SLES 11 - Filesystemtype recommendations (on VMware)

Hello guys,
SLES 11 gives you the opportunity to choose from several filesystem types.
I am planning to setup some test cases for I/O performance measurement on SLES 11 (on VMware).
We are also running oracle databases on these servers so it's time to choose the right filesystem type for that.
I have already searched for some performance comparisons and only found this one on Oracle 9i:
[Document Oracle 9i - Linux Filesystems|http://www.oracle.com/technology/tech/linux/pdf/Linux-FS-Performance-Comparison.pdf]
The      basic conditions are:
Oracle 10gR2 and Oracle 11gR2
Filesize up to 20 GB
Async I/O or maybe Direct I/O (need to figure it out) ... Concurrent I/O is not available on Linux AFAIK
SAN storage (IBM DS8000) on which the filesystems will be located
SLES 11 on VMware ESX 4
Is there any suggestion by SAP which filesystem type should be used?
Any performance measurement by SAP?
Thanks and Regards
Stefan

Hello Markus,
> ReiserFS works as well if mounted with "-notail":
Yes, of course. We also set this option from the beginning on SLES 10 and it works.
The questions would be:
Which filesystem is faster for big files (up to 20 GB of each data file)?
Which filesystem is faster with aysnc/direct or concurrent I/O?
But as you already pointed out that Oracle chooses ext2, ext3 und OCFS2 NAS NFS for their tests .. it's hard to find such a performance comparsion with ReiserFS, etc.
Regards
Stefan

Similar Messages

  • VmWare / OAS 10.1.3 / SLES Linux?

    Hello!
    Is installation of OAS 10.1.3 on SLES 9 Linux on a VmWare Machine supported?
    regards
    Harald.

    Please refer to metalink note number Note 249212.1
    Regards
    Pavna

  • Using Pro/E on a Mac using VMWare Fusion or BootCamp

    Hi
    I have a MacBook Pro:
    Processor:2.4GHz Intel Core 2 Duo
    Memory: 4 GB 1067 Mhz DDR3
    And recently for uni I have had to find a way to get Pro Engineer, a CAD program, running on my Mac. My solution was to buy VMWare Fusion and instal Windows 7 on my Mac so I could then run the CAD program. Once I got that done windows was running well however once I got Pro Engineer installed it was incredibly slow and pretty much unusable.
    My question is has anyone got any experience with running this program on a similar machine and can help me solve this problem so I can run the program? Should I use bootcamp instead of VMWare? Would it make a difference?
    Thanks

    Yes, I would definitely recommend setting up BootCamp for this - it's relatively painless. (It can create a new partition in the unused space on your OS X disk without erasing the disk.) The BootCamp Assistant has detailed instructions on how to go about setting up a partition and installing Windows on it, but the gist of it is that you have the BootCamp Assistant create a partition for you, then you boot from your Windows install disc and install Windows on that partition. When you've booted into Windows for the first time, pop in your OS 10.6 install disc, and it will install Apple's hardware drivers and utilities for Windows. If you got 10.6 shortly after it came out, the drivers will be version 3.0 for Windows Vista - you'll need to download version BootCamp 3.1 from the Apple support site to ensure full support for Windows 7. (If you have a newer copy of 10.6, it might have the new drivers already - I don't know, as I have an older one.)
    I would, however, also recommend keeping VMWare Fusion (assuming you've already paid for it). Once Windows is set up in BootCamp, you can go into Fusion and create a virtual machine that's mapped to it (so you can also use your BootCamp installation as a virtual machine in your Mac if you don't need the full performance of booting into it natively). It should be fairly obvious how to do that - it will probably prompt you automatically. The virtualization also allows for as many different machines with as many OS's as you want - I'm running every version of Windows I've ever had in Parallels, plus a number of free OS's I'm trying out (BSD, Linux, Solaris). In short, it's a good thing to have.

  • SLES sp3 w/OES11 sp2 media upgrade reboot to cursor

    Pre-upgrade
    Sles 11 SP2, OES11 SP1, VMware 5.1 essentials on an Gen 8 HP Proliant DL380, plenty of RAM and CPU
    I ran the upgrade media on a test server and everything seemed to go fine a couple of weeks ago. My school district is on spring break, so I decided to do some upgrades. I ran the update media on our one and only file storage production server. I left the upgrade options default, only updating existing packages (I checked to make sure what we are using was upgraded) and I received no errors during the install. Upon reboot, after the VMware splash screen, it just stays at a cursor in the upper left corner of the screen. I tried to use system repair from the disk. It wanted to reinstall grub, but it hung on installing grub for 20+ minutes. I'm rerunning the repair now. Any other suggestions? I have until Monday to get this fixed. I'm avoiding using my prepaid support hours, but I have them if I need them.

