• Vyatta Virtual Router on Hyper-V

    I’m currently building a new demo/test environment on my Windows Server 2008 Hyper-V server. And I wanted to have a Virtual Router running on Hyper-V which should handle the routing between the virtual networks on Hyper-V.

    First some background info on my network at home.

    image

    So I looked for a software router which could be installed as a guest on my Hyper-V host. I started with BrazilFW, but I had trouble to get the Gateway and DNS running (failed) although a colleague was able to get BrazilFW running on Hyper-V by upgrading the SYSLINUX (bootloader for Linux). Then I tried Freesco and m0n0wall, but both would not start on Hyper-V. So I finally found Vyatta via SourceForge.

    Vyatta is a Linux-based, open network operating system that integrates advanced enterprise-class routing, security, bandwidth management and more. Vyatta runs on standard x86 hardware, VMWare & Xen and offers config via Linux-shell, CLI and web GUI.

    It runs on VMWare & Xen so why would not it run on Hyper-V? And I was correct it runs great on Hyper-V ;-) These are steps I’ve taken to get it running on Hyper-V.

    1. Downloading ISO image from Vyatta’s website
      Vyatta Community Edition 4.0 (VC4)
    2. Create a new Virtual Machine in Hyper-V Manager
      Attach the ISO downloaded in step 1 to the new Vyatta Virtual Machine so it can boot from the ISO.
    3. Configure the Vyatta Virtual Machine
      Add the Network Adapters for the Internet, and the needed subnets to Vyatta Virtual Machine.
      Remark: Use Legacy Network Adapters!
      image

      I added a 1 GB harddisk and gave it 128 MB RAM.
    4. Installing Vyatta
      You can boot from the ISO you downloaded in step 1.  because it’s also a “Live CD”
      You’ll first need to login to Vyatta once it’s booted up. The default logins are (user: root pass: Vyatta) To install to the drive you will issue the command:
      install-system
      During the install you will be asked how much diskspace to allot to the different partitions. I went with the default. Once that’s complete, pop the CD out, and reboot to your installed Vyatta. Now we can start configuring the system.
    5. Configuring Ethernet Interfaces
      Log on the system.
      Configure the first NIC (eth0) which is going to be used for Internet access.

      eht0:

      vyatta@vyatta> configure
      [edit]
      vyatta@vyatta# set interfaces ethernet eth0 address 192.168.1.254/24
      [edit]
      vyatta@vyatta# commit
      [edit]
      vyatta@vyatta# exit
      exit
      vyatta@vyatta>


      eth1:

      vyatta@vyatta> configure
      [edit]
      vyatta@vyatta# set interfaces ethernet eth1 address 192.168.2.254/24
      [edit]
      vyatta@vyatta# commit
      [edit]
      vyatta@vyatta# exit
      exit
      vyatta@vyatta>


      eth2:

      vyatta@vyatta> configure
      [edit]
      vyatta@vyatta# set interfaces ethernet eth2 address 192.168.3.254/24
      [edit]
      vyatta@vyatta# commit
      [edit]
      vyatta@vyatta# exit
      exit
      vyatta@vyatta>

      Check interfaces configuration:

      vyatta@vyatta:~$ configure
      [edit]
      vyatta@vyatta# show interfaces ethernet
      eth0 {
           address 192.168.1.254/24
           description Internet
           hw-id 00:15:5d:00:01:22
      }
      eth1 {
           address 192.168.2.254/24
           description "subnet1:MOM 2005"
            hw-id 00:15:5d:00:01:23
      }
      eth2 {
           address 192.168.3.254/24
           description "subnet2:OPSMGR 2007"
      }


    6. Save Configuration

      vyatta@vyatta# save
      Saving configuration to
      '/opt/vyatta/etc/config/config.boot'...
      Done
      [edit]


    7. Configuring Access to a DNS Server

      vyatta@vyatta# set system name-server 192.168.1.1
      [edit]
      vyatta@vyatta# commit
      [edit]
      vyatta@vyatta#


    8. Specifying the Default Gateway

      vyatta@vyatta# set system gateway-address 192.168.1.1
      [edit]
      vyatta@vyatta# commit
      [edit]
      vyatta@vyatta#


    9. Configuring the Firewall
      We want to block the traffic from subnet1 to subnet2 and visa-versa.
      Firewall block-subnet1 rules:

      vyatta@vyatta# set firewall name block-subnet1
      [edit]
      vyatta@vyatta# set firewall name block-subnet1 rule 1
      [edit]
      vyatta@vyatta# set firewall name block-subnet1 rule 1 source address 192.168.2.0/24
      [edit]
      vyatta@vyatta# set firewall name block-subnet1 rule 1 action drop
      [edit]
      vyatta@vyatta# set firewall name block-subnet1 rule 2
      [edit]
      vyatta@vyatta# set firewall name block-subnet1 rule 2 action accept
      vyatta@vyatta# commit
      [edit]
      vyatta@vyatta#

