ESX 3.5, iSCSI and Cisco 3750
I have a pretty basic or newly created three ESX environment 3.5 servers, switches from NetApp for storage and a battery (two) of Cisco 3750.
IM using for my data vmfs iSCSI store and will only run about 15-20 VM at best. This isn't a great environment but I want to plan for future growth and I won't get a second chance to get the stack of 3750 correct configuration.
I have 2 GB ethernet by the host to the storage and 4 GB of my NAS ethernet ports all converge on the stack of Cisco.
Can someone point me to a cisco config guide or the white paper which can guide me for the installation to take advantage of the cross battery etherchannel and balancing of load on the side of esx?
Suggestions?
Experiences?
Advice?
Much appreciated in advance.
Hello.
While it's not hardware Cisco, Scott Lowe has some excellent articles on this subject.
http://blog.scottlowe.org/2007/06/13/Cisco-link-aggregation-and-NetApp-vifs/
http://blog.scottlowe.org/2008/10/08/more-on-VMware-ESX-NIC-utilization/
Good luck!
Tags: VMware
Similar Questions
-
I was not able to get the VDS to talk to the physical switch (Cisco 3750 running IOS 12.2 (53) SE). I tried many different configurations. Can what comments you make on how to get this working. Here are 3 different configurations I tried:
Installation: I have 3 servers vSphere4 attached through 2 connections each to a Cisco3750. I created a dvSwitch and added the VLAN (100) primary and selected secondary 101 of VLAN (isolated) and the secondary VLAN 102 (community). Communication on the PVLANS work in the ESX servers as they are supposed to, but I can not connect on these PVLANS Cisco switch.
The 3750 is in talks with the firewall on vlan 100, but will not speak for here ESX Servers configurations I tried and all have failed. What I am doing wrong?
Configuration 1: (affecting the switchports promiscuity and the use of the mapping of layer 2 to pvlans)
VLAN 100
private - vlan primary school
private - vlan association 101-102
!
VLAN 101
name PVLAN_Isolated
private - vlan isolated
!
VLAN 102
name PVLAN_Community
Community of private - vlan
!
interface FastEthernet1/0/1
Description ESX_VM_Trunk_Ports
switchport private - vlan mapping 100 101-102
switchport mode private - vlan promiscuity
spanning tree portfast
spanning tree enable bpduguard
!
interface FastEthernet1/0/2
Description ESX_VM_Trunk_Ports
switchport private - vlan mapping 100 101-102
switchport mode private - vlan promiscuity
spanning tree portfast
spanning tree enable bpduguard
!
interface FastEthernet1/0/3
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport private - vlan mapping 100 101-102
switchport mode private - vlan promiscuity
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/4
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport private - vlan mapping 100 101-102
switchport mode private - vlan promiscuity
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/5
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport private - vlan mapping 100 101-102
switchport mode private - vlan promiscuity
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/6
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport private - vlan mapping 100 101-102
switchport mode private - vlan promiscuity
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface Vlan100
Description «PVLAN» primary
74.X.X.X 255.255.252.0 IP address
no ip redirection
private - vlan mapping 101-102
Configuration 2: (definition trunk port to the VLAN as its primary VