Network ManagementMicrosoft System Center 2012 SP1 Virtual Machine Manager

Greg CusanzaSenior Program ManagerMicrosoft Corporation

MGT315

Dawn of a new era

Session Goals

Prepare you for the era of software defined networking

Discuss fabric networking in Virtual Machine Manager for System Center 2012

Preview upcoming networking improvements in Virtual Machine manager for System Center 2012 SP1

Virtual Machine Manager 2012Scenarios

“I want this VM to connect to the Corp network”Answer: Logical Networks

“I want to create a template that I can deploy anywhere”

Answer: Logical Network Definitions

“I want IP addresses assigned automatically”Answer: IP Pools

“I want to scale out applications”Answer: Load Balancers

Network ManagementVMM 2012

LOGICAL NETWORKS

Classify network for VMs to access

Map to network topology

Allocate to hosts and clouds

ADDRESS POOLS LOAD BALANCERS

• Allocate a static IP address to VMs from a preconfigured pool

• Create IP pool as a managed range of IP address assignments

• Create MAC address pool as a managed range of MAC address assignments

• Apply settings for load balancer capability in service deployment

• Control load balancer through vendor provider based on PowerShell

• Create virtual IP templates consisting of load balancer configuration settings

Logical Network

A logical abstraction for the type or class of network a VM connects to

InternetData

VM to VM

Examples:PRODBackupFront-endBuildEtc…

Network objects

Logical Network

“Corp”

Logical network definition

“Building 42”

1 - M

Host

group

“Productio

n”

M - M

IP Pool

“StaticSrv”

“10.0.0.1-10.0.0.99”

1 - M

Physical network adapter

M -

MM - M

M -

M

1 -

M

Virtual switch

Virtual network adapter

1 - 1

1 - M

Subnet-VLAN

“10.0.0.0/24”

“VLAN 5”

Address Pools

IP POOLS

Assigned to VMs, vNICs, hosts, and virtual IPs (VIP’s)

Specified use in VM template creation

Checked out at VM creation—assigns static IP in VM

Returned on VM deletion

MAC POOLS VIRTUAL IP POOLS

Assigned to VMs

Specified use in VM template creation

Checked out at VM creation—assigned before VM boot

Returned on VM deletion

Assigned to service tiers that use a load balancer

Reserved within IP Pools

Assigned to clouds

Checked out at service deployment

Returned on service deletion

Load Balancer Support

AUTOMATION

Connect to load balancer through hardware provider

Assign to clouds, host groups, and logical networks

Configure load balancing method and add virtual IP on service deployment

SUPPORTED BALANCERS VIRTUAL IP TEMPLATES

F5 BIG-IP

Brocade ServerIron ADX

Citrix NetScaler

Microsoft Network Load Balancer

Specifies preconfigured properties for configuring a load balancer at service deployment

Specifies load balancing methods—round robin, least connections, fastest response

Fabric Configuration

PowerShell - Creating a Logical Network#Create a Logical Network$logicalNetwork = New-SCLogicalNetwork -Name "My Logical Network"

#Create a network site$allHostGroups = @()$allHostGroups += Get-SCVMHostGroup “Hosts”$allHostGroups += Get-SCVMHostGroup “Infra”$allSubnetVlan = @()$allSubnetVlan += New-SCSubnetVLan -Subnet "10.0.2.0/24" -VLanID 4$allSubnetVlan += New-SCSubnetVLan -Subnet "10.0.1.0/24" -VLanID 3

New-SCLogicalNetworkDefinition -Name "Building 44" -LogicalNetwork $logicalNetwork -VMHostGroup $allHostGroups -SubnetVLan $allSubnetVlan

PowerShell – IP Pools#Assume $logicalNetwork and $logicalNetworkDefinition are set$allGateways = @()$allGateways += New-SCDefaultGateway -IPAddress "10.0.0.1" -Automatic

$allDnsServer = @("10.0.0.3")$allDnsSuffixes = @(“contoso.com”)$allWinsServers = @(“10.0.0.3”)