    Originally Posted by elphantasmo
    Got the problem fixed. Called in support, and they fixed the boot loader. Took them about 2 hours of tinkering. Then it got passed off to someone who did one thing different. He ran the unsupported grub install and that seemed to fix things, after all the other tinkering. Finished the update and rebooted a few time without incident.
    So you originally did an offline upgrade from OES11sp1 to OES11sp2, right?
    I'm curious.... do you maybe have a separate partition for /boot?
    With what you are saying I can imagine something going wrong with the offline upgrade placing/upgrading boot files in the wrong location (in the /boot folder of the root partition instead of the boot partition), resulting in booting with an old kernel and thus having a mismatch with other files/drivers/libraries that did get updated properly.
    Good to hear that you were able to finish the upgrade in good order after having gotten the server boot fixed!
    Cheers,
    Willem

  • [SOLVED] Upgrade from SLES10 SP3 & OES2 SP2 to SP4/SP3 breaks NCS

    Hi folks,
    (This post was originally meant to be a rant and a request for help, but
    while writing the final paragraph i found the solution. It's still a
    rant, but i figured i'd post my solution here in case someone else runs
    into the same issue.)
    I've just spent several hours banging my head against a broken cluster
    node. My system is a 32-bit SLES 10 VM running on VMware ESX 3.5.x.
    I upgraded from SLES10 SP3 and OES2 SP2 to the next service packs for
    each (using the move-to-oes-sp3 script in yast2 online_update).
    Everything went well for the first few update/reboot sequences, then
    after the final reboot on SLES10 SP4 & OES2 SP3, cluster services would
    not load or join the cluster on restart.
    I checked dmesg and found errors about "Loading module compiled for
    kernel version 2.6.16.60-0.54.5-vmi" into a previous kernel version, so
    i tried downgrading to that kernel version, only to find that it was
    older than the one i had just upgraded from (it's the original SLES10
    SP3 kernel). So i tried upgrading back to the same kernel which is
    running on the other cluster node (2.6.16.60-0.77.1-vmi), but that did
    not work any better.
    <preaching>
    I have to say that i'm not impressed that OES2 SP3 isn't even compiled
    against the appropriate kernel, and because of SUSE's kernel RPM
    overwrite policy there's no way i can select to boot from a previous
    kernel to see if that fixes things. Note to SUSE and other distro
    builders: if you're not doing kernel package upgrades like Red Hat or
    Ubuntu (so that we can select to boot from the previous kernel from the
    boot menu), you're doing it *WRONG*.
    </preaching>
    I then upgraded again to the latest recommended kernel for SLES10 SP4,
    and still no joy. Dmesg shows this error before the rot starts:
    allocation failed: out of vmalloc space - use vmalloc=<size> to increase
    size.
    When searching for this error i stumbled across
    http://ubuntuforums.org/showthread.php?t=1613132
    which pointed me to
    http://www.mythtv.org/wiki/Common_Pr...lloc_too_small
    Adding vmalloc=192M to /boot/grub/menu.lst and rebooting solved the
    problem for me.
    Regards,
    Paul

    Originally Posted by Paul Gear
    On 13/10/11 07:36, magic31 wrote:
    > ...
    > Not sure if it's related to the issue you've hit, but along the lines
    > of what Kevin already mentioned, there are issues that can arries when
    > using the VMI kernel (that I've seen) if having multiple flavors of the
    > kernel installed along with it (as in having both kernel-vmi as also
    > kernel-smp packages installed) ...
    > Curious, is that also the case with your setup?
    The system in question has kernel-bigsmp and kernel-vmi installed. We
    only ever boot from kernel-vmi.
    > I've moved to only using the smp kernel on VMware (along with the
    > clock=pit boot option to avoid time drift issues, or pmtr I think in
    > your case when also running NCS services in the vm).
    When we installed the system (on OES2 SP1, i believe) it was a while
    ago, and kernel-vmi with clocksource=acpi_pm on the kernel command line
    was the only solution we could find to get reliable time. If there are
    updated best-practice documents, i'd be happy to hear about them.
    However, this is a production cluster and my boss is (rightly) rather
    reticent to make major changes.
    Paul
    the official Vmware paper on time is that IF you're using SLES 10.x 32-bit you will use VMI and NO kernel params (ie, get rid of the clockpit and clocksource=blah).
    But if 64-bit then you're okay.
    The easiest, IMO (especially with vmware) is to use the miggui (migration utility). That's how I'm converting all my 32-bit servers in vmware to 64-bit. Works quite well.
    --Kevin

  • Help with installing Windows 95 on Windows 7 64 bit Home Virtual PC

    I apologize in advance.  I am new to using Virtual PC and I don't understand what I'm doing wrong.  I am trying to create a virtual Windows 95 on my Windows 7 Home 64b computer in Virtual PC.  I have the original W95 cd, and I was able to
    create a Win95 boot disk.
    What I've done so far is:
    Create a Virtual drive in VPC.
    Attempt to install W95 using the cd.  The virtual system didn't install it.
    Created a W95 boot disk using a USB floppy drive.  The virtual system doesn't seem to access the USB floppy.
    Tried to enter the BIOS menu in the virtual drive and set the floppy as the initial boot drive.  The system doesn't access the floppy.
    Please let me know if you need any more info to answer this question.  Thanks!
    RK

