Aug Session Thurs 21st- Altaro Hyper-V Backup & Mailstor presented by DataStor

August Thursday 21st- Altaro Hyper-V Backup and Mailstor

See what can be achieved with Altaro Hyper-V Backup and Mailstor email archiving solutions.

  1. Altaro Hyper-V Backup Software is a fast growing developer of easy to use backup solutions targeted towards SMBs and focused primarily on Microsoft Hyper-V Server.
  2. MailStore Email Archiving is one of the world’s leading solutions for email archiving, management and compliance for small and medium-sized businesses with the advantages of modern email archiving as a service thanks to MailStore Service Provider Edition.

Great prizes on offer!

Register Here

Presented by DatastorDatastor_500

Using a Point-to-Site VPN

The following is the work of Aaron Whittaker and should not be reproduced without prior permission.

Using a Point-to-Site VPN

Do I need a bigger Laptop?

Customers want to use Azure.  There are many different use cases and scenarios.  The following would be a great solution where on premise does not need direct tunnel connectivity to Azure.  The more permanent option is a static Site to Site VPN utilising a hardware device.

Eg. Developers utilizing extra computing power, maintenance on webservers, IT guys that want to get by with a Surface2 and don’t need more than 4 gig or ram.

Ingredients:

CA or Windows SDK

Azure subscription, with a running VM to test

Cooking time 35 mins.

CERTIFICATES

CERTIFICATION CREATION PROCESS

To establish a firstly you need create some certs.  You only need a private CA cert if you are running a domain.  An even quicker you can make certs just by using makecert.exe provided free in the Windows SDK

PS C:\Program Files(x86)\Windows Kits\8.1\bin\x86>makecert.exe -r -pe -n CN=AzureCertName -ss my -sr localmachine -eku 1.3.6.1.5.5.7.3.2 -len 2048 -e 01/01/2016 AzureCertName.cer

Succeeded

PS C:\Program Files(x86)\Windows Kits\8.1\bin\x86>makecert.exe -n “CN=AzureCertName2” -pe -sky exchange -m 96 -ss My –in “AzureCertName2” -is my -a sha1

Succeeded

EXPORTING CLIENT CERTIFICATE

Now go to CertMgr.exe to will open the current user certs that you have just created.  Go to personal certificates.

Right Click Certname1, export, select YES to export the private key

1

Select Next twice, enter a password (mandatory step), next, select a location to save and create PFX.

What have we done?  This cert will now be installed on client pc’s that need to connect to Azure with VPN.

Recommendations are that if you right click and install on client pc it will put it in the correct location (current user).

Browse to Trusted Root Cert Auth, Certificates, right click Import PFX.

EXPORTING ROOT CERTIFICATE

Now lets get the cert for Azure.  If you get confused which cert is for which, this below cert cannot be turned into a PFX because you can’t export the private key.  You can only make a CER which is required on Azure.

Go to CertMgr.exe to will open the current user certs that you have just created.  Go to personal certificates.

Right Click AzureCertName, export, select NO to export the private key

2

Select Next twice, select a location to save and create CER.

We need to put the cert in our Azure Virtual Network.

CREATING A Point-to-Site VPN CONNECTION IN WINDOWS AZURE

Now log into Azure, networks, new, select custom create. Enter and Name and select your Affinity Group.

3

4

Select the next arrow, enter your tenants DNS server if you have one, if not, this is not needed, Azure will provide DNS for you.  Check the box for Configure Point-to-Site VPN, next arrow twice.

5

Here you can add your local address space by selecting Add address space, next, wait 2 mins.

Here is the finished product and settings I required.

6

Next go to the Certificate tab.  Browse and upload your CER.  Here you can’t get it wrong as it won’t allow you to upload the PFX you also made.

7

8

Now go to back to your Virtual network dashboard and on the right you will see quick glance, select download client vpn package.

9

Once downloaded install it, if you get an error like I did simply select more information and force the install.

Then go to the bottom right and select the network icon, select Network VPN (this network name is what you called your Virtual Network), connect.

10

Now select connect

11

Are we connected yet? Yes

12

What can I do now?

RDP to Azure VM, and RDP to local server at the same time.  See my network configurations on my 3 different machines at once.  DC2 (Azure), Win2012r2 (local Hyper-V host), lenovo (my laptop).

See the screenshot below, access to 2 different networks at the same time and yet my local laptop ip address does not change.

13

Do I need a bigger Laptop? No, I can do everything I need from a Surface2.

Here is the Azure article to follow, minus any screen shots. http://msdn.microsoft.com/en-us/library/windowsazure/dn133792.aspx

Thoughts and comments welcome.

Next time we will extend the Hyper-V datacentre to Azure.

Aaron @AaronW2003

April Session- Veeam’s powerful easy-to-use management tools for Hyper-V

Hyper-V-Ready – Veeam’s powerful and easy-to-use management tools for Hyper-V
Learn how to effectively protect and manage your Hyper-V infrastructure starting today!
Veeam will have a speaker from Sydney present on the management tools available for Hyper-V.

There will be prizes/giveaways and pizza.
The lifts close at 6:00 pm so please call Aaron on 0400980129, if you are late.

