Greg Cusanza Senior Program Manager Microsoft Corporation 7/5/2019 9:48 PM MGT315 Network Management Microsoft System Center 2012 SP1 Virtual Machine Manager Greg Cusanza Senior Program Manager Microsoft Corporation © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Dawn of a new era Software Defined Networking

Session Goals Prepare you for the era of software defined networking TechEd 2012 7/5/2019 9:48 PM Session Goals Prepare you for the era of software defined networking Discuss fabric networking in Virtual Machine Manager for System Center 2012 Preview upcoming networking improvements in Virtual Machine manager for System Center 2012 SP1 © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Virtual Machine Manager 2012 Scenarios “I want this VM to connect to the Corp network” Answer: Logical Networks “I want to create a template that I can deploy anywhere” Answer: Logical Network Definitions “I want IP addresses assigned automatically” Answer: IP Pools “I want to scale out applications” Answer: Load Balancers

Network Management VMM 2012 LOGICAL NETWORKS ADDRESS POOLS LOAD BALANCERS Classify network for VMs to access Map to network topology Allocate to hosts and clouds Allocate a static IP address to VMs from a preconfigured pool Create IP pool as a managed range of IP address assignments Create MAC address pool as a managed range of MAC address assignments Apply settings for load balancer capability in service deployment Control load balancer through vendor provider based on PowerShell Create virtual IP templates consisting of load balancer configuration settings

Logical Network A logical abstraction for the type or class of network a VM connects to Examples: PROD Backup Front-end Build Etc… Internet VM to VM Data

Network objects Physical network adapter Virtual switch Logical Network “Corp” Logical network definition “Building 42” 1 - M 1 - M Subnet-VLAN “10.0.0.0/24” “VLAN 5” IP Pool “StaticSrv” “10.0.0.1-10.0.0.99” 1 - M Host group “Production” M - M Physical network adapter M - M 1 - M Virtual switch Virtual network adapter 1 - 1

Address Pools IP POOLS MAC POOLS VIRTUAL IP POOLS Assigned to VMs, vNICs, hosts, and virtual IPs (VIP’s) Specified use in VM template creation Checked out at VM creation—assigns static IP in VM Returned on VM deletion Assigned to VMs Specified use in VM template creation Checked out at VM creation—assigned before VM boot Returned on VM deletion Assigned to service tiers that use a load balancer Reserved within IP Pools Assigned to clouds Checked out at service deployment Returned on service deletion

Load Balancer Support AUTOMATION SUPPORTED BALANCERS VIRTUAL IP TEMPLATES Connect to load balancer through hardware provider Assign to clouds, host groups, and logical networks Configure load balancing method and add virtual IP on service deployment F5 BIG-IP Brocade ServerIron ADX Citrix NetScaler Microsoft Network Load Balancer Specifies preconfigured properties for configuring a load balancer at service deployment Specifies load balancing methods—round robin, least connections, fastest response

Fabric Configuration

PowerShell - Creating a Logical Network #Create a Logical Network $logicalNetwork = New-SCLogicalNetwork -Name "My Logical Network" #Create a network site $allHostGroups = @() $allHostGroups += Get-SCVMHostGroup “Hosts” $allHostGroups += Get-SCVMHostGroup “Infra” $allSubnetVlan = @() $allSubnetVlan += New-SCSubnetVLan -Subnet "10.0.2.0/24" -VLanID 4 $allSubnetVlan += New-SCSubnetVLan -Subnet "10.0.1.0/24" -VLanID 3 New-SCLogicalNetworkDefinition -Name "Building 44" -LogicalNetwork $logicalNetwork -VMHostGroup $allHostGroups -SubnetVLan $allSubnetVlan

PowerShell – IP Pools #Assume $logicalNetwork and $logicalNetworkDefinition are set $allGateways = @() $allGateways += New-SCDefaultGateway -IPAddress "10.0.0.1" -Automatic $allDnsServer = @("10.0.0.3") $allDnsSuffixes = @(“contoso.com”) $allWinsServers = @(“10.0.0.3”) New-SCStaticIPAddressPool -Name "MyIPPool" -LogicalNetworkDefinition $logicalNetworkDefinition -Subnet "10.0.0.0/16" -IPAddressRangeStart "10.0.0.1" -IPAddressRangeEnd "10.0.255.254" -DefaultGateway $allGateways -DNSServer $allDnsServer -DNSSuffix "" -DNSSearchSuffix $allDnsSuffixes

