Working with Networks 1.5

Managing Data Center Group Networking with Networking Data Center for VMware vSphere

To create a network across multiple organization virtual data centers, you first group the virtual data centers, then create a VDC network that is scoped to the data center group.

Cyfuture Cloud Console supports data center group networking for organization virtual data centers that are backed by Networking Data Center for VMware vSphere with both an active and a stand-by egress point for a single network fault domain.

A data center group that is backed by Networking Data Center for VMware vSphere can have either a common egress point configuration, an egress point configuration for each network fault domain, or a local group configuration.

Data center group

A data center group acts as a virtual data center group router that provides centralized networking administration, configuration for multiple egress points in multiple virtual data centers, and east-west traffic between all networks within the group. A data center group can contain between one and 16 virtual data centers that are configured to share multiple egress points. A data center group can have one of the following egress points configurations:

Table 5-3. Egress Points Configuration Type for Data Center Groups Backed by Networking Data

Center for VMware vSphere

An organization can have multiple data center groups. An organization virtual data center can participate in multiple data center groups.

The participating organization virtual data centers can belong to different Cyfuture Cloud Console sites. See Configure and Manage Multisite Deployments.

Network Fault Domain

The network provider scope, typically representing the underlying VMWare vCenter Server instance with the associated Networking Manager.

Egress point

An edge gateway that connects a data center group or network fault domain to the Internet. The edge gateway must belong to a virtual data center from the data center group. BGP routes are configured on the edge gateway representing the egress point and the universal router of the virtual data center group or network fault domain. Existing routes on the edge gateway are not affected.

Stretched network

A layer 2 network that is stretched across all virtual data centers in a data center group. Can be IPv4 only.

Managing Data Center Groups with Networking Data Center for VMware vSphere Network Provider Type

After you create a data center group that is backed by Networking Data Center for VMware vSphere, you can edit the network topology of a data center group. You can add and remove virtual data centers from the group. You can swap, replace, and remove egress points. You can fix configuration failures by performing different synchronization tasks.

You cannot convert a common egress configuration to an egress configuration per fault domain or the reverse.

Create and Configure a Data Center Group Backed by Networking Data Center for VMware vSphere with a Common Egress Configuration

You can create and configure a virtual data center group backed by Networking Data Center for VMware vSphere with a common egress configuration, where you set a pair of edge gateways that act as an active and stand-by egress points for all participating virtual data centers.

Prerequisites

• This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.
  
  

• Your system administrator must enable the target virtual data centers for cross-virtual data center networking.

Procedure

1 Create a Data Center Group Backed by Networking Data Center for VMware vSphere with a Common Egress Configuration

You can group between one and 16 virtual data centers in a data center group with a common egress configuration.

2 Add an Active Egress Point to a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

To connect your data center group to the Internet, you must add an active egress point to its network topology.

3 Add a Standby Egress Point to a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

In virtual data center groups with common egress configurations, you can add a secondary egress point, which acts as a standby egress point for fault tolerance scenarios.

Create a Data Center Group Backed by Networking Data Center for VMware vSphere with a Common Egress Configuration

You can group between one and 16 virtual data centers in a data center group with a common egress configuration.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click New.

3      On the Starting VDC page, select a VDC to start the VDC group.

4      Enter a name and, optionally, a description for the new data center group.

5      Select Common Egress Points and click Next.

6      On the Participating VDCs page, select additional data centers for the new data center group, and click Next.

The Data Centers page contains a list of the VDCs that the system administrator has enabled for cross-virtual data center networking.

7      Review the data center group details and click Finish.

Results

The newly created virtual data center group is listed in the Data Center Groups view.

Add an Active Egress Point to a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

To connect your data center group to the Internet, you must add an active egress point to its network topology.

Prerequisites

The system administrator created at least one edge gateway on any of the virtual data centers that are participating in the data center group.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points if configured, and the traffic routes.

