table of contents - vmwaredocs.hol.vmware.com/hol-2018/hol-1804-02-chg_pdf_en.pdftable of contents...

118
Table of Contents Lab Overview - HOL-1804-02-CHG - vSphere Challenge Lab ............................................ 2 Lab Guidance .......................................................................................................... 3 Module 1 - Let's Start with the Basics (30 minutes) .......................................................... 8 Introduction............................................................................................................. 9 Can't vMotion a VM ............................................................................................... 11 Can't ping a VM ..................................................................................................... 18 Module 2 - Basic Operations Management (30 minutes) ................................................ 24 Introduction........................................................................................................... 25 Update VMware Tools ............................................................................................ 26 My PowerCLI script isn't working ........................................................................... 39 Module 3 - Basic Resource Management (30 minutes) ................................................... 43 Introduction........................................................................................................... 44 Troubleshoot a Poorly Performing VM .................................................................... 46 Troubleshoot a Poorly Performing Host.................................................................. 53 Module 4 - Advanced Operations Management (45 minutes) ......................................... 58 Introduction........................................................................................................... 59 Assigning the Correct Permissions ........................................................................ 61 My VM Won't Power On ......................................................................................... 69 My Host is Out of Compliance ............................................................................... 74 Module 5 - Advanced Resource Management (45 minutes) ............................................ 83 Introduction........................................................................................................... 84 My Application is Sensitive to Latency .................................................................. 86 I Created a Resource Pool and now Performance is Worse .................................... 94 vNUMA Troubleshooting ...................................................................................... 101 Module Hints ................................................................................................................. 112 Module 1 - Let's Start with the Basics ................................................................. 113 Module 2 - Basic Operations Management .......................................................... 114 Module 3 - Basic Resource Management ............................................................. 115 Module 4 - Advanced Operations Management................................................... 116 Module 5 - Advanced Resource Management ..................................................... 117 HOL-1804-02-CHG Page 1 HOL-1804-02-CHG

Upload: ngokiet

Post on 28-May-2018

218 views

Category:

Documents


0 download

TRANSCRIPT

Table of ContentsLab Overview - HOL-1804-02-CHG - vSphere Challenge Lab ............................................2

Lab Guidance .......................................................................................................... 3Module 1 - Let's Start with the Basics (30 minutes) .......................................................... 8

Introduction............................................................................................................. 9Can't vMotion a VM ............................................................................................... 11Can't ping a VM..................................................................................................... 18

Module 2 - Basic Operations Management (30 minutes) ................................................ 24Introduction........................................................................................................... 25Update VMware Tools ............................................................................................ 26My PowerCLI script isn't working........................................................................... 39

Module 3 - Basic Resource Management (30 minutes) ................................................... 43Introduction........................................................................................................... 44Troubleshoot a Poorly Performing VM.................................................................... 46Troubleshoot a Poorly Performing Host.................................................................. 53

Module 4 - Advanced Operations Management (45 minutes) .........................................58Introduction........................................................................................................... 59Assigning the Correct Permissions ........................................................................ 61My VM Won't Power On ......................................................................................... 69My Host is Out of Compliance ............................................................................... 74

Module 5 - Advanced Resource Management (45 minutes) ............................................83Introduction........................................................................................................... 84My Application is Sensitive to Latency .................................................................. 86I Created a Resource Pool and now Performance is Worse....................................94vNUMA Troubleshooting ...................................................................................... 101

Module Hints ................................................................................................................. 112Module 1 - Let's Start with the Basics ................................................................. 113Module 2 - Basic Operations Management.......................................................... 114Module 3 - Basic Resource Management............................................................. 115Module 4 - Advanced Operations Management................................................... 116Module 5 - Advanced Resource Management ..................................................... 117

HOL-1804-02-CHG

Page 1HOL-1804-02-CHG

Lab Overview -HOL-1804-02-CHG -

vSphere Challenge Lab

HOL-1804-02-CHG

Page 2HOL-1804-02-CHG

Lab GuidanceNote: It will take more than 90 minutes to complete this lab. You shouldexpect to only finish 3-4 of the modules during your time. The modules areindependent of each other so you can start at the beginning of any moduleand proceed from there. You can use the Table of Contents to access anymodule of your choosing.

The Table of Contents can be accessed in the upper right-hand corner of theLab Manual.

The vSphere 6 Challenge Lab will do exactly that, challenge you to solve commonvSphere problems that many experience on a daily basis! Each module places you in adifferent fictional scenario to fix common vSphere operational and performanceproblems. Will you be able to fix a PowerCLI script that is not working? Can you poweron a VM that won't power on? It's time to put your vSphere skills to the test.

Lab Module List:

• Module 1 - Let's Start with the Basics (30 minutes).• Module 2 - Basic Operations Management (30 minutes).• Module 3 - Basic Resource Management (30 minutes).• Module 4 - Advanced Operations Management (45 minutes).• Module 5 - Advanced Resource Management (45 minutes).

Lab Captains:

• Nick Fritsch, Senior Technical Account Manager, USA

This lab manual can be downloaded from the Hands-on Labs Document site found here:

http://docs.hol.vmware.com/

This lab may be available in other languages. To set your language preference and havea localized manual deployed with your lab, you may utilize this document to help guideyou through the process:

http://docs.hol.vmware.com/announcements/nee-default-language.pdf

VMware Technology Network (VMTN)

For additional hints and to discuss the challenges presented in the lab further, be sureto visit the VMware Technology Netowork (VMTN) Community Pages:

https://communities.vmware.com/community/vmtn/challenge-lab/vrealize-operations

HOL-1804-02-CHG

Page 3HOL-1804-02-CHG

Location of the Main Console

1. The area in the RED box contains the Main Console. The Lab Manual is on the tabto the Right of the Main Console.

2. A particular lab may have additional consoles found on separate tabs in the upperleft. You will be directed to open another specific console if needed.

3. Your lab starts with 90 minutes on the timer. The lab can not be saved. All yourwork must be done during the lab session. But you can click the EXTEND toincrease your time. If you are at a VMware event, you can extend your lab timetwice, for up to 30 minutes. Each click gives you an additional 15 minutes.Outside of VMware events, you can extend your lab time up to 9 hours and 30

minutes. Each click gives you an additional hour.

Alternate Methods of Keyboard Data Entry

During this module, you will input text into the Main Console. Besides directly typing itin, there are two very helpful methods of entering data which make it easier to entercomplex data.

HOL-1804-02-CHG

Page 4HOL-1804-02-CHG

Click and Drag Lab Manual Content Into Console ActiveWindow

You can also click and drag text and Command Line Interface (CLI) commands directlyfrom the Lab Manual into the active window in the Main Console.

Accessing the Online International Keyboard

You can also use the Online International Keyboard found in the Main Console.

1. Click on the Keyboard Icon found on the Windows Quick Launch Task Bar.

<div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><ahref="http://www.youtube.com/watch?v=xS07n6GzGuo" target="_blank">Try watching this video on www.youtube.com</a>, or enableJavaScript if it is disabled in your browser.</div></div>

HOL-1804-02-CHG

Page 5HOL-1804-02-CHG

Click once in active console window

In this example, you will use the Online Keyboard to enter the "@" sign used in emailaddresses. The "@" sign is Shift-2 on US keyboard layouts.

1. Click once in the active console window.2. Click on the Shift key.

Click on the @ key

1. Click on the "@ key".

Notice the @ sign entered in the active console window.

HOL-1804-02-CHG

Page 6HOL-1804-02-CHG

Activation Prompt or Watermark

When you first start your lab, you may notice a watermark on the desktop indicatingthat Windows is not activated.

One of the major benefits of virtualization is that virtual machines can be moved andrun on any platform. The Hands-on Labs utilizes this benefit and we are able to run thelabs out of multiple datacenters. However, these datacenters may not have identicalprocessors, which triggers a Microsoft activation check through the Internet.

Rest assured, VMware and the Hands-on Labs are in full compliance with Microsoftlicensing requirements. The lab that you are using is a self-contained pod and does nothave full access to the Internet, which is required for Windows to verify the activation.Without full access to the Internet, this automated process fails and you see this

watermark.

This cosmetic issue has no effect on your lab.

Look at the lower right portion of the screen

Please check to see that your lab is finished all the startup routines and is ready for youto start. If you see anything other than "Ready", please wait a few minutes. If after 5minutes your lab has not changed to "Ready", please ask for assistance.

HOL-1804-02-CHG

Page 7HOL-1804-02-CHG

Module 1 - Let's Startwith the Basics (30

minutes)

HOL-1804-02-CHG

Page 8HOL-1804-02-CHG

IntroductionWe'll start with the basics within this module to get your troubleshooting enginewarmed-up. In this lab, you'll be challenged to:

• Resolve an issue with a virtual machine that cannot be migrated to a differentESXi host (vMotion)

• Determine why a virtual machine cannot be contacted by ping, and resolve theissue.

vSphere Client vs vSphere Flash Client

In the vSphere Challenge Lab, you will use both the existing vSphere Web Client (basedon Flash) and the new vSphere Client (based on HTML5). HTML5 is the future directionof the vSphere Client, so you will use it predominantly throughout this lab.

If you feel more comfortable using the vSphere Web Client, a shortcut to it (labeledvSphere Flash Client) is bookmarked within Google Chrome.

1. The default client for the lab is the vSphere Client (based on HTML5). Use theHome button within Google Chrome to access the vSphere Client.

2. A bookmark to the vSphere Flash Client is available within Google Chrome.

Note: As mentioned previously, the default client for this lab will be the vSphere Clientbased on HTML5. Due to the fact that the vSphere Client does not have full featureparity with the vSphere Web Client (based on Flash), there will be some sections whereyou will be directed to use the vSphere Web Client.

HOL-1804-02-CHG

Page 9HOL-1804-02-CHG

Module Switcher

To prepare Module 1 for the challenges that will be presented to you, we need to run theChallenge Lab MS (Module Switcher).

1. Double-click on the Challenge Lab MS shortcut located on the Main Consoledesktop.

2. Select Start under Module 1.

Wait for the PowerCLI script to finish before proceeding. Once the script has completed,press Enter to close the PowerCLI window.

HOL-1804-02-CHG

Page 10HOL-1804-02-CHG

Can't vMotion a VMWith vMotion, you can change the host on which a virtual machine is running, or youcan change both the host and the datastore of the virtual machine.

When you migrate virtual machines with vMotion and choose to change only the host,the entire state of the virtual machine is moved to the new host. The associated virtualdisk remains in the same location on storage that is shared between the two hosts.

When you choose to change both the host and the datastore, the virtual machine stateis moved to a new host and the virtual disk is moved to another datastore. vMotionmigration to another host and datastore is possible in vSphere environments withoutshared storage.

After the virtual machine state is migrated to the alternate host, the virtual machineruns on the new host. Migrations with vMotion are completely transparent to therunning virtual machine.

The state information includes the current memory content and all the information thatdefines and identifies the virtual machine. The memory content includes transactiondata and the bits of the operating system and applications that are in the memory. Thedefining and identification information stored in the state includes all the data thatmaps to the virtual machine hardware elements, such as BIOS, devices, CPU,MAC addresses for the Ethernet cards, chip set states, registers, and so forth.

When you migrate a virtual machine with vMotion, the new host for the virtual machinemust meet compatibility requirements so that the migration can proceed.

