AZ 303/304 Prepare for disaster recovery with Azure Site Recovery, Replication, Recovery Plan - LAB

hello everyone welcome to this video in this one we're going to look at the lab that really comes under under the microsoft learning uh where we're going to work on uh preparing for a disaster recovery with azure site recovery okay in this lab uh unfortunately you do need to have a a subscription available to you uh microsoft is not going to give you a demo demo environment for this one so what you need to do first you need to set up an environment so what are you going to protect so that you need to create and in this exercise looks like we're going to create a virtual machine a virtual network two virtual machines and a storage account that's what we are gonna create and it will be configured in the uh also resource group in the west us okay and we'll configure azure site recovery to use the west u.s region in our target regions i guess they're these resources are going to be in the east u.s we're going to create a resource group in the west and then we'll use a site recovery service wall okay that is deployed in the west us to replicate over there so what we'll do we'll go to our azure account and we'll come up our bash shell okay and there is a github a template file that template file we're going to go and deploy it in our environment so let's get there so this is my azure environment so i just need to click on this one and it should give me the cli uh or the power cell one of these environments if it takes a little bit little long then just replace the page and just re-click it one more time and this time it should give you that yeah there we go so it's now starting and it's opening in a bass environment which we want to have so that looks good so at this time what we need uh we want to we're going to run this scroll command and this uh what this is going to take this and it's going to store in a local environment a copy of this deploy.json file okay so let's go over here and paste it and hit run so there we go so it has got that file uh average speed and everything 100 is done so my file should be there so if i do a ls on it here is a deploy.json file okay so if you're gonna take a look into that maybe you can do a less command on that there we go so you can look at the whole diploma and what it's deploying since we know that we're going to deploy two different virtual machine i would expect that it's going to have two different virtual machines and associated resources one virtual network and somewhere it must be specified that we are deploying it in the east us region right so let's uh see what uh what else we need to do uh just hit q if you if you're using this hit q to get out of this list and it's just a basic standard linux list command um so what come over here now over here uh run the following commands to create a resource group so let's do that so let's uh okay so they're doing two resource group one in the west us two and another in the east us two forests and a simple command is the group create name west coast resource group and east forest resource group so that's a pretty simple and uh use notice the how they're using the the the naming convention is very convenient so if as soon as you look at your uh resource group itself you know that it's it's a resource group that's deployed in the east region and uh other one is deployed in the west region pretty smart all right so once we have that then now we can deploy our our our file that we downloaded and the way you do do that you run easy deployment group create command and you provide uh the name of it then template file you provide which template file you are deploying and parameter storage account something name and you okay so you need a random and unique uh storage account for your resource group okay so that you need and resource group waste cost rj so you are looks like you are deploying it in this resource group uh for for this particular deployment so let's get that and come over here go to the bottom and hit best and let's see what happens it may take a little bit of time to deploy the whole thing and you see that it says running and that means the deployment is in progress right now so i'm going to pause the video for just a minute or so and as soon as this diploma is done we'll come back and restart the lab all right everyone it looks like the deployment is successful so what i really want to do quickly go to our resource groups and we have created two different resources east coast and the west coast and the most diploma it looked like they went into the west coast only and here look at that we have a breaker in intro security group desk disk ip address virtual machine virtual machine storage account so all of that is here if i go to east i only have the resource created but nothing else okay so what our goal would be to replicate all of the items that we have in the west coast back to the east coast region now what we need for this is as your site recovery okay and let's see how to configure that one all right everyone let's see uh what we do we need to do the next as a next step uh really you gotta follow the next phase of it this is a great preparation with as your site recovery okay so what is we need to do add a recovery services vault we need to organize the target resources and configure outbound network connectivity and finally set up our application on existing vm so so microsoft got a really nice diagram here i really like this one so what it's telling you in the first place that you have the virtual network here okay and this is deployed in the east us region you want to replicate everything over there in the target environment which is in the central us right so if you look at it what's going on you have your virtual machines they have the disk associated with it they are saved in a storage account all of that is going to be cast into another storage account and from there the data will flow to the other environment okay so we will set up recovery service wall so i don't have to go through this in too much of details so uh and there is something uh you if you are doing it for the on-prem there you know you gotta have access to some of the websites over here that you can go through and and for us it's it's not required when we set up it will automatically be configured uh then another thing you need to make sure you need to make sure you have up to date updated azure vm root certificates and and for this is another important uh aspect of it if you what kind of permission do you need for this movement so if you have a larger enterprise and you different role given different people so for this uh backup and recover you at least gotta have site recovery contributor or this this person will have full permission to assume side recovery operations in a recovery services wall and this is suitable