HCIA Cloud+Computing+V5.5+Lab+Guide
HCIA Cloud+Computing+V5.5+Lab+Guide
HCIA-Cloud Computing
2
Copyright © Huawei Technologies Co., Ltd. 2023. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of
their respective holders.
Notice
The purchased products, services and features are stipulated by the contract made
between Huawei and the customer. All or part of the products, services and features
described in this document may not be within the purchase scope or the usage scope.
Unless otherwise specified in the contract, all statements, information, and
recommendations in this document are provided "AS IS" without warranties,
guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
a warranty of any kind, express or implied.
Overview
This course is specific to HCIA-Cloud Computing certification. It is intended for those who
are preparing for HCIA-Cloud Computing certification or want to understand basic
configurations of storage, networks, Linux, and KVM virtualization.
exercise
Linux/KVM virtualization
VirtualBox 6.1.34 One for each person
exercise
Contents
1 Storage Exercise
1.1 Overview
1.1.1 About This Exercise
This experiment helps trainees better understand the concepts and service processes
related to Huawei SAN storage by configuring Huawei SAN storage resources. (In this
experiment, only disk domain, storage pool, LUN, and LUN group are created. Host, host
group, and mapping view are created in the subsequent FC storage resource
management)
1.1.2 Objectives
⚫ Understand the concepts of disk domains and storage pools of Huawei storage
devices.
⚫ Have a basic command of the configuration of disk domains, storage pools, LUNs,
and LUN groups on Huawei storage devices.
1.1.3 Guideline
1. Create a Disk Domain and Storage Pool.
2. Create a LUN and LUN Group.
3. Create a Host and Host Group.
"
1.3 Quiz
After a host uses an iSCSI initiator to connect to a storage device, if the iSCSI initiator
name changes, will the initiator name be updated on the storage device? If the host
initiator name will not be updated, what should I do?
Answer:
The initiator name will not be updated on the storage device. You need to remove the
iSCSI connection from the host, restart the iSCSI service, and reconnect the host to the
storage device.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 17
2.1.1.2 Objectives
⚫ Understand the basic operations on the eNSP simulator.
⚫ Understand the basic operation views of Huawei switches.
2.1.1.3 Guideline
1. Start a switch on eNSP.
2. Enter the user view.
3. Enter the system view.
4. Enter the interface view.
5. Exit the interface view and system view.
<Huawei>system-view
[Huawei]sysname SW1
[SW1-GigabitEthernet0/0/1]quit
[SW1]
Step 2 Run the following command to exit the SW1 system view and return to the user
view:
[SW1]quit
<SW1>
2.2.1.2 Objectives
⚫ Understand how to change the system name of a Huawei switch.
⚫ Understand how to use the ? key on Huawei switches.
⚫ Understand how to use the display command on Huawei switches.
⚫ Understand how to use the undo command on Huawei switches.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 21
2.2.1.3 Guideline
1. Change the system name.
2. Use the ? key.
3. Run the display command.
4. Run the undo command.
<Huawei>system-view
Step 2 Change the system name to SW1 and then change it back to Huawei.
[Huawei]sysname SW1
[SW1]sysname Huawei
[Huawei]
[Huawei]interface ?
<Huawei>display version
[Huawei]display ip routing-table
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 23
[Huawei]display current-configuration
[Huawei-GigabitEthernet0/0/1]display this
[Huawei-GigabitEthernet0/0/1]display this
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 25
2.3.1.2 Objectives
⚫ Understand the implementation of VLAN.
⚫ Understand the link types of VLAN.
⚫ Understand how to configure different types of VLAN interfaces.
⚫ Understand how to assign VLANs based on interfaces.
⚫ Understand the functions of different interface types.
through. Configure the type of interfaces connecting the access switches to the PCs
to access and change the PVIDs of the access interfaces to the VLAN IDs to be
assigned to the PCs.
⚫ After the configuration, users in the same VLAN can communicate only with each
other, while users in different VLANs are isolated at Layer 2.
PVID: 1
GE0/0/1 Trunk
Allowed VLANs: VLAN 10 and VLAN 20
SW1
(LSW1) GE0/0/2 Access PVID: 10
PVID: 1
GE0/0/1 Trunk
Allowed VLANs: VLAN 10 and VLAN 20
SW2
(LSW2) GE0/0/2 Access PVID: 10
2.3.1.5 Guideline
1. Set up a topology.
2. Configure IP addresses for the hosts.
3. Create VLANs on the switches.
4. Configure access and trunk interfaces on the switches.
5. Verify the configuration.
Double-click LSW1 to enter the CLI. Run the following commands to enter the system
view and change the system name:
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname SW1
[Huawei]vlan batch 10 20
# Run the dis this command on the two interfaces and verify the configurations.
Step 1 Double-click PC1 and click the CLI tab to enter the CLI. Ping the IP address of PC2
in the same VLAN.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 31
Step 2 Double-click PC3 and click the CLI tab to enter the CLI. Ping the IP address of PC4
in the same VLAN.
Step 3 Change the default VLAN of the interface connecting LSW2 to PC2 to VLAN 20.
Step 4 Double-click PC1 and click the CLI tab to enter the CLI. Ping the IP address of PC2
again.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 32
2.4.1.2 Objectives
⚫ Understand basic operations on Huawei Layer 3 switches.
⚫ Understand basic information in routing tables of Huawei Layer 3 switches.
⚫ Understand how to configure VLANIF interfaces on Huawei Layer 3 switches.
⚫ Understand how to configure static routes on Huawei Layer 3 switches.
⚫ Configure static routes on SW1 and SW2 so that users in different departments can
communicate with each other.
Interface
Device Interface VLAN VLANIF Interface
Type
2.4.1.5 Guideline
1. Set up a topology.
2. Configure IP addresses for the hosts.
3. Configure interfaces on the switches and configure IP addresses for the interfaces.
4. Configure static routes on the switches.
5. Verify the configuration on the hosts.
[Huawei]sysname SW1
[SW1]
[SW1]vlan batch 10 20 40
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 35
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW1]display ip routing-table
[Huawei]sysname SW2
[SW2]
⚫ Create VLANs.
[SW2]vlan batch 30 40
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW2]display ip routing-table
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 38
2.5 Quiz
After you run the display ip interface brief on an existing VLANIF interface on a switch,
the command output shows that the physical status and protocol status of the VLANIF
interface are both Down. Why does this occur?
Reference answer:
No physical interface assigned to the VLAN corresponding to the VLANIF interface is in
Up state.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 40
3 Linux Exercise
3.1 Overview
3.1.1 About This Exercise
This section introduces the bash commands, file management commands, and network
configuration commands on the openEuler OS.
3.1.2 Objectives
⚫ Master bash commands.
⚫ Master file management commands.
⚫ Master the basic operations on the text editor.
⚫ Master the basic operations of openEuler system and network configurations.
3.2 Preparations
3.2.1 Creating a VM
Step 1 Open VirtualBox 6.1.34 and click New to create a VM.
Options:
-L print the value of $PWD if it names the current working
directory
-P print the physical directory, without any symbolic links
Exit Status:
Returns 0 unless an invalid option is given or the current directory
cannot be read.
[root@localhost ~]# help -d pwd
pwd - Print the name of the current working directory.
[root@localhost ~]# help -s pwd
pwd: pwd [-LP]
When entering a command, you can press Tab to automatically complete the command
or file path. For example, after you enter wh and press Tab, the following information is
displayed:
[root@localhost ~]# wh
whatis whereis which while whiptail who whoami
Step 4 Run the wget command to download a file from a specified URL.
Note that the host on which you run the wget command must be able to access the
Internet.
[root@localhost ~]# ls
anaconda-ks.cfg
[root@localhost ~]# ls .
anaconda-ks.cfg
# The command output indicates that the anaconda-ks.cfg file exists in the current directory.
[root@localhost ~]# ls ..
afs boot etc lib lost+found mnt proc run srv tmp var
bin dev home lib64 media opt root sbin sys usr
[root@localhost ~]# ls -a
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 52
⚫ View detailed information about non-hidden files and directories in the current
directory.
[root@localhost ~]#ls -l
total 4
-rw-------. 1 root root 1139 Jul 8 11:07 anaconda-ks.cfg
⚫ View detailed information about all files and directories in the current directory.
