Inc.Managing XenServer Users
WhenyoufirstinstalltheXenServerhost,auseraccountisaddedtotheXenServerhost automatically.Thisaccountisthelocalsuperuser(LSU),orroot,whichisauthenticatedlocallyby theXenServerhostcomputer.TheLSUisusedforsystemadministrationandhasallrightsand permissions. AlleditionsofXenServercanadduseraccountsfromActiveDirectory.However,onlyXenServer EnterpriseandPlatinumEditionsletyouassigntheseActiveDirectoryaccountsdifferentlevelsof permissionsthroughtheRole-basedAccessControlfeature.Key Benefits of Active Directory Integration
KeybenefitsofauthenticatingendusersthroughActiveDirectoryinclude: •EasyaccesscontroltoXenServerhosts •Basicauditingcontrolandenabledaccessrevocation •Accesswiththexecommand-lineinterfaceusingtheappropriate-uand-pwarguments ©Copyright2012CitrixSystems,Inc.Module2:InstallingandConfiguringXenServer43Configuring Active Directory Integration
TograntanenduserwithaccesstotheXenServerhost,youmustaddasubjectforthatenduseror group.TomanageenduserpermissionsinActiveDirectory,youcancreateasinglegroupfrom whichtoaddandremoveendusers.Alternatively,youcanaddandremoveindividualusersfrom theXenServerhostoracombinationofusersandgroupsasappropriateforauthentication requirements.ThesubjectlistcanbemanagedfromXenCenterorthroughthecommand-line interface. Credentialsarefirstcheckedagainstthelocalrootaccountwhenauthenticatinganenduser, allowingyoutorecoverasysteminwhichanActiveDirectoryserverhasfailed.Ifthecredentials donotmatch,thenanauthenticationrequestismadetotheActiveDirectoryserver.Ifthesecond requestissuccessful,thentheXenServerhostretrievestheenduserinformationandvalidatesit againstthelocalsubjectlist.Validationagainstthesubjectlistissuccessfuliftheenduserora groupinthetransitivegroupmembershipisinthesubjectlist.End-User Authentication Using Active Directory
IfyouarefamiliarwithXenCenter,notethattheXenServerhostcommand-lineinterfaceuses slightlydifferentterminologytorefertoActiveDirectoryanduseraccountfeatures.XenCenter Term XenCenter Command-line Interface Term
UsersSubjects AddusersAddsubjects ActiveDirectoryauthenticationforaXenServerhostrequiresthatthesameDNSserversareused forboththeActiveDirectoryserver(configuredtoallowforinteroperability)andtheXenServer host.Insomeconfigurations,theActiveDirectoryservermightprovidetheDNSitself.Thiscanbe achievedeitherbyusingDHCPtoprovidetheIPaddressandalistofDNSserverstothe XenServerhost,bysettingvaluesinthephysicalnetworkinterface(PIF)objects,orbyusingthe installerifamanualstaticconfigurationisused. CitrixrecommendsenablingDHCPtobroadcastXenServerhostnames.Inparticular,youshould notassignthereservedhostnameslocalhostorlinuxtoXenServerhosts.Active Directory Integration
AlthoughtheexternalauthenticationpropertyisindividualtoeachXenServerhost,Citrix recommendsenablingordisablingauthenticationbyresourcepoolratherthanbyhost.The XenServerhostdealswithfailuresthatoccurwhenenablingauthenticationonaparticularhostand 44Module2:InstallingandConfiguringXenServer©Copyright2012CitrixSystems,Inc.performsanyrollbackchangesthatmightberequired.Thisensuresthataconsistentconfiguration isusedacrossaresourcepool.Thexehost-param-listcommandcanbeusedtocheckhost propertiesandtodeterminetheexternalauthenticationstatusbycheckingrelatedfieldvalues.
