Step-by-step for deploying a SDNv2 using VMM - Part 2

In the previous post, we talked about how to prepare a SDN lab environment. In this post, we will continue and deploy NC in the lab environment. Most of the steps here are same as the following official validation guides. However I will highlight some of the error-prone steps and provide step-by-step screenshots. Hopefully it could help you walk through the SDN deployment.

Add Hyper-V Hosts to the VMM


  1. Open VMM Console, click "Fabric" and expand the "Servers > All Hosts".
  2. Right click the "All Hosts" and select "Add Hyper-V Hosts and Clusters"
    NC-VMM1
  3. Select "Windows Server computer in a trusted Active Directory domain".
    NC-VMM2
  4. In the next page, I created a Run As account, which is also a member domain admins group (That's not recommended for production environment.).
    NC-VMM6
  5. Key in the computer name of the each Hyper-V hosts. Then click "Next".
    NC-VMM7
  6. Click the button "Select All", then click "Next".
    NC-VMM8
  7. Select the checkbox "Re-associate this host with this VMM environment" and add the C:\ as the VM placement path.
    NC-VMM9
  8. On next page confirm the settings and click "Finish".
    NC-VMM10
  9. Now you could see VMM is adding those Hyper-V hosts to the VMM environment.
    NC-VMM11
  10. After the above 4 jobs complete, you would see 4 Hyper-V hosts in the "All Hosts" group.
    NC-VMM12

 

Create Logical Network and Logical Switch for "MGMT"


  1. Right click "Networking > Logical Network" and select "Create Logical Network".
    NC-VMM13
  2. Type the name "MGMT".
    NC-VMM14
  3. Select the checkbox "Create a VM network with the same name to allow virtual machines to access this logical network directly.". Then click "Next".
    NC-VMM15
  4. Select the host group "All Hosts" and add the VLAN (ID=0, IP Subnet = 192.168.2.0/24).
  5. Confirm the settings and click "Finish".
    NC-VMM17
  6. Right click the logical network you just created. Select "Create IP Pool".
    NC-VMM18
  7. Give it a name "IPPool-MGMT". Click "Next".
    NC-VMM19
  8. Accept the default Network Site, click "Next".
  9. Configure the IP pool start from 192.168.20.51 and end at 192.168.20.100. Then click "Next".
  10. Insert the default gateway address 192.168.20.1. Then click "Next".
  11. Insert the DNS server address 192.168.20.3. Then click "Next".
  12. You don't need specify WINS. Just click "Next" and confirm the settings on the next page. Last click "Finish".
  13. Right click "Network > Port Profiles", select "Create Hyper-V Port Profile".
    NC-VMM25
  14. Give it a name "Uplink-MGMT". Select the option "Uplink port profile".
  15. Select the site "MGMT_0". DO NOT select the checkbox "Enable Hyper-V Networking Virtualization". NC-VMM27
  16. On the confirm the settings page, click "Finish".
  17. Right click "Networking > Logical Switch" and select "Create Logical Switch".
    NC-VMM29
  18. Type the name "SDN-Switch" and Select Uplink mode "Embedded Team"
  19. On the next page, accept the default setting and click "Next".
    NC-VMM31
  20. Clear the checkbox "Microsoft Window Filtering Platform". New SDN stack uses Virtual Filtering Platform (VFP) from Azure instead of the default Windows Filtering Platform.
    NC-VMM32
  21. In this test, I don't use any virtual port. So I skip the Virtual Port page.
  22. On the Uplink page, click "Add > Existing Uplink Port Profile".
    NC-VMM34
  23. Select the uplink profile we just created. It's Uplink-MGMT in my case.
  24. Click the button "New Virtual Network Adapter". Type the name "MGMT". Select the checkbox "This virtual network adapter will be used for host management" and "Inherit connection settings from host network adapter". Since I have DHCP server available in the management VLAN, I selected "DHCP" as my IP address configuration. If you don't have DHCP, you may select "Static" and select the corresponding IP pool (e.g., "IPPool-MGMT").
  25. Right click one of the Host and select "Properties".
    NC-VMM37
  26. Click "Virtual Switch" and click the button "New Virtual Switch". Then select "New Logical Switch".
    NC-VMM38
  27. Bind the logical switch to the corresponding NICs. In my case, I have one NIC on the host. If you have multiple NICs, you may add them to the "Physical Adapters" list.
  28. Use the same procedure you may bind logical switch "SDN-Switch" to the rest hosts.
  29. Remove the VLAN ID from all the physical NICs which bind to the above logical switch. 1

 

Create NC Network Service


  1. Copy a syspreped Windows Server 2016 image to the share folder of VMM VM \\localhost\MSSCVMMLibrary\VHDs. Volume License (VL) image is recommended. Otherwise you would have to modify the service template later and input the product key.