Migration with vMotion occurs in three stages:

1. When the migration with vMotion is requested, vCenter Server verifies that theexisting virtual machine is in a stable state with its current host.

2. The virtual machine state information (memory, registers, and networkconnections) is copied to the target host.

3. The virtual machine resumes its activities on the new host.

If errors occur during migration, the virtual machine reverts to its original state andlocation.

Open Google Chrome

1. Open Google Chrome using the shortcut on the taskbar.

HOL-1804-02-CHG

Page 11HOL-1804-02-CHG

If you did not Start Module 1 using the Challenge Lab Module Switcher outlined withinthe Introduction of this Module, please Stop and go back to the Introduction of Module 1and follow the directions to Start the Module using the Challenge Lab Module Switcher.

If you already completed this step, please proceed to the next page.

Login to the vSphere Client

1. Select the check box "Use Windows session authentication".2. Select Login.

Find challenge-01a

1. Search for 'challenge-01a' using the Search box within the vSphere Client.2. Select challenge-01a.

Module 1, Challenge 1

Multiple Administrators have tried to migrate (vMotion) 'challenge-01a' to 'esx-04a','esx-05a' or 'esx-06a', as required by the Application Owner.

Your challenge is to:

• Determine why challenge-01a is unable to be migrated to esx-04a,esx-05a or esx-06a, resolve the configuration issue and complete themigration as requested by the Application Owner.

Need a Hint?

HOL-1804-02-CHG

Page 12HOL-1804-02-CHG

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-36958

DO NOT proceed to the next step unless you want to see the solution to the challenge.

Module 1, Challenge 1 Solution

Reconfiguration of the vSphere environment increased the vCPU of 'challenge-01a' from2 to 4. ESXi hosts 'esx-04a', 'esx-05a' and 'esx-06a' only have 2 CPU, therefore youcannot migrate 'challenge-01a' to any of these hosts.

Therefore, in order to migrate 'challenge-01a' to 'esx-04a', 'esx-05a' or 'esx-06a', youneed to modify the vCPU of 'challenge-01a' from 4 to 2.

Let's take a look at how to reconfigure 'challenge-01a' for 2 vCPU so that we cancomplete the challenge.

Edit challenge-01a Settings

We need to modify the CPU settings of 'challenge-01a' to fit within the resourcerestrictions of 'esx-04a', 'esx-05a' or 'esx-06a'.

1. Select 'challenge-01a'.2. Select Actions.3. Select Edit Settings.

HOL-1804-02-CHG

Page 13HOL-1804-02-CHG

Modify CPU Settings

1. Select the CPU drop-down and change CPU from 4 to 2.2. Select OK.

Migrate challenge-01a

1. Right-click on 'challenge-01a'.2. Select Migrate.

HOL-1804-02-CHG

Page 14HOL-1804-02-CHG

Change Compute Resource Only

1. Leave the default selection 'Change compute resource only'.2. Select Next.

Select Compute Resource

1. 'challenge-01a' needs to be migrated to 'esx-04a', 'esx-05a' or 'esx-06a'. Selectone of these three ESXi hosts.

2. Select Next.

The ESXi host 'esx-03a' is not an acceptable migration target for 'challenge-01a'.

HOL-1804-02-CHG

Page 15HOL-1804-02-CHG

Select Networks

You should not need to make any changes on the Select networks window.

1. Select Next.

HOL-1804-02-CHG

Page 16HOL-1804-02-CHG

Ready to Complete

HOL-1804-02-CHG

Page 17HOL-1804-02-CHG

Can't ping a VMBefore we proceed with the next challenge which involves troubleshooting a networkingissue with a particular virtual machine, consider these best practices when youconfigure your network.

• To ensure a stable connection between vCenter Server, ESXi, and other productsand services, do not set connection limits and timeouts between the products.Setting limits and timeouts can affect the packet flow and cause services

interruption.• Isolate from one another the networks for host management, vSphere vMotion,

vSphere FT, and so on to improve security and performance.• Dedicate a separate physical NIC to a group of virtual machines, or use Network I/

O Control and traffic shaping to guarantee bandwidth to the virtual machines.This separation also enables distributing a portion of the total networking

workload across multiple CPUs. The isolated virtual machines can then betterhandle application traffic, for example, from a Web client.

• To physically separate network services and to dedicate a particular set of NICs toa specific network service, create a vSphere Standard Switch or vSphereDistributed Switch for each service. If this is not possible, separate networkservices on a single switch by attaching them to port groups with different VLANIDs. In either case, verify with your network administrator that the networks orVLANs you choose are isolated from the rest of your environment and that norouters connect them.

• Keep the vSphere vMotion connection on a separate network. When migrationwith vMotion occurs, the contents of the guest operating systems memory istransmitted over the network. You can do this either by using VLANs to segmenta single physical network or by using separate physical networks (the latter ispreferable).

• For migration across IP subnets and for using separate pools of buffer andsockets, place traffic for vMotion on the vMotion TCP/IP stack, and traffic formigration of powered-off virtual machines and cloning on the Provisioning TCP/IPstack.

• You can add and remove network adapters from a standard or distributed switchwithout affecting the virtual machines or the network service that is runningbehind that switch. If you remove all the running hardware, the virtual machinescan still communicate among themselves. If you leave one network adapterintact, all the virtual machines can still connect with the physical network.

• To protect your most sensitive virtual machines, deploy firewalls in virtualmachines that route between virtual networks with uplinks to physical networksand pure virtual networks with no uplinks.

• For best performance, use VMXNET 3 virtual machine NICs.• Physical network adapters connected to the same vSphere Standard Switch or

vSphere Distributed Switch should also be connected to the same physicalnetwork.

HOL-1804-02-CHG

Page 18HOL-1804-02-CHG

• Configure the same MTU on all VMkernel network adapters in a vSphereDistributed Switch. If several VMkernel network adapters, configured withdifferent MTUs, are connected to vSphere distributed switches, you mightexperience network connectivity problems.

Open a Command Prompt

1. Select the Command Prompt shortcut located on the taskbar on the MainConsole.

Ping challenge-02a

1. Enter the following text into the command prompt.

ping challenge-02a -t

The -t keeps the ping going infinitely which will allow you to test different solutionswithout having to repeat this step to determine if the problem is solved or not.

Module 1, Challenge 2

Notice the ping response is 'Destination host unreachable'. Your challenge is to

• Determine why challenge-02a is unreachable by ping.

HOL-1804-02-CHG

Page 19HOL-1804-02-CHG

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-36958

Do NOT proceed to the next page unless you want to view the solution to yourchallenge.

Module 1, Challenge 2 Solution

It appears that someone created a vSphere Standard Switch using the companiesnaming convention a long time ago. The company has standardized on the vSphereDistributed Switch however they forgot to delete this vSphere Standard Switch from'esx-06a'. There are no network adapters attached to the vSphere Standard Switch that'challenge-02a' is attached to, therefore it is unable to communicate on the network.

HOL-1804-02-CHG

Page 20HOL-1804-02-CHG

Edit Settings

1. Select challenge-02a within the Inventory Tree.2. Select Actions.3. Select Edit Settings.

HOL-1804-02-CHG

Page 21HOL-1804-02-CHG

Change Network Adapter

1. For Network adapter 1, select VM-RegionA01-vDS-COMP.2. Select OK.

Return to the command prompt. Is the 'challenge-02a' now responding to ping?

If your continuous ping has stopped, restart the continuous ping using this command.

ping challenge-02a -t

Responding to Ping

HOL-1804-02-CHG

Page 22HOL-1804-02-CHG

Congratulations, 'challenge-02a' is now communicating on the network. Great jobdiagnosing and resolving the problem before your manager called you asking why theycouldn't login to the server.

Module Switcher

Now that you have completed Module 1, we need to reset the lab for your nextchallenge.

1. Double-click on Challenge Lab MS (Module Switcher) located on the MainConsole desktop.

2. Select Stop under Module 1.

You've Finished Module 1

This concludes Module 1, Let's Start with the Basics. We hope you have enjoyedtaking it. Please do not forget to fill out the survey when you are finished.

If you have time reamining, you can continue to the next page to proceed to Module 2or jump to another module that is part of this lab. Click on "More Options - Table ofContents" to quickly jump to a module within the manual.

• Module 1 - Let's Start with the Basics (30 minutes)• Module 2 - Basic Operations Management (30 minutes)• Module 3 - Basic Resource Management (30 minutes)• Module 4 - Advanced Operations Management (45 minutes)• Module 5 - Advanced Resource Management (45 minutes)

HOL-1804-02-CHG

Page 23HOL-1804-02-CHG

Module 2 - BasicOperations Management

(30 minutes)

HOL-1804-02-CHG

Page 24HOL-1804-02-CHG

IntroductionThis module will challenge you on Basic Operations Management tasks.

• Create a shared VMware Tools respository then update VMware Tools on aWindows virtual machine.

• Resolve an issue with a PowerCLI script that continues to fail.

vSphere Client vs vSphere Flash Client

In the vSphere Challenge Lab, you will use both the existing vSphere Web Client (basedon Flash) and the new vSphere Client (based on HTML5). HTML5 is the future directionof the vSphere Client, so you will use it predominantly throughout this lab.

If you feel more comfortable using the vSphere Web Client, a shortcut to it (labeledvSphere Flash Client) is bookmarked within Google Chrome.

1. The default client for the lab is the vSphere Client (based on HTML5). Use theHome button within Google Chrome to access the vSphere Client.

2. A bookmark to the vSphere Flash Client is available within Google Chrome.

Note: As mentioned previously, the default client for this lab will be the vSphere Clientbased on HTML5. Due to the fact that the vSphere Client does not have full featureparity with the vSphere Web Client (based on Flash), there will be some sections whereyou will be directed to use the vSphere Web Client.

HOL-1804-02-CHG

Page 25HOL-1804-02-CHG

Update VMware ToolsVMware Tools is a set of services and modules that enable several features in VMwareproducts for better management of, and seamless user interactions with, guestsoperating systems. For example, VMware Tools has the ability to:

• Pass messages from the host operating system to the guest operating system.• Customize guest operating systems as a part of the vCenter Server and other

VMware products.• Run scripts that help automate guest operating system operations. The scripts

run when the power state of the virtual machine changes.• Synchronize the time in the guest operating system with the time on the host

operating system.

VMware Tools Lifecycle Management provides a simplified and scalable approach forinstallation and upgrade of VMware Tools. It includes a number of featureenhancements, driver-related enhancements, and support for new guest operatingsystems. Run the latest version of VMware Tools or use open-vm-tools distributed withthe Linux OS distribution. Although a guest operating system can run without VMwareTools, always run the latest version of VMware Tools in your guest operating systems toaccess the latest features and updates. You can configure your virtual machine toautomatically check for and apply VMware Tools upgrades each time you power on yourvirtual machines. For information about enabling automatic upgrade of VMware Tools onyour virtual machines, see the vSphere Virtual Machine Administration Guide.

More Information:

• VMware Tools User Guide• VMware Tools Lifecycle: Why Tools Can Drive You Crazy

productLocker

When downloading ESXi from My VMware, you have the option to download ESXi with orwithout VMware Tools packaged within the ESXi installer. ESXi with VMware Toolsincluded is ~300MB in size, half of which is made up of the VMware Tools source files.Therefore, you can save significant space within ESXi, especially when using features

such as Auto Deploy, if using the ESXi installer that does not include VMware Tools.

