Indo Cloud Manual

IndonesianCloud
Users Guide for Online Portal

https://compute.idcloudonline.com/cloud/org/<YourOrgName>
1 Contents
1 CONTENTS......................................................................................................................................................... 2
2 SETTING UP YOUR ORGANIZATION ................................................................................................................ 3
2.1 INITIAL SETUP WIZARD.............................................................................................................................. 3
2.2 VIRTUAL DATACENTRE SETTINGS ............................................................................................................... 7
3 ORGANIZATION ADMINISTRATION ...............................................................................................................10
3.1 GENERAL SETTINGS ................................................................................................................................ 10
3.2 EMAIL SETTINGS .................................................................................................................................... 10
3.3 POLICIES SETTINGS.................................................................................................................................. 11
3.4 GUEST PERSONALIZATION ........................................................................................................................ 13
4 USER ACCOUNT MANAGEMENT ....................................................................................................................14
4.1 CREATING NEW USERS .............................................................................................................................14
4.2 MODIFY USER SETTINGS ......................................................................................................................... 16
4.3 DISABLE/DELETE USERS.......................................................................................................................... 16
4.4 NOTIFY ORGANIZATION USERS ................................................................................................................ 17
4.5 LOST & FOUND ..................................................................................................................................... 19
5 NETWORKING CONFIGURATION ................................................................................................................... 20
5.1 NETWORK MANAGEMENT ....................................................................................................................... 20
5.2 GENERAL NETWORK PROPERTIES .............................................................................................................. 21
5.3 NETWORK SERVICES: DHCP AND FIREWALL .............................................................................................. 26
5.4 NETWORK SERVICES: NAT ...................................................................................................................... 30
5.5 NETWORK SERVICES: SITE-TO-SITE VPN.................................................................................................... 33
5.6 NETWORK SERVICES: STATIC ROUTING...................................................................................................... 36
6 MANAGING VAPPS AND VIRTUAL MACHINES ............................................................................................. 42
6.1 INTRODUCTION ..................................................................................................................................... 42
6.2 CREATING VAPPS FROM SCRATCH OR TEMPLATE ........................................................................................ 42
6.3 MANAGING VAPPS................................................................................................................................. 50
6.4 ADDITIONAL VAPP OPERATIONS .............................................................................................................. 55
6.5 CREATING VIRTUAL MACHINES FROM TEMPLATES OR FROM SCRATCH........................................................... 58
6.6 MANAGING VIRTUAL MACHINES.............................................................................................................. 63
6.7 VIRTUAL MACHINE CPU/ RAM/ DISK/ NETWORK RECONFIGURATION......................................................... 67
6.8 SYSTEM LOGS ....................................................................................................................................... 70
6.9 MANAGING EXPIRED VAPPS AND VMS...................................................................................................... 73
7 MANAGING CATALOGS .................................................................................................................................. 74
7.1 ADD, MODIFY CATALOGUES AND UPLOAD CONTENT.................................................................................... 74
7.2 WORKING WITH PUBLISHED CATALOGUES ................................................................................................. 78
PT Indonesian Cloud | Menara MTH 12th Floor JlLetjen MT HaryonoKav 23 Jakarta 12820 | www.indonesiancloud.com
2 Setting up your organization
2.1 Initial setup wizard
Once you have logged in with your Organization Administrator user, you will see the start
page of your organization. While a lot of settings are already configured for you, it is
advisable to go through the setup wizard to help you understand how the Indonesian
Cloud environment works.
You will see the link to the initial setup wizard on the left top of the screen.
'Set up this organization'
Click on it, and it will launch the setup process. Fear not - a lot of settings are already in
place, this is more like a tour of options available and all of the settings may be changed
later.
At the first page, you can enter the name of your organization. It also displays the URL to
your organization and a description field.
At the next screen you can add 'local' users to the organization. These are local to the
IndonesianCloud VM environment, and these are non-existing in the IndonesianCloud AD.
At the next screen you can review and modify the email settings. The email server
specified here is being used to send notification to IndonesianCloud users. A system email
server is already configured for you - feel free to use it.
At the next screen you can modify the policies for your organization. This includes lease
times, password lockout policy and more. Additional explanation and help is available in
this help manual under 'Organization administration'.
At the next and final screen you can review a summary of your settings and apply them to
your organization.
Congratulations! Your new organization is ready to accommodate your VMs. For more
help, please visit the networking, vApps and VM sections of this manual.
2.2 Virtual Datacentre settings
A Virtual datacentre (vDC) provides processor, memory, and storage resources to your
organization. It is assigned to your organization by your system administrator. When you
display the vDC for your organization, you can monitor the resources, users, and policy
settings that you manage. You can manage and monitor the resources of the Virtual
Datacentre from one central location.
Managing the Virtual Datacentre
Log in to the IndonesianCloud environment then navigate to 'Administration - Cloud

Resources - Virtual Datacenters'. The Virtual Datacentre for the organization will be
displayed on the 'Manage' tab.
You can open the vDC up (Right-Click) to see what is contained in it, send notification to
its users or choose 'Properties' to see a summary of the Datacentre.
The 'Monitor' tab will display the present resource usage of the Virtual Datacenter as well
as its allocation model.
By opening up your Virtual Datacenter, you can see its vApps, VMs, Media and networks -
and you can manage all resources from this central location just as you would normally
do. The 'vApps' tab shows you all vApps of the organization with their status and
resource consumption.
The 'vApp Templates' and 'Media' tabs will display any vApp template or media ISO or
FLP file added to your organization. Finally, the 'Networks' tab gives you an overview of
all organization networks with their status' and their settings.
3 Organization administration
3.1 General settings
Log in to the system and navigate to 'Administration - Settings - General'.
Here you can see the general information about your organization - its name, full name,
the default URL under the organization is accessible and a description of it.
Some settings can be changed, some are fixed. Changes are applied immediately.
3.2 Email settings