      Do the same for subnet2.

      vyatta@vyatta# set firewall name block-subnet2
      [edit]
      vyatta@vyatta# set firewall name block-subnet2 rule 1
      [edit]
      vyatta@vyatta# set firewall name block-subnet2 rule 1 source address 192.168.3.0/24
      [edit]
      vyatta@vyatta# set firewall name block-subnet2 rule 1 action drop
      [edit]
      vyatta@vyatta# set firewall name block-subnet2 rule 2
      [edit]
      vyatta@vyatta# set firewall name block-subnet2 rule 2 action accept
      vyatta@vyatta# commit
      [edit]
      vyatta@vyatta#


    10. Apply the rule set to an interfaces
    11. vyatta@vyatta# set interfaces ethernet eth1 firewall out name block-subnet2
      [edit]
      vyatta@vyatta# set interfaces ethernet eth2 firewall out name block-subnet1
      [edit]
      vyatta@vyatta# commit
      [edit]
      vyatta@vyatta#

    Final configuration:

    vyatta@vyatta:~$ show configuration
    firewall {
        name block-subnet1 {
            rule 1 {
                action drop
                source {
                    address 192.168.2.0/24
                }
            }
            rule 2 {
                action accept
            }
        }
        name block-subnet2 {
            rule 1 {
                action drop
                source {
                    address 192.168.3.0/24
                }
            }
            rule 2 {
                action accept
            }
        }
        name block-subnet3 {
            rule 1 {
                action drop
                source {
                    address 192.168.2.0/24
                }
            }
            rule 2 {
                action accept
            }
            rule 3 {
                action drop
                source {
                    address 192.168.3.0/24
                }
            }
        }
    }
    interfaces {
        ethernet eth0 {
            address 192.168.1.254/24
            description Internet
            hw-id 00:15:5d:00:01:22
        }
        ethernet eth1 {
            address 192.168.2.254/24
            description "subnet1:MOM 2005"
            firewall {
                out {
                    name block-subnet2
                }
            }
            hw-id 00:15:5d:00:01:23
        }
        ethernet eth2 {
            address 192.168.3.254/24
            description "subnet2:OPSMGR 2007"
            firewall {
                out {
                    name block-subnet1
                }
            }
            hw-id 00:15:5d:00:01:24
        }
        loopback lo {
        }
    }
    service {
        nat {
            rule 1 {
                outbound-interface eth0
                source {
                    address 192.168.2.0/24
                }
                type masquerade
            }
            rule 2 {
                outbound-interface eth0
                source {
                    address 192.168.3.0/24
                }
                type masquerade
            }
        }
        ssh {
        }
    }
    system {
        gateway-address 192.168.1.1
        login {
            user root {
                authentication {
                    encrypted-password ****************
                }
            }
            user vyatta {
                authentication {
                    encrypted-password ****************
                }
            }
        }
        name-server 192.168.1.1
        ntp-server 69.59.150.135
        package {
            repository community {
                components main
                distribution stable
                url http://packages.vyatta.com/vyatta
            }
        }
    }
    vyatta@vyatta:~$

    Don’t forget to save your configuration!

    Now you are done! Check out the documentation for Vyatta before starting. I used the QuickStart and the Command Reference.

  • PowerShell Dashboard is available

    Source: DevInfra-US

    PowerShell Dashboard is a modular IT administration web portal based on Dropthings.

    The goal of this project is to present a mashup of several open source solutions linked to PowerShell that gives ability for IT people to develop very rich and dynamic web portal (Reporting, Workflow, tasks automation...)
    All of this without the needs to use other language than dynamic scripting language (PowerShell, more interpreters support to come...)

    English Video : PoshBoard presentation http://devinfra-us.blogspot.com/2008/07/powershell-dashboard-aspnet-silverlight.html
    Second Video http://devinfra-us.blogspot.com/2008/07/poshboard-2nd-presentation-adding.html

    How to use it ?
    Quickstart :

    • Install Windows XP, 2003, 2003 R2 or 2008 server
    • Install SQL 2005 Express with all the default settings
    • Install IIS with ASP.NEt
    • Install PowerShell
    • Put the PoshBoard website source in a directory of your server
    • Configure the default web site (or a brand new website if you like, avoid using virtual directory for now or modify the code)

    Go check it out on Codeplex!

  • Webcast: Microsoft's Investments in Virtualization and Cross-Platform Management

    Source: NEXUS SC: The System Center Team Blog

    Brad Anderson, GM of the Management Services Division, talks with us about his perspective on Microsoft's developments and directions in the virtualization and x-plat spaces, and where System Center fits in. He also talks a bit about what's coming in the months ahead. If you want a quick overview from the top, this is it, folks.