To help streamline the updating of VMware Tools in the future, you're first challengewithin this module is to create a shared VMware Tools source folder on a datastoreshared amongst all ESXi hosts and copy the contents of the Product Locker folder to thatshared folder. Don't worry, we'll help guide you along the way.

HOL-1804-02-CHG

Page 26HOL-1804-02-CHG

Open Putty

1. From the Windows taskbar, select the Putty shorcut

Module 2 does not require you to use the Challenge Lab Module Switcher to Start theModule. Please proceed to the next step.

Connect to an ESXi Host

All ESXi hosts within the vSphere environment are running vSphere 6.5, therefore wecan connect to any of the ESXi hosts within the environment.

1. Select esx-01a.2. Select Open.

HOL-1804-02-CHG

Page 27HOL-1804-02-CHG

Explore productLocker

You will automatically connect to the ESXi host as root user. The following 3 commandswill walk you through accessing the contents of the ProductLocker folder, which containthe VMware Tools installation source files.

1. cd /productLocker/

2. cd vmtools

3. ls

The productLocker folder contains the VMware Tools installation files for each type ofOperating System. There are 3 types of files

• ISO - These files are mounted to the VM to install VMware Tools within the guestOS.

• SIG - These files are signature files for the ISO files to prevent tampering with orchanging of the ISO files.

• MANIFEST - These files describe the names, versions and resources of the files/drivers within VMware Tools.

HOL-1804-02-CHG

Page 28HOL-1804-02-CHG

Open Google Chrome

Open Google Chrome from the Windows desktop. Or, open a new Tab if you still haveChrome open from a previous challenge.

1. Open Google Chrome using the shortcut on the taskbar.

Login to vSphere Client

1. Select the check box "Use Windows session authentication".2. Select Login.

Access Storage

HOL-1804-02-CHG

Page 29HOL-1804-02-CHG

1. Select Menu. A dropdown will appear with a list of vCenter choices.2. Select Storage.

Module 2, Challenge 1

We've helped get you started down the right path, but now it's your turn to completethe challenge. Your challenge is to:

• Create a shared productLocker folder that can be accessed by all ESXihosts.

• Copy the contents from the productLocker folder on an ESXi host to theshared productLocker folder.

Tools you will possibly use to complete this challenge:

• vSphere Client• WinSCP

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-36959

DO NOT proceed to the next page unless you are ready to see the solution to yourchallenge.

Module 2, Challenge 1 Solution

You will use WinSCP to copy the VMware Tools installation files to the Main Console.

1. Double-click on the 'WinSCP VMTools' shortcut on the desktop of the MainConsole.

The shortcut is configured to automatically take you to the 'vmtools' folder on an ESXihost in the cluster. You will be presented the following:

HOL-1804-02-CHG

Page 30HOL-1804-02-CHG

HOL-1804-02-CHG

Page 31HOL-1804-02-CHG

Download VMware Tools Installation Files

1. Select all the files within the 'vmtools' folder on the right-hand side of WinSCP.

By default, the left-hand side of WinSCP should default to the 'VMTools' folder located onthe desktop of the Main Console (not shown). The 'VMTools' folder is currently empty. Ifnot, browse to 'C:\Users\Administrator\Desktop\VMTools' on the left-hand side of WinSCP.

2. Download all of the files within the 'vmtools' folder (right-hand side of WinSCP)to the 'VMTools' folder (left-hand side of WinSCP).

We need to copy the files we downloaded from the ESXi host to a folder shared amongstall ESXi hosts in the vSphere cluster.

HOL-1804-02-CHG

Page 32HOL-1804-02-CHG

Login to vSphere Client

You should still be logged into the vSphere Client from previous steps. If not, login tothe vSphere Client.

1. Select the check box "Use Windows session authentication"2. Select Login.

Access Storage

1. Select Menu. A dropdown will appear with a list of vCenter choices.2. Select Storage.

HOL-1804-02-CHG

Page 33HOL-1804-02-CHG

Choose a Shared Datastore

1. Select RegionA01-ISCSI01-COMP01.

Create a New Datastore Folder

1. Select Files.2. Select New Folder.3. Enter a folder name of Shared-VMTools.

HOL-1804-02-CHG

Page 34HOL-1804-02-CHG

Use WinSCP to Copy VMware Tools Installation Files toNew Folder

1. Double-click on the WinSCP VMTools shortcut on the desktop of the MainConsole.

The shortcut is configured to automatically take you to the 'vmtools' folder on an ESXihost in the cluster. You need to locate the folder you created in the previous step on theVMFS datastore.

Browse VMFS

HOL-1804-02-CHG

Page 35HOL-1804-02-CHG

Follow these steps within the folder tree on the right-side of WinSCP to reach the'Shared-VMTools' folder you created in the 'RegionA01-ISCSI01-COMP01' datastore.

1. Select the drop-down arrow at the top of the WinSCP to move from the'vmtools' folder to the 'vmfs' folder. Select the vmfs folder.

2. Select volumes.3. Select RegionA01-ISCSI01-COMP01.

Notice that the 'RegionA01-ISCSI01-COMP01' folder has a shortcut icon. This shortcutwill take you to the original folder that has a 32-character alphanumeric name. This isimportant as upcoming steps will reference the 32-character alphanumeric, not thefriendly name. For your information, the 32-character alphanumeric name is5727fe90-1aaae6f7-7179-005056018fc3.

1. Select Shared-VMTools.

HOL-1804-02-CHG

Page 36HOL-1804-02-CHG

Copy VMware Tools Installation Files

1. Copy the VMware Tools installation files that you downloaded to the 'VMTools'folder (left-hand side of WinSCP) into the 'Shared-VMTools' folder (right-hands sideof WinSCP) you created within the 'RegionA01-ISCSI01-COMP01' datastore.

HOL-1804-02-CHG

Page 37HOL-1804-02-CHG

Product Locker Location

While not required as part of this challenge, there is an additional step needed toupdate each ESXi host with the new location of the VMware Tools installation files.

Select a ESXi host and go to Configure > Advanced System Settings >UserVars.ProductLockerLocation.

Edit the location to reflect the new productLocker folder you created: /vmfs/volumes/RegionA01-ISCSI01-COMP01/Shared-VMTools

If you have a large number of ESXi hosts, performing these steps on each ESXi hostindividually is not recommended. The following PowerCLI script provides you with a wayto update all ESXi hosts at once.

Connect to vCenter Server in PowerCLI

Get-VMhost -Location <cluster name> | Set-VMHostAdvancedConfiguration -NameUserVars.ProductLockerLocation -Value /vmfs/volumes/RegionA01-ISCSI01-COMP01/productLocker

A restart of ESXi is required to complete the updating of the productLocker location.

This completes this challenge.

Proceed to the next page to continue with Module 2 or use the Table of Contents toselect a different challenge or module.

HOL-1804-02-CHG

Page 38HOL-1804-02-CHG

My PowerCLI script isn't workingvSphere PowerCLI is a powerful command line tool that lets you automate all aspects ofvSphere management, including networking, storage, virtual machines, tasks, andmore. vSphere PowerCLI is distributed as a Windows PowerShell snap-in, and includesmore than 300 PowerShell cmdlets, along with documentation and samples.

More Information:

• VMware PowerCLI 6.5.1 User's Guide• VMware PowerCLI 6.5.1 Cmdlet Reference

Run the Get-VM-Snapshots PowerCLI script

HOL-1804-02-CHG

Page 39HOL-1804-02-CHG

Module 2, Challenge 2

You'll notice the 'Get-VM-Snapshots' PowerCLI script fails to run. Your challenge is to:

• Determine why the script failed to execute and resolve the issue.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-36959

DO NOT proceed to the next page unless you want to view the solution to thechallenge.

Module 2, Challenge 2 Solution

Did you figure it out? The error message will give you a hint to where the error is withinthe PowerCLI script. Focus on the characters after the path to Get-VM-Snapshot.ps1.

3 char:1

This indicates the issue with the PowerCLI script is located on line 3 of the script. Let'stake a closer look at line 3 of the script.

1. Right click on Get-VM-Snapshots.ps1 within the Challenge Lab Scripts folder.2. Select Edit with Notepad++.

HOL-1804-02-CHG

Page 40HOL-1804-02-CHG

The text on Line 3 begins with:

Get-Snapshot

The Get-Snapshot command is the incorrect command to start the script with. You'llnotice that the Get-Snapshot command is used later within the script. The firstcommand we need to run within the script is the 'Get-VM' command. This will retrieve alist of VMs within vCenter. After that, we run the 'Get-Snapshot' command to get a listof Snapshots for each VM.

Therefore, change the 'Get-Snapshot' command on line 3 to 'Get-VM'. The PowerCLIscript should look like the following:

Connect-VIServer -Server 'vcsa-01a.corp.local' -User 'CORP\Administrator' -Password 'VMware1!'

Get-VM | Format-Table Name, @{Label="NumSnapshots";Expression={(Get-Snapshot -VM $_ |Measure-Object).Count}}, @{Label="TotalSnapShotSizeMB";Expression={(Get-Snapshot -VM $_ |Measure-Object -Sum SizeMB).Sum}}

Read-Host -Prompt "Press Enter to Exit"

Once you've modified the script, Select Save then run the script again by right-clickingon the script and select Run with Powershell.

Get VM Snapshot Success

HOL-1804-02-CHG

Page 41HOL-1804-02-CHG

After correcting the 'Get-VM-Snapshot.ps1' PowerCLI script and Runnig with Powershell,we can see the number and size of snapshots associated with each virtual machine.

You've Finished Module 2

This concludes Module 2, Basic Operations Management. We hope you enjoyedtaking it. Please do not forget to fill out the survey when you are finished.

If you have time remaining, you can continue to the next page to begin Module 3, or youcan jump to another Module within this lab. Click on "More Options - Table ofContents" to quickly jump to a challenge within the module.

Module 1 - Let's Start with the Basics (30 minutes)

Module 2 - Basic Operations Management (30 minutes)

Module 3 - Basic Resource Management (30 minutes)

Module 4 - Advanced Operations Management (45 minutes)

Module 5 - Advanced Resource Management (45 minutes)

HOL-1804-02-CHG

Page 42HOL-1804-02-CHG

Module 3 - Basic ResourceManagement (30

minutes)

HOL-1804-02-CHG

Page 43HOL-1804-02-CHG

IntroductionThis module will challenge you on Basic Resource Management tasks.

• Troubleshoot a VM that has been performing poorly.• Determine why an ESXi host continues to have degraded performance.

vSphere Client vs vSphere Flash Client

In the vSphere Challenge Lab, you will use both the existing vSphere Web Client (basedon Flash) and the new vSphere Client (based on HTML5). HTML5 is the future directionof the vSphere Client, so you will use it predominantly throughout this lab.

If you feel more comfortable using the vSphere Web Client, a shortcut to it (labeledvSphere Flash Client) is bookmarked within Google Chrome.

1. The default client for the lab is the vSphere Client (based on HTML5). Use theHome button within Google Chrome to access the vSphere Client.

2. A bookmark to the vSphere Flash Client is available within Google Chrome.

Note: As mentioned previously, the default client for this lab will be the vSphere Clientbased on HTML5. Due to the fact that the vSphere Client does not have full featureparity with the vSphere Web Client (based on Flash), there will be some sections whereyou will be directed to use the vSphere Web Client.