3      Click Add egress point.

The Add Active Egress Point page that opens provides a list of the edge gateways which belong to the participating virtual data centers.

4      Select the edge gateway that you want to act as an active egress point for this data center group, and click Add.

Results

BGP routes are configured on the edge gateway representing the egress point and the universal router of the virtual data center group. Existing routes on the edge gateway are not affected.

The diagram of the network topology is updated with the newly added egress point. The traffic from the participating virtual data centers to the Internet is represented with a solid blue line.

Add a Standby Egress Point to a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

In virtual data center groups with common egress configurations, you can add a secondary egress point, which acts as a standby egress point for fault tolerance scenarios.

Prerequisites

Apart from the edge gateway that acts as an active egress point, you must have at least one more edge gateway in any of the virtual data centers that are participating in the group.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points if configured, and the traffic routes.

3      Click Add stand-by egress point.

The Add Stand-by Egress Point page opens providing a list of the unused edge gateways that belong to the participating virtual data centers. The edge gateway that is in use by the active egress point in this virtual data center group is not displayed.

4      Select the edge gateway that you want to act as a stand-by egress point for this data center group and click Add.

Results

BGP routes are configured on the edge gateway representing the egress point and the universal router of the network fault domain. The configuration does not affect the existing routes on the edge gateway.

The diagram of the network topology is updated with the newly added egress point. The traffic from the participating virtual data centers to the Internet in fault tolerance scenarios is represented with a dashed blue line.

Create and Configure a Data Center Group Backed by Networking Data Center for VMware vSphere with a Fault Domain Egress Configuration

You can create and configure a virtual data center group backed by Networking Data Center for VMware vSphere with a fault domain egress configuration, where you configure an edge gateway that acts as an active egress point for each network fault domain in the group. Standby egresses cannot be created in a data center group with a fault domain egress configuration.

Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

Procedure

1      Create a Data Center Group Backed by Networking Data Center for VMware vSphere with a Fault Domain Egress Configuration

You can group between 1 and 16 virtual data centers in a data center group backed by Networking Data Center for VMware vSphere with a fault domain egress configuration.

2      Add an Egress Point for a Fault Domain

To connect the virtual data centers from a network fault domain in a data center group backed by Networking Data Center for VMware vSphere to the Internet, you must add an egress point to this network fault domain. You can add an egress point to each network fault domain in the data center group. Stand-by egress points are not supported in a data center group with a fault domain egress configuration.

Create a Data Center Group Backed by Networking Data Center for VMware vSphere with a Fault Domain Egress Configuration

You can group between 1 and 16 virtual data centers in a data center group backed by Networking Data Center for VMware vSphere with a fault domain egress configuration.

Prerequisites

The system administrator enabled the target virtual data centers for cross-virtual data center networking.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click New.

3      Enter a name and, optionally, a description for the new data center group.

4      Select Egress Points per Fault Domain and click Next.

5      On the Participating VDCs page, select additional data centers for the new data center group and click Next.

The Data Centers page contains a list of the VDCs that the system administrator has enabled for cross-virtual data center networking.

6      Review the data center group details and click Finish.

Results

The newly created virtual data center group is listed in the Data Center Groups view.

Add an Egress Point for a Fault Domain

To connect the virtual data centers from a network fault domain in a data center group backed by Networking Data Center for VMware vSphere to the Internet, you must add an egress point to this network

fault domain. You can add an egress point to each network fault domain in the data center group. Stand-by egress points are not supported in a data center group with a fault domain egress configuration.

Prerequisites

Apart from the edge gateways that are in use as egress points in this data center group, you must have at least one unused edge gateway in any of the participating virtual data centers.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

3      On the diagram of the network topology, click the target network fault domain.

Network fault domains are represented with solid lines and their names at the bottom of the diagram.

The selected fault domain is marked in blue.

4      Click Add egress point.

The Add Active Egress Point page opens providing a list of the edge gateways that belong to the participating virtual data centers.

