Migrēt uz inovācijas samitu:
Uzziniet, kā migrēšana un modernizācija uz Azure var uzlabot jūsu uzņēmuma veiktspēju, noturību un drošību, ļaujot jums pilnībā izmantot AI.Reģistrēties tūlīt
Šī pārlūkprogramma vairs netiek atbalstīta.
Jauniniet uz Microsoft Edge, lai izmantotu jaunāko līdzekļu, drošības atjauninājumu un tehniskā atbalsta sniegtās priekšrocības.
Set up disaster recovery of VMware VMs to Azure with PowerShell
Raksts
Uzmanību
This article references CentOS, a Linux distribution that is End Of Life (EOL) status. Please consider your use and plan accordingly. For more information, see the CentOS End Of Life guidance.
In this article, you see how to replicate and fail over VMware virtual machines to Azure using Azure PowerShell.
You learn how to:
Create a Recovery Services vault and set the vault context.
Validate server registration in the vault.
Set up replication, including a replication policy. Add your vCenter server and discover VMs.
Add a vCenter server and discover
Create storage accounts to hold replication logs or data, and replicate the VMs.
Perform a failover. Configure failover settings, perform a settings for replicating virtual machines.
Log into your Azure subscription using the Connect-AzAccount cmdlet:
Azure PowerShell
Connect-AzAccount
Select the Azure subscription you want to replicate your VMware virtual machines to. Use the Get-AzSubscription cmdlet to get the list of Azure subscriptions you have access to. Select the Azure subscription to work with using the Select-AzSubscription cmdlet.
Azure PowerShell
Select-AzSubscription -SubscriptionName"ASR Test Subscription"
Set up a Recovery Services vault
Create a resource group in which to create the Recovery Services vault. In the following example, the resource group is named VMwareDRtoAzurePS and is created in the East Asia region.
Create a Recovery services vault. In the following example, the Recovery services vault is named VMwareDRToAzurePs, and is created in the East Asia region and in the resource group created in the previous step.
Name : VMwareDRToAzurePs
ID : /subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/VMwareDRToAzurePs/providers/Microsoft.RecoveryServices/vaults/VMwareDRToAzurePs
Type : Microsoft.RecoveryServices/vaults
Location : eastasia
ResourceGroupName : VMwareDRToAzurePs
SubscriptionId : xxxxxxxx-xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Properties : Microsoft.Azure.Commands.RecoveryServices.ARSVaultProperties
Download the vault registration key for the vault. The vault registration key is used to register the on-premises Configuration Server to this vault. Registration is part of the Configuration Server software installation process.
Azure PowerShell
#Get the vault object by name and resource group and save it to the $vault PowerShell variable $vault = Get-AzRecoveryServicesVault -Name"VMwareDRToAzurePS" -ResourceGroupName"VMwareDRToAzurePS"#Download vault registration key to the path C:\WorkGet-AzRecoveryServicesVaultSettingsFile -SiteRecovery -Vault$Vault -Path"C:\Work\"
Use the downloaded vault registration key and follow the following steps in the articles to complete installation and registration of the Configuration Server.
Set the vault context using the Set-ASRVaultContext cmdlet. Once set, subsequent Azure Site Recovery operations in the PowerShell session are performed in the context of the selected vault.
Padoms
The Azure Site Recovery PowerShell module (Az.RecoveryServices module) comes with easy to use aliases for most cmdlets. The cmdlets in the module take the form <Operation>-AzRecoveryServicesAsr<Object> and have equivalent aliases that take the form <Operation>-ASR<Object>. You can replace the cmdlet aliases for ease of use.
In the following example, the vault details from the $vault variable is used to specify the vault context for the PowerShell session.
As an alternative to the Set-ASRVaultContext cmdlet, one can also use the Import-AzRecoveryServicesAsrVaultSettingsFile cmdlet to set the vault context. Specify the path at which the vault registration key file is located as the -path parameter to the Import-AzRecoveryServicesAsrVaultSettingsFile cmdlet. For example:
Subsequent sections of this article assume that the vault context for Azure Site Recovery operations has been set.