[root@localhost ~]# cd /
[root@localhost /]#
# Note that ~ changes to /.
[root@localhost sysconfig]# cd ..
[root@localhost etc]#
[root@localhost sysconfig]#cd
[root@localhost ~]#
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 53
[root@localhost sysconfig]# cd -
/etc
[root@localhost etc]#
[root@localhost test1]# cd
[root@localhost ~]# ls
anaconda-ks.cfg test1 test2 test3
[root@localhost ~]# rmdir /root/test1 # Deletes an empty directory.
[root@localhost ~]# ls
anaconda-ks.cfg test2 test3
[root@localhost ~]# mkdir /root/test1
[root@localhost ~]# touch /root/test1/huawei3.txt
[root@localhost ~]# rm -r /root/test1 # -r recursively deletes the directory and all files in the
directory.
Move the huawei.txt.bak file from the /root/test2 directory to the /root directory and
rename the file as huawei.txt.
[root@localhost test3]# cd
[root@localhost ~]# cp /etc/passwd ~
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 55
Step 2 Run the cat command to view the content of a small text file.
Step 3 Run the head commands to view the first several lines of a file.
⚫ View the first 10 lines of the file by default.
[root@localhost ~]# head passwd # If no option is added to the head command, the
first 10 lines of the file are displayed by default.
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
Step 4 Run the tail commands to view the last several lines of a file.
⚫ View the last 10 lines of the file by default.
[root@localhost etc]# tail passwd # Similar to head, if no option is added to the head command,
the last 10 lines of the file are displayed by default.
tss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
chrony:x:995:992::/var/lib/chrony:/sbin/nologin
systemd-network:x:990:990:systemd Network Management:/:/usr/sbin/nologin
systemd-resolve:x:989:989:systemd Resolver:/:/usr/sbin/nologin
systemd-timesync:x:988:988:systemd Time Synchronization:/:/usr/sbin/nologin
gluster:x:987:987:GlusterFS daemons:/run/gluster:/sbin/nologin
radvd:x:75:75:radvd user:/:/sbin/nologin
qemu:x:107:107:qemu user:/:/sbin/nologin
dnsmasq:x:985:985:Dnsmasq DHCP and DNS server:/var/lib/dnsmasq:/usr/sbin/nologin h
Step 5 Run the less command to view (and search) the file content of a large file.
View the file. Press the up and down arrow keys to navigate the lines; press the space bar
to scroll one page forward; enter a slash (/) and a keyword to search for the keyword;
and press q to exit.
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
…
Step 6 Run the more command to view (and search) the file content of a large file.
View the file. Press the space bar to scroll one page forward or exit when you reach the
end of the file; enter a slash (/) and a keyword to search for the keyword; and press q to
exit.
⚫ Search for files that belong to user root in the /root directory.
This command can only be used to find binary files, source code files, and man pages.
View the location of the bash command.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 58
Step 3 Run the following vim command to open the vimtutor file.
[root@openEuler ~]# vim vimtutor # Open the vimtutor file with vim. The tutorial home page is
displayed.
===============================================================================
= Welcome to the VIM Tutor - Version 1.7 =
===============================================================================
Vim is a very powerful editor that has many commands, too many to
explain in a tutor such as this. This tutor is designed to describe
enough of the commands that you will be able to easily use Vim as
an all-purpose editor.
The approximate time required to complete the tutor is 25-30 minutes,
depending upon how much time is spent with experimentation.
ATTENTION:
The commands in the lessons will modify the text. Make a copy of this
file to practise on (if you started "vimtutor" this is already a copy).
Step 4 Press j a few times to move the cursor down until you can see the full content of
section 1.1. Press k, j, h, and l keys to move the cursor up, down, left, and right,
respectively.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 59
Step 6 Enter gg to move the cursor to the first line of the document; enter G to move the
cursor to the last line of the document.
3.6.1.4 Undoing
Step 1 Enter u twice to undo the paste operations.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 62
Step 2 Move the cursor down until you can see the full content of section 1.3.
:q!
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 66
:wq
:%s/Lesson/Class/g
[root@localhost ~]# hostname huawei # Change the host name temporarily. The change becomes
invalid after a restart.
[root@localhost ~]# hostname
huawei
[root@localhost ~]# bash # Start a new session.
Welcome to 5.10.0-60.18.0.50.oe2203.x86_64
System information as of time: system_time
System load: 0.16
Processes: 129
Memory used: 3.7%
Swap used: 0%
Usage On: 23%
IP address: 10.0.2.15
Users online: 3
[root@huawei ~]# # In the command prompt, the host name is changed to
huawei.
[root@huawei ~]# exit
exit
[root@localhost ~]#
Method 1:
[root@localhost ~]# hostnamectl set-hostname openEuler # This method requires a re-login
instead of a restart.
Method 2:
[root@localhost ~]# vim /etc/hostname
#Change the host name in the file, save the change, and exit. The host name is changed after the
system is restarted.
[root@localhost ~]# reboot
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen
1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default
qlen 1000
link/ether 08:00:27:a5:05:8a brd ff:ff:ff:ff:ff:ff
inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic noprefixroute enp0s3
valid_lft 83814sec preferred_lft 83814sec
inet6 fe80::e2e1:a18b:f73a:d89e/64 scope link noprefixroute
valid_lft forever preferred_lft forever
[root@openEuler ~]# ip addr add 192.168.110.100/24 dev enp0s3
[root@openEuler ~]# ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen
1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default
qlen 1000
link/ether 08:00:27:a5:05:8a brd ff:ff:ff:ff:ff:ff
inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic noprefixroute enp0s3
valid_lft 83599sec preferred_lft 83599sec
inet 192.168.110.100/24 scope global enp0s3
valid_lft forever preferred_lft forever
inet6 fe80::e2e1:a18b:f73a:d89e/64 scope link noprefixroute
Step 2 Run the ip command to delete the temporary IP address of the network adapter.
# Set a static route to network range 192.168.2.0/24, with the next hop being the
gateway.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 69
Step 4 Use the nmcli command to create a network connection and apply it to an
interface of the host:
⚫ View the current NetworkManager status.
[root@openEuler ~]# nmcli con add type ethernet con-name net-static ifname enp0s3 ip4
192.168.110.10/24 gw4 192.168.110.254
# conn indicates that the operation is performed on a connection.
# add adds (a connection).
# type indicates the type of the connection.
# con-name indicates the connection name.
# ifname indicates the name of the network adapter.
[root@openEuler ~]# nmcli connection show
Step 6 Change the host IP address using the configuration file of the ifcfg-enp0s3 network
adapter.
⚫ When configuring the network, change dhcp to static or none and add the
following information:
IPADDR=192.168.110.11
NETMASK=255.255.255.0
GATEWAY=192.168.110.254
[root@openEuler ~]# vim /etc/hosts # The hosts file records the mapping between host names
and IP addresses for quick domain name resolution. Add the following information to the end of the
file:
192.168.110.11 server # After adding this line, save the file and exit.
[root@openEuler ~]# ping server -c 3
PING server (192.168.110.11) 56(84) bytes of data.
64 bytes from server (192.168.110.11): icmp_seq=1 ttl=40 time=53.3 ms
64 bytes from server (192.168.110.11): icmp_seq=2 ttl=40 time=51.3 ms
Step 2 View the status of a service, for example, the firewall service.
[root@localhost ~]# id
uid=0(root) gid=0(root) groups=0(root)
Step 2 Log in to the system as user root, create users tom, bob, and jack, and set the UID
of jack to 1024.
[root@localhost ~]# userdel -r bob # Use the -r parameter to delete the user's
home directory.
[root@openEuler ~]# tail -3 /etc/passwd
tom:x:1000:1000::/home/tony/:/bin/bash
jack:x:1024:1024::/home/jack:/bin/bash
bob1:x:1025:1025::/home/myd:/bin/bash
Note: The command output shows the last three lines of the user configuration file. You
can see that user bob does not exist.
The bob directory does not exist in the /home directory.
3.8 Quiz
On Linux, how do we view the updated contents of a log file in real time?
Answer:
Run the tail -f /var/log/XX/file.log command to view the updated data of the log file.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 75
4.1 Overview
4.1.1 About This Exercise
In this lab, bridged networks and NAT networks are configured to enable the
communication between VMs and external networks. This lab introduces two network
modes (NAT and bridge) in KVM virtualization to help trainees understand the basic
principles of communication between VMs and external networks. A computer with at
least 4 cores and 8 GB memory is recommended.