If you go to the user accounts and select any of them, an option is displayed to send
notification to that user. The notification will be sent using the email server specified
here.
To change the Email settings, log in to the system and navigate to 'Administration -
Settings - Email'.
There you can see the email settings. A system email server has already been configured
for you - if you would like to use a different email server to send out alerts or
notifications, please specify its settings here. You can also specify the senders name and
the email subject prefix. A text box located at the bottom lets you test your email
sending capabilities right away.
Please note that you may have to update your spf records and mail relay settings to allow
IndonesianCloud servers to send mail to your domain. Please contact your mail
administrator or email provider for more information.
3.3 Policies settings
Policies within the IndonesianCloud environment will help you to organize your VMs.
With the lease times you can essentially specify the 'lifetime' of a vApp. When vApps or
vApp templates expire, you can determine whether you want to renew or delete them.
With the renewal the vApp will continue to function as it was before, and with the
deletion you can reclaim the resources used by that expired vApp.
Please be aware (as you may note on the screenshots) that after its lifecycle expires, a
vApp will stop. Therefore, for critical servers, it is advisable to maintain a closer
monitoring and set the expiration to never.
Under Policies, you will find several sections. These are
1. Leases: you can specify lease times here from 1 hour to the infinity. Two separate set of
lease times present, one for the vApps, one is for the vApp templates. Always take care
when you change these settings as they will influence the lifecycle of your vApps. With
the storage clean-up setting, you can retain your data even if the vApp has been expired.
If you set this to 'Permanently Delete' there will be no way to reclaim the deleted items.
2. Quotas: these are pretty much self-explanatory. If your vApps displaying an error
message that you have exceeded your running VM limit and you still have the CPU/RAM
capacity to run them, submit a support request to increase these limits.
3. Limits: in order to protect the stability of the IndonesianCloud platform, some
operations must have limits. If you have a requirement to change these settings, please
contact support.
4. Password policies: these settings specify what happens if a user mis-types his/her
password logging into the portal. You can specify the number of failed attempts and the
lockout period.
3.4 Guest personalization
You can set a default domain which virtual machines created in your organization can
join. Virtual machines can always join a domain for which they have credentials,
regardless of whether or not you specify a default domain.
4 User Account Management
In general, there are two ways to create a user account in the IndonesianCloud
environment. If you would like to use an existing IndonesianCloud domain user, you can
do so. Is it also possible to create a 'local' user which will only exist in the
IndonesianCloud VM environment.
Regardless of user account types, you can assign the same set of permissions (collected
in 'roles') enable or disable the user accounts, send notifications to them, set or re-set
their passwords and also adjust their quotas.
You can also un-lock those unfortunate users who (by the password policy specified at
'General - Settings - Policies') locked their accounts out with their password mistypes.
There is no limit on the number of user accounts, but as you may find later it is advisable
to create accounts only for those users who need access to perform their duties.
4.1 Creating new users

Users can be 'local' to the system, or they can be part of the IndonesianCloud domain
system. 'Local' users only exists within the IndonesianCloud VM provisioning system.
Adding a 'local' user into the environment.
Log in to the environment, then choose 'Administration' tab, then expand 'Members' and
choose 'Users'. You will find the menu bar towards the top left on the screen. Choose
'New user...'
Once the dialog window appears, fill in all the relevant information. Make sure you enter
a password which is complex enough to protect your environment and the account from
intruders. Then assign a role to the newly created user. A brief description of the roles
and their permissions included below:
Client Organization Administrator - Administers the organization
Catalog Author - Creates and publishes new catalogues
vApp Author - Creates vApps by using the contents of a catalog
vApp User - Uses vApps created by others
Console Access Only - Only views the state and properties of machines in Cloud Director
Once you have assigned a role, the user has all the necessary information. It is advisable
that you fill in the contact information and also revise the quotas assigned to the user.
Whilst you can assign a higher quota of VMs than your organization, the global quota will
be the actual limit.
If all the information is present, you can hit the OK button to add the user. As soon as the
system updates it settings, the newly created user can log in and use the system.
4.2 Modify user settings
Log in to the system and navigate to 'Administration - Members - Users'.
Select the user account you would like to modify and from the actions menu, choose
properties.
Edit the user settings/roles and then click OK.
As soon as the system has updated the user details (a few seconds) the new settings will
take effect. If the user is logged in, it is advisable to log out and log back in.
4.3 Disable/Delete users

In order to disable a user, log in to the system and navigate to 'Administration - Members
- Users'.
Select the user account you would like to delete and from the actions menu, choose
'Disable account'.
The account will now be disabled - it will have no access to the system, but it will retain all
its settings and permissions. You can re-activate it anytime by clicking 'Enable account'.
To delete the user, disable it first. Then go to the same menu and choose 'Delete'. You
will see a warning dialog box, and also a checkbox. Select that checkbox to transfer all
the items owned by the user to your account otherwise these elements can be found in
the 'Lost&Found' folder.
4.4 Notify Organization Users

The IndonesianCloud environment has a simplified built-in functionality to send user
notification using the pre-configured email server or the email server specified by the
organization administrator.
The 'Home' page after a successful login contains a link to send notification to the
organization users.
Notification is also possible throughout the 'Administration - Members - Users' screen.
When sending a notification by clicking on 'Notify...', the following screen will appear.
The sender can specify the target groups from the drop-down box. Since this is a
simplified notification system, there are only subject and message fields available, and no
other options like attachments or formatting.
4.5 Lost & Found

If a user in your organization is removed from a group, if their group is disabled/removed
in LDAP, or if the user is deleted/disabled in LDAP, the user appears on the Lost & Found
page. An organization administrator can delete the user from the system and assume
ownership of the user's objects (for example vApps and vApp templates).
Log in to the IndonesianCloud environment and navigate to 'Administration - Members -

