PFsense in Hyper-V r2

I am thinking to setup Pfsense in my network as firewall. but i have already setup my virtual network and don't want to change. but Pfsense needs
Legacy network adapter in that case what should i do. is it good option to remove TMG2010 and put
PFSENSE as firewall as its much smaller an
Akshay Pate

Hi Akshay,
Has the problem been solved ?
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

How to simulate external IP addresses on a single server Hyper-V test environment

I just bought a powerful laptop and installed a spare copy of Server 2012 R2 Datacentre on it.
I am in the process of setting up a test LAN with DC, Exchange, TMG firewall web and backup servers.
V host without the use of external physical routing?
I would like to connect a client to the LAN services such as Exchange and VPN in the same way a client device connects to a network over the internet. In other words, I need to test the external IP addresses of my test LAN.
I am considering a setup consisting of two separate LANs with different IP address ranges:
LAN 1: internal network (with all the services mentioned above)
LAN 2: with only one client VM; this would be the external network (simulated internet)
Is this the best way of doing it? Has anyone already done something similar?
Many thanks!

I have something similar.
I don't believe your solution would work alone, as you'd need a VM to act as a router between the two. You could do it like that (but adding a virtual router) or you could just let WAN be your local network (the one your laptop is on)
Some steps (not very detailed, I can provide my documentation I wrote for Hyper-V running on server 2012 R2 (should work exactly the same for you though)
The first vSwitch created should be External type (it should already be created if you installed Hyper-V)
Create a second switch, call it whatever (Internal or LAN doesn't matter), set it's type to Private.
Create a small 512MB Generation 1 VM with a small (1GB should be fine, and it can be dynamic expanding)
Add two LEGACY (key point) network adapters to it, attach the first to the external and the second to the private.
Install pfSense onto it. You'll basically have a router. the first interface is the WAN (if you set the first adapter as external when you added them to the VM) or "the internet" you could say. While the private switch is the second interface or your local
(private) LAN. Now any VM you want to be on this virtual LAN just set it's network adapter to be connected to the Private vSwitch.
I have instructions if you want to do this (specifically for Hyper-V (I wrote them in case I ever had to reinstall it because there are a few gotchas with it being virtualized)

Virtualized firewall under Hyper-V?

We are currently considering installing an instance of pfSense on our Hyper-V R2 based server to act as a content filter, captive portal and general firewall.
Although it is usually bad practice to virtualise a firewall / gateway.. sometimes you gotta work with what you've got! :)
We've got 2 physical NICs.. 1 Facing the internet (WAN) and 1 facing our internal LAN.
How would one go about making sure all internet access goes through the pfSense VM?
Is there a configuration that eliminates any possibility of traffic coming in on the LAN NIC bypassing the pfSense VM?
Sorry if it's a silly question, I'm a developer by day :D

Simply setting all PCs, switches, routers and etcetera network infrastructure to use the pfsense virtual machine as their default gateway will make all traffic flow through the content filter.
Certainly, someone could yank network cables out of the server and plug their PC straight into your WAN. You could set some kind of MAC filtering or 802.1x authentication to enact port level security. Of course, someone could just wire around that as well.
The point being: There comes a time when you are merely relying on "I've got the passwords and the keys to the server room and you don't."
Simply setting up your gateway as the default gateway / router and not having any other routing options on the network prevents all outlets with the exception of someone storming your server closet and frobbing with cables.
Also this as a bonus for my answer
+----------------------------------+
| +----------+ +---------+ | +----+ +----+ +----+
| | pfSense | | Host OS | | | | | | | |
| | | | | | | PC | | PC | | PC |
| +----------+ +---------+ | | | | | | |
| ^ ^ ^ | +----+ +----+ +----+
| | +------+ | | ^ ^ ^
| | | | | | | |
| V V V | V V V
+--------+ +---+ +-------+ +-------+ +---+ +-----------------+
|Internet|<-->|WAN|<->|WAN NET| |LAN NET|<->|LAN|<----+| LAN SWITCH |
+--------+ +---+ +-------+ +-------+ +---+ +-----------------+
| Hyper-V Host |
+----------------------------------+
t's actually possible to use the same NIC on the Hyper-V Host for both WAN and LAN, but you'll need to setup vLANs and need a switch that supports them. It gets messy quickly and NICs are fairly cheap. A note on NIC chips, get a good one, like Intel, Broadcom,
etc. Stay away from Realtek, Marvel, and most of the on-board chips on cheaper and DIY motherboards. They're nothing but trouble for virtualized environments.
Also, keep in mind that Hyper-V is a bare-metal Hypervisor. It is NOT a service that runs in Windows. What used to be the Windows installation on the machine becomes a special VM. This will not appear to be the case for simplicity and usability reasons, but
comes into play when you do things like setup the Hyper-V Networking.