for disaster recovery elements okay and finally what is the mobility service excuse me so when you set up this as your back as your backup and recovery if you see this side recovery extension mobility surface this will get automatically installed to your virtual machine so you really do not have to do anything manually so that's all you need to know excuse me so let's uh go to the next page if it let me go all right so over here we are uh gonna start so we already have in our you know account we have the east coast rg which is empty this is where we have deployed west coast resource group and we're gonna deploy a recovery services wall in this phase okay so typically if you see again this diagram is really cool and again you can make some of this diagram from even inside the azure if you know how to do it so here is the primary region again you have two different vms and if vm is not just one component you have a nsg associated with it it's got an ip address a network interface okay and then a default subnet and the subnet is under this asl virtual network okay same thing under this default network we have another uh another network or another virtual machine is deployed uh this machine also got their own nsg and own ip records okay and all of that we're going to create azure site recovery to replicate to the east u.s region so this is what we are really going to do so let's perform these operations right here how to do that so let's go to azure portal and and always you know it's really easy uh and we we're gonna select the backup and site recovery and within the east coast resource group we are gonna call this acer vault okay let's follow the directions and so let's come over here if you just search for the recovery recovery services for that is what you need it says backup and site recovery i don't think there's anything called backup and site recovery anymore let's see back up backup and site recovery you see there is nothing in there from marketplace there is something called black up inside recovery you can go there but that is that uh let's see what is that create but but it says see the recovery services ball so i think that name got renamed i have never seen anything that says backup and said recovery so what you really need you click on recovery and get the recovery service as well there is a lot of confusions when i first started studying this i was heavily confused what we're talking about so recovery services vault is what you need okay so now you if you hit add then it's gonna give you your options so here we are we told that it's gonna we're gonna deploy that to the east coast resource group that is where we want to replicate our west coast resources right and here vault name i'm just going to select asr vault and i'm going to make it um name must start with the letter what are you talking about and no hyphen so okay so the name they're suggesting uh it's now complaining say the world name as is evolved said the bald name as asl okay i got it so it says now green for some reason we were having trouble okay so this one needs to be in the east us right this or estee vs2 where did we deploy stus2 is most probably where we deploy right htos to here so that's good and pretty much all you need over here if you want you can do some tags okay and then just hit review and create and it it will say the default backup configuration for storage replication type is set to jio redundant okay default security setting and all that will be applied and if you click on it will take you to some more documentation okay so the default is good for good for our purposes just i'm just gonna hit on create so this is gonna give me the one of the things that i need for my replication purposes okay for my site recovery and this as you see it just took just a second you can go to the resource and again this experience is very similar here is my recovery services bond if you have seen my other video where i move one one virtual machine from one region to another so you know we have already explored some of it but here is pretty much where uh you are going to configure a lot of things like your policies what to what to you know backup what to replicate and all that kind of stuff so here uh what we need to do we need to enable replication okay so for the replication you have a backup option replicate options if you click on it it gives you three different options that you need to configure your source virtual machines and replication setting all of that you need to you need to configure the source is the azure so it's not on-prem it's our machines are still in the azure source region is west us-2 right that's where we have deployed so source waste us2 as your virtual machine deployment model it's the arm template so resource manager is good for us here is the subscription where we have everything right now we have only one subscription and uh source resource group is the west coast rd that's what we deployed and disaster recovery between availability zone this one we can either say yes or no let's see what our instruction is saying us to do so as your waste us to resource manager uh west coast rg okay and then i guess they're here they when they created this uh documentation they didn't even have the data that this recovery option for us so i'm just going to select the default and just say no okay and uh click ok so we have now configured our source which is the waste us2 now as soon as you click on that one you see that it already picked up what are the virtual machines that are running in this particular particular region right so you have the hr records and the patient request these are the two virtual network that we have okay so you can select both of the virtual machines okay let's see what they're saying us to do so here we are choosing both of them and selected virtual machine it will set to is it saying to yeah secret virtual machine too you can click on it and it it can tell you what are the virtual machines okay select virtual message go back you can hit ok now uh so that will pick up your virtual machine and last we are going to have the third configuration option now it's configured so what are you gonna do with it all right so target subscription you can customize if you are moving to a different subscription altogether but in our case our target subscription is this subscription only so we don't need to do anything uh so we still need to configure this but even if you don't configure see what is what is going to do it's saying that it's it's going to create a target resource group west coast rgasr but i think since we have already created a resource group we have probably customized this and used that particular resource group the rest i think i might you know leave it as default where you are just going to be preparing your existing resources nami convention with a dash asl