    virtual machines won't detect usb floppy drives
    (you might also run into issues trying to install win95 on a 64 bit system not sure though)
    what you need to do is create a floppy image first
    Also use VMWARE player for win95.. virtual pc doesn't work well for it in windows 7
    so if you want to create a floppy image
    first download magiciso (it's free)
    go to new - floppy - 1.44
    copy the files from the usb floppy onto the newly created image
    save it
    now go to the image in your browser and change the extension from .ima to .flp (for VMWARE) or .img (for virtual pc)
    now you can mount the floppy image instead of using the drive all together :)
    here's an alternative method for installing windows 95 on a virtual machine as well
    installing windows 95 and CD driver manually without the floppy setup disk
    what you need:
    .DOS on a floppy or on an image (.flp .img)
    .Windows 95 cd
    .VMWARE player (it's free) or virtualpc (I recommend VMWARE)
    .Magiciso (the free trial version will do)
    .a copy of MSCDEX.EXE and oakcdrom.sys (both can be found online)
    step 1
    create a new virtual machine (make sure to add a floppy image drive if you are using vmware)
    step 2
    put your dos floppy/image in or mount it and install dos
    step 3
    download and install the free version of magiciso
    open magic iso
    go to new - floppy - 1.44
    find a copy of mscdex.exe
    find a copy of oakcdrom.sys (generic cd rom driver that works with dos.. might have to try another if it doesn't work)
    RENAME the oakcdrom.sys to cdrom.sys
    drag both these files into magic iso on the floppy disk we just created
    save the file
    close magic iso
    find the file we just saved in your explorer
    change the extension from .ima to .flp (if you are using vmware) or .img (if you are using virtualpc)
    (if you can't see the extensions you're going to need to change your folder options to show extensions)
    google it. it's easy to do
    step 4
    go back to your virtual machine
    mount the floppy image we just created
    a:\
    copy mscdex.exe c:\
    copy cdrom.sys c:\
    (don't forget to rename oakcdrom.sys to cdrom.sys in step 3)
    step 5
    find config.sys in your c drive
    type:
    edit config.sys
    now add a line that says this
    device=c:\cdrom.sys /d:mscd001
    exit and save
    step 6
    find autoexec.bat in your c drive
    type:
    edit autoexec.bat
    now add a line that says this
    c:\mscdex.exe /d:mscd001
    exit and save
    step 7
    restart the computer or virtual machine
    step 8
    we're still not done yet
    now move to your c drive and type
    mscdex.exe: /d:mscd001 /M:5 /V /L:d /S /K
    (this part /M:x refers to the amount of buffers your drive has.. it's either 4 or 5. usually 5)
    step 9
    create a blank floppy image either in vmware or magic iso then mount that new one
    put your windows 95 cd in the cd drive
    type:
    d:\
    setup.exe
    step 10
    it should be booting windows 95 now
    now you might run into troubles when it tries to install the other drivers
    it might ask you for windows floppies even if you're using the cd version
    which I never understood
    but anyways, you can find all of these drivers on the windows 95b cd if you have it
    they're all in cab files
    so you'd need to extract them 1 by 1 and put them on floppy images to use them.
    (huge pain)
    but I actually just got it to load the drivers off the win95 cd by just trying it over and over again until
    it worked. it might have been because I either did or didn't restart after putting in the windows 95 cd
    can't remember, but I'd try both if you're having trouble 
    all in all windows 95 is incredible wonky to install in a virtual machine. I highly recommend using VMWARE
    and not virtual pc for this one.
    If you didn't have a hard time installing this.. you got incredible lucky
    make sure you check to make sure windows95 is seeing your cd drive
    if not go to the add new hardware wizard in the control panel and see if that detects it
    Michael MacDonald
    State of Psychosis
    www.stateofpsychosis.com
    www.soundcloud.com/state-of-psychosis