How to convert offline ESXi 5.5U1 virtual machines to Hyper-V?

Following on from my
earlier question, I am having trouble working out how to convert my ESXi VMs to Hyper-V. Am I doing something really unusual?
I have a ESXi 5.5U1 server at home for my home test lab. I want to convert this to Hyper-V Core 2012 R2. Target storage layout will look like this:
Currently under ESXi 5.5, I don't have the C drive (using a USB flash to boot), and the RAID-5 and RAID-0 arrays are two separate VMFS volumes.
I don't have swing kit to migrate, I have to repurpose existing hardware. I do have my Windows 8.1 workstation but that only has 900 GB free space.
Some of my VMs have vmdks greater than 2TB.
My plan was to
In ESXi before rebuilding, move my VMs from the RAID-5 vol to the RAID-0 vol and then delete anything that wouldn't fit that's not strictly necessary from the RAID-5 volume.
Shutdown ESXi and remove the USB flash drive.
Install Hyper-V onto the System disk as C drive.
Format the RAID-5 volume as NTFS (64k) and create a mount point into the C drive as C:\RAID-5. Put my VM disks in C:\RAID-5\VirtualDisks and the VMs in C:\RAID-5\VirtualMachines.
Somehow convert the VMs from the RAID-0 VMFS volume to Hyper-V VMs on the RAID-5 NTFS volume.
My confidence is low because I have tried to convert a new test machine created in ESXi 5.5 to a spare test Hyper-V 2012 R2 with the MVMC 3.1 converter and it failed. I also tried with the free 5nine converter and that failed too. I tried with and without
the Guest Additions installed. Both conversions failed. I should mention I am in a workgroup, not a windows domain.
Please help!

May i inquire on why those two products failed? I had some struggles with both of them but eventually got things worked.
Also you should try this one
Starwind V2V convertor, it has worked for pure offline conversions for me as well. That was years ago, so hopefully it still works.
Sure, here is the log from an attempt to convert a brand new VMware virtual machine which has Windows Server 2012 R2 Standard in it with no VM tools. http://pastebin.com/xdhzZ7tx
Here is the log from an attempt to convert a Lubuntu linux VM: http://pastebin.com/Nc0E8Bip
Both conversions attempted with MVMC3.1. Common error between them is
12/24/2014 08:25:36 +00:00 [7] VERBOSE: Microsoft.Accelerators.Mvmc.Engine.DiskCopyFailureException: The virtual disk(s) attached to the source virtual machine were not successfully converted to VHD(s) and copied to the
workspace folder path. ---> System.AggregateException: One or more errors occurred. ---> System.AggregateException: One or more errors occurred. ---> System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be
translated.
I retried using 5nine converter and it worked this time, not sure why. Will not try a test with a BSD based distro (pfSense) and Linux.

Can a Hyper-V machine be made slower and/or emulate a slow network connection?

need to reproduce an issue with a client-server asynchronous communication (a bunch of JavaScript AJAX vs. an OData api), seemingly caused by some race condition in the calculations when the server and/or the network connection
slow down.
Now, the test environment I have is a local Hyper-V machine, so it's all shiny and fast ... I need it to slow
down to verify it.
Is there any known method to (basically) make a LAN Hyper-V machine to behave like a remote server reached though a crawling internet connection ?