PowerShell – IP Pool Queries $ippool = Get-SCStaticIPAddressPool "VMTraffic" #Show allocated IP Addresses Get-SCIPAddress -StaticIPAddressPool $ippool | ft -property Address,AssignedToType,State Address AssignedToType State ------- -------------- ----- 192.168.1.1 VirtualNetworkAdapter Assigned 192.168.1.2 VirtualNetworkAdapter Assigned 192.168.1.7 VirtualNetworkAdapter UnAssigned 192.168.1.11 VirtualMachine UnAssigned 192.168.1.12 VirtualMachine UnAssigned

What’s new in Service Pack 1 Networking Scenarios TechEd 2012 7/5/2019 9:48 PM What’s new in Service Pack 1 Networking Scenarios Connectivity Capability Multi-tenancy Isolation Mobility Bring your own IP Quality of service (QOS) Security Optimizations Monitors Answer: VM Networks Answer: Logical Switch © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Connectivity VM Networks Multi-tenancy Owner Sharable - Access list Self service creation by Tenant Admin user role Isolation No isolation Network virtualization VLAN External Bring your own IP Enabled by network virtualization Tenant/Customer IP address space separate from Provider IP address space Mobility vNICs only connect to VM Networks VM Networks are built on logical networks VM Networks span clouds With NV, IP follows VM migration

VM Networks No Isolation Pass-through to Logical Network Maximum of one per Logical network Scenarios: Upgrade Management tools in a VM VM Network No Isolation “mgmt” 1 - 1 Logical Network “Corp” Logical network definition “Building 42” 1 - M IP Pool “StaticSrv” “10.0.0.1-10.0.0.99” Subnet-VLAN “10.0.0.0/24” “VLAN 5”

Hyper-V Network Virtualization Blue VM Red VM Blue Network Red Network Virtualization Physical Server Physical Network Server Virtualization Run multiple virtual servers on a physical server Each VM has illusion it is running as a physical server Hyper-V Network Virtualization Run multiple virtual networks on a physical network Each virtual network has illusion it is running as a physical network

Virtualize Customer Addresses Provider Address Space (PA) 192.168.4.22 192.168.4.11 Virtualization Policy System Center Datacenter Network Host 1 Host 2 Blue Corp Blue 10.0.0.5 10.0.0.7 Blue 10.0.0.5 192.168.4.11 10.0.0.7 192.168.4.22 Blue 10.0.0.5 192.168.4.11 10.0.0.7 192.168.4.22 Blue 10.0.0.5 192.168.4.11 10.0.0.7 192.168.4.22 Red Corp Red 10.0.0.5 192.168.4.11 10.0.0.7 192.168.4.22 Red 10.0.0.5 10.0.0.7 Red 10.0.0.5 192.168.4.11 10.0.0.7 192.168.4.22 Red 10.1.1.1 192.168.4.11 10.1.1.2 192.168.4.22 Customer Address Space (CA) Red2 Blue2 10.0.0.5 Red1 Blue1 10.0.0.7 CA PA

VM Networks Hyper-V Network Virtualization Default method is to encapsulate packets using NVGRE A VM Network defines a routing domain A routing domain can contain multiple virtual subnets VM Network Net. Virt. “Finance” 1 - 1 VM Subnet 192.168.0.0/16 IP Pool (CA) 192.168.0.2 192.168.0.99 1 - M Logical Network “Corp” Logical network definition “Building 42” 1 - M IP Pool (PA) “StaticSrv” “10.0.0.1-10.0.0.99” Subnet-VLAN “10.0.0.0/24” “VLAN 5”

VM Networks Hyper-V Network Virtualization Gateways Requires gateway device Routing gateway For private cloud scenarios VPN gateway For hosted scenarios Establishes site-to-site VPN from hoster to on-premise

Routing Gateway – “Private Cloud” VMNetwork 1 “Contoso Finance” VM1 IP: 172.16.1.2 GW: 172.16.1.1 DNS:172.16.3.99 DNS1 IP:172.16.3.99 Subnet 1 172.16.1.0/24 CORP-RED 172.16.3.0/24 VM2 IP: 172.16.2.2 GW: 172.16.2.1 DNS:172.16.3.99 Subnet 2 172.16.2.0/24 PA 10.0.0.0 CORP-KIRK 172.16.4.0/24 Subnet G (hidden) w.x.y.z/30 Gateway “Contoso”

