Thursday, November 19, 2009

VMware VSphere Client ERRORs on Windows 7 64bit

Error Messages:
1. Error parsing the server “hostname”“clients.xml” file.Login will continue, contact your system administrator
2. The type initializer for 'VirtualInfrastructure.Utils.HttpWebRequestProxy' threw an exception
Nothing will happen after you click "OK" on above errors.

Don't take a deep breath and panic. ;) follow these easy steps to resolve these errors withing 10 min.

1. You need to get a copy of following DLL file from computer which has installed .NET 3.5 SP1. The file name is System.dll and it's located in %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\

Please Note: Getting this DLL from 32 bit system is fine but not from Windows 7 or Win 2008 versions.
I have uploaded this file for you : http://www.easy-share.com/1908477347/System.dll

2. Create a folder and copy this DDL file to some where in "C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\Launcher" for this example I have created "bug" and copied the DLL inside it.

3. And please find the file named VpxClient.exe.config in the same folder which you have created the folder in action 2 (C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\Launcher) Open the particular file and include following lines before the end and without "" and save. (if you can't save the file get the ownership for the current user by using file properties >> Security >> Advanced... )

"


"

4. Now you need to make Environment Variable for the DDL file show in the screen shot below
Variable name: DEVPATH
Variable value: C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\Launcher\bug\
That's all and now you are ready to go !

Wednesday, November 11, 2009

More Demilitarized Zones on VMware


You may have a requirement to maintain more than one DMZ zones due to high security situations. In this easy example you can get a basic idea of deploying many DMZs.(as much as your hardware supports). Since VMware VSphere came to the picture there will be many scenarios of performing this but here I used Cisco ASA series firewall (you can use even ASA 5505 or with old PIX series), HP ProCurv manageable switch and VMware ESXi host.

Let's start form the Firewall. You need to have minimum of three interfaces to perform this operation, and one interface will be your DMZ interface and for that interface I used following Trunking configuration on "Ethernet0/2" ;
!
interface Ethernet0/2
no nameif
no security-level
no ip address
!
interface Ethernet0/2.1
vlan 10
nameif dmz1
security-level 50
ip address 192.168.10.254 255.255.255.0
!
interface Ethernet0/2.2
vlan 20
nameif dmz2
security-level 50
ip address 192.168.20.254 255.255.255.0
!

And now you need to acknowledge your switch about this VLAN tagging in order to correct switching the same tagged packets. Configuration will be easy and I did as following;

vlan 20
name "VLAN20"
tagged 13,15
no ip address
exit
vlan 10
name "VLAN10"
tagged 13,15
no ip address
exit
And now you need to create a Vswitch in the VMware host, binding the external interface you planing use for this deployment. Check below example diagram;


Now you are almost done, basically you can control the internal access (security) using a third party firewall as shown like following digram.


I have assigned a easy IP structure for you to understand this setup easily.