The best method I have found for simulating a crapy internet connection is to put a pfsense router between the server and my test PC and setup the Limiter features.https://doc.pfsense.org/index.php/Traffic_Shaping_Guide#Limiter
This can be used to emulate a slow network, latency or even introduce packet loss to see how your applications react to adverse network conditions.
pfsense can run inside a hyperv virtual machine. So you can set it up then change the webserver network settings to be behind pfsense.
If you don't like pfsense you can use any BSD distro that supports Dummynet.http://cs.baylor.edu/~donahoo/tools/dummy/tutorial.htm

Application running slowly under Hyper-V (factor of 100 times slower)

I have an application running in a non virtual Windows Server 2008R2/SP1 environment. It processes about 60,000 records from an indexed file (about 20MB in length) in about a second running in that environment. I want to move the application
to a Hyper-V virtual server also running Windows Server 2008R2/SP1. When I do so, the application runs, but processing the same file takes almost 2 minutes.
The application is the only thing running in the virtual machine and the virtual machine is the only VM running on the physical box. The VM is configured with a single processor, 2048M of fixed (not dynamic) memory and a fixed size disk of 255GB.
There is no network traffic so the single network connection is not used. The physical machine is a quad core with 8GB of memory and two 1TB drives that are less than 1/4 used in each case.
Now for the weird part. The application runs from the command line. If I start it and do nothing else, it takes about 2 minutes to complete its process. But, if I start the application, switch focus to another window on the virtual
machine then switch back, the process completes immediately upon switching back to the command line window.
Any thoughts?

The VM is configured with a single processor - The physical machine is a quad core
Do you mean the physical machine that was running the application has a quad core processor? If not, what did the physical machine running the application actually have? Is the application multithreaded so that it can make use of multiple processors?
Did the application in the physical world have OS and data on the same disk or on different disks? Did you run this application shortly after you started the VM, or did you let the system quiesce a bit? Did you measure performance on the physical
under the same sort of conditions? Are you running from a cmd window or PowerShell? (Your comment about clicking away and coming back brings to mind things I've seen with PowerShell) Does it run quickly on a second instantiation, or does
it run poorly every instantiation?
Determining performance requires a lot more information than what you provided.
I always assign at least two virtual CPUs to any Windows Server VMs. There are enough system processes running on the box that two processors will almost always benefit the workload. Also, it it not uncommon that the first run of an application
shortly after a machine has started will never perform as it will after a machine has settled in. This is why every benchmark worth its salt will start the benchmark and let it run for a few minutes before they actually start measuring.
.:|:.:|:. tim

How to get information about creation of a virtual machine on a Hyper-v host.

Hi,
How to get information about creation of a virtual machine on a Hyper-v host?
I need: host name, time created, creator user.
I saw in Hyper-V-VMMS but I found info about movements of VM between hosts.
Thank's in advance.
Denius Valiant

For Host Name * Created Time Use This Command In PowerShell
Get-VM -Name (Read-Host "Type Your Vm Name") |select CreationTime , ComputerName
and for Create User , As i know you should see on Event Log .
Go To Event Log Viewer--->Applications And Services Logs--->Microsoft--->Windows--->Hyper-V-VMMS--->Operational
You can see in Event Log who create the Vm.
Whenever you see a helpful reply, click on Vote As Helpful & click on
Mark As Answer if a post answers your question.
LinkedIn:
Facebook:

Unable to WDS install Win 8.1 VM on Hyper-V 2012 R2

Hi.
We've recently gone from Server 2008 R2 (Data Center) to Windows 2012 R2 (Data Center) and we're now trying to install Windows 8.1 clients on our Hyper-V solution.
When using the virtual machine creation wizard I create two test machines.
One machine is a gen1 and one machine is gen2 both are set to install via network (MDT 2013) and both a given a 40GB disk and 4GB of ram. Both installations fail.
"Windows setup could not configure windows to run on this computer's hardware".
According to everything I've found on the web this could happen if you try and install Windows 7 - something to do with 4K disks I think. This shouldn't happen on Windows 8.x.
I've seen a few posts where they explain the IDE controller being unable to handle 4K disks so that might explain something but in my case I also have a gen2 machine where disk is attached to a SCSI controller.
As I understand it a server 2012 R2 with Hyper-V should be able to have a Windows 8.1 installed on a VHDX file on a SCSI controller.
Can anyone help out here?
Thank you!