extension so let's see what they're saying so click on customize and as we as we thought they might do is cost are these what we have chosen everything else i think they are keeping it as as default and over here they're asking us to keep the 24 hours retention policy recovery point retention 24 hours at consistent snapshot frequency four hours and replication group is none so let's come over here so let's uh do some customization on it all right let's just customize this uh if you click on it now what is gonna happen uh replication policy i'm gonna use the default one name recovery point retention and app consistent like if you click on you can you can you know change all of that and do you want to enable multi vm consistency i'm not gonna do anything like that uh click okay uh here is what i need to customize for the target resource group so here this is the one that i'm gonna choose the rest of it okay i'm just gonna uh i'm going to accept the asl vignette acer let me make sure that is what if they are also acer independent so everything else i think they are choosing over here cash storage they are asking us to take a look at it cash storage do i have existing ones uh let's see they are created that everything is new so yeah i'm not going to change anything over here i'm just going to let it create whatever it needs uh and target availability type single instance and we have not configured any availability zone so that's fine i'm not going to change anything in this one either either so we have done that in the target resource group we have done that for each vm change the cache storage to is a cash xxx interesting so it's they are they want us to change this so let's do that uh for here let's see can we change that how do we change that new i don't think it's letting me change to anything oh there oh i see the castle we have already created a cash storage account so they're just asking that use that particular storage account okay so let's see yeah that's the storage account that we have already created so two things that we did we have uh created uh we have created the resource group before we are trying out this replication and we also created this resource group where we are gonna try out this application and just to be double sure let's go to porter and oh i'm not even logged in that's interesting all right so uh we are in uh just click on the storage account and that one should this is the one is a cache so if you look at it this one we have already created in the west coast resource group so what is gonna what's gonna happen all the replication that is going to happen they are going to store anything that needs to be cast in this particular storage okay and then from this storage we will transfer all the data to the other other region so that all looks good i'm going to say okay okay so i think we have configured most of it so we should be good and at this time enable replication is only other thing that we need to do right so we don't need okay i still have to do something create target resources is what you need to click on it and that is going to start the deployment of whatever is needed for this whole process and it's going to do some stuff let's look at it if it's if you said it must have been in that direction that we were not following it very closely but we are in the same place they were here now you need to click on enable replication for the two vms now this process may take some time so let's go back over here and if you see it says monitor replication in progress and uh what you can do you can go to the recovery services fall and the amount of monitoring we are going to select the recovery services job so let's let's try that so from here we are here so recovery services jobs you can if you click on that [Music] you see that create a replication policy it was successful little bit ago one that is successful we are we have started this process and this is in progress so we're gonna monitor this for a while and then once this is done we'll continue with the lab so i'm gonna pause the video and be back in few seconds all right everyone we are back and it seems like uh all of our replication has been successful and you can look at the log and so we looked at this one and then create a site create protection container create the site preparation container map networks associate replication policy enabled replication protection configuration finalized protection on primary something primary virtual machine all of that is successful okay now if you want to know more about any particular event you can click on that so this finalized protection on recovery virtual machine that event or that log it's actually a combination of four other things okay so you can do and look at it uh that way as well so let's say uh what else we need to do uh to do to the next phase okay so here also they're asking us to look at the logs and two of these jobs will make the most time to complete and um if you select either of the enable replication jobs you will see that installing mobility surface and preparing trouble steps can take between five to ten minutes so just remember those two steps uh they take little longer so here is most likely one so i'm just looking at the time right so that took a while and you can also do and order by the duration and the other other job so these two took a lot of time and the protection configuration looks like it took only about one minute for us but it could take a little bit longer in your case okay so we have done this so let's look at a little bit more on over here replicated items if do we have anything yes we do so here this also this once your application is done the replication health status would show up it should be healthy okay if the replication can be done properly and the status needs to be protected before you can do an application so at this time you can click on it you can do a test failover and a complete failover you can do disabled replication if you like at this time as well but we know that the two machines they are ready new site replication agent update is available click to install this is something you have not seen i'm not going to do anything right now on this one let's do what we need to do so as part of the next thing you really need to do is run a disaster recovery drill and what does it do so before you do a full replication you want to do some testing that's pretty much all we need to do so let's think about this okay next what what we're going to do we're going to create a recovery plan and steps are given over here and it's uh fairly simple so what we'll do we'll go to uh under the manage in our vault under manage we'll go and select the recovery plans okay so come over here so over here the manage they're talking about in this left hand section manage okay under manage you have a recovery plans site recovery so that