External Authentication Process
Theexternalauthenticationprocessincludesthefollowingsteps: 1.TheXenServerhostpassescredentialstotheremoteauthenticationdirectoryservicefor authentication. 2.Theremoteauthenticationservicechecksthecredentials.Iftheyareinvalid,thenthe authenticationimmediatelyfails. 3.Theexternalauthenticationdirectoryserviceisqueriedtoobtainthesubjectidentifier associatedwiththecredentials,iftheyarevalid. 4.Theauthenticationissuccessfullycompletedifthesubjectidentifiermatchesthecredentials storedintheXenServerhostpersistentmetadata. Ifthecredentialsoftheenduserareinvalidatedwhiletheuserisconnected,the XenServerhostinvalidatesthelogontoXenCenterbutdoesnotinvalidateanyactiveSSH session.Test Your Knowledge: Integrating XenServer and Active Directory
1.Whichfourstepsmustyoutaketoconfigurevaryinglevelsofaccessforusers?(Choosefour.) a.EnableActiveDirectory b.InstallXenCenter c.Createasubjectentryforthepersonorgrouprequiringaccess d.Adduseraccounts e.Assignrolestoaddeduseraccounts Answer:A,C,D,E ©Copyright2012CitrixSystems,Inc.Module2:InstallingandConfiguringXenServer45Role-Based Access Control
TheRole-basedAccessControl(RBAC)oftheXenServerhostallowsyoutoassignusers,roles,and permissionstocontrolwhohasaccesstoyourXenServerhostandwhichactionstheycanperform. TheXenServerhostRBACsystemmapsauser(oragroupofusers)todefinedroles,whichinturn haveassociatedXenServerhostpermissions.RBACdependsonActiveDirectoryforauthentication services.Specifically,theXenServerhostkeepsalistofauthorizedusersbasedonActiveDirectory userandgroupaccounts.Roles
XenServerfeaturespre-establishedrolesforrole-basedadministration.NotethatPool Administrator,Localsuperuser,andRead-onlyrolesareonlyavailableintheFreeandAdvanced editions. PoolAdministratorTheresourcepooladministratorisequivalenttolocalroot.Theuser canperformalloperations. Localsuperuser(root)ThelocalsuperuserwillalwayshavethePoolAdminrole.ThePool Adminrolehasthesamepermissionsasthelocalroot. PoolOperatorTheresourceoperatorcandoeverythingexceptfor adding/removingusersandmodifyingtheirroles.Thisroleis focusedmainlyonhostandresourcemanagement. VirtualMachinePowerTheVirtualMachinePowerAdministratorcreatesandmanages Administratorvirtualmachines.Thisroleprovidestheabilitytoprovisionvirtual machinesforusebyavirtualmachineoperator. VirtualMachineTheVirtualMachineAdministratorissimilartoaVirtualMachine AdministratorPowerAdministratorbutcannotmigratevirtualmachinesor performsnapshots. VirtualMachineOperatorTheVirtualMachineOperatorissimilartoVirtualMachine Administrator;however,whiletheVirtualMachineOperatorcan performstart/stoplife-cycleoperations,itcannotcreateordestroy virtualmachines. 46Module2:InstallingandConfiguringXenServer©Copyright2012CitrixSystems,Inc.Read-onlyTheRead-onlyrolecanviewresourcepoolandperformancedata.
Security Logs
TheRBACauditlogwillrecordanyoperationtakenbyalogged-inuser. •ThelogentrywillexplicitlyrecordtheSubjectIDandusernameassociatedwiththesession thatinvokedtheoperation. •Ifanoperationisinvokedforwhichthesubjectdoesnothaveauthorization,thiswillbe logged. •Iftheoperationsucceeds,itisrecorded;iftheoperationfails,theerrorcodeislogged.Test Your Knowledge: Role-Based Access Control
1.Whichroleisequivalenttotheresourcepooladministratorwithregardtopermissions? a.ActiveDirectoryadmin b.SRmaster c.(local)root d.anexemptuseraccount Answer:c 2.TheRead-onlyrolecanviewperformancedata. a.True b.False Answer:a 3.Whichthreeoptionsdoesanauditlogtrackduringasession?(Choosethree.) a.errorcodes b.GroupIDofsessionthatinvokedtheoperation c.username d.logoninformation Answer:a,b,c ©Copyright2012CitrixSystems,Inc.Module2:InstallingandConfiguringXenServer4748©Copyright2012CitrixSystems,Inc.