According to the web setup.exe /quiet /norestart should be valid parameters for the components.
What I mean by Applicaton Install is that there's a part of a Deployment Share where you can choose to install applications. A Task which will run at a appropriate time, e.g. Office is installed into our base image at that time. I tried including the Integration
Components before the Office install creating a base image with Office 2013 and the IC.
I also tried to use the base image a create a task for VMs only where no driver what so ever gets installed - it simply installs the base image created and activates Windows and nothing more. That doesn't work either.
The problem in a nutshell is this:
I want to install via MDT/WDS. I don't care if it's a regular machine or a virtual one. Both should work.
I've created several base images (Win7_x86, Win7_x64, Win8_x64 etc.) with Office included and everything has worked fine except when I try and install Windows 8 as a VM.
I must say that I've tweaked around and tried a few things while trying to find the problem so I probably have to test some things again to make sure what I say goes but we've installed both Win7 & Win8 on regular machines without problems but I can't
seem to install a Windows 8 machine via MDT/WDS for some reason as a VM - only on regular PCs.
As tested above installing via ISO works fine and creating a new image didn't help either.
The way I capture an OS is by simply write DoCapture=YES in my Deployment Share Rules section and boot into that Deployment Share (then I get a menu where I can choose to capture the machine and it simply installs the imported Windows ISO via a Standard
Client Task Sequence (where it also installs Office - there's an Application Install section part of the Standard Client Task Sequence).
So really really short; the image I try to install works fine on a regular PC but won't install on Hyper-V.

Steps to compact a hyper-v VHD without bringing down live VM.

Hi all,
I have a hyper-v 2008 R2 hyper-v host with some VM's that are dynamic disks. Some of them have grown to the point where our backup is failing because its exceeding the capacity of the tape.
I know the general proper process to compact a VHD is to:
1. Defrag the VM
2. zero out empty space with a utility like sdelete or precompact.exe
3. compact within the VM manager edit disk or to use diskpart. (I think diskpart will be faster?)
Since these are live VM's I don't want to bring them down for too long. I was thinking I could take a of copy the VHD's and put them on another 2008 machine, Mount the VHD as a drive and perform the steps above. Then I would remove the old VHD on the production
server and copy over the compacted VHD.
What Im not sure about, is whether it is ok to run defrag and sdelete on the mounted VHD or whether its preferable to run that within the VM itself?
Secondly does the machine where I mount the VHD's need to be the same OS and have hyper-v installed? For example if I copied the VHD to a windows 7 machine and mounted for these steps would that cause a problem when I restore it back on the server 2008 hyper-v
server?
Lastly I see people who use a third party app to defrag. What benefit is there to using a third party utility (defragger etc) versus the built in defrag within windows? Does it even matter?

Hi Guys,I wrote below script for creating new user and granting it read only access but I'm getting attached error.Please help...Powershell$HostList = Get-Content C:\Users\malvika\Desktop\Hostnames.txtforeach ($server in $HostList){ $HostDetail = $server.Split(',') $HostName = ($server -split ',')[0] $userid = ($server -split ',')[1] $password = ($server -split ',')[2] $VCimpl = Get-VIServer -Server $HostName -User $userid -Password $password [Reflection.Assembly]::LoadWithPartialName("vmware.vim") # The name of the role to be assigned $roleLabel="Read-Only" #craete user New-VMHostAccount -Id Test -Password U!er -Description "Test User" #The name of the principal (user or group) that the role is assigned to $principal="Test" # set to false if principal is a user , not a group $principalIsGroup = $false $propagateToSubEntities = $true ...

Hyper-V Server Manager -Error occurred during enumeration of Data Deduplication volumes

Hi Experts,
I having this problem in my Hyper-V Server Manager. Can somebody tell me why this happening? Inside my Hyper-V, I has been installed Microsoft DPM 2012 and both Hyper-V is cluster. Please advice.

Hi Tyler,
I had the same problem until I unlocked (BitLocker) the HDD causing the error message.