5      Select the edge gateway that you want to act as an egress point for this fault domain, and click

Add.

Results

BGP routes are configured on the edge gateway representing the egress point and the universal router of the network fault domain. Existing routes on the edge gateway are not affected.

The diagram of the network topology is updated with the newly added egress point. The traffic from the virtual data centers in the network fault domain to the Internet is represented with a continuous blue line.

Create and Configure a Local Virtual Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

Starting with version 10.1, Cyfuture Cloud Console supports data center groups backed by Networking Data Center for VMware vSphere with both an active and a stand-by egress point for a single network fault domain.

The organization virtual data centers in a local group are backed by a single VMWare vCenter Server instance.

In a local data center group, you can set a pair of edge gateways - an active egress point and a stand-by egress point, to support high availability and disaster recovery scenarios within the same network fault domain.

Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

Procedure

1      Create a Local Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

You can group between 1 and 16 virtual data centers (VDCs) in a data center group backed by Networking Data Center for VMware vSphere with a fault domain egress configuration.

2      Add an Active Egress Point for a Local Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

To connect the data centers from the local data center group backed by Networking Data Center for VMware vSphere to the Internet, you must add an active egress point to the network fault domain.

3      Add a Stand-By Egress Point for a Local Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

In local data center groups configurations, you can add a secondary egress point, which acts as a stand-by egress point for fault tolerance scenarios.

Create a Local Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

You can group between 1 and 16 virtual data centers (VDCs) in a data center group backed by Networking Data Center for VMware vSphere with a fault domain egress configuration.

Prerequisites

The system administrator enabled the target virtual data centers for cross-virtual data center networking.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click New.

3      On the Starting VDC page, select a VDC to start the VDC group.

4      Enter a name and, optionally, a description for the new data center group.

5      To create a group that contains only virtual data centers from a single network fault domain, toggle on the Create Local Group option.

6      Click Next.

7      On the Participating VDCs page, select additional data centers for the new data center group, and click Next.

The Data Centers page contains a list of the VDCs that the system administrator has enabled for cross-virtual data center networking.

8      Review the data center group details and click Finish.

Results

The newly created virtual data center group appears in the Data Center Groups view.

Add an Active Egress Point for a Local Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

To connect the data centers from the local data center group backed by Networking Data Center for VMware vSphere to the Internet, you must add an active egress point to the network fault domain. 

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

3      Click Add Egress Point.

4      From the list of edge gateways that belong to the participating virtual data centers, select an edge gateway to act as an active egress point for the data center group, and click Add.

Results

BGP routes are configured on the edge gateway representing the egress point and the universal router of the network fault domain. The configuration does not affect the existing routes on the edge gateway.

Тhe newly added active egress point appears in the diagram of the network topology. A continuous blue line represents the traffic from the virtual data centers in the network fault domain to the Internet.

What to do next

 To allow for egress point fault tolerance, add a stand-by egress point for the local data center group.

 Add a Stand-By Egress Point for a Local Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

In local data center groups configurations, you can add a secondary egress point, which acts as a stand-by egress point for fault tolerance scenarios.

Prerequisites

Apart from the edge gateway that acts as an active egress point, you must have at least one more edge gateway in any of the virtual data centers that are participating in the local data center group.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

3      Click Add stand-by egress point.

The Add Stand-by Egress Point page opens providing a list of the unused edge gateways that belong to the participating virtual data centers. The edge gateway that is in use by the active egress point in this virtual data center group appears dimmed.

4      Select the edge gateway that you want to act as a stand-by egress point for this data center group, and click Add.

Results

BGP routes are configured on the edge gateway representing the egress point and the universal router of the network fault domain. The configuration does not affect the existing routes on the edge gateway.

The newly added egress point appears in the network topology diagram. A dashed blue line represents the traffic from the participating virtual data centers to the Internet in fault tolerance scenarios.

View a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

You can view the data center groups in your organization and details about their current configuration.

Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: View VDC Group right published to the organization.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

Add a Virtual Data Center to a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

You can add a virtual data center to a data center group, as a result stretching the existing networks to the new virtual data center.

Prerequisite

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

The data center group contains less than four virtual data centers.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

3      Click Add Data Center.

4      On the Data Centers page, select the data center that you want to add to the data center group and click Finish.

The Data Centers page contains a list virtual data centers that are enabled for cross-virtual data center networking by the system administrator.

Note- A data center group must contain up to four virtual data centers.

Remove a Virtual Data Center from a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

You can remove a virtual data center from a data center group, as a result unstretching the existing networks from this virtual data center.

Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

The data center group must contain at least three virtual data centers.

The virtual data center that you want to remove must not provide an egress point to the data center group.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

3      In the upper right corner of the card of the target virtual data center, click the three dots and click Remove.

4      To confirm, click Remove.

Results

The virtual data center is removed from the network topology diagram of the data center group.

Synchronize a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

To reapply the data center group network configurations and ensure that all participating virtual data centers are active, you can synchronize the data center group.

Note- During the data center group synchronization process, the data center group becomes unavailable for a few seconds because the universal router synchronizes in Networking.

 Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

 Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

3      Click Sync data center group.

4      To confirm, click OK.

Swap the Egress Points in a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type and a Common Egress Configuration

After you configure active and stand-by egress points in a data center group with a common egress configuration, you can swap the roles of the egress points. The active egress point can become a stand-by egress point and the reverse.

Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points if configured, and the traffic routes.

3      Click Swap egress points.

4      To confirm, click OK.

Results

The diagram of the network topology is updated with the new traffic routes. The traffic to the Internet is now redirected to the new active egress point.

Replace the Edge Gateway of an Egress Point of a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

You can replace the edge gateway that represents an active or standby egress point in a data center group.

Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

The new edge gateway must not be in use by other egress points in the data center group.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

3      If you are replacing an egress point from a network fault domain configuration, on the network topology diagram, select the network fault domain of the target egress point.

Network fault domains are represented with solid lines and domain names at the bottom of the diagram.

The selected network fault domain is marked in blue.

4      In the upper right corner of the card of the target egress point, click the three dots, and click Replace.

The Replace Egress Point page opens providing a list of the edge gateways that belong to the participating virtual data centers.

5      Select the new edge gateway and click Replace.

Results

BGP routes are removed from the old edge gateway and configured on the new edge gateway representing the egress point and the universal router of the virtual data center group.

The network topology diagram is updated with the name of the new edge gateway.

Remove an Egress Point from a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

To disconnect a data center group or network fault domain from the Internet, you can remove its egress point.

Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

If you want to remove an active egress point that is paired with a stand-by egress point, you must swap the egress points or remove the stand-by egress point.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points if configured, and the traffic routes.

3      If you are removing an egress point from a network fault domain configuration, on the network topology diagram, select the network fault domain of the target egress point.

Network fault domains are represented with solid lines and domain names at the bottom of the diagram.

The selected network fault domain is marked in blue.

4      In the upper right corner of the card of the target egress point, click the three dots and click Delete.

5      To confirm, click OK.

Results

BGP routes are removed from the edge gateway representing the egress point if it is not in use by other universal routers.

The egress point is removed from the network topology diagram.

Synchronize Routes and Egress Points of a Data Center Group with Networking Data Center for VMware vSphere Network Provider Type

You can reapply the dynamic routing configuration to a data center group or network fault domain and its associated egress points by synchronizing the routes. You can ensure that an egress point is properly connected to the data center group by synchronizing the egress point.

Prerequisites

This operation requires the System Administrator role or a role with the VDC Group: Configure VDC Group right published to the organization.

You configured an egress point for the target data center group or network fault domain.

Procedure

1      In the top navigation bar, click Networking and then click the Data Center Groups tab. The list of data center groups appears.

2      Click the target data center group.

The Network Topology view for this data center group opens. The diagram of the current network topology displays the participating VDCs with their network fault domains, the egress points, if configured, and the traffic routes.