Module 3 XenServer Networking
50©Copyright2012CitrixSystems,Inc.
Overview
OneofthegoalsofnetworkinginXenServeristomakethephysicalnetworkinterfacecards(NICs) inXenServerhostsavailablefornetworkinginvirtualmachines.TherelationshipbetweenphysicalTimings: NICsandvirtualNICsaddsanotherlayerofcomplexitytonetworks.Aninitialnetworkissetup Module:90minuteswhenXenServerisinstalled.Youcanaddadditionalnetworksaftertheinstallation.Thismodule providesinformationonhowtocreateandconfigureallnetworksinaXenServerenvironment.Exercises:10minutes TotalTime:100minutesObjectives
FormoreinformationaboutXenServernetworking,view thefollowingKnowledgeCenterarticles: Aftercompletingthismodule,youwillbeableto: •CTX128502 •DescribethenetworkcomponentsandarchitectureofXenServer. •CTX130924 •Connectvirtualmachinesbycreatingavirtualnetworkandassigningavirtuallocalarea network(VLAN).Forstudentshowarefamiliarwithapreviousversionof XenServer,besuretoinformthestudentthatthismodule•ConfiguretwophysicalNICstofunctionasonelogicalNICbycreatingaNICbond. coverstheOpenvSwitch,andnottheLinuxnetworking •ConfigureaXenServerhosttouseaspecificnetworkbyconfiguringamanagementinterface. stack. ©Copyright2012CitrixSystems,Inc.Module3:XenServerNetworking51XenServer Networking Overview
XenServerhostsprovidethenetworkcommunicationbetweenvirtualmachinesrunningononeor moreXenServerhosts,aswellascommunicationwiththephysicalnetwork.Cross-Serverprivatenetworksareaccomplishedbyhaving a"switchinghost"establishGREtunnels(inastarYoucanconfigurefourdifferentvirtualnetworksinXenServer: topology)toeachoftheotherhosts(whichhaveanactive •Single-ServerPrivatenetworks,whichareatypeofinternalnetworkvirtualmachinerunningontheprivatenetwork)inthe pool.•Externalnetworks •Bondednetworks,whichareatypeofexternalnetworkCross-Serverprivatenetworkswillbediscussedinthe DistributedVirtualSwitchingmodule.•Cross-ServerPrivatenetworks,whichareatypeofinternalnetwork 52Module3:XenServerNetworking©Copyright2012CitrixSystems,Inc.Network Stacks Supported by XenServer
TherearetwonetworkingstacksinXenServer6.0: ThechangefromtheLinuxstacktotheOpenvSwitchis•TheOpenvSwitch,thedefaultnetworkingstack seamlesstotheadministrator. •TheLinuxbridge PreviousversionsofXenServerusedstandardLinux TheOpenvSwitchisasoftwareswitchrunningonXenServer.TheOpenvSwitchsupportsOpen bridgingcodeforbuildingvirtualswitches.Ifrequired, Flow,anetworkprotocolusedtomanageanddirecttrafficamongroutersandswitches. youcanrevertbacktotheLinuxstackafterXenServer installationbyrunningthefollowingcommand:TheOpenvSwitchcanbeusedalone,oritcanbeusedinconjunctionwithaseparatelyinstalled xe-switch-network-backendbridgeDistributedvSwitchController.WhentheOpenvSwitchandDistributedVirtualSwitchareused togetheryougainadditionalfunctionalityandfeatures,suchasRemoteSwitchedPortAnalyzer Youmustrestartyourserverafterrunningthiscommand.(RSPAN)andqualityofservice(QoS).ThetableprovidesalistofsupportedfeaturesfortheOpen TheLinuxnetworkstackisnotopenflowenabled,doesvSwitchnetworkwhenusedaloneandtheOpenvSwitchandtheDistributedvSwitchController notsupportCrossServerPrivateNetworks,andcannotbeusedtogether. managedbytheXenServervSwitchController.Open vSwitch Only Open vSwitch and Distributed vSwitch Controller
