Front cover Draft Document for Review November 7, 2008 7:23 pm SG24-7590-01 PowerVM Virtualization on IBM Power Systems (Volume 2): Managing and Monitoring Covers AIX, IBM i and Linux for Power virtual I/O clients A collection of managing and monitoring best practices focused on Virtualization Includes the Virtual I/O Server 2.1 enhancements Ingo Dimmer Volker Haug Thierry Huché Anil K Singh Morten Vågmo Ananda K Venkataraman ibm.com/redbooks Draft Document for Review November 7, 2008 4:31 pm 7590edno.fm International Technical Support Organization PowerVM Virtualization on Power Systems: Managing and Monitoring February 2009 SG24-7590-01 7590edno.fm Draft Document for Review November 7, 2008 4:31 pm Note: Before using this information and the product it supports, read the information in “Notices” on page xxv. Second Edition (February 2009) This edition applies to the following products: IBM AIX 6.1 Technology Level 2 (5765-G62) IBM AIX 5.3 Technology Level 9 (5765-G03) IBM i 6.1 (5761-SS1) Novell SUSE Linux Enterprise Server 10 for POWER (5639-S10) Red Hat Enterprise Linux 5 for POWER (5639-RHL) IBM PowerVM Express Edition (5765-PVX) IBM PowerVM Standard Edition (5765-PVS) IBM PowerVM Enterprise Edition (5765-PVE) IBM Virtual I/O Server Version 2.1 with Fix Pack 20.1, or later IBM Hardware Management Console Version 7.3.4, or later IBM Tivoli Monitoring V6.1 for System p (5765-ITM) IBM Tivoli Storage Manager (5608-ISM) IBM Director 6.1 IBM Power Systems © Copyright International Business Machines Corporation 2009. All rights reserved. Note to U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Draft Document for Review November 7, 2008 4:31 pm 7590edno.fm This document created or updated on November 7, 2008. iii 7590edno.fm Draft Document for Review November 7, 2008 4:31 pm iv PowerVM Virtualization on Power Systems: Managing and Monitoring Draft Document for Review November 7, 2008 4:31 pm 7590TOC.fm Contents Figures . xiii Tables . xix Examples. xxi Notices . xxv Trademarks . xxvi Preface . .xxvii The team that wrote this book . xxviii Become a published author . xxx Comments welcome. xxx Part 1. PowerVM virtualization management . 1 Chapter 1. Introduction. 1 1.1 PowerVM Editions . 1 1.2 Maintenance strategy . 6 1.3 New features for Virtual I/O Server Version 2.1 . 7 1.4 Other PowerVM Enhancements . 8 Chapter 2. Virtual storage management . 11 2.1 Disk mapping options . 12 2.1.1 Physical volumes . 12 2.1.2 Logical volumes . 13 2.1.3 File-backed devices . 15 2.2 Using virtual optical devices . 15 2.3 Using virtual tape devices . 20 2.4 Using file-backed devices . 25 2.5 Managing the mapping of LUNs over vSCSI to hdisks . 29 2.5.1 Naming conventions . 31 2.5.2 Virtual device slot numbers . 32 2.5.3 Tracing a configuration . 35 2.6 Replacing a disk on the Virtual I/O Server . 41 2.6.1 Replacing a LV backed disk in the mirroring environment . 41 2.6.2 Replacing a mirrored storage pool backed disk . 47 © Copyright IBM Corp. 2009. All rights reserved. v 7590TOC.fm Draft Document for Review November 7, 2008 4:31 pm 2.7 Managing multiple storage security zones . 51 2.8 Storage planning with migration in mind . 52 2.8.1 Virtual adapter slot numbers . 53 2.8.2 SAN considerations for LPAR migration . 54 2.8.3 Backing devices and virtual target devices . 55 2.9 N_Port ID virtualization . 56 2.9.1 Introduction . 56 2.9.2 Requirements . 59 2.9.3 Managing virtual Fibre Channel adapters . 60 2.9.4 Configuring NPIV on Power Systems with a new AIX LPAR . 62 2.9.5 Configuring NPIV on Power Systems with existing AIX LPARs . 74 2.9.6 Redundancy configurations for virtual Fibre Channel adapters . 88 2.9.7 Replacing a Fibre Channel adapter configured with NPIV . 92 2.9.8 Migration to virtual Fibre Channel adapter environments . 93 2.9.9 Heterogeneous configuration with NPIV . 107 Chapter 3. Virtual network management. 115 3.1 Changing IP addresses or VLAN . 116 3.1.1 Virtual I/O Server network address changes. 116 3.1.2 Virtual I/O client network address changes. 117 3.2 Managing the mapping of network devices . 118 3.2.1 Virtual network adapters and VLANs . 119 3.2.2 Virtual device slot numbers . 120 3.2.3 Tracing a configuration . 120 3.3 SEA threading on the Virtual I/O Server . 126 3.4 Jumbo frame and path MTU discovery . 127 3.4.1 Maximum transfer unit. 127 3.4.2 Path MTU discovery . 129 3.4.3 Using jumbo frames . 132 3.4.4 Virtual Ethernet tuning with path MTU discovery . 135 3.4.5 TCP checksum offload . 135 3.4.6 Largesend option . 135 3.5 SEA enhancements. 137 3.5.1 Strict mode . 138 3.5.2 Loose mode . 138 3.5.3 Setting up QoS . 138 3.5.4 Best practices in setting Mode for QoS. 140 3.6 DoS Hardening . 140 3.6.1 Solution . 141 Chapter 4. Virtual I/O Server security . 143 4.1 Network security . 144 4.1.1 Stopping network services . 144 vi PowerVM Virtualization on Power Systems: Managing and Monitoring Draft Document for Review November 7, 2008 4:31 pm 7590TOC.fm 4.1.2 Setting up the firewall . 144 4.1.3 Enabling ping through the firewall . 147 4.1.4 Security Hardening Rules . 148 4.1.5 DoS Hardening . 149 4.2 The Virtual I/O Server as an LDAP client . 149 4.2.1 Creating a key database file . 149 4.2.2 Configuring the LDAP server . 156 4.2.3 Configuring the Virtual I/O Server as an LDAP client . 161 4.3 Network Time Protocol configuration . 163 4.4 Setting up Kerberos on the Virtual I/O Server . 164 4.5 Managing users. 167 4.5.1 Creating a system administrator account . 167 4.5.2 Creating a service representative (SR) account . 168 4.5.3 Creating a read-only account . 169 4.5.4 Checking the global command log (gcl) . 169 Chapter 5. Virtual I/O Server maintenance . 171 5.1 Installation or migration of Virtual I/O Server Version 2.1 . 172 5.1.1 Installation of Virtual I/O Server Version 2.1 . ..