WilliamLam.com

  • About
    • About
    • Privacy
  • VMware Cloud
  • Tanzu
    • Application Modernization
    • Tanzu services
    • Tanzu Community Edition
    • Tanzu Kubernetes Grid
    • vSphere with Tanzu
  • Home Lab
  • Nested Virtualization
  • Apple
You are here: Home / Automation / Automated Nested Lab Deployment on SDDC Part 4: Oracle Cloud VMware Solution

Automated Nested Lab Deployment on SDDC Part 4: Oracle Cloud VMware Solution

10.30.2020 by William Lam // Leave a Comment


In this final blog series, we are now going to take a look at deploying our Nested Lab in an Oracle Cloud VMware Solution environment. Similiar to GCVE, we also will have the ability to run Nested vSAN on top of the physical vSAN within OCVS and by default, customers are provided with the full administrator credentials. For networking, customers also have full access to the NSX-T Manager instance and this means that MAC Learning can be enabled and will allow inner-guest workloads will be able to communicate properly within and outside of the Nested Lab deployment.

Disclaimer: Nested ESXi is not officially supported on Oracle Cloud VMware Solution or by VMware.

Pre-Requirements:

  • 3-Node SDDC already deployed
  • Bastion / Jumphost which has network connectivity to the SDDC Management network. In my setup, a Windows Server VM was deployed using Oracle Cloud Infrastructure Compute (OCI) service which also provided a local DNS (for Hybrid DNS configuration setup, please see to this blog post) server for my nested environment. You will also need to configure access from the Windows VM to your SDDC
  • PowerCLI 12.x installed on the Bastion/Jumphost
  • Download the desired version of OVAs (vCenter Server Appliance (VCSA) and Nested ESXi Appliance)

Step 1 - In the OCVS, locate your SDDC and retrieve the NSX-T Manager URL and credentials.


Step 2 - Next, login to NSX-T Manager with admin and the credentials that was configured when creating the SDDC. Under Networking, select Segment Profiles and create a new Segment Profile called Nested with the MAC Learning feature enabled.

Step 3 - Under Segments, either select an existing or create a new NSX-T Segment with the desired network configurations and make sure to select our custom Nested for MAC Discovery section while leaving the defaults for the other profiles.


Step 4 - Next, we need to retrieve the IP Address of our active NSX-T Edge by navigating to Networking->Virtual Cloud Networks (VCN) and the VCN that was created while setting up your SDDC. In our example, the private address is 10.2.8.131 and make a note of this as we will need it in the next step.


Step 5 -We now need to create a couple of NAT rules within the NSX-T Manager to ensure we have proper connectivity from our NSX-T segment to our SDDC. Navigate to Advanced Networking->NAT and create the following two rules where 10.2.0.0/20 is the SDDC CIDR block and 10.2.8.131 is the NSX-T Edge IP:

Action Protocol Source IP Source Ports Destination IP Destination Ports IP Ports
NO_NAT Any 0.0.0.0/0 Any 10.2.0.0/20 Any Any Any
SNAT Any Any Any 0.0.0.0 Any 10.2.8.131 Any


Step 6 - Within the VCN, we need to create and/or edit a new Internal route table allowing our 192.168.1.0/24 network to NSX-T Edge as shown in the screenshot below.


Step 7 - Within the VCN, we need to edit the NSX Edge Uplink 1 route table with the following configuration as shown in the screenshot below.


After saving these changes, you are now ready to begin the deployment.

Step 7 - Download the nested-sddc-lab-deployment.ps1 script and transfer that and the OVAs to the Bastion/Jumphost.

Step 8 - Update the script (details can be found on the Github repo) that reflects your environment. For those who have used my previous Automated Nested Lab Deployment scripts, this should feel very simliar. The only key difference is specifying the SDDC Provider ID which the script will properly handle the uniqueness for each respective VMware Cloud SDDC environment.

Step 9 - Once you have saved your changes, you can execute the script and a summary output as shown in the screenshot below will be provided prior to actually starting the deployment.


If everything was setup correctly, the script will take ~20minutes to deploy a fully configured VCSA with 3 x ESXi VM (default) and attached to our NFS VM to provide shared storage across the ESXi hosts.


If you have DNS configured and enabled in the script, you can then connect to your VCSA instance using the various CLI/API or the vSphere UI of the FQDN that you had specified for the VCSA. If not, then you would connect using the IP Address. You will notice that all VMs deployed as part of the script will be placed inside of a vApp construct.

More from my site

  • Quick Tip - Multi-Factor Authentication (MFA), IP Address Range & Source Domain restrictions available for all VMware Cloud Services
  • Logging into vCenter when vCenter Cloud Gateway (VCGW) is disconnected from vSphere+ Cloud Service
  • How to check if your vCenter Server is using vSphere+ / vSAN+ Subscription?
  • Automating subscription and usage retrieval for vSphere+ and vSAN+ Cloud Service
  • Quick Tip - Inventory core count for vSphere+, vSAN+ & VCF+ Cloud Service

Categories // Automation, Nested Virtualization, Oracle Cloud VMware Solution, VMware Cloud Tags // Oracle VMware Cloud Solution, VMware Cloud

Thanks for the comment! Cancel reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Search

Author

William Lam is a Senior Staff Solution Architect working in the VMware Cloud team within the Cloud Infrastructure Business Group (CIBG) at VMware. He focuses on Cloud Native technologies, Automation, Integration and Operation for the VMware Cloud based Software Defined Datacenters (SDDC)

Connect

  • Email
  • GitHub
  • LinkedIn
  • RSS
  • Twitter
  • Vimeo

Recent

  • Changing the default HTTP(s) Reverse Proxy Ports on ESXi 8.0 03/22/2023
  • Quick Tip - How to download ESXi ISO image for all releases including patch updates? 03/15/2023
  • SSD with multiple NVMe namespaces for VMware Homelab 03/14/2023
  • Is my vSphere Cluster managed by vSphere Lifecycle Manager (vLCM) as a Desired Image or Baseline? 03/10/2023
  • Interesting VMware Homelab Kits for 2023 03/08/2023

Advertisment

Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy

Copyright WilliamLam.com © 2023

 

Loading Comments...