Validate vault registration
For this example, we have the following requirements:
A configuration server (ConfigurationServer) has been registered to this vault.
An extra process server (ScaleOut-ProcessServer) has been registered to ConfigurationServer
Accounts (vCenter_account, WindowsAccount, LinuxAccount) have been set up on the Configuration server. These accounts are used to add the vCenter server, to discover virtual machines, and to push-install the mobility service software on Windows and Linux servers that are to be replicated.
Registered configuration servers are represented by a fabric object in Site Recovery. Get the list of fabric objects in the vault and identify the configuration server.
Azure PowerShell
# Verify that the Configuration server is successfully registered to the vault$ASRFabrics = Get-AzRecoveryServicesAsrFabric$ASRFabrics.count
1
Azure PowerShell
#Print details of the Configuration Server$ASRFabrics[0]
Name : 2c33d710a5ee6af753413e97f01e314fc75938ea4e9ac7bafbf4a31f6804460d
FriendlyName : ConfigurationServer
ID : /Subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/VMwareDRToAzurePs/providers/Microsoft.RecoveryServices/vaults/VMwareDRToAzurePs/replicationFabrics
/2c33d710a5ee6af753413e97f01e314fc75938ea4e9ac7bafbf4a31f6804460d
Type : Microsoft.RecoveryServices/vaults/replicationFabrics
FabricType : VMware
SiteIdentifier : ef7a1580-f356-4a00-aa30-7bf80f952510
FabricSpecificDetails : Microsoft.Azure.Commands.RecoveryServices.SiteRecovery.ASRVMWareSpecificDetails
Identify the process servers that can be used to replicate machines.
From the output above $ProcessServers[0] corresponds to ScaleOut-ProcessServer and $ProcessServers[1] corresponds to the Process Server role on ConfigurationServer
Identify accounts that have been set up on the Configuration Server.
Azure PowerShell
$AccountHandles = $ASRFabrics[0].FabricSpecificDetails.RunAsAccounts
#Print the account details$AccountHandles
From the output above $AccountHandles[0] corresponds to the account vCenter_account, $AccountHandles[1] to account WindowsAccount, and $AccountHandles[2] to account LinuxAccount
Create a replication policy
In this step, two replication policies are created. One policy to replicate VMware virtual machines to Azure, and the other to replicate failed over virtual machines running in Azure back to the on-premises VMware site.
Piezīme
Most Azure Site Recovery operations are executed asynchronously. When you initiate an operation, an Azure Site Recovery job is submitted and a job tracking object is returned. This job tracking object can be used to monitor the status of the operation.
Create a replication policy named ReplicationPolicy to replicate VMware virtual machines to Azure with the specified properties.
Azure PowerShell
$Job_PolicyCreate = New-AzRecoveryServicesAsrPolicy -VMwareToAzure -Name"ReplicationPolicy" -RecoveryPointRetentionInHours24 -ApplicationConsistentSnapshotFrequencyInHours4 -RPOWarningThresholdInMinutes60# Track Job status to check for completionwhile (($Job_PolicyCreate.State -eq"InProgress") -or ($Job_PolicyCreate.State -eq"NotStarted")){
sleep 10;
$Job_PolicyCreate = Get-ASRJob -Job$Job_PolicyCreate
}
#Display job status$Job_PolicyCreate
Name : 8d18e2d9-479f-430d-b76b-6bc7eb2d0b3e
ID : /Subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/VMwareDRToAzurePs/providers/Microsoft.RecoveryServices/vaults/VMwareDRToAzurePs/replicationJobs/8d18e2d
9-479f-430d-b76b-6bc7eb2d0b3e
Type :
JobType : AddProtectionProfile
DisplayName : Create replication policy
ClientRequestId : a162b233-55d7-4852-abac-3d595a1faac2 ActivityId: 9895234a-90ea-4c1a-83b5-1f2c6586252a
State : Succeeded
StateDescription : Completed
StartTime : 11/24/2017 2:49:24 AM
EndTime : 11/24/2017 2:49:23 AM
TargetObjectId : ab31026e-4866-5440-969a-8ebcb13a372f
TargetObjectType : ProtectionProfile
TargetObjectName : ReplicationPolicy
AllowedActions :
Tasks : {Prerequisites check for creating the replication policy, Creating the replication policy}
Errors : {}
Create a replication policy to use for failback from Azure to the on-premises VMware site.