VPN Gateway – “Hybrid Cloud” VMNetwork 1 “Contoso Finance” Fabrikam DC Network VM1 IP: 172.16.1.2 GW: 172.16.1.1 DNS:172.16.3.99 Contoso Corp Network DNS1 IP:172.16.3.99 Subnet 1 172.16.1.0/24 CORP-RED 172.16.3.0/24 VM2 IP: 172.16.2.2 GW: 172.16.2.1 DNS:172.16.3.99 Subnet 2 172.16.2.0/24 PA 10.0.0.0 CORP-KIRK 172.16.4.0/24 Internet Subnet G (hidden) w.x.y.z/30 Any VPN Gateway “Contoso” NVGRE VPN Gateway “Fabrikam”

VM Networks VLAN One VLAN per VM Network Uses VLANs from Logical Network Definitions Introducing new Logical Network property for “Not Connected” VM Network VLAN “Finance” 1 - 1 VM Subnet “99.0.0.0/24” “VLAN 44” 1 - 2 1 - M 1 - 1 Logical Network Not Connected “TenantVLANs” Logical network definition “B42Tenants” 1 - M IP Pool “StaticSrv” “99.0.0.1-99.0.0.99” Subnet-VLAN “99.0.0.0/24” “VLAN 44”

VM Networks External Isolation is managed by switch extension VM Networks are imported from extension manager VM Subnet 1 - 2 1 - 1 IP Pool “StaticSrv” “99.0.0.1-99.0.0.99” 1 - M VM Network External “Finance” 1 - 1 Logical Network Not Connected “TenantNets” Logical network definition “B27Tenants” 1 - M

VM Networks

VM Network Powershell #Create Hyper-V NV VMNetwork $logicalNetwork = Get-SCLogicalNetwork “MyLN” $vmNetwork = New-SCVMNetwork -Name "MyVMNetwork" -LogicalNetwork $logicalNetwork #Add VMSubnet $subnet = New-SCSubnetVLan -Subnet "10.0.1.0/24" $vmSubnet = New-SCVMSubnet -Name "My_10.0.1.0_24" -VMNetwork $vmNetwork -SubnetVLan $subnet #...etc… #Add IP Pool is same cmdlet as with Logical Network New-SCStaticIPAddressPool -Name "MyIPPool" -VMSubnet $vmSubnet -Subnet “10.0.1.0/24" -IPAddressRangeStart “10.0.1.2" -IPAddressRangeEnd "192.168.0.254" -DefaultGateway $allGateways -DNSServer $allDnsServer -DNSSuffix "" -DNSSearchSuffix $allDnsSuffixes

What’s new in Service Pack 1 Networking Scenarios TechEd 2012 7/5/2019 9:48 PM What’s new in Service Pack 1 Networking Scenarios Connectivity Multi-tenancy Isolation Mobility Bring your own IP Answer: VM Networks Capability Quality of service (QOS) Security Optimizations Monitors Answer: Logical Switch © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Capability Defines how a network adapter is able to use its connection Quality of service Security Monitoring Capabilities are provided by Hyper-V Extensible Virtual Switch and extensions

Key Tenets for Hyper-V Extensible Switch Benefit Extensible, not replaceable Added features don’t remove other features Pluggable switch Extensions process all network traffic, including VM-to-VM 1st class citizen of system Live Migration and offloads just work; Extensions work together Open & public API model Large ecosystem of extensions Logo certification and rich OS framework High quality extensions Unified Tracing thru virtual switch Shorter down times

Hyper-V Extensible Switch Extensions are Filters or Windows Filtering Platform Providers Extension state/configuration is unique to each instance of an Extensible Switch on a machine Extension Extension Extension

VMM Management of Switch Extensions CA1 VM1 VMU CA2 VM2 Hardware 3rd Party components VMM Agent VMM Server SCVMM Vendor Plugin Virtualization Root Partition Capture Extension Filtering Extension Forwarding Extension Vendor network mgmt console Physical NIC (SRIOV) Physical NIC (Non SRIOV) Top of rack switch Policy database

Extension Manager Integration Supplies network objects and policy to VMM VMM 3rd Party Extension Manager Provider Vendor network management console Virtual Switch Extension Manager (VSEM) Provider Interface Import: Logical Networks IP Pools VM Networks Port Profiles Policy database 3. Retrieve port Profile policies 2. Set VM Network Port Profile Hyper-V Host

Native Switch Settings Windows Server 2012 Host Physical Host NICs Uplink pNIC1 Uplink pNIC2 Virtual Switch Instances …on Host1 Native Switch Settings Extension1 Extension2 Extension3 VM1 vNIC1 VM2 vNIC1 vNICs VM Host vNICs Host1 vNIC1 Host1 vNIC2