  • Strange behaviour from new 2012R2 in old domain

    Hi all,
    At work (education level), I'm starting to take charge of windows admin, so beiing a noob admin I'm finding strange behaviours that I hope you can help me solve them all :-)
    We've one (big) domain with about 5000 computers (workers and students all together), and around 50000 users (again, workers and students all together) setup like this:
    DC-DOMAIN-1:
    Windows Server 2008R2
    Shares NETLOGON and SYSVOL
    DC-DOMAIN-2:
    Windows Server 2003 R2 x64
    Shares CertEnroll, NETLOGON, SMSLOGON, SYSVOL
    Checking RootDSE, I see 'domainControllerFunctionaly is Windows 2003' (DC-DOMAIN-2)
    So, with this setup, I've noticed these strange behaviours, hope list isn't too big  (guess there will be more behaviours but these seemed too odd):
    1) On DC-DOMAIN-2, WinServer 2003 eventlog, inside 'Directory Service', I found this warning event ID 1083 (Source NTDS Replication):
    Active Directory could not update the following object with changes received from the domain controller at the following network address because Active Directory was busy processing information.
    Object:CN=<an user name>, CN=Users, DC=DOMAIN
    Usually followed by an information event (eventid 1955) which says:
    ctive Directory encountered a write conflict when applying replicated changes to the following object.
    Object:
    <SAME USER OBJECT THAN PREVIOUS EVENT ID>
    Time in seconds:
    0
    Event log entries preceding this entry will indicate whether or not the update was accepted.
    A write conflict can be caused by simultaneous changes to the same object or simultaneous changes to other objects that have attributes referencing this object. This commonly occurs when the object represents a large group with many members, and the functional level of the forest is set to Windows 2000. This conflict triggered additional retries of the update. If the system appears slow, it could be because replication of these changes is occurring.
    User Action
    Use smaller groups for this operation or raise the functional level to Windows Server 2003.
    And having as result that user being blocked in domain.
    2) I've added a new print server based on Windows Server 2012R2 (running inside an updated ESX 5.5 with VMXNET3 ethernet adapter as recommended by vmware), and seen in the event viewer these warnings/errors:
    At System log:
    Error Event ID 5783, Source NETLOGON:
    The session setup to the Windows NT or Windows 2000 Domain Controller \\DC-DOMAIN-2.fulldns.name for the domain DOMAIN is not responsive. The current RPC call from Netlogon on \\PRINTSERVER to \\DC-DOMAIN-2.fulldns.name has been cancelled.
    I've seen Event ID 5783 with DC-DOMAIN-1 too....
    Error Event ID 5719, Source NETLOGON:
    This computer was not able to set up a secure session with a domain controller in domain DOMAIN due to the following:
    The remote procedure call failed and did not execute.
    This may lead to authentication problems. Make sure that
    this computer is connected to the network. If the problem persists, please contact your domain administrator.
    ADDITIONAL INFO:
    If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
    At Microsoft-Windows-TerminalServices-RemoteConnectinoManager/Admin found also this warning:
    Warning Event ID 20499 Source TerminalServices-RemoteConnectionManager:
    Remote Desktop Services has taken too long to load the user configuration from server \\DC-DOMAIN-2.fulldns.name for user administrator
    3) If I try Group Policy Modeling on DC-DOMAIN-1 (server 2008R2), everything works fine, no matter if I try it against DC-DOMAIN-1 or DC-DOMAIN-2, but if I try this from the Server 2012R2 (the one from point 2), I get this:
    Simulation against DC-DOMAIN-2: Gets executed, but all GPO show as inaccessible, empty or disabled.
    Simulation against DC-DOMAIN-1: Sometimes it gets executed as DC-DOMAIN-2, sometimes I get an error saying query can't be executed.
    4) From server 2012R2, I usually manage printing GPO. If I click on the domain root (GPMC, forest, Domains, DOMAIN-NAME-ROOT) right pane, I get a pop up saying: 
    'A processing error ocurred collecting data using this base domain controller. Please change the base domain controller and try again'
    After closing popup, right pane says something like 'DC-DOMAIN-2.fulldns.name' is the baseline domain controller for this domain.
    No infrastructure Status information exists for this domain.
    Click the Detect Now button below to gather infrastructure status from all of the domain controllers in this domain.
    Pressing 'Detect Now' does nothing, and trying to select New Baseline DC shows again same pop up than before.
    5) Last, but not least, I've feeling that GPO takes too much to apply. I've found scenarios in which even after executing 'gpupdate /force' correctly on client computer either local or domain admin, I can't see the new changes (gpresult says it has been
    updated though). But couldn't find anything on eventlog that informs about problems with GPOs...
    For all these strange behaviours I've noticed in last month that I started checking things as sys admin, I believe domain is damaged, or something is wrong there (not just my new server 2012R2, even if it's running inside an ESX, blehh), so please, any hint
    on what to check, what to change, what to fix, would be highly appreciated.
    Thanks in advance.

    Hi Paul,
    Honestly, I'm still trying to figure out all broken things reported by tests :( Guess Jesper's suggestion about adding a new 2008 DC to get rid of 2003 and start checking again after that may be best option.
    I'll try to summarize list of things I believe are wrong:
    running
    DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log  for every DC, shows different errors. They show things such as:
    another domain running here (not administered by us, only relationship is that our users are shared with that domain, nothing else) appear when Printing out pDsInfo (as if they were DC of our domain too, but they do not even share RootDomain). Guess it
    may be for a bug old sys admin had when clonning from his 2008R2 template, that forgot to change SID... I already noticed 1 year ago our print server shared SID with those DC, guess there may be more servers sharing SID too :-(
    Within Starting test: Replications, I see few messages at Replication Latency Check, such as the one for CN=Schema, CN=Configuration, DC=<ourdomain>: 
    Latency information for 35 entries in the vector were ignored.
                      35 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC)
    On Services test, I see an 
       Invalid service type: RpcSs on DC-DOMAIN-3, current value
                WIN32_OWN_PROCESS, expected value WIN32_SHARE_PROCESS
    On SystemLog, I see LOTS of warnings/errors such as:
    A warning event occurred.  EventID: 0x80000002
                Time Generated: 07/28/2014   08:21:54
                (Event String (event log = System) could not be retrieved, error
                0x503)
             An error event occurred.  EventID: 0xC0000003
                Time Generated: 07/28/2014   08:22:18
                (Event String (event log = System) could not be retrieved, error
                0x3afc)
    Missing entries on DNS (we've a static DNS)
    netdiag.exe /v > c:\netdiag.log Showed again DNS problems such as our primary DNS pointing to all DC, secondary
    DNS pointing just to DC with FSMO roles,...
    repadmin.exe /showrepl * /verbose /all /intersite > c:\repl.txt  Gave no errors, now I must check in detail
    if every replica is correct
    And finally,
    dnslint /ad /s "ip address of your dc"  gave more DNS problems:
    One or more DNS servers may not be authoritative for the domain
    One or more DNS servers did not respond to UDP queries
    One or more zone files may have expired
    SOA record data was unavailable and/or missing on one or more DNS servers
    Sumarizing, guess it will be better to fix DNS problems, promote new 2008R2 DC to get rid of 2003 one, promote domain to 2008 too, check again for messages and relationship with other domain, and then come back here for support if needed 
    EDIT: Almost forgot to talk about SYSVOL folder. As said before, there are 426 GPO folders inside Policies. Of them, 375 have an inetres.adm files in it (smallest one 1398 KB, almost all of them 2307 or 2707 kb).... 

