If the protected object is a FusionSphere VM and the host-based replication-based DR is used, you need to install the virtual replication gateway (VRG) on FusionCompute by using a template.
Prerequisites
- FusionCompute has been installed and configured.
- The firewall of the maintenance terminal has been disabled.
- The signature file and digital signature public key have been obtained and the VRG integrity has been verified.
- On the page for downloading the FusionCompute software package, you can download the .asc digital signature file whose name is the same as that of the software package.
- You have used the digital signature public key and verification tool provided by the website to verify the digital signature of the software package. You can obtain the digital signature public key, verification tool, and their usage methods from:
- The username and password used to log in to FusionCompute where the VRG VM resides have been obtained.
- VRG host replication DR does not support FusionCompute 6.3 or later.
Context
For host-based replication DR, a VRG is required. The VRG provides the following functions:
- Aggregates, compresses, and encrypts VM I/O data and transmits the data to the remote site.
- Receives data from the remote site and transmits the data to the specified host.
- Provides management interfaces for delivering replication policies and querying statuses.
The number of VRGs is determined by various factors, such as networks and storage devices. You are advised to configure VMs less than or equal to 150 for each VRG pair and ensure that the number of VM disks does not exceed 200.
After a VRG VM is created, note the following:
- The VRG VM-related configurations (CPU, memory, disks, and network adapters) and attributes cannot be modified. Capacity expansion, capacity reduction, disk mounting, disk unmounting, storage migration, and VM migration cannot be performed.
- The VRG VM does not support clone and must be installed using a template.
- The VRG VM does not support snapshots, restoration, VM backup, or VM restoration.
- You can start, restart, or stop VRG VMs only during VRG VM maintenance.
Preparing Data
This chapter takes the FusionCompute V100R006C10SPC101_VRG.zip installation package as an example.
The software package name changes with the actual software version, software package must be the actual version in use.
For details about VM parameters, see Table 1.
Category |
Parameter |
Description |
Example |
|---|---|---|---|
Basic information |
VM name |
Mandatory. Identifies a management VM. Must not start or end with a space, contains a maximum of 128 characters, and cannot contain special characters including \/'"[]<>;&=,?*#|%~^{}$! |
rd01 |
Location |
Location |
Mandatory. Specifies the host on which the VM is to be created. |
Host |
Network adapter configuration |
Distributed switch |
Mandatory. Specifies the distributed virtual switch (DVS) and the port group of the management plane. |
ManagementDVS |
Port group |
Portgroup01 |
||
Management IP address |
Mandatory. Specifies the IP address of the planned management node. |
– |
|
Datastore information |
Datastore |
Mandatory. Specifies the datastore planned for a VRG VM. |
datastore01 |
Procedure
- Ensure that the DR service management interface has been added to the hosts where DR VMs reside.
- On the maintenance terminal, decompress FusionCompute V100R006C10SPC101_VRG.zip.
After the decompression, you obtain the following files:
- FusionCompute V100R006C10SPC101_VRG.ovf
- FusionCompute V100R006C10SPC101_VRG-1.vhd
- FusionCompute V100R006C10SPC101_VRG-2.vhd
- Select the template source.
- Log in to FusionCompute.
- Select VM and Template.
Go to the VM and Template page.
- Click Import VM.
- Select the template source.
- If you want to import the template from the shared directory, go to 4.a.
If you want to use this method, you need to share the folder where the VM template resides on the maintenance terminal or other network devices with a user. Then you need to ensure that the host can access the VM template using the network address after entering the username and password of the user.
- If you want to import the template from a local path, go to Installing a VRG.
If you want to use this method, you need to save the template to the maintenance terminal.
- If you want to import the template from a network server, go to Installing a VRG.
If you want to use this method, you need to save the template to an HTTP network server and enable the host to access the template using the HTTP address without authentication.
- If you want to import the template from the shared directory, go to 4.a.
- Configure import parameters for the template to be imported from a shared directory.
- Select Shared directory and click Next.
- Configure the template import parameters.
- Template file: Select FusionCompute V100R006C10SPC101_VRG.ovf.
- Template file save path: The save path is in the format of \\Shared server IP address\Path to the template file.
- Username and password: If one user belongs to multiple domains, you need to add the domain name to the username, for example, Domain\w00123456.
After performing this step, go to 7.
- Select Shared directory and click Next.
- Configure import parameters for the template to be imported from a local path.
- Select Local PC and click Next.
Go to the Import VM page.
When you open the page for the first time, you need to select modules that need to be loaded and allow the plug-in to run in the Java dialog box that is displayed.
The maintenance terminal and host use HTTP to transfer the template file. Exercise caution when using HTTP since it is an insecure protocol.
- Click Browse and select FusionCompute V100R006C10SPC101_VRG.ovf in the dialog box that is displayed.
After performing this step, go to 7.
- Select Local PC and click Next.
- Configure import parameters for the template to be imported from a network server.
- Select Network Server and click Next.
Go to the Import Template page.
- Enter the save path of the template file. The path is the HTTP or HTTPS address of the ovf or vhd file in the template over the network.
