NCP-MCI NCP-MCI-6.5 Nutanix Study Notes

When a VM is connected to a Nutanix managed network, the IP address is assigned when the VM is powered on. A Nutanix managed network is a network that is created and managed by Prism Central using IP address management (IPAM). IPAM allows Prism Central to automatically assign IP addresses to VMs from a pool of available addresses in a subnet. IPAM also tracks the IP address usage and availability across clusters and networks4.

When a VM is connected to a Nutanix managed network, the administrator can choose one of the following assignment types for the IP address:

• Assign Static IP: This option allows the administrator to manually specify a static IP address for the VM from the subnet range. The IP address will not change unless the administrator changes it.
• Assign with DHCP: This option allows Prism Central to dynamically assign an IP address for the VM from the subnet range using DHCP. The IP address may change depending on the DHCP lease time and availability.
• No Private IP: This option allows the administrator to skip assigning an IP address for the VM. This option is useful for scenarios where the administrator wants to use an external IPAM solution or assign an IP address later5.

Regardless of the assignment type, the IP address is assigned when the VM is powered on. This is because Prism Central needs to communicate with the hypervisor (AHV or ESXi) to configure the virtual NIC (vNIC) of the VM with the IP address information. This communication can only happen when the VM is in a powered on state6.

References: 4: IP Address Management - Prism Central Guide 5: Creating a New Report - Prism Central Guide 6: IP Address Assignment - AHV Networking Guide

The best method to provide access for a user to view real-time performance metrics for all VMs on all clusters across the datacenter is to configure AD authentication create a custom role, assign the user to the role, and apply the role to all clusters and VMs. This method accomplishes this with the least effort and ongoing maintenance because:

• AD authentication allows Nutanix Prism Central to integrate with an existing Active Directory (AD) domain and use AD users and groups for authentication and authorization5. This simplifies user management and avoids creating local users on Prism Central.
• Creating a custom role allows Nutanix Prism Central to define granular permissions for different actions and entities based on specific needs6. This ensures that users only have access to what they need and nothing more.
• Assigning the user to the custom role allows Nutanix Prism Central to grant access rights for that user based on the role definition7. This avoids assigning permissions individually for each user.
• Applying the role to all clusters and VMs allows Nutanix Prism Central to propagate the access rights for that role across all entities in scope8. This ensures that users can view real-time performance metrics for all VMs on all clusters without having to configure each entity separately.

References: 1: Health Dashboard - Prism Element Guide 2: Understanding Native VLANs - Cisco 3: VMs may lose network connectivity if connected to virtual network with … - Nutanix Support & Insights 4: VLAN Configuration - AHV Networking Guide 5: Active Directory Authentication - Prism Central Guide 6: Create Custom Roles - Prism Central Guide 7: Assign Roles - Prism Central Guide 8: Apply Roles - Prism Central Guide

The cluster time zone is a setting that determines the time zone used by all CVMs in the cluster. The cluster time zone affects the timestamps of Nutanix logs, events, alerts, and reports. The cluster time zone also affects the scheduling of tasks such as snapshots, replication, and upgrades. By default, the cluster time zone is set to UTC (Coordinated Universal Time) when the cluster is created3.

To change the cluster time zone, the administrator needs to use the ncli (Nutanix command-line interface) on any CVM in the cluster. The steps are as follows4:

• Log in to any CVM using SSH.
• Run ncli cluster get-timezone to check the current cluster time zone.
• Run ncli cluster set-timezone timezone= to change the cluster time zone, where  is a valid time zone identifier (for example, America/New_York).
• Run ncli cluster get-timezone again to verify that the cluster time zone has been changed.

Note that changing the cluster time zone does not affect the time zone of Prism Element or Prism Central VMs. To change their time zone, the administrator needs to use Prism Element UI or Prism Central UI respectively5.

According to the web search results, the policy that should be used to meet this requirement is an Isolation Environment Policy. An Isolation Environment Policy is a type of security policy that can be created in Prism Central using Flow Network Security, which is a feature that provides microsegmentation and network security for Nutanix environments1. An Isolation Environment Policy allows the administrator to isolate a group of VMs from another group of VMs based on their categories, and block all traffic between them regardless of direction2. This policy can be useful for creating isolated environments for testing, development, or compliance purposes2.