4.0

Table Of Contents
Lab Manager Installation and Upgrade Guide
18 VMware, Inc.
IP Addresses for Virtual Machines
ReservearangeofIPaddressesforvirtualmachinesoneachphysicalnetworkthatLab Managerwilluse.
This rangeisinadditiontotheIPaddressesrequiredforeachLab ManagerserverandESX/ESXihost.IP
addressesforvirtualmachinesareallocatedfromthepoolofIPaddressesthatyoureserve.Thenumber
of
virtualmachinesrunningandrequiringIPaddressesvarieswiththenumberandcomplexityofconfigurations
deployedatanyonetime.
Foraminimumenvironment,youneedatleast100IPaddresses.Youcanalwaysaddmoreaddresseslater.
Foralargeinstallation,VMwarerecommendsallocatingatleast200IPaddresses.
Table 23providesexamplesofthenetworkinformationforasinglephysicalnetworkusingastaticIPpool.
Security Requirements and Recommendations
ThedefaultsecuritypolicysettingsfortheLab ManagerserveroperatingsystemsupportLab Manager
operations.Ifyoumanipulatedsecuritypoliciestosupportahighsecurityenvironment,youmustmodifythe
policysettingstosupportLab Manager.
VMwarerecommendsinstallinganSSLcertificatefromatrustedcertificationauthoritythatvalidatesthe
identityofthe
Lab Managerserver.IfyoudonotinstallanSSLcertificate,VMwaregeneratesone,butSSL
securitywarningsappearinthebrowser.YoucanalsogenerateyourowncustomSSLcertificate.
Set Windows Security Policies
TheserveronwhichyouinstallLab Managermusthavespecificsecuritypolicysettings.
To set Windows security policies
1OnthedesktopofthetargetLab Managerserver,selectStart>AllPrograms>AdministrativeTools>
LocalSecurityPolicy.
2Intheleftpane,navigatetoSecurityOptionsunderLocalPolicies.
3Intherightpane,doubleclickMicrosoft
networkserver:Digitallysigncommunications(always).
4 SelectDisabledandclickOK.
5Intherightpane,doubleclickMicrosoftnetworkserver:Digitallysigncommunications(ifclient
agrees).
6 SelectDisabledandclickOK.
7Intherightpane,doubleclickNetworkSecurity:LANManagerauthenticationlevel.
8 SelectSendNTLMresponseonly.
9ClickOK.
Table 2-3.
Static IP Pool Information
IP and Network Component Example
IPaddressblockforvirtualmachines 10.6.1.10—10.6.1.199
Subnetmaskforvirtualmachines 255.255.255.0
Gatewayforvirtualmachines 10.6.1.1
DNSserver1 10.6.1.200
DNSserver2(optional) 10.6.1.201
DNSsuffix vmware.com