Lost & Found'.
You will find any users with unclaimed objects.
If you click on 'Delete', a warning window will appear along with an option to transfer the
items owned by the deleted user to the administrator performing the delete operation.
Once the delete has been completed, the user has been completely removed from the
system.
5 Networking configuration
5.1 Network management
Introduction
Organization networks are created and assigned to your organization by a system

administrator. An organization administrator can view information about his networks,
configure network services, and more. An organization administrator can configure
network services, such as DHCP, firewalls, network address translation (NAT), VPN, and
static routing for certain organization networks.
There are three types of organization networks.
Routed (Connected to the outside world)
Accessible only by this organization. Only virtual machines within this organization can
connect to this network. This network also provides controlled access to an external
network. System administrators and organization administrators can configure DHCP,
network address translation (NAT), firewall, and VPN settings to make specific virtual
machines accessible from the external network.
Internal (Connected only with this organisation on the platform)
Accessible only by this organization. Only virtual machines within this organization can
connect to and see traffic on this network. This network provides an organization with an
isolated, private network that multiple vApps can connect to. This network provides no
connectivity to machines outside this organization. Machines outside of this organization
have no connectivity to machines within the organization.
Direct (Connecting between different organisations)
Accessible by multiple organizations. Virtual machines belonging to different

organizations can connect to and see traffic on this network. This network provides
direct layer 2 connectivity to machines outside of the organization. Machines outside of
this organization can connect to machines within the organization directly. This is rarely
used and is not recommended for security reasons without contacting support.
5.2 General network properties
Log in to the IndonesianCloud environment, and then navigate to 'Administration - Cloud
resources - Networks'.
All of the organization networks will be displayed here along with general information:
status, default gateway, type, and any connection.
The Network Menu displays the available options.
Configure services - will allow you to change DHCP, Firewall, Routing, VPN and NAT
settings (see separate page for details).
IP Allocations - will display a table of active DHCP leases with details about VMs and
vApps.
Connected vApps - this menu will display a list of vApps connected to the given network
with their status and owner.
Reset Network - will re-start the given network. During this time any vApp or VM
connected to it will lose the networking services provided by the network device.
Synchronize syslog server settings - the environment supports logging events related to
firewall rules to a syslog server specified by a system administrator. If an organization
network does not have any syslog server settings and you think it should, or if the
settings are not what you expected, then you can synchronize the network with the most
current syslog server settings.
Properties - will display the properties of the network. Please note that the network
properties are different from the actual services provided by the network.
The first tab will show the name and description of the network.
The second tab shows the network settings: subnet mask, default gateway, DNS servers,
DNS suffix and the static IP pool (DHCP pool may be set under Services of the given
network).
IndonesianCloud uses the following DNS servers: 103.7.0.136
The last tab, Syslog server settings will show the syslog settings specified by the system
administrator.
5.3 Network services: DHCP and Firewall
Please note that a change in some services might require a powered off state of the
vApps connected to that particular network.
DHCP
Organization administrators can configure organization networks to provide DHCP

services to virtual machines in the organization.
When you enable DHCP for an organization network, connect a NIC on virtual machine in
the organization to that network, and select DHCP as the IP mode for that NIC, vCloud
Director assigns a DHCP IP address to the virtual machine when you power it on.
Firewall
An organization administrator can configure organization networks to provide firewall

services. Enable the firewall on an organization network to enforce firewall rules on
incoming traffic, outgoing traffic, or both.
When you enable the firewall, you can specify a default firewall action to deny all
incoming and outgoing traffic or to allow all incoming and outgoing traffic. You can also
add specific firewall rules to allow or deny traffic that matches the rules to pass through
the firewall.
Note: Firewall rules are processed in the order in which they appear in the firewall rule
list. This means that a rule which appears above another will take precedence. An
organization administrator can change the order of the rules in the list. When you add a
new firewall rule to an organization network, it appears at the bottom of the firewall
rule list. To enforce the new rule before an existing rule, reorder the rules. To modify
the order of the rules, drag the firewall rules to establish the order in which the rules
are applied.
Modifying DHCP and Firewall settings
To do this, log in to the IndonesianCloud environment, then navigate to 'Administration -

Cloud resources - Networks'.
Then select the network you would like to modify, and then choose 'Configure Services...'
from the list of available options.
The first tab of the services, 'DHCP' will allow you to enable or disable the DHCP service,
modify the IP range and lease times.
The second tab, 'Firewall' will enable you to control the firewall settings of that network.
If you wish to do so, you can disable the firewall altogether.
You can see the list of all firewall rules along with some of their settings and their status.
A default rule which allow all outbound traffic is already in place.
To add a rule, click on the 'Add...' button.
This settings window is simple. It allows you to specify a name for the rule, the direction
of the traffic, the originating and destination IP addresses and ports, the action (Allow or
Deny) applied for the traffic, lets you disable the rule if you would like to keep it for
future use, and set logging. For the source and destination address you can specify single
IP addresses, subnets, IP ranges or 'any'.
Similarly, the 'Edit' option for a selected rule in the list will allow you to change the rule.
Finally 'Delete' will remove a rule from the list and from the firewall configuration.
5.4 Network services: NAT

Introduction
An organization administrator can configure certain organization networks to provide IP

masquerade services. Enable IP masquerading on an organization network to hide the
internal IP addresses of virtual machines from the external network.
When you enable IP masquerade, the environment translates a virtual machine's private,
internal IP address into a public IP address for outbound traffic.
Prerequisite: a routed organization network.
NAT - External IPs
This tab shows the external IP addresses of your network.
Organization VMs can be accessed from outside the organization using these external IP
addresses.
NAT Mapping
This tab shows the configured NAT rules.
You can add rules by clicking on the 'Add' button. You can specify the external IP address
(or choose between them if you have more than one), the type of NAT (port forwarding
or IP translation), the port, internal IP address, and the protocol.
Changing Rule order
NAT mapping rules are enforced in the order in which they appear in the NAT mapping
list. An organization administrator can change the order of the rules in the list. When you
add a new NAT mapping rule (IP translation or port forwarding) to an organization
network, it appears at the bottom of the NAT mapping rule list. To enforce the new rule
before an existing rule, reorder the rules.
5.5 Network services: Site-to-site VPN

