Azure

We are ready to failover our on-premises vSphere virtual machines to Azure.  Before we do it’s important to verify that our Configuration Server and Master Target Server are functioning correctly.

In the Azure Portal, select Recovery Services > VMFocusVault > Servers > Configuration Servers > Select Configuration Server.  Verify that displayed details are healthy.

Before we proceed any further, it’s worthwhile noting that Azure Site Recovery is in it’s infancy from an on-premises vSphere to Azure perspective.  Therefore it’s worthwhile noting that:

• Only unplanned failover is supported
• If you want your data to be consistent, shutdown your protected VM’s on-premises and wait for the next replication interval to complete

We need to create a Recovery Plan (which I would expect you to have in place already).  The purpose of a Recovery Plan is to group together virtual machines which should failover together.

• Virtual Machines across different Protection Groups can be in the same Recovery Plan.  The use case for this is perhaps you have a three tier application where VM1 RPO is daily, VM2 PPO is 4 Hourly and VM3 is Hourly.
• Once in a Recovery Plan, virtual machine start up order can be determined
• Before a virtual machine is started a manual action can be inserted e.g. prompt to verify that a service has been checked before moving onto the next step
• Before or after a virtual machines is started a script can be triggered

To create a Recovery Plan select Recovery Services > VMFocusVault > Recovery Plans > Create Recovery Plan

I’m going to create a single Recovery Plans called VMF-RP01:

• Virtual machine VMF-AZ01 needs to maintain it’s current IP address, as if I had stretched my on-premises layer 2 network into Azure
• Virtual machine VMF-AZ02 need a new IP address and therefore will be RE-IP’d as part of this process
• VMF-AZ01 needs to start before VMF-AZ02

The screenshot below confirms the name of the Recovery Plan I have created called VMF-RP01.

As described the Protected Entities are VMF-AZ01 and VMF-AZ02.

Once the Recovery Plan is created.   Select the it by clicking on it’s name (in my case VMF-RP01) and you will see the following screen.

By default all VM’s will be started and stopped at the same time. To change this select the Group+ icon and you will see a Group 2 has been created.

Expand Group 1 and Select VMF-AZ02 and Select Move Virtual Machine > Group 2

Once done it should look like this

Note: Don’t forget to save your changes to the Recovery Plan

Failover

Time to failover, to test things properly, I’m going to mimic an actual disaster in which our on-premises virtual machines are unable to communicate with Azure Site Recovery.  The easiest way for us to do this is to disable the virtual NICs on our on-premises Process Server, VMF-AZ01 and VMF-AZ02 in vCenter.

Back to the Azure Portal, Select Recovery Services > VMFocusVault> Recovery Plans > Failover

Select either Latest Recovery Point In Time or Latest Application Consistent Recovery Point

That’s it sit back and make a cup of tea whilst our Recovery Plan goes into full effect.  If however, you do want to monitor the Job, select View Job.

In total VMF-RP01 took 24 minutes to complete.

We should now see two more virtual machine instances available.

Checking the virtual machines, I can verify the following:

• VMF-AZ01 is on IP Address 10.3.2.74 which is our extended on-premises Layer 2 network
• VMF-AZ02 is on IP Address 192.168.37.75 which is our routed Layer 3 network

Interestingly, EndPoints  aren’t configured for RDP and PowerShell as per a standard virtual machine deployed in Azure.  External access if required, will need to be configured manually.

In the next blog post, we are going to reprotect and failback to on-premises.

In the previous blog post we configured our on-premises Process Server and the communication between vCenter and the Configuration Server via the Process Server.  In this blog post we are going to protect some virtual machines.

Start by logging into the Azure Portal selecting Recovery Services > VMFocusVault > Protected Items > Protection Groups > Create New Protection Group

Specify a Protection Group name, as I’m original I’m going with VMF-PG01

Next we need to select the Replication Settings for the Protection Group, choices are:

• Multi VM Consistency – Each VM within the Protection Group will be consistent with each over
• RPO Threshold – How much data can we afford to loose, bandwidth needs to be able to cope with this setting
• Recovery Point Retention – How many recovery points do we want to have available?
• Application Consistent Snapshot Frequency – Calls VSS to quiescence memory

Select your chosen settings and Click the Tick

Once the Protection Group has finished being created.  Click on the Protection Group and select ‘Add Virtual Machines’

Select the virtual machines you want to protect (in my case VMF-AZ01) and Click the Tick

Next select your Process Server, Master Target Server and Storage Account and Click the Tick

Finally specify the credentials for the Mobility Service to use to perform installation.  Then Click the Tick

Naturally, it will take sometime for the initial replication to complete.  However this can be monitored by selecting the Protection Group.

 

Quite a few cups of tea later and my on-premises vSphere virtual machines are now protected within Azure Site Recovery.  Now I want to configure the virtual machines so that they use the correct virtual networks within Azure.

Select your Protection Group then click on your VM

Select Configure from the top bar

This is the heart of the configuration of where our protected on-premises VM will sit in Azure.  The items we can configure are:

• Name – These can be altered on-premises to Azure.  Not entirely sure of the use case for this, but it’s an option
• Properties – The target VM in Azure when it is hydrated.  Note that you cannot change between VM’s between series once failed over to Azure so make sure you choose the right one.
• Network – The target Azure Network and IP address for virtual machine

Now we have configured the protection for our virtual machines, in the next post we are going to failover to Azure.

