ESX Virtualization

VMware ESXi, vSphere, VMware Backup, Hyper-V... how-to, videos....

Nakivo Backup and Replication - #1 Backup solution for Virtual, physical, cloud, NAS and SaaS

Menu
  • Certification
      • VCP-DCV vSphere 8
          • vcp2024-125.
        • Close
    • Close
  • VMware
    • Configuration Maximums
    • vSphere
      • vSphere 8.0
      • vSphere 7.0
      • vSphere 6.7
      • vSphere 6.5
      • vSphere 6.0
      • Close
    • VMworld
      • VMware EXPLORE 2024
      • VMware EXPLORE 2023
      • VMware EXPLORE 2022
      • VMworld 2019
      • VMworld 2018
      • VMworld 2017
      • VMworld 2016
      • VMworld 2015
      • VMworld 2014
      • VMworld 2013
      • VMworld 2012
      • VMworld 2011
      • Close
    • Close
  • Microsoft
    • Windows Server 2012
    • Windows Server 2016
    • Windows Server 2019
    • Close
  • Categories
    • Tips – VMware, Microsoft and General IT tips and definitions, What is this?, How this works?
    • Server Virtualization – VMware ESXi, ESXi Free Hypervizor, VMware vSphere Server Virtualization, VMware Cloud and Datacenter Virtualization
    • Backup – Virtualization Backup Solutions, VMware vSphere Backup and ESXi backup solutions.
    • Desktop Virtualization – Desktop Virtualization, VMware Workstation, VMware Fusion, VMware Horizon View, tips and tutorials
    • How To – ESXi Tutorials, IT and virtualization tutorials, VMware ESXi 4.x, ESXi 5.x and VMware vSphere. VMware Workstation and other IT tutorials.
    • Free – Free virtualization utilities, ESXi Free, Monitoring and free backup utilities for ESXi and Hyper-V. Free IT tools.
    • Videos – VMware Virtualization Videos, VMware ESXi Videos, ESXi 4.x, ESXi 5.x tips and videos.
    • Home Lab
    • Reviews – Virtualization Software and reviews, Disaster and backup recovery software reviews. Virtual infrastructure monitoring software review.
    • Close
  • Partners
    • NAKIVO
    • StarWind
    • Zerto
    • Xorux
    • Close
  • This Web
    • News
    • ESXi Lab
    • About
    • Advertise
    • Archives
    • Disclaimer
    • PDFs and Books
    • Close
  • Free
  • Privacy policy

VMware VCSA 6.5 Active-Passive Setup – Advanced Configuration

By Vladan SEGET | Last Updated: December 19, 2016

Shares

Last week we have done a little lab test where we have tested the new vCenter Server 6.5 (for VCSA only) called vCenter HA. If you don't know anything about how it works or what it can do I invite you to check our detailed article on that here – VMware vSphere 6.5 – Native vCenter High Availability (VCSA 6.5 only). Today we'll outline the advanced configuration so the title of today's post is VMware VCSA 6.5 Active-Passive Setup – Advanced Configuration.

In the first article, we have used the “Simple” wizard option to setup our Active-passive configuration. The simple config fits most scenarios, however sometimes you have VCSA 6.5 which is on a separate vCenter in a different SSO domain, then this is the case for the advanced configuration has to be used.

Again, the embedded PSC and external PSC deployments are supported scenario. We could see that with few clicks we could create a vCenter HA configuration and then the system automatically created the Passive node and the Witness node. At the end, we would see all 3 nodes up and running (Main Active VCSA 6.5, Passive VCSA 6.5 and Witness), so it was a truly 3-nodes cluster environment assuring vCenter server uptime. The goal is, during the wizard to place the nodes on different datastores and on different hosts while still maintain the HA network.