HOL-1804-02-CHG

Page 44HOL-1804-02-CHG

Module Switcher

To prepare Module 3 for the challenges that will be presented to you, we need to run theChallenge Lab MS (Module Switcher).

1. Double-click on the Challenge Lab MS shortcut located on the Main Consoledesktop.

2. Select Start under Module 3.

Wait for the PowerCLI script to finish before proceeding. Once the script has completed,press Enter to close the PowerCLI window.

HOL-1804-02-CHG

Page 45HOL-1804-02-CHG

Troubleshoot a Poorly Performing VMBefore we get started troubleshooting a poorly performing virtual machine, let's reviewsome troubleshooting suggestions.

The suggestions are not meant to be a comprehensive guide to diagnosing andtroubleshooting problems in the virtual environment. It is meant to provide informationabout some common problems that can be solved without contacting VMware TechnicalSupport.

• Temporary spikes in CPU usage indicate that you are making the best use of CPUresources. Consistently high CPU usage might indicate a problem. You can usethe CPU performance charts to monitor CPU usage for hosts, clusters, resourcepools, virtual machines, and vApps.

• Host machine memory is the hardware backing for guest virtual memory andguest physical memory. Host machine memory must be at least slightly larger

than the combined active memory of the virtual machines on the host. A virtualmachine's memory size must be slightly larger than the average guest memoryusage. Increasing the virtual machine memory size results in more overheadmemory usage.

• Datastores represent storage locations for virtual machine files. A storagelocation can be a VMFS volume, a directory on Network Attached Storage, or alocal file system path. Datastores are platform-independent and host-independent.

• Use the disk charts to monitor average disk loads and to determine trends in diskusage. For example, you might notice a performance degradation withapplications that frequently read from and write to the hard disk. If you see aspike in the number of disk read/write requests, check if any such applicationswere running at that time.

• Network performance is dependent on application workload and networkconfiguration. Dropped network packets indicate a bottleneck in the network.Slow network performance can be a sign of load-balancing problems.

More Information:

• vSphere Monitoring and Performance• Monitoring Guest Operating System Performance

Connect to challenge-01a

HOL-1804-02-CHG

Page 46HOL-1804-02-CHG

1. Connect to 'challenge-01a' by double-clicking on the 'chg-01a.RDP' shortuct onthe Main Console desktop. Alternatively, you can right-click on 'chg-01a.RDP' andselect Connect.

If you did not Start Module 3 using the Challenge Lab Module Switcher outlined withinthe Introduction of this Module, please Stop and go back to the Introduction of Module 3and follow the directions to Start the Module using the Challenge Lab Module Switcher.

If you already completed this step, please proceed to the next page.

Connect to challenge-04a

Repeat the same steps for 'challenge-04a'.

1. Connect to 'challenge-04a' by double-clicking on the 'chg-04a.RDP' shortuct onthe Main Console desktop. Alternatively, you can right-click on 'chg-04a.RDP' andselect Connect.

Wait to be logged into both 'challenge-01a' and 'challenge-04a' before proceeding to thenext step.

Start SPECjbb

Both 'challenge-01a' and 'challenge-04a' has some tools installed on it to help youmonitor its well-being. On the desktop, you can see information about the virtualmachine including its hostname, IP address, CPU usage, and memory usage. The CPUusage and memory usage update in real time.

In the CPU usage chart, you can see both the total CPU used ("Total:") and thepercentage of CPU usage that is consumed by the guest operating system's kernel("Krnl:").

1. Double-click on SPECjbb to start the performance measurement application.

HOL-1804-02-CHG

Page 47HOL-1804-02-CHG

Start Benchmark

A window titled SPECjbb2005 opens. A copy of SPECjbb2005 is installed on both'challenge-01a' and 'challenge-04a'. SPECjbb2005 is a real SPEC java-based benchmarkthat can measure CPU and memory performance.

1. Select Start Benchmark to start the benchmark. Make sure you Start theBenchmark on both 'challenge-01a' and 'challenge-04a'.

SPECjbb Starts

Wait about a minute for the benchmark to begin running on both 'challenge-01a' and'challenge-04a'.

HOL-1804-02-CHG

Page 48HOL-1804-02-CHG

Resize Windows

Resize both the 'challenge-01a' and 'challenge-04a' desktops so that you can view thePerformance results.

Module 3, Challenge 1

As you can see, 'challenge-01a' is performing poorly when compared to 'challenge-04a'.Your challenge is to:

• Determine why challenge-01a is not performing similar tochallenge-04a.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-36960

HOL-1804-02-CHG

Page 49HOL-1804-02-CHG

DO NOT proceed to the next page unless you are ready to view the Solution to thisChallenge.

Module 3, Challenge 1 Solution

If you look closely, you'll notice CPU Shares have been setup for both 'challenge-01a'and 'challenge-04a'. The key difference though is 1000 Shares have been configured for'challenge-01a' and 2000 Shares have been configured for 'challenge-04a'. This wouldexplain why 'challenge-01a' is performing poorly when compared to 'challenge-04a'.

Shares specify the relative importance of a virtual machine. In this instance,'challenge-04a' had twice as many CPU Shares as 'challenge-01a' and therefore isentitled to consume twice as much of that resource when multiple virtual machines arecompeting for resources.

There are a couple of ways to solve this challenge.

1. You can modify the CPU Shares for 'challenge-04a' to match that of'challenge-01a' so that they both equal 1000.

2. You can modify the CPU Shares for 'challenge-01a' to match that of'challenge-04a' so that they both equal 2000.

3. You can modify the CPU Shares for both 'challenge-01a' and 'challenge-04a' toboth equal 0.

We'll walk through modifying the CPU Shares to both equal 0 so that future VMs thatreside on this host are not subjected to the same performance characteristics.

Open Google Chrome

1. Open Google Chrome using the shortcut on the taskbar.

HOL-1804-02-CHG

Page 50HOL-1804-02-CHG

Login to the vSphere Client

1. Select the check box "Use Windows session authentication".2. Select Login.

Edit Settings on challenge-01a

1. Find 'challenge-01a' within the Inventory Tree on the left hand side of the vSphereClient. Right click on 'challenge-01a' to launch the context menu.

2. Select Edit Settings.

HOL-1804-02-CHG

Page 51HOL-1804-02-CHG

Edit CPU Shares

1. Select the triangle next to CPU to expand the CPU menu.2. Select the drop down menu next to where it currently states Custom and change

the value to Normal.

Repeat for challenge-04a

Repeat the same process for 'challenge-04a'.

1. Find 'challenge-04a' within the tree on the left hand side of the vSphere WebClient. Right click on 'challenge-04a' to launch the context menu.

2. Select Edit Settings.3. Select the triangle next to CPU to expand the CPU menu.4. Select the drop down menu next to where it currently states Custom and change

the value to Normal.

If the SPECjbb Benchmark application is still running, the performance of 'challenge-01a'and 'challenge-04a' should equalize after a few cycles. If the SPECjbb Benchmarkapplication is not running, feel free to start the Benchmark on each virtual machineagain to ensure that the virtual machines are performing similarly.

This completes this challenge.

Proceed to the next page to continue with Module 3 or use the Table of Contents toselect a different challenge or module.

HOL-1804-02-CHG

Page 52HOL-1804-02-CHG

Troubleshoot a Poorly Performing HostBefore your next challenge, let's review some solutions for Consistently High CPUUsage.

Temporary spikes in CPU usage indicate that you are making the best use of CPUresources. Consistently high CPU usage might indicate a problem. You can use the CPUperformance charts to monitor CPU usage for hosts, clusters, resource pools, virtualmachines, and vApps.

• Host CPU usage constantly is high. A high CPU usage value can lead to increasedready time and processor queuing of the virtual machines on the host.

• Virtual machine CPU usage is above 90% and the CPU ready value is above 20%.Application performance is impacted.

• The host probably is lacking the CPU resources required to meet the demand.• There might be too many virtual CPUs relative to the number of regular CPUs.• There might be an IO storage or networking operation that places the CPU in a

wait state.• The Guest OS generates too much load for the CPU.

Solutions

• Verify that VMware Tools is installed on every virtual machine on the host.• Compare the CPU usage value of a virtual machine with the CPU usage of other

virtual machines on the host or in the resource pool. The stacked bar chart onthe host's Virtual Machine view shows the CPU usage for all virtual machines onthe host.

• Determine whether the high ready time for the virtual machine resulted from itsCPU usage time reaching the CPU limit setting. If so, increase the CPU limit onthe virtual machine.

• Increase the CPU shares to give the virtual machine more opportunities to run.The total ready time on the host might remain at the same level if the host

system is constrained by CPU. If the host ready time doesn't decrease, set theCPU reservations for high-priority virtual machines to guarantee that they receivethe required CPU cycles.

• Increase the amount of memory allocated to the virtual machine. This actiondecreases disk and or network activity for applications that cache. This mightlower disk I/O and reduce the need for the host to virtualize the hardware. Virtualmachines with smaller resource allocations generally accumulate more CPU readytime.

• Reduce the number of virtual CPUs on a virtual machine to only the numberrequired to execute the workload. For example, a single-threaded application ona four-way virtual machine only benefits from a single vCPU. But the hypervisor'smaintenance of the three idle vCPUs takes CPU cycles that could be used forother work.

HOL-1804-02-CHG

Page 53HOL-1804-02-CHG

• If the host is not already in a DRS cluster, add it to one. If the host is in a DRScluster, increase the number of hosts and migrate one or more virtual machinesonto the new host.

• Upgrade the physical CPUs or cores on the host if necessary.• Use the newest version of hypervisor software, and enable CPU-saving features

such as TCP Segmentation Offload, large memory pages, and jumbo frames.

Now you may be thinking that this challenge is related Host CPU Performance. You maybe right, but you may also be wrong. The only way to find out is to proceed with yourchallenge. Good luck!

Launch Google Chrome

1. Open Google Chrome using the shortcut on the taskbar.

Login to vSphere Client

1. Select the check box "Use Windows session authentication".2. Select Login.

Browse to the Poorly Performing Host

HOL-1804-02-CHG

Page 54HOL-1804-02-CHG

The Operations team informed you that 'esx-01a' is performing poorly. We need toinvestigate further.

1. Select the host esx-01a.2. Select Monitor.3. Select Advanced. You may need to expand Performance to see Advanced by

selecting the arrow to the left of Performance.

The current virtual machine workload on 'esx-05a' is consuming 50% of the availableCPU resources available. If you look closely at the Performance graph, you'll notice 5different counters: green, blue, purple, orange and black. Using the Performance ChartLegend, we see that the blue counter represents CPU 0, the purple counter representsCPU 1, the green counter represents CPU 2, the orange counter represents CPU 3 andthe black counter represents overall CPU usage for the host.

View Memory Performance

Modify the view to show Memory Usage. 'esx-01a' has 8GB of memory available to it.The current virtual machine workload is consuming close to 80% of available Memory.

Investigate the performance of 'esx-01a' by using the Advanced Performance Monitor.Use the dropdown (CPU usage in %) in the upper right-hand corner of the Performance

window to view metrics for Memory, Network and other host-based metrics.

Module 3, Challenge 2

Your challenge is to:

• Alleviate the performance pressure on 'esx-01a'.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

HOL-1804-02-CHG

Page 55HOL-1804-02-CHG

https://communities.vmware.com/docs/DOC-36960

DO NOT proceed to the next page unless you are ready to view the Solution to thisChallenge.