Introduction
Site to site VPN is a secured tunnel which connects to remote networks over the internet.
An organization administrator can enable site-to-site VPN for an organization network

and then create a secure tunnel to another network. With this solution you can easily
connect your existing infrastructure with the servers created within the IndonesianCloud
environment.
Prerequisites: a routed organization network and a routed remote network that uses
IPSec such as VMware vShield Edge, CISCO VPN appliances, Juniper, etc.
Creating a site-to-site VPN
Log on to the IndonesianCloud environment, and choose 'Administration – Cloud

resources – Networks'. Then choose the network for which you would like to enable VPN.
Right-click the organization network name and select 'Configure Services'.
Choose the 'Site-to-site VPN' tab and check the 'Enable site-to-site VPN' checkbox.
If the external network to which the organization network is routed is behind a NAT
device, you must provide a publicly accessible IP address that faces the Internet.
Once that is done, you have to create a VPN tunnel to another network.
If the tunnel endpoints have a firewall between them, you must configure it to allow the
following IP protocols and UDP ports:
IP Protocol ID 50 (ESP)
IP Protocol ID 51 (AH)
UDP Port 500 (IKE)
UDP Port 4500
For more information, please see the documentation for your device.
To create the tunnel itself, click on the 'Add' button at the below.
At the next screen, name the VPN connection, and select a remote network from the
drop-down menu. Then type the peer settings, choose encryption type (AES, AES-256,
3DES), enter the shared secret, and MTU size for the tunnel (the recommended default
size is 1500 bytes).
Once you click OK, vCloud Director configures the organization peer network endpoint.
5.6 Network services: Static routing

Introduction
An organization administrator can configure certain organization networks to provide

static routing services. After you enable static routing on an organization network, you
can add static routes to allow traffic between different vApp networks routed to the
organization network.
Prerequisite: a routed organization network.
Log in to the IndonesianCloud environment, then choose 'Administration - Cloud

resources - Networks', then your organization network and 'Configure services'.
At the 'Static routing' tab you will see the following
To enable static routing, check the relevant checkbox.
If you click the 'Add' button, you can set up your routing rules.
Add Static Routes Between vApp Networks Routed to the Same Organization Network
('Within this network' option)
An organization administrator can add static routes between two vApp networks that are
within the same organization network. Static routes allow traffic to route between
networks.
In the following diagram, a client has created two network subnets with a routing device
to route traffic between the subnets. For any traffic to reach Network A or Network B
from outside the VM, a static route for Network A and Network B would have to be
added to point traffic for these networks at the routing device's interface.
You cannot add static routes between overlapping networks or fenced vApps. After you
add a static route to an organization network, make sure to configure the network
firewall rules to allow traffic on the static route. For vApps with static routes, you should
select the 'Always use assigned IP addresses until this vApp or associated networks are
deleted' check box.
Static routes only function when the vApps included in the routes are running. If you
change the parent network of a vApp, delete a vApp, or delete a vApp network and the
vApp includes static routes, those routes will no longer function and you must remove
them manually.
Prerequisites:
- a routed organization network;
- static routing must be enabled;
- twovApp networks routed to the organization network;
- thevApp networks exist in vApps that have started at least once.
To set it up
1. Click 'Add',
2. Type a name, network address, and next hop IP. The network address is for the first
vApp network to which you want to add a static route. The next hop IP is the external IP
address of that vApp network's router.
3. Select 'Within this network' and click OK,
4. Repeat steps to add a route to the second vApp network.
Example:vApp Network A and vApp Network B are both routed to Org Network
Shared_Net. You can create static routes on the organization network to allow traffic
between the vApp networks. You can use information about the vApp networks to
create the static routes. Network Information:
Network Name Network Specification Router External IP Address
vApp Network A 192.168.1.0/24 192.168.0.100
vApp Network B 192.168.2.0/24 192.168.0.101
Org Network Shared_Net 192.168.0.0/24 NA
On Org Network Shared_Net, create a static route to vApp Network A and another static
route to vApp Network B.
Static Routing Settings
Static Route to Route Next Hop IP
Network Name Network Address Route
vApp Network A tovapp1 192.168.1.0/24 192.168.0.100 Within this
network
vApp Network B tovapp2 192.168.2.0/24 192.168.0.101
Within this
network
Add Static Routes Between vApp Networks Routed to Different Organization Networks
('To External Network' option)
An organization administrator can add static routes between two vApp networks that are
routed to different organization networks. Static routes allow traffic between the
networks.
You cannot add static routes between overlapping networks or fenced vApps. After you
add a static route to an organization network, configure the network firewall rules to
allow traffic on the static route. For vApps with static routes, select the Always use
assigned IP addresses until this vApp or associated networks are deleted check box.
Static routes only function when the vApps included in the routes are running. If you
change the parent network of a vApp, delete a vApp, or delete a vApp network, and the
vApp includes static routes, those routes cannot function and you must remove them
manually.
Prerequisites:
- two organization networks routed to the same external network,
- static routing is enabled on both organization networks,
- avApp network routed to each organization network,
- thevApp networks are in vApps that were started at least once.
To set it up
1. Click 'Add',
2. Type a name, network address, and next hop IP address. The network address is for the
vApp network to which you want to add a static route. The next hop IP address is the
external IP address of the router for the organization network to which that vApp
network is routed.
3. Select 'To external network' and click OK,
4. Repeat steps to add static routes to the second organization network.
Example:
vApp Network C is routed to Org Network 1. vApp Network D is routed to Org Network 2.
You can create static routes on the organization networks to allow traffic between the
vApp networks. You can use information about the vApp networks and organization
networks to create the static routes.
Network Information:
Network Name Network Specification Router External IP Address
vApp Network C 192.168.1.0/24 192.168.0.100
vApp Network D 192.168.11.0/24 192.168.10.100
Org Network 1 192.168.0.0/24 10.112.205.101
Org Network 2 192.168.10.0/24 10.112.205.100
On Org Network 1, create a static route to vApp Network D and another static route to
vApp Network C. On Org Network 2, create a static route to vApp Network C and another
static route to vApp Network D.
Static Routing Settings for Org Network 1
vApp Network D tovappD 192.168.11.0/24 10.112.205.100 To external
network
vApp Network C tovappC 192.168.1.0/24 192.168.0.100 Within this
network
Static Routing Settings for Org Network 2
vApp Network C tovappC 192.168.1.0/24 10.112.205.101 To external
network
vApp Network D tovappD 192.168.11.0/24 192.168.10.100 Within this
network
After a static route setup
Once a routing setup is complete, do not forget to create firewall rules to allow traffic to
the static routes.
6 Managing vApps and Virtual Machines
6.1 Introduction
Introduction
A vApp consists of one or more virtual machines that communicate over a network and
use resources and services in a deployed environment. A vApp can contain multiple
virtual machines.
A vApp template is a virtual machine image that is loaded with an operating system,
applications, and data. These templates ensure that virtual machines are consistently
configured across an entire organization. The IndonesianCloud environment offers pre-
set Operating System templates which are easy to deploy and ready to use after a few
configuration steps.
A vApp can serve as a logical container for a group of VMs which share a common
network and functionality, such as a file and a database server on which the file server
relies upon.
Bear in mind that vApps and the VMs contained in them are two separate abstraction
levels. vApps, just like VMs, can be powered on or off, suspended or fully stopped. This
will affect all the VMs within a vApp. Manage them at the right level to minimize
administration effort.
6.2 Creating vApps from scratch or template

