{"id":4041,"date":"2016-11-16T20:00:38","date_gmt":"2016-11-17T02:00:38","guid":{"rendered":"http:\/\/www.jasemccarty.com\/blog\/?p=4041"},"modified":"2020-02-16T19:44:53","modified_gmt":"2020-02-17T01:44:53","slug":"vsan-witness-in-vca-p4","status":"publish","type":"post","link":"https:\/\/www.jasemccarty.com\/blog\/vsan-witness-in-vca-p4\/","title":{"rendered":"The vSAN Witness Appliance in vCloud Air: Part 4 (Deployment)"},"content":{"rendered":"<p>In <a href=\"\/blog\/vsan-witness-in-vca-p2\/\">Part 2<\/a>, the process of uploading a vSAN Witness Appliance to an organization&#8217;s Catalog was detailed. <a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/2016\/11\/16\/vsan-witness-in-vca-p3\/\">Part 3<\/a> covered the process of creating networks for the vSAN Witness Appliance.<\/p>\n<p><strong>What&#8217;s Next?<\/strong><\/p>\n<p>With the vSAN Witness Appliance OVA converted and uploaded to vCloud Air, and connectivity in place to the networks that will be used, the next step is to deploy an appliance.<\/p>\n<p>This can be done from the normal vCloud Air interface, but we won&#8217;t be able to power on our Witness Appliance due to a password missing. It will be easier to accomplish this using the vCloud Director interface of vCloud Air.<\/p>\n<p>From the vCloud Air Dashboard, select Manage Catalogs in vCloud Director.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD1-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6983\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD1-1.png\" width=\"800\" height=\"252\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD1-1.png 1171w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD1-1-220x69.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD1-1-768x242.png 768w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD1-1-1024x323.png 1024w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD1-1-290x91.png 290w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>This will open up the vCloud Director interface in the Catalog section and select a catalog. The catalog the Witness Appliance was uploaded to in <a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/2016\/11\/16\/vsan-witness-in-vca-p1\/\">Part 1<\/a> was VSAN_WITNESS.<\/p>\n<p><span id=\"more-6942\"><\/span>A catalog can contain multiple vApps, which can have one or more virtual machines in it.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6985\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD3.png\" alt=\"vsancd3\" width=\"800\" height=\"307\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD3.png 1167w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD3-220x84.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD3-768x295.png 768w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD3-1024x393.png 1024w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD3-780x300.png 780w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/VSANCD3-290x111.png 290w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>After choosing the vSAN_WITNESS_6.5 that was uploaded in Part 1 and selecting <strong>Add to My Cloud<\/strong> wizard will start the process of deploying this vApp.<\/p>\n<p><center><\/center><\/p>\n<div id=\"pcontent_6942_idx_0_sidx_0\"><\/div>\n<p><script>jQuery(document).ready(function(){  window.vmwareEvidon.registerContent('pcontent_6942_idx_0_sidx_0','<iframe loading=\"lazy\" width=\"800\" height=\"600\" src=\"https:\/\/www.youtube.com\/embed\/MfbU3qdhvXs?feature=oembed\" frameborder=\"0\" allowfullscreen><\/iframe>');})<\/script><\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: left;\">Now that the Witness Appliance is deployed, let&#8217;s see if it is accessible. In the vCloud Director interface, select <strong>vApps<\/strong> and open the vApp that was just deployed.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp1-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-7150\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp1-1.png\" width=\"800\" height=\"223\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp1-1.png 1170w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp1-1-220x61.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp1-1-768x214.png 768w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp1-1-1024x285.png 1024w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp1-1-290x81.png 290w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>Inside the vApp, there is only a vSAN Witness Appliance.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp2-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-7151\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp2-1.png\" width=\"800\" height=\"329\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp2-1.png 1171w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp2-1-220x90.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp2-1-768x315.png 768w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp2-1-1024x421.png 1024w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp2-1-970x400.png 970w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp2-1-290x119.png 290w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>Right clicking on the VM will present the option to open a console and see the IP address of the VM.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-7017\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp3.png\" alt=\"vapp3\" width=\"800\" height=\"446\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp3.png 1045w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp3-220x123.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp3-768x428.png 768w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp3-1024x571.png 1024w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/vapp3-290x162.png 290w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>The management VMkernel interface (vmk0) successfully obtained an IP address from the vSAN Witness Management network. If the VPN connection is properly configured, vmk0 should be pingable from the remote site.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/ping.png\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-7018\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/ping.png\" alt=\"ping\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/ping.png 537w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/ping-220x90.