Active/ActiveXX Active/PassiveXX PrivateNetworkXX QoSX JumboframesXX NetFlowXOpen vSwitch Only Open vSwitch and Distributed vSwitch Controller
Cross-ServerPrivateNetworkX AccessControlListsX ThedefaultOpenvSwitchisthenetworkingstackthatwillbediscussedthroughouttherestofthis module. ©Copyright2012CitrixSystems,Inc.Module3:XenServerNetworking53Network Components and Architecture
OnenetworkiscreatedforeachphysicalnetworkinterfacecardduringXenServerinstallation.The XenServerhostperformsalltherequiredconfigurationsofthephysicalnetworkinterfacecards. WhenyouaddaXenServerhosttoaresourcepool,thedefaultnetworksaremergedsothatall physicalNICswithinthesamedevicenameareattachedtothesamenetwork. NetworkExample TheLinuxbridgeandtheOpenvSwitchhavethesameAllhostsinapoolwithaneth0NICwillhaveacorrespondingphysicalinterfacepluggedinto networkarchitectureinrelationtoXenServer.Thechangethepool-wideNetwork0network.Thehostswitheth1networkinterfacecardswillhavea fromtheLinuxbridgetotheOpenvSwitchistransparentcorrespondingphysicalinterfacepluggedintothepool-wideNetwork1network. totheadministrator. 54Module3:XenServerNetworking©Copyright2012CitrixSystems,Inc.Network Architecture Diagram
ThecomponentsthatarerelatedtonetworkingonXenServerare: Physicalinterface(PIF)APIFrepresentsaphysicalnetworkinterfacecardforeach XenServerhost.TheXenServersupportsupto16physicalnetwork interfaces(orupto8bondednetworkinterfaces)perXenServer host.Virtualinterface(VIF)AVIFisaserver-sidesoftwareobjectthatisavirtualrepresentation ofacomputernetworkinterface.Avirtualmachineconnectstoa virtualinterfacetoprovidenetworkconnectivitytoothervirtual machinesandthephysicalnetwork. VirtualNICAvirtualNICisthevirtualrepresentationofaNIConavirtual machine.ThevirtualNICusesparavirtualizeddriverstoconnectto theVIFsinthecontroldomain. NetworkThecontroldomaincontainsoneormorevirtualswitches.Avirtual switchisasoftwareswitchabletobridgemultiplevirtualnetwork interfacestoaphysicalinterface. ThecontroldomainusesstandardLinuxdevicedriverstoconnecttothephysicalNICsin thehost,whichallowsXenServertosupportabroadrangeofphysicaldevices.
Network Adapter Drivers
InaLinuxguestoperatingsystem,virtualNICsarealwaysdisplayedasstandardLinuxnetwork devicesandusethehighspeedXenparavirtualized(PV)networkdriver. InaWindowsguestoperatingsystem,theinitialWindowsinstallationhasanemulatednetwork devicethatusesabuilt-indriver.WindowsseesthedeviceasaRealTekFastEthernetNIC.After XenServerTools--whichincludesPVnetworkdrivers--isinstalled,WindowsseesaXenServerPV EthernetAdapter.Whenthehigh-speeddriversareinstalled,anynetworksettingssetduringor aftertheWindowsinstallationfortheRealTekadapterarecopiedovertotheXenServerPV EthernetAdapter. TheXenServerPVEthernetAdapterreportsaspeedof2GBpersecondinWindows virtualmachines.Thisspeedisahardcodedvalueandisnotrelevantinavirtual environmentbecausethevirtualNICwillperformatthesamerateasthephysicalNIC. Themostimportantfactorinthenetworkspeedofavirtualmachineisthespeedofthe physicalNIConthehost. ©Copyright2012CitrixSystems,Inc.Module3:XenServerNetworking55Private-Server and External Networks
