You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-vmware/faq.yml
+35-36Lines changed: 35 additions & 36 deletions
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ metadata:
5
5
ms.topic: faq
6
6
ms.service: azure-vmware
7
7
ms.custom: contperf-fy21q4
8
-
ms.date: 09/29/2021
8
+
ms.date: 06/02/2022
9
9
title: Common questions about Azure VMware Solution
10
10
summary: This article answers commonly asked questions about Azure VMware Solution.
11
11
@@ -99,20 +99,20 @@ sections:
99
99
100
100
101
101
102
-
- name: VMware software
102
+
- name: VMware solution software
103
103
questions:
104
104
105
105
- question: Can Azure VMware Solution VMs be managed by VMRC?
106
-
answer: Yes. Provided the system it's installed on can access the private cloud vCenter and is using public DNS to resolve ESXi hostnames.
106
+
answer: Yes. Provided the system it's installed on can access the private cloud vCenter Server and is using public DNS to resolve ESXi hostnames.
107
107
108
108
- question: Are there special instructions for installing and using VMRC with Azure VMware Solution VMs?
109
109
answer: No. To meet the VM prerequisites, follow the [instructions provided by VMware](https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.vm_admin.doc/GUID-89E7E8F0-DB2B-437F-8F70-BA34C505053F.html).
110
110
111
111
- question: Can I use vRealize Suite running on-premises?
112
-
answer: vRealize Automation, vRealize Operations Manager, and vRealize Network Insight are certified for use with Azure VMware Solution when those products are installed in an on-premises datacenter. The cloud-based versions of these products--vRealize Automation Cloud, vRealize Operations Cloud, and vRealize Network Insight Cloud--are also certified for use. Installing these products within an Azure VMware Solution private cloud is not supported.
112
+
answer: vRealize Automation, vRealize Operations Manager, and vRealize Network Insight are certified for use with Azure VMware Solution when those products are installed in an on-premises data center. The cloud-based versions of these products--vRealize Automation Cloud, vRealize Operations Cloud, and vRealize Network Insight Cloud--are also certified for use. Installing these products within an Azure VMware Solution private cloud is not supported.
113
113
114
114
- question: Can I migrate vSphere VMs from on-premises environments to Azure VMware Solution private clouds?
115
-
answer: Yes. VM migration and vMotion can be used to move VMs to a private cloud if standard cross vCenter [vMotion requirements](https://kb.vmware.com/s/article/2106952?lang=en_US&queryTerm=2106952) are met.
115
+
answer: Yes. VM migration and vMotion can be used to move VMs to a private cloud if standard cross vCenter Server [vMotion requirements](https://kb.vmware.com/s/article/2106952?lang=en_US&queryTerm=2106952) are met.
116
116
117
117
- question: Is a specific version of vSphere required in on-premises environments?
118
118
answer: The on-premises environment must be running vSphere 6.0 or later if VMware HCX will be used to migrate VMs.
- question: How often is the VMware software (ESXi, vCenter, PSC, and NXS) patched, updated, or upgraded in the Azure VMware Solution private cloud?
127
+
- question: How often is the VMware solution software (ESXi, vCenter Server, NSX-T Data Center) patched, updated, or upgraded in the Azure VMware Solution private cloud?
- question: Do private clouds use VMware NSX? If so, which version is supported?
131
+
- question: Do private clouds use VMware NSX Data Center? If so, which version is supported?
132
132
answer: |
133
-
Yes, NSX-T is the only supported version of NSX.
133
+
Yes, NSX-T Data Center is the only supported version of NSX Data Center.
134
134
135
135
NSX-T [!INCLUDE [nsxt-version](includes/nsxt-version.md)] is used for the software-defined networking in Azure VMware Solution private clouds.
136
136
137
-
- question: Is NSX required in on-premises environments or networks that connect to a private cloud?
138
-
answer: No, you aren't required to use NSXon-premises.
137
+
- question: Is NSX-T Data Center required in on-premises environments or networks that connect to a private cloud?
138
+
answer: No, you aren't required to use NSX-T Data Center on-premises. VMware HCX provides the necessary connectivity between on-premises vSphere and Azure VMware Solution.
139
139
140
-
- question: Is NSX-T Identity Firewall supported with Azure VMware Solution?
141
-
answer: Yes, NSX-T Identity Firewall is supported with Azure VMware Solution.
140
+
- question: Is NSX-T Data Center Identity Firewall supported with Azure VMware Solution?