is what you're gonna choose and and we need to create a recovery plan okay so let's click on that one and we're going to configure the way they are asking us to do uh we're going to use this name in the name field so let's do that so name field we have that source uh we are going to choose the use us2 because that's where we have all of our resources deployed right target is his tvs2 allow item with deployment model and this one most likely we're gonna choose arm so resource manager as we expected uh selected item zero and from here click on selected items and choose if your components to vm and then okay so here you can choose whether you only want to do this uh this plan for one vm or multiple i'm just going to choose both of them and hit ok ok so now have this set up and it says up to 100 protected instances can be added to recovery plan so what do you need if you have more just create more multiple plans okay so hit okay and it should create your recovery plan just fine so at this time we are ready to run a test failover using a recovery plan now you can do this using going to the individual vm as well or you can do this using a recovery plan as i said and this time we are going to use our recovery plan to do our testing okay uh so what you need to do if you click on it okay this this view has now uh shown up right let's go back over here so what it says uh asr dear drill that's the name of it so if you look at this one now this plan setting customized taste fade over and failover see so these two buttons are now available so if you click on the test failover it will start the deployment and testing of that to virtual machine from the source to the target regime okay let's see what they're asking us to do so here they are saying just click on the test failover and do the setting uh the network configuration field support for each vm can take several minutes so that's fine so here let's just first click on a test failover and it should give us the new window right over here uh okay over here you see that it's gonna fail over direction from west to east they are grayed out you don't you don't need to choose anything and for this one you can choose any of it i'm just going to choose the last process just to save time now as your virtual network we have created this asr dnet asl we're going to choose that one okay now let's see if they're asking us to choose the same network or not select a sub vnet issue as there is a version of order yes that everything looks good here they're actually asking to choose the app for latest app consistent recovery so let's maybe change that to latest app consistent and come back so we have done all of that and then all you need to do is click ok so this experience is same if you do this via a particular vm which is already been replicated so now pretty much what you need to do you need to taste this failover for a little while and see how it's going okay so if you come over here again you go back to monitoring under site recovery jobs you have a detailed idea what is going on so let's go back over here go to monitoring and site recovery jobs okay so test failover this is now in progress that we started and it's you can like review now what is going on with this particular test failover so let's see select test failover and you can also choose this and it's going to give you the more details about what's going on under this one so it looks like prerequisite check was successful recovery plan failover is in progress and we have two virtual machines in this group okay so it's also giving you what wall this is the wall the recovery plan is this and here's the job id here it looks like you can cancel the job at this time if you like you can also look at the environmental details and stuff like that okay so we're gonna wait for a little bit and once this job is done we'll continue with the video again so let's just give it a couple minutes or maybe five minutes and we'll come back all right everyone it only tooks like probably five minutes or so and it's just just failover is now successful okay so let's see what else do we need to do so if you can look at the job maybe if you want to look at some more into this you can click on it and you should see that every single one sorry so every single job is not successful even you can drill down to this one uh it's going to give you the details about each individual machines and same thing over here okay so everything looks good everything is fine our taste failover is successful so at this time you can clean up the resources that are created for your test failover let's see if they're asking us to do that or not all right so once the jobs finished on the far left select virtual machines so let's go over here let's see if we can find the virtual machines in here no it's not in there so it's probably [Music] still under recovery plans under the recovery drill and i don't i don't see let's see over here okay i don't see that so maybe let's go over there go to our monitoring and then again side recovery jobs from this test failover and just look at this okay so here i can now from here i can go to the virtual machine most likely okay so i can this is the virtual machine now let's see if that's what they wanted us to wanted us to do okay so okay dashboard from there directly they're asking us to go to the virtual machine so we can do that from here uh we can just search for the virtual machines and i think what we are trying to prove that we have we now probably have more virtual machine and this there are two hr records test patient records test now you see these two are now deployed in the east us location or east us two location right so these two we have they are actually running and they are in the primary location and during the test failover we have created this two virtual machines which are deployed in the east us let's see in theory we should be cleaning up this uh let's see all right so if you come back over here um select one of the new vms and then lift setting and networking and just review the networking real quick so if we can come back over here in these two i can choose any of this and go to the networking and if i go to the networking it should give us our networking options like this is the network interface it has got created it's got a private uh ip address a public no public copy address but uh everything else is over here okay excuse me so we got that let's go back and if you want to look at how it's a design and you can click on the topology and it should give you the general network topology so that's the asl v-net asap that we have select at the beginning and under this we have a default subnet and inside the subnet i have that particular virtual machine okay so we have verified that once we satisfy test results make sure to capture any notes about the test outcome okay and again as i