ggovek Tracker

Re: Windows OS Optimization Tool OR Custom cleanup script?

ggovek — Mon, 25 Sep 2023 11:27:23 GMT

I did the optimization with OSOT and now I have the black screen problem.

When the user logs in to the desktop, they have a black screen for 20 seconds, then the desktop appears and the login takes about 50 seconds.

Has anyone had this problem before?

Re: Windows OS Optimization Tool OR Custom cleanup script?

ggovek — Fri, 22 Sep 2023 10:17:04 GMT

Tnx for your help, I will try to optimize GI with OSOT.

Re: Windows OS Optimization Tool OR Custom cleanup script?

ggovek — Thu, 21 Sep 2023 12:10:57 GMT

I have a similar question, how to optimize Golden Image so that it will work quickly and efficiently. I want to optimize Windows 10 21H2 ent for Horizon 7, soon to be Horizon 8 2303.

Re: Create NSX-T Security Groups with PowerCLI

ggovek — Mon, 17 Apr 2023 11:51:19 GMT

I found a solution and changed only this command:

$createdGroup = Invoke-PatchGroupForDomain -Server $n -DomainId default -Group $group -GroupId $GroupName

$createdGroup = Invoke-GlobalInfraPatchGroupForDomain -Server $n -DomainId default -Group $group -GroupId $GroupName

With Get-Command -Module VMware.Sdk.Nsx.Policy we get all the necessary commands for NSX Module.

Re: PowerCLI NSX-T - Create Security Groups

ggovek — Mon, 17 Apr 2023 11:52:04 GMT

I found a solution and changed only this command:

$createdGroup = Invoke-PatchGroupForDomain -Server $n -DomainId default -Group $group -GroupId $GroupName

$createdGroup = Invoke-GlobalInfraPatchGroupForDomain -Server $n -DomainId default -Group $group -GroupId $GroupName

With Get-Command -Module VMware.Sdk.Nsx.Policy we get all the necessary commands for NSX Module.

Re: PowerCLI NSX-T - Create Security Groups

ggovek — Mon, 17 Apr 2023 07:24:55 GMT

How do I create Security Groups in Global Manager with PowerCLI 13.0.

With the Code bellow I received back this error:

Code:

$MemberType="VirtualMachine" $Key="name" $Operator="EQUALS" $GroupName = "TEST2" $cond = Initialize-Condition -ResourceType Condition -Id $GroupName -MemberType $MemberType -Value $GroupName -Key $Key -Operator $Operator $group = Initialize-Group -DisplayName $GroupName -Expression @($cond) $createdGroup = Invoke-PatchGroupForDomain -Server $n -DomainId default -Group $group -GroupId $GroupName

Error:

Invoke-PatchGroupForDomain : Error calling PatchGroupForDomain: { "httpStatus" : "BAD_REQUEST", "error_code" : 500517, "module_name" : "Policy", "error_message" : "Local resource cannot accessed on the global manager." } At line:1 char:17 + ... atedGroup = Invoke-PatchGroupForDomain -Server $n -DomainId default - ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Invoke-PatchGroupForDomain], ApiException + FullyQualifiedErrorId : VMware.Binding.OpenApi.Client.ApiException,VMware.Sdk.Nsx.Policy.Api.PolicyApi.InvokePatchGroupForDomain

Re: Create NSX-T Security Groups with PowerCLI

ggovek — Fri, 14 Apr 2023 14:07:54 GMT

Thanks for the advice. It works for Local Managers, code is Bellow:

Set-PowerCLIConfiguration -Scope User -ParticipateInCEIP $true -Confirm:$false | Out-Null Set-PowerCLIConfiguration -Scope User -InvalidCertificateAction:Ignore -Confirm:$false | Out-Null # Connect to vCenter Server Connect-VIServer -Server nsxt-vc-sdc.glab.local -User administrator@vsphere.local -Password C!sco123 # Connect to NSX-T Manager $NSX_IP = "10.10.10.10" $NSX_User = "admin" $NSX_Password = "Password" Write-Host "Connecting to NSX Manager ..." $n = Connect-NsxServer -Server $NSX_IP -User $NSX_User -Password $NSX_Password #Variables $MemberType="VirtualMachine" $Key="name" $Operator="EQUALS" #$GroupName="APP-02_8080" #$Value="APP-02_8080" $vm_names = Get-VM -Tag "NSX" foreach ($vm_name in $vm_names) { $GroupName = Get-VM -Name $vm_name $allGroups = Invoke-ListGroupForDomain -DomainId default $gp = $allGroups.Results | where {$_.DisplayName -eq $GroupName} if ($gp) { Write-Host "Group $GroupName already exists." }else{ $cond = Initialize-Condition -ResourceType Condition -Id $GroupName -MemberType $MemberType -Value $GroupName -Key $Key -Operator $Operator $group = Initialize-Group -DisplayName $GroupName -Expression @($cond) $createdGroup = Invoke-PatchGroupForDomain -Server $n -DomainId default -Group $group -GroupId $GroupName Write-Host "Created Group $GroupName ..." } } # Disconnect to NSX-T Manager Write-Host "Disconnecting from NSX Manager ..." Disconnect-NsxServer -Server $NSX_IP

Could someone help me with how I could create Security Groups on the Global Manager?