Unable to start guest OS in Hyper-V on Server 2012 R2

I get the following error trying to start any guest OS in Hyper-V Manager:
"An error occurred while attempting to start the selected virtual machine(s)::
'TestVM' failed to start.
Virtual Machine 'TestVM' could not be started because the hypervisor is not running.
'TestVM' failed to start. (Virtual machine ID xxxxxxxxxxxx)
Virtual machine 'TestVM' could not be started because the hypervisor is not running (Virtual machine ID xxxxxxxxxxxx).
The following actions may help you resolve the problem:
1) Verify that the processor of the physical computer has a supported version of hardware-assisted virtualization.
2) Verify that hardware-assisted virtualization and hardware-assisted data execution protection are enabled in the BIOS of the physical computer. (If you edit the BIOS to enable either setting, you must turn off the power to the physical computer and then
turn it back on. Resetting the physical computer is not sufficient.)
2) If you have made changes to the Boot Configuration Data store, review these changes to ensure that the hypervisor is configured to launch automatically."
Host (Physical) Hardware:
- Supermicro X9SRL-F, BIOS Rev 3.0a (current) with Intel Virtualization enabled and Execute Disable Bit enabled
supermicro.com/products/motherboard/Xeon/C600/X9SRL-F.cfm
- Intel Xeon E5-2620 CPU
http://ark.intel.com/products/64594/Intel-Xeon-Processor-E5-2620-15M-Cache-2_00-GHz-7_20-GTs-Intel-QPI
- 96GB ECC DDR3 RAM
Host Software:
- Server 2012 R2 DataCentre with update 1 (clean install)
- Hyper-V role installed
All hardware supports virtualization and was previously running VMWare VSphere 5.5 without problem.
The BIOS settings for Intel Virtualization and Execute Disable Bit are both enabled.
The server has been physically shutdown and powered off numerous times, but still doesn't work.
I've read Ben Armstrong's notes on setting the Hypervisor Launch type in BCDEdit
Here's the current Boot Configuration Data
Windows Boot Manager
identifier {bootmgr}
device partition=\Device\HarddiskVolume8
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale en-US
inherit {globalsettings}
bootshutdowndisabled Yes
default {current}
resumeobject {06bff081-9477-11e4-ab74-9faf6fe9d444}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Windows Boot Loader
identifier {current}
device partition=C:
path \Windows\system32\winload.efi
description Windows Server 2012 R2
locale en-US
inherit {bootloadersettings}
recoverysequence {06bff083-9477-11e4-ab74-9faf6fe9d444}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \Windows
resumeobject {06bff081-9477-11e4-ab74-9faf6fe9d444}
nx OptOut
hypervisorlaunchtype Auto
Here's my System Info:
OS Name Microsoft Windows Server 2012 R2 Datacenter
Version 6.3.9600 Build 9600
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name HYPER1
System Manufacturer Supermicro
System Model X9SRL-F
System Type x64-based PC
System SKU To be filled by O.E.M.
Processor Intel(R) Xeon(R) CPU E5-2620 0 @ 2.00GHz, 2001 Mhz, 6 Core(s), 12 Logical Processor(s)
BIOS Version/Date American Megatrends Inc. 3.0a, 5/12/2013
SMBIOS Version 2.7
Embedded Controller Version 255.255
BIOS Mode UEFI
BaseBoard Manufacturer Supermicro
BaseBoard Model Not Available
BaseBoard Name Base Board
Platform Role Workstation
Secure Boot State Unsupported
PCR7 Configuration Not Available
Windows Directory C:\Windows
System Directory C:\Windows\system32
Boot Device \Device\HarddiskVolume8
Locale Australia
Hardware Abstraction Layer Version = "6.3.9600.17196"
User Name Not Available
Time Zone AUS Eastern Daylight Time
Installed Physical Memory (RAM) 96.0 GB
Total Physical Memory 96.0 GB
Available Physical Memory 93.0 GB
Total Virtual Memory 110 GB
Available Virtual Memory 107 GB
Page File Space 14.0 GB
Page File C:\pagefile.sys
Hyper-V - VM Monitor Mode Extensions
Yes
Hyper-V - Second Level Address Translation Extensions
Yes
Hyper-V - Virtualization Enabled in Firmware
Yes
Hyper-V - Data Execution Protection
Yes
I do have the following two errors in the Hyper-V server role event log that occur at system startup, but can't find any info on it:
Log Name: System
Source: Microsoft-Windows-Hyper-V-Hypervisor
Date: 12/01/2015 3:35:37 PM
Event ID: 63
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: HYPER1
Description:
Hypervisor launch failed; The hypervisor was unable to initialize successfully (phase 0x5), and was not started. This initialization failure may be the result of a platform configuration or firmware issue. Contact your system vendor for more
information or updated firmware.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Hyper-V-Hypervisor" Guid="{52FC89F8-995E-434C-A91E-199986449890}" />
<EventID>63</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2015-01-12T04:35:37.814579300Z" />
<EventRecordID>3955</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>HYPER1</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Phase">0x5</Data>
</EventData>
</Event>
Log Name: Microsoft-Windows-Hyper-V-VMMS-Admin
Source: Microsoft-Windows-Hyper-V-VMMS
Date: 13/01/2015 11:21:23 AM
Event ID: 15350
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: HYPER1
Description:
The virtualization infrastructure driver (VID) is not running.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Hyper-V-VMMS" Guid="{6066F867-7CA1-4418-85FD-36E3F9C0600C}" />
<EventID>15350</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2015-01-13T00:21:23.250980100Z" />
<EventRecordID>181</EventRecordID>
<Correlation />
<Execution ProcessID="1512" ThreadID="1576" />
<Channel>Microsoft-Windows-Hyper-V-VMMS-Admin</Channel>
<Computer>HYPER1</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<VmlEventLog xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/Windows/Virtualization/Events">
</VmlEventLog>
</UserData>
</Event>
I've also read a number of other threads that haven't assisted including:
- https://social.technet.microsoft.com/Forums/en-US/396c882f-2cc8-4bc8-804d-eec75c0b8066/virtual-machine-could-not-be-started-because-the-hypervisor-is-not-running
- https://social.technet.microsoft.com/Forums/windowsserver/en-US/85b323a8-9233-49b9-bc38-e28e7a4222c6/server-2008-hypervisor
There is no event ID 3112 in the event log, so this MS KB article (2490458) is not relevant
Following pics attached show BIOS settings for CPU and Virtualization / Execute Bit Disable settings:

I recently ran into this. The person had made a modification to the System Properties of the Windows operating system.
System Properties > Advanced > Performance > Settings ...
On the Performance Options window, select the Data Execution Prevention tab. Ensure Turn on DEP for all programs and services except those I select is the option selected. He had the other option selected. The only way to get it to get it working
was to change the setting, uninstall Hyper-V, reboot, install Hyper-V, reboot.
. : | : . : | : . tim

Hyper-V could not replicate changes for virtual machine 'machinename': The connection with the server was terminated abnormally (0x00002EFE).

I have a 3 node cluster that has replica setup to replicate to another cluster off-site.
Suddenly one of the servers is not replicating with the error:
Hyper-V could not replicate changes for virtual machine 'machinename': The connection with the server was terminated abnormally (0x00002EFE). (Virtual Machine ID CC0FD4CC-F9B7-4C68-ABE8-B7D52A87899F)
All other servers are replicating fine so there cannot be a permissions or connectivity issue between the 2 clusters.
This server has 2TB of data so I'd rather not have to start the replication again.
Does anyone have any pointers?
Thanks.

Hi drensta,
Based on my knowledge , "hyper-v replica broker " is needed for failover cluster replica .
Here is a link for "Why is the "Hyper-V Replica Broker" required?"
http://blogs.technet.com/b/virtualization/archive/2012/03/27/why-is-the-quot-hyper-v-replica-broker-quot-required.aspx
Hope this hleps
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Need some help with 2012 R2 Clustering Permissions (with Hyper-V)

Could someone please point me in the direction of some sensible documentation regarding how 2012 cluster permissions work?
I have a hosted Powershell application that sits in a C# web service wrapper. It automates everything to do with Hyper-V and works 100% of the time.
I want the account it is running under (via impersonation) to be able to automate the creation of cluster shared volumes and the addition of VMs as clustered roles.
I've written the code and i am confident it works, but I cannot get my head around how the permissions are supposed to be set-up.
Ideally, I want a single account per hyper-v node, that can:
a.) Administer Hyper-V locally (there seems to be a group for this bit - this is working OK).
b.) Create and add clustered shared volumes within the cluster.
c.) Can add and remove cluster (VM) roles.
d.) Can add and remove data (VHDs) on the CSV themselves.
I ideally like to have this account not be a domain admin, and pare down its rights to the those listed above.
I can't even begin to explain how lost I've got trying to get this to work. Even if I do add a new domain admin, for instance, it doesn’t even seem to be capable off adding cluster roles or deleting files from a CSV. I think I really need to take a step
back.
Is what I want to do even possible?
Thank you.