Module 3, Challenge 2 Solution

The ESXi host 'esx-01a' was performing fine up until the point when a colleagueaccidentally started the memhog (memory hog) virtual machine on the same host as'challenge-02a'. The memhog virtual machine is only used to performancebenchmarking within the environment.

To solve the performance issue on 'esx-01a', you could've performed any of thefollowing:

• Migrated either 'challenge-02a' or 'memhog' to a different ESXi host.• Created a memory limit on 'challenge-02a' and/or 'memog'.

HOL-1804-02-CHG

Page 56HOL-1804-02-CHG

Stop Module 3

Before you celebrate with colleagues, open the Challenge Lab MS (module switcher)located on the desktop of the Main Console.

1. Double-click on the Challenge Lab MS (Module Switcher) shortcut located on theMain Console desktop.

2. Select Stop under Module 3.

Wait for the PowerCLI window to close before proceeding to the next step.

You've Finished Module 3

This concludes Module 3, Basic Resource Management. We hope you have enjoyedtaking it. Please do not forget to fill out the survey when you are finished.

If you have time remaining, you can proceed to the next page to begin Module 4 or youcan jump to another Module within this lab. Click on "More Options - Table ofContents" to quickly jump to a challenge within the module.

Module 1 - Let's Start with the Basics (30 minutes)

Module 2 - Basic Operations Management (30 minutes)

Module 3 - Basic Resource Management (30 minutes)

Module 4 - Advanced Operations Management (45 minutes)

Module 5 - Advanced Resource Management (45 minutes)

HOL-1804-02-CHG

Page 57HOL-1804-02-CHG

Module 4 - AdvancedOperations Management

(45 minutes)

HOL-1804-02-CHG

Page 58HOL-1804-02-CHG

IntroductionThis module will challenge you on Advanced Operations Management tasks.

• A new user needs specific permissions within the vSphere environment and it'sup to you to make sure they are correct before this person makes an error, suchas deleting every VM within the evironment.

• Determine why a VM will not Power ON.• An ESXi host is Out of Compliance, how do I fix it?

vSphere Client vs vSphere Flash Client

In the vSphere Challenge Lab, you will use both the existing vSphere Web Client (basedon Flash) and the new vSphere Client (based on HTML5). HTML5 is the future directionof the vSphere Client, so you will use it predominantly throughout this lab.

If you feel more comfortable using the vSphere Web Client, a shortcut to it (labeledvSphere Flash Client) is bookmarked within Google Chrome.

1. The default client for the lab is the vSphere Client (based on HTML5). Use theHome button within Google Chrome to access the vSphere Client.

2. A bookmark to the vSphere Flash Client is available within Google Chrome.

Note: As mentioned previously, the default client for this lab will be the vSphere Clientbased on HTML5. Due to the fact that the vSphere Client does not have full featureparity with the vSphere Web Client (based on Flash), there will be some sections whereyou will be directed to use the vSphere Web Client.

HOL-1804-02-CHG

Page 59HOL-1804-02-CHG

Module Switcher

To prepare Module 4 for the challenges that will be presented to you, we need to run theChallenge Lab MS (Module Switcher).

1. Double-click on the Challenge Lab MS shortcut located on the Main Consoledesktop.

2. Select Start under Module 4.

Wait for the PowerCLI script to finish before proceeding. Once the script has completed,press Enter to close the PowerCLI window.

HOL-1804-02-CHG

Page 60HOL-1804-02-CHG

Assigning the Correct PermissionsPermissions are access roles that consist of a user and the users assigned role for anobject such as a virtual machine or ESXi host. Permissions grant users the right toperform the activities specified by the role on the object to which the role is assigned.

For example, to configure memory for the host, you must grant a role to a user thatincludes the Host > Configuration > Memory Configuration privilege. By assigningdifferent roles to users for different objects, you control the tasks that users can performin your vSphere environment.

Users other than root and vpxuser initially have no permissions on any objects, whichmeans they cannot view these objects or perform operations on them. A user withAdministrator privileges must assign permissions to these users to allow them toperform tasks.

The list of privileges is the same for ESXi and vCenter Server.

Multiple Permissions

Many tasks require permissions on more than one object.

Permissions applied on a child object always override permissions that are applied on aparent object. Virtual machine folders and resource pools are equivalent levels in thehierarchy. If you assign propagating permissions to a user or group on a virtualmachine's folder and its resource pool, the user has the privileges propagated from theresource pool and from the folder.

If multiple group permissions are defined on the same object and the user belongs totwo or more of those groups, two situations are possible:

• If no permission is defined for the user on that object, the user is assigned the setof privileges assigned to the groups for that object.

• If a permission is defined for the user on that object, the user's permission takesprecedence over all group permissions.

Permission Examples

These rules can help you determine where you must assign permissions to allowparticular operations:

• Any operation that consumes storage space, such as creating a virtual disk ortaking a snapshot, requires the Datastore > Allocate Space privilege on the targetdatastore, as well as the privilege to perform the operation itself.

• Moving an object in the inventory hierarchy requires appropriate privileges on theobject itself, the source parent object (such as a folder or cluster), and thedestination parent object.

HOL-1804-02-CHG

Page 61HOL-1804-02-CHG

• Each host and cluster has its own implicit resource pool that contains all theresources of that host or cluster. Deploying a virtual machine directly to a host orcluster requires the Resource > Assign Virtual Machine to Resource Pool privilege.

Module 4, Challenge 1

If you did not Start Module 4 using the Challenge Lab Module Switcher outlined withinthe Introduction of this Module, please Stop and go back to the Introduction of Module 4and follow the directions to Start the Module using the Challenge Lab Module Switcher.

If you already completed this step, please proceed to the next page.

The Developer Manager sent you an email with the following permission requirementsfor the new Junior Developer.

1. Needs access to virtual machines and templates, including ability to provisionnew virtual machines from template.

2. Should not be able to add or remove CPU or memory from any virtual machines.3. Complete snapshot capabilities including create, rename, remove and revert to

for virtual machines.4. Ability to create new folders.5. Ability to perform all power operations for virtual machines.6. Ability to clone virtual machines.

An Active Directory account has already been created for the new developer within theCORP.LOCAL domain. Those details are as follows:

• Username: CORP\jdev• Password: VMware1!

Your challenge is to

• Assign the correct vCenter permissions to the Junior Developer basedupon the requirements provided.

Before you get started, your Director has implemented security standards, therefore allrequested permissions for the Junior Developer should only be applied on theDevelopment folder within vCenter.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-36961

DO NOT proceed to the next page unless you want to view the solution to this challenge.

HOL-1804-02-CHG

Page 62HOL-1804-02-CHG

Module 4, Challenge 1 Solution

Were you able to assign the correct permissions to the Junior Developer? Let's put yourresolution to the test and walk through the solution.

Open Google Chrome

1. Open Google Chrome using the shortcut on the taskbar.

Login to the vSphere Client

1. Select the check box "Use Windows session authentication".2. Select Login.

HOL-1804-02-CHG

Page 63HOL-1804-02-CHG

Create New Role

We need to create a new role with the requested permissions to assign to the JuniorDeveloper.

Create New Role

1. Select Roles.2. Select the Plus sign to Add a new role.

HOL-1804-02-CHG

Page 64HOL-1804-02-CHG

Provisioning

1. Select Virtual machine.2. Select Create template from virtual machine and Deploy template.

Snapshot Management

1. Select Snapshot management. Selecting the 'Snapshot management' privilegewill propogate all privilege's located within Snapshot management.

Power Operations

HOL-1804-02-CHG

Page 65HOL-1804-02-CHG

Clone Virtual Machine

1. Select Clone virtual machine. That should cover all requested privileges forthe Junior Developer.

2. Select Next.

Name Role

1. Name the Role Junior Developer.2. Select Finish.

HOL-1804-02-CHG

Page 66HOL-1804-02-CHG

Browse to the Development Folder

1. Select Menu.2. Select VMs and Templates.

Browse to Development Folder

1. Select the Development folder. You may need to expand 'vcsa-01a.corp.loca'land 'RegionA01' in order to see the Development folder.

2. Select Permissions.3. Select the Plus sign to add a new permission.

HOL-1804-02-CHG

Page 67HOL-1804-02-CHG

Add New Permission

1. Select CORP.LOCAL from the dropdown list.2. Enter jdev.3. Select the Junior Developer role from the dropdown list.4. Check the box Propogate to children.5. Select OK.

Notice Development at the top of the window next to Add Permission. This helps youidentify which vCenter object you are applying the new permission to.

Permission Added

This completes this challenge.

Proceed to the next page to continue with Module 4 or use the Table of Contents toselect a different challenge or module.

HOL-1804-02-CHG

Page 68HOL-1804-02-CHG

My VM Won't Power OnYou can often obtain valuable troubleshooting information by looking at the logsprovided by the various services and agents that your implementation is using.

Most logs are located in C:\ProgramData\VMware\vCenterServer\logs for Windowsdeployments or /var/log/ for vCenter Server Appliance deployments. Common logs areavailable in all implementations. Other logs are unique to certain deployment options(Management Node or Platform Services Controller).

Common Logs

• applmgmt = VMware Appliance Management Service• CloudVM = Logs for allotment and distribution of resources between services• CM = VMware Component Manager• FirstBoot = Location where first boot logs are stored• rhttpproxy = Reverse Web Proxy• SCA = VMware Service Control Agent• statsmonitor = VMware Appliance Monitoring Server (VCSA only)• Vapi = VMware vAPI Endpoint• vmaffd = VMware Authentication Framework daemon• vmdird = VMware Directory Service daemon• vmon = VMware Service Lifecycle Manager

More Information:

• vSphere Troubleshooting

Open Google Chrome

1. Launch Google Chrome using the shortcut on the Main Console desktop.

Login to vSphere Client

HOL-1804-02-CHG

Page 69HOL-1804-02-CHG

1. Select the check box "Use Windows session authentication".2. Select Login.

Search for challenge-05a

1. Within the Search field located next to the Menu drop down, enterchallenge-05a and press Enter.

2. Select challenge-05a.

Power On challenge-05a

1. Select Actions.2. Expand Power to see all available Power options.3. Select Power On.

Module 4, Challenge 2

1. Expand Recent Tasks by selecting it at the bottom of the window and check tomake sure 'challenge-05a' powered on successfully.

HOL-1804-02-CHG

Page 70HOL-1804-02-CHG

It appears 'challenge-05a' won't power on. Examine the error message to begintroubleshooting the issue. Your challenge is to:

• Power on the challenge-05a virtual machine.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-36961

DO NOT proceed to the next page unless you want to see the solution to the challenge.

Module 4, Challenge 2 Solution

Select the 'challenge-05a' virtual machine within the Inventory Tree. Notice that thevirtual machine is configured for 8 CPU(s). This is preventing the 'challenge-05a' virtualmachine from being powered-on as ESXi host 'esx-05a' does not have sufficient CPU

HOL-1804-02-CHG

Page 71HOL-1804-02-CHG

resources to meet the current CPU requirements (8 CPU) of the 'challenge-05a' virtualmachine..

