vRealize Network Insight – Troubleshooting with CLI

I recently logged into my vRNI UI and received the following error:

  • “vRealize Network Insight Proxy VM is not working properly”
  •  “Some of the Data Sources are not working properly. Please check their status on the Settings Page”

To troubleshoot the errors I made use of the commands listed below. This is by no mean the full extend of the commands available but they helped me in my connectivity troubleshooting.  I will provide a link at the bottom to the CLI guide.

  • SSH into the vRNI platform and proxy VM
    • username – Consoleuser
    • password -ark1nc0ns0l3
    • Run command
      • (cli) modify-password consoleuser (ONLY available in version 3.2)
        • PLEASE change this default password to enhance security.
      • (cli) show-service-status
        • Found the following error, but the status change after I had connectivity between the platform and proxy VM!
          • error.JPG
      • (cli) show-connectivity-status
        • Verify connectivity status with all systems
      • (cli) show-config
        • Verify network configuration is OVA parameters
      • (cli) log-trace list files OR (cli) log-trace list applications
        • Shows available log files.
      • (cli) log-trace follow filename
        • Just like tail -f this show latest entries in the log file.
      • (cli) ping proxy&platformserver-fqdn
      • (cli) nslookup proxy&platformserver-fqdn
      • (cli) ping gateway

Links:

https://www.vmware.com/pdf/vrni/vrealize-network-insight-32-cli-guide.pdf

vRealize Network Insight 3.2 upgrade process

VMware released vRealize Network Insight 3.2 in short succession of 3.1 and provided a lot of new features and general fixes which includes the following:

  • Application Centric Micro-segmentation
    This feature supports the following:

    • Users can define the grouping filters. They can define the custom application tiers for determining micro-segmentation firewall rules.
    • The visualization of traffic/flows between tiers is available.
    • The security group recommendations are based upon groupings.
  • XML Export of Firewall Rules
    The user can perform the export of recommended firewall rules and services configuration. This is imported into NSX Manager
  • Visualization of NSX Edge NAT North/South Gateways
    This feature supports the following:

    • Configuring the View All mode for seeing the NSX NAT instances.
    • Including the Edge NAT gateway when visualizing VM to VM communication paths.
    • Listing of NSX Edge NAT rules by clicking the NAT services icons.
    • Supporting SNAT, DNAT and nested NAT


  • SNMP Traps for outbound alerting to 3rd party SNMP platforms
    This feature supports the following:

    • MIBs published on VMware MIB repository
    • Compatibility of SNMP v2c and v3
    • Administrator selects problem alerts within Network Insight in which to forward as traps
    • Forwarding of GUI representation of alerts
    • SNMP outbound test function
  • NSX Distributed Firewall Rules Analytics and Visualization Enhancements
    This feature supports path visualization that include only rules that are enabled (active).

  • NSX configuration assurance, health and capacity checks
    This feature includes 31 additional checks with coverage for controllers, edge services, Virtual Tunnel endpoints (VTEPS) and NSX Manager
  • Platform security enhancements
    The platform security enhancements are:

    • Icon within the system admin console for seeing storage capacity/utilization
    • Ability to add additional capacity within vCenter
    • Post addition, recalculation of storage capacity
  • On-Line Upgrading
    This feature allows customers to upgrade Network Insight that are connected to internet. It supports the following:

    • Version checking and upgrade recommendations
    • GUI based upgrading with status indicators

This blog is primarily about the upgrade process and as mentioned in the what’s new section VMware made on-line upgrade available in 3.2, which in my opinion currently does not simplify this process and requires a support ticket to be opened with VMware GSS.

I will be using the offline upgrade (made available in 3.1) which consists of downloading the upgrade bundle file from my.vmware.com and manually running the commands to complete the task.

Here are steps for the offline upgrade from 3.1 to 3.2:

  1. Take Snapshot of the vRNI Platform and Proxy VM!
  2. Download upgrade bundle from My VMware.
  3. Make sure to copy the upgrade.bundle file to a linux VM since the package-installer command only supports pulling the file from such a host.
  4. Copy the downloaded upgrade bundle to vRealize Network Insight Platform and Proxy VMs by running the following package-installer copy command:
    1. (cli) package-installer copy –host 10.10.40.155 –user root–path /tmp/VMWare-vRNI.3.2.0.1480511973.upgrade.bundle
    2. Specify the password
    3. Wait for the copy to complete.
  5. Upgrade the virtual machines using package-installer upgrade command. Generally, upgrade would complete within 30 minutes after this step. Depending on the download speed, it may take up to few hours.Run the command:
    1. (cli) package-installer upgrade
  6. Verify the upgraded version using the show-version command:
    1. (cli) show-version
    2. You should see: 3.2.0.1480511973
  7. It is not mentioned anywhere but I found that you have to reboot the appliances after the upgrade for the new commands to be available in the CLI.  This is easily done through vCenter server, however in 3.2 you will have the command “appliance-reboot” available.
  8. From the vRNI 3.2 CLI Guide a new command is available which provides the ability to change the “consoleuser” SSH account password, which I highly recommend to run.
    1. (cli) modify-password consoleuser

install.JPG

Links:

https://kb.vmware.com/kb/2148271

https://pubs.vmware.com/Release_Notes/en/vrni/32/vrealize-network-insight-32-release-notes.html

https://www.vmware.com/pdf/vrni/vrealize-network-insight-32-cli-guide.pdf

http://blogs.vmware.com/management/2016/12/whats-new-vrealize-network-3-2.html

 

