云计算与虚拟化技术 第6讲: vSphere Network 阮晓龙 13938213680/n@hactcm edu cn http://cloud.xg.hactcm.edu.cn http://www.51xueweb.cn 河南中医药大学信息管理与信息系统教研室 信息技术学院网络与信思系统科研工作室 2019.3
2 讨论提纲 o Introducing vSphere Network a Working with vSphere Standard Switches Configuring the Management Network Configuring VMkernel Networking Configuring Virtual Machine Networking Configuring VLANs m Configuring NIC Teaming a Configuring Virtual Switch Security Promiscuous mode MAC address changes ■ Forged transmits a Case 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn
3 1.Introducing vSphere Network o Designing and building VSphere networks with ESXi and vCenter Server bears some similarities to designing and building physical networks, but there are enough significant differences that an overview of components and terminology is warranted Before addressing some of the factors that affect network design in a virtual environment let's define the components that may be used to build your virtual network 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn
4 1.Introducing vSphere Network a VSphere Standard Switch A software-based switch that resides in the vmkernel and provides traffic management for virtual machines a Users must manage vSphere Standard Switches independently on each ESXi host a the term vSwitch also refers to a vSphere Standard Switch 本课程讲授且实验教学中使用 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn
5 1.Introducing vSphere Network a VSphere Distributed Switch A software-based switch that resides in the vmkernel and provides traffic management for virtual machines and the vmkernel a vSphere distributed Switches are shared by and managed across ESXi hosts and clusters within a vSphere datacenter. a You might see vSphere Distributed Switch abbreviated as VDS, or just distributed switch 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn
6 1.Introducing vSphere Network a Port/Port Group A logical object on a vSphere Standard or Distributed Switch that provides specialized services for the VMkernel or virtual machines u A virtual switch can contain a VMkernel port or a Virtual Machine Port Group On a vSphere Distributed Switch, these are called distributed port 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn
1.Introducing vSphere Network a VMkernel port A specialized virtual switch port type that is configured with an IP address to allow hypervisor management traffic, VMotion, VMware VSAN, iSCSI storage, Network File System(NFS) storage, vSphere Replication, and vSphere Fault Tolerance(FT) logging a VMkernel ports are also created for VXLAN tunnel endpoints (VTEPs)as used by the VMware NSX network virtualization and security platform These VMkernel ports are created with the VXLAN TCP/P stack rather than using the default stack TCP/IP stacks are covered a bit later in the chapter A VMkernel port is also referred to as a vmknic 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn
8 1.Introducing vSphere Network a Virtual Machine Port Group A group of virtual switch ports that share a common configuration and allow virtual machines to access other virtual machines that are configured on the same port group or accessible pvlan or on the physical network 口 Virtual LAN(LAN) A logical local area network configured on a virtual or physical switch that provides efficient traffic segmentation, broadcast control, security configured for that particular VA y providing traffic only to the ports and efficient bandwidth utilization by 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn
9 1.Introducing vSphere Network a Trunk Port(Trunking m A port on a physical switch that listens for and knows how to pass traffic for multiple VLANs. it does so by maintaining the 802.lg vlan tags for traffic moving through the trunk port to the connected device(s) Trunk ports are typically used for switchto-switch connections to allow VLANs to pass freely between switches. Virtual switches support VLANS and using vLan trunks enables the VLANs to pass freely into the virtual switches 口 Access port A port on a physical switch that passes traffic for only a single VLAN Unlike a trunk port, which maintains the vlan identification for traffic moving through the port, an access port strips away the VLAN information for traffic moving through the port 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn
0 1.Introducing vSphere Network a Network Interface Card Team The aggregation of physical network interface cards(NICs)to form a single logical communication channel a Different types of NIC teams provide varying levels of traffic load balancing and fault tolerance 口 VMXNET Adapter A virtualized network adapter operating inside a quest operating system(guest OS) The VMXNET adapter is optimized for performance in a virtual machine VMware Tools are required to be installed in the quest os to provide the vmxnet driver a The VmXNeT adapter is sometimes referred to as a paravirtualized driver 河南中医药大学/阮晓龙/13938213680/htp/cloudxg.hactcm.edu.cn/http:/www5ucwebcn