  • Any way to stop Data Synchronizer from syncing every folder?

    SLES 11 64 bit for VMware.
    Groupwise connector 1.0.3.512
    Mobility connector 1.0.3.1689
    I have "folders" unchecked every place you can uncheck them.
    Still the Groupwise connector insists on syncing every single folder in a user's cabinet and contacts (even the ones that are unselected in the Groupwise connector->user edit section).
    I do *not* mean that it force syncs these folders to the device, just that it syncs them into the "folder list" section that you can monitor from Mobility Connector->Monitor->Click on user name.
    Most of our users have dozens of folders, and all the scrolling makes it kind of a pain to monitor the folder (ONE) and address books (usually 1-2) that they are syncing. Also, it seems like adding a ton of unneeded work to the system, and it eats up a pretty good chunk of CPU.

    rhconstruction wrote:
    > So, do the "Folders" checkboxes currently do anything?
    If you are talking about the Folder checkboxes in the GroupWise connector, these
    do not current pertain to Mobility. Remember that Mobility is part of a larger
    "Data Synchronizer" product, with connectors to other components like SugarCRM,
    Teaming, etc. So, some of the GroupWise connector settings show for all types
    of connectors, but do not always apply to each connector.
    Danita Zanr
    Novell Knowledge Partner
    Get up and running with Novell Mobility!
    http://www.caledonia.net/gw-mobility.html

  • VCloud: vShield Edge FW Rules

    Hi all
    I'm looking for a way to get and set firewall rules on a vShield Edge firewall in a vCloud environment.  My final target is to write two scripts; one that will export the firewall rules from a given vShield Edge firewall to CSV and another script that will import them from CSV into another vShield Edge firewall.  This is to help with a DR scenario where we'll shift a public IP block from a public facing vShield Edge in one vCloud environment to one in another environment.
    I need to do this through the vCloud API or PowerCLI because, if I do it directly at the vShield Manager, vCloud won't know about the changes that have been made.  I'm not a Powershell expert by any means but I'm picking things up as I have a need for them.  I've looked through several blog posts people have written and it looks as though I need to dig down into ExtensionData as there aren't get and sets for the info I'm after.  I've found some info which is really close to what I'm after in this post:
    Deepdive: vCloud vApp Networks | Geek after Five
    This covers pulling the information from the GetNetworkConfigSection method in the Extensiondata of a vApp.  The issue I have is that the vShield Edge / network I'm after information from, isn't actually in a vApp.  It's a bit of a funny setup but I've got a vShield Edge firewall connected to the Internet and to an Org Network.  No VMs or vApps are connected to the Org Network.  Instead, I have about a dozen vApps, each with a vApp network and a vShield Edge connecting the vApp network to the Org Network.  This was a strategy recommended by VMware to overcome the limitation of 10 networks on the public facing vShield Edge and works brilliantly in that respect.  However... the public facing vShield Edge and Org Network are not in a vApp I can't use $vapp.ExtensionData.GetNetworkConfigSection()
    Thinking about it while writing this, I guess one option would be to create another vApp and add the Org Network to it, then I might be able to get the info using GetNetworkConfigSection() but I wonder if there is a better/proper/prettier way to do it.
    thanks in advance!
    Dave