In the previous blog post, I covered creating installing and configuring the Master Target Server so that it could establish communication with the Configuration Server.  In this installment, we will be installing and configuring the Process Server.

This might seem a bit strange but the first thing we need to do is download and install vSphere CLI 5.5 onto our Process Server.  vSphere CLI can be found here.  If you don’t already have a VMware login you will need to create one.

Logon to your Process Server and follow the on screen prompts to install vSphere CLI 5.5.  Once installed we need to move onto deploying the Process Server.

From your Process Server and then sign into Azure Portal.  In the Azure Portal the first thing we need to do is go to Recovery Services > VMFocusVault > Download and install Process Server

Extract ProcessServerInstaller_8.4.0_GA zip.  You will notice two files, the first one we need to run is ‘Microsoft-ASR_CX_TP_8.4.0.0_Windows_GA_28Jul2015_release’

This file installs the dependencies on which the Process Server relies.  Click Install

Once the installation finishes we need to run the next file ‘Microsoft-ASR_CX_8.4.0.0_Windows_GA_28Jul2015_release’.  Click Next

Select Process Server.  Click Next

Select Yes in response to ‘are you going to protect any VMware virtual machines?’ Then Click Next

Select the NIC for the Process Server to communicate on.  Click Next

I will be communicating over the public internet without a VPN tunnel.  Therefore, I need to enter the following details:

• Configuration Server Public IP Address
• Configuration Server Public HTTPS Port
• Configuration Server Passphrase

Select your Hard Drive which has at least 600B of space free and Click Install.  Once installed, you need to restart the computer.

Rather than waiting for the connection to be established to the Configuration Server which can take sometime.  We can bypass this by clicking on Recovery Services > VMFocusVault > Servers > Refresh

Once refreshed, click on your Configuration Server and verify that your Process Server is shown.

Next we need to add in a vCenter Server.  To do this select Recovery Services> VMFocusVault > Add VMware vCenter Servers

Complete the dialogue box below with the details you have entered previously.

Note: vCenter Server and Process Server should be on the same network.

Once updated you should see your vCenter Server listed under Configuration Servers.

In the next blog post we are going to protect some virtual machines!

In the previous blog post, I covered an creating virtual networks and Azure vault followed by installing the Configuration Server.  Now we move onto the Master Target Server,

Back over to the Azure portal.  We now need to access Recovery Services > VMFocusVault > Deploy Master Target Server

Give your Master Target Server a name, select the OS, choose the size (I’m rolling with A4) and enter in your credentials. Next select your Configuration Server and give the Master Target Server an IP address.

Time for a cup of tea as it will take a while for the Master Target Server to be created.

Make sure you take note of the external IP address of our Master Target Server as we will need to RDP onto it in order to complete the configuration tasks.

The external IP can be found under Virtual Machines > Select VM > Dashboard 

Log onto your Master Target Server, the first thing you will see is a PowerShell script being executed, make sure to leave this running.

The Host Agent Config dialogue box will appear after a little while.  Enter in the IP Address of your Configuration Server, Port Number (443) if on the same subnet and the Passphrase.   Finally hit OK.

Rather than waiting for the connection to be established to the Configuration Server which can take sometime.  We can bypass this by clicking on Recovery Services > VMFocusVault > Servers > Refresh

If everything has gone correctly you should see the Master Target Server connected to your Configuration Server.

In the next blog post, we will move onto configuring the on-premises Process Server.

In the previous blog post, I covered an introduction to Azure Site Recovery and the components that make up the solution.  In this post I will cover the initial configuration in the Azure Portal.

If you don’t have one already, I would suggest signing up for an Azure Free Trial, this includes £125 worth of credits.

Once you are logged into the Azure Portal, the first thing we want to do is create out virtual networks.  I’m going to create two:

• VMFocus_DR_L2 – Layer 2 network extension from on-premises, to keep same IP Address
• VMFocus_DR_L3 – Layer 3 network, to force VM’s to change IP Address

Select Networks > Create a Virtual Network

Provide a name and select the location for the network

Next enter in your DNS Servers and and VPN details.  I’m not federated against my local domain, nor do I have any domain controllers deployed so for now I will leave this part blank.

Finally complete your address space and subnets then wait for the network to be created.

Next we need to create a vault for recovery services.   The process is straight forward.  Select Recovery Services > Site Recovery Vault > Quick Create > Enter Name & Region

Now that the Site Recovery Vault is created.  We can move onto deploying our Configuration Server.

Select Quick Start and select your Recovery Type.  In this deployment, I will be using VMware to Azure.  Next select Deploy Configuration Server

Enter the required details ensuring that the required Azure Virtual Networks is selected.

As I will be replicating data over the public internet, we need to take note of the external IP address of our Configuration Server.  This can be found on the Virtual Machine status panel.

The next step is to download a registration key.  This is found on the Recovery Services > Select your Vault > Download Registration Key

Log into your Configuration Server and the automatic deployment process will prompt you to start the installation process.  Click Next and Accept the MySQL license terms.

Enter your MySQL credentials and click next.

Select your proxy settings and hit next.  Now we need to install our Configuration Server Key.  Browse to the saved location and select the key.

Click Finish to exit Setup.

This next part is really important, ensure that you capture the passphrase for the Configuration Server.

Onto credentials now.  We need to add an account that has the credentials to install the ‘Mobility Service’ onto virtual machines.   I have created an account called Service.Azure as per the dialog box below.

Always best to ensure that your account displays correctly.

In the next blog post we will move onto deploying the Master Target Server.