  2. Download the SDN VMM template. Unzip the compressed file and copy the folder GW, NC and SLB to the share folder \\localhost\MSSCVMMLibrary\

  3. Run the script below create a self-signed certificate and export two version of the certificate (cer and pfx) to C:\. Then copy the exported certificate files to the corresponding folders.

     
    
     $cert = New-SelfSignedCertificate -KeyUsageProperty All -Provider "Microsoft Strong Cryptographic Provider" -FriendlyName "MultiNodeNC" -DnsName @("192.168.2.34")
    Export-Certificate -Cert $cert -FilePath c:\MultiNodeNC.cer
    $PlainPassword = "123"
    $SecurePassword = $PlainPassword | ConvertTo-SecureString -AsPlainText -Force
    Export-PfxCertificate -Cert $cert -FilePath c:\MultiNodeNC.pfx -Password $securepassword -ChainOption BuildChain
    copy C:\MultiNodeNC.pfx \\localhost\MSSCVMMLibrary\ServerCertificate.cr\
    copy C:\MultiNodeNC.cer \\localhost\MSSCVMMLibrary\TrustedRootCertificate.cr\
    copy C:\MultiNodeNC.cer \\localhost\MSSCVMMLibrary\NCCertificate.cr\
    
  4. Click "Library" in VMM console and browse to "Template > Service Template". Click the button "Import Template"
    NC-VMM44

  5. Browse to \\localhost\MSSCVMMLibrary\NC and select "Network Controller Production Generation 2 VM.xml". If you don't have 3+ compute nodes, you may select "Network Controller Standalone Generation 2 VM.xml" or "Network Controller Standalone Generation 1 VM.xml", which depends on your syspreped image is Gen 1 VM or Gen 2 VM.

  6. On the Configure Reference page, map the WinServer.vhdx to the Syspreped image you copied to \\localhost\MSSCVMMLibrary\VHDs\. In addition, you may also need to map other resource to the corresponding folder under \\localhost\MSSCVMMLibrary\ if they were not recognize automatically.
    NC-VMM46

  7. Then click the "Import".
    NC-VMM47

  8. If your syspreped image is based on Volume License image, you may jump to step 12.

  9. (Optional) If your syspreped image is not based on Volume License image, please right click the "Network Controller Production" and select "Open Designer".
    NC-VMM52

  10. Right click the "Windows Server Network Controller" and select "Properties".
    NC-VMM53

  11. In Windows Server Network Controller Properties window, click "OS Configuration" and key in a valid product key or 6XBNX-4JQGW-QX6QG-74P76-72V67. If you are not using a Volume Licensed VHD\VHDX or if the VHD\VHDX is not supplied the Product Key using an Answer file, then the deployment will stop at the Product Key page during network controller virtual machine(s) provisioning.
    NC-VMM54

  12. Right click the "Network Controller Production" and select "Configure Deployment".
    NC-VMM58

  13. Type the name of the service. In this case, the name is "NC-VMM-RTM". Select the logical network "MGMT". Then click OK.

  14. Configure the settings for the service deployment. For local Admin, you may need to create a new Run As account if you don't have one for local admin. The username is ".\administrator".
    NC-VMM61

  15. In my case, I didn't create security group for NC Client and NC Admin. I just used Domain Users group and Domain Admins instead. As  for the diagnostic logging settings, they're optional. The important is the format of RestIPaddress is 192.168.20.34/24 instead of just IP address.  The format of MgmtDomainAccountName is "<domainname>\<username>" instead of just "<username">.

  16. Then click the button "Refresh". Now you could click the button "Deploy Service".

  17. In the prompt windows, click "Deploy".
    NC-VMM65

  18. Later on you might find the deployment complete successfully.

  19. Click Fabric in the VMM console. Navigate to "Networking > Network Service". Right click "Network Service" and select "Add Network Service".
    NC-VMM72

  20. Click "Next" on the "Getting Started" page.
    NC-VMM73

  21. Give the network service a name, "NC" for example.
    NC-VMM74

  22. Select Manufacturer: Microsoft and Model: Microsoft Network Controller.
    NC-VMM75

  23. Still use "Run As" as the Run As account.
    NC-VMM76

  24. Connection String is
    serverurl=https://192.168.20.34;SouthBoundIPAddress=192.168.20.34;servicename=NC-VMM-RTM 

  25.  On the next page, select the checkbox "These certificate have been reviewed and can be imported to the trusted certificate store." Then click "Next"
    NC-VMM78