4.1.2 Objectives
⚫ Understand the basic principles of KVM virtualization.
⚫ Grasp the creation and process of KVM.
⚫ Grasp the features and configuration method of bridged networks and NAT
networks.
Connection
Device Port IP Address
Method
NIC 1
NAT 10.0.2.0/24 (service)
(enp0s3)
Host VM
NIC 2
Bridge 192.168.3.0/24 (management)
(enp0s8)
Network
Device IP Address Physical Interface
Bridge
2. Log in to VM 01, view the new IP address allocated by test, and verify its
connectivity with external networks.
⚫ Create a VM using bridges
1. Create virbr2, bind the planned physical service port enp0s3, and assign the IP
address of the original physical port to virbr2.
2. Specify virbr2 to create VM 02 and install the operating system on VM 02. Log
in to VM 02, view its IP address, test the connectivity between VM 02 and the
host VM or external networks, and verify the bridged network.
4.2.2 Procedure
4.2.2.1 Creating a Host VM
Step 1 Run Oracle VM VirtualBox Manager and click New to create a VM.
Figure 4-8 Selecting the location and size of the virtual hard disk
Step 7 On the main page of the software, click the created VM (openEuler) and Settings.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 81
Docs: man:firewalld(1)
[root@localhost ~]# cat /etc/selinux/config
[root@localhost ~]# yum -y install libvirt qemu virt-install wget net-tools bridge-utils
[root@localhost ~]# systemctl start libvirtd
[root@localhost ~]# systemctl enable libvirtd
[root@localhost opt]# virt-install --name vm01 --virt-type kvm --video vga --memory 1024 --vcpu 1 -
-disk size=8 --cdrom /opt/openEuler-22.03-LTS-x86_64-dvd.iso --network network=default --graphics
vnc,listen=0.0.0.0,port=5900,password=123456 --noautoconsole
Parameters
2. Run a VNC login tool, enter the management IP address (192.168.3.117), and the
port number (5900), and click OK.
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 94
1. Log in to VM 01 using VNC, view the current IP address, and test the connectivity
with external networks.
Alternatively, run the following commands to view the IP address of VM 01 on the host
VM and log in to VM 01 using SSH.
2. After logging in to the VM using VNC, run the ip addr command to view the current
IP address.
Note: The default network is in NAT mode, the specified bridge is virbr0, and the IP
address obtained by the VM is the one configured in the address pool for default.
3. Test the connectivity with external networks.
After change
<network>
<name>test</name> #The name has been changed to test.
<uuid>504fd670-7a5e-75e9-805e-2a78959734ef</uuid> #The UUID has been changed.
<forward mode='nat'/>
<bridge name='virbr1' stp='on' delay='0'/> #The designated bridge has been changed to
virbr1.
<mac address='52:54:00:1b:53:3b'/>
The <ip address='192.168.100.1' netmask='255.255.255.0'> #IP address has been changed.
<dhcp>
<range start='192.168.100.2' end='192.168.100.254'/> #The address pool has been modified.
</dhcp>
</ip>
</network>
HCIA-Cloud Computing V5.5 Lab Guide (Basic Exercises) Page 96
After change, the test.xml file is generated in /etc/libvirt/qemu/networks/. You can run
the following command to define and start test.
⚫ Reboot VM 01.
⚫ On the VM 01, run the ip addr command to view the current IP address.
Check whether the IP address is the IP address range of test.
1. Create virbr2, assign the IP address of the original physical interface to it, and bind it
to the physical service interface.
[root@localhost ~]# virt-install --name vm02 --virt-type kvm --video vga --memory 1024 --vcpu 1 --
disk size=10 --cdrom /opt/openEuler-22.03-LTS-x86_64-dvd.iso --network bridge=virbr2 --graphics
vnc,listen=0.0.0.0,port=5901,password=123456 --noautoconsole
[root@localhost ~]# virsh vncdisplay vm02
1
3. Log in to the VM using VNC referring to step 1 in Section 4.2.2.4, change the port
number to 5901, and install the OS.
4.3 Quiz
In KVM virtualization, what are the differences between NAT networks and bridged
networks in assigning IP addresses to VMs?
Answer:
NAT networks use the address pool configured on the corresponding network to assign IP
addresses to VMs. Bridged networks use the address segment of the physical interface or
bridge interface to allocate addresses to VMs.
Huawei Cloud Certification Training
HCIA-Cloud Computing
ISSUE: 5.5
2
Copyright © Huawei Technologies Co., Ltd. 2023. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of
their respective holders.
Notice
The purchased products, services and features are stipulated by the contract made
between Huawei and the customer. All or part of the products, services and features
described in this document may not be within the purchase scope or the usage scope.
Unless otherwise specified in the contract, all statements, information, and
recommendations in this document are provided "AS IS" without warranties,
guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
a warranty of any kind, express or implied.
Website: https://e.huawei.com
Overview
This document is intended for HCIA-Cloud Computing certification training courses. It is
intended for users who are preparing to take the HCIA-Cloud Computing exam or who
want to learn about Huawei server virtualization FusionCompute and be proficient in
using and managing FusionCompute.
Design
Based on the application scenarios of the company's services, the administrator designs
the environment as follows:
⚫ Based the existing environment resources, two servers are planned to connect to the
management locked-down server and storage device through switches. On the
network, eth0 is the management network port while eth1 is the storage network
port.
⚫ Deploy VRM on two VM nodes.
⚫ Create LUNs on the company's existing storage devices for the platform.
⚫ Considering that operations such as live migration and HA need to be performed on
VMs, create LUNs on backend storage to ensure high availability.
Networking Topology
⚫ As shown in Figure 1-1, use management ports (eth0) to connect CNA01 and CNA02
to the jump server through a switch. For details about IP address planning, see the
network configuration description.
⚫ As shown in Figure 1-1, use storage ports (eth1) to connect CNA01 and CNA02 to
the storage device through a switch. For details about IP address planning, see the
network configuration description.
⚫ As shown in Figure 1-1, the service port of the storage device is connected to the
switch and communicates with the storage port of CNA01 and CNA02 to provide
storage resources.
⚫ The BMC/Mgmt port connections between servers and storage devices are not shown
in Figure 1-1. You need to plan the connections.
⚫ Deploy VRM on two VM nodes. After the deployment, CNA01 and CNA02 belong to
the same FusionCompute resource pool.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 5
⚫ Software and tools (which need to be uploaded by the trainer to the jump server in
advance)
https://www.openeuler.org
openEuler22.03 /zh/download/archive/deta
openEuler-22.03-LTS-x86_64-dvd.iso
image il/?version=openEuler%202
2.03%20LTS
https://the.earth.li/~sgtath
Terminal login
PuTTY am/putty/0.76/w64/putty-
tool
64bit-0.76-installer.msi
Management/
eth0 113 192.168.113.2/24
Service channel
CNA01
Logical port address:
eth1 Storage channel 213
192.168.213.2/24
Management/
eth0 113 192.168.113.3/24
Service channel
CNA02
Logical port address:
eth1 Storage channel 213
192.168.213.3/24
192.168.113.10/24
VRM01 Management (floating IP address)
/ 113
(active) address
192.168.113.11/24
VRM02 Management
/ 113 192.168.113.12/24
(standby) address
Switch Configurations
⚫ The switch configuration in the experiment is subject to the actual environment.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 8
Connects to PVID:113
10GE1/0
port eth0 of Hybird Untagged
/1
CNA01. VLAN:113
Connects to VLANIF213:
10GE1/0 Default VLAN:
port eth1 of Access 192.168.213.1
/12 213
CNA02. /24
Connects to
10GE1/0 Default VLAN:
storage service Access
/13 213
ports.
FusionCompute Accounts
(Link to the product documentation: FusionCompute 8.3.0 Product Documentation)
FusionCompute-
admin IaaS@PORTAL-CLOUD8!
LinuxInstaller
Contents
1.1 Introduction
1.1.1 About This Exercise
In this exercise, you need to install CNA on two prepared servers and use installation
tools to deploy VRM to set up a dual-node FusionCompute cluster.