New-SCStaticIPAddressPool -Name "MyIPPool" -LogicalNetworkDefinition $logicalNetworkDefinition -Subnet "10.0.0.0/16" -IPAddressRangeStart "10.0.0.1" -IPAddressRangeEnd "10.0.255.254" -DefaultGateway $allGateways -DNSServer $allDnsServer -DNSSuffix "" -DNSSearchSuffix $allDnsSuffixes

PowerShell – IP Pool Queries$ippool = Get-SCStaticIPAddressPool "VMTraffic"

#Show allocated IP AddressesGet-SCIPAddress -StaticIPAddressPool $ippool | ft -property Address,AssignedToType,State

Address AssignedToType State------- -------------- -----192.168.1.1 VirtualNetworkAdapter Assigned192.168.1.2 VirtualNetworkAdapter Assigned192.168.1.7 VirtualNetworkAdapter UnAssigned192.168.1.11 VirtualMachine UnAssigned192.168.1.12 VirtualMachine UnAssigned

What’s new in Service Pack 1Networking Scenarios

Connectivity CapabilityMulti-tenancy

IsolationMobility

Bring your own IP

Quality of service (QOS)Security

OptimizationsMonitors

Answer: VM Networks Answer: Logical Switch

ConnectivityVM Networks

Multi-tenancy

OwnerSharable - Access listSelf service creation by Tenant Admin user role

Isolation

No isolationNetwork virtualizationVLANExternal

Bring your own IP

Enabled by network virtualization

Tenant/Customer IP address space separate from Provider IP address space

Mobility

vNICs only connect to VM NetworksVM Networks are built on logical networksVM Networks span cloudsWith NV, IP follows VM migration

VM NetworksNo Isolation

Pass-through to Logical NetworkMaximum of one per Logical network

Logical Network

“Corp”

Logical network definition

“Building 42”

1 - M

IP Pool

“StaticSrv”

“10.0.0.1-10.0.0.99”

1 - M1 - M

Subnet-VLAN

“10.0.0.0/24”

“VLAN 5”

Scenarios:UpgradeManagement tools in a VMVM

NetworkNo

Isolation“mgmt”

1 - 1

Hyper-V Network Virtualization

Server VirtualizationRun multiple virtual serverson a physical serverEach VM has illusion it is running as a physical server

Hyper-V Network Virtualization

Run multiple virtual networks on a physical network Each virtual network has illusion it is running as a physical network

Blue VM Red VMVirtualization

PhysicalServer

Blue Network Red Network

PhysicalNetwork

Virtualization Policy

System Center

Virtualize Customer Addresses

Customer Address Space (CA)

Red2

Blue2

10.0.0.5

Red1

Blue1

10.0.0.5 10.0.0.7 10.0.0.7

Blue

10.0.0.5 192.168.4.11

10.0.0.7 192.168.4.22Red

10.0.0.5 192.168.4.11

10.0.0.7 192.168.4.22

Blue10.0.0.510.0.0.7

BlueCorp

RedCorp Red

10.0.0.510.0.0.7

Datacenter Network

Host 1 Host 2

Provider Address Space (PA)

192.168.4.22192.168.4.11

Blue

10.0.0.5192.168.4.

11

10.0.0.7192.168.4.

22Red

10.0.0.5192.168.4.

11

10.0.0.7192.168.4.

22

Blue

10.0.0.5192.168.4.

11

10.0.0.7192.168.4.

22Red

10.1.1.1192.168.4.

11

10.1.1.2192.168.4.

22

CA PA

VM NetworksHyper-V Network Virtualization

Default method is to encapsulate packets using NVGREA VM Network defines a routing domain

A routing domain can contain multiple virtual subnets

Logical Network

“Corp”

Logical network definition

“Building 42”

1 - M

IP Pool (PA)

“StaticSrv”

“10.0.0.1-10.0.0.99”

1 - M1 - M

Subnet-VLAN

“10.0.0.0/24”

“VLAN 5”

VM NetworkNet. Virt.“Finance”1

- 1

VM Subnet192.168.0

.0/16

IP Pool (CA)192.168.0

.2192.168.0

.99

1 - M 1 - M

VM NetworksHyper-V Network Virtualization Gateways

VMM will manage and configure gateways for NVRouting gatewayVPN gateway

VM Subnet“99.0.0.0/

24”“VLAN 44”

