VCPN610- Sec 1, Obj 1.3

-->

 Differentiate VMware Network and Security Technologies 


· Identify upgrade requirements for ESXi hosts

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2052329

also check this awesome guide from Jason Langer!!

http://www.virtuallanger.com/2011/09/08/vcp-5-objective-1-3-plan-and-perform-upgrades-of-vcenter-server-and-vmware-esxi-2/

· Identify steps required to upgrade a vSphere implementation

Same as last point

· Describe core vSphere networking technologies

Check also from Jason Langer VCP5 guide this links or smoke all the Chris Wahl and Steve Pantol Networking Networking for VMware Administrators book.

Section 2 – Plan and Configure vSphere Networking
Objective 2.1 – Configure vNetwork Standard Switches
Objective 2.2 – Configure vNetwork Distributed Switches
Objective 2.3 – Configure vSS and vDS Policies

For all the feautres check the “Venky” @VMWNetworking series about VDS new features on VMware BLogs, I must to say it is very comprehensive even for me!!!, pay special attention on Port-mirrowing and Netflow.

http://www.vmware.com/files/pdf/techpaper/Whats-New-VMware-vSphere-51-Network-Technical-Whitepaper.pdf

· Describe vCloud Networking and Security technologies

VCNS address the networking with the capabilities of the products itself, like  VNCA Edge, VCNS App and VCNS Endpoint.

Firewall: Stateful inspection firewall that can be applied either at the perimeter of the virtual data center or at the virtual network interface card (vNIC) level directly in front of specific workloads. The firewall-rule table is designed for ease of use and automation with VMware vCenter™ objects for simple, reliable policy creation. Stateful failover enables high availability for business-critical applications

VPN: Industry-standard IPsec and SSL VPN capabilities that securely extend the virtual data center. Site-to-site VPN support links virtual data centers and enables hybrid cloud computing at low cost. The SSL VPN capability delivers remote administration into the virtual data center through a bastion host, the method favored by auditors and compliance regulators

Load-Balancer: A virtual-appliance–based load balancer to scale application delivery without the need for dedicated hardware. Placed at the edge of the virtual data center, the load balancer supports Web-, SSL- and TCP-based scale-out for high-volume applications

VXLAN: Technology that, along with VMware vSphere Distributed Switch, creates Layer 2 logical networks across noncontiguous clusters or pods without the need for VLANs (multicast required). This enables you to scale your applications across clusters and pods and improve compute utilization

Instrumentation: Granular network traffic telemetry that enables rapid troubleshooting and incident response. Traffic counters for sessions, packets and bytes provide visibility into the virtual network and streamline firewall-rule creation

Management: Integrates with vCenter Server and vCloud Director to provide separation of duties with role-based access control (RBAC) while providing a central point of configuration and control for network and security services

vCloud Ecosystem Framework: Integrates partner services at either the vNIC or the virtual edge using REST APIs

For more detail smoke this flyer:

http://www.vmware.com/files/pdf/products/vcns/vmware-vcloud-networking-and-security-overview.pdf

· Describe and differentiate VMware NSX for vSphere and VMware NSX for third-party hypervisors

NSX-V                                                   NSX-MH                           

VXLAN                                     STT GRE VXLAN

Edge Gateway                       Edge Physical Gateway         

            VDS/dvSwitch                        OVS

            In Kernel Firewalling           ACL Firewalling and sec. groups

            In Kernel Routing                  OVS provides routing capabilities

            +LB, +VPN