  26. Click Scan Provider. Then click Next.
    NC-VMM80

  27. Select host group "All Hosts". Click "Next".
    NC-VMM81

  28. Click "Finish".

  29. Please make sure the job "Add Network Service device" complete successfully.
    2

 

Create Logical Network for "HNV"


 

  1. Right click "Logical Network" and select "Create Logical Network".
    NC-VMM84
  2. Select the checkbox "All new VM networks created on this logical network to use network virtualization" and "Managed by Microsoft Network Controller".
    NC-VMM85
  3. On the next page, associate the VLAN (ID=201, IP Subnet=192.168.21.0/24) to the logical network site.
  4. Click Finish.
    NC-VMM87
  5. Right click new created HNV logical network and select "Create IP Pool".
    NC-VMM88
  6. Name is "IPPool-HNV". Click "Next".
    NC-VMM89
  7. Accept the default Network Site, click "Next".
  8. Configure starting IP address as 192.168.21.51 and ending IP address is 192.168.21.100.
  9. Default gateway is 192.168.21.1.
  10. DNS server is 192.168.20.3.
  11. You don't need to configure WINS server. On the "Confirm the settings" page, click "Finish".
  12. Navigate to "Networking > Port Profiles". Right click the new created uplink profile and select Properties.
    NC-VMM96
  13. Select the checkbox "HNV_0" to bind the network site "HNV_0" to the uplink profile, which means Hyper-V hosts will be able to access the logical network thru logical switch "MGMT-Switch".
    NC-VMM97

Validation


Test Case 1: East-West Communication

  1. Click "VM and Services" in the VMM Console. Then right click "VM Networks" and select "Create VM Network".
    NC-VMM98
  2. Give it a name "VNET-SLB".
  3. Accept the default isolation setting and click "Next".
    NC-VMM100
  4. Add a VM Subnet  "SUB1" and set its subnet as "10.0.0.0/24". Then click "Next".
    NC-VMM101
  5. Don't change the setting on "Connectivity" page at this moment. Click "Next".
    NC-VMM102
  6. Click "Finish".
  7. Right click "VNET-SLB" and select "Create IP Pool".
  8. You may give it a name here (e.g., CATPool-VNET-SLB)
  9. Accept the default IP address space, click "Next".
    NC-VMM106
  10. Set default gateway to 10.0.0.1.
    NC-VMM107
  11. Set DNS server to 192.168.20.3.
  12. You don't need to configure WINS server. Click "Next". On the "Confirm the settings" page, click "Finish".
  13. Click "Library" in the VMM Console and navigate to "Library Servers > INFRA-VMM > MSSCVMMLibrary > VHDs". Right click the Syspreped Image you copied before and select "Create VM Template".
  14. Give the new VM template a name (E.g., "Windows Server 2016"). In my case, I used Gen 2 template. So I also select the generate 2. Click "Next".
    NC-VMM112
  15. On the Configure Hardware page, select Hyper-V as Cloud Capability.
    NC-VMM113
  16. Change the memory to 2048GB.
    NC-VMM114
  17. Connect the above new create VM network "VNET-SLB" and subnet "SUB1".
  18. Configure the default password and product key.
    NC-VMM117
  19. Don't change any setting in the next two pages (Application Configuration and SQL Server Configuration). On the Summary page, click "Create".
    NC-VMM120
  20. Right click the new created VM template and select "Create Virtual Machine".
    NC-VMM121
  21. Give the VM a name "TESTVMSLB1".
  22. Accept the default settings in all the rest pages in the wizard. On Summary page select checkbox "Start the virtual machine after deploying it". Then click "Create".
  23. Follow the same procedure to create another VM "TESTVMSLB2" in a different Hyper-V host.
    NC-VMM129
  24. After the above two VM provisioned successfully, you may connect them and disable the Windows Firewall (If your Syspreped image didn't disable it before). Then try to ping each other and make sure east-west communication is ok.
    NC-VMM130
  25. You may run the cmdlet "Get-PACAMapping" on the host and make sure the PA address had already been assigned.

 

To Be Continued...

Now you had already deploy NC successfully with VMM. In the next post we will walk through the steps to deploy SLB and enable NAT for VMs.

Comments

  • Anonymous
    June 03, 2016
    I can not Number 13I can not choose HNV and MGMT Network at th same timeHow can do that?