HTTP is an insecure protocol. You are advised to select the HTTPS address of the template over the network.
- Select Network Server and click Next.
- Set VM attributes.
- Click Next.
- In the Specify Name and Folder area, set name and select a site or folder for your Template.
- Click Next, select computing resources.
- Click Next, select Bind to the select host and Permanently reserve resources for the VM.
- Click Next, Select distributed switches and port groups for the three network adapters of the VRG VM.
The IP addresses of the three NICs on the VRG VM cannot reside on the same network segment. To check the network connectivity, run the ping -I local IP remote IP command to check the connection between the specified network and the communication object.
The functions of the three network adapters are as follows:
- Network adapter 1 (in the management network): communicates with the UltraVR. Therefore, the distributed switch and port group of this network adapter must be able to communicate with the UltraVR VM.
- Network 2 (in the DR network): The distributed switch and port group of this network adapter must be able to communicate with DR CNA nodes at the local site through their service management interfaces. If there are no service management interfaces on CNA nodes, manually add some on FusionCompute.
- Network adapter 3 (in the service network or the network used by VRGs for data replication): communicates with the VRG at the remote site. Therefore, the distributed switch and port group of this network adapter must be able to communicate with the remote site.
VRGs at the local site communicate with VRGs at the remote site through routing.
- Set the storage and configuration modes of disks.
Non-virtualized and shared storage is recommended to ensure the performance of the template to import VRGs.
By default, a VRG has two disks: system disk and logcache disk. The logcache disk has 100 GB of capacity and is used as the physical cache area for replication data. Do not unmount disks unless anomalies occur.
- Select Sync time with host.
- Keep the default values of other options and click Next.
Go to the page for confirming information.
- Click Create.
The system starts creating the VM.
- Configure the object permission for the VRG VM.
- In the line of the created VRG VM, choose More > Configure Object rights.
- In Object rights, select Create snapshot, Modify snapshot, Delete snapshot, Restore snapshot, Back up and restore VM, Hibernate VM, Pause VM, and Resume VM.
- Click OK to disable these permissions.
- Configure the VRG VM.
Before configuring network information, ensure that the communication between the production site and DR site is normal. After the configuration is complete, ping the planes to ensure that the configuration is correct.
- In FusionCompute, select VM and Template.
Go to the VM and Template page.
- In the line of the created VRG VM, click Log in using VNC.
- Log in to the VRG VM as user gandalf.
Default password: See the default password of the account for the target node on the Type A (Background) sheet in the UltraVR V100R003C10SPC900 Account List.
- Run the following command and enter the password of user root as prompted to switch to user root.
su - root
Default password: See the default password of the account for the target node on the Type A (Background) sheet in the UltraVR V100R003C10SPC900 Account List.
- Run the following command to go to the path of the network configuration tool.
- Run the following command to start the network configuration tool.
The following command output is displayed:
Function list: 0. exit. 1. change password for UltraVR-rest. 2. initialization vrg_conf.xml. 3. changing password for Vrg_trap. 4. initial VRG net information. 5. modify net information. 6. change password for vrg authentication. 7. disable or enable TLS1.0 protocol.
- Enter 3 and configure the password for the SNMP agent to report alarms.
The username of the VRG's northbound REST interface authentication account is admin.
Default password: See the default password of the account for the target node on the Type A (Background) sheet in the UltraVR V100R003C10SPC900 Account List.
- When initializing the password, you need to enter the username and password as prompted, and then set the Trap reporting password.
- When changing the password, you need to enter the username and password as prompted, and then enter the old and new Trap reporting passwords.
If the VRG version is FusionCompute V100R006C00, configure the password for the SNMP as follows:
- When initializing the password, you need to enter the username and password of the VRG's northbound REST interface, the Trap authentication password, and the Trap encryption password.
- When changing the password, you need to enter the username and password of the VRG's northbound REST interface, the old Trap authentication password, the old Trap encryption password, the new Trap authentication password, and the new Trap encryption password.
The password complexity requirements are as follows:
- Contains 8 to 32 characters.
- Must contain spaces and special characters, including `~!@#$%^&*()-_=+\|[{}];:'",<.>/?
- Must contain upper-case letters, lower-case letters, and digits.
- Cannot be the same as the username or the mirror writing of the username.
- Type 4 and press Enter.
- Enter the management network information as prompted.
The management network must be in the format of IP address subnet mask gateway.
The management network is configured successfully if the following command output is displayed:
set management net success. set disaster net:
- Enter the DR network information as prompted.
The DR network must be in the format of IP address subnet mask.
The DR network is configured successfully if the following command output is displayed:
set disaster net success. set operation net:
- Enter the service network information as prompted.
The service network must be in the format of IP address subnet mask route target network segment of the rout target network subnet mask.
The service network is configured successfully if the following command output is displayed:
set operation net success. Initial VRG net done.
If one network is incorrectly configured, enter 5 to configure the network again. If all networks are incorrectly configured, enter 4 to configure all the networks again.
- Enter 0 to exit the configuration wizard.
- In FusionCompute, select VM and Template.
