An IP address is an integral part of the server architecture and is required by all servers, LB VIPs, NATs etc. Many customers still make use of spreadsheets, which is very difficult to automate when you have to manually enter data, and this eventually leads to inconsistencies due to the file not getting updated when a IP address is assigned, changed or deleted.
What you need is a robust high performance, highly available IP solution that you can manage from a single interface and provides features like:
- Manage a large pool of IP addresses
- Improve availability, and simplified administration.
- User based roles and permissions.
- Provide vital operational and troubleshooting data:
- IP address history, MAC address, Owner, Location, OS, etc.
- Reports summarizing IP address resources and utilization.
There are many IPAM solutions out there with SovLabs support for the following:
I will be using the SovLabs Infoblox module in my example but if you have read this far you probably asked yourself “Infoblox has native integration with vRealize Automation, why use the SovLabs Infoblox module?” I did some research and hopefully this information is useful in your decision making:
Differentiators between SovLabs Infoblox IPAM and Infoblox native integration vRA:
- SovLabs do not require the Infoblox cloud adapter
- SovLabs has different modules, which seamlessly integrates with each other and enhances the IPAM functionality:
- Separate DNS and IPAM modules to allow each to be driven independently even between different providers.
- Ability to create multiple independent DNS profiles that can drive DNS for multiple different providers independent of IPAM. DNS is able to register against multiple domains out of the box and drive host records, CNAMEs, PTR and A records independently.
- SovLabs has pre-validation logic for IP and DNS forward/reverse duplication detection.
- SovLabs Template engine can be used for custom comments, fields in Infoblox based on vRA metadata.
- SovLabs is design for ease of use. No Infoblox schema changes or lengthy install and upgrade process.
- SovLabs is completely policy driven, no need for custom workflow development.
The SovLabs module also has many other features which can viewed on the website here, but some of the highlights are:
- Obtain and reserve unique IP address(es) and release automatically during appropriate machine lifecycle
- Reserves unique IP address(es) and assigns to the VM NIC(s) based on IPAM profile(s)
- IPAM profiles can span multiple networks, each consisting of a network name, subnet CIDR block and gateway address
- IPAM configurations are interchangeable between endpoint providers; avoid lock-in by easily adding additional IPAM providers with other IPAM modules from SovLabs
- No custom workflows required, completely policy driven
- SovLabs IPAM configurations may also be used with SovLabs network load balancer modules
Prerequisites:
- Infoblox user on (all) Infoblox appliance(s) with the following permissions:
- API and GUI access configured
- Add/remove Host Records, A Records and/or PTR Records
- Infoblox WAPI version must be 1.2+
Access https://{infoblox-fqdn}/wapidoc/ and look in the upper-left corner
- Login to the vRA tenant
- Add license for Infoblox IPAM module
- Validate the following show up on the Catalog page:
- Add Infoblox Endpoint
- Add IPAM Profile
Configuration:
- Add InfoBlox Endpoint
- Login to vRA Tenant
- Select Catalog -> SovLabs vRA Extensibility
- Click Request button on “Add Infoblox Endpoint”
- Infoblox Endpoint
- Enter Configuration label
- Only AlphaNumeric characters, no spaces or special characters except:
-
and_
- Only AlphaNumeric characters, no spaces or special characters except:
- Enter hostname
- FQDN of Infoblox server
- HTTPS = yes
- Port – 443
- WAPI version = pick from dropdown box based the version your found through prerequisites
- DNS View = optional, which DNS views this endpoint supports
- Not using Infoblox for DNS in this example
- Network View = optional, which Network views this endpoint supports
- All my networks are crated under the default view
- Credential Configuration
- Enter username
- Username should have API access and permissions to add/remove records to/from Infoblox
- Enter password
- Click Next
- Advanced Options
- These are optional and can be left blank which will populate with default value.
- Host record template
- A record template
- PTR record template
- Fixed Address template
- Click Submit
- Add IPAM profile
- Select Catalog -> SovLabs vRA Extensibility
- Click Request on Add IPAM Profile
- Enter configuration label
- Only AlphaNumeric characters, no spaces or special characters except:
-
and_
- Only AlphaNumeric characters, no spaces or special characters except:
- Enter Description
- I like to add the name of the network and subnet information here.
- Type = Infoblox
- Since we are using Infoblox, that is what i picked.
- Provider host = select configuration label for previously created Infoblox endpoint
- Nic number = 0
- On which NIC do you want to assign the IP address for the VM
- Subnets, Gateways and Network names
- The network name should match the vDS port group name.
- Enter values subnet, gateway and network name with comma separated and click on green + Sign
- Excluded IPs
- If you want to exclude some IP address, then enter them here individually.
- DNS Configuration
- Enter Primary DNS
- Enter Secondary DNS
- Enter DNS Suffix
- Enter DNS search Suffix
- Wins Configuration
- Enter WINS Server if necessary
- Click Submit
Enable the module:
Now we need to enable the custom properties module on our blueprint
- Login to vRA
- Click on the Infrastructure -> Reservations -> Network Profiles
- Edit the network profile that best matches the IPAM profile created above
- Click DNS tab
- Verify that the DNS suffix is set.
- Click on the Infrastructure -> Reservations
- Edit the reservation associated with the network profile review above in step 3.
- Click network tab
- Uncheck the network paths
- Also clear out the network paths dropdown value.
- Click OK
- Now we need to enable the custom properties module on our blueprint
- Click on Design -> Blueprint
- Edit Blueprint
- Click on the blueprint vSphere machine on the Design Canvas.
- Click on properties tab
- In the properties group section click +Add
- Check the box for:
- SovLabs-EnableLifecycleStubs
- Check the appropriate IPAM property group (starts with SovLabs-IPAM- and ends with -nic#)
- Do not attach more than 1 IPAM profile property group to a blueprint VM object
- Click OK
- Repeat these steps for all blueprints that should get an IP address through IPAM.
Now deploy a VM and verify in Infoblox that the IP address is assigned to the network in the default view.