1.1.2 Objectives
⚫ Understand what CNA is.
⚫ Install and configure CNA.
⚫ Install VRM using tools.
⚫ Log in to FusionCompute.
1.1.3 Procedure
⚫ Configure ports:
Step 2 Click CD/DVD icon, and select the image file FusionCompute_CNA-8.3.0-
X86_64.iso on your local computer.
Step 6 On the displayed screen, select Virtual DVD-ROM VM 1.1.0 to set the boot device
to CD/DVD-ROM drive.
Step 7 On the displayed screen, select Installation within 30s and press Enter. After the
boot program is loaded, the CNA installation page is displayed.
Figure 1-15 Setting the password for the root user to log in to the
node
Step 17 Move the cursor to Grubpassword, press Enter, and enter Grubpassword. Move
the cursor to OK and press Enter.
CNA01:~#cnaInit
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 20
Step 27 Switch to the root user and enter the password of the root user to log in.
[gandalf@CNA01 ~]$ su - root
CNA01:~ # cd /home/GalaX8800/
CNA01: /home/GalaX8800 # unzip FusionCompute-LinuxInstaller-8.3.0-X86_64.zip
Step 9 Select a local storage for each node and click Next. (Select disks based on the site
requirements.)
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 33
(If no commercial license is loaded to the system, free trial will expire in 90 days.)
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 36
1.5 Quiz
What are the principles for deploying FusionCompute hosts?
Answers:
Deployment principles: Multiple hosts can be deployed based on customer requirements
for compute resources. The hosts also provide storage resources if local hard disks are
used to provide storage resources. If a small number of hosts, for example, fewer than 10
hosts, are deployed, you can add all the hosts to the management cluster, which
therefore also provides user services. If a large number of hosts are deployed, you can
add the hosts to one or more service clusters by service to facilitate service management.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 38
2.1.1.2 Objectives
⚫ Understand clusters, hosts, and the relationship between hosts and clusters.
⚫ Describe the cluster operation process and configure a cluster policy.
⚫ Understand host operations and related parameters.
2.1.1.3 Procedure
Step 3 Set basic cluster parameters to those shown in the following figure and click
Next.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 39
Step 5 Choose Resource Pools > mycluster > CNA02. Information about the two hosts is
displayed in the pane on the right.
2.2.1.2 Objectives
⚫ Understand the FusionCompute storage model.
⚫ Create storage network ports and understand related parameters.
⚫ Add universal IP-SAN storage.
⚫ Configure storage resources.
⚫ Create a disk and understand related parameters.
2.2.1.3 Procedure
Step 2 Choose Network > Logical Interface > Configuration tab, click Add Storage Port.
Step 5 Return to the Provisioning page and click Create Host. Set host information, as
shown in the following figure and click Next.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 52
Step 6 Select the iSCSI initiator of the CNA01 host and click .
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 53
Step 2 On the displayed tab page, set host group name shown in the following figure,
then select the created hosts and click .
Step 2 On the displayed page, set the view name and select the LUN group and host
group created by you, as shown in the following figure, then click OK.
Step 3 Click the Recent Tasks icon in the lower left corner of the page to view the scan
progress.
Step 4 In the displayed dialog box, confirm the information and click OK.
Step 4 On the Datastores tab page, choose IP-SAN > Disks tab. Verify that the disk has
been created.
2.3.1.2 Objectives
⚫ Understand concepts related to distributed virtual switches (DVSs).
⚫ Create a DVS.
⚫ Understand the concept and creation method of port groups.
2.3.1.3 Procedure
Step 2 Click More in the Operation column of the test-DVS and choose Delete.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 74
Step 2 Select ManagementDVS and click Add on the VLAN Pools tab page.
Step 2 Select ManagementDVS and click Add on the Port Group tab page.
Step 3 On the displayed page, set the port group name to test, use the default values for
other parameters, and click Next.
2.4 Quiz
FusionCompute supports three disk configuration modes: Common, Thick provisioning
lazy zeroed, and Thin provisioning. What are the characteristics of disks in Common
and Thin provisioning modes, and what are the differences between disks in these two
modes?
Answers:
Common: The system allocates disk space based on the disk capacity. During disk
creation in this mode, data remaining on the physical device will be zeroed out. The
performance of the disks in this mode is better than that in the other two modes, but the
creation duration may be longer than that required in the other modes.
Thin provisioning: In this mode, the system allocates part of the configured disk capacity
for the first time, and allocates the rest disk capacity based on the storage usage of the
disk until the configured disk capacity is allocated.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 79
3.1 VM Provisioning
3.1.1 Introduction
3.1.1.1 About This Exercise
This exercise illustrates how to create VMs, install OSs, and import templates on
FusionCompute.
3.1.1.2 Objectives
⚫ Create a VM.
⚫ Import a template and create a VM using the template.
⚫ Create a template.
3.1.1.3 Procedure
3.1.2 VM Provisioning
3.1.2.1 Creating a VM
Step 1 Choose Resource Pools > mycluster > Create VM.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 80
Step 2 Click the Configuration tab. In the navigation pane on the left, click CD/DVD-ROM
Drive Unmounted. Then Set Mount CD/DVD-ROM Drive Type to Mount Local
CD/DVD-ROM Drive and click OK.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 84
Step 7 Wait for several seconds until the message "The CD-ROM drive is mounted
successfully" is displayed, click OK.
Step 6 Restart the VM, log in to the VM as the root user, and mount a CD/DVD-ROM drive
to the VM.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 99
In order to ensure that the template could be exported successfully, you need to notice
the following points:
⚫ Ensure that jump server has sufficient disk space.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 104
⚫ Ensure that the SFTP service has been enabled on the CNA01 host where the VM is
located.
If the template still fails to be exported, continue to import the root certificate by
referring to the instructions provided by the Configuring the Chrome Browser chapter in
the product documentation.
3.1.2.5 Deleting a VM
Step 1 Choose Resource Pools > mycluster > CNA01 > openEuler01. The VM
management page is displayed.
Step 2 Select the openEuler template, click Operation and choose Deploy VM Using
Template.
3.1.2.8 Deleting a VM
⚫ For details, see section 3.1.2.5 "Deleting a VM."
Step 1 Choose Resource Pools > VM. The VM list page is displayed.
Step 2 Locate VM openEuler22.03-01, click More and choose Safely Delete from the drop-
down list.
Step 3 In the Information dialog box that is displayed, select Delete now and click OK to
delete the template.
3.2 VM Management
3.2.1 Introduction
3.2.1.1 About This Exercise
This exercise illustrates how to manage VMs on FusionCompute, including adjusting
flavors, creating snapshots, live migrating VMs, configuring security groups, and
configuring HA.
3.2.1.2 Objectives
⚫ Adjust VM flavors and understand precautions on these operations.
⚫ Migrate VMs.
⚫ Configure rule groups.
⚫ Configure security groups.
⚫ Understand how and why to configure HA.
3.2.1.3 Procedure
Step 4 After the task is complete, verify that the disk capacity has changed to 60 GB on the
disk management page.
[root@localhost ~]# df –h
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 122
[root@localhost ~]# df –h
Step 3 Choose Resource Pools > mycluster. Click the Configuration tab. Choose DRS Rule >
VM Group. Click Add.
Step 6 Set Name to v2h, Type to VMs to hosts, and Rule to Must not run on host group.
Select vmgroup01 and hostgroup01, and click OK.
Step 10 Choose Resource Pools > mycluster. Click the Configuration tab. Choose DRS Rule >
VM Group. Click Delete in the Operation column of the row that contains
vmgroup01. In the displayed dialog box, click OK to delete the vmgroup01 VM group.
Step 11 Choose Resource Pools > mycluster. Click the Configuration tab. Choose DRS Rule >
Host Group. Click Delete in the Operation column of the row that contains
hostgroup01. In the displayed dialog box, click OK to delete the hostgroup01 host
group.
Step 2 Change the port group name of the openEuler22.03-03 VM to test by referring to
section 3.2.2.2 "Configuring the VM Network." (The port group of the openEuler22.03-
02 VM is also named test).
Step 3 Configure the physical service switch to allow packets from VLAN 100 to pass through.
(For details, see the environment setup guide.)
Step 4 Log in to the openEuler22.03-03 VM using VNC and test the connectivity between
openEuler22.03-03 and openEuler22.03-02.