    So one of my more skilled colleagues matured this script and incorporated forcing you to specify both the OrgName and the VSE name to reduce errors as well as input from a CSV. I'll have a go at incorporating existing rules via VSM api soon.
    # Replaces all rules for a given vshield with the ones from a CSV file.
    # CSV header is: Num,Descr,Proto,SrcIP,SrcPort,DstIP,DstPortRange,Policy,Direction,isEnabled,EnableLogging
    # http://pubs.vmware.com/vcd-51/index.jsp?topic=%2Fcom.vmware.vcloud.api.reference.doc_51%2Fdoc%2Ftypes%2FFirewallRuleType.html
    # Note: SrcPort can be -1 (for any), any or a port number. DstPortRange can be any or a port number range (ex: 22-26)
    param (
    [parameter(Mandatory = $true, HelpMessage="vCD Server")][alias("-server","s")][ValidateNotNullOrEmpty()][string[]]$CIServer,
    [parameter(Mandatory = $true, HelpMessage="Org")][alias("-vOrg","o")][ValidateNotNullOrEmpty()][string[]]$orgName,
    [parameter(Mandatory = $true, HelpMessage="OrgNet")][alias("-orgNet","n")][ValidateNotNullOrEmpty()][string[]]$orgNet,
    [parameter(Mandatory = $true, HelpMessage="CSV Path")][alias("-file","f")][ValidateNotNullOrEmpty()][string[]]$csvFile
    # Add in the VI Toolkit
    if ( (Get-PSSnapin -Name VMware.VimAutomation.Core -ErrorAction SilentlyContinue) -eq $null ) {
    Add-PSsnapin VMware.VimAutomation.Core
    if ( (Get-PSSnapin -Name VMware.VimAutomation.Cloud -ErrorAction SilentlyContinue) -eq $null ) {
    Add-PSsnapin VMware.VimAutomation.Cloud
    try {
    Connect-CIServer -Server $CIServer 2>&1 | out-null
    } catch {
    Exit
    #Search EdgeGW
    try {
      $myOrgNet = Get-Org -Name $orgName | Get-OrgNetwork -Name $orgNet
      $edgeHREF = $myOrgNet.ExtensionData.EdgeGateway.Href
      $edgeView = Search-Cloud -QueryType EdgeGateway -ErrorAction Stop | Get-CIView | where {$_.href -eq $edgeHREF}
    } catch {
    [System.Windows.Forms.MessageBox]::Show("Exception: " + $_.Exception.Message + " - Failed item:" + $_.Exception.ItemName ,"Error.",0,[System.Windows.Forms.MessageBoxIcon]::Exclamation)
      Exit
    #Item to Configure Services
    $edgeView.Configuration.EdgeGatewayServiceConfiguration
    $fwService = New-Object vmware.vimautomation.cloud.views.firewallservice
    $fwService.DefaultAction = "drop"
    $fwService.LogDefaultAction = $false
    $fwService.IsEnabled = $true
    $fwService.FirewallRule = @()
    Ipcsv -path $csvFile |
    foreach-object `
    $fwService.FirewallRule += New-Object vmware.vimautomation.cloud.views.firewallrule
    $rowNum = $_.Num -as [int]
    $fwService.FirewallRule[$rowNum].description = $_.Descr
    $fwService.FirewallRule[$rowNum].protocols = New-Object vmware.vimautomation.cloud.views.firewallRuleTypeProtocols
    switch ($_.Proto)
    "tcp" { $fwService.FirewallRule[$rowNum].protocols.tcp = $true }
    "udp" { $fwService.FirewallRule[$rowNum].protocols.udp = $true }
    "any" { $fwService.FirewallRule[$rowNum].protocols.any = $true }
    default { $fwService.FirewallRule[$rowNum].protocols.any = $true }
    $fwService.FirewallRule[$rowNum].sourceip = $_.SrcIP
    if ($_.SrcPort -eq "any" ) { $srcPort = "-1" } else { $srcPort = $_.SrcPort }
    $fwService.FirewallRule[$rowNum].sourceport = $srcPort
    $fwService.FirewallRule[$rowNum].destinationip = $_.DstIP
    $fwService.FirewallRule[$rowNum].destinationportrange = $_.DstPortRange
    $fwService.FirewallRule[$rowNum].policy = $_.Policy
    $fwService.FirewallRule[$rowNum].direction = $_.Direction
    $fwService.FirewallRule[$rowNum].MatchOnTranslate = [System.Convert]::ToBoolean($_.MatchOnTranslate)
    $fwService.FirewallRule[$rowNum].isenabled = [System.Convert]::ToBoolean($_.isEnabled)
    $fwService.FirewallRule[$rowNum].enablelogging = [System.Convert]::ToBoolean($_.EnableLogging)
    #configure Edge
    $edgeView.ConfigureServices($fwService)
    Example of the csv file:
    Num,Descr,Proto,SrcIP,SrcPort,DstIP,DstPortRange,Policy,Direction,MatchOnTranslate,isEnabled,EnableLogging
    0,Allow incoming 80 to webS,tcp,any,any,172.31.31.100,80,allow,in,true,true,false
    1,Allow incoming 22 to webS,tcp,any,any,172.31.31.100,22,allow,in,true,true,false
    2,Allow all outgoing,any,any,any,any,any,allow,out,true,true,false
    Example of invocation:
    .\load_firewall_rules.ps1 -s 10.16.1.229 -o "Org" -n "DmzNet" -f .\test_csv.csv

  • Tiger and Snow Leopard on the same Mac

    I need to use some Apps that are Tiger only and so I thought to install Tiger on my MBP using a virtualization software. What would you recommend? VMWare Fusion? Parallels? Any other?
    Thank you!

    Advanced User wrote:
    ah... then
    Is there a way to RUN TIGER on my MBP? Anyone?
    NO. if you want to run tiger you'll need an older mac. there is NO way to run it on your MBP.
    Thanks
    Message was edited by: V.K.