Please Note: April event is on Monday 15th due MS room booking.

Register here

SMB 3.0 Session- NetApp Demo 21st March

One of the most highly touted features of Hyper-V on Windows Server 2012 is the ability to store VMs on file shares via the new SMB 3.0 protocol. This opens up a new way of presenting storage to Hyper-V clusters – previously only iSCSI or Fibre Channel setups with Cluster Shared Volumes could be used for Hyper-V clusters.

Whilst you can setup a Windows Server 2012 file server cluster and serve SMB 3.0 shares for Hyper-V, a more efficient, scalable and higher performance approach is to leverage storage arrays that can natively present SMB 3.0 shares direct to the Hyper-V cluster nodes.

Come to this meeting of the Brisbane Hyper-V User Group to learn how NetApp has built SMB 3.0 directly into their storage arrays. See a live demo showing the rapid provisioning of 1000 VMs on a NetApp SMB 3.0 share in less than 5 mins, and gain an understanding of the pros and cons of using SMB 3.0 versus iSCSI/FC. Finally, see a live demo of ODX copy offload technology for very fast, space efficient, host-free data copies.

Register Here

Cheers Aaron

How to run a Domain Controller within your Hyper-V cluster

Here is a great post showing a new feature in Windows 2012.  Now you can run a Domain Controller within your Hyper-V cluster.  Previously this was a problem as the cluster could not start up without a Domain Controller being available.  Although this situation should be avoided if possible, it is technically possible.

Click Here 

Happy Clustering. Aaron

Hyper-V Cluster replication

By -Aaron Whittaker

Here are the short steps to configure Hyper-V Cluster replication, all virtual!:

Create a Domain Controller, x2 Hyper-V hosts in a cluster [production site](only 1 needs to be one to actually work), x2 additional Hyper-V hosts [disaster recovery site].

As this is just a test lab you may wish to do this all from the one Hyper-V host.

Add the 4 hosts to the domain.

To enable Hyper-V on a virtual machine you will need to run the follow commands on each host in powershell.  You cannot add the Hyper-V roles from Server Manager.

DISM /Online /Enable-Feature /all /FeatureName:Microsoft-Hyper-V

DISM /Online /Enable-Feature /all /FeatureName:Microsoft-Hyper-V-Management-Clients

reboot

Create a cluster with the default settings (you will need to install the failover clustering role).  Add x2 servers to each cluster.

Go to Windows firewall on the DR Hyper-V hosts.  Find the inbound rule called Hyper-V Replica HTTP Listener rule. Right click ‘enable’ it.


On each cluster create a Hyper-v Replica Broker, as in the screen shot.

Once it is configured wait for it to be running (automatic).

If you go back to the Hyper-V replication settings, you will see they are now greyed out due to the host being in a cluster.

You can configure the cluster replication settings if you wish.  In my demonstration we wont, we will be automatically prompted to do this.  Go failover cluster manager create a basic vm.  Mine cannot be turned on as it is a virtual in a virtual.  Right click the VM, select Replication, Enable Replication.

You get an error asking to configure replica settings.

Configure the settings, I am just using Kerberos with no certificates. This is why you need a domain controller.

Select the appropriate recovery points (remember replication occurs every 5 mins and cant be modified)

All configured, as you can see the VM now appears on both servers.  I can’t turn it on my test VM due to it being a VM inside another VM.

Please leave any comments/sugguestions.

Cant attend TechEd? Register for the 20th September session

Come to the BNEHyper-V UserGroup for a Tech Special Session, presented by James Crawshaw TSP from Microsoft.

James will be presenting and demonstrating based on his sessions from TechEd.  Come see live demos on VMMT and Hyper-V replica.

TechEd Session Extract- Hyper-V Replica offers an affordable DR solution for virtualized workloads. It is included with Hyper-V, works with commodity storage, and has an inbox UI to set up standard DR flows. It also has a rich API surface (PowerShell and WMI) which provides extensibility for management partners (e.g., extend the inbox UI to an enterprise-grade DR solution) and hosting service providers (e.g., offer DR as a service).

Register Here

TechEd Requests

For those that cannot make it to TechEd 2012, here are the topics below.

  • Hyper-V Replica;
  • Hyper-V Live Storage Migration;
  • Hyper-V Extensible Switch;
  • Hyper-V Copy;
  • Networking including native NIC teaming and network virtualisation;
  • New virtual hard disk format;
  • Microsoft VDI.

Please comment to request which topic you would prefer to see at the next session.  Hopefully at TechEd I can arrange a presentation for an up coming user group!

First Session was a huge success!

With so much great new content to cover relating to Hyper-V 3.0 and the new features, it was going to be hard to get Reid Purvis from Microsoft to stop and take a breath.  Reid was very passionate and just scratched the surface, with many more sessions to follow!  The audience was engaged and had many great questions regarding the highly anticipated Windows Server 2012 with Hyper-V 3.0.  The first session demonstrated machine migrations.

Thanks to Reid coming all the way from Sydney to present.  Reid put on a great session and the demo gods were kind!  Next session will hopefully be a Tech Ed related presentation.  More to follow in coming months stay tuned!  Reid’s presentation can be found here.