The Advanced option needs more manual steps, but at final, you might be able to adjust things that you would not be able to if you would have gone through the “Simple” config (example set a different SSO domain). The manual steps needs:

  • Add manually a second vNIC to our main VCSA 6.5 – (the same as in “Simple” config)
  • We need also to add an HA network – (the same as in “Simple” config)
  • Clone Active Node manually, to have a Passive Node (and also assign an IP information through the OS customization wizard… yes, it takes longer)
  • Clone Active Node manually, to have a Witness Node (and also assign an IP information through the OS customization wizard… yes, more and more manual steps )
  • Create affinity and anti-affinity rules so DRS won't place all 3 nodes on the same host.

We'll do some of it, perhaps not all. But you get the point. More flexibility, but more manual steps!

VMware VCSA 6.5 Active-Passive Setup Advanced Configuration  – The steps:

Step 0: Create a vSphere HA network. (This step is necessary for Simple or Advanced configuration). Depending if you're using vDS or not. In this example, I'm showing the workflow for standard vswitch.

Open vSphere web client and Select host > Configure > Networking > Virtual switches.

Here is the workflow which is the same as within the “simple” option …

vCenter HA (VCSA 6.5) adding an HA network

If you're on Standard switches, you'll have to do that for all the hosts in the management cluster or the cluster where you want to place the 3 vCenter nodes, so they can communicate on that network.

Step 1: Add new vNIC to the first VCSA 6.5 appliance VM.

How to configure vCenter HA with Simple Options

When you run the assistant right now you may have a message saying that the “vCenter HA cluster network interface (NIC1) on the guest OS id down. Make sure the cluster network interface is up.

How to configure vCenter HA with Simple Options

well, in this case, you have two options where the fastest one is to open SSH session (via Putty) and after login type:

shell

and then

ifconfig eth1 up

Then if you check via the PSC appliance management UI, you should see that both network adapters are up.

How to configure vCenter HA with Simple Options

You can also directly go to the PSC appliance and configure the second NIC. When validating, the NIC will come up automatically…. Don't put a gateway on this second NIC. VCSA does not support 2 gateways…

You can uncheck the IPv6 checkbox if you don't use IPv6.

 If you haven't done already, deploy your VCSA 6.5 which will be the active node. In the lab we have done it already - How to deploy VMware VCSA 6.5 (VMware vCenter Server Appliance)

So the end result will look like this. Both NICs are up and configured with static IP settings.

vCenter 6.5 (VCSA) HA advanced configuration how-to

Step 2: Start the main assistant which will configure the vCenter HA. After you log in to the vSphere Web client, select the vCenter Server > do a right click > vCenter HA settings

How to configure vCenter HA with Basic Option

on the next screen, choose the Advanced option.

vCenter 6.5 (VCSA) HA advanced configuration how-to

then enter the IP information concerning the Passive node and a Witness node.

vCenter 6.5 (VCSA) HA advanced configuration how-to

The advanced section allows you to specify advanced override options for the management NIC (NIC0).

vCenter 6.5 (VCSA) HA advanced configuration how-to

The system “watches” what you're entering and trying to correct the errors.  Here is an example if you forgot to add a second NIC…. the system detects it.

vCenter 6.5 (VCSA) HA advanced configuration how-to

Step 3: You'll need manually clone the VM, otherwise, the assistant won't let you continue. So you'll have to open another browser window just for the cloning operation and:

  • Put a name
  • Select Compute
  • Select Storage
  • Select clone options

Etc, etc…

vCenter 6.5 (VCSA) HA advanced configuration how-to

Basically, you have to prepare a customized template which will be used during the clone operation

vCenter 6.5 (VCSA) HA advanced configuration how-to

and then when during the cloning, you'll have the wizard like this…

vCenter 6.5 (VCSA) HA advanced configuration how-to

then the recap screen….

vCenter 6.5 (VCSA) HA advanced configuration how-to

Then rinse and repeat for the Witness. Also needed are the affinity and anti-affinity rules.  I assume that you know your way. And at the end, you should end up again with the screen like this one, where you'll have one appliance with the Active role, one with Passive role and one with Witness role.