Edit Settings

To resolve the misconfiguration issue for the 'challenge-05a' virtual machine:

1. Right-click on 'challenge-05a'.2. Select Edit Settings.

Correct CPU Configuration

1. Select the Core per Socket drop-down menu. Notice that the only optionsavailable to you are 1 or 2. Select 1 or 2.

HOL-1804-02-CHG

Page 72HOL-1804-02-CHG

2. Select OK.

Notice that vCenter Server prevents you from misconfiguring the virtual machine withinthe User Interface. Now you may be asking yourself how the 'challenge-05a' virtualmachine was configured with 8 CPU if the vCenter Server User Interface will not allowyou to choose such a setting.

The numvcpus line within the virtual machines VMX file (configuration file) was modifiedto 8 CPU. This shows the danger of modifying the VMX file directly, as it can overridethe measures put in-place within vCenter Server to prevent a misconfiguration.

Challenge Completed

Good job, after modifying the number of CPU from 8 to 1 or 2, the 'challenge-05a' virtualmachine successfully powers on.

This completes this challenge.

Proceed to the next page to continue with Module 4 or use the Table of Contents toselect a different challenge or module.

HOL-1804-02-CHG

Page 73HOL-1804-02-CHG

My Host is Out of ComplianceThe Host Profiles feature creates a profile that encapsulates the host configuration andhelps to manage the host configuration, especially in environments where anadministrator manages multiple hosts or clusters invCenter Server.

Host Profiles provide an automated and centrally managed mechanism for hostconfiguration andconfiguration compliance. Host Profiles can improve efficiency byreducing reliance upon repetitive, manualtasks. Host Profiles capture the configurationof a pre-configured and validated reference host, store the configuration as a managedobject and use the catalog of parameters contained within to configure networking,storage, security, and other host-level parameters. Host Profiles can be applied toindividual hosts, a cluster, or all the hosts and clusters associated to a host profile.Applying a Host Profile to a cluster affects all hosts in the cluster and result in a

consistent configuration across the applied hosts.

Host Profiles can be used to validate the configuration of a host by checking complianceof a host or cluster against the Host Profile that is associated with that host or cluster.

More Information:

• vSphere Host Profiles• Enhancements to Host Profiles in vSphere 6.5

Getting Started with Host Profiles

Host Profiles is not available yet within the vSphere Client (HTML5), therefore we mustuse the current vSphere Flash Client.

1. Select the Google Chome shortcut on the taskbar.

vSphere Flash Client

1. Select vSphere Flash Client from the Bookmarks Bar.

HOL-1804-02-CHG

Page 74HOL-1804-02-CHG

Login to vSphere Flash Client

1. Select the check box "Use Windows session authentication".2. Select Login.

Explore Host Profiles

1. Select the Home icon within vSphere Web Client.2. Select Policies and Profiles.

HOL-1804-02-CHG

Page 75HOL-1804-02-CHG

Explore Host Profiles

1. Select Host Profiles from Navigator.

Production Host Profile

A team member has already created a Host Profile appropriately named 'ProductionHost Profile'. Notice that one host is currently attached to this host profile and it isshowing as 'Not Compliant'. Let's determine why the host is showing as 'Not Compliant'.

1. Select Host Profile Compliance.

Wait for the 'Check Compliance' task to complete. Use the Recent Tasks windows tocheck the status of the 'Check Compliance' task.

Not Compliant Hosts

After the Check Compliance task completes, notice that 1 ESXi host is not compliant.

1. Select Production Host Profile.

HOL-1804-02-CHG

Page 76HOL-1804-02-CHG

Not Compliant

Notice that 'esx-05a' is Not Compliant against the Production Host Profile.

Module 4, Challenge 3

Now that you've started down the correct path, it's time for you to take control. Yourchallenge is to:

• Resolve the issue so that 'esx-05a' is Compliant against the ProductionHost Profile.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-36961

DO NOT proceed to the next page unless you want to see the solution to this challenge.

Module 4, Challenge 3 Solution

Were you able to resolve the issue with the Non-Compliant host? The Solution to thisChallenge is as follows:

• 'esx-05a' is Non-Compliant due to an invalid NTP Server list. There is anadditional NTP Server address within the NTP Server configuration of 'esx-05a'that is not located within the Host Profile.

• The NTP Server address 'ntp.corp.local' needs to be removed from the NTP Serverlist.

HOL-1804-02-CHG

Page 77HOL-1804-02-CHG

Take a Closer Look

1. Select Monitor.2. Select Compliance.3. Highlight the esx-05a.corp.local row. Do not select the 'esx-05a' object as it

will take you to the host you selected. If this happens, select the Back button inthe top right-hand corner of the vSphere Web Client to return to this page.

4. Notice the Host Value and the Host Profile Value fields are different. The HostValue has the additional NTP Server which is causing the host to be NotCompliant.

HOL-1804-02-CHG

Page 78HOL-1804-02-CHG

Modify the NTP Server Settings

The NTP Server Settings can be modified within the vSphere Client (based on HTML5),therefore we will proceed with modifying the NTP Server Settings there.

1. Open a new tab within Google Chrome by selecting the reverse parallelogram.2. Select Home.

You will automatically be logged into vCenter since you are currently logged-in as CORP\Administrator within the vSphere Flash Client. If you are not automatically logged-in,check the box to "Use windows session authentication" to login to vCenter.

Hosts and Clusters

1. Select Menu.2. Select Host and Clusters from the drop down list.

HOL-1804-02-CHG

Page 79HOL-1804-02-CHG

Time Configuration

1. Select esx-05a.corp.local.2. Select Configure.3. Select Time Configuration.4. Select Edit.

Edit Time Configuration

Notice the additional NTP Server 'ntp.corp.local' within the NTP Servers text box. Delete'ntp.corp.local' from within the text box.

Check Host Compliance

HOL-1804-02-CHG

Page 80HOL-1804-02-CHG

Now that you have removed the invalid NTP Server entry, we need to re-check theCompliance of the host against the Host Profile. The vSphere Flash Client tab that youwere working in within the first part of this lab should still be open.

1. Select the Check Host Profile Compliance icon to check the compliance of'esx-05a' now that you have modified the NTP Server Settings.

Compliant

Great job. The host 'esx-05a' is now Compliant against the Production Host Profile. Yourmanager thanks you and your company can now move forward with standardizing theirESXi environment.

If 'esx-05a' is still not compliant, there is no need to worry. The Hands-On Labenvironment is delivered to you from many cloud environments. Due to this, sometimesthe labs are created with slight differences from one cloud to another.

Bonus Challenge: Examine the additional profile items that still make 'esx-05a' NotCompliant against the Production Host Profile. Edit the 'Production Host Profile' to make'esx-05a' Compliant.

If you're not interested in the Bonus Challenge, feel free to proceed to the next step.

Stop Module 4

Before you celebrate with colleagues, open the Challenge Lab MS (Module Switcher)located on the desktop of the Main Console.

HOL-1804-02-CHG

Page 81HOL-1804-02-CHG

1. Double-click on Challenge Lab MS (Module Switcher) shortcut located on thedesktop of the Main Console.

2. Select Stop under Module 4.

Wait for the PowerCLI window to close before proceeding to the next step.

You've Finished Module 4

Congatulations on finishing Module 4.

You can now proceed in the manual to Module 5, or you can jump to a different modulemore suited for your skill level.

Module 1 - Let's Start with the Basics (30 minutes)

Module 2 - Basic Operations Management (30 minutes)

Module 3 - Basic Resource Management (30 minutes)

Module 4 - Advanced Operations Management (45 minutes)

Module 5 - Advanced Resource Management (45 minutes)

HOL-1804-02-CHG

Page 82HOL-1804-02-CHG

Module 5 - AdvancedResource Management

(45 minutes)

HOL-1804-02-CHG

Page 83HOL-1804-02-CHG

IntroductionThis module will challenge you on Advanced Resource Management tasks.

• My application is sensitive to latency, how do I ensure it gets the resources itneeds to perform properly?

• I created a Resource Pool with the goal of improving performance, butperformance is worse. What did I do wrong?

• I'm concerned my VM isn't configured correctly for vNUMA, how can I check this?

vSphere Client vs vSphere Flash Client

In the vSphere Challenge Lab, you will use both the existing vSphere Web Client (basedon Flash) and the new vSphere Client (based on HTML5). HTML5 is the future directionof the vSphere Client, so you will use it predominantly throughout this lab.

If you feel more comfortable using the vSphere Web Client, a shortcut to it (labeledvSphere Flash Client) is bookmarked within Google Chrome.

1. The default client for the lab is the vSphere Client (based on HTML5). Use theHome button within Google Chrome to access the vSphere Client.

2. A bookmark to the vSphere Flash Client is available within Google Chrome.

Note: As mentioned previously, the default client for this lab will be the vSphere Clientbased on HTML5. Due to the fact that the vSphere Client does not have full featureparity with the vSphere Web Client (based on Flash), there will be some sections whereyou will be directed to use the vSphere Web Client.

HOL-1804-02-CHG

Page 84HOL-1804-02-CHG

Module Switcher

To prepare your lab for the Challenges, you will need to run the Challenge Lab MS(Module Switcher).

1. Double-click on the Challenge Lab MS shortcut located on the Main Consoledesktop.

2. Select Start under Module 5.

Wait for the PowerCLI script to finish before proceeding. Once the script has completed,press Enter to close the PowerCLI window.

HOL-1804-02-CHG

Page 85HOL-1804-02-CHG

My Application is Sensitive to LatencyESXi is optimized for high throughput to minimize virtualization overhead for a wide-range of applications, including business critical applications such as databases.Latency, measures the time it takes to transfer data from one endpoint to another and

is typically measured in milliseconds. Latency-sensitive applications typically includeVoIP services or high-frequency trading, where low response times are critical.

More Information:

• Best Practices for Performance Tuning of Latency-Sensitive Workloads in VMwarevSphere

Open Google Chrome

1. Open Google Chrome using the shortcut on the taskbar.

If you did not Start Module 5 using the Challenge Lab Module Switcher outlined withinthe Introduction of this Module, please Stop and go back to the Introduction of Module 5and follow the directions to Start the Module using the Challenge Lab Module Switcher.

If you already completed this step, please proceed to the next page.

Login to vSphere Flash Client

The Latency Sensitivity feature is not available yet within the vSphere Client (based onHTML5), therefore you must use the vSphere Web Client to complete this challenge.

1. Select the vSphere Flash Client bookmark in Google Chrome.

HOL-1804-02-CHG

Page 86HOL-1804-02-CHG

Login to vSphere Flash Client

1. Check the box "Use Windows session authentication".2. Select Login.

Module 5, Challenge 1

Your Manager has informed you that the 'challenge-02a' virtual machine needs to havethe Latency Sensitivity feature enabled on it. Your challenge is to:

• Enable Latency Sensitivity and ensure all Latency Sensitivityrequirements are met for the virtual machine.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-37002

DO NOT proceed to the next page unless you want to see The Solution to the Challenge.

Module 5, Challenge 1 Solution

To enable Latency Sensitivity on the 'challenge-02a' virtual machine, the following stepsneed to be completed.

• Right-click 'challenge-02a' > Edit Settings > VM Options > Advanced > LatencySensitivity. Change the Latency Sensitivity setting from Normal to High. Whenchanging the Latency Sensitivity setting from Normal to High, notice the warningyou receive concerning CPU Reservation.

Proceed to the next page to walk through this process step-by-step.

HOL-1804-02-CHG

Page 87HOL-1804-02-CHG

Edit challenge-02a

1. Right click on challenge-02a within the Inventory Tree.2. Select Edit Settings.

HOL-1804-02-CHG

Page 88HOL-1804-02-CHG

Examine Virtual Hardware

Examine the current virtual hardware settings for the 'challenge-02a' virtual machine,paying particular attention to the Reservation settings within CPU and Memory.