141
+
answer: Yes, NSX-T Data Center Identity Firewall is supported with Azure VMware Solution.
142
142
143
143
- question: Is VMware Horizon 8 2012 compatible with Azure VMware Solution?
144
144
answer: Yes.
145
145
146
-
- question: Can I change the default vSphere Web Client timeout value?
147
-
answer: Yes. For information on changing the timeout value, see [Configure the vSphere Web Client Timeout Value](https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.vcenterhost.doc/GUID-975412DE-CDCB-49A1-8E2A-0965325D33A5.html).
146
+
- question: Can I change the default vSphere Client timeout value?
147
+
answer: Yes. For information on changing the timeout value, see [Configure the vSphere Client Timeout Value](https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.vcenterhost.doc/GUID-975412DE-CDCB-49A1-8E2A-0965325D33A5.html).
148
148
149
149
150
150
@@ -169,7 +169,7 @@ sections:
169
169
- question: How much memory is in each host?
170
170
answer: The servers have 576 GB of RAM.
171
171
172
-
- question: Does Azure VMware Solution support running ESXi/ESX as a nested virtualization solution?
172
+
- question: Does Azure VMware Solution support running ESXi as a nested virtualization solution?
173
173
answer: No. VMware does not officially support nested virtualization.
174
174
175
175
@@ -236,17 +236,17 @@ sections:
236
236
237
237
- question: How do I connect a workload VM to the internet or an Azure service endpoint?
238
238
answer: |
239
-
In the Azure portal, enable internet connectivity for a private cloud. With NSX-T manager, create an NSX-T T1 router and a logical switch. You then use vCenter to deploy a VM on the network segment defined by the logical switch. That VM has network access to the internet and Azure services.
239
+
In the Azure portal, enable internet connectivity for a private cloud. With NSX-T Manager, create an NSX-T Data Center T1 gateway and a logical switch. You then use vCenter Server to deploy a VM on the network segment defined by the logical switch. That VM has network access to the internet and Azure services.
240
240
241
241
> [!NOTE]
242
-
> A T0 router is created and configured as part of a private cloud deployment.
243
-
> Any modification to that logical router or the NSX-T edge node VMs could affect connectivity to your private cloud.
242
+
> A T0 gateway is created and configured as part of a private cloud deployment.
243
+
> Any modification to that logical router or the NSX-T Data Center edge node VMs could affect connectivity to your private cloud.
244
244
245
245
- question: Do I need to restrict access from the internet to VMs on logical networks in a private cloud?
246
246
answer: No. Network traffic inbound from the internet directly to private clouds isn't allowed by default. However, you're able to expose Azure VMware Solution VMs to the internet through the [Public IP](./enable-public-internet-access.md) option in your Azure portal for your Azure VMware Solution private cloud.
247
247
248
248
- question: Do I need to restrict internet access from VMs on logical networks to the internet?
249
-
answer: Yes. You'll need to use NSX-T manager to create a firewall to restrict VM access to the internet.
249
+
answer: Yes. You'll need to use NSX-T Manager to create a firewall to restrict VM access to the internet.
250
250
251
251
- question: Which IP range can be used for DNS service IP and DHCP server IP?
252
252
answer: The IP address range shouldn't overlap with the IP range used in other virtual networks in your subscription and on-premises networks.
@@ -257,12 +257,12 @@ sections:
257
257
- question: Can transit connectivity be established between on-premises and Azure VMware Solution through Azure Virtual WAN over ExpressRoute Global Reach?
258
258
answer: Azure Virtual WAN doesn't provide transitive routing between two connected ExpressRoute circuits and non-virtual WAN ExpressRoute Gateway. ExpressRoute Global Reach allows connectivity between on-premises and Azure VMware Solution but goes through Microsoft's global network instead of the Virtual WAN Hub.
259
259
260
-
- question: Is Windows 2008 supported as an Active Directory (AD) server or Remote Desktop Session Host (RDSH) OS in NSX-T?
260
+
- question: Is Windows 2008 supported as an Active Directory (AD) server or Remote Desktop Session Host (RDSH) OS in NSX-T Data Center?
261
261
answer: No.
262
262
263
263
- question: Why can't I reach the Azure VMware Solution vCenter Server Appliance and NSX-T Manager from on-premises or Azure Virtual Network?
264
264
answer: |
265
-
By design, you won't be able to reach NSX-T Manager and vCenter Server Appliance (VCSA) from on-premises when only 0.0.0.0/0 (default route) is being advertised over ExpressRoute Global Reach between Azure VMware Solution and your on-premises ExpressRoute or through Azure Virtual Network to Azure VMware Solution. You'll need to advertise specific networking routes/subnets to access NSX-T Manager and VCSA.