Log in to the IndonesianCloud environment, then select 'My Cloud' from the menu.
Initially, your organization has no vApps or Virtual Machines running. You can add vApps
by deploying a vApp template or creating one from scratch.
To create a vApp from a template, click on the green + button. A wizard will start.
You can select any of the Public Catalogues to see which vApps are accessible for you or
your own vApp catalog if you have already prepared one from the drop-down list. Once
you have selected a catalog, the vApps contained within will be displayed. Choose one
and click Next.
Name the vApp at the next screen and adjust its lease times.
Name the VMs contained within the vApp, adjust NIC settings and IP configuration
according to your needs.
At the next screen you can specify how this vApp connects to the organization network.
At the last screen, review your settings and click Finish to deploy the selected vApp into
your environment.
Once you have clicked Finish, the deployment will take place. After a short time, your
vApp will be ready to run!
Create a vApp from scratch
Select 'My Cloud' from the menu.
Select the 'Build new vApp...' from the menu.
Name the vApp at the next screen and adjust its lease times.
At the next screen you can add Virtual Machines from an existing Public Catalog or create
your own blank Virtual Machine. If you choose to create your own, you can adjust all VM
settings in a separate window.
New Virtual Machine dialog
Once you have added all the Virtual Machines which will be part of the vApp, click Next.
At the next screen, you can configure the networking details for your Virtual Machines
individually.
... then you can adjust how these VMs will connect to the organization network.
Once everything is set, you can review your settings before the new vApp is being
created.
You can monitor the progress of the vApp creation process. After a short period of time,
your new vApp and the VMs contained within will be ready for use.
Congratulations, your new vApp is ready for you!
6.3 Managing vApps

In order to interact with a vApp, you have to power it on.
Log on to the IndonesianCloud environment, then choose 'My Cloud' then 'vApps'.
Highlight your vApp, and click on the green 'Play' button. The vApp will power on and its
status will change to 'Starting...', then, after a short while 'Running'.
Now you are able to interact with the vApp. Note that powering on a vApp will start all
VMs stored within it.
Once the vApp is up and running, you have several options available from the actions
menu. You can power off, suspend, or reset the vApp. Resetting the vApp will cause all
VMs to restart. This is never considered a graceful operation, so use it wisely. Suspending
a vApp will place all of its VMs into suspended mode. Once you resume the vApp they will
continue running from the suspended point of time.
With the 'Change owner' option, you can give the ownership of the vApp to another user
within your organization. This is especially useful if you would like to disable/delete a user
from the organization and reassign the vApps to another user.
Under the 'Properties' menu, there are several tabs with additional options for the vApp.
At the 'General' tab, you can change the name and description of the vApp and also reset
its lease times.
Under 'Starting and stopping VMs', you can select the sequence of the VMs for power on.
You can make further adjustments in boot delay and start and stop actions. These are
useful if your VMs have dependencies and a specific boot order is required.
With the 'Sharing' settings you can share the vApp with other members of your
organization and also control their access level (read-only, full control, etc.).
You can assign granular permissions to users and groups to ensure your servers are
accessed by appropriate members of your organization. This is useful for sensitive servers
such as HR or accounts.
6.4 Additional vApp operations
There is more you can do with your vApp.
Log on to the IndonesianCloud environment, then choose 'My Cloud' then 'vApps'.
Highlight your vApp, and right click on it. You will see additional options if the vApp is
powered off.
If you choose 'Open' from the context menu, you can open up the vApp and see the VMs
inside.
Once you have opened your vApp, you can add networks or VMs to it, and also control
how it connects to the organization network.
The first tab is a networking diagram which shows every VM of the vApp, and their
connections to other networks. If you right click on any of the VMs, a context menu will
appear with all the options available for that particular VM. With this mechanism, you can
easily monitor and control your VMs. You can read about VM options in the following
chapters.
The second tab, 'Virtual Machines' shows a list of VMs of the vApp. On this screen, you
can monitor and control your VMs.
The third tab contains settings on how the VMs should connect to the organization
networks.
For some operations the vApp must be powered off. This effectively undeploys it so the
system can perform its operations. If the vApp is not running, you can add it to your vApp
Catalog, you can Copy or Move it or Delete.
With the 'Add to Catalog' option, you can upload your vApp into your catalog. This will
enable you to deploy an identical vApp with the same settings/Virtual Machines as the
original one. This is useful for test and development scenarios as well as deploying gold
images. Permissions can be controlled to allow others to deploy a new instance within
your organization. You can specify the lease time and also the behaviour of the catalog
item when it gets deployed.
With the 'Copy to' and 'Move to' options you can move your vApp within the virtual
datacenter, or the copy option will allow you to clone the vApp.
The 'Delete' option removes the vApp and all the VMs contained within. Use this with
caution as there is no way to restore a VM or vApp once deleted.
6.5 Creating Virtual Machines from templates or from scratch