Multiple Windows Server 2012 hosts …on Host2 …on Host3 …etc VM3 vNIC1 VM5 VM4 VM6 Native Switch Settings Extension1 Extension2 Extension3 Uplink pNIC1 pNIC2 Host2 vNIC2 Host3 Host4 Physical Host NICs Uplink pNIC1 Uplink pNIC2 Virtual Switch Instances …on Host1 Native Switch Settings Extension1 Extension2 Extension3 VM1 vNIC1 VM2 vNIC1 vNICs VM Host vNICs Host1 vNIC1 Host1 vNIC2

Native Switch Settings VMM Switch Infrastructure Physical Host NICs Uplink pNIC1 Uplink pNIC2 Uplink pNIC1 Uplink pNIC2 Uplink pNIC1 Uplink pNIC2 Uplink pNIC1 Uplink pNIC2 Logical Switch Native Switch Settings Extension1 Extension2 Extension3 Instances VS …on Host1 …on Host2 …on Host3 …on Host4 VM1 vNIC1 VM2 vNIC1 VM3 vNIC1 VM4 vNIC1 VM5 vNIC1 VM6 vNIC1 vNICs VM Host vNICs Host1 vNIC1 Host1 vNIC2 Host2 vNIC1 Host2 vNIC2 Host3 vNIC1 Host3 vNIC2 Host4 vNIC1 Host4 vNIC2

Logical Switch A single logical representation of the virtual switch instances which exist in a group of hosts

Logical switch objects 1 - M Physical NIC Logical switch objects 1 - M Uplink Port Profile Set Extension Uplink Port Profile M - M Native Uplink Port Profile M - 1 Switch Extensions “Cisco Nexus 1000v” “InMon sFlow” M - M Logical Switch “B42Switch” Self Service User 1 - 1 Virtual Port Profile Set Extension Virtual Port Profile M - M Native Virtual Port Profile M - 1 1 - M Port Classification “Fast DB” “Web” “Restricted” Cloud vNIC 1 - M

Logical switch objects 1 - M Physical NIC Logical switch objects 1 - M Uplink Port Profile Set Native Uplink Port Profile M - 1 Logical Switch “B42Switch” 1 - 1 Virtual Port Profile Set Native Virtual Port Profile M - 1 1 - M Port Classification “Fast DB” “Web” “Restricted” Cloud vNIC 1 - M

Logical Switch

Windows Server IP Address Management Integration Script Reports IP Pool utilization from VMM into IPAM Can run on demand or configure as a periodic task Included in the “cd layout” of VMM \scripts\IPAMIntegration.ps1

IPAM Script

Recap Logical Networks define physical network VM Networks define VM connectivity Logical Switches define port capability

Related Content Breakout Sessions MGT14-LNC - What's New in System Center 2012 SP1 - Virtual Machine Manager MGT315 - Overview of Microsoft System Center 2012 SP1 – Network Management MGT316 - Overview of Microsoft System Center 2012 SP1 - Storage Management MGT317 - Overview of Microsoft System Center 2012 SP1 - Virtual Machine Manager Services VIR306 - Hyper-V Over SMB 3.0, Remote File Storage Support in Windows Server 2012, Hyper-V MGT320 - Microsoft System Center Virtual Machine Manager 2012: Zero to Cluster to Cloud MGT321 - Service Template Creation from the Ground Up VIR303 – An Overview of Hyper-V Networking on Windows Server 2012 WSV301 - Building Hosted Private and Public Cloud using Windows Server 2012 Other Sessions MGT41-HOL- Microsoft System Center 2012 Virtual Machine Manager Infrastructure Components Management MGT42-HOL - Microsoft System Center 2012 Virtual Machine Manager and App Controller Creating, Deploying, and Managing Service Templates MGT53-HOL - Microsoft System Center 2012 Application Self-Service and Managing Applications across Clouds PRC03 - Pre-Conference Seminar - Private Cloud Immersion Windows Server 2012, Hyper-V, Networking, Storage (TLC) System Center (TLC)

MGT Track Resources DOWNLOAD System Center 2012 Evaluation #TEMGT315 Talk to our Experts at the TLC Hands-On Labs DOWNLOAD System Center 2012 Evaluation microsoft.com/systemcenter DOWNLOAD System Center 2012 SP1 CTP microsoft.com/systemcenter

Resources Learning TechNet http://europe.msteched.com Connect. Share. Discuss. http://europe.msteched.com Microsoft Certification & Training Resources www.microsoft.com/learning TechNet Resources for IT Professionals http://microsoft.com/technet Resources for Developers http://microsoft.com/msdn

Submit your evals online 7/5/2019 9:48 PM Evaluations Submit your evals online http://europe.msteched.com/sessions © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7/5/2019 9:48 PM © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7/5/2019 9:48 PM © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.