265
+
By design, you won't be able to reach NSX-T Manager and vCenter Server Appliance (vCSA) from on-premises when only 0.0.0.0/0 (default route) is being advertised over ExpressRoute Global Reach between Azure VMware Solution and your on-premises ExpressRoute or through Azure Virtual Network to Azure VMware Solution. You'll need to advertise specific networking routes/subnets to access NSX-T Manager and vCSA.
266
266
267
267
268
268
@@ -272,27 +272,26 @@ sections:
272
272
- name: Storage
273
273
questions:
274
274
275
-
- question: What is the correct storage policy for the dedup setup?
275
+
- question: What is the correct storage policy for the deduplication setup?
276
276
answer: Use the *thin_provision* storage policy for your VM template.
277
277
278
278
- question: What is the storage capacity of each host?
279
279
answer: Each ESXi host has two vSAN disk groups with a capacity tier of 15.2TB and a 3.2-TB NVMe cache tier (1.6 TB in each disk group).
280
280
281
281
- question: Is data stored on the vSAN datastores encrypted at rest?
282
-
answer: Yes, vSAN datastores use data-at-rest encryption by default using keys stored in Azure Key Vault. The encryption solution is KMS-based and supports vCenter operations for key management. When a host is removed from a cluster, data on SSDs is invalidated immediately.
282
+
answer: Yes, vSAN datastores use data-at-rest encryption by default using keys stored in Azure Key Vault. The encryption solution is KMS-based and supports vCenter Server operations for key management. When a host is removed from a vSphere cluster, data on SSDs is invalidated immediately.
283
283
284
284
- question: Can I rename a datastore or cluster during creation?
285
285
answer: No, you can't change the name of datastores or clusters. The cluster name is configurable through non-portal deployment mechanisms for non-primary clusters.
286
286
287
287
- question: What is the Fault tolerance of hardware failure on the vSAN?
288
-
answer: |
289
-
RAID-1, FTT-1, with Object Space reservation set to Thin Provisioning is the Default Storage policy for the software-defined datacenters (SDDCs).
288
+
answer: RAID-1, FTT-1, with Object Space reservation set to Thin Provisioning is the Default Storage policy for the software-defined datacenters (SDDCs).
290
289
291
290
- question: What is the difference between thick provisioning and thin provisioning?
292
291
answer: Thick provisioning is reserved or pre-allocated storage space. Thick provisioning protects systems by allowing them to function even if the vSAN datastore is full because the space is already reserved. For example, suppose you create a 10GB virtual disk with thick provisioning. In that case, the full amount of virtual disk storage capacity is pre-allocated on the physical storage where the virtual disk is created and consumes all the space allocated to it in the datastore. It won't allow other VMs to share the space from the datastore. A thin-provisioned virtual disk consumes the space that it needs initially and grows to the data space demand used in the datastore.
293
292
294
293
- question: How many disks can fail on the vSAN before data loss occurs?
295
-
answer: It depends on how you plan your application workloads to run inside the SDDC (private cloud). Microsoft governs these failures regularly and replaces the hardware when such events are detected from an infrastructure perspective. As a default, a setting of FFT-1 is used, which accommodates a single host's failure.
294
+
answer: It depends on how you plan your application workloads to run inside the SDDC (private cloud). Microsoft governs these failures regularly and replaces the hardware when such events are detected from an infrastructure perspective. As a default, a setting of FTT-1 is used, which accommodates a single host's failure.
296
295
297
296
- question: What kind of alerts can I expect to see for vSAN?
298
297
answer: Microsoft provides alerts when capacity consumption exceeds 75%. Alternatively, you can also monitor capacity consumption metrics that are integrated into Azure Monitor.
@@ -315,10 +314,10 @@ sections:
315
314
answer: No. There's only one type available.
316
315
317
316
- question: Do I use the same tools that I use now to manage private cloud resources?
318
-
answer: Yes. The Azure portal is used for deployment and several management operations. vCenter and NSX Manager are used to manage vSphere and NSX-T resources.
317
+
answer: Yes. The Azure portal is used for deployment and several management operations. vCenter Server and NSX-T Manager are used to manage vSphere and NSX-T Data Center resources.
319
318
320
-
- question: Can I manage a private cloud with my on-premises vCenter?