NetworkswithoutanassociationtoaPIFareconsideredsingle-serverprivatenetworksandcan onlybeusedtoprovideconnectivitybetweenvirtualmachinesonagivenXenServerhost.Witha single-serverprivatenetwork,noconnectionismadetoaphysicalnetworkinterfacecard. NetworkswithaPIFassociationareconsideredexternalandprovideconnectivitybetweenvirtual machinesandthephysicalnetwork. Thefollowinglistprovidesanoverviewoftheelementsofsingle-serverprivatenetworksand externalnetworks: Virtualinterface(VIF)TheVIFtransfersdatabetweenthevirtualmachineandthe network. InternalswitchExternalnetworksformabridgewiththephysicalnetworkand supportVLANtrunkingifmultipleVLANsareassociatedwitha singlenetworkinterfacecard. Physicalinterface(PIF)ThePIFconnectsthephysicalnetworktoNetwork0. 56Module3:XenServerNetworking©Copyright2012CitrixSystems,Inc.PhysicalNIC0(externalTheNIConthephysicalXenServerhost. networks)
Test Your Knowledge: Network Components
Matchthefollowingtermswiththecorrectdescriptionsinthecourseware. •PIF •VirtualNIC •VIF •NetworkDescription Term
The__________bridgesmultiplevirtualnetwork interfacestoaphysicalinterface. The__________connectsthephysicalnetworkPIF totheinternalnetwork. A__________usesparavirtualizeddriverstovirtualNIC connecttothevirtualinterfacesinthecontrol domain. The__________transfersdatabetweentheVIF virtualmachineandthenetwork. ©Copyright2012CitrixSystems,Inc.Module3:XenServerNetworking57VLAN Support and Components
XenServersupportstheuseofmultipleVLANstomappedphysicalnetworkinterfacesonthehost server.Whencreatinganetwork,youmustproperlyconfiguretheVLANtagforthevirtualNICin XenServertocorrespondwiththeVLANsonthevirtualswitches. VLANsallowasinglephysicalnetworktosupportmultiplelogicalnetworks.XenServersupports theuseofmultipleVLANstomappedphysicalnetworkinterfacesonthehostserver. NetworkAnewnetworkisconfiguredforeachVLAN,andVLANtagsare addedtopacketsandstrippedoffatthenetwork.Itisnotnecessary toconfigureavirtualmachinefortheVLAN.Thevirtualmachine needsonlytobeconnectedtotheswitchfortheVLAN. VLANtaggingAVLANIDisatagaddedoneverypacket.IncomingVLANtraffic tagsarestrippedoffatnetworkandaddedonoutgoingpackets. 58Module3:XenServerNetworking©Copyright2012CitrixSystems,Inc.VLANExample YouhaveconfiguredfourdifferentVLANslabeledVLAN100,200,300,and400thatare availablethroughatrunkedconnection.YoumustverifythatthenamingoftheVLANtagsis consistent.ToensurepropercommunicationconfigureallVLANsattheresourcepoollevel. Youcanconfigureupto4092VLANs.DemoVLANsfor theclassbyaddinganetworkwithaVLAN. ©Copyright2012CitrixSystems,Inc.Module3:XenServerNetworking59
Initial Network Setup
YoucandesignateonephysicalNICandIPaddressforthemanagementNICduringthe installationofXenServer.ManagementNICsareusedformanagementtrafficbetweenthe XenServerhostandXenCenter,aswellasnetworksforstorageandotherdistributedfunctionssuch asXenMotion.Duringinstallation: •PIFsarecreatedforeachphysicalNIConthehost. •ThePIFofthephysicalNICselectedforuseasthemanagementinterfaceisconfiguredwith theIPaddressingoptionsspecifiedduringinstallation. •AnetworkiscreatedforeachPIF(network0,network1). •TheIPaddressingoptionsofallotherPIFsareleftunconfigured. Afterinstallation,youcanconfigurenon-managementphysicalNICs,whicharerecommendedfor virtualmachinenetworkconnections.Test Your Knowledge: VLANs
