Introduction A network lab environment can be used to test upgrades/patches, evaluate new features, or as a training environment for hands-on experience. Objectives In this lab the student will: Install, configure and manage virtual networking and storage [WECM] Equipment/Supplies Needed No equipment is needed for this lab. Supplies are a word processor like Microsoft Word Assignment Student will develop VM server specifications for the Unit 6 scenario. Key activities include the following: (1) List the specifications for a new virtualization infrastructure to support the given scenario now and for 4 years into the future. Lab 6.1.1 requires you to develop the ESXi server specifications to support the physical to virtual migration of the data center for PK Industries as explained in the scenario in this unit. Remember that the company needs a HA solution and needs a secure infrastructure. Implementing HA requires capacity planning to accommodate for the possibility that all VMs on one ESXi server may need to be moved to another ESXi server in case of server failure. It also involves ensuring the ESXi servers have redundant hardware in case of failures. For example, having redundant power supplies would be a requirement so the server continues to operate even if one power supply fails. You decide what other internal hardware components in the servers should be redundant and state this in your server specs. Read the scenario in this unit titled Scenario For All Unit 6 Labs.pdf carefully to gather the facts needed for completing this assignment. Remember also that your specifications need to allow for growth of the company and number of years the hardware needs to serve the company. Use the PDF Unit 6 Scenario Existing Hardware in this unit to see the list of existing hardware that needs to be virtualized in this lab. 1 Lab 6.1.1 Develop VM Server Specifications Your ESXi specifications need to include the following: 1. Number of ESXi servers. 2. RAM and CPU for each ESXi server. 3. What server internal components have redundancy for HA. 4. What VM will be assigned to what ESXi server to begin with. vMotion will eventually change this, but you need to state what VMs are installed on what ESXi servers to begin with. 5. How ESXi servers will connect to the new SAN(s) i.e. - fiber optics, Fiber Channel, ISCSI, or CAT6 copper. 6. Storage capacity of SAN(s) and how many SANs will be needed. PK Industries Incorporated, a family owned multistate corporation in the retail industry, owns and operates a chain of more than 500 convenience stores across a number of states in the USA. They also own and operate their own fuel delivery service to supply fuel to all their convenience stores, and they have their own brand of ATMs providing cash services in all their convenience stores. They process over 250,000 credit card transactions a day across the enterprise, and process in excess of 10,000 ATM transactions a day. They currently have about 3,000 employees. Active Directory currently shows about 1,500 users on a 2,300 node network. Currently, each convenience store has a firewall that connects to the corporate office to establish an always on point to point VPN which is currently used only for convenience store sales and credit card transactions, as well as the store manager's PC. The ATMs in each store currently use a modem to connect to a customer's bank for processing cash withdrawals. Phase one of the project includes creating a secure Vlan in the network for processing credit card transactions and store sales, as well as converting all ATM transactions to go over the secure Vlan. The ATMs already have NICs in them so this will not be complex. The modems in the ATM will be used only as a backup in case the store's network is down. PK Industries' president is retiring and his son is taking over. His son is tech savvy and has ambitious plans to grow the business 20% a year, measured by number of stores and sales, as well as invest in infrastructure for better efficiency. He has approved plans to convert the corporate data center to virtual machines to save hundreds of thousands of dollars a year in IT related costs. The IT Director of the company has recommended VMware for the datacenter and the CIO agrees. The current data center has the physical equipment shown in the PDF titled PK Industries Physical Equipment. Phase one of the IT project to virtualize the data center has plans to virtualize everything possible, with the exception of one physical Domain Controller, since best practices call for one physical Domain Controller. Project plans include adding at least one SAN to replace individual drives in the physical servers. This will allow the company to implement vMotion and an ESXi cluster for HA. To allow for future growth and for HA, the IT Director has stipulated that 70% of SAN storage will be unused on day one. The CIO and IT Director understand that increasing sales and store count means that data needs grow and will plan accordingly. Phase one of the project involves implementing Payment Card Industry Data Security Standards (PCI-DSS) to protect customer card payment data. See the resource titled pci ssc quick guide.pdf in this unit for details and requirements. Use the PCI-DSS PDF as only a guide for planning network security. You will not be graded on how well you implement the PCI-DSS standard, but how well you secure the network, all nodes on it, and all data moving over it. Project plans also call for installing vCenter and NSX as VMs so as to virtualize firewalls, routers, and switches, as well as implement strong security and administration. This will also set the stage for phase two of the virtualization project mentioned below. Phase two of the project does not have to be considered when performing any of the labs in this unit. After the physical to virtual project has completed and the virtual data center has proven reliability and survivability, the second phase of the project will begin the following year to use VMware to implement a private secure cloud from which all the convenience stores will connect to the home office through the point to point VPN at each store. CPU CPU usage % RAM RAM usage % Drives one 4 core 3.7GHz 30 two 8 core 3.5GHz 50 one 8 core 3.2GHz 20 two 4 core 3.4GHz 40 TENTITAT two 2 core 2.2GHz 30 two 4 core 3.2GHz 40 Server gas tank monitoring one 2 core 2.1GHz 10 Quantity Device 3 2 2 1 1 2 1 2 1 1 5 Server Domain Controller Server Server Server Server Server firewall router Purpose router switch SQL Cluster File server custom database HR system POS cluster firewall cluster edge router core router for Vlans switching 128GB 512GB 256GB 512GB 256GB 256GB 128GB 60 60 40 30 20 30 10 two 1TB six 1TB six 1TB six 1TB four 1TB six 1TB two 500GB Drive usage % 30 30 20 30 30 20 50