1 - 2

1 - M1 - 1

VM NetworksVLAN

One VLAN per VM NetworkUses VLANs from Logical Network Definitions

Introducing new Logical Network property for “Not Connected”

Logical Network

Not Connected“TenantVLA

Ns”

Logical network definition

“B42Tenants”

1 - M

IP Pool

“StaticSrv”

“99.0.0.1-99.0.0.99”

1 - M1 - M

Subnet-VLAN

“99.0.0.0/24”

“VLAN 44”

VM Network

VLAN“Finance”1

- 1

VM Subnet

1 - 2

1 - 1

IP Pool

“StaticSrv”

“99.0.0.1-99.0.0.99”

1 - M

VM NetworksExternal

Isolation is managed by switch extensionVM Networks are imported from extension manager

VM NetworkExternal

“Finance”1 - 1

Logical Network

Not Connected“TenantNets

”

Logical network definition

“B27Tenants”

1 - M

VM Networks

VM Network Powershell

#Create Hyper-V NV VMNetwork$logicalNetwork = Get-SCLogicalNetwork “MyLN”$vmNetwork = New-SCVMNetwork -Name "MyVMNetwork" -LogicalNetwork $logicalNetwork#Add VMSubnet$subnet = New-SCSubnetVLan -Subnet "10.0.1.0/24"$vmSubnet = New-SCVMSubnet -Name "My_10.0.1.0_24" -VMNetwork $vmNetwork -SubnetVLan $subnet#...etc…#Add IP Pool is same cmdlet as with Logical NetworkNew-SCStaticIPAddressPool -Name "MyIPPool" -VMSubnet $vmSubnet -Subnet “10.0.1.0/24" -IPAddressRangeStart “10.0.1.2" -IPAddressRangeEnd "192.168.0.254" -DefaultGateway $allGateways -DNSServer $allDnsServer -DNSSuffix "" -DNSSearchSuffix $allDnsSuffixes

What’s new in Service Pack 1Networking Scenarios

CapabilityQuality of service (QOS)

SecurityOptimizations

Monitors

ConnectivityMulti-tenancy

IsolationMobility

Bring your own IP

Answer: VM Networks Answer: Logical Switch

Capability

Defines how a network adapter is able to use its connection

Quality of serviceSecurityMonitoring

Capabilities are provided by Hyper-V Extensible Virtual Switch and extensions

Key Tenets for Hyper-V Extensible Switch

Key Tenets BenefitExtensible, not replaceable Added features don’t remove

other featuresPluggable switch Extensions process all network

traffic, including VM-to-VM1st class citizen of system Live Migration and offloads just

work; Extensions work togetherOpen & public API model Large ecosystem of extensions

Logo certification and rich OS framework

High quality extensions

Unified Tracing thru virtual switch Shorter down times

Extensions are Filters or Windows Filtering Platform Providers

Extension state/configuration is unique to each instance of an Extensible Switch on a machine

Hyper-V Extensible Switch

Extension

Extension

Extension

VMM Management of Switch Extensions

Virtualization

CA1CA1

VM1 VMU

CA2

VM2

Root Partition

3rd Party components

Physical NIC (Non SRIOV)

Physical NIC(SRIOV)