1.YouhavethreeVLANslabeled25,26,and27.Toensurethatthereispropercommunication onyourphysicalnetwork,youmust: a.ConfigureVLAN25onthephysicalswitchasVLANtag25. b.ConfigureallVLANsonthephysicalswitchwiththeproperVLANtags. c.ConfigureVLAN25onthevirtualswitchasVLANtag25. d.ConfigureallVLANsonthevirtualswitchwiththeproperVLANtags. Answer:b 2.YouareinstallingXenServeronaphysicalserverthathastwoNICs.Whichtwooptionswill youneedtoconfigurewhencompletingtheXenServerinstallation?(Choosetwo.) a.Amanagementinterface b.Onevirtualswitch c.TwoPIFs d.TheIPaddressesforbothNICs Answer:a,c 60Module3:XenServerNetworking©Copyright2012CitrixSystems,Inc.NIC Bond
ANICbondcanimprovetheXenServerhostresiliencybyusingtwophysicalNICsasiftheywere onephysicalNIC.IfonephysicalNICwithinthebondfails,thenetworktrafficontheXenServer hostwillautomaticallyberoutedoverthesecondphysicalNIC.NICbondscanworkin: •Active/Activemode,withtrafficbalancedbetweenthebondedNICs •Active/Passivemode,inwhichtrafficisonlypassedoveroneoftheactiveNICsNIC Bonding Architecture
LoadbalancingisatsourceMACgranularity. ©Copyright2012CitrixSystems,Inc.Module3:XenServerNetworking61 NICbondsarerepresentedbyadditionalphysicalinterfaceobjects,suchasBond0.Thebonded physicalinterfaceisconnectedtovSwitch. Whenthebondisusedfornon-guesttraffic,oneIPconfigurationisrequiredforeachbond.Load Balancing
XenServersupportsSourceLevelBalancing(SLB)andActive-PassiveNICbonding.Test Your Knowledge: NIC Bond Modes
1.ANICbondconfiguredinactive-activemode: a.SupportsnetworktrafficoveronlyoneNICatatimeb.RequiresswitchsupportforEtherChannel c.SendstrafficbasedonthesourceMACaddress d.SupportsnetworktrafficoverbothNICs Answer:C,D 62Module3:XenServerNetworking©Copyright2012CitrixSystems,Inc.
NIC Bond Configuration for Resource Pools
CitrixrecommendscreatingNICbondsaspartoftheinitialresourcepoolcreationpriortojoining additionalhoststothepool.Doingsoallowsthebondconfigurationtobeautomaticallyreplicated tohostsastheyarejoinedtothepoolandreducesthenumberofstepsrequired.AddinganNIC bondtoanexistingpoolrequirescreatingthebondconfigurationmanuallyonthemasterandeach ofthemembersofthepool.CreatinganNICbondusingphysicalNICsthatareinuseisa disruptiveoperation. DonotattempttocreateNICbondsthatarecurrentlyinuseforhighavailability. ©Copyright2012CitrixSystems,Inc.Module3:XenServerNetworking6364©Copyright2012CitrixSystems,Inc.
Module 4 XenServer Storage Repositories
66©Copyright2012CitrixSystems,Inc.
Overview
Virtualmachinesfrequentlyrequirelargeamountsofstorage,andtheytypicallyhavetosharethat storagewithothervirtualmachines.WithinXenServer,thevirtualmachinesbehavelikephysicalTimings: machineswithlocallyattacheddisks.Inreality,theXenServerhosthasallocatedasectionof Module:105minutesphysicaldiskspaceandhasmadethisspaceavailableasadiskresourcetothevirtualmachine. Exercises:25minutes TotalTime:130minutesObjectives
ViewthefollowingCitrixTVvideosonXenServer Aftercompletingthismodule,youwillbeableto: storage: •DeterminethefeaturesofdifferentXenServerstoragetechnologies. •http://www.citrix.com/tv/#videos/3673 •DescribethestorageoptionsforaXenServerstoragerepository. •http://www.citrix.com/tv/#videos/106 ©Copyright2012CitrixSystems,Inc.Module4:XenServerStorageRepositories67•Configureandmanagealocalstoragelocationforthestorageofvirtualdiskimages. •Configureandmanageasharedstoragelocationforthestorageofvirtualdiskimages. •CreateanewstoragerepositoryusingAdvancedStorageLinktechnology.