Log in to the IndonesianCloud environment, then choose 'My Cloud' and the vApp which
you would like to place the new VM into. The 'Add VM' button will launch a wizard which
will help you build your new VM whether it is a new VM or one deployed from a
previously configured template.
When you launch the wizard, the first screen will let you decide between deploying a VM
template or creating a new one.
To deploy a previously configured VM template, choose one of the public catalog, then
browse through the VMs which are available from them. Select the one you would like to
deploy, then click on the green 'Add' button to add it to the list. You can select more than
one VM at the same time.
If you would like to create a new VM, just click on 'New Virtual Machine' button at the
bottom.
You can specify the VM settings on a new popup screen. Specify name, computer name,
description, OS version, virtual HW version, the number of CPUs, RAM size, disk size, and
the number of NICs.
Please note by changing the OS type, the system defaults to the recommended resources
for CPU, memory, and hard disk size values. These are only recommendations and you
can specify the resources as you see fit.
Always make sure that you install the OS which is specified in the VM properties, as the
virtual hardware is prepared for a specific OS. Installing a different Operating System may
cause instability or not bootable system.
Once you have finished configuring the new VM, you can return to the previous screen
then click 'Next' to configure networking details such as IP assignment, type of NICs and
more.
Click 'Next' again to go to the organization networking configuration screen.
The final step of the wizard allows you to review your choices. Click 'Finish' to begin the
VM deployment process.
You can monitor the deployment process via the vApp screen.
Once the VMs had been configured you can power them on.
For new VMs, you may need to mount some installation media with the 'Insert CD/DVD
from catalog...' option.
For IndonesianCloud Windows appliances, always disable the 'Enable guest

customization' option for the first boot of the VM to avoid any problems with the
deployment.
6.6 Managing Virtual Machines
Virtual Machines (VMs) are contained within the vApps. These are your basic building
blocks.
Log on to the IndonesianCloud environment, then choose 'My Cloud' then 'VMs'. There is
the list of all VMs within your organization, regardless of their power state. This list gives
you basic information about the VMs like their name, state, Operating System, NIC
configuration/IP address, vApp.
You can also manage them through the vApps interface (where they are grouped by their
vApps).
Double clicking on a VM will open a console. If that is the first time you open a console in
your browser, you will need to download and install the VMware VMRC plugin when
prompted. Download the plugin (vmware-vmrc-win32-x86.exe), save it to a convenient
location, then launch the installer. Please refer to VMware vCloud Director Administrators
Guide for a full list of supported browsers. Once the installation is complete, you can re-
logon to your IndonesianCloud environment and open consoles to your VMs.
With the console open in a separate window, you can interact with your OS through a
console session. On the upper right hand corner you will find some useful icons: powering
off or on the VM, suspending it, mounting or un-mounting a CD image.
Back in the context menu of a VM you will find other options available: the 'Copy to' and
'Move to' options are to copy/move the VM into a different vApp – for example, from a
development environment to the live. You are able to change the networking details for a
VM when you move or copy it.
Deleting a VM will irreversibly erase it with all of the data stored on its disks. Use this
option with caution!
Choosing 'Properties' will bring up a lot of options.
At the 'General' tab, you can change name, description, Operating System running on the
VM, virtual hardware version. If you check the 'Hot add' boxes, you can later add CPU or
memory to the running VM without switching it off for re-configuration.
At the 'Hardware' tab, you can change the number of CPUs, the amount of RAM, add
disks to the VM (64 disks is the maximum), and also make changes to the NICs attached
to the VM.
Caution: if you delete a disk from a VM, all the data stored on it will be lost!
At the 'Guest OS customization', you can change the SID of the Windows Operating
system, perform a password reset, or join the computer to a domain. The first check box
'Enable Guest Customization' MUST BE enabled in order to configure networking for the
VM. As the other options could damage your OS configuration, it is best to have only this
option enabled and the rest unchecked.
Be careful with these additional settings, if you boot up a sysprepped OS with the
'Change SID' option enabled it will lead to an unbootable OS. It is also possible to change
the administrator's password by accident by leaving the password change checkbox
enabled.
You can run customization scripts too, thus enabling a broad set of options available to
you to tailor the OS to your needs.
'Custom properties' tab - if the vApp template is based on an OVF file that includes OVF
properties for customizing its virtual machines, those properties are passed to the vApp.
If any of those properties are user-configurable, you can specify the values.
'Resource Allocation' tab - use the resource allocation settingss (shares, reservation, and
limit) to determine the amount of CPU, memory, and storage resources provided for a
virtual machine. Users have several options for allocating resources. For 'Pay as you go'
organization networks, these settings are disabled.
Resource allocation settings:
 Ensure that a certain amount of memory for a virtual machine is provided by

the virtual datacenter.
 Guarantee that a particular virtual machine is always allocated a higher
percentage of the virtual datacenter resources than other virtual machines.
 Set an upper bound on the resources that can be allocated to a virtual machine.
6.7 Virtual Machine CPU/ RAM/ DISK/ Network reconfiguration

