The Bottom Line - Mastering VMware vSphere 5.5 - page 767

privileges into a role. Permissions are created when you assign a role (with its associated
privileges) to an inventory object within ESXi or vCenter Server.
Control network access to services on ESXi hosts. ESXi provides a network i rewall that
you can use to control network access to services on your ESXi hosts. This i rewall can con-
trol both inbound and outbound trafi c, and you have the ability to further limit trafi c to
specii c source IP addresses or subnets.
Master It Describe how you can use the ESXi i rewall to limit trafi c to a specii c source
IP address.
Solution Within the Firewall Properties dialog box, the Firewall button allows you to
specify a specii c source IP address or source IP subnet.
Integrate with Active Directory. All the major components of vSphere—the ESXi hosts
and vCenter Server (both the Windows Server-based version and the Linux-based virtual
appliance) as well as the vSphere Management Assistant—support integration into Microsoft
Active Directory. This gives vSphere administrators the option of using Active Directory as
their centralized directory service for all major components of vSphere 5.5.
Master It You've just installed a new ESXi host into your vSphere environment and you
are trying to coni gure the host to enable integration with your Active Directory environ-
ment. For some reason, though, it doesn't seem to work. What could be the problem?
Solution There could be a couple different issues at work here. First, the ESXi host
needs to be able to resolve the domain name of the Active Directory domain via DNS.
The ESXi host also needs to be able to locate the Active Directory domain controllers via
DNS. This usually involves coni guring the ESXi host to use the same DNS servers as the
domain controllers. Second, there could be network connectivity issues; verify that the
ESXi host has connectivity to the Active Directory domain controllers. If there are any
i rewalls between the ESXi host and the domain controllers, verify that the correct ports
are open between the ESXi host and the domain controllers.
Chapter 9: Creating and Managing Virtual Machines
Create a virtual machine. A VM is a collection of virtual hardware pieces, like a physi-
cal system—one or more virtual CPUs, RAM, video card, SCSI devices, IDE devices, l oppy
drives, parallel and serial ports, and network adapters. This virtual hardware is virtualized
and abstracted from the underlying physical hardware, providing portability to the VM.
Master It Create two VMs, one intended to run Windows Server 2012 and a second in-
tended to run SLES 11 (64-bit). Make a list of the differences in the coni guration that are
suggested by the Create New Virtual Machine Wizard.
Solution vCenter Server suggests 1 GB of RAM, an LSI Logic parallel SCSI controller,
and a 16 GB virtual disk for 64-bit SLES 11; for Windows Server 2012, the recommenda-
tions are 4 GB of RAM, an LSI Logic SAS controller, and a 40 GB virtual disk.
Install a guest operating system. Just as a physical machine needs an operating system,
a VM also needs an operating system. vSphere supports a broad range of 32-bit and 64-bit