    Microsoft's Investments in Virtualization and Cross-Platform Management

  • New OpsMgr 2007 and MOM 2005 MP’s available

    Source: MPNotifier

  • Busy weekend

    It has been a busy weekend for me which ended not so good for me. On Friday my sister got married and that same evening I got an Achilles Tendon Rupture during my soccer practice. I heard a bang an felt a sudden sharp pain as if someone has whacked me in the back of the leg. After taking some painkillers before going to bed I woke-up with quite some pain and went to the hospital. After the diagnoses Achilles Tendon Rupture I was given a cast.

    It's not good. Have to get surgery tomorrow! on TwitPicIn recovery room after surgery. on TwitPic

    The next day on Sunday I got operated and now I’ve to recover and take it easy for the coming weeks. Hopefully the pain will become less and maybe I’ve some time to install a new OpsMgr demo environment at home ;-)

  • OpsManJam Tip for SharePoint Dummies

    I already blogged about the new OpsManJam website where you can find unofficial management packs, management pack authoring tutorials and guidance, featured articles on everything OpsManager 2007, command shell scripts, and more. 

    Kevin Holman also blogged about this website and told that the site is now RSS enabled so I wanted to add this website to my  RSS reader.

    But this seemed less easy to me than I thought. Probably because I’m a SharePoint dummy.

    So if you want to subscribe to a RSS feed for this website these are the steps:

    1. Go to View All Site Content
    2. Select the Content you want to be updated by RSS
    3. Click on the Actions menu and click on View RSS Feed
      image

    How easy can it be?

  • OpsMgr 2007 Cross Platform Extensions Beta Update

    Source: Microsoft Connect

    There is a new Beta update for OpsMgr 2007 Cross Platform Extensions on Microsoft Connect available.

    New in this beta:

    • OpsMgr x64 support
    • Gateway role support
    • IBM AIX 5.3
  • System Center Operations Manager 2007 Cross Platform Extensions Quick Start Guide

    Source: Microsoft Download Center

    You can now download the System Center Operations Manager 2007 Cross Platform Extensions Quick Start Guide from Microsoft Download Center

    This Quick Start Guide contains the release notes, system requirements, and installation and configuration information for the System Center Operations Manager 2007 Cross Platform Extensions beta. Guidelines on how to use the solution are also included.

  • Dell video on integrating SCVMM and OpsMgr 2007

    Source: Virtualboy

    Matt McSpirit blogged about how you could run ESX 3.5/ESXi on a VMware Workstation for testing System Center Virtual Machine Manager 2008. Which I also posted on more than an year ago, but with different versions ;-)

    But he also tells about a Dell video from Dell about Dell OpenManage Integration with SCVMM using Physical Resource Optimization (PRO) which was shown on MMS 2008.

    image

    Check it out!

  • Operations Manager with Barry Shilmover on UGTV

    Source: UGTV (User Group Television)

    Because of my Achillus Tendor Rupture I can’t do much except watching tv (the Olympics) or movies on my laptop. That's why  I stumbled on a webcast from the User Group Television (UGTV) in which Barry Shilmover demoes Operations Manager 2007 managing heterogeneous environments (Cross Platform Extensions) (07:15).


    UGTV (User group Television) for ITPro Debuts!

  • Finding scripts in MP with PowerShell

    Have you ever wanted to know which scripts are being using in a Management Pack? I did ;-)

    You would normally use the MPViewer from Boris Yanushpolsky to have a look into the MP. But the MPViewer does not show you a list of all the scripts being used in the MP.

    Suppose you want to know which scripts are being used in the Exchange 2003 MP. You could go through all monitors, rules or tasks and look at the Raw XML to find if a script is used.
    image

     

    But this would take quite some time. An easier way is to use PowerShell with an Xpath query. You first need to convert the MP to XML.

    PowerShell Commands:

    $xml = New-Object "System.Xml.XmlDocument"
    $xml.Load("C:\temp\Microsoft.Exchange.Server.2003.Monitoring.xml")
    $scripts = $xml.SelectNodes("descendant::ScriptName")
    $scripts | group "#text"|select name|sort name

    Result:

    Name                                                                                      
    ----                                                                                      
    Check_services_to_monitor_registrykey.js                                                  
    CheckDC.vbs                                                                               
    Collect_database_size_per_server.vbs                                                      
    Collect_number_of_mailboxes_per_server.vbs                                                
    Collect_Operating_System_Server_Information.vbs                                           
    Collect_Server_Information.vbs                                                            
    EXBPAInstall.vbs                                                                          
    EXBPARunLocal.vbs                                                                         
    EXBPARunOrg.vbs                                                                           
    Publish_ExMP_Data.js                                                                      
    QuerySMTPQueues.vbs                                                                       
    Verify_IIS_Lockdown_was_run.vbs                                                           
    Verify_Message_Tracking_Log_shares_are_locked_down.vbs                                    
    Verify_Test_Mailboxes.vbs                                                                 
    VerifyMFR.js                                                                              
    VerifyMFS.js

     

    I need to thank Marco Shaw for his help on the formatting of the result ;-)

  • Dutch System Center Event “Meer dan Beheer 2008”

    On September 12th 2008, the Dutch System Center User Group, INOVATIV (the System Center specialists) and Secure Vantage, will organize the System Center event of the year: "Meer dan beheer 2008" in The Netherlands. Dutch speaking professionals and IT managers are invited to join them in Microsoft's Innovation Center in Barneveld for a half day about System Center.


    This year, there's a fantastic guest speaker: Jeremiah Beckett, president and chief architect at Secure Vantage; he will be doing a 2 hour session on System Center and Security Management. Also, Dutch SCOM-MVP Maarten Goet will be presenting on the vision behind System Center (codename "Oslo", Dynamic IT and a preview to Service Manager). Arthur Nieuwland, multi-year expert on IT Business Intelligence, will be demonstrating the power of System Center and Business Intelligence. Microsoft's System Center Dutch product manager, Robert Bakker, will be opening the day!


    People visiting the event will have a chance to win a Microsoft Zune. There are 90 seats available, but registration is going fast. Just send an email to registratie@meerdanbeheer.nl to get your personal registration code, so you can join for free!

  • Autopilot: Automatic Data Center Management

    Source: Twitter

    My colleague Daniele Muscetta posted a Tweet about how much of OpsMgr is used for AutoPilot. Last year, Michael Isard of Microsoft Research wrote a paper entitled Autopilot: Automatic Data Center Management which describes the technology that Windows Live and Live Search services have used to manage their server farms.

    I think that not only OpsMgr is used for AutoPilot but also SCCM and maybe Service Manager. Who knows?

    You can find a blog article about AutoPilot on the Dare Obasanjo aka Carnage4Live weblog. If you want more info on AutoPilot just read the white-paper from Michael Isard.

  • Back from holiday

    I’m back from a long holiday to the South of France (Port-Grimaud). We had great sunny and warm weather and spend quite some time at the beach.

    I didn’t check my (work) email and only did some twittering during my holiday.  So if you want to know what I did during my holiday just check my Twitter account ;-)

    Now I’m downloading my (work) emails and browsing through all my rss feeds.

    Here are some interesting articles I missed during my holiday and you maybe too:

    • Operations Manager 2007 & Essentials 2007 Deliver Support for Windows Server 2008 (Source: Bink.nu)
      ”The System Center Operations Manager team is excited to announce support of Windows Server 2008 by Operations Manager 2007 SP1 and Essentials 2007 SP1.”
    • New version of PowerGUI (version 1.5.1) Source: Dmitry’s PowerBlog: PowerShell and beyond
      They added online script search to this version! It uses the PowerShell Code Repository.
    • The “Mojave" Experiment” Source: Eileen Brown
      I had already seen quite some discussion about Mojave on Twitter and FriendFeed. What do you think about Vista?
    • PowerShell Dashboard (Source: Marco Shaw)
      Mixing PowerShell, ASP.NET, Silverlight to deliver a modular dashboard based on scripting! More info on CodePlex.
    • Service Level Dashboard Management Pack for Operations Manager 2007 RTM. Source: SMS&MOM Blog
      The Service Level Dashboard for System Center Operations Manager is a new Solution Accelerator that addresses the need of IT service managers for end-to-end reporting on the performance and availability of their line-of-business (LOB) applications.
    • New OpsMgr Twitter User.
      Unofficial SCOM aggregator! with Twitter by Jeremy Pavleck. He’s everywhere ;-)
    • OpsMgr IRC Chat Room. Source: Jeremy Pavleck.
      He’s setup an IRC chat room on the FreeNode network. Check it out!
    • New Resource for OpsMgr 2007 MP Authors and IT Pro’s OpsManJam is Live. Source: Chris Fox
      On this site you will find unofficial management packs, management pack authoring tutorials and guidance, featured articles on everything OpsManager 2007, command shell scripts, and more.
  • New personal website

    Yesterday I reinstalled my personal website and deleted my old weblog (http://weblog.stranger.nl).  I used to run my old weblog on Drupal but after starting a new weblog on Technet I didn’t update my personal weblog anymore.

    Now I created a Lifestream, a real-time flow of my activity across various websites, with the occasional blog post on http://www.stranger.nl with Sweetcron. So now you can follow everything about me on one single place ;-)

    If  you are looking for articles I stored on my old weblog, you can contact me and I’ll try to find them. I’ve created a backup from my old weblog and if I’ve time I will try to install this as an archive somewhere.