1. Select VM Options.

HOL-1804-02-CHG

Page 89HOL-1804-02-CHG

Latency Sensitivity

Scroll down to Latency Sensitivity.

1. Use the dropdown to modify the Latency Sensitivity setting from Normal to High.Notice the Check CPU reservation warning. Select the information button to

display a dialog box stating the following:

For best performance, High Latency Sensitivity requires you to set 100% CPUreservation for this VM.

2. Select OK.

Review Virtual Hardware

Review the virtual machine virtual hardware settings to ensure the proper Reservationshave been set.

1. Right click on 'challenge-02a'.2. Select Edit Settings.

HOL-1804-02-CHG

Page 90HOL-1804-02-CHG

Review Virtual Hardware

1. Expand CPU and Memory.2. Notice that setting Latency Sensitivity to High does not automatically set

Reservations for CPU and Memory, therefore you will need to complete theprocess of enabling Latency Sensitivity on the 'challenge-02a' virtual machine.

HOL-1804-02-CHG

Page 91HOL-1804-02-CHG

Set Reservations

1. Select the CPU Reservation drop-down and select Maximum to configure theMaximum CPU Reservation for the virtual machine. For 'challenge-02a', that is2880 MHz of CPU.

2. Select the Memory Reservation drop-down and select Maximum to configure theMaximum Memory Reservation for the virtual machine. For 'challenge-02a', thatis 512 MB of Memory.

More Information

While you only receive a warning for CPU Reservation when setting Latency Sensitivityto High, it is highly recommended to set memory reservation to 100% as well. Withoutthe memory reservation, vMotion will fail. If the virtual machine is powered-off, itcannot be powered-on until the reservation is set.

HOL-1804-02-CHG

Page 92HOL-1804-02-CHG

If multiple virtual machines are latency sensitive, spread them across hosts and tagthem as Latency Sensitive. This will avoid over-utilization of hosts and results in betterresource distribution.

If you want to learn more about running latency sensitive applications on vSphere,consult these white papers:

• https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/latency-sensitive-perf-vsphere55-white-paper.pdf

• https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/vmw-tuning-latency-sensitive-workloads-white-paper.pdf

This completes this challenge.

Proceed to the next page to continue with Module 5 or use the Table of Contents toselect a different challenge or module.

HOL-1804-02-CHG

Page 93HOL-1804-02-CHG

I Created a Resource Pool and nowPerformance is WorseResource pools allow you to delegate control over resources of a host (or a cluster), butthe benefits are evident when you use resource pools to compartmentalize all resourcesin a cluster.

Using resource pools can result in the following benefits:

• Flexible hierarchical organization: Add, remove, or reorganize resource poolsor change resource allocations as needed.

• Isolation between pools and sharing within pools: Top-level administratorscan make a pool of resources available to a department-level administrator andany allocation changes that are internal to one departmental resource pool do notunfairly affect other unrelated resource pools.

• Access control and delegation: When a top-level administrator makes aresource pool available to a department-level administrator, that administratorcan then perform all virtual machine creation and management within theboundaries of the resources to which the resource pool is entitled by the currentshares, reservation, and limit settings. Delegation is usually done in conjunctionwith permissions settings.

• Separation of resources from hardware: If you are using clusters enabledfor DRS, the resources of all hosts are always assigned to the cluster. That meansadministrators can perform resource management independently of the actualhosts that contribute to the resources. If you replace three 2GB hosts with two3GB hosts, you do not need to make changes to your resource allocations. Thisseparation allows administrators to think more about aggregate computingcapacity and less about individual hosts.

• Management of sets of virtual machines running a multitier service:Group virtual machines for a multitier service in a resource pool. You do not

need to set resources on each virtual machine. Instead, you can control theaggregate allocation of resources to the set of virtual machines by changingsettings on their enclosing resource pool.

Open Google Chrome

1. Open Google Chrome using the shortcut on the taskbar.

HOL-1804-02-CHG

Page 94HOL-1804-02-CHG

Login to vSphere Client

We will use the vSphere Client in this challenge.

1. Select the check box "Use Windows session authentication".2. Select Login.

FavoriteVMs Resource Pool

Browse the Inventory Tree. Notice the 'FavoriteVMs' Resource Pool has already beencreated. Additionally, the 'challenge-01a' virtual machine has already been moved intothe 'FavoriteVMs' Resource Pool.

HOL-1804-02-CHG

Page 95HOL-1804-02-CHG

Remote Desktop

Open a remote desktop to both 'challenge-01a' and 'challenge-04a' using theshortcuts located on the Main Console desktop.

Start Benchmarking Tool

1. A shortcut to the benchmarking tool, SPECjbb, is located on the desktop of both'challenge-01a' and 'challenge-04a'.

2. Double-click on the SPECjbb shortcut to open the benchmark tool.3. Select Start Benchmark on both 'challenge-01a' and 'challenge-04a'.4. A widget has been placed on the desktop of both virtual machines that will allow

you to monitor both CPU and Memory during the benchmark.

HOL-1804-02-CHG

Page 96HOL-1804-02-CHG

Module 5, Challenge 2

Modify the window size of the remote desktop sessions show that you can compare theperformance results. Notice that 'challenge-04a' is performing better than'challenge-01a'.

Your challenge is to

• Determine why 'challenge-04a' is performing better than 'challenge-01a'and resolve the issue so that both virtual machines are performingequally.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-37002

HOL-1804-02-CHG

Page 97HOL-1804-02-CHG

DO NOT proceed to the next page unless you want to see the solution to the challenge.

Module 5, Challenge 2 Solution

Both 'challenge-01a' and 'challenge-04a' have the same resource configuration,therefore the issue must be related to the 'FavoriteVMs' Resourcee Pool.

1. Right-click on the FavoriteVMs Resource Pool in the Inventory Tree and selectEdit Resource Settings.

If you look closer at the 'FavoriteVMs' Resource Pool, you will notice that Shares havebeen configured for the resource pool. Since the 'challenge-01a' virtual machine islocated within the 'FavoriteVMs' Resource Pool, that virtual machine does not utilizeresources available to it, which includes the Custom Shares setting.

2. Select OK to close the Edit Resource Settings window.

HOL-1804-02-CHG

Page 98HOL-1804-02-CHG

Shares

1. Right-click on 'challenge-04a' and select Edit Settings.

The 'challenge-04a' virtual machine has a Shares setting of Normal. Look closely at theShares setting for 'challenge-04a' and you will notice a greyed-out Shares value of 2000.Toggle the Shares setting on 'challenge-04a' to Low and High. You will see the values

changing based on the selected setting. Notice a setting of Low changes the Sharesvalue to 1000, and a setting of High changes the Shares value to 4000. Do not modifythe Shares setting at this time.

2. Select OK to close the Edit Settings window.

Impact of Resource Pool

Because the 'challenge-01a' virtual machine is located within the FavoriteVMs ResourcePool, it inherits the CPU Shares value of 1000. The 'challenge-04a' virtual machine hasa Shares setting of Normal and after investigating further, the Normal setting has aShares value of 2000.

This would explain why 'challenge-01a' is performing roughly half as well as'challenge-04a'.

To resolve the issue you could do one of the following:

• Modify the CPU Shares setting of the FavoriteVMs Resource Pool to match that of'challenge-04a'. In this instance, you would either change the CPU Shares settingof Custom to Normal or change the CPU Shares value from 1000 to 2000.

• You could remove 'challenge-01a' from the 'FavoriteVMs' Resource Pool.

HOL-1804-02-CHG

Page 99HOL-1804-02-CHG

• You could modify the CPU Shares setting of 'challenge-04a' to match that of the'FavoriteVMs' Resource Pool. In this instance, you would change the CPU Sharessetting from Normal to Low or set a Custom value of 1000. However, with thissolution, the performance of 'challenge-04a' would be cut in half, therefore this isnot the recommended solution as your goal should always be to improve theperformance of your virtual workloads.

This completes this challenge.

Proceed to the next page to continue with Module 5 or use the Table of Contents toselect a different challenge or module.

HOL-1804-02-CHG

Page 100HOL-1804-02-CHG

vNUMA TroubleshootingNUMA is becoming increasingly more important to ensure workloads, such as databases,allocate and consume memory within the same physical NUMA node that the vCPUs arescheduled. When a virtual machine is sized larger than a single physical NUMA node, avNUMA topology is created and presented to the guest operating system. This virtualconstruct allows a workload within the virtual machine to benefit from physical NUMA,while continuing to support functions like vMotion.

More Information:

• Virtual Machine CPU and vNUMA Rightsizing - Rules of Thumb• How ESXi NUMA Scheduling Works

Open challenge-04a Remote Desktop

If the 'challenge-04a' Remote Desktop session is not already open, double-click on the'chg-04a.DRP' desktop shortcut to open a remote desktop session to the virtual machine'challenge-04a'.

Examine NUMA

1. Double-click on the NUMA coreinfo shortcut located on the desktop of the'challenge-04a' virtual machine.

HOL-1804-02-CHG

Page 101HOL-1804-02-CHG

Examine vNUMA

Notice that currently 'challenge-04a' is mapped to a single NUMA Node. You will alsosee the NUMA configuration using the tools provided by Microsoft Windows.

Open Server Manager

Coreinfo is a third party tool that has been installed on 'challenge-04a' make it easy toview the NUMA architecture.

You can also natively examine the NUMA configuration on Microsoft Windows Server byperforming the following:

1. Open Server Manager using the shortcut on the taskbar.

HOL-1804-02-CHG

Page 102HOL-1804-02-CHG

Open Resource Monitor

1. Select Tools.2. Select Resource Monitor.

Resource Monitor

1. Select the CPU tab.

HOL-1804-02-CHG

Page 103HOL-1804-02-CHG

2. Select the Views drop-down menu.3. Select Small.4. You can see that Windows 2012 detects two CPUs. There is no mention of NUMA

nodes.

vNUMA

As of vSphere 6.5, changing the corespersocket value no longer influences vNUMA orthe configuration of the vNUMA topology. The configuration of vSockets andcorespersocket only affects the presentation of the virtual processors to the guest OS(generally required for licensing). vNUMA will automatically determine the propervNUMA topology to present to the guest OS based on the underlying ESXi host. Forexample, if you create a 4-vSocket virtual machine with 4 corespersocket (total of 16vCPU) on a dual-socket, 16-core physical ESXi host, prior to vSphere 6.5, vNUMA wouldhave created 4 vNUMA nodes based on the corespersocket setting. As of vSphere 6.5,the guest OS will still see 4 sockets and 4 cores per socket, but vNUMA will now onlycreate 1 vNUMA node for the entire virtual machine since it can be placed in a singlephysical NUMA node. This new disconnection of the corespersocket setting with vNUMAallows vSphere to determine the best vNUMA topology automatically in allcircumstances.

To revert to the earlier behavior in vSphere 6.0, use the advanced setting:

numa.FollowCoresPerSocket = 1

More Information concerning vNUMA can be found in the following articles:

• https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/performance/whats-new-vsphere65-perf.pdf

• https://blogs.vmware.com/performance/2017/03/virtual-machine-vcpu-and-vnuma-rightsizing-rules-of-thumb.html

Module 5, Challenge 3

HOL-1804-02-CHG

Page 104HOL-1804-02-CHG

In this challenge, the Database Manager is not comfortable with the new NUMA settingas it relates to the Database servers. Therefore, the Database Manager would preferthe NUMA behavior mimic that of vSphere 6.0.