Prerequisites
Most of the cases, the VM has to be shut down ('Powered Off') in order to be modified. If
the 'Hot add' feature is enabled for the VM (the VM properties have 'Virtual CPU hot add'
and/or 'Memory hot add' features enabled) then it is possible to add these resources to
the running VM (the OS must support the hot add feature, please see VMware vCloud
Director Administrators Guide for details). Decreasing these resources requires a
powered off state.
Adding or removing a disk always requires the VM to be shut down.
Warning: removing a disk from a VM will erase all the data stored on that disk. Always use
caution when you remove a disk from a VM.
Performing changes to the Network Interface Cards requires 'Guest OS Customization'

enabled. When you enable this feature (at the VM properties, under 'Guest OS
Customization tab' on the 'Enable guest customization' checkbox) always make sure that
you have un-checked the other customization features like the Administrator password
change, or the 'Change SID' checkbox as these are for reconfiguring an OS.
Virtual Machine Reconfiguration
Log in to the IndonesianCloud environment, then choose 'My Cloud', then click on 'VM'.
You will see a list of all your VMs. Log in to your VM and shut it down gracefully.
Right-click on the VM, and choose 'Properties'.
At the first tab, 'General' you will see the CPU and Memory hot add checkboxes towards
the bottom. Enabling these will make CPU and Memory resource increase possible whilst
the VM is running.
At the second tab 'Hardware' is where the resource change can be made.
The CPU and Memory resources are self explanatory. Always take into consideration how
much resource you have in your organization and also consider OS limitations and license
restrictions (for example, using MS SQL).
Changing the resources is easy - just use the drop-down list to choose the desired value.
Please be aware, that for the Memory, you can type in any value you like, for example,
3GB.
Disk reconfiguration
You can use the green '+ Add' button to add another disk to your VM. If you are not
expert on the bus and unit number settings, leave them on their defaults. You can specify
the size of the disk by using the drop-down menu or by typing in to the value box. The
maximum number of disks you can have in a VM is 64 (including any system disks). Please
check your OS for any other limits on the number of disks.
It is not possible to change disk sizes. If a disk needs to be bigger or smaller, you need to
add another disk with the right size, then move data over, then delete the original disk.
To delete the disk, use the 'Delete' button on the far right. Always use this with caution
to avoid data loss.
Network Interface Card configuration
You will find the networking card information at the bottom of the 'Hardware' tab. vCD
can perform the changes in the NIC configuration if you have enabled 'Guest OS
Customization' for the VM. To add a NIC, click on the green 'Add' button.
You can disconnect a NIC by unchecking the 'Connected' box. Changing the network to
which the NIC is connected to is done through the 'Network' drop-down menu.
There are 3 different options for IP assignment (the IP address box becomes active only if
you choose manual IP assignment)
1. Static - IP Pool: assigns IP addresses from the network's IP pool.

2. Static - Manual: allows you to specify an IP address.
3. DHCP: assigns IP addresses from a DHCP server.
With the MAC address drop-down menu, you can change the MAC address of the Virtual
networking adapter.
Finally, the 'Delete' button removes the NIC from the list and from the VM.
The networking changes take place when you click on apply. Some changes, like the IP
address configuration, takes place at the first boot after the reconfiguration, and it is
configured by vCD within the OS.
6.8 System Logs

vCloud Director tasks are long-running operations and their status changes as the task
progresses. For example, a task's status generally starts as Running. When the task
finishes, its status changes to Successful or Error. vCloud Director events are one-time
occurrence that indicate an important part of an operation or a significant state change
for a vCloud Director object. vCloud Director also logs an event every time a user logs in,
and notes whether the attempt was successful or not.
Log into IndonesianCloud, and choose 'My Cloud', then choose 'Logs'. The following
screen will appear.
The first screen 'Tasks' contains the list of tasks performed on the system, their short
description, status, the name of the user who performed them, start and completion
times.
The drop-down menu at the top right along with the search box provides sorting and
search functionality to help locate events.
Clicking on the task will bring up detailed information.
The second tab, 'Events' shows important operations and their results. Along with
description the type and target of the event are also displayed. Just like with Tasks,
clicking on an Event will bring up more detailed information about it.
6.9 Managing expired vApps and VMs
Introduction
When vApps or vApp templates expire, you can determine whether you want to renew or
delete them. If a policy forces a vApp or VM to expire, the action taken is set by that
policy. You can change this setting by navigating to 'Administration - Settings - Policies'
then change the storage clean-up policies for your vApps and vApp templates.
The expired items are displayed under 'My Cloud - Expired items'
There are two separate tabs for vApps and vApp templates. The options for the expired
items are the same for each.
If you choose 'Delete' the vApp along with its VMs, will be deleted permanently.
If you choose 'Renew', this will renew the lease with the original time set for the vApp or
the vApp template.
7 Managing Catalogues
7.1 Add, modify catalogues and upload content
Introduction
A catalog consists of a list of catalogues, vApp templates, and media files in your
organization. A catalog is a container for vApp templates and media files in an
organization. Organization administrators and catalog authors can create catalogues in
an organization. Catalog contents can be shared with other users in the organization and
can also be published to all organizations in the IndonesianCloud platform.
There are two types of catalogues in vCloud Director; organization catalogues and public
catalogues. Organization catalogues include vApp templates and media files that you can
share with other users in the organization. If a system administrator enables catalog
publishing for your organization, you can publish an organization catalog to create a
public catalog. Organization administrators from any organization in the IndonesianCloud
platform can view the vApp templates and media files in a public catalog and copy those
files to a catalog in their organization for use by their members.
There are two ways to add vApp templates to a catalog. You can upload an OVF (Open
Virtualization Format) package directly to a catalog or save a vApp as a vApp template.
Working with catalogues
Add catalog
Log in to the IndonesianCloud environment, then choose 'Catalogues' from the menu.
'My Organization's Catalogues’ contains all catalogues of your organization whether
these are public or private catalogues. The 'Public Catalogues' section lists all public
catalogues which are accessible to you. For example, the pre-provisioned
IndonesianCloud vApp appliances are available through the public catalog. Your level of
access on this public catalog is read-only. Because of security settings, you are prevented
to publish catalogues.
Under 'My Organization's Catalogues', clicking the green '+' button will start a wizard to
add a new catalog to your organization. At the first screen, you can specify the name and
description of the catalog.
At the 'Share this catalog' screen you can specify who will have access to this catalog and
their access rights over it. Click the 'Add members...' button to specify these values. Their
permissions are controlled by the drop-down menu at the bottom: Read-only, Read/write,
Full access. After reviewing the settings on the final screen, clicking on the Finish button
will add the catalog to your organization.
Managing catalogues
Right clicking on a catalog will bring up a context menu where you can modify the share
permissions on it, change its name, owner, or delete it.
If you open up a catalog, you will have more options. The drop down menus on the right
with the search box can help you organize your catalogues.
At the 'vApp templates' tab, you can upload an OVF template and view the progress of
the upload process.
At the 'Media' tab, you can upload ISO or FLP images into your catalog, then later mount
them onto the CD or floppy disk drive of your VMs to perform application installations,
transfer data, restore old data, etc. You can also add media files from public catalogues.
Note: you cannot mount installation media directly from a public catalog, first you have
to create your own organization catalog, and copy the media into it.
7.2 Working with published catalogues

