vania-janet/multiturn-rag-retrieval-data huggingface dataset:
* [Juniper vSRX overview](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-juniper-overview)
* [Managing Juniper vSRX](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-juniper-managing)
* [Ordering services for vCenter Server instances](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_addingservices)
* [General FAQ about VMware Solutions](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-faq-vmwaresolutions)
* [Contacting IBM Support](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-trbl_support)
* [Juniper vSRX Virtual Firewall](https://www.juniper.net/us/en/products-services/security/srx-series/vsrx/)
* [Juniper vSRX Documentation](https://www.juniper.net/documentation/product/en_US/vsrx)
* [Networking considerations and limitations](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_networkingonvcenterserver)
* [Frequently asked questions](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-faq-vmwaresolutions)







 Network design and connectivity 

Complete the following steps to manage access to your IBM Cloud network and to your VMware management components and to plan your IBM Cloud network topology.



* Access instance management endpoints by using the [IBM Cloud VPN](https://www.ibm.com/cloud/vpn-access) or your [IBM Cloud Direct Link connection](https://www.ibm.com/cloud/direct-link).
* Devise a strategy for public network connectivity from within your instance. Your options include the sample customer VMware NSX Edge™ Services Gateway (ESG), gateway appliances such as Vyatta and FortiGate, and proxy servers deployed in the IBM Cloud network or on your own network accessed through Direct Link.
* Plan whether to deploy your workload on IBM Cloud VLANs with [IBM Cloud portable IP addresses](https://cloud.ibm.com/docs/subnets?topic=subnets-getting-started) or [on NSX-T logical switches using your own IP addresses](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-nsx-t-design). When you use NSX software-defined networking (SDN), it gives you the greatest flexibility to manage and secure your workload network in the IBM Cloud.
* Use NSX ESGs, [IBM Cloud Vyatta](https://cloud.ibm.com/catalog/infrastructure/virtual-router-appliance), and Direct Link peering to plan for connectivity to workloads (Network Address Translation, Virtual Private Network, routing).
* If you implement Cross-vCenter NSX, ensure that your local segment ID ranges are not overlapping before you deploy any local workloads.







 Security planning and hardening
(https://cloud.ibm.com/docs/codeengine?topic=codeengine-job-plan)[Working with functions A Function is a stateless code snippet that performs tasks in response to an HTTP request.](https://cloud.ibm.com/docs/codeengine?topic=codeengine-fun-work)

 Learn more 

[IBM Developer<br><br>Visit IBM Developer for technical articles, code patterns, tutorials, and more.<br><br>![112-Developer-tools.svg](https://cloud.ibm.com/media/docs/images/homepage/112-Developer-tools.svg)](https://developer.ibm.com/components/cloud-code-engine/)[Architecture Center<br><br>Discover the architecture references available for this product.<br><br>![190-Application-Platform.svg](https://cloud.ibm.com/media/docs/images/homepage/190-Application-Platform.svg)](https://www.ibm.com/cloud/architecture)[IBM Training<br><br>Build your skills with IBM Cloud training.<br><br>![83-Elements-of-the-cloud.svg](https://cloud.ibm.com/media/docs/images/homepage/83-Elements-of-the-cloud.svg)](https://www.ibm.com/training/cloud)[Community<br><br>Join the IBM Cloud community and collaborate with others.<br><br>![35-Connectivity.svg](https://cloud.ibm.com/media/docs/images/homepage/35-Connectivity.svg)](https://community.ibm.com/community/user/publiccloud/home)
FAQ 



 What is IBM Power Systems Virtual Server? 

IBM Power Systems Virtual Server is a hosted infrastructure offering that allows you to quickly integrate with the Internet for on-demand provisioning. This offering provides a secure and scalable server virtualization environment that is built upon the advanced RAS features and leading performance of the Power Systems™ platform. The IBM Power Systems Virtual Servers are located in IBM data centers and distinct from the IBM Cloud servers with separate networks and direct-attached storage.





 What versions of AIX, IBM i, and Linux are supported? 

The supported AIX, IBM i, and Linux® operating system versions depend on the IBM Power Systems hardware that you select for the Power Systems Virtual Server: S922 (9009-22A), E980 (9080-M9S) . To view a list of the supported AIX, IBM i, and Linux operating system technology levels, see the following system software maps:

AIX - Power Systems Virtual Server supports AIX 7.1, or later. When viewing the system software maps, refer to the AIX 7.1, AIX 7.2, and AIX 7.3 information. If you use an unsupported version, it is subject to outages during planned maintenance windows with no advanced notification given.