The same as with Simple config, at this screen you can manually initiate failover with the Initiate Failover button.

vCenter Server HA (VCSA 6.5) Active - Passive Advanced Config

You'll have the option to initiate failover where the Passive node gets promoted as Active.

vCenter Server HA (VCSA 6.5) Active - Passive Advanced Config

However, you'll have to wait about 5 min before the web client become available as during the failover all the services has to be started on the passive node….

vCenter Server HA (VCSA 6.5) Active - Passive Advanced Config

Click the vCenter HA monitoring link and you are able to find additional information about the sync process. (if any).

VMware vCenter server (VCSA 6.5) HA advanced configuration

And that's all folks.

It is certainly a good and simple DR scenario which protects VCSA 6.5. If you're losing a connectivity to an underlying storage, the passive node takes over (if it's on another storage). It is a shame that all this consumes quite a lot of RAM, actually, it more than doubles the RAM requirement for both Active-passive configurations. In the lab, one VCSA takes 16Gb of RAM so all 3 appliances (with the Witness only taking about 1Gb of RAM) requires more than 33 Gb of RAM.

You can check all posts about vSphere 6.5 on our vSphere 6.5 dedicated WordPress page.

Other vSphere 6.5 posts:

ESXi:

  • ESXi Commands List – networking commands [Part 2]  – useful to check BEFORE upgrade of ESXi !!! (HCL, Drivers, Firmware…)
  • How to Upgrade ESXi 6.0 to 6.5 via CLI [On Line]
  • How to Upgrade ESXi 6.0 to 6.5 via ISO
  • How to upgrade ESXi 6.0 to ESXi 6.5 via Offline Bundle
  • How to upgrade an ESXi 6.0 to ESXi 6.5 via VMware Update Manager
  • How to create a USB media with ESXi 6.5 Installation

vCenter Server:

  • How to deploy VMware VCSA 6.5 (VMware vCenter Server Appliance)
  • How to Migrate Windows based vCenter Server 6.0 to vCenter 6.5 (“In-Place”)
  • How to Migrate Windows Based vCenter to VCSA 6.5 [Lab] – Windows to Linux
  • VMware VCSA 6.5 Backup and Restore How-To
  • VMware VCSA 6.5 Active-Passive Setup With Simple Configuration – [LAB]
  • VMware VCSA 6.5 Active-Passive Setup With Advanced Configuration –  [This Post]

Stay tuned through RSS, and social media channels (Twitter, FB, YouTube)

Shares
4.5/5 - (2 votes)

| Filed Under: Home Lab, How To, Server Virtualization Tagged With: VMware VCSA 6.5 Active-Passive Setup With Advanced Configuration

About Vladan SEGET

This website is maintained by Vladan SEGET. Vladan is as an Independent consultant, professional blogger, vExpert x16, Veeam Vanguard x9, VCAP-DCA/DCD, ESX Virtualization site has started as a simple bookmarking site, but quickly found a large following of readers and subscribers.

Connect on: Facebook. Feel free to network via Twitter @vladan.

Comments

  1. Bhanu says

    December 20, 2016 at 7:29 am

    Great… article….
    Do we need 3 hosts to maintain vcenter HA..?

    • Vladan SEGET says

      December 20, 2016 at 10:32 am

      Technically not, but then you lose some of the benefits such as host failure protection.

  2. Schorschi says

    January 3, 2017 at 11:57 pm

    Tried the advanced model, created vCSA instance, cloned it for the peer and witness instances. Make sure the vCenter HA network was setup and enabled on all 3 instances for HA cluster. But when I attempt to click next on Advanced step I get the following error message:

    “The vCenter Server Appliance is not prepared for vCenter HA advanced configuration with already deployed Passive and Witness nodes. Satisfy the prerequisites in KB 00000 (e.g. run ‘prepare-vcha’) to continue.

    By the way… there is no KB 00000 that I can find, great that VMware ships GA product that has bad reference links?

    When I run prepare-vcha on the original vCSA instance, I get configuration all is ok.
    # /usr/sbin/prepare-vhca SelfIP PeerIP WitIP where I have provided the correct IPs for the HA network. Log states…. *** SUCCESS: Vcha presetup ***

    Any help on this?