Your challenge is to:

• Modify the settings needed to create two NUMA nodes on'challenge-04a'.

Need a Hint?

You can also view hints on the VMware Technology Network Communities here:

https://communities.vmware.com/docs/DOC-37002

DO NOT proceed to the next page unless you are ready to view the solution to thischallenge.

Module 5, Challenge 3 Solution

If the Hot Add vCPU virtual hardware setting is enabled, then the architecturepresented to the virtual machine will be uniform memory access (UMA) only.

To solve this issue:

1. Power off the 'challenge-04a' virtual machine.2. Within the vSphere Web Client, right click on 'challenge-04a', select Edit

Settings. Within CPU, deselect Enable CPU Hot Add.3. Select OK.4. Power on the challenge-04a. Did the NUMA Architecture change on

'challenge-04a'?

Additional steps are needed to force 'challenge-04a' to use 2 NUMA Nodes. We willcomplete the configuration of 'challenge-04a' in the upcoming steps.

You should keep the Enable CPU Hot Add setting disabled unless you know that youneed it.

Note that the VM is configured with 2 vCPUs and 1 cores per socket. Typically, youshould leave Cores per Socket = 1 which results in the best performance.When Cores per Socket is left at its default value of 1, this allows ESXi to automatically

choose the optimal vNUMA configuration for the VM based on the physical server, whichgenerally results in the best performance. Leave Cores per Socket = 1 unless you havea very specific reason to do otherwise, such as for licensing purposes.

If your guest OS does not see a vNUMA architecture and you think it should, check thefollowing:

HOL-1804-02-CHG

Page 105HOL-1804-02-CHG

By default, vNUMA is enabled only for virtual machines with more than eightvCPUs. You can enable vNUMA for virtual machines with eight or fewer vCPUs bychanging the VM setting numa.vcpu.min from its default value of 9 to the number ofvCPUs in the virtual machine. This setting controls the minimum number of vCPUsrequired to enable vNUMA. This setting was modified on 'challenge-04a'.

vNUMA requires virtual hardware version 8 or later.

Other factors that may completely disable NUMA (for the host and the VM) are BIOSsettings such as enabling node interleaving. Node Interleaving is generally disabledby default, but if you enable it, it will present a UMA architecture to the ESXi host.

Open Google Chrome

1. Open Google Chrome using the shortcut on the taskbar.

Open vSphere Flash Client

1. Select the vSphere Flash Client bookmark within Google Chrome.

Login to vSphere Flash Client

1. Select the check box "Use windows session authentication".2. Select Login.

HOL-1804-02-CHG

Page 106HOL-1804-02-CHG

Power Off challenge-04a

Before proceeding to the next step, Power Off the 'challenge-04a' virtual machine. If'challenge-04a' is already Powered-Off, you can proceed to the next step.

1. Right-click on 'challenge-04a'.2. Select Power to expand the Power context menu.3. Select Power Off.

HOL-1804-02-CHG

Page 107HOL-1804-02-CHG

Edit Settings

1. Right-click on 'challenge-04a' within the Inventory Tree.2. Select Edit Settings.

HOL-1804-02-CHG

Page 108HOL-1804-02-CHG

Advanced VM Options

1. Select VM Options.2. Expand Advanced.3. Select Edit Configuration.

Advanced VM Options

The numa.vcpu.maxPerVirtualNode Advanced Settings needs to be modified in orderto enable multiple NUMA nodes on 'challenge-04a'. Change thenuma.autosize.vcpu.maxPerVirtualNode value to 1. If you don't modify this settingfor 'challenge-04a', the virtual machine will fit within a single NUMA node and will be

HOL-1804-02-CHG

Page 109HOL-1804-02-CHG

presented as such . With the maxPerVirtualNode value set at 1, we are forcing NUMA torecognize NUMA in multiples of 1, as opposed to 2 or 4.

2 NUMA Nodes

Check the NUMA Node configuration after modifying the "maxPerVirtualNode" setting todetermine if a 2nd NUMA Node was successfully created on the 'challenge-04a' virtualmachine. Use the desktop 'NUMA coreinfo' desktop shortcut once again to view theNUMA Node configuration.

Great job, the 'challenge-04a' virtual machine can now take advantage of multipleNUMA nodes.

Go to Server Manager > Resource Monitor and select the CPU tab. Notice thatNUMA Node 0 and NUMA Node 1 are now visible within Resource Monitor.

If you're curious to see if both NUMA nodes will be utilized, use the SPECjbb benchmarkapplication located on the desktop to Start a Benchmark. View NUMA Node usagewithin Resource Monitor to ensure both NUMA Nodes are being utilized.

If you DO NOT see 2 NUMA Nodes, be sure that you deselected Enable CPU HotAdd within the virtual machine settings.

HOL-1804-02-CHG

Page 110HOL-1804-02-CHG

Stop Module 5

Before you celebrate with colleagues, open the Challenge Lab MS (Module Switcher)located on the desktop of the Main Console.

1. Double-click on Challenge Lab MS (Module Switcher) shortcut located on thedesktop of the Main Console.

2. Select Stop under Module 5.

Wait for the PowerCLI window to close before proceeding to the next step.

You've Finished Module 5

This concludes Module 5, Advanced Resource Management. We hope you enjoyedtaking it. Please do not forget to fill out the survey when you are finished.

If you have time remaining, you can proceed to a different Module that interests you.Click on "More Options - Table of Contents" to quickly jump to a different Challenge

within the Module.

• Module 1 - Let's Start with the Basics (30 minutes)• Module 2 - Basic Operations Management (30 minutes)• Module 3 - Basic Resource Management (30 minutes)• Module 4 - Advanced Operations Management (45 minutes)• Module 5 - Advanced Resource Management (45 minutes)

HOL-1804-02-CHG

Page 111HOL-1804-02-CHG

Module Hints

HOL-1804-02-CHG

Page 112HOL-1804-02-CHG

Module 1 - Let's Start with the BasicsModule 1, Challenge 1, Hint

The challenge is to migrate the 'challenge-01a' virtual machine from ESXi host 'esx-01a'to 'esx-04a', 'esx-05a' or 'esx-06a'. Why not 'esx-03a'? Try to determine the similaritiesbetween 'esx-01a' and 'esx-03a' and differences between between 'esx-01a' andesx-03a' and the hosts your attempting to migrate 'challenge-01a' to.

Bonus Hint: Examine the error message you receive when attempting to migrate the'challenge-01a' virtual machine to ESXi host(s) 'esx-04a', 'esx-05a' or 'esx-06a'.

Return to Module 1, Challenge 1

Module 1, Challenge 2, Hint

Examine all the networking properties for 'challenge-02a' within vCenter Serverincluding the virtual NIC, port group and virtual switch. You may need to compare thesettings of 'challenge-02a' to another challenge virtual machine to determine where theerror is.

Return to Module 1, Challenge 2

HOL-1804-02-CHG

Page 113HOL-1804-02-CHG

Module 2 - Basic OperationsManagementModule 2, Challenge 1 Hint

A couple of hints that will help you down the path of solving this challenge:

• You will need to download the VMware Tools installation files from one of the ESXihosts to the Main Console.

• You will need to create a folder within a shared vSphere datastore for the VMwareTools installation files.

• You will need to use 'WinSCP' to copy the VMware Tools installation files to afolder within a shared datastore.

Return to Module 2, Challenge 1

Module 2, Challenge 2 Hint

Look closely at line 3, character 1 of the 'Get-VM-Snaphshots' PowerCLI script. That iswhere the syntax error is. Look for any duplicate commands within the script as thereshould only be unique commands within the script.

Return to Module 2, Challenge 2

HOL-1804-02-CHG

Page 114HOL-1804-02-CHG

Module 3 - Basic ResourceManagementModule 3, Challenge 1 Hint

Look closely and compare the resource settings for both 'challenge-01a' and'challenge-04a' including CPU and Memory. In order for 'challenge-01a' to be performingpoorly when compared to 'challenge-04a' with both running the same benchmarkingapplication, there must be a resource configuration on 'challenge-01a' and/or'challenge-04a' that is causing the performance behavior.

Return to Module 3, Challenge 1

Module 3, Challenge 2 Hint

There are multiple ways to alleviate the memory pressure being put on 'esx-01a'. Thereare 5 other ESXi hosts within the cluster that do not have memory pressure, thereforeperhaps using one of the other ESXi hosts within the cluster. Also, it's mentioned thatthe 'memhog' virtual machine was started by accident, therefore you could take actionagainst that virtual machine.

Return to Module 3, Challenge 2

HOL-1804-02-CHG

Page 115HOL-1804-02-CHG

Module 4 - Advanced OperationsManagementModule 4, Challenge 1, Hint

In order to assign unqiue permissions to a particular user, it's much easier to create aRole first, then assign that Role to the user. You define the requested permissions withinthe Role. A role provides flexibility for the future. If permissions need to be modified,you can modify the role as opposed to modifying permissions on the user object. Also, ifmore than one user needs the same permission, you can assign a Role to multiply usersas opposed to assigning permissions to individual users.

Return to Module 4, Challenge 1

Module 4, Challenge 2 Hint

Module 4, Challenge 3 Hint

Within the 'Production Host Profile' Host Profile, details are provided as to why the ESXihost 'esx-05a' is not compliant. You may need to look deeper within the Compliancewindow to determine why it is not compliant.

Return to Module 4, Challenge 3

HOL-1804-02-CHG

Page 116HOL-1804-02-CHG

Module 5 - Advanced ResourceManagementModule 5, Challenge 1 Hint

These hints will help you solve the Latency Sensitivity challenge:

• The Latency Sensitivity setting is located under VM Options.• A CPU and Memory Reservation is required for enabling Latency Sensitivity on a

virtual machine.

Return to Module 5, Challenge 1

Module 5, Challenge 2 Hint

First, examine the resource settings of both the 'challenge-01a' and 'challenge-04a'virtual machines. Are they both configured the same or does one have more/less CPUand/or Memory that could be causing the difference in performance? Also, look closelyat the configuration of the 'FavoriteVMs' Resource Pool. Is the Resource Pool configuredin such a way that would cause the difference in performance.

You could also move the 'challenge-01a' virtual machine out of the Resource Pool tofurther determine if the Resource Pool is the cause of the difference in performance.Remember to allow the benchmark tool to run a few cycles before determining if the

Resource Pool is the cause of the difference in performance or not.

Return to Module 5, Challenge 2

Module 5, Challenge 3 Hint

These hints will help you solve the vNUMA Troubleshooting challenge:

• You will need to Power Off the 'challenge-04a' virtual machine. Why? You willneed to edit the Configuration Parameters of the virtual machine using EditConfiguration within VM Options.

• There is an Advanced Setting that can produce the wanted vNUMA output.

Return to Module 5, Challenge 3

HOL-1804-02-CHG

Page 117HOL-1804-02-CHG

ConclusionThank you for participating in the VMware Hands-on Labs. Be sure to visithttp://hol.vmware.com/ to continue your lab experience online.

Lab SKU: HOL-1804-02-CHG

Version: 20180202-122348

HOL-1804-02-CHG

Page 118HOL-1804-02-CHG