Before you deploy the Infoblox IPAM Plug-In for VMware, complete the following tasks on the NIOS or vNIOS Grid Master or independent appliance. For information about how to perform tasks specific to Infoblox, refer to the Infoblox NIOS Documentation.
Ensure that you have set up a NIOS administrator account with appropriate permissions. For information, see NIOS Permissions Requirements.
- Create a network to use for operations with the Infoblox IPAM Plug-In for VMware. vRealize Automation supports IPv4 networks. For more information, see the section Adding IPv4 Networks in the Infoblox NIOS Documentation.
- After you create a DHCP network, set the IPv4 DHCP options for the network. For information, see the section About IPv4 DHCP Options in the Infoblox NIOS Documentation. Note that IPv4 DHCP options can be used for storing network configuration information in Infoblox (default gateway, netmask, DNS, etc.) both for statically allocated IP addresses and DHCP allocated addresses.
- (Optional) Define DHCP address ranges from which you plan to allocate IP addresses through the Infoblox IPAM Plug-In for VMware. Also define DHCP options on the DHCP ranges. For information, see the section Configuring IPv4 Address Ranges in the Infoblox NIOS Documentation.
- If you use internal DNS servers, create the authoritative DNS zones to be used by the Infoblox IPAM Plug-In for VMware. For the creation of PTR records, you must set up a reverse DNS zone. Ensure that you associate the zones with networks. For information, Configuring DNS Zones in the Infoblox NIOS Documentation.
- (Optional) Set up DHCP network templates that are used by Infoblox IPAM Plug-In for VMware. For information, see About IPv4 Network Templates in the Infoblox NIOS Documentation.
- Create the extensible attribute definitions in NIOS for the IPAM object attributes that are used in the workflows of Infoblox IPAM Plug-In for VMware. For more information, see Using Extensible Attributes in Infoblox IPAM Plug-In for VMware.
Note: Infoblox IPAM Plug-In for VMware is qualified against Infoblox RESTful API (WAPI)2.0+.
NIOS Permissions Requirements
On the Infoblox NIOS system, ensure that the admin and user accounts to be used with the Infoblox Plug-In for VMware meet the following requirements:
- To set up extensible attribute definitions, you must have a NIOS administrator account with GUI access.
To use the Plug-In with the cloud API: Infoblox recommends that the cloud-api-only user account should not be given GUI access in NIOS.
— For NIOS version earlier than 7.3: users must be members of the cloud-api-only admin group under NIOS.
— For NIOS 7.3 and later: users must be members of an admin group under NIOS for which the role “Cloud API” is assigned. This can be any admin group, not only “cloud-api-only”. For more information, see
Creating Superuser Admin Groups in Infoblox NIOS Documentation.
— If the Cloud Network Automation license is installed on the Grid Master, you can assign Tenant permissions to admin users to restrict them to view objects related to a given tenant or a set of tenants.To use the Plug-In without the cloud API: users require API access.
When using host records, read/write permissions are required for host objects in the destination forward zone(s) and for host objects in the destination reverse zone(s):
— The Infoblox IPAM Plug-In for VMware generates an Infoblox host object that automatically creates A and PTR records in the appropriate forward and reverse zones. This implies a requirement for the write permissions to the zone(s).When using individual A/PTR records, read/write permissions are required for A and PTR in the forward and reverse zones associated with those records.
- Read/write permissions are required for the appropriate subnetworks:
— Read/write permissions for NIOS fixed address/hosts is a minimum requirement. The Infoblox IPAM Plug-In for VMware by default adds the host with the MAC address, creating a fixed address in the appropriate subnet.
Read/write permissions to the Grid members or associated appliance:
— The Infoblox IPAM Plug-In for VMware performs a service restart, if enabled, when NIOS adds a fixed address. Without the read/write permissions, the Restart Service call by the Plug-In to the NIOS appliance will not work.
— Note that this release supports disabling restarts. If you choose to disable restarts, the above permission is not required.Read permission to access Grid DHCP Properties:
— This is required for retrieving DHCP options from NIOS for provisioning VMs.