Organization administrators can access a published catalog and copy its vApp templates
and media files to a catalog in their organization. They can then share the organization
catalog with other members of their organization so they can use the vApp templates
and media files.
Log in to the IndonesianCloud environment, and then choose 'Catalogues' and 'Public
Catalogues'.
Right-click on one of the public catalogues will bring up more options.
Once you have opened up a public catalog, you can see the vApp templates and media
files stored within. Right-clicking on a vApp Template will bring up a set of choices.
Open will show you the VMs stored in the vApp template along with their descriptions,
Add to My Cloud will launch a wizard which is similar to adding a vApp to your
organization (see detailed description there).
Download has been disabled due to licensing restrictions. If an image needs to be
exported, please contact support to arrange the appropriate method.
Copy to Catalog... will let you copy the template into your own catalog.
Properties will show you the details about the VMs stored in the vApp along with their
lease times etc.
Similarly, the images stored under Media have a set of options available (depending on
your permissions on the object).
Copy to Catalog will copy it to the organization catalog.
Move to Catalog will move it to the organization catalog.
Delete will delete the item from the catalog.
Properties will show its properties.

Indo Cloud Manual

Uploaded by

Copyright:

Available Formats

Indo Cloud Manual

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Indo Cloud Manual

Uploaded by

Copyright:

Available Formats

IndonesianCloud

Users Guide for Online Portal

'Set up this organization'

Managing the Virtual Datacentre

Log in to the IndonesianCloud environment then navigate to 'Administration - Cloud

3.2 Email settings

Under Policies, you will find several sections. These are

4.1 Creating new users

Adding a 'local' user into the environment.

Edit the user settings/roles and then click OK.

4.3 Disable/Delete users

4.4 Notify Organization Users

4.5 Lost & Found

Log in to the IndonesianCloud environment and navigate to 'Administration - Members -

You will find any users with unclaimed objects.

Organization networks are created and assigned to your organization by a system

There are three types of organization networks.

Routed (Connected to the outside world)

Internal (Connected only with this organisation on the platform)

Direct (Connecting between different organisations)

Accessible by multiple organizations. Virtual machines belonging to different

The Network Menu displays the available options.

IndonesianCloud uses the following DNS servers: 103.7.0.136

Organization administrators can configure organization networks to provide DHCP

An organization administrator can configure organization networks to provide firewall

Modifying DHCP and Firewall settings

To do this, log in to the IndonesianCloud environment, then navigate to 'Administration -

To add a rule, click on the 'Add...' button.

5.4 Network services: NAT

An organization administrator can configure certain organization networks to provide IP

NAT - External IPs

This tab shows the external IP addresses of your network.

This tab shows the configured NAT rules.

5.5 Network services: Site-to-site VPN

An organization administrator can enable site-to-site VPN for an organization network

Creating a site-to-site VPN

Log on to the IndonesianCloud environment, and choose 'Administration – Cloud

Right-click the organization network name and select 'Configure Services'.

UDP Port 500 (IKE)

UDP Port 4500

5.6 Network services: Static routing

An organization administrator can configure certain organization networks to provide

Prerequisite: a routed organization network.

Log in to the IndonesianCloud environment, then choose 'Administration - Cloud

At the 'Static routing' tab you will see the following

6.2 Creating vApps from scratch or template

Select 'My Cloud' from the menu.

Select the 'Build new vApp...' from the menu.

Congratulations, your new vApp is ready for you!

6.3 Managing vApps

6.5 Creating Virtual Machines from templates or from scratch

For IndonesianCloud Windows appliances, always disable the 'Enable guest

Choosing 'Properties' will bring up a lot of options.

Resource allocation settings:

 Ensure that a certain amount of memory for a virtual machine is provided by

6.7 Virtual Machine CPU/ RAM/ DISK/ Network reconfiguration

Performing changes to the Network Interface Cards requires 'Guest OS Customization'

Virtual Machine Reconfiguration

Right-click on the VM, and choose 'Properties'.