Configuring a VMware vCenter Server and VMware NSX Manager pair in Unified Management Console
The following procedures explain how to add, edit, and delete a pair of VMware vCenter Server and VMware NSX Manger in Unified Management Console.
You can add multiple pairs of VMware vCenter Server and VMware NSX Manager as per your requirement. However, each pair of VMware vCenter Server and VMware NSX Manager must be unique. You can pair one VMware vCenter Server with one VMware NSX Manager only.
Ensure that the VMware vCenter Server user must have the Enterprise Administrator role on VMware NSX Manager. A user with Enterprise Administrator role only can install the Symantec Threat Protection service in VMware vCenter, configure port groups, and manage security policies.
If you are using NSX 6.2.4 and above with default limited license for AV only, you must configure the
sis-server.properties
configuration file to enable AV service. You must configure the configuration file before registering vCenter Server and NSX Manager from UMC. For more information on how to configure, see https://support.symantec.com/en_US/article.TECH236425.html.If you already have VMware vCenter Server and VMware NSX Manager registered with Management Server, then you must delete the VMware vCenter Server and VMware NSX Manager connection from Unified Management Console, and then perform the steps mentioned in the https://support.symantec.com/en_US/article.TECH236425.html.
- To configure a VMware vCenter Server and NSX Manager pair
- In Unified Management Console, navigate toSettings > Integration > VMware vCenter NSX.
- ClickAdd.Configure VMware vCenter Serverwindow appears.
- In theConnection Namefield, enter a name for the connection.You must enter a unique name for each connection. You can enter any name that is helpful for you to identify the connection.
- In theVMware vCenter Serversection, provide the following details:IP AddressProvide the IP address of the vCenter Server.PortSpecify the port number to connect to the vCenter Server. Unified Management Console auto-populates the default port number.User NameProvide a user name of the vCenter Server user.PasswordProvide the password for the vCenter Server user.
- Select theAccept vCenter Server SSL certificateoption.You can click the vCenter SSL certificate link to read the content of the certificate.Now you can either save the connection or add the NSX Manager details to the connection. You can clickTest Connectionto see if UMC can connect to the specified vCenter Server.
- To add the NSX Manager details, clickAdd VMware NSX Manager.TheDCS Serverfield displays the Management Server that is registered with the Unified Management Console.
- Provide the following details:IP AddressProvide the IP address of the NSX Manager.PortSpecify the port number to connect to the NSX Manager. Unified Management Console auto-populates the default port number.User NameProvide a user name of the NSX Manager user.PasswordProvide the password for the NSX Manager user.
- Select theAccept NSX Server SSL certificateoption.You can click the NSX server SSL certificate link to read the content of the certificate.
- Optionally, you can ClickTest Connectionto verify of you have entered the correct details and if Unified Management Console can connect to the vCenter Server and NSX Manager.
- Do any of the following:
- ClickSaveto save the connection in Unified Management Console.Unified Management Console saves the details of the connection for you to edit or register later.
- ClickRegisterto register the NSX Manager with the Management Server.
After you register the NSX Manager with Management Server, the Unified Management Console displays theNSX Manager Type: Primary, Secondary, or Standalone. You can clickSync NSXto refresh this information.Additionally, after the configuration is successful, you can verify that the required services appear in the VMware vSphere Web Client. - To verify which SVA services are enabled on NSX
- Log on to VMware vSphere Web Client and navigate toNetwork and Security>Service Definitions.
- In the right pane, selectServicestab and selectSymantec Threat Protection Serviceand verify the services available underFunctions.If you have installed NSX 6.2.4 and above with limited default license, then under theFunctions,Anti Virusservice only appears. Else,2: Anti Virus, IDS IPSservices appear.
- In Unified Management Console, navigate toSettings > Integration > VMware vCenter NSX.
- In theActioncolumn, click theEditicon for the connection that you want to edit.
- Modify the fields as per your requirement.If you want to edit the IP address of an NSX Manager, ensure that the NSX Manager is not registered with the management server. If the NSX Manager is registered with the management server, you must first unregister the NSX Manager before you edit the IP address.
- If you want to remove the NSX Manager, clickRemovein theVMware NSX Managerarea.You can remove the NSX Manager only if the NSX Manager is not registered with the management server. If the NSX Manager is registered with the management server, you must first unregister the NSX Manager.
- ClickTest Connectionto verify if you have entered the correct details and if Unified Management Console can connect to the vCenter Server and NSX Manager.
- If you have modified the NSX Manager details, clickRegisterto register the updated NSX Manager with the management server. Else, clickSaveto save the details in the Unified Management Console.
- In Unified Management Console, navigate toSettings > Integration > VMware vCenter NSX.
- In theActioncolumn, click theDeleteicon for the connection that you want to delete.
- On the confirmation window, do any of the following:
- ClickUnregisterto unregister the NSX Manager from the management server.This option is available only for the connections that are in theRegisteredstate.
- ClickDeleteto delete the connection from Unified Management Console.