Nutanix NCP-CI-Azure - Nutanix Certified Professional - Cloud Integration - Azure (NCP-CI-Azure v6.7)

Node Termination Observation:When a node is terminated from the Azure portal, the NC2 cluster will detect that the node is no longer operational.

Marking as Degraded:NC2 will mark the node as degraded, indicating that the node is not functioning as expected. This status allows administrators to take necessary actions to resolve the issue, such as provisioning a new node or addressing the degradation cause.

References:

Nutanix NC2 Cluster Management Guide

Azure Instance Termination Documentation

When selecting the NC2 subscription plan from the Nutanix billing portal, the available options are:

Pay-as-you-Go (PayG):Allows you to pay for the services as you use them, providing flexibility and avoiding upfront costs.

Bring your own License (BYOL):Enables you to use your existing Nutanix licenses within the cloud environment, offering cost savings if you already have licenses.

These options provide flexibility in how you can manage and pay for your Nutanix cloud clusters.References

Nutanix Cloud Clusters Pricing and Plans

Default Route for Internet Traffic:By setting the default route of 0.0.0.0/0 for the Nutanix User VPC pointing to the external-NAT network, all internet-bound traffic from the desktops will be routed through the Azure NAT Gateway, conserving bandwidth on the ExpressRoute connection.

On-Premises Route:Setting a specific route to the on-premises subnet for the Nutanix User VPC pointing to the external-No-NAT network ensures that traffic destined for on-premises resources bypasses the NAT Gateway and utilizes the ExpressRoute connection, optimizing the use of network paths.

References:

Azure NAT Gateway Documentation

Nutanix NC2 Networking Configuration Guide

Port Requirements: The specified ports (22, 2009, 2020, 2049, 3260, 9440) are commonly used for various services and require TCP communication.

Port 22: SSH

Port 2009: Used for Nutanix internal communication

Port 2020: Nutanix services

Port 2049: NFS

Port 3260: iSCSI

Port 9440: Nutanix Prism management

Communication Type: To ensure proper disaster recovery setup, bi-directional communication is needed to allow traffic to flow both from on-premises to Azure and vice versa.

TCP Protocol: These ports use the TCP protocol, which provides reliable communication between devices.

Conclusion: Creating a bi-directional (TCP) rule on the firewall allows the necessary communication for disaster recovery processes.

References:

Nutanix Networking and Security Documentation

Azure Networking Documentation

Azure Monitor Overview: Azure Monitor is a comprehensive monitoring service that collects, analyzes, and acts on telemetry data from Azure resources.

Key Metrics Monitoring: Azure Monitor enables the monitoring of various Azure services such as virtual networks, virtual machines, and bare metal hosts, providing insights and visibility into their performance and health.

Comparison of Services:

Resource Manager: Manages Azure resources but does not provide detailed monitoring capabilities.

Azure Service Health: Provides personalized alerts and guidance when Azure service issues affect you but is not a comprehensive monitoring solution.

Azure Network Watcher: Focuses on network performance monitoring and diagnostics but does not cover all resource types.

Conclusion: Azure Monitor is the most suitable service for monitoring key metrics across a wide range of Azure services.

References:

Azure Monitor Documentation

Nutanix NC2 on Azure Monitoring Guide

To extend an on-premises subnet to an NC2 cluster on Azure, the administrator should configure:

Subnet Type:Both on-premises VLAN subnets and VPC subnets. This ensures that the subnet can span both the on-premises environment and the Azure environment.

Traffic Type:Support for IPv4 unicast traffic, IPv6 unicast traffic, and ARP is necessary to ensure proper communication and address resolution across the extended subnet.

On-premises Hypervisor:ESXi and AHV are supported hypervisors for this type of configuration, allowing for a seamless extension of the subnet between these environments.

References

Nutanix Hybrid Cloud Networking

Initial Access: To gain access to the NC2 console, users need to create an account on the Nutanix platform.

My Nutanix Account: Creating a My Nutanix account provides access to the Nutanix console, support, and other resources.

Free Trial and Billing Portal: Starting a free trial or accessing the billing portal can be subsequent steps but require an initial account.

Support Case: Opening a support case is not necessary for initial access but might be needed for specific issues later.

Conclusion: Creating a My Nutanix account is the first step to accessing the NC2 console and other Nutanix services.

References:

Nutanix Account Creation Guide

Getting Started with Nutanix NC2

DNS Server Options:

Cloudflare: A public DNS service that operates over the internet.

Azure: Azure DNS operates within the Azure cloud and does not require VPN or ExpressRoute for connectivity within Azure.

On-premises: Requires a secure connection, such as VPN or ExpressRoute, to be accessible from Azure, as it resides outside the Azure cloud.

Google: Another public DNS service accessible over the internet.

Connectivity Requirements:

On-premises DNS: To integrate on-premises DNS with Azure, secure connectivity (VPN or ExpressRoute) is necessary to ensure seamless and secure communication between the on-premises infrastructure and Azure resources.

Conclusion: An on-premises DNS server would require VPN or ExpressRoute connectivity to be accessible and integrated with the Azure environment.

References:

Azure DNS Overview

VPN Gateway Configuration

ExpressRoute Overview

NAT Gateways:Necessary for providing outbound internet access to resources in the private subnet. It ensures that the virtual network can communicate with external services securely.

Delegated Subnets:Required for deploying specific Azure services within the virtual network, allowing controlled access and management of the resources within these subnets.

Flow Gateway Subnets:These subnets are used for managing traffic flow within the network, ensuring efficient routing and connectivity between different parts of the NC2 infrastructure.

VNet Peers:Establish connections between different virtual networks within Azure, enabling seamless communication and resource sharing across various parts of the NC2 deployment.

References:

Azure Virtual Network Documentation

Nutanix NC2 Networking Setup Guide

To verify that the NC2 specialist has access to the necessary organizations for troubleshooting the issue, the administrator should:

Confirm that theSupport Authorizationon the organization is set toFull Access. This ensures that the NC2 specialist has the required permissions to access the necessary resources and perform the necessary actions to resolve the issue.

Providing login credentials or adding the specialist as an admin user is not recommended due to security and privacy concerns. Ensuring the specialist is assigned the correct RBAC role is another valid approach but confirming the support authorization directly ensures they have the needed access.

References

Nutanix Support and Services