said once the test machines you don't want to keep them forever you want to clean up one or clean up the resources once you are satisfied with this test and how to do that so let's go back to our recovery services vault it's recovery services fall from here that's the wall that we have under this fault we created recovery plans here's our plan and if you actually go back and show you what it says recovery services plan and current job it says clean up test failover pending so we it says that we have not done the cleanup so you can really clean click over here as well to go to this uh let's see from here can you do that no from not here so where is it so let's click on this one more why is it coming give me this particular so this is where i want to be okay so this is the acer wall and here is the button you see that it you just need to click on that one and it will start your cleanup process so here you can put some note like i am satisfied with the test failover okay so what's going to happen if you hit ok you would think that it's going to delete the test machines that it just created so let's see what happens just give it a little bit of time again looks like everything that we do they show up under our monitor and then site recovery job so there we go so it showed up so just give it a couple more seconds and we'll be back all right it looks like the test failover cleanup is now successful so that's excellent so go back to your overview okay so again you can go back to your [Applause] protected items and then replicated items they should be here and what we can do now you can do a failover on individual vms from here or again you can go back to recovery plans site recovery and what you can do you can do a failover right now and start the field of a process now this available process is going to take some time this probably take longer than anything else and this failover this is from west to east okay and then you can again choose the app consistent if you like and when the real test a real failover is happening it will shut down the machines before beginning the failover so whatever in your primary region they will get set off so just make sure that you are doing it at a convenient time okay and so if i hit ok again this is starting and just like anything else monitoring and if you go to the site recovery jobs this is going to show up you can again click on this one to see the details of what's going on so let's give it maybe five minutes or so if it's deployed then we'll probably end the video here you can if you go to the exercise they are talk they will talk about some more about uh failover and feeling back using side recovery feeling bad back is exactly the same as uh fail over so feeling back is when maybe you had the digit recovery you had to fail over but then you have fixed everything in your primary region you want to bring your resources back to the primary region again and the process is going to be exactly the same your direction would be in that case from east to west in this case and that's about it okay the other thing is something called the re protection the reproduction if you want to do this you got to do it at the vm level and you would be running uh this set of commands over here which i'm not gonna go over in this particular lab okay there's some other useful things and this is like how you feel back and as i said it's just going to be you know you're still going to choose the failure for everything else you're going to choose the similar way and you just move your resources from west to west so that's pretty much what we wanted to cover uh in this particular lab it was probably one of the longer labs here we have learned really protect how to protect your azure infrastructure with azure site recovery so we have done whole bunch of different things in here we created a site recovery plan we created uh deployed resources in the west created a resource group in the east then created a virtual network in the is created a storage account in the west for for the use of our recovery purposes then created a recovery services fault in the east and using that vault we configured our application policy then replicated our machines we performed the test failed over and finally when we were satisfied at the end we are doing our failover so i'm still going to give it a couple more minutes as soon as it's done one last thing that you have to do when this is successful you still have to go um to the status of the virtual machine and you have to say you have to hit the commit to accept the replicated vms in the new region and we'll see that and and we'll end the video right after that i'm just pausing be back in a couple seconds all right it looks like our failover is done so all of this deployment has been successful so what i want to do at this time check over here one more time just failover is successful so now we can go to our replicated items and here it should also say the status is failover is completed so let's click on that one and what you see over here the replication health is no longer there because failover is completed so you know there is you have not defined a new failover a new policy for the new message that god created in the is to waste we have not created anything but at this time what you need to do come up over here click over here and you gotta say comment okay comment okay so now you want to comment the virtual machine once commit you cannot change the recovery point yeah i say yes and this is committing this failover which is successful and do the i guess that one yeah they do the same thing for the other one as well and say okay and this is doing it you might be able to do that from your serve recovery services plan as well most likely so if you click on that one if you don't if you want to do that for the both vms at the same time all you need to do is click on the comment okay and uh it will do do everything for you now if you want to re-protect the new machines that got deployed so that means it will start replication of those newly deployed machines which will become primary back to the waste us which will become the secondary so you can go through and re-protect that one all right that's all i think i wanted to cover in this video so you should have a very good understanding of how to create a recovery services vault and especially how to go through the replication method and what you really need uh as an infrastructure for the whole process so if you're studying for this exam uh one three three hundred levels three or three three or four good luck with that thanks for watching the video please leave your comment subscribe and good luck again

Channel: Cloud Security Training & Consulting

Views: 3,020

Keywords: Recovery Service Vault, Azure, AZ 303, AZ 304

Id: huQVRYmVynQ

Length: 44min 42sec (2682 seconds)

Published: Fri Jul 31 2020