    • Ron says

      January 10, 2017 at 9:12 pm

      Known issue – Resolved in the below

      vSphere 6.5 P1
      vSphere 6.5 U1PS
      vSphere 6.5 U1

  3. Fredzone says

    January 4, 2017 at 9:31 pm

    Hello,
    Nice article.
    I tried to have it working but each time that I press the Finish button I receive a message “A general system error occurred: Failed to ssh connect peer node 192.168.129.102” (passive node).
    When I try it manually from the VC active shell, it works.
    Any idea?

    • Vladan SEGET says

      January 5, 2017 at 6:36 am

      Yes, it seems that you have not enabled SSH on that node.

  4. Star says

    February 26, 2017 at 4:08 pm

    how many licenses will be required for VCSA 6.5 with High availability? Active/Passive/Witness?

    • Vladan SEGET says

      February 26, 2017 at 5:38 pm

      This is nothing to do with licensing. It is a built-in function of VMware vCSA. It is not tightened to Standard, enterprise or datacenter licensing. Even the lowest cost – Essentials will be just fine.

      Thanks for your comment.
      Cheers.
      Vladan

  5. invisible says

    May 4, 2017 at 8:23 am

    I have somehow related problem. My VCSA is dual homed – external interface communicates with Internet to download patches/updates and internal interface is used to communicate with hosts.

    I’ve added second interface after installation was over and adding/communicating with ESxi hosts are not a problem. However, after several hours of trying I can’t manage to change the IP address for the Update Manager. I Update manager to use internal interface’s IP address for host communication but no matter what I tried – it only shows the external interface’s IP address or FQDN.

    Any solution?
    Thanks

  6. Diego Bejar says

    October 9, 2017 at 5:01 pm

    Very good article.

    What is the necessary bandwidth for a vcenter witness located in a remote site?

    Thanks in advance.

    Diego Bejar

    • Vladan SEGET says

      October 9, 2017 at 6:10 pm

      As said on Michael’s blog, VMware talks rather about latency, not bandwidth.

  7. Uday says

    April 24, 2019 at 8:32 am

    Do I need to mention same vCenter management IP on the passive node while cloning or another IP needs to be assigned on same management VLAN apart from HA IP.

Private Sponsors

Featured

  • Thinking about HCI? G2, an independent tech solutions peer review platform, has published its Winter 2023 Reports on Hyperconverged Infrastructure (HCI) Solutions.
  • Zerto: One Platform for Disaster Recovery, Backup & Cloud Mobility: Try FREE Hands-On Labs Today!
Click to Become a Sponsor

Most Recent

  • FREE version of StarWind VSAN vs Trial of Full version
  • Commvault’s Innovations at RSA Conference 2025 San Francisco
  • VMware ESXi FREE is FREE again!
  • Installation of StarWind VSAN Plugin for vSphere
  • Protect Mixed environments with Nakivo Physical Machine recovery (bare metal)
  • No more FREE licenses of VMware vSphere for vExperts – What’s your options?
  • Tails – Your Private OS on USB Stick
  • StarWind V2V Converter Now has CLI
  • Veeam VHR ISO v2 – 2025 Download and Install
  • Deployment OVA and Installation of Nakivo Backup and Replication for VMware

Get new posts by email:

 

 

 

 

Support us on Ko-Fi

 

 

Buy Me a Coffee at ko-fi.com

Sponsors

Free Trials

  • DC Scope for VMware vSphere – optimization, capacity planning, and cost management. Download FREE Trial Here.
  • Augmented Inline Deduplication, Altaro VM Backup v9 For #VMware and #Hyper-V – Grab your copy now download TRIAL.

VMware Engineer Jobs

VMware Engineer Jobs

YouTube

…

Find us on Facebook

ESX Virtualization

…

Copyright © 2025 ·Dynamik-Gen · Genesis Framework · Log in