  • Large Deployment Upgrade Checklist

    Short checklist to upgrade a large deployment (Maybe it helps somebody to avoid trouble.)
    @Filr 1.0.1
    Shutdown
    @Search 1.0.1
    Shutdown
    @SQL 1.0.1
    Shutdown
    create new disc and attach as SCSI 2:0 for backup
    Power on
    copy mysqlbackup.zip
    unzip and run mysqlbackup
    Shutdown
    Deploy the new OVFs (can be done at the same time)
    SQL 1.1
    Search 1.1
    Filr 1.1
    @SQL 1.1
    Copy VASTORAGE-Disc from SQL_1.0.1 to SQL_1.1 and attach as SCSI 1:0
    Create new disc for VAR (Logs) with SCSI 2:0
    Copy backup-disc from SQL_1.0.1 to SQL_1.1 and attach as SCSI 3:0
    Adjust CPU/memory/swap/etc to your demands
    Power on
    Do the upgrade and wait until it is finished
    Check if all services are running (@:9443)
    IMPORTANT: Create the same User and password for Filr-database access you had before (it ist NOT migrated!!!) in phpMyAdmin (@:9443)
    recommended: install vmware-tools
    @Search 1.1
    Copy VASTORAGE-Disc from Search_1.0.1 to Search_1.1 and attach as SCSI 1:0
    Create new disc for VAR (Logs) with SCSI 2:0
    Adjust CPU/memory/swap/etc to your demands
    Power on
    Do the upgrade and wait until it is finished
    Check if all services are running (@:9443)
    recommended: install vmware-tools
    @Filr 1.1
    Copy VASTORAGE-Disc from Filr_1.0.1 to Filr_1.1 and attach as SCSI 1:0
    Create new disc for VAR (Logs) with SCSI 2:0
    Adjust CPU/memory/swap/etc to your demands
    double check if you have created the database user (@SQL 1.1 Step 8)
    Power on
    Do the upgrade and wait until it is finished
    Check if all services are running (@:9443)
    Adjust the settings for your networkservers (Windows/Netware etc) (@:8443)
    Reindex all folders (@:8443)
    recommended: install vmware-tools
    Your done!
    Optional (housekeeping):
    Shutdown all appliances (Order: 1.Filr, 2.Search, 3.SQL) and delete the backup-disc @SQL_1.1
    Power on again (Order: 1.SQL, 2.Search, 3.Filr)
    Delete the old 1.0.1 versions

    Great info, thx for posting!
    Thomas

  • ?purchase of MBP or new pc (especially re; microsoft office)?

    I need to update my laptop. I am a college professor and have a Mac desktop at home. I would really like to use a Macbook Pro for my school presentations and grading programs. However, I am very concerned about the compatibility between the Mac version of Microsoft Office 2003/2008 if I purchase the MPB and the PC version of the Office suite 2004/2007. I must use the pc version at work as other professors share the presentations. They are all written using pc microsoft office 04/07. I have heard mixed reviews about compatibility of the office suite using programs such as bootcamp or parallels. Any thoughts?

    I have heard mixed reviews about compatibility of the office suite using programs such as bootcamp or parallels.
    Care to elaborate?
    I would recommend trying VMware Fusion before you go with running Windows natively (which is all BootCamp is, helps install XP on its own partition).
    OpenOffice for Windows is a step ahead of NeoOffice for OS X but works somewhat well with Office suite files.
    I don't think Office needs to run natively but if Fusion doesn't work for you, you could go that route.
    http://communities.vmware.com/community/vmtn/desktop/fusion
    http://forums.parallels.com/
    http://porting.openoffice.org/mac/2.0.x.html
    http://ftp.cusoo.org/MacOSX/INTEL/snapshotsaqua/september11th/
    http://www.openoffice.org/
    http://www.neooffice.org/

  • Recommended vmware settings for OES11

    Are there any recommendations for virtualizing OES11 with vmware vsphere (ESXi 4.1 or 5)?
    1. While installation (near at the beginning) there is a choice for the virtualization type.
    The relevant choices are "physical Computer" or "paravirtualized Computer"
    Is "physical" really the best choice for vmware, because thats also the setting for fully virtualized guests.
    2. SLES11 SP1 support paravitualized drivers for harddisks and usually that is a big performance boost on a suitable server (RAID Controller, SAS Drives, etc.)
    What's with OES11 here even if using NSS Volumes?
    thanks
    Tobi

    The bit about the removing and readding the NIC as VMXNET3 is unnecessary:
    SLES 11.1 distribution includes a VMXNET3 driver, so you can create the VM
    with a VMXNET3 NIC to begin with and have it seen during installation and
    before the tools are added.
    Can't say I bother with pvscsi. You only see benefits under very high I/O
    load. This is outweighed for me by the nuisance value of having disk
    drivers that may fail after a kernel upgrade. VMware tools are not very
    robust in this respect I find.
    regards
    Martin
    "magic31" <[email protected]> wrote in message
    news:[email protected]...
    >
    > TFe;2163217 Wrote:
    >> Are there any recommendations for virtualizing OES11 with vmware vsphere
    >> (ESXi 4.1 or 5)?
    >>
    >> 1. While installation (near at the beginning) there is a choice for the
    >> virtualization type.
    >> The relevant choices are "physical Computer" or "paravirtualized
    >> Computer"
    >> Is "physical" really the best choice for vmware, because thats also
    >> the setting for fully virtualized guests.
    >>
    >> 2. SLES11 SP1 support paravitualized drivers for harddisks and usually
    >> that is a big performance boost on a suitable server (RAID Controller,
    >> SAS Drives, etc.)
    >> What's with OES11 here even if using NSS Volumes?
    >>
    >> thanks
    >> Tobi
    >
    > Hi Tobi,
    >
    > No official word on it yet that I've seen, but the way I'm setting up
    > and which is looking good:
    >
    > 1) Install SLES 11 using the installers virtualization type option for
    > : Physical Computer
    >
    > 2) After having installed OES11;
    > - install the latest VMware tools
    > - remove the eth0 entry in /etc/udev/rules.d/70-persistent-net.rules
    > (assuming single nic setup)
    > - shutdown the VM and configure the Vm's SCSI controller to run in
    > paravirtual mode (pvscsi) and also remove net nic and readd as VMXnet3.
    >
    > Boot back up again and network and disk drivers should be running as
    > optimal as possible.
    >
    > As a note, for SLES 11 SP1 and up this is a good idea... for SLES
    > 10.OES2 (that uses an older kernel) this is not such a hot idea.
    > Also make sure you are either running the latest vSphere 4.1 code or
    > 5.
    >
    > Cheers,
    > Willem
    >
    >
    > --
    > Novell Knowledge Partner (voluntary sysop)
    >
    > It ain't anything like Harry Potter.. but you gotta love the magic IT
    > can bring to this world
    > ------------------------------------------------------------------------
    > magic31's Profile: http://forums.novell.com/member.php?userid=2303
    > View this thread: http://forums.novell.com/showthread.php?t=449924
    >

