VMware ESXi 4.0配置指南：网络、存储与安全

ESXI配置

4星 · 超过85%的资源需积分: 9 72 浏览量更新于2024-08-02 收藏 1.86MB PDF 举报

身份认证购VIP最低享 7 折!

30元优惠券

"ESXI服务器配置指南，涵盖了网络、存储和安全等方面的配置步骤与最佳实践。" 在ESXI服务器配置中，有三个核心领域需要关注：网络（Network）、存储（Storage）和安全（Security）。这些组件是虚拟化环境中运行稳定且高效的基础。一、网络配置： 1. **网络接口配置**：ESXi支持多个网络接口卡（NICs），可以通过VSS（Virtual Standard Switch）或VDS（Virtual Distributed Switch）进行配置，以满足不同网络需求，如管理平面、业务平面和存储平面。 2. **端口组设置**：创建端口组来分隔流量，设置 VLAN ID 和端口安全策略，如端口锁定和流量控制。 3. **IP配置**：为ESXi主机分配静态IP地址，确保能通过网络进行管理和访问。 4. **DNS和NTP**：配置DNS服务器以解析主机名，并设置NTP服务器以保持时间同步，这对于虚拟机集群操作至关重要。 5. **负载均衡和故障切换**：通过设置端口组策略实现网络流量的负载均衡，并启用端口故障切换以提高网络冗余。二、存储配置： 1. **数据存储类型**：包括本地磁盘、光纤通道（FC）、iSCSI、NFS和SMB等，选择适合环境的存储类型。 2. **VMFS格式**：VMware的虚拟机文件系统，用于在存储设备上组织虚拟机及其文件。 3. **RAID配置**：创建RAID阵列以提高数据冗余和性能，如RAID 1、5、6或10。 4. **数据存储分配**：合理分配存储空间给每个虚拟机，确保足够的扩展空间。 5. **精简置备**：利用精简置备技术，按需分配磁盘空间，减少初始存储占用。三、安全配置： 1. **访问控制**：配置SSH、vSphere Client和其他远程访问服务的权限，仅允许必要的用户或IP访问。 2. **防火墙规则**：定义并启用ESXi内置防火墙规则，限制对外部服务的访问。 3. **虚拟机安全**：启用虚拟化安全功能，如VMware vSphere Client的增强型登录验证和虚拟机加密。 4. **更新和补丁**：定期更新ESXi主机和vSphere组件到最新版本，安装安全补丁以防范潜在威胁。 5. **物理主机安全**：确保物理服务器的安全性，包括物理访问控制和恶意软件防护。此外，配置过程中还需遵循最佳实践，如监控系统资源利用率，优化性能，以及制定备份和灾难恢复策略。对于大规模部署，推荐使用vCenter Server进行集中管理，提供更高级的自动化和策略执行功能。务必参考VMware官方文档获取最新信息和详细步骤，以确保配置的正确性和安全性。

资源详情

资源推荐

A port group specifies port configuration options such as bandwidth limitations and VLAN tagging policies

for each member port. Network services connect to vSwitches through port groups. Port groups define how a

connection is made through the vSwitch to the network. Typically, a single vSwitch is associated with one or

more port groups.

A dvPort group is a port group associated with a vNetwork Distributed Switch and specifies port configuration

options for each member port. dvPort Groups define how a connection is made through the vNetwork

Distributed Switch to the network.

NIC teaming occurs when multiple uplink adapters are associated with a single vSwitch to form a team. A

team can either share the load of traffic between physical and virtual networks among some or all of its

members, or provide passive failover in the event of a hardware failure or a network outage.

VLANs enable a single physical LAN segment to be further segmented so that groups of ports are isolated

from one another as if they were on physically different segments. The standard is 802.1Q.

The VMkernel TCP/IP networking stack supports iSCSI, NFS, and VMotion. Virtual machines run their own

systems’ TCP/IP stacks and connect to the VMkernel at the Ethernet level through virtual switches.

IP storage refers to any form of storage that uses TCP/IP network communication as its foundation. iSCSI can

be used as a virtual machine datastore, and NFS can be used as a virtual machine datastore and for direct

mounting of .ISO files, which are presented as CD-ROMs to virtual machines.

TCP Segmentation Offload, TSO, allows a TCP/IP stack to emit very large frames (up to 64KB) even though

the maximum transmission unit (MTU) of the interface is smaller. The network adapter then separates the

large frame into MTU-sized frames and prepends an adjusted copy of the initial TCP/IP headers.

Migration with VMotion enables a virtual machine that is powered on to be transferred from one ESXi host to

another without shutting down the virtual machine. The optional VMotion feature requires its own license

key.

Network Services

A vNetwork provides several different services to the host and virtual machines.

You can to enable two types of network services in ESXi:

Connecting virtual machines to the physical network and to each other.

Connecting VMkernel services (such as NFS, iSCSI, or VMotion) to the physical network.