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 148
3.2.8 VM HA
Step 1 Check the VMs on CNA02. As shown in the following figure, the openEuler22.03-02
VM exists on CNA02.
Step 2 Choose Resource Pools > mycluster. Click the Configuration tab. Choose
Configuration > Control Cluster Resource. Click Edit.
3.3 Quiz
FusionCompute supports multiple VM creation methods, such as creating a VM using a
template and creating a VM using a VM. What are the application scenarios of these
two methods?
Answers:
HCIA-Cloud Computing V5.0 Lab Guide (FusionCompute) Page 157
If there is a proper template (with the same OS and hardware configurations as the VM
to be created) in the system, you are advised to create the VM using the template. In this
scenario, using the template can save your time.
HCIA-Cloud Computing Lab Guide (FusionCompute) Page 158
4.1 Introduction
4.1.1 About This Exercise
This exercise illustrates how to manage the FusionCompute system, including loading
license files, viewing alarms, configuring the system clock, and managing system
permissions.
4.1.2 Objectives
⚫ View the system ESN and load a license file.
⚫ Manage system alarms.
⚫ Configure the system clock.
⚫ Configure system permissions.
⚫
4.1.3 Procedure
Step 1 Choose System > System Configuration > License Management. Click Load License
File.
HCIA-Cloud Computing Lab Guide (FusionCompute) Page 159
Step 2 In the Add User dialog box, set User Type to Local user, Username to huawei,
Password to a customized string, and Role to vmmanager, set other parameters as
required, and click OK.
Step 2 Click Modify in the lower left corner of the page. Set the parameters as follows:
Account lockout duration (min) to 1, Number of times a password can be reused
to 3, Password expiry alert (days) to 0, Password validity period (days) to 0, and
Account lockout threshold to 1. Click Save.
Step 1 Log in to the active VRM node as gandalf user using PuTTY.
HCIA-Cloud Computing Lab Guide (FusionCompute) Page 167
VRM01:~ # TMOUT=0
VRM01:~ # cd /opt/galax/root/vrm/tomcat/script/omsconfig/bin
Step 2 Use Scenario Collection as an example and select a scenario of VRM Status, as
shown in the following figure.
VRM01:~ # TMOUT=0
sh /opt/galax/root/vrmportal/tomcat/script/portalSh/modifyPortalPort.sh 8888
HCIA-Cloud Computing Lab Guide (FusionCompute) Page 176
VRM01:~ # TMOUT=0
VRM01:~ # ll /var/backup/manual
Step 1 Log in to the active VRM node as gandalf user using PuTTY.
VRM01:~ # TMOUT=0
VRM01:~ # cronBackupUpload
HCIA-Cloud Computing Lab Guide (FusionCompute) Page 182
Step 2 Switch to the backup directory of the active VRM node. (Select the backup directory
with the largest serial number in this exercise)
VRM01:~ # cd /var/backup
VRM01:~ # ll /home/GalaX8800/YYYY-MM-DD_sn/
Step 2 Check the status of the monitoring process until the process is normal on the active
VRM node. (Wait for several minutes)
VRM01:~ # uvp_userdict_ctrl -p on
4.7 Quiz
What are the differences between major alarms and minor alarms on FusionCompute?
Answers:
A major alarm indicates a fault that affects the service at present, and if not rectified,
could result in serious consequences. A minor alarm indicates a fault that does not affect
the service at present, but if not rectified, could result in more severe faults.
Huawei Cloud Certification Training
HCIA-Cloud Computing
Lab Guide
(FusionAccess)
ISSUE: 5.5.
2
Copyright © Huawei Technologies Co., Ltd. 2023. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of
their respective holders.
Notice
The purchased products, services and features are stipulated by the contract made
between Huawei and the customer. All or part of the products, services and features
described in this document may not be within the purchase scope or the usage scope.
Unless otherwise specified in the contract, all statements, information, and
recommendations in this document are provided "AS IS" without warranties,
guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
a warranty of any kind, express or implied.
Overview
This document is a training course for the HCIA-Cloud Computing V5.5 certification. It is
intended for trainees who are preparing to take the HCIA-Cloud Computing V5.5 exam and
readers who want to know the FusionAccess deployment solution, component functions,
and O&M methods of the FusionAccess desktop cloud.
Description
This experiment guide consists of three experiments, starting from the creation of
FusionAccess empty VMs, installing functional components of the desktop cloud one by
one, and completing the service provisioning and O&M of the desktop cloud.
⚫ Experiment 1: FusionAccess component installation experiment: Create an empty VM
on FusionCompute, install and configure the OS, install functional components on
the VM, and set up the FusionAccess that can be logged in to through the web. This
experiment helps readers master the logical networking, component functions, and
installation process of the entire desktop cloud.
⚫ Experiment 2: Create a VM user on the AD, DNS, or DHCP server and create a VM
template on FusionCompute. (The VM template is encapsulated by Huawei
dedicated tools.) Configure templates, VM naming rules, and desktop groups on
FusionAccess, provision full copy and linked clone desktops, log in to the WI through
SC, and connect to the provisioned desktops through HDP. This section helps readers
understand the entire desktop cloud provisioning process and the HDP protocol, and
distinguish the differences between full copy and linked clone.
⚫ Experiment 3 is a FusionAccess desktop cloud O&M and management experiment.
This experiment helps readers master the desktop cloud O&M process through some
common O&M scenarios. This O&M experiment consists of the following parts:
▪ The desktop cloud provides rich policy management. This experiment
focuses on using multiple common policies. File redirection policies are
used to control file transfer between clients and virtual desktops. The
clipboard redirection policy is used to copy the clipboard content (such as
text and images) between the client and the virtual desktop. Create
session policies to control the access of virtual desktops. Customized
content can be displayed on virtual desktops by setting watermark
policies.
▪ During daily use, cloud desktop VM services are adjusted, for example,
modifying VM specifications, adding new VM users, adding new VMs,
upgrading common desktops to VIP desktops, unassigning or restoring
VMs, and setting user access control policies.
▪ View and handle FusionAccess routine alarms.
HCIA-Cloud Computing V5.5 Lab Guide Page 4
Experimental Design
Based on the desktop cloud application scenario of the training institution, the design
roadmap is as follows:
1. The desktop cloud used by trainers in training institutions uses the full copy desktop
solution.
2. The desktop cloud used by trainees in the training classroom uses the linked clone
desktop solution. The desktop group type is set to dynamic pool. The VMs in the
desktop group can be automatically restored to the initial configuration after restart.
3. To improve system reliability and reduce system resource usage, the
ITA/GaussDB/HDC/WI/License/vAG/vLB is deployed on two active/standby nodes and
on two AD, DNS, and DHCP nodes. The vLB implements load balancing when
different users log in to the same WebUI, preventing overload caused by all users
logging in to the same WebUI at the same time.
HCIA-Cloud Computing V5.5 Lab Guide Page 5
Networking Topology
Provides network
Switches 1
interconnection.
https://support.huawei.c
om/enterprise/en/cloud
-
computing/fusionaccess
-pid-
FusionAccess_Manager_Inst FusionAccess Linux
19917528/software/251
aller_8.0.2-x86_64.iso infrastructure VM image
807361?idAbsPath=fixn
ode01%7C22658044%7
C7919788%7C9856606
%7C250416237%20%7
C19917528
https://support.huawei.c
om/enterprise/en/cloud
-
computing/fusionaccess
-pid-
FusionAccess_WindowsDesk FusionAccess template
19917528/software/251
top_Installer_8.0.2.iso creation tool
807361?idAbsPath=fixn
ode01%7C22658044%7
C7919788%7C9856606
%7C250416237%7C199
17528
VM Deployment Description
Table 1-3 Components deployed on VMs
VM name Operating system Deploy components.
ITA/GaussDB/HDC/Cache/WI/License/v
FA-01 EulerOS 2.5
AG/vLB/LiteAS/VNCProxy
AG/vLB/LiteAS/VNCProxy
VM Specifications
Table 1-4 VM Specifications
VM name VM Specifications Network adapter
192.168. 163.11 / 24
FA-01 FA_Service_Portgroup 192.168. 163.10 / 24 313 192.168. 163.1
(floating IP address)
Username: gandalf
Linux server local common account.