Use the job details in $Job_FailbackPolicyCreate to track the operation to completion.
Create a protection container mapping to map replication policies with the Configuration Server.
Azure PowerShell
#Get the protection container corresponding to the Configuration Server$ProtectionContainer = Get-AzRecoveryServicesAsrProtectionContainer -Fabric$ASRFabrics[0]
#Get the replication policies to map by name.$ReplicationPolicy = Get-AzRecoveryServicesAsrPolicy -Name"ReplicationPolicy"$FailbackReplicationPolicy = Get-AzRecoveryServicesAsrPolicy -Name"ReplicationPolicy-Failback"# Associate the replication policies to the protection container corresponding to the Configuration Server.$Job_AssociatePolicy = New-AzRecoveryServicesAsrProtectionContainerMapping -Name"PolicyAssociation1" -PrimaryProtectionContainer$ProtectionContainer -Policy$ReplicationPolicy# Check the job statuswhile (($Job_AssociatePolicy.State -eq"InProgress") -or ($Job_AssociatePolicy.State -eq"NotStarted")){
sleep 10;
$Job_AssociatePolicy = Get-ASRJob -Job$Job_AssociatePolicy
}
$Job_AssociatePolicy.State
<# In the protection container mapping used for failback (replicating failed over virtual machines
running in Azure, to the primary VMware site.) the protection container corresponding to the
Configuration server acts as both the Primary protection container and the recovery protection
container
#>$Job_AssociateFailbackPolicy = New-AzRecoveryServicesAsrProtectionContainerMapping -Name"FailbackPolicyAssociation" -PrimaryProtectionContainer$ProtectionContainer -RecoveryProtectionContainer$ProtectionContainer -Policy$FailbackReplicationPolicy# Check the job statuswhile (($Job_AssociateFailbackPolicy.State -eq"InProgress") -or ($Job_AssociateFailbackPolicy.State -eq"NotStarted")){
sleep 10;
$Job_AssociateFailbackPolicy = Get-ASRJob -Job$Job_AssociateFailbackPolicy
}
$Job_AssociateFailbackPolicy.State
Add a vCenter server and discover VMs
Add a vCenter Server by IP address or hostname. The -port parameter specifies the port on the vCenter server to connect to, -Name parameter specifies a friendly name to use for the vCenter server, and the -Account parameter specifies the account handle on the Configuration server to use to discover virtual machines managed by the vCenter server.
Azure PowerShell
# The $AccountHandles[0] variable holds details of vCenter_account$Job_AddvCenterServer = New-AzRecoveryServicesAsrvCenter -Fabric$ASRFabrics[0] -Name"MyvCenterServer" -IpOrHostName"10.150.24.63" -Account$AccountHandles[0] -Port443#Wait for the job to complete and ensure it completed successfullywhile (($Job_AddvCenterServer.State -eq"InProgress") -or ($Job_AddvCenterServer.State -eq"NotStarted")) {
sleep 30;
$Job_AddvCenterServer = Get-ASRJob -Job$Job_AddvCenterServer
}
$Job_AddvCenterServer
Name : 0f76f937-f9cf-4e0e-bf27-10c9d1c252a4
ID : /Subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/VMwareDRToAzurePs/providers/Microsoft.RecoveryServices/vaults/VMwareDRToAzurePs/replicationJobs/0f76f93
7-f9cf-4e0e-bf27-10c9d1c252a4
Type :
JobType : DiscoverVCenter
DisplayName : Add vCenter server
ClientRequestId : a2af8892-5686-4d64-a528-10445bc2f698 ActivityId: 7ec05aad-002e-4da0-991f-95d0de7a9f3a
State : Succeeded
StateDescription : Completed
StartTime : 11/24/2017 2:41:47 AM
EndTime : 11/24/2017 2:44:37 AM
TargetObjectId : 10.150.24.63
TargetObjectType : VCenter
TargetObjectName : MyvCenterServer
AllowedActions :
Tasks : {Adding vCenter server}
Errors : {}
Create storage accounts for replication
To write to managed disk, use PowerShell Az.RecoveryServices module 2.0.0 onwards. It only requires creation of a log storage account. It's recommended to use a standard account type and LRS redundancy since it's used to store only temporary logs. Ensure that the storage account is created in the same Azure region as the vault.