Hardware

Top of rack switch

Vendor network mgmt console

Policy database

VMM Agent

VMM Server

SCVMM

VendorSCVMMPlugin

Capture Extension

Filtering Extension

Forwarding Extension

Extension Manager Integration

Supplies network objects and policy to VMM

VMMVirtual Switch Extension Manager (VSEM)Provider Interface

3rd PartyExtensionManagerProvider

1. Import:Logical

NetworksIP Pools

VM NetworksPort Profiles

Hyper-V Host

Vendor network management console

2. Set VM NetworkPort Profile

3. Retrieve port Profile policies

Policy database

…on Host1 …on Host2 …on Host3 …etc

VM1 vNIC1

VM2vNIC1

VM3vNIC1

VM5vNIC1

VM4vNIC1

VM6vNIC1

Vir

tual S

wit

ch

Inst

an

ces

VM

vN

ICs

Native Switch Setting

s

Extension1

Extension2

Extension3

Native Switch Setting

s

Extension1

Extension2

Extension3

Native Switch Setting

s

Extension1

Extension2

Extension3

Native Switch Setting

s

Extension1

Extension2

Extension3

Uplink

pNIC1

Uplink

pNIC2

Uplink

pNIC1

Uplink

pNIC2

Uplink

pNIC1

Uplink

pNIC2

Uplink

pNIC1

Uplink

pNIC2P

hysi

cal

Host

NIC

s

Host1vNIC2

Host1vNIC1

Host2vNIC2

Host2vNIC1

Host3vNIC2

Host3vNIC1

Host4

vNIC2

Host4vNIC1H

ost

vN

ICs

Multiple Windows Server 2012 hosts

…on Host1 …on Host2 …on Host3 …on Host4

VM1 vNIC1

VM2vNIC1

VM3vNIC1

VM5vNIC1

VM4vNIC1

VM6vNIC1

VS

Inst

an

ces

VM

vN

ICs

Uplink

pNIC1

Uplink

pNIC2

Uplink

pNIC1

Uplink

pNIC2

Uplink

pNIC1

Uplink

pNIC2

Uplink

pNIC1

Uplink

pNIC2P

hysi

cal

Host

NIC

sVMM Switch Infrastructure

Host1vNIC2

Host1vNIC1

Host2vNIC2

Host2vNIC1

Host3vNIC2

Host3vNIC1

Host4

vNIC2

Host4vNIC1

Logical Switch Native Switch Setting

s

Extension1 Extension2 Extension3

Host

vN

ICs

Logical Switch

A single logical representation of the virtual switch instances which exist in a group of hosts

1 - M

Uplink Port Profile Set

Extension Uplink Port Profile

M - M

Native Uplink Port Profile

M - 1

Logical switchobjects

Logical Switch

“B42Switch”

Switch Extensions“Cisco Nexus 1000v”“InMon sFlow”

M - M

1 - 1 Virtual Port Profile Set

Extension Virtual Port Profile

M - M

Native Virtual Port Profile

M - 1

1 - M Port Classification“Fast DB”

“Web”“Restricted

”

Cloud vNIC

1 - M

1 -

M

1 -

M

Physical NIC

1 -

M

Self Service User

1 - M

Uplink Port Profile Set

Native Uplink Port Profile

M - 1

Logical switchobjects

Logical Switch

“B42Switch”

1 - 1 Virtual Port Profile Set Native

Virtual Port Profile

M - 1

1 - M Port Classification“Fast DB”

“Web”“Restricted

”

Cloud vNIC

1 - M

1 -

M

1 -

M

Physical NIC

1 -

M

Logical Switch

Windows Server IP Address ManagementIntegration Script

Reports IP Pool utilization from VMM into IPAMCan run on demand or configure as a periodic task

Included in the “cd layout” of VMM\scripts\IPAMIntegration.ps1

IPAM Script

Recap

Logical Networks define physical network

VM Networks define VM connectivity

Logical Switches define port capability

Related ContentBreakout Sessions

MGT314 - What's New in System Center 2012 SP1 - Virtual Machine ManagerMGT316 - Overview of Microsoft System Center 2012 SP1 - Storage ManagementMGT317 - Overview of Microsoft System Center 2012 SP1 - Virtual Machine Manager ServicesVIR306 - Hyper-V Over SMB 3.0, Remote File Storage Support in Windows Server 2012, Hyper-VMGT320 - Microsoft System Center Virtual Machine Manager 2012: Zero to Cluster to CloudMGT321 - Service Template Creation from the Ground UpMGT326 - Building a Hosted Cloud Using Microsoft System Center 2012 and Windows Server 2012VIR303 – An Overview of Hyper-V Networking on Windows Server 2012WSV301 - Building Hosted Private and Public Cloud using Windows Server 2012

Resources

Connect. Share. Discuss.

http://northamerica.msteched.com

Learning

Microsoft Certification & Training Resources

www.microsoft.com/learning

TechNet

Resources for IT Professionals

http://microsoft.com/technet

Resources for Developers

http://microsoft.com/msdn

Complete an evaluation on CommNet and enter to win!

Please Complete an Evaluation Your feedback is important!

Multipleways to Evaluate Sessions

Scan the Tagto evaluate thissession now on myTechEd Mobile

© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to

be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS

PRESENTATION.