As far as storage: Your script would create the VHDX files on C:\ClusterStorage\Volume#
There is no special permission required for this other than perhaps local admin rights. I can create, delete, and mount VHDX files via Windows Explorer on any system in the domain within the CSV folder set.
UNC: \\NODE\C$\ClusterStorage\Volume#
As far as creating and deleting VMs on the cluster use the PowerShell commands as normal.
One option would be to use Group Policy Preferences to deliver a domain user account to the Local Administrators Group on the Hyper-V Nodes. That user account would be the one that would be used to run your required PS commands in a local admin context.
Another option would be to provision a local admin account with the same UN/Pwd across all nodes and use that for your PowerShell needs.
Philip Elder Microsoft Cluster MVP Blog: http://blog.mpecsinc.ca

Windows Server 2012 - Hyper-V - iSCSI SAN - All Hyper-V Guests stops responding and extensive disk read/write

We have a problem with one of our deployments of Windows Server 2012 Hyper-V with a 2 node cluster connected to a iSCSI SAN.
Our setup:
Hosts - Both run Windows Server 2012 Standard and are clustered.
HP ProLiant G7, 24 GB RAM, 2 teamed NIC dedicated to Virtual Machines and Management, 2 teamed NIC dedicated to iSCSI storage. - This is the primary host and normaly all VMs run on this host.
HP ProLiant G5, 20 GB RAM, 1 NIC dedicated to Virtual Machines and Management, 2 teamed NIC dedicated to iSCSI storage. - This is the secondary host that and is intended to be used in case of failure of the primary host.
We have no antivirus on the hosts and the scheduled ShadowCopy (previous version of files) is switched of.
iSCSI SAN:
QNAP NAS TS-869 Pro, 8 INTEL SSDSA2CW160G3 160 GB i a RAID 5 with a Host Spare. 2 Teamed NIC.
Switch:
DLINK DGS-1210-16 - Both the network cards of the Hosts that are dedicated to the Storage and the Storage itself are connected to the same switch and nothing else is connected to this switch.
Virtual Machines:
3 Windows Server 2012 Standard - 1 DC, 1 FileServer, 1 Application Server.
1 Windows Server 2008 Standard Exchange Server.
All VMs are using dynamic disks (as recommended by Microsoft).
Updates
We have applied the most resent updates to the Hosts, WMs and iSCSI SAN about 3 weeks ago with no change in our problem and we continually update the setup.
Normal operation
Normally this setup works just fine and we see no real difference in speed in startup, file copy and processing speed in LoB applications of this setup compared to a single host with 2 10000 RPM Disks. Normal network speed is 10-200 Mbit, but occasionally
we see speeds up to 400 Mbit/s of combined read/write for instance during file repair
Our Problem
Our problem is that for some reason all of the VMs stops responding or responds very slowly and you can for instance not send CTRL-ALT-DEL to a VM in the Hyper-V console, or for instance start task manager when already logged in.
Symptoms (i.e. this happens, or does not happen, at the same time)
I we look at resource monitor on the host then we see that there is often an extensive read from a VHDX of one of the VMs (40-60 Mbyte/s) and a combined write speed to many files in \HarddiskVolume5\System Volume Information\{<someguid and no file extension>}.
See iamge below.
The combined network speed to the iSCSI SAN is about 500-600 Mbit/s.
When this happens it is usually during and after a VSS ShadowCopy backup, but has also happens during hours where no backup should be running (i.e. during daytime when the backup has finished hours ago according to the log files). There is however
not that extensive writes to the backup file that is created on an external hard drive and this does not seem to happen during all backups (we have manually checked a few times, but it is hard to say since this error does not seem leave any traces in event
viewer).
We cannot find any indication that the VMs themself detect any problem and we see no increase of errors (for example storage related errors) in the eventlog inside the VMs.
The QNAP uses about 50% processing Power on all cores.
We see no dropped packets on the switch.
(I have split the image to save horizontal space).
Unable to recreate the problem / find definitive trigger
We have not succeeded in recreating the problem manually by, for instance, running chkdsk or defrag in VM and Hosts, copy and remove large files to VMs, running CPU and Disk intensive operations inside a VM (for instance scan and repair a database file).
Questions
Why does all VMs stop responding and why is there such intensive Read/Writes to the iSCSI SAN?
Could it be anything in our setup that cannot handle all the read/write requests? For instance the iSCSI SAN, the hosts, etc?
What can we do about this? Should we use MultiPath IO instead of NIC teaming to the SAN, limit bandwith to the SAN, etc?