View Networking Information in the vSphere Client

The vSphere Client displays general networking information and information specific to network adapters.

Procedure

1 Log in to the vSphere Client and select the host from the inventory panel.

2 Click the Configuration tab and click Networking.

3 Click Virtual Switch to view vNetwork Standard Switch networking on the host or Distributed Virtual

Switch to view vNetwork Distributed Switch networking on the host.

The Distributed Virtual Switch option appears only on hosts that are associated with a vNetwork

Distributed Switch.

Networking information is displayed for each virtual switch on the host.

ESXi Configuration Guide

16 VMware, Inc.

Port Groups

Port groups aggregate multiple ports under a common configuration and provide a stable anchor point for

virtual machines connecting to labeled networks. You can create a maximum of 512 port groups on a single

host.

Each port group is identified by a network label, which is unique to the current host. Network labels are used

to make virtual machine configuration portable across hosts. All port groups in a datacenter that are physically

connected to the same network (in the sense that each can receive broadcasts from the others) are given the

same label. Conversely, if two port groups cannot receive broadcasts from each other, they have distinct labels.

A VLAN ID, which restricts port group traffic to a logical Ethernet segment within the physical network, is

optional. For a port group to reach port groups located on other VLANs, the VLAN ID must be set to 4095. If

you use VLAN IDs, you must change the port group labels and VLAN IDs together so that the labels properly

represent connectivity.

Port Group Configuration for Virtual Machines

You can add or modify a virtual machine port group from the vSphere Client.

The vSphere Client Add Network wizard guides you through the tasks to create a virtual network to which

virtual machines can connect, including creating a vSwitch and configuring settings for a network label.

When you set up virtual machine networks, consider whether you want to migrate the virtual machines in the

network between hosts. If so, be sure that both hosts are in the same broadcast domain—that is, the same Layer

2 subnet.

ESXi does not support virtual machine migration between hosts in different broadcast domains because the

migrated virtual machine might require systems and resources that it would no longer have access to in the

new network. Even if your network configuration is set up as a high-availability environment or includes

intelligent switches that can resolve the virtual machine’s needs across different networks, you might

experience lag times as the Address Resolution Protocol (ARP) table updates and resumes network traffic for

the virtual machines.

Virtual machines reach physical networks through uplink adapters. A vSwitch can transfer data to external

networks only when one or more network adapters are attached to it. When two or more adapters are attached

to a single vSwitch, they are transparently teamed.

Add a Virtual Machine Port Group

Virtual machine port groups provide networking for virtual machines.

Procedure

1 Log in to the vSphere Client and select the host from the inventory panel.

2 Click the Configuration tab and click Networking.

3 Select the Virtual Switch view.

vSwitches appear in an overview that includes a details layout.

4 On the right side of the page, click Add Networking.

5 Accept the default connection type, Virtual Machines, and click Next.

ESXi Configuration Guide

20 VMware, Inc.

剩余195页未读，继续阅读

gmpldsec

粉丝: 0
资源: 1

VMware ESXi 4.0配置指南：网络、存储与安全

VMware_ESXi_6.7.0_17700523_HPE_Gen9plus_670.U3.10.7.0.132

[nvidia_bootbank_nvidia-vmware_esxi_7.0 driver

nvidia-vgpu-kepler-vmware_esxi_6.5_host_driver_367.132-1oem.650.0.0.4598673-

nvidia-vmware_esxi_6.5_host_driver_390.42-1oem.670.0.0.7535516.vib

nvidia_bootbank_nvidia-vmware_esxi_7.0.2_driver_510.73.06-1oem.702.0.0.17630

nvidia-vgpu-kepler-vmware_esxi_7.0

esxi主机的路径怎么写

配置 fence 软件 怎么确定你需要确认你要使用的设备类型，是随便用一个吗？我的机器是虚拟机CentOS 7

zabbix监控esxi6.5的详细步骤？

esxi 配置时间服务器

powercli修改esxi密码

python结合pyvmomi 监控esxi的磁盘等信息

ipmitool_for_esxi.txt

esxi里挂载新磁盘_ESXi挂载物理硬盘到虚拟机，手动硬盘直通方法

如何保持esxi修改的策略在重启后依然生效

服务器装exi系统_ESXI安装详细步骤

esxi vmware data recovery

服务器装exi系统_ESXI 6.5安装详细步骤

esxi5.1 ipmitool

120吨双级反渗透程序+混床程序，以及阻垢剂、杀菌剂 加药 一键制水，一键反洗，一键正洗，无人值守 西门子S7-200 sm

最新资源

配置 fence 软件怎么确定你需要确认你要使用的设备类型，是随便用一个吗？我的机器是虚拟机CentOS 7

120吨双级反渗透程序+混床程序，以及阻垢剂、杀菌剂加药一键制水，一键反洗，一键正洗，无人值守西门子S7-200 sm