I should have read the 9.7.0.1 release notes more closely:
As an organization administrator, you cannot create more than one vApp network and you cannot fence or unfence vApps by using the HTML5 tenant portal. The problem occurs when you have an existing fenced network connected to an organization VDC network, and you try to create a new one.
I have verified in the lab that 9.7.0.1 fixes this issue.
It may not be quite what you are after, but the way we are doing this is by utilising AWS R53 GSLB and a set of reverse proxies (haproxy/nginx/f5/you pick) in each site with two front-end services (virtual servers) with one redirecting to another. You are ending up with the following:
AWS R53 DNS A record with routing policy of multivalue answer and associated health-checks to my.vcd.com pointing to IPs of both sites -> each site with nginx virtual server listening and accepting my.vcd.com server names and redirecting it to another local virtual server of my.siteN.vcd.com.
Rough excerpt from nginx:
server {
listen 443;
server_name my.vcd.com;
return 302 https://my.siteN.vcd.com$request_uri;
}
server {
listen 443;
server_name my.siteN.vcd.com;
...
}
As Daniel stated, vCD is currently unable to accept requests on more than one hostname / URL, hence redirect is the only way we were able to make it work.
Hi,
I cannot get the client integration plug-in in vCloud director to work. I have installed the correct version but it is not recognized as being installed and still prompts me to install it.
I have followed the instructions in the article below:
vCloud Director Client Integration Plugin is not working
and I tried the solution in VMware Knowledge Base (KB 2150215). I have tried the 3 supported web browsers: Chrome, Firefox and IE but nothing seems to work.
Can anybody help with that?
My OS is windows 7.
Yes, was also thinking few of similar ways to achieve it.
Was considering if there was out-of-the-box way but turns out their isn't yet.
Thanks for your share. Appreciated.
Hi,
Is it possible to run standard cloud-init for VMs in vCD vApp. How do you pass on additional scripts, network configuration, user configuration etc. to VMs. There is something called VM customization but that is a bit restricted as compared to cloud-init. Is it even possible to do this thing?
Br,
Kanwar
Hello there.
I trying to remove VDC in vCloud Director, but can't do it. The problem with VDC network. When deleting it vCD answers "[ 42fa690c-2936-4525-9f32-5eae43f5b77e ] Entity LSW-VDC cannot be deleted, because it is in use.". All vApps in this VDC was removed, catalogs cleared.
I know that removing part of vCD infrastructure in vCenter Server brokes vCD and it will need to be reinstalled.
How to resolve isuue and/or safely remove unnecessary VDC ?
Hello,
i don't understand the reason why the CPU/RAM setting is fixed with a VM template.
I have a Windows 2016 template. I'd like to create a new VM from this template and change the hardware specs of the new VM during creation.
But i can't. Why? Or is there something i'm missing?
There is no Metadata Service avaiable which can be used with cloud-init.
Hi all,
I have the following scenario: migrating from vCenter 5.5 to vCloud Director 9.7 + NSX and I'm trying to map how to do things in order to have the same result from my customers perspective, as explained below.
Our current solution based on vCenter 5.5 has a shared VM per ESXi hosts cluster with iptables+ebtables to act as firewall and router to/from the internet. Our customer's VM (VM1) receives a public IP address via DHCP at deploy time and it should stay static and attached to that VM as long as it lives. So when user logs into the VM1 console she should see the public address 200.10.10.11 configured within VM's network interface.
Is it possible to have the same scenario with vCloud Diretor 9.7 + NSX 6.4 ?
In case of affirmative answer, how should I configure vdc-edge, vdc-net and vapp/vm without turning on edge advanced mode ?
Thank you!
Morning All,
I use vCD and within vCD we use third party firewalls (i.e. not NSX Edges). I want to present my Org with a trunk link in an official and supported VMware method.
Now I'm sure this is the article everyone will find:
https://anthonyspiteri.net/quick-post-vlan-trunking-vcloud-director/
While I'm sure this will work, it doesn't seem official.
vCD 9.0 documentation claims trunk links are now supported but I can't find the documention that tells me how to implement it as best practise.
Can anyone find the documention or method of configuration?
Thanks
Hi,
When deploying template from organization X to organization Y
my main network (lets call it mgmt) mgmt is losing configuration. so i reconfigured mgmt to the right configuration and all of my VMs inside my vapp gets natted.