Create NSX-T Security Groups with PowerCLI

ggovek — Fri, 14 Apr 2023 10:36:31 GMT

Hi,

With Code bellow I want to create Security Groups:

#VM NAME
#Variables
$VMs= Get-VM -Name "APP-01_8080"
$nsgroupname = $VMs.Name
#Create NSGroup
$nsgroupsvc = Get-NsxtService -Name com.vmware.nsx.ns_groups
$nsgroupspec = $nsgroupsvc.Help.create.ns_group.Create()
$nsgroupmemberspec = $nsgroupsvc.Help.create.ns_group.membership_criteria.Element.NS_group_simple_expression.Create()
$nsgroupspec.display_name = $nsgroupname
$nsgroupmemberspec.target_type = "VirtualMachine"
$nsgroupmemberspec.target_property= "name"
$nsgroupmemberspec.op ="EQUALS"
$nsgroupmemberspec.value= $VMs.Name
$nsgroupspec.membership_criteria.Add($nsgroupmemberspec)
$nsgroupsvc.create($nsgroupspec)

The Security Group is successfully created for me, but I can only see it in Manager Mode and not in Policy Mode in NSX-T Manager UI. What needs to be changed to see SG also in Policy Mode?

Re: NSX-T 3.2 Active Directory based Groups

ggovek — Thu, 16 Mar 2023 11:38:56 GMT

This is how it works for me:

@ralbertodacu wrote:
I had a similar issue when I was testing the Identity Firewall on my home lab:
- VM A, logged in with a User from my "Allowed Test Group";
- VM B, target VM that I was trying to connect via SSH;
My firewall rules looked similar to yours (AD Group allowed to speak to VM Group where VM B was), however I could not establish a connection.
The only way I could make it work at the time was by explicitly allowing the return traffic. In other words, I had to create another rule that would allow VM B to speak to VM A. You can test it with an "Allow Any Any" rule and, if it works, narrow it down just to the specific traffic you're looking for.

Hope this helps.

NSX-T DFW Applied To

ggovek — Wed, 15 Mar 2023 13:14:37 GMT

I have a question about the NSX-T DFW Applied to rules.

I case if I have in Groups ip address or IP Subnet, Applied To rule doesn't work. In the case if I create Groups as Membership Criteria or select virtual machine from members, Applied to works as it should.

Where is the problem and why does it not work if I have an IP address in the group.

3-Tier-App

ggovek — Thu, 16 Feb 2023 13:45:06 GMT

I am preparing a POC for a new Client. Where could I get a 3-tier-App ova file for demonstartion NSX-T security and AVI Load Balancing. I had this file some time ago, but I can't find it anymore.

Re: NSX-T Federation and AVI Advance Load Balancer

ggovek — Tue, 17 Jan 2023 12:37:09 GMT

Tnx for your information.

If we dont use the NSX-T Integration, we need additional License for AVI LB or can we use the license from NSX-T?

Re: NSX-T Federation and AVI Advance Load Balancer

ggovek — Mon, 09 Jan 2023 07:55:55 GMT

And then how can I implement NSX ALB since I only have GM objects? Any Idea?

NSX-T Federation and AVI Advance Load Balancer

ggovek — Fri, 06 Jan 2023 14:10:44 GMT

I am having trouble implementing AVI Advance Load balancer with NSX-T Federation.

The problem is that I cannot select the overlay segment for management and data networks:

br,

Re: Renew Certificate on NSX-T Federation 3.2

ggovek — Fri, 06 Jan 2023 14:02:31 GMT

The problem was that the certificate did not contain client authentication. I was create new certificate with server and client authentication and then I was able to replace certificate.

Renew Certificate on NSX-T Federation 3.2

ggovek — Thu, 15 Dec 2022 14:11:39 GMT

In my NSX-T environment certificates will be expire in 7 days. I did it CA certificate for Local Managers and Global Managers.

But now I have a problem that it does not replace my certificate at all services.

I changed the certificate according to the instructions below:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-50C36862-A29D-48FA-8CE7-697E64E10E37.html

NSX-T REPO SYNC FAILED

ggovek — Tue, 11 Oct 2022 07:23:54 GMT

Hi,

I have 3 NSX-T Managers and I have a repo sync problem on two of them. How to resolve this problem?

I try to reboot all three appliances and this is not help. Also I try with Resolve button.

Re: Change NSX-T Manager root password

ggovek — Wed, 29 Jun 2022 15:07:35 GMT

It works. Thank you for help.

Re: Change NSX-T Manager root password

ggovek — Wed, 29 Jun 2022 13:59:40 GMT

Hi Sreec,

I have already successfuly reset root password, now I want to change password with more complex password, because this is not possible across the console and I may be wrong.

Change NSX-T Manager root password

ggovek — Wed, 29 Jun 2022 11:09:10 GMT

Hi,

On NSX-T manager root password has expired. I successfuly reset the password via vmware console.

Now I have a problem that I can't change my root password. I used the procedure bellow.

SSH to NSX-T Manager with admin user
st e (login to root)
passwd
root password successfuly changed
sync
reboot -f

Now when want to log in whit new root password, my login does not work. Login with reset password works normaly.

How can I change the root password?