Guide for Interworking Between

CloudEngine Switches and VMware vRNI

Issue 01
Date 2018-12-15

HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2019. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior
written consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this document are the property of their respective
holders.

Notice
The purchased products, services and features are stipulated by the contract made between Huawei and
the customer. All or part of the products, services and features described in this document may not be
within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without warranties, guarantees
or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China

Website: http://www.huawei.com

Email: [email protected]

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. i

Guide for Interworking Between CloudEngine Switches
and VMware vRNI About This Document

About This Document

Overview
This document describes the principle and service process of interconnection between
VMware vRNI and Huawei CloudEngine series switches, and provides detailed
interconnection operation guide and verification description.

Intended Audience
This document is intended for:
 Product managers
 Marketing representatives
 Delivery engineers
 Maintenance engineers

Symbol Conventions
The symbols that may be found in this document are defined as follows.

Symbol Description

Indicates a hazard with a high level or medium level of risk which, if

not avoided, could result in death or serious injury.
Indicates a potential hazard with a low level of risk which, if not
avoided, could result in minor or moderate injury.
Indicates a potentially hazardous situation that, if not avoided, could
result in minor or moderate injury.
Indicates a potentially hazardous situation that, if not avoided, could
result in equipment damage, data loss, performance deterioration, or
unanticipated results.
NOTICE is used to address practices not related to personal injury.
Calls attention to important information, best practices, and tips.
NOTE is used to address information not related to personal injury,
equipment damage, and environment deterioration.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. ii

Guide for Interworking Between CloudEngine Switches
and VMware vRNI About This Document

Change History
Issue Date Description

01 2018-12-15 This is the first official release.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. iii

 Guide for Interworking Between CloudEngine Switches
and VMware vRNI Contents

Contents

About This Document....................................................................................................................ii

1 Function Overview........................................................................................................................1
1.1 Introduction to VMware vRNI.......................................................................................................................................1
1.2 Principle..........................................................................................................................................................................4
1.3 Compatibility and Version Mapping...............................................................................................................................6
1.4 Constraints and Limitations............................................................................................................................................6
1.5 Common Tools and Commands.....................................................................................................................................6

2 Networking Planning...................................................................................................................7
3 Procedure.........................................................................................................................................9
3.1 Configuration Roadmap.................................................................................................................................................9
3.2 Configuring a CE Switch................................................................................................................................................9
3.2.1 Configuring SSH.........................................................................................................................................................9
3.2.2 Configuring NetStream.............................................................................................................................................10
3.3 Configuring VMware ESXi..........................................................................................................................................11
3.4 Verification...................................................................................................................................................................17

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. iv

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 1 Function Overview

1 Function Overview

1.1 Introduction to VMware vRNI

1.2 Principle
1.3 Compatibility and Version Mapping
1.4 Constraints and Limitations
1.5 Common Tools and Commands

1.1 Introduction to VMware vRNI

VMware vRealize Network Insight (vRNI) provides intelligent services for software-defined
networking environments (especially NSX). It provides management for virtualized networks
(only for SDN networks). Based on visualization and analysis capabilities of physical and
virtual networks provided by VMware vRNI, VMware vRNI can optimize the network
performance to achieve the best service deployment effect.
When VMware vRNI is connected to Huawei CloudEngine series switches (CE switches),
path detection and traffic monitoring are supported. The following sections describe the two
functions.

Path Detection
For VMs on the ESXI host, VMware vRNI can explicitly draw a Layer 3 reachable path
between the two VMs. As shown in the following figure, the Layer 3 path of traffic when the
VM at 10.1.2.2 accesses the VM at 11.1.3.2 is drawn on VMware vRNI.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 1

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 1 Function Overview

Figure 1-1 Layer 3 access path between VMs on VMware vRNI

In addition, a connection path between a VM and a CE switch is drawn on VMware vRNI, as

shown in the following figure.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 2

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 1 Function Overview

Figure 1-2 Connection path between a VM and a CE switch on VMware vRNI

In the topology view, you can query information about all ECMP links, switches where
gateways are located, and next-hop routes.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 3

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 1 Function Overview

Traffic Monitoring
VMware vRNI uses NetStream of switches to monitor traffic and obtains the traffic status of
switches based on the sampling packets sent from the switches to VMware vRNI, as shown in
the following figure. The following figure shows the traffic from ubuntu01_22 to
ubuntu01_23. The source IP address is 10.1.2.2, the port number is 22, and the traffic rate is
428.3 kbit/s. A total of 4.3 GB traffic is sent during the period from 08:26 on December 6 to
08:26 on December 7.

Figure 1-1 Traffic monitored on VMware vRNI

1.2 Principle
Path detection: vRNI connects to CE switches through SSH, and then runs commands on the
CE switches to obtain the command outputs. After parsing the command outputs, vRNI
calculates the current networking information and completes path detection.
Traffic monitoring: After NetStream is configured on CE switches, sampling packets are sent
to vRNI. vRNI calculates the current traffic status based on the sampling packets.