If you are using a version of Az.RecoveryServices module older than 2.0.0, use the following steps to create storage accounts. These storage accounts are used later to replicate virtual machines. Ensure that the storage accounts are created in the same Azure region as the vault. You can skip this step if you plan to use an existing storage account for replication.
Piezīme
While replicating on-premises virtual machines to a premium storage account, you need to specify an additional standard storage account (log storage account). The log storage account holds replication logs as an intermediate store until the logs can be applied on the premium storage target.
It takes about 15-20 minutes for virtual machines to be discovered from the vCenter server. Once discovered, a protectable item object is created in Azure Site Recovery for each discovered virtual machine. In this step, three of the discovered virtual machines are replicated to the Azure Storage accounts created in the previous step.
You will need the following details to protect a discovered virtual machine:
The protectable item to be replicated.
The storage account to replicate the virtual machine to (only if you are replicating to storage account).
A log storage is needed to protect virtual machines to a premium storage account or to a managed disk.
The Process Server to be used for replication. The list of available process servers has been retrieved and saved in the $ProcessServers[0](ScaleOut-ProcessServer) and $ProcessServers[1](ConfigurationServer) variables.
The account to use to push-install the Mobility service software onto the machines. The list of available accounts has been retrieved and stored in the $AccountHandles variable.
The protection container mapping for the replication policy to be used for replication.
The resource group in which virtual machines must be created on failover.
Optionally, the Azure virtual network and subnet to which the failed over virtual machine should be connected.
Now replicate the following virtual machines using the settings specified in this table:
Virtual machine
Process Server
Storage Account
Log Storage account
Policy
Account for Mobility service installation
Target resource group
Target virtual network
Target subnet
CentOSVM1
ConfigurationServer
N/A
logstorageaccount1
ReplicationPolicy
LinuxAccount
VMwareDRToAzurePs
ASR-vnet
Subnet-1
Win 2K12VM1
ScaleOut-ProcessServer
premiumstorageaccount1
logstorageaccount1
ReplicationPolicy
WindowsAccount
VMwareDRToAzurePs
ASR-vnet
Subnet-1
CentOSVM2
ConfigurationServer
replicationstdstorageaccount1
N/A
ReplicationPolicy
LinuxAccount
VMwareDRToAzurePs
ASR-vnet
Subnet-1
Azure PowerShell
#Get the target resource group to be used$ResourceGroup = Get-AzResourceGroup -Name"VMwareToAzureDrPs"#Get the target virtual network to be used$RecoveryVnet = Get-AzVirtualNetwork -Name"ASR-vnet" -ResourceGroupName"asrrg"#Get the protection container mapping for replication policy named ReplicationPolicy$PolicyMap = Get-AzRecoveryServicesAsrProtectionContainerMapping -ProtectionContainer$ProtectionContainer | where PolicyFriendlyName -eq"ReplicationPolicy"#Get the protectable item corresponding to the virtual machine CentOSVM1$VM1 = Get-AzRecoveryServicesAsrProtectableItem -ProtectionContainer$ProtectionContainer -FriendlyName"CentOSVM1"# Enable replication for virtual machine CentOSVM1 using the Az.RecoveryServices module 2.0.0 onwards to replicate to managed disks# The name specified for the replicated item needs to be unique within the protection container. Using a random GUID to ensure uniqueness$Job_EnableReplication1 = New-AzRecoveryServicesAsrReplicationProtectedItem -VMwareToAzure -ProtectableItem$VM1 -Name (New-Guid).Guid -ProtectionContainerMapping$PolicyMap -ProcessServer$ProcessServers[1] -Account$AccountHandles[2] -RecoveryResourceGroupId$ResourceGroup.ResourceId -logStorageAccountId$LogStorageAccount.Id -RecoveryAzureNetworkId$RecoveryVnet.Id -RecoveryAzureSubnetName"Subnet-1"# Alternatively, if the virtual machine CentOSVM1 has CMK enabled disks, enable replication using Az module 3.3.0 onwards as below# $diskID is the Disk Encryption Set ID to be used for all replica managed disks and target managed disks in the target region$Job_EnableReplication1 = New-AzRecoveryServicesAsrReplicationProtectedItem -VMwareToAzure -ProtectableItem$VM1 -Name (New-Guid).Guid -ProtectionContainerMapping$PolicyMap -ProcessServer$ProcessServers[1] -Account$AccountHandles[2] -RecoveryResourceGroupId$ResourceGroup.ResourceId -logStorageAccountId -DiskEncryptionSetId$diskId$LogStorageAccount.Id -RecoveryAzureNetworkId$RecoveryVnet.Id -RecoveryAzureSubnetName"Subnet-1"#Get the protectable item corresponding to the virtual machine Win2K12VM1$VM2 = Get-AzRecoveryServicesAsrProtectableItem -ProtectionContainer$ProtectionContainer -FriendlyName"Win2K12VM1"# Enable replication for virtual machine Win2K12VM1$Job_EnableReplication2 = New-AzRecoveryServicesAsrReplicationProtectedItem -VMwareToAzure -ProtectableItem$VM2 -Name (New-Guid).Guid -ProtectionContainerMapping$PolicyMap -RecoveryAzureStorageAccountId$PremiumStorageAccount.Id -LogStorageAccountId$LogStorageAccount.Id -ProcessServer$ProcessServers[0] -Account$AccountHandles[1] -RecoveryResourceGroupId$ResourceGroup.ResourceId -RecoveryAzureNetworkId$RecoveryVnet.Id -RecoveryAzureSubnetName"Subnet-1"#Get the protectable item corresponding to the virtual machine CentOSVM2$VM3 = Get-AzRecoveryServicesAsrProtectableItem -ProtectionContainer$ProtectionContainer -FriendlyName"CentOSVM2"# Enable replication for virtual machine CentOSVM2$Job_EnableReplication3 = New-AzRecoveryServicesAsrReplicationProtectedItem -VMwareToAzure -ProtectableItem$VM3 -Name (New-Guid).Guid -ProtectionContainerMapping$PolicyMap -RecoveryAzureStorageAccountId$ReplicationStdStorageAccount.Id -ProcessServer$ProcessServers[1] -Account$AccountHandles[2] -RecoveryResourceGroupId$ResourceGroup.ResourceId -RecoveryAzureNetworkId$RecoveryVnet.Id -RecoveryAzureSubnetName"Subnet-1"
Once the enable replication job completes successfully, initial replication is started for the virtual machines. Initial replication may take a while depending on the amount of data to be replicated and the bandwidth available for replication. After initial replication completes, the virtual machine moves to a protected state. Once the virtual machine reaches a protected state you can perform a test failover for the virtual machine, add it to recovery plans etc.
You can check the replication state and replication health of the virtual machine with the Get-ASRReplicationProtectedItem cmdlet.