 

South Africa – Home visit reflection

My wife and I recently returned to Atlanta, US after spending 14 day back home in South Africa.  I grew up in Hermanus which is about an hours drive from Cape Town, well more like an hour and a half these days since they put average speed check cameras up all over the damn place. Still hopeful for no surprise bills from rental company but that is a rant for another day 🙂

My last visit to South Africa was back in 2014 which consisted of 2 weeks safari, with the whole family in the Kruger National Park.  If you ever get the chance to go on a safari in Africa then do it! It is one of the best experiences you will ever have. For our next safari we would like to go experience the  annual Serengeti migration in Tanzania.

It has been 5 years since my last visit to my home town Hermanus as well as Cape Town and man has things changed!

I couple of observations:

  • Things got really expensive
  • Property and commercial real estate boom took place in both Hermanus and Cape Town with house prices skyrocketing.
  • Traffic got worse in Hermanus, but Cape Town went to a whole new level of insanity and we almost found it impossible to find parking in the whole city.
  • We joined some of my friends for a night out in Cape Town and experience First Thursdays which was amazing and great to see the redevelopment and revitalization of the downtown area.  If you’re ever in town check out my friend’s gin bar, tucked behind a chocolate cafe!
  • In my days you had maybe 3 places you went downtown and definitely you were not walking around in the streets like we did.  Enjoyed the experience and the cultural diversity Cape Town has to offer.
  • Lastly Hermanus is not the quiet retirement village we grew up in and things sure have changed but I can still get old nostalgic feeling by visiting Gansbaai, Kleinmond or Betty’s Bay.

South Africa is a great country, and this little bubble we call Hermanus is just a small piece of the beauty it has to offer, but unfortunately the gap between rich and poor seems to grow with even the middle class struggling to keep up with high costs of food, rental, health insurance, electricity, internet, this list goes on…

It is great to see homes being build for the poor and trying to enrich their lives by moving them out of their shacks in the townships but even this is marred by shoddy work and unfulfilled promises like building 3 roomed homes without a bathroom and only providing a shared community toilet outhouse! Can any of you imagine that? Living in America you are privileged and unless you have visited countries like Africa, South America and South East Asia I don’t think you can grasp the level of poor that those people have to endure.

Every little bit counts and the dollar goes a long way!

  • With so many charities out there I am not going to provide any of my favorites but rather let you decide for yourself where to donate your hard earned money.  I use GlobalGiving for donations to South Africa.

 

As a hobby photographer, here are some of the photos I took on my trip. I will be uploading some of my favorites to Flickr in the upcoming days.

Surprise “wedding” party by my friends and family 🙂 JKPP4543.JPG

Pictures of Hermanus:

JKPP4449.JPG

JKPP4783.JPG

JKPP4795.JPGJKPP4807.JPG

JKPP4844.JPG

JKPP4836.JPGJKPP5729.JPG

JKPP5816.JPG

JKPP5790.JPG

Hemel-en-Aarde wine valley: 10 minutes drive from Hermanus

JKPP5753.JPG

JKPP5775.JPGJKPP5772.JPGJKPP5764.JPG

Friends and the best wine makers in the valley and I am going to go as far as to say in South Africa!

IMG_20161208_142610.jpg

Penguins at Stony Point: 30 minutes from Hermanus

JKPP5012.JPGJKPP4887.JPG

JKPP5018.JPG

Pictures of Cape Town:

JKPP5273 - JKPP5271.jpg

JKPP5278.jpg

JKPP5415.jpg

JKPP5232.JPGJKPP5302 copy.jpg

JKPP5377.jpgJKPP5380.jpgJKPP5349.jpg

JKPP5406.jpg

JKPP5424 copy.jpg

JKPP5445.jpg

JKPP5480.jpg

JKPP5532 copy.jpg

JKPP5546.jpg

JKPP5577.jpg

Panthera Cat sanctuary:

JKPP5091.JPG

JKPP5084.JPG

JKPP5139.JPGJKPP5199.JPG

JKPP5211.JPG

Great White Shark Cage diving with my friends’ family business:

JKPP5826.JPG

JKPP5878.JPG

JKPP5991.JPG

FB_IMG_1481553290767.jpg

And then there is the amazing food!

JKPP4775.JPG

JKPP5066.JPG

JKPP5716.jpg

JKPP5714.JPG

JKPP4441.JPG

IMG_20161208_142601.jpg

IMG_20161205_154500.jpg

IMG_20161202_115424.jpg

IMG_20161202_100305.jpg

Awesome roads:

JKPP5565.JPG