Password: Cloud12#$
Password of the
Password of the HA root certificate Huawei@123
HA root certificate
Username: admin
FusionAccess Default account of the FusionAccess
account Portal in common mode Password: user-
defined
Username: vdisysman
Northbound interface (NBI) account for Password: user-
FusionCompute
interconnecting FusionCompute with defined. You are
account
FusionAccess advised to set it to
VdiEnginE@234.
HCIA-Cloud Computing V5.5 Lab Guide Page 9
Contents
1.1 Introduction
1.1.1 About This Lab
This section describes how to configure the FusionAccess private network on
FusionCompute, install and configure the AD, DNS, and DHCP server, create and configure
the active/standby Linux infrastructure VM, and install FusionAccess components on the
corresponding VM. After the configuration, you can log in to FusionAccess through the web
page to complete initial configuration, such as the interconnection between FusionAccess
and FusionCompute and the AD/DNS/DHCP server.
1.1.2 Objectives
Upon completion of this task, you will be able to:
⚫ Understand the functions of the ITA, GaussDB, HDC, WI, and License components.
⚫ Understand the functions of the vAG and vLB components.
⚫ Master the installation and configuration process of each component.
⚫ Master the initial configuration process of FusionAccess components.
⚫ Configure parameters for the interconnection between FusionAccess and
FusionCompute.
⚫ Configure parameters for interworking between FusionAccess and the AD/DNS/DHCP
server.
[Huawei]vlan 313
⚫ Interface configuration.
[Huawei] quit
<Huawei> save
Step 4 In the Select Datastore step, select autoDS_CNA01 and click Next.
Note:
You can select any available datastore for the VM in this step and subsequent steps.
Step 5 In the Configure VM step, configure the VM hardware information and options as
planned, and click Next.
⚫ Set CPU to 2.
⚫ Set Memory to 4 GB.
⚫ Set Disk 1 to 50 GB.
⚫ Set NIC 1 to a service port group, for example, FA_Service_Portgroup.
HCIA-Cloud Computing V5.5 Lab Guide Page 19
Note: Do not close the window during the mounting process. Otherwise, the CD/DVD-
ROM drive will be automatically unmounted.
Note: During the mounting of the CD-ROM drive, a message may be displayed asking
you to load the certificate. If the page shown in the following figure is displayed, start from
step 4. If the page shown in the following figure is not displayed, start from step 8.
HCIA-Cloud Computing V5.5 Lab Guide Page 22
Step 5 On the browser tab page that is displayed, choose Advanced > Proceed to
192.168.113.10(unsafe).
Step 6 When the Certificate authentication succeeded dialog box is displayed, close the
browser window and return to the Load Certificate dialog box. Click Continue
mounting. After the mounting is successful, a message is displayed, indicating that
the CD-ROM drive is mounted successfully.
Step 15 After the unmounting, the Information dialog box is displayed. Click OK.
Step 1 Log in to the system as user Administrator, right click on the taskbar in the
lower left corner, click Run and and enter gpedit.msc, click OK.
Step 2 On the Windows VM screen, click on the taskbar in the lower left corner, and
select This PC.
Step 2 click on the taskbar in the lower left corner, and click Server Manager.
Step 2 On the Windows VM, double-click CD-ROM Drive to go to the virtual CD-ROM
drive directory of the VM.
Step 3 Use the same configuration as in step 2, provision the VM named FA-AD-02, and
select the CNA02 as compute resource.
Step 4 Click the Configuration tab and choose Hardware > Disk.
HCIA-Cloud Computing V5.5 Lab Guide Page 41
Step 7 Choose Storage > Disk Management. Right-click a blank area on the left of the
newly added disk and choose Online.
HCIA-Cloud Computing V5.5 Lab Guide Page 42
Step 12 On the taskbar, right-click and choose Run. In the Run text box that is
displayed, enter the ncpa.cpl command.
Step 13 Right-click the NIC and choose Properties > Internet Protocol Version 4
(TCP/IPv4).
Step 14 Configure the NIC address and attributes based on "Table 1-5 VM IP address and
VLAN planning" in "Lab Environment Overview".
Notes:
⚫ Preferred DNS server: Enter the planned IP address of the active DNS server.
⚫ Alternate DNS server: Enter the planned IP address of the standby DNS server.
Step 15 Repeat Step 1 to Step 14 to configure disks and networks for the FA-AD-02 server.
Step 2 On the taskbar, right-click and choose Run. In the Run text box, enter the
sysdm.cpl command and press Enter.
Step 3 Click Change. In the Computer name text box, enter the planned computer name
and click OK.
Step 5 On the taskbar, click , then click on the right of the Start
menu.
Step 6 In the middle of the page, click Add roles and features.
Step 8 In the Roles area, select Active Directory Domain Services, DHCP Server, and
DNS Server. In the dialog box that is displayed, click Add Features. Then, click
Next.
Step 11 Click Install. The installation progress bar is displayed. When Installation
succeeded is displayed, the installation is successful.
Step 12 Log in to the standby server for installing the AD, DNS, and DHCP services as an
administrator in VNC mode.
Step 13 Install the AD, DNS, and DHCP services on the standby server by referring to Step 2
to Step 11.
Step 2 In the upper right corner of the Server Manager page, click , and select
Promote this server to a domain controller.
Step 3 Select Add a new forest, specify Root domain name, for example
vdesktop.huawei.com, and click Next.
HCIA-Cloud Computing V5.5 Lab Guide Page 47
Step 6 Log in to the AD server using the administrator account. The administrator account
is in the User domain name\Administrator format, for example
vdesktop.huawei.com\Administrator.
Step 8 In the upper right corner of the Server Manager page, click , and select
Promote this server to a domain controller.
Step 13 In the Active Directory Domain Services Configuration Wizard window, click
Next.
Step 14 Set Directory Services Restore Mode Administrator Password and click Next.
Step 16 Log in to the AD server using the administrator account. The administrator account
is in the User domain name\Administrator format, for example
vdesktop.huawei.com\Administrator.
Step 1 Log in to the active DNS server using the administrator account.
Step 2 On the taskbar, click , then click on the right of the Start
menu.
HCIA-Cloud Computing V5.5 Lab Guide Page 51
Step 8 In Network ID, enter the IP address segment for reverse lookup and click Next.
Step 1 In the navigation pane, choose DNS > vdesktop.huawei.com > Forward Lookup
Zones. Right-click User domain, for example, vdesktop.huawei.com, and choose
New Host from the shortcut menu.
HCIA-Cloud Computing V5.5 Lab Guide Page 54
Note:
Configure the name and IP address based on "Table 1-5 VM IP address and VLAN planning"
in "Lab Environment Overview".
HCIA-Cloud Computing V5.5 Lab Guide Page 55
Step 4 Close the New Host window. In the navigation pane, expand Reverse Lookup
Zones, right-click Reverse IP address segment, and choose Refresh from the
shortcut menu. Verify that the DNS reverse lookup information is automatically
added.
HCIA-Cloud Computing V5.5 Lab Guide Page 56
Table 1-1 Differences in configuring DNS policies on active and standby DNS
servers
Item Active Server Standby Server Difference
1. Selecting the IP address for
√ √ None
monitoring the DNS server
2. Configuring advanced DNS
√ × -
properties
3. Enabling the aging and scavenging
√ × -
functions for the DNS server
4. Changing the start of authority
√ × -
(SOA)
5. Disabling IPv6 for the DNS server √ √ None
Step 2 Log in to the active DNS server using the administrator account.
HCIA-Cloud Computing V5.5 Lab Guide Page 57
Step 3 On the taskbar, click , then click on the right of the Start
menu.
Step 5 In the SERVERS area, right-click Server name and choose DNS Manager from the
shortcut menu.
Step 6 Expand DNS. Right-click Computer name and choose Properties from the shortcut
menu.
Step 9 Click the Root Hints tab. In the Name servers area, click Remove to delete all
*.root-servers.net..
Step 12 Expand DNS. Right-click Computer name and choose Set Aging/Scavenging for All
Zones from the shortcut menu.
Step 15 In the navigation pane, choose DNS > Computer name > Reverse Lookup Zones.
Step 17 On the taskbar, right-click and choose Run. In the Run text box, enter the
ncpa.cpl command and press Enter.