* [S922 (9009-22A) AIX software map](https://www-01.ibm.com/support/docview.wss?uid=ssm1platformaix9009-22A-vios-only)





* [E980 (9080-M9S) AIX software map](http://www-01.ibm.com/support/docview.wss?uid=ssm1platformaix9080-M9S-vios-only)



For information on end of service pack support (EoSPS) dates, see [AIX support lifecycle](https://www.ibm.com/support/pages/aix-support-lifecycle-information).

AIX stock images currently available when you create a VM are:



* AIX 7.3 TL1 SP1
* AIX 7.2 TL5 SP5
* AIX 7.1 TL5 SP9
* [Related controls in IBM Cloud Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-connectivity-to-servicesrelated-controls)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-connectivity-to-servicesnext-steps)



[Accessing the public internet](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-connectivity-to-internetvpc-architecture-connectivity-to-internet)



* [Public gateways and floating IP addresses](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-connectivity-to-internetpublic-gateways)
* [Related controls in IBM Cloud Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-connectivity-to-internetrelated-controls)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-connectivity-to-internetnext-steps)







 Networking for Satellite reference architecture 

[Satellite networking overview](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-overviewsatellite-architecture-connectivity-overview)



* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-overviewnext-steps)



[Ensuring isolation between Satellite management functions and workload functions](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-management-isolationsatellite-architecture-connectivity-management-isolation)
F5 BIG-IP on IBM Cloud overview 

F5 BIG-IP® on IBM Cloud (F5 BIG-IP Virtual Edition) provides:



* Intelligent L4-L7 load balancing and traffic management services at a local and global scale.
* Robust network and web application firewall protection.
* Secure and federated application access.



F5 BIG-IP on IBM Cloud is a non-IBM product that is offered under terms and conditions from F5 Networks, not IBM.

You can install more than one instance of this service as needed.



* For vCenter Server with NSX-T™ instances, F5 BIG-IP is supported for NSX-T 3.1 or later and for VMware vSphere® 7.0.
* For vCenter Server with NSX-V instances V4.7 and earlier, F5 BIG-IP is supported for vSphere 6.7.



IBM Cloud® for VMware Solutions offers promotions for some services. Promotional pricing offers a number of months without charge for a service license, if the service has license charges. For more information, see [Promotions for VMware Solutions services](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_addingservicesvc_addingservices-service-promotions).

The F5 BIG-IP version available for deployment is 17.1.



 Technical specifications for F5 BIG-IP 

For more information about resource requirements and capacity checking for some services, see [Resource requirements for services](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vc_addingservicesvc_addingservices-resource-requirements).

The following components are included with the F5 BIG-IP service:



 Virtual machines 



* Two virtual machines (VMs) with all options available.
* 2, 4, or 8 CPUs per VM depending on the licensing option.
* 4, 8, or 16 GB RAM per VM depending on the licensing option.







 Networking 



* Private Virtual Extensible LAN (VXLAN) for High Availability (HA) synchronization.
[Flow Log Collector](https://cloud.ibm.com/docs/vpc?topic=vpc-flow-logs) This service is used to collect and store information regarding the Internet Protocol (IP) traffic going to and from network interfaces within your Virtual Private Cloud (VPC) [Viewing flow log objects](https://cloud.ibm.com/docs/vpc?topic=vpc-fl-analyze) [Message IDs](https://cloud.ibm.com/docs/vpc?topic=vpc-logginglogging-flow-log-collector_msgs) 
 [VPN](https://cloud.ibm.com/docs/vpc?topic=vpc-using-vpn) Use this service to connect private networks in a secure fashion. You can use VPN to set up an IPsec site-to-site tunnel between your VPC and your on-premise private network or another VPC. [More info](https://cloud.ibm.com/docs/vpc?topic=vpc-using-log-analysis-to-view-vpn-logs) 







 Classic Infrastructure services 

The following table lists Cloud services that send logs to IBM Log Analysis:



Table 8. List of Classic Infrastructure services

 Service Description More info Message IDs 

 [IBM Cloud® Load Balancer](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-getting-started) Use this service to improve availability of business-critical applications by distributing traffic among multiple application server instances, and by forwarding traffic to healthy instances only. [More info](https://cloud.ibm.com/docs/loadbalancer-service?topic=loadbalancer-service-data-logging) 







 Security services 

The following table lists Cloud services that send logs to IBM Log Analysis:



Table 9. List of security Cloud services

 Service Description More info
Converting to virtual routing and forwarding 

Many IBM Cloud® customers currently operate with a shared tenancy model on the IBM Cloud network. During conversion, your shared tenancy is converted to use a customer VRF, most commonly with a new Direct Link subscription.

A "customer VRF" refers to multiple isolation network connectivity. For more information, see [Virtual routing and forwarding on IBM Cloud](https://cloud.ibm.com/docs/dl?topic=dl-overview-of-virtual-routing-and-forwarding-vrf-on-ibm-cloud).