3      If you are synchronizing a network fault domain in a data center group, on the network topology diagram, select the target network fault domain.

Network fault domains are represented with solid lines and domain names at the bottom of the diagram.

The selected network fault domain is marked in blue.

4      To reapply the dynamic routing configuration to the group or network fault domain and its associated egress points, click Sync routes, and click OK.

5      To synchronize an egress point with its data center group, in the upper right corner of the card of the target egress point, click the three dots, click Sync, and click OK.

Managing Data Center Group Networks Backed by Networking Data Center for VMware vSphere

After you create and configure a data center group, you can create and manage VDC group layer 2 networks spanning the participating virtual data centers.

Add a VDC Group Network Backed by Networking Data Center for VMware vSphere

You can create a VDC group network across all virtual data centers that are participating in a data center group.

You can add only an IPv4 data center group network backed by Networking Data Center for VMware vSphere.

Prerequisites

This operation requires the predefined Organization Administrator role or a role with the

Organization VDC Network: Edit Properties right.

Procedure

1      In the top navigation bar, click Networking.

2      On the Networks tab, click New.

3      On the Scope page, select Data Center Group, and select a data center group backed by Networking Data Center for VMware vSphere in which to create the network and click Next.

4      Enter a meaningful name for the network.

5     Enter the Classless Inter-Domain Routing (CIDR) settings for the network.

Use the format network_gateway_IP_address/subnet_prefix_length, for example, 192.167.1.1/24.

6      Enter a description of the organization's VDC network.

7      Click Next.

8      Review the settings and click Finish.

Results

You can see the newly created data center group network in the list of networks for the organization.

Its network type is listed as Cross-VDC.

An organization virtual data center network of cross-VDC routing types is created for each participating virtual data center. You can see the VDC group networks of the participating virtual data centers by clicking on the card of a participating virtual data center and then clicking Networks. If a virtual machine or vApp connects to such an organization's virtual data center network, this virtual machine or vApp connects to the VDC group network.

What to do next

For each corresponding cross-VDC organization virtual data center network, you can assign static IP addresses and IP pools. See Add IP Addresses to an Organization Virtual Data Center Network IP Pool.

For DNS and DHCP configurations for virtual machines attached to a VDC group network, you can use the Cyfuture Cloud Console OpenAPI. To examine the Cyfuture Cloud Console

OpenAPI documentation, go to https://Cloud_Director_IP_address_or_host_name/docs. To view code samples and test Cyfuture Cloud Console OpenAPI calls, go to https:// Cloud_Director_IP_address_or_host_name/api-explorer?scope=organization_name.

View or Edit a Data Center Group Network Backed by Networking Data Center for VMware vSphere

You can view the name, the description, and the CIDR settings of a data center group network backed by Networking Data Center for VMware vSphere. You can edit only the name and description of a data center group network backed by Networking Data Center for VMware vSphere.

For information about editing the static IP pool allocation for a data center group network at a virtual data center level, see Add IP Addresses to an Organization Virtual Data Center Network IP Pool.

Prerequisites

Verify that you are assigned the predefined Organization Administrator role or a role that includes the Organization VDC Network: View Properties and the Organization VDC Network: Edit Properties right.

Procedure

1      In the top navigation bar, click Networking.

2      Click the target network to view its details.

3      To edit the name and the description of the networks, click Edit.

4      Edit the network details and click Save.

Synchronize a Data Center Group Network Backed by Networking Data Center for VMware vSphere

To ensure that all participating virtual data centers can access their data center group network backed by Networking Data Center for VMware vSphere, you can synchronize the data center group network.

Prerequisites

This operation requires the predefined Organization Administrator role or a role with the

Organization VDC Network: Edit Properties right.

Procedure

1      In the top navigation bar, click Networking.

2      In the networks tab, select the radio button next to the name of the target network and click Sync.

To confirm, click OK.