Path Detection
VMware vRNI logs in to a CE switch through SSH, sends a query command to the CE
switch, parses the command output from the CE switch to obtain necessary routing
information, and then draws a path topology based on the routing information. The following
table lists the involved commands. In the commands, | no-more indicates that the output
result is not split.

Table 1-1 Commands delivered by VMware vRNI to CE switches

Command Function

display current-configuration | include Displays parameters that have taken effect

sysname | no-more on a device.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 4

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 1 Function Overview

Command Function

display device board | no-more Displays the device type and status,
excluding information about power modules
and fan modules.
display device manufacture-info | no- Displays manufacturing information.
more
display version | no-more Displays the device version.
display interface | no-more Displays the status of and statistics about
interfaces.
display port vlan | no-more Displays information about interfaces of a
VLAN.
display interface Eth-Trunk | no-more Displays the Eth-Trunk status.
display ip vpn-instance | no-more Displays the VPN instance configuration.
display ip vpn-instance interface | no- Displays information about interfaces bound
more to a VPN instance.
display ip routing-table all-routes | no- Displays IPv4 routes of the public network
more and all private networks.
display mac-address | no-more Displays information about MAC address
entries of all types, including the destination
MAC address, VLAN ID of a device,
outbound interface, and MAC address entry
type.
display lldp neighbor brief | no-more Displays brief information about LLDP
neighbors, such as the devices and
interfaces that are connected to the local
device.
display vrrp | no-more Displays the status and configuration of a
VRRP group.
display dfs-group 1 m-lag | no-more Displays information about the M-LAG
with DFS group 1.

VMware vRNI obtains and parses information such as neighbors, interfaces, VLAN IDs,
VPN, and routes based on command outputs returned by CE switches, and generates a path
topology based on a certain logic algorithm.

Traffic Monitoring
CE switches need to be configured with NetStream v9 to send sampling packets to VMware
vRNI (VMware vRNI needs to be configured with a proxy and sampled packets are sent to
the agent for processing). VMware vRNI analyzes the sampling packets.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 5

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 1 Function Overview

1.3 Compatibility and Version Mapping

CE switches must run V200R005C10 or later.
The supported models include the CE8850EI (32CQ), CE6856HI, CE6855HI, CE6875EI, and
CE6865EI.

1.4 Constraints and Limitations

vRNI does not change the networking, so there is no restriction on the networking.

1.5 Common Tools and Commands

Table 1-1 lists the common commands.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 6

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 2 Networking Planning

2 Networking Planning

Figure 1-1 shows typical networking for interconnection between CE switches and VMware
vRNI. ESXI hosts are connected to CE switches through M-LAG, or a single host is
connected to an ESXI host through a single link. An ESXI host is virtualized into multiple
VMs and configured with IP addresses on different network segments.

The IP addresses here are examples. Replace them based on the actual IP address planning.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 7

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 2 Networking Planning

Figure 1-1 Typical networking for interconnection between CE switches and VMware vRNI

vRNI is installed on ESXI-1. When vRNI is reachable to CE switches at Layer 3 and can log
in to CE switches in SSH mode, vRNI can manage CE switches.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 8

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

3 Procedure

The interconnection between vRNI and CE switches does not depend on the physical
networking and service configuration of the CE switches. Therefore, the networking is based
on the actual service requirements.
3.1 Configuration Roadmap
3.2 Configuring a CE Switch
3.3 Configuring VMware ESXi
3.4 Verification

3.1 Configuration Roadmap

1. Configure the management network between a CE switch and VMware vRNI. This step
is performed to ensure that the IP address of vRNI and IP address of the vRNI proxy are
reachable to MEth0/0/0 of the CE switch at Layer 3. The interworking mode and specific
configuration can be planned based on the actual network, and are not provided.
2. Configure SSH on the CE switch so that vRNI can access the CE switch through SSH.
3. Configure NetStream on the CE switch.
4. Create a VM on VMware vRNI and connect the VM to the network.
5. Configure NetFlow, LLDP, and LACP on VMware vRNI.

3.2 Configuring a CE Switch

3.2.1 Configuring SSH
SSH commands must be configured on all switches on the network. SSH is used for
communication between CE switches and VMware vRNI. The configuration on a CE switch
is used as an example. The configurations on other CE switches are similar.
Step 1 Configure the management interface.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 9

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

<HUAWEI> system-view
[~HUAWEI] user-interface maximum-vty 21
[~HUAWEI] user-interface vty 0 20
[*HUAWEI-hi-vty0-20] idle-timeout 0
[*HUAWEI-ui-vty0-20] authentication-mode aaa
[*HUAWEI-ui-vty0-20] protocol inbound all
[*HUAWEI-ui-vty0-20] commit
[~HUAWEI-ui-vty0-20] quit

[~HUAWEI] interface meth 0/0/0

[*HUAWEI-MEth0/0/0] ip address 192.105.146.33 24
[*HUAWEI-MEth0/0/0] commit
[~HUAWEI-MEth0/0/0] quit

Step 2 Configure SSH for login.