  • Windows 2008 R2: SLES 11 Sp3 Guest converted from Vmware OVA to VHD, does not boot on Hyper-V: could not find /dev/sda4

    Hi
    I have a VMWare OVA file with Guest OS as SLES 11 Sp3. I have converted this file from OVA to VHD using Microsoft Virtual Machine Converter Solution accelerator. On first boot of this VHD on Windows Server 2008 R2 - Microsoft Hyper-V I get an error that
    "Waiting for device /dev/sda4 to appear..
    Cannot find /dev/sda4"
    I have not even booted this VM once on Hyper-V, and hence not installed any Linux integration Services yet.
    What could be the possible reason for this failure? Any suggested solution?
    Thanks
    Ashwini

    Easiest way (and also applies to Hyper-V 2012 R2):
    Ok, following properly (originally missed the step to mount the root directory of the converted VM as "/mnt" )
    http://nwrickert2.wordpress.com/2011/10/24/rescuing-susie/
    Then once chrooted
    mkinitrd -d /dev/sda2
    generated initrd from kdump WITH Hyper-V drivers & VM is usable!
    http://forums.opensuse.org/showthread.php/476780-boot-failure-mkinitrd-does-not-understand-that-dev-sda-has-become-dev-sde
    Can't believe that it was so painful to find the right info easily
    Just to finish it off, after converted machine boots fine, there is a small
    matter of removing tools & fixing networking as per links below:
    https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.upgrade.doc%2FGUID-6F7BE33A-3B8A-4C57-9C35-656CE05BE22D.html
    http://www.vcritical.com/2010/10/getting-eth0-back-in-a-sles-for-vmware-clone/
    All done!!!
    Also (unsupported), but works fine is SLES 11 SP1

  • Recommended NTP Settings for virtual 2008 R2 PDC (on VMWare)

    Hi,
    Can someone peer-check my settings please for my PDC. We have had time slip issues and this is my proposal:
    Read articles and some blogs from Ace Fekay.
    http://blogs.msdn.com/b/w32time/archive/2009/02/02/group-policy-settings-explained.aspx
    http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1318
    http://support.microsoft.com/kb/816042
    Environment
    Domain / Forest FL 2003
    All RWDC's / RODC's are 2008 R2
    PDC is virtual running on VMware. It is not syncing with ESX host, it is an NTP server syncing extrernally. All other DC's / Clients using NT5DS (Domain hierarchy). Incidentily the ESX host sync with external time source also.
    PDC Registry Settings:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameter\
    Type: NTP
    NtpServer : 1.ntp.org,0x8 2.us.pool.ntp.org,0x8
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer
    Enabled : 1
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config
    MaxPosPhaseCorrection : 3600 (1 hour)
    MaxNegPhaseCorrection : 3600 (1 hour)
    AnnounceFlags : 5
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient\SpecialPollInterval
    set at 900 (15 min)
    Run on the PDC:
    w32tm /config /manualpeerlist:1.us.pool.ntp.org,0x8 2.us.pool.ntp.org,0x8 /syncfromflags:manual /reliable:yes /update
    H:\>w32tm /query /status
    Leap Indicator: 0(no warning)
    Stratum: 3 (secondary reference - syncd by (S)NTP)
    Precision: -6 (15.625ms per tick)
    Root Delay: 0.1389195s
    Root Dispersion: 0.0470948s
    ReferenceId: 0xAE85A8C2 (source IP:  174.133.168.194)
    Last Successful Sync Time: 14/10/2011 10:37:18
    Source: 2.us.pool.ntp.org,0x8
    Poll Interval: 9 (512s)
    Run on DC's
    w32tm /config /syncfromflags:domhier /update (then start / stop time service)
    run on clients
    w32tm /resync
    How does this look?

    Hi,
    Thanks for posting here.
    So have you got any problem with current settings in virtualization environment?
    Maybe you can take look the blog post below, some suggestions on how to set NTP service on domain controller in virtualization environment have been discussed in that
    for reference :
    Virtualization of Domain Controllers part Deux
    http://blogs.technet.com/b/janelewis/archive/2008/06/20/virtualization-of-domain-controllers-part-deux.aspx
    Virtual Domain Controllers and Time Synchronisation
    http://blogs.technet.com/b/pfe-ireland/archive/2008/05/08/virtual-domain-controllers-and-time-synchronisation.aspx
    Thanks.
    Tiger Li
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Maybe you are looking for