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/ping-290x119.png 290w\" sizes=\"(max-width: 537px) 100vw, 537px\" \/><\/a><\/p>\n<p>In this example, the vCenter Server is running on the remote site. It should be possible to add vSAN Witness Appliance to vCenter.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/WIT1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-7020\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/WIT1.png\" alt=\"wit1\" width=\"800\" height=\"374\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/WIT1.png 1171w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/WIT1-220x103.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/WIT1-768x359.png 768w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/WIT1-1024x478.png 1024w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/WIT1-290x135.png 290w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>The Witness Appliance can be seen in the vSphere Web Client. Notice also that vmk1 has an IP address from the DHCP pool configured in Part 2.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf2a.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-7158 size-full\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf2a.png\" width=\"658\" height=\"208\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf2a.png 658w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf2a-220x70.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf2a-290x92.png 290w\" sizes=\"auto, (max-width: 658px) 100vw, 658px\" \/><\/a><\/p>\n<p>When using vSAN 6.1 or 6.2, which are built into corresponding builds of ESXi 6.0, additional routing might be required if vmk1 is on a different segment than vmk0, the management VMkernel. This is because the default gateway used by vmk0 is also used by other VMkernel interfaces.<\/p>\n<p>In ESXi 6.5, different gateways can be configured for different VMkernel interfaces. If using DHCP in vCloud Air, provided the gateway is configured properly, ESXi 6.5 will use the gateway provided by the DHCP service and not the default vmk0 gateway.<\/p>\n<p>Now that the Witness Appliance has been deployed and added to vCenter, it is important to ensure connectivity between the vmk1 and the vSAN ports at the remote site.<\/p>\n<p>In the remote site, vmk0 has been tagged to accommodate vSAN Witness Traffic.<\/p>\n<ul>\n<li>Host1 &#8211; 192.168.1.21<\/li>\n<li>Host2 &#8211; 192.168.1.22<\/li>\n<li>Witness &#8211; 192.168.110.102<\/li>\n<\/ul>\n<p>From the Witness to Host 1 and Host 2<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf3.png\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-7036\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf3.png\" alt=\"conf3\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf3.png 534w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf3-220x110.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf3-290x145.png 290w\" sizes=\"(max-width: 534px) 100vw, 534px\" \/><\/a><\/p>\n<p>Going through the vSAN Cluster Wizard, vSAN should be setup properly.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-7037\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf5.png\" alt=\"conf5\" width=\"800\" height=\"511\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf5.png 902w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf5-220x140.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf5-768x490.png 768w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf5-290x185.png 290w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>Once configured, select the Monitor tab from the vSAN Cluster to run the vSAN Health Check. It should report a Healthy vSAN Configuration.<\/p>\n<p><a href=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf6a.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-7040\" src=\"http:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf6a.png\" alt=\"conf6a\" width=\"800\" height=\"339\" srcset=\"https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf6a.png 885w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf6a-220x93.png 220w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf6a-768x325.png 768w, https:\/\/blogs.vmware.com\/virtualblocks\/files\/2016\/11\/conf6a-290x123.png 290w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>Success! Now the remote\/lab 2 Node vSAN cluster is using a Witness Appliance in vCloud Air!<\/p>\n<p><strong>Summary<\/strong><\/p>\n<p>This series has given a brief overview of how to run a vSAN witness in vCloud Air. Uploading a Witness Appliance, configuring networking, and deploying the Witness Appliance are not a difficult task, but do have specific requirements.<\/p>\n<p>The Stretched Cluster and 2 Node guide covers the bulk of the requirements specific to the use of a Witness. Using vCloud Air as a tertiary location is a very viable solution when another physical site is either not possible or not cost effective.<\/p>\n<p>This was originally posted on the VMware Virtual Blocks site: https:\/\/blogs.vmware.com\/virtualblocks\/2016\/11\/16\/vsan-witness-in-vca-p4\/<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Part 2, the process of uploading a vSAN Witness Appliance to an organization&#8217;s Catalog was detailed. Part 3 covered the process of creating networks &hellip; <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,12,168],"tags":[182,87,183,152,184],"class_list":["post-4041","post","type-post","status-publish","format-standard","hentry","category-storage-2","category-virtualization","category-vsan","tag-2-node","tag-storage","tag-stretched-cluster","tag-vsan","tag-witness"],"_links":{"self":[{"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/posts\/4041","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/comments?post=4041"}],"version-history":[{"count":3,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/posts\/4041\/revisions"}],"predecessor-version":[{"id":4050,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/posts\/4041\/revisions\/4050"}],"wp:attachment":[{"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/media?parent=4041"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/categories?post=4041"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/tags?post=4041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}