 The conversion process 

The conversion process involves a network disruption, while the VLANs and their subnets are detached from the ACL backbone and then attached to the customer VRF. This process results in a few moments of packet loss for traffic that enters or exits the VLANs. Packets within the VLAN continue to flow. In the cases where a network gateway, such as a FortiGate Security Appliance or Virtual Router Appliance is involved, no disruption occurs among the VLANs attached to that gateway. The servers see no network outage themselves, and most workloads automatically recover when the traffic flow resumes. The total duration of the disruption depends on the extent of the tenant’s topology, that is, the number of subnets, VLANs, and pods that your tenancy includes.

During migration, the VLANs are disconnected from the backbone and reconnected to the customer VRF. The duration of disruption varies, depending on the quantity of VLANs, pods, and data centers involved. Traffic among VLANs is disrupted, yet the servers stay connected to the network. The application might not be affected, depending on its sensitivity to packet loss.





 Initiating the conversion 

Existing IBM Cloud customers can [open an IBM Support case](https://cloud.ibm.com/unifiedsupport/cases/add) through the IBM Cloud console, requesting to be migrated to a VRF. Have the support case state: “Private Network Question” and include the following text:

"We are requesting that account your account number is moved to its own VRF. We understand the risks and approve the change.
Administrator As an administrator, you can view, invite, and update users. You can also view and update user profile settings. 
 Editor As an editor, you can view, invite, and update users. You can also view and update profile settings. 
 Operator As an operator, you can view users in the account and view profile settings. 
 Viewer As a viewer, you can view users in the account and view profile settings. 







 VMware Solutions on VPC 

Review the available platform and service roles and the actions mapped to each to help you assign access. If you're using the CLI or API to assign access, use vmware for the service name.

No supported roles.





 VMware Solutions 

Review the available platform and service roles and the actions mapped to each to help you assign access. If you're using the CLI or API to assign access, use vmware-solutions for the service name.

Platform roles

Service roles

Actions



Table 157. Platform roles - VMware Solutions
Use the tab buttons to change the context of the table. This table has row and column headers. The row headers provide the platform role name and the column headers identify the specific information available about each role.

 Role Description 

 Administrator As an administrator, you can perform all platform actions based on the resource this role is being assigned, including assigning access policies to other users. 
 Editor As an editor, you can perform all platform actions except for managing the account and assigning access policies. 
 Operator As an operator, you can perform platform actions required to configure and operate service instances, such as viewing a service's dashboard. 
 Viewer As a viewer, you can view service instances, but you can't modify them. 







 VMware Cloud Director 

Review the available platform and service roles and the actions mapped to each to help you assign access. If you're using the CLI or API to assign access, use vmware.directorsite for the service name.

Platform roles

Service roles

Actions



Table 158. Platform roles - VMware Cloud Director
Use the tab buttons to change the context of the table. This table has row and column headers.
System and Communications Protection (SC) [SC-5 Denial of Service Protection](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-5) <br>[SC-7 Boundary Protection](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-7) <br>[SC-7(4) Boundary Protection | External Telecommunications Services](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-7.4) <br>[SC-7 (5) Boundary Protection | Deny By Default - Allow By Exception](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-7.5) <br>[SC-7 (10) Boundary Protection | Prevent Exfiltration](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-7.10) 







 Next steps 



* [Working with virtual servers in VPC reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-compute-vsi)
* Network - create network resources such as DNS Services, Transit Gateway service, VPC and subnets.
* Shared - create VSI and block devices in the shared VPC. Create DNS records for shared services.
* Application1 - create VSI and block devices in the application1 VPC
* Application2 - create VSI and block devices in the application2 VPC.





 IAM Conceptual 



 Network Team 

A conceptual team ownership model was implemented. The network team administers all the network resources and hence most of what is shown in the diagram.

Zoom

![Architecture focusing on the Network team](https://cloud.ibm.com/docs-content/v1/content/6a28e4ae2660b609a18e90e1239ed772f80373d6/transit-gateway/includes/solution-tutorials/includes/solution-tutorials/images/solution59-vpc-tg-dns-iam/network.png)

Architecture focusing on the Network team





 Shared Team 

The shared team creates the VSI in its isolated VPC. In addition, the team needs to write records into the DNS service since the IP addresses of the VSIs are determined at creation time. Operator access to the VPC, subnets and security groups are required to create a VSI.

Zoom

![Architecture focusing on the Shared team](https://cloud.ibm.com/docs-content/v1/content/6a28e4ae2660b609a18e90e1239ed772f80373d6/transit-gateway/includes/solution-tutorials/includes/solution-tutorials/images/solution59-vpc-tg-dns-iam/shared.png)

Architecture focusing on the Shared team

The application teams needs the same access as the shared team except manager access to the DNS Services.