Hi,
> All VMs are using dynamic disks (as recommended by Microsoft).
If this is a testing environment, it’s okay, but if this a production environment, it’s not recommended. Fixed VHDs are recommended for production instead of dynamically expanding or differencing VHDs.
Hyper-V: Dynamic virtual hard disks are not recommended for virtual machines that run server workloads in a production environment
http://technet.microsoft.com/en-us/library/ee941151(v=WS.10).aspx
> This is the primary host and normaly all VMs run on this host.
According to your posting, we know that you have Cluster Shared Volumes in the Hyper-V cluster, but why not distribute your VMs into two Hyper-V hosts.
Use Cluster Shared Volumes in a Windows Server 2012 Failover Cluster
http://technet.microsoft.com/en-us/library/jj612868.aspx
> 2 teamed NIC dedicated to iSCSI storage.
Use Microsoft MultiPath IO (MPIO) to manage multiple paths to iSCSI storage. Microsoft does not support teaming on network adapters that are used to connect to iSCSI-based storage devices. (At least it’s not supported until Windows Server 2008 R2. Although
Windows Server 2012 has built-in network teaming feature, I don’t article which declare that Windows Server 2012 network teaming support iSCSI connection)
Understanding Requirements for Failover Clusters
http://technet.microsoft.com/en-us/library/cc771404.aspx
> I have seen using MPIO suggests using different subnets, is this a requirement for using MPIO
> or is this just a way to make sure that you do not run out of IP adressess?
What I found is: if it is possible, isolate the iSCSI and data networks that reside on the same switch infrastructure through the use of VLANs and separate subnets. Redundant network paths from the server to the storage system via MPIO will maximize availability
and performance. Of course you can set these two NICs in separate subnets, but I don’t think it is necessary.
> Why should it be better to not have dedicated wireing for iSCSI and Management?
It is recommended that the iSCSI SAN network be separated (logically or physically) from the data network workloads. This ‘best practice’ network configuration optimizes performance and reliability.
Check that and modify cluster configuration, monitor it and give us feedback for further troubleshooting.
For more information please refer to following MS articles:
Volume Shadow Copy Service
http://technet.microsoft.com/en-us/library/ee923636(WS.10).aspx
Support for Multipath I/O (MPIO)
http://technet.microsoft.com/en-us/library/cc770294.aspx
Deployments and Tests in an iSCSI SAN
http://technet.microsoft.com/en-US/library/bb649502(v=SQL.90).aspx
Hope this helps!
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Lawrence
TechNet Community Support

Ubuntu running under Hyper-V with high load

I'm running a VM for Ubuntu Server 12.04 LTS under Hyper-V and with no web server or any other public server installed, the system load is 1.0
The VM is using a 75GB fixed VHD on its own partition (the hard drive is using raid 0).
Is this normal for running a linux OS under Hyper-V?
Here's what top shows (i restarted the vm for fresh numbers, but it still shows a load of 1.00 even after its been running for a day):
top - 16:58:17 up 23 min, 1 user, load average: 1.00, 0.58, 0.24
Tasks: 235 total,   1 running, 234 sleeping,   0 stopped,   0 zombie
Cpu(s): 0.0%us, 0.0%sy, 0.0%ni, 98.8%id, 1.0%wa, 0.0%hi, 0.2%si, 0.0%st
Mem:   4040336k total,   870384k used, 3169952k free,    13232k buffers
Swap: 7812092k total,        0k used, 7812092k free,   225396k cached
The host OS is running Windows 2012 R2 and it too isint running anything else that would put a lot of load on the server.

Hi Sir,
        The following daemons must be installed manually for Ubuntu distributions:
VSS Snapshot daemon – This daemon is required to create live Linux virtual machine backups.
KVP daemon – This daemon allows setting and querying intrinsic and extrinsic key value pairs.
To install both daemons, please use the following command:
Copy
# sudo apt-get update
# sudo apt-get install hv-kvp-daemon-init
# uname –r
<kernel release>
# sudo apt-get install linux-tool-<kernel release>
# sudo apt-get install linux-cloud-tools-<kernel release>
Please refer to note 5 , 9 within following article :
https://technet.microsoft.com/en-us/library/dn531029.aspx
As for linux VM running on hyper- v, I would suggest you to try to get further assistance from this forum:
https://social.technet.microsoft.com/Forums/en-US/home?forum=linuxintegrationservices&filter=alltypes&sort=lastpostdesc
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] .

PFsense in Hyper-V r2

Similar Messages

Maybe you are looking for