Step 18 Right-click the service plane NIC (Ethernet here), choose Properties from the
shortcut menu, deselect Internet Protocol Version 6 (TCP/IPv6) on the
Networking tab page, and click OK.
Step 20 Log in to the standby DNS server using the administrator account.
Step 21 Repeat Step 3 to Step 8 to configure the IP address for monitoring the DNS server.
Step 22 Repeat Step 17 to Step 19 to disable the IPv6 protocol for the DNS server.
Step 2 In the upper right corner of the Server Manager page, click , and select
Complete DHCP configuration.
Step 6 On the taskbar, click > Windows Administrative Tools > DHCP.
Step 7 In the navigation pane, expand DHCP Server, right-click IPv4, and choose New
Scope.
Step 9 Enter the name and description of the new scope and click Next.
Step 12 Select Yes, I want to configure these options now and click Next.
Step 13 Enter the VM gateway IP address of the port group under the IP address parameter
and click Add.
Step 14 Click Next to switch to the Domain Name and DNS Servers dialog box.
Step 15 Configure IP address and click Add to add the standby DNS server.
Step 18 Right-click Scope [IP address segment] DHCP scope name, for example Scope
[192.168.163.0] hcia, and choose Advanced > Split-Scope.
HCIA-Cloud Computing V5.5 Lab Guide Page 66
Step 20 Click Browse, enter the name or IP address of the standby DHCP server, and click
OK twice.
Step 21 Click Next and set the ratio of IP addresses assigned by the active DHCP server to
those assigned by the standby DHCP server. The recommended value is 8:2.
Step 24 Log in to the standby DHCP server using the administrator account.
Step 25 Repeat Step 2 to Step 5 to configure the DHCP service on the standby DHCP server.
Step 26 On the taskbar, click > Windows Administrative Tools > DHCP. In the
displayed DHCP window, choose DHCP > Computer name. Right-click IPv4 and
choose Refresh from the shortcut menu.
HCIA-Cloud Computing V5.5 Lab Guide Page 67
Step 27 Right-click the DHCP scope, and choose Activate from the shortcut menu to
activate the IP address pool.
Step 2 On the taskbar, click , then click on the right of the Start
menu.
Step 3 In the navigation pane of the Server Manager window, click AD DS.
Step 4 In the SERVERS area, right-click Server name, and choose Active Directory Users
and Computers from the shortcut menu.
Step 8 Right-click User domain OU which created in Step 6 and choose New > User from
the shortcut menu.
Step 2 Click Next. In the Users or Groups window that is displayed, click Add.
Step 3 Enter the domain account to be configured as the domain administrator, and click
Check Names, and click OK.
Step 7 Select Creation/deletion of specific child objects. In the Permissions area, select
Create User objects, Delete User objects, Create Group objects, Delete Group
objects, Create Computer objects, and Delete Computer objects, and click Next.
Note: When mounting CD/DVD-ROM Drive, do not select Restart the VM now to install
the OS.
Step 6 In BackupTools, click Browse and set BackupPath to a path residing on a disk
(except the system disk) with more than 15 GB available space.
Step 9 Repeat Step 1 to Step 7 to configure the backup path for the standby AD server.
Step 3 When configuring Basic Information, change name to FA-01. For Set Compute
Resource, select CNA01 in mycluster and click OK. Set OS to Linux and OS
Version to EulerOS 2.5 64bit, and click Next.
Note:
You can select any available datastore for the VM in this step and subsequent steps.
HCIA-Cloud Computing V5.5 Lab Guide Page 75
Step 5 In the Configure VM step, configure the VM hardware information and options as
planned, and click Next.
⚫ Set CPU to 8.
⚫ Set Memory to 16 GB.
⚫ Set Disk 1 to 60 GB.
⚫ Set NIC 1 to a service port group, for example, FA_Service_Portgroup.
Step 2 Select the directory where the CD/DVD-ROM drive is located. To mount an ISO file,
select File(*.iso), and click Browse to select the
FusionAccess_Manager_Installer_8.0.2-x86_64.iso.
HCIA-Cloud Computing V5.5 Lab Guide Page 76
Step 5 After the VM is restarted, select Test this media & install EulerOS V2.0SP5 within
60s and press Enter.
Step 6 After the OS is installed. Back to FusionCompute, click the Summary tab, choose
Operation > Tools > Mount Tools, and click OK.
Step 7 Log in to the VM using VNC as user root (preset password: Cloud12#$).
Step 8 Configure the IP address, subnet mask, and gateway of the infrastructure VM
template based on the data plan, and press Enter.
Note:
If this is the first or second time for the root user to log in to the VM, the FusionAccess CLI
is displayed.
Step 7 Specify Local Service IP (the service plane IP address of the local server) and press
Enter.
Note:
If this is the first or second time for the root user to log in to the VM, the FusionAccess CLI
is displayed.
⚫ Root cert's password of HA: Enter the password of the HA root certificate, which is
Huawei@123 by default.
⚫ Peer gandalf password: Enter the password of gandalf (Cloud12#$ by default) for
logging in to the active VM.
Step 7 The system starts installing and configuring the components. If the message "Install
all components successfully" is displayed, the components are successfully installed.
Step 2 Click in the navigation tree on the left. The System page is displayed.
Step 3 In the navigation tree on the left, choose System > Rights Management > User
Management, click Add User, and configure related parameters.
⚫ User Type: Select Interface interconnection user.
⚫ Username: vdisysman
⚫ Password: Set the password based on the rules. Remember the password because it
will be used in subsequent operations.
⚫ Role: Select administrator.
⚫ Max. Concurrent Logins: No limit
Step 2 Set the passwords as planned. The password must meet the following requirements:
⚫ Contains at least one uppercase letter (A to Z), one lowercase letter (a to z), one
digit (0 to 9), and one special character (~!@#$%^&*()-_=+\|{};:'",<.>/? or space).
⚫ Contains 8 to 32 characters.
⚫ Cannot contain the username or the username in reversed order.
⚫ Cannot be any weak password by default, such as Huawei@, Huawei123@, or
huawei_123.
Step 2 Click Next. The page for configuring the vAG/vLB/VNCProxy is displayed.
Step 3 Click Next, in the displayed Warning dialog box, click OK. The Configure Default
Policy page is displayed.
Step 4 Configure the default policy for peripherals. By default, Main Switch for peripherals
is enabled, and all peripherals can be directly used.
Step 6 Confirm all parameter settings and click Next. The system automatically performs
the configuration. After the configuration is complete, the FusionAccess Web
Client page is displayed.
Step 3 Set the clock source IP address to the service plane IP address of the active AD
server, that is, FA-AD-01.
HCIA-Cloud Computing V5.5 Lab Guide Page 84
Step 4 Configure the connection to Windows AD. Retain the default values for other
parameters.
⚫ FQDN: name of the Windows AD domain controller, for example,
vdesktop.huawei.com
⚫ Domain Administrator: name of the administrator who accesses the Windows AD
server, for example, vdsadmin
⚫ Domain Administrator Password: administrator password for login
⚫ Domain Controller IP: service-plane IP address of the Windows AD server.
⚫ DC Host Name: host name of the Windows AD server, for example, FA-AD-01.
HCIA-Cloud Computing V5.5 Lab Guide Page 85
⚫ Active DNS Server IP Address: service plane IP address of the active DNS server. You
can choose an IPv4 address.
⚫ Standby DNS Server IP Address: (Optional) service plane IP address of the standby
DNS server. You can choose an IPv4 address.
2.1.2 Objective
⚫ Understand the functions of the vAG and vLB.
⚫ Understand the differences between linked clone and full copy.
⚫ Understand the desktop group types, including dedicated, static, and dynamic pools.
⚫ Learn how to create a login user.
⚫ Master the encapsulation of linked clone and full copy templates.
⚫ Master desktop group operations.
⚫ Master VM naming rules.
⚫ Master VM group operations.
⚫ Quick provisioning operations.
⚫ Learn how to log in to the SC.
Description:
Select any available data store resource for the VM.
Step 5 On the Configure VM page, set VM Hardware and Options as planned, and click
Next.
⚫ CPU: At least 4 CPUs are recommended.
⚫ Memory: At least 4 GB
⚫ Disk 1: At least 40 GB. Set Disk Configuration Mode to Thin Provisioning.
⚫ NIC 1: Select a service port group.