321
-
answer: At launch, Azure VMware Solution won't support a single management experience across on-premises and private cloud environments. You manage private cloud clusters with vCenter and NSX Manager local to a private cloud.
319
+
- question: Can I manage a private cloud with my on-premises vCenter Server?
320
+
answer: At launch, Azure VMware Solution won't support a single management experience across on-premises and private cloud environments. You manage private cloud clusters with vCenter Server and NSX-T Manager local to a private cloud.
322
321
323
322
- question: If a cluster is scaled up, and then workload demand falls, can it be scaled back down?
324
323
answer: Yes, as long as you have the quota allocated against your private cloud, you can scale out your clusters. When workload demand falls, you can delete hosts from the cluster to scale it down. You can do this through the Azure VMware Solution portal.
@@ -334,20 +333,20 @@ sections:
334
333
- name: Identity management
335
334
questions:
336
335
- question: What accounts and privileges will I get with my new Azure VMware Solution private cloud?
337
-
answer: You're provided credentials for a cloudadmin user in vCenter and admin access on NSX-T Manager. You can also use a CloudAdmin group to incorporate Azure Active Directory. For more information, see [Access and identity Concepts](concepts-identity.md).
336
+
answer: You're provided credentials for a cloudadmin user in vCenter Server and admin access on NSX-T Manager. You can also use a CloudAdmin group to incorporate Azure Active Directory. For more information, see [Access and identity Concepts](concepts-identity.md).
338
337
339
338
- question: Can have administrator access to ESXi hosts?
340
339
answer: No, administrator access to ESXi is restricted to meet the security requirements of the solution.
341
340
342
-
- question: What privileges and permissions will I have in vCenter?
341
+
- question: What privileges and permissions will I have in vCenter Server?
343
342
answer: You'll have CloudAdmin role privileges. For more information, see [Access and identity Concepts](concepts-identity.md).
344
343
345
-
- question: What privileges and permissions will I have on the NSX-T manager?
344
+
- question: What privileges and permissions will I have on the NSX-T Manager?
346
345
answer: |
347
-
You'll have full administrator privileges on NSX-T and can manage vSphere role-based access control as you would with NSX-T Data Center on-premises. For more information, see [Access and Identity Concepts](concepts-identity.md).
346
+
You'll have full administrator privileges on NSX-T Data Center and can manage vSphere role-based access control as you would with NSX-T Data Center on-premises. For more information, see [Access and Identity Concepts](concepts-identity.md).
348
347
349
348
> [!NOTE]
350
-
> A T0 router is created and configured as part of a private cloud deployment. Any modification to that logical router or the NSX-T edge node VMs could affect connectivity to your private cloud.
349
+
> A T0 gateway is created and configured as part of a private cloud deployment. Any modification to that logical router or the NSX-T Data Center edge node VMs could affect connectivity to your private cloud.
351
350
352
351
- question: How can I change my credentials?
353
352
answer: For information on resetting your credentials, see [Rotate the cloudadmin credentials for Azure VMware Solution](rotate-cloudadmin-credentials.md).
@@ -373,11 +372,11 @@ sections:
373
372
- question: I use Azure VMware Solution to create end-user applications or workloads accessed on multiple VMs through public IP. Can I sell this solution to multiple tenants?
374
373
answer: Customers can create multi-tenant environments in their Azure VMware Solution private cloud and sell to customers provided the product is not a standard VM and have added substantial intellectual property embedded in the VM as an application.
375
374
376
-
- question: As a hoster or customer, can I use my existing VMware Cloud Director (VCD) or new VCXD deployment in Azure VMware Solution?
375
+
- question: As a service provider or customer, can I use my existing VMware Cloud Director (VCD) or new VCD deployment in Azure VMware Solution?
377
376
answer: VMware does not allow VCD in the cloud or from on-premises to be licensed with any Hyperscaler, including Microsoft.
378
377
379
378
- question: Can I connect VMware Cloud Director Service (CDS) to my Azure VMware Solution instance in Azure?
380
-
answer: Although technically possible, Microsoft does not allow Azure VMware Solution to be used through the new CDS service from VMware running on VMC.
379
+
answer: Although technically possible, Microsoft does not allow Azure VMware Solution to be used through the new CDS service from VMware running on VMware Cloud.
381
380
382
381
- question: Can Azure VMware Solution be purchased through a Microsoft CSP?
383
382
answer: Yes, customers can deploy Azure VMware Solution within an Azure subscription managed by a CSP.
0 commit comments