But when im doing the same action with CLI with this command
Get-CIVAppNetwork -VApp $NewVapp -name *mgmt-192* | Set-CIVAppNetwork -FirewallEnabled:$false -NatEnabled:$true -ParentOrgNetwork $Parentnetwork
the window from the picture above gets empty
But when I click on add I can see the lost vms->
So the question is how to reconfigure the mgmt network and keep all the vms auto natted?
is there any way to add all the vms again with CLI ?
thanks!
Get-CIVAppNetwork -VApp $NewVapp -name *mgmt-192* | Set-CIVAppNetwork -FirewallEnabled:$false -NatEnabled:$true -ParentOrgNetwork $Parentnetwork
What is the content of the variable "$Parentnetwork" ?
As far as I know, the option "-ParentOrgNetwork" requires an object from type "OrgNetwork". Not a string. So, if you only specify the name in this variable it won't work.
If that's the case with you, something like this could work:
$Parentnetwork = Get-OrgNetwork -Name 'orgNetworkName'
Get-CIVAppNetwork -VApp $NewVapp -name *mgmt-192* | Set-CIVAppNetwork -FirewallEnabled:$false -NatEnabled:$true -ParentOrgNetwork $Parentnetwork
It does not work and has not worked since 8.20. VMware will not be doing any real work on this plug-in as it has become surplus to requirements from the position of tenants with the introduction of the H5 Tenant portal, and will become surplus with the finalization of System Admin H5 console
Hi friends,
I am trying to configure vCloud Director 9.5.3 with vSphere 6.5 and NSX-t 2.3. The bellow error appear after providing NSX-T2.3 details.
Please help me if you have any solutions.
[ 899ee1b3-734e-4409-bf78-e682710b0b41 ] Failed to connect to the NSX Manager
- /api/2.0/services/vcconfig, error code 98
Regards,
Kishor Kulkarni
Hello guys,
We are testing vCAV 3.0 in order to migrate or protect VMs from on premise to vCD.
So on premise site, when configuring the tenant appliance , setting the FQDN for the public api endoint for vCAC is not working "timeout has occured" , instead setting directly the public ip , it works.
By the way, connecting directly from the browser on the endpoint of the vCAV with FQDN is not working "time out", direct ip it works.
The hostname on the tunnel appliance is the FQDN used for the endpoint vCAV, and we have import a wildcertifcat.
Our lab is working , failover and DR are working perfectly, but something is not working well with the FQDN, in production it is better to use FQDN.
Guys have any ideas ?
Best regards
If you are leveraging external networks for VM's , its a straight forward process - Trunk the portgroup and configure the external VLAN in vCloud and connect the Virtual Machines.
On the provider side, what is configured as the API endpoint? If you have a DNAT rule, this must match the external port. Moreover, after setting this configuration, the vCAv services must be restarted to take in affect.
I wrote up the provider deployment strategy here: https://www.paluszek.com/wp/2019/04/08/overview-of-vmware-vcloud-availability-3-0-provider-deployment/
As for the cert, the only cert that needs to be replaced is at the Cloud Replication Management (CRM) appliance - applying a cert on the tunnel or replicator is optional. With wildcard certs, please ensure you only apply it to the CRM (or issue distinct certs for each service appliance). This might sound counterintuitive, but the tunnel does not terminate or initiate the SSL sessions, it just routes it to the CRM.
Hope this helps, happy vCAv'ing.
-Daniel
Hi Raducanu
I am not sure if I understood your question. Can not you see this screen during VM creation?
What is the version of your vCD and what is your user role? System Administrator? Organization Administrator?
Hi,
What is the version of your vCD?
I believe the only way is manipulating vCD database, but this should be done with Tech Support assistance. I can try to send to you some queries to check what is "using" this network and you can try to delete it, but this is really dangerous and I really recommend you to ask Tech Support assistance.
Hi,
On the provider site (vCD), api endpoint is configured with the FQDN (pointing to a public IP, reverse is done). I have a DNAT also rule, from outside ==> FQDN:443 ==> Tunnelappliance:8048 (tunnel appliance: private ip in DMZ).
Yeah, i have already read your bible , thx , it helps a lot.
I will try what you suggest me.
Thx.