Description:
If the system displays a message indicating that the CPU cannot be adjusted when the CPU
cores are adjusted to 4 cores, change the Number of Cores per Socket to 2.
Step 3 After the CD/DVD-ROM drive is mounted successfully, click OK in the dialog box
that is displayed. (Do not close or refresh this page when the CD-ROM drive is
mounted locally.)
Step 8 On the VM, right-click in the lower left corner, enter compmgmt.msc in the
Run text box, and press Enter. The Computer Management window is displayed.
HCIA-Cloud Computing V5.5 Lab Guide Page 96
Step 15 Right-click in the lower left corner and choose Shut down or sign out > Sign
out to log out of the operating system.
Step 17 On the VM, right-click , enter sysdm.cpl in the Run text box, and press Enter.
Step 21 On the VM, right-click , enter compmgmt.msc in the Run text box, and press
Enter.
HCIA-Cloud Computing V5.5 Lab Guide Page 103
Figure 2-32 Are you sure you want to delete the user - 1
In the displayed dialog box, click OK.
Figure 2-33 Are you sure you want to delete the user - 2
HCIA-Cloud Computing V5.5 Lab Guide Page 105
Step 5 After the restart is complete, log in to the VM as the Administrator user.
Step 6 On the FusionCompute, right-click the VM on which the OS has been installed in
Resource Pools and click Tools. In the displayed list, click Unmount Tools.
Step 11 Set Remote Desktop Services. Right-click and choose Run from the shortcut
menu.
Step 12 Enter services.msc in the Run text box and click OK. The Services window is
displayed.
Step 16 In the Run text box, enter gpedit.msc and click OK. The Local Group Policy Editor
window is displayed.
Activate Shutdown Event Tracker System State Data and Display Shutdown
Event Tracker, respectively, to set their status to Disabled.
Step 20 Configure the local security policy. In the VNC window of the VM, right-click
and choose Run.
Step 21 In the Run text box, enter secpol.msc and click OK.
Step 22 In the navigation tree on the left, expand Local Policies > Security Options, and
double-click User Account Control: Admin Approval Mode for Built-in
Administrator Account. In the displayed window, select Disabled and click OK.
Step 4 On the Customize OS page, select Do not customize and deselect Generate initial
Password. Click Next.
In the dialog box indicating that the operation is successful, click OK.
Step 4 On the Customize OS page, select Do not customize, deselect Generate initial
Password, and click Next.
Description:
⚫ Domain: specifies the domain to which the VM is added, for example,
vdesktop.huawei.com.
⚫ Account: domain account with the permission to add a domain.
⚫ Password: indicates the password of the domain account that has the permission to
add to the domain.
⚫ OU: OU created on the AD server, for example, UserOU.
⚫ Domain User (Group): Domain user (group) created on the AD server. You are
advised to enter the security group name, for example, UserGroup. (The domain
user group must be created in UserOU of the active AD VM in advance.)
⚫ Local user group: VM users can be added to the Users group only when Configure
User Login is selected on the Function page. In addition, users in the Users group do
not have the VM administrator rights and their operations are restricted. For
example, users cannot store files on the system disk.
HCIA-Cloud Computing V5.5 Lab Guide Page 155
Step 22 After the login is complete, the installation page is displayed. After the installation
is complete, click Next.
Step 5 In the NIC area, click Select under Port Name. In the displayed dialog box, select a
service plane port group and click OK. Retain the default value for Security Group.
Set How IP Address Obtained to DHCP.
Step 15 After the provisioning is complete, choose Resources > Desktops > Computer. The
provisioned full copy desktop VM is displayed.
Step 2 Set related parameters as required. In this experiment, set Computer Group to
Existing Computer Group, set Computer Group Name to LinkedClone-VM-
Group, and retain the default values for Site, Cluster, and Host. You do not need
to set Host. Select LinkedClone temp for Configure Template.
Description:
When you log in to this address for the first time using a browser, the message "Your
connection is not private " will be displayed. Click Advanced > Continue to... The prompt
varies according to the browser. Select a value based on the actual situation.
3.1.2 Objective
⚫ Master the process for modifying virtual desktop specifications.
⚫ Master the operation process of adding a virtual desktop user.
⚫ Master the process of adding virtual desktops.
⚫ Master the process of upgrading a common desktop to a VIP desktop.
⚫ Master the process of unassigning or restoring virtual desktop allocation.
⚫ Master the self-service maintenance process when a fault occurs.
⚫ Understand and master the policy management process of virtual desktops.
HCIA-Cloud Computing V5.5 Lab Guide Page 195
Step 1 On the FusionAccess page, choose Resource > Policy > Protocol Policies and click
Create.
HCIA-Cloud Computing V5.5 Lab Guide Page 196
Description:
Destination path of the file to be pasted:
⚫ If the desktop VM has only one system disk, select the folder named after domain
user or Public in the User folder of the system disk as the destination path.
Step 8 Copy a file from the cloud desktop to the client drive and check whether the
operation is disabled. (This experiment uses the file copied from the client drive to
the cloud desktop as an example.)
HCIA-Cloud Computing V5.5 Lab Guide Page 202
Step 1 On FusionAccess, choose Resource > Policy > Protocol Policy. On the displayed
page, locate the row that contains Policy1, and click Edit in the Operation column.
Step 2 On the Edit Policy Group page, select Edit Existing Policy Group and click Next.
Description:
You can select any content.
Step 7 On the cloud desktop, create a WordPad that contains texts and images.
HCIA-Cloud Computing V5.5 Lab Guide Page 208
Step 1 On the FusionAccess page, choose Resources > Desktops > Computers.
Description:
If the CPU and Memory specifications of a running computer are modified, restart the
computer for the modification to take effect. For computers in other states, the settings
take effect after the computer is started.
HCIA-Cloud Computing V5.5 Lab Guide Page 216
only the assignment type needs to be set to Assign a Computer to Multiple Users.
Other configurations are the same as those in section "Provisioning a Full Copy
Desktop.")
Description:
When the Assignment Type is Assign a Computer to Multiple Users.:
⚫ If user A has logged in to a VM, user B cannot log in to the VM.
⚫ If user A logs in to a VM and disconnects from the VM but does not log out of the
VM, user B can also log in to the VM, but user A is forcibly logged out during the
login.
⚫ To ensure all users in user group A can log in to the pool desktop that is assigned to
this group, all these users must directly belong to user group A.
⚫ For example, if user A belongs to department A and department A belongs to
department C, user A can directly log in to the pool desktop if it is assigned to
department A, but cannot log in to the pool desktop if it is assigned to department
C.
Step 4 In the Add User dialog box, (Create domain user vdsuser02 in the UserOU of the
active AD VM) enter [email protected] in the Add User dialog
box, select Administrators in the Set User Group drop-down list box, and click OK.
In the displayed dialog box, click OK.
HCIA-Cloud Computing V5.5 Lab Guide Page 220
Step 1 On the FusionAccess page, choose Resources > Desktops > Computer Groups. The
computer group management page is displayed.
Description:
⚫ Only assigned full copy and linked clone VMs can be upgraded to VIP desktops.
⚫ Retain default values for VIP desktop resource assurance and real-time monitoring
policies for all VIP users.
⚫ During the operation, the user VM will be shut down and restarted. The VM will be
available after it is restarted.
Step 1 On the FusionAccess page, choose Resources > Desktops > Computers. The
computers list page is displayed.
Description:
HCIA-Cloud Computing V5.5 Lab Guide Page 230
⚫ After a full copy VM with Assignment Type set to Assign a computer to a user is
unassigned, you can choose Operation > Assignment Relationship > Restore
Attachment to reassign the VM. However, only the original user can be assigned and
the user group rights remain unchanged. After the VM is unassigned, restore the VM
assignment. After the VM is started, the VM icon on the WI becomes bright. Wait for
3 minutes and log in to the VM.
⚫ After being unassigned, a full copy VM with Assignment Type set to Assign a
computer to multiple users cannot be reassigned.
Step 1 On the FusionAccess page, choose Resources > Desktops > Computers.
Figure 3-81 Statistics on the status of the computer used by the user
Step 5 Log in to the FusionAccess management system, choose Monitoring > Reports >
vAG Information, and view the gateway status in the FusionAccess system.
HCIA-Cloud Computing V5.5 Lab Guide Page 236