Application team access:

Zoom

!
Providing private network access to virtual machines allows virtual machines to communicate with each other. Private network access also allows virtual machines to communicate with other internal systems such as NAS and iSCSI and any other servers that you have with IBM Cloud.





 Can virtual machines use the secondary IP block that came with the server? 

No. The secondary IP that was provided with your server is routed specifically to work on the physical server and not a virtual machine. You need portable IP blocks to connect your virtual machine to the network.





 What are portable IP addresses? 

For information about portable IP addresses, see [Getting started with Subnets and IPs](https://cloud.ibm.com/docs/subnets?topic=subnets-getting-started).





 How do I order Hyper-V? 

You can install Hyper-V on an existing server by issuing an OS Reload and changing the operating system to a supported Windows Server Datacenter Edition with Hyper-V. To provision a new server with Hyper-V, order a new server and select a supported Windows Server Datacenter Edition with Hyper-V. See [Obtaining installation media](https://cloud.ibm.com/docs/virtualization?topic=virtualization-setting-up-hyper-v&locale=enobtaining-installation-media)





 The OS Reload for Hyper-V is done. What's next? 

Hyper-V needs to be set up. For more information about setting up Hyper-V, see [Setting up Hyper-V](https://cloud.ibm.com/docs/virtualization?topic=virtualization-setting-up-hyper-v).





 A virtual machine does not start. “Cannot initialize machine remoting system: Error:'Unspecified error'” How do I resolve this issue? 

To resolve this problem, stop the Hyper-V service and restart it. This problem is typically caused by Hyper-V trying to start while the server activation occurs. Restarting the service brings the virtual machine back up after the activation completes.
[DevOps] Reconfigure VM Use this view to monitor VMs that have been reconfigured. 
 [DevOps] Session auth request (applmgmt-audit) Use this view to review logs that report on session authorization requests to the VMware Appliance Management Service. 
 [DevOps] User Password Authentication request (applmgmt-audit) Use this view to review logs reporting on user password authorization requests. 
 [DevOps] wcpsvc - 503 Service Unavailable Use this view to review log entries indicating connectivity problems to the Vcenter Server when the VSphere client is used. 





Table 2. Predefined events views

 View name Description 

 [Events] info logs Use this view to review info level logs. 
 [Events] notice logs Use this view to review notice level logs. 
 [Events] warning logs Use this view tor eview warning level logs. 
 [Events] Events (vpxd) Use this view to review logs that report on the VMware vCenter Server. 





Table 3. Predefined ESXi views

 View name Description 

 [EXSi] Hostd Use this view to review logs that are generated by the agent that manages the ESXi host and its virtual machines. Reports actions such as VM power on, power off. 
 [EXSi] vmkernel Use this view to review logs that report activity that is related to virtual machines and ESXi. 
 [EXSi] vmkernel failures Use this view to review logs that report failing activity that is related to virtual machines and ESXi. 
 [EXSi] vpxa Use this view to review logs that are generated by the agent that communicates with vCenter Server from the ESXi hosts. 





Table 4. Predefined NSX views

 View name Description 

 [NSX] nsx-controller (cfgAgent) Use this view to review logs that are generated by the NSX controller cluster. 
 [NSX] nsx-exporter Use this view to review VMWare Virtual Machine logs. 
 [NSX] nsx-opsagent Use this view to review logs that are generated by the OpsAgent service.
[openshift-service-logo.svg](https://cloud.ibm.com/media/docs/images/homepage/openshift-service-logo.svg)](https://cloud.ibm.com/docs/openshift)[VMware Solutions<br><br>Provides deployment and management of VMware virtualized environments.<br><br>![vmware_icon.png](https://cloud.ibm.com/media/docs/images/homepage/vmware_icon.png)](https://cloud.ibm.com/docs/vmwaresolutions)[Kubernetes Service<br><br>Discover the tools to automate, isolate, secure, manage, and monitor your workloads.<br><br>![container-service-logo.svg](https://cloud.ibm.com/media/docs/images/homepage/container-service-logo.svg)](https://cloud.ibm.com/docs/containers)[Virtual Private Cloud<br><br>Quickly provision virtual server instances and other Infrastructure-as-a-Service (IaaS) offerings.<br><br>![CloudVPC.svg](https://cloud.ibm.com/media/docs/images/homepage/CloudVPC.svg)](https://cloud.ibm.com/docs/vpc)[IBM Watson Assistant<br><br>Build your own branded live chatbot into any device, application, or channel.<br><br>![WatsonAssistant.svg](https://cloud.ibm.com/media/docs/images/homepage/WatsonAssistant.svg)](https://cloud.ibm.com/docs/watson-assistant)[Object Storage<br><br>Store encrypted and dispersed data across multiple geographic locations.<br><br>!