[~HUAWEI] aaa
[~HUAWEI-aaa] local
[~HUAWEI-aaa] undo local-user policy security-enhance
[*HUAWEI-aaa] commit
[~HUAWEI-aaa] local-user netconftest password irreversible-cipher
huaweiDC
[*HUAWEI-aaa] local-user netconftest service-type telnet ssh
[*HUAWEI-aaa] local-user netconftest level 3
[*HUAWEI-aaa] local-user netconftest user-group manage-ug
[*HUAWEI-aaa] commit
[*HUAWEI-aaa] quit

[~HUAWEI] ssh user netconftest

[*HUAWEI] ssh user netconftest authentication-type password
[*HUAWEI] ssh user netconftest service-type all
[*HUAWEI] ssh authorization-type default aaa
[*HUAWEI] commit
[~HUAWEI] stelnet server enable
[*HUAWEI] snetconf server enbale
[*HUAWEI] commit

[~HUAWEI] rsa local-key-pair create

The key name will be:HUAWEI_Host
% RSA keys defined for HUAWEI_Host already exist.
Confirm to replace them？ Please select [Y/N]: y
The rangge of public key size is (2048 ~ 2048).
NOTE: Key pair generation will take a short while.
[*HUAWEI] commit
[~HUAWEI] undo telnet server disable
[*HUAWEI] commit

----End

3.2.2 Configuring NetStream

The NetStream commands need to be configured only on the CE switch that is directly
connected to an ESXI host. CE6855-1 in Figure 1-1 is used as an example.
Step 1 Enable NetStream globally and set parameters.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 10

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

<CE6865> system-view
[~CE6865] netstream export ip version 9 //Configure the version
number of exported packets carrying IPv4 original flow statistics
to 9.
[*CE6865] netstream export ip source X.X.X.X //Configure the
source address for the exported packets carrying IPv4 flow
statistics. You can set this parameter to the IP address of
MEth0/0/0 on a CE switch.
[*CE6865] netstream export ip host X.X.X.X 2055 //Configure the
destination IP address and destination UDP port number for the
exported packets carrying IPv4 flow statistics. In this example,
X.X.X.X is the IP address of the proxy server of vRNI and the port
number is 2055.
[*CE6865] netstream timeout ip active 1 //Set the active aging
time of IPv4 original or flexible flows to 1 minute.
[*CE6865] netstream timeout ip inactive 60 //Set the inactive
aging time of IPv4 original or flexible flows to 60 seconds.
[*CE6865] commit

Step 2 Configure the interface on the CE switch that is directly connected to an ESXI host.
[~CE6865] interface 40ge1/0/1
[~CE6865-40GE1/0/1] netstream inbound ip //Enable IPv4 flow
statistics collection on the inbound interface.
[~CE6865-40GE1/0/1] netstream outbound ip //Enable IPv4 flow
statistics collection on the outbound interface.
[*CE6865-40GE1/0/1] netstream sampler random-packets 1024 inbound
//Configure the device to sample incoming traffic on an interface
and set the sampling interval of random packets to 1024.
[*CE6865-40GE1/0/1] netstream sampler random-packets 1024 outbound
//Configure the device to sample outgoing traffic on an interface
and set the sampling interval of random packets to 1024.
[*CE6865-40GE1/0/1] commit
[~CE6865-40GE1/0/1] quit

----End

3.3 Configuring VMware ESXi

Step 1 Log in to the VMware vSphere vCenter management system.
Step 2 Create a port group on the distributed switch and configure a VLAN.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 11

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

Step 3 Configure a VLAN ID. The VLAN ID is the ID of the VLAN that a VM in a port group
belongs to, which must be the same as the VLAN ID of the switch interface that is directly
connected to an ESXI host.

Step 4 Add a host to the distributed switch to prepare for migrating VMs on the host.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 12

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

Step 5 Select a physical network adapter.

Step 6 Add the physical network adapter that is directly connected to the CE switch to the uplink
port.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 13

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

Step 7 Migrate VMs.

Migrate VMs from the original network to the new port group of the distributed switch for
unified management.

Step 8 Configure NetFlow.

1. Configure NetFlow for the distributed switch.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 14

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

Enable NetFlow on the port group.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 15

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

Step 9 Configure LLDP on the distributed switch.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 16

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

Step 10 Configure LACP. If a LAG is configured on the network, you need to add a LAG interface
and configure the egress network adapter of a server to work in LAG mode.

Step 11 After the configuration is complete, check the networking information, as shown in the
following figure.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 17

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

----End

3.4 Verification
After the preceding configurations are complete, VMware vRNI automatically manages
switches on the network segment. After CE switches are detected, transmit traffic between
VMs. The VM-VM forwarding path is displayed, as shown in the following figure.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 18

Guide for Interworking Between CloudEngine Switches
and VMware vRNI 3 Procedure

The traffic monitoring result is displayed, as shown in the following figure.

Issue 01 (2018-12-15) Copyright © Huawei Technologies Co., Ltd. 19