FriendlyName ProtectionState ReplicationHealth
------------ --------------- -----------------
CentOSVM1 Protected Normal
CentOSVM2 InitialReplicationInProgress Normal
Win2K12VM1 Protected Normal
Configure failover settings
Failover settings for protected machines can be updated using the Set-ASRReplicationProtectedItem cmdlet. Some of the settings that can be updated through this cmdlet are:
Name of the virtual machine to be created on failover
VM size of the virtual machine to be created on failover
Azure virtual network and subnet that the NICs of the virtual machine should be connected to on failover
Failover to managed disks
Apply Azure Hybrid Use Benefit
Assign a static IP address from the target virtual network to be assigned to the virtual machine on failover.
In this example, we update the VM size of the virtual machine to be created on failover for the virtual machine Win2K12VM1 and specify that the virtual machine use managed disks on failover.
Name : cafa459c-44a7-45b0-9de9-3d925b0e7db9
ID : /Subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/VMwareDRToAzurePs/providers/Microsoft.RecoveryServices/vaults/VMwareDRToAzurePs/replicationJobs/cafa459
c-44a7-45b0-9de9-3d925b0e7db9
Type :
JobType : UpdateVmProperties
DisplayName : Update the virtual machine
ClientRequestId : b0b51b2a-f151-4e9a-a98e-064a5b5131f3 ActivityId: ac2ba316-be7b-4c94-a053-5363f683d38f
State : InProgress
StateDescription : InProgress
StartTime : 11/24/2017 2:04:26 PM
EndTime :
TargetObjectId : 88bc391e-d091-11e7-9484-000c2955bb50
TargetObjectType : ProtectionEntity
TargetObjectName : Win2K12VM1
AllowedActions :
Tasks : {Update the virtual machine properties}
Errors : {}
Run a test failover
Run a disaster recovery drill (test failover) as follows:
Azure PowerShell
#Test failover of Win2K12VM1 to the test virtual network "V2TestNetwork"#Get details of the test failover virtual network to be used
TestFailovervnet = Get-AzVirtualNetwork -Name"V2TestNetwork" -ResourceGroupName"asrrg"#Start the test failover operation$TFOJob = Start-AzRecoveryServicesAsrTestFailoverJob -ReplicationProtectedItem$ReplicatedVM1 -AzureVMNetworkId$TestFailovervnet.Id -Direction PrimaryToRecovery
Once the test failover job completes successfully, you'll notice that a virtual machine suffixed with "-Test" (Win2K12VM1-Test in this case) to its name is created in Azure.
You can now connect to the test failed over virtual machine, and validate the test failover.
Clean up the test failover using the Start-ASRTestFailoverCleanupJob cmdlet. This operation deletes the virtual machine created as part of the test failover operation.
In this step, we fail over the virtual machine Win2K12VM1 to a specific recovery point.
Get a list of available recovery points to use for the failover:
Azure PowerShell
# Get the list of available recovery points for Win2K12VM1$RecoveryPoints = Get-AzRecoveryServicesAsrRecoveryPoint -ReplicationProtectedItem$ReplicatedVM1"{0} {1}" -f$RecoveryPoints[0].RecoveryPointType, $RecoveryPoints[0].RecoveryPointTime
CrashConsistent 11/24/2017 5:28:25 PM
Azure PowerShell
#Start the failover job$Job_Failover = Start-AzRecoveryServicesAsrUnplannedFailoverJob -ReplicationProtectedItem$ReplicatedVM1 -Direction PrimaryToRecovery -RecoveryPoint$RecoveryPoints[0]
do {
$Job_Failover = Get-ASRJob -Job$Job_Failover;
sleep 60;
} while (($Job_Failover.State -eq"InProgress") -or ($JobFailover.State -eq"NotStarted"))
$Job_Failover.State
Succeeded
Once failed over successfully, you can commit the failover operation, and set up reverse replication from Azure back to the on-premises VMware site.
This article provides an overview of different types of failback and important considerations for failing back to on-premises during disaster recovery with Azure Site Recovery.
This article describes show to switch between different replication appliances while replicating VMware VMs to Azure in Azure Site Recovery- Modernized