问题

Nutanix (Prism和AFS)迁移到不同的域

  • 2020年2月25日
  • 4回复
  • 1500的浏览量
T

亲爱的中小企业的,

我如何迁移我的Nutanix AHV集群到一个不同的域?这是我现在拥有的核心未来，它应该被迁移。

  1. 棱镜元素
  2. Acropolis文件服务器(我们已经启用了主站点和次站点之间的AFS副本)
  3. 主备异步保护域(适用于虚拟机和AFS)

您能不能请人帮助我提供在没有或更少的生产中断的情况下进行这些更改的最佳实践?提前谢谢。

谢谢

Thiruppathiraj

Dear SME\u2019s,<\/p>

How do i migrate my Nutanix AHV cluster\u00a0to a different domain? Here is the core future\u2019s i am having now, it should be migrated.<\/p>

  1. Prism Element\u00a0<\/li>
  2. Acropolis File Server (We have enabled AFS replica between Primary\u00a0and Secondar\u00a0site)<\/li>
  3. Async Protection Domain from Primary\u00a0to Secondary\u00a0(\u00a0For VM\u2019s and AFS)<\/li> <\/ol>

    Can you please someone help me to provide the best practice of doing these changes without or less production outage? Advance thanks.<\/p>

    Thanks<\/p>

    Thiruppathiraj<\/p>

    \u00a0<\/p>","quoteUsername":"Thiruppathiraj","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

4回复

JeremyJ
排名
Userlevel 3
徽章 ＋４

你好 @Thiruppathiraj
对于Files服务器，将介绍离开域和加入域的步骤Nutanix文件指导
对于AOS，您可以在身份验证配置中添加新域，然后在使用新域进行身份验证后删除旧域。本地“admin”用户不会受到影响，因为它只使用本地身份验证。看到Prism Web控制台指南-认证配置部分以了解更多细节。

如果需要通过IP地址管理更新AHV虚拟网络的DNS和域搜索设置，请参见网络管理部分。

有关更新DNS或SMTP设置，请参见系统管理部分。

对于Async-DR，不需要任何明显的修改。网络映射应该不需要更改，尽管网络本身可以通过域设置进行更新。传输不是通过FQDN，而是使用IP地址，所以也不需要修改。

对于AHV主机本身，我不认为需要任何更新。不需要直接对AHV主机进行AD认证，也不支持，因为AHV主机的正常管理是通过CVM进行的，仅由AHV主机上的root用户执行少量的管理任务。

如果您需要更改IP地址，这将导致集群停机。在AOS集群上修改IP地址需要一定的过程，不能在集群正常运行并为虚拟机提供数据服务时进行。

如果你还有其他问题，请告诉我。

Hello @Thiruppathiraj<\/user-mention>\u00a0
For the Files server, steps to leave a domain and join a domain are covered in the Nutanix Files Guide<\/a>
For AOS, you can add the new domain in the authentication configuration and then remove the old once authentication with the new domain is working. The local \u2018admin\u2019 user will not be affected as this uses local authentication only. See the Prism Web Console Guide - Authentication Configuration<\/a> section for more detail.\u00a0<\/p>

If you need to update DNS and domain search settings for AHV virtual networks with IP address management, see the Network Management<\/a> section.\u00a0<\/p>

For updating DNS or SMTP settings see the System Management<\/a> section.<\/p>

For Async-DR there should not be any distinct modification needed. Network mappings should not need to change though the networks themselves may get updated with domain settings. The transmission is not by FQDN but just uses the IP addresses, so no modification is needed there either.\u00a0<\/p>

For AHV hosts themselves I do not think any update is required. AD authentication directly to AHV hosts should not be needed, and is not supported, since\u00a0normal management of AHV hosts is through the CVM, with just a few management tasks performed only by the root user on the AHV host.<\/p>

If you are needing to change the IP addresses this will incur downtime for the cluster. IP address changes on an AOS cluster require a specific procedure and cannot be done while the cluster is up and serving data for VMs.\u00a0<\/p>

If you have further questions let me know.\u00a0<\/p>","quoteUsername":"JeremyJ","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

T

你好杰里米,

感谢您发来的详细信息的邮件。对于AFS域的重新加入。域A是旧的，域B是新的。如果我从AFS中移除旧的域A后，添加了新的域用户来共享权限，我的域B用户的权限会保持不变吗?我问这个问题的原因是我有超过10tb的AFS数据，如果我想分配新的域B用户权限，它可能需要几天完成。

谢谢

Thiruppathiraj

Hello Jeremy,\u00a0<\/p>

Thanks for the email with detailed information. To regards AFS domain rejoin. Domain A is old and domain B is new one. If I added new domain users to share permissions once I removed the old domain A from AFS, Does my domain B users permission will remain same? The reason why I'm asking this I have more than 10tb of AFS data, if I want to assign new domain B user permissions it may takes days complete.<\/p>

\u00a0<\/p>

Thanks\u00a0<\/p>

Thiruppathiraj\u00a0<\/p>

\u00a0<\/p>","quoteUsername":"ThiruppathirajP","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

HITESH0801
排名
Userlevel 4
徽章 ＋5

你好 @ThiruppathirajP

你能提供更多关于这些域是如何相关的信息吗?
它们之间是否具有继承属性或完全不同的实体之间的信任关系?

希望这对你有帮助!
Hello @ThiruppathirajP<\/user-mention>\u00a0

Could you provide more information as to how the domains are related?\u00a0
Do they have a trust relationship between them with inheritance properties or completely different entities?\u00a0<\/p>","quoteUsername":"HITESH0801","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
T

你好,

是的，域名A和域名B之间存在单向信任。

谢谢

Thiruppathiraj

Hello,<\/p>

Yes, we have oneway trust enabled between Domain A to Domain B.\u00a0\u00a0<\/p>

Thanks<\/p>

Thiruppathiraj<\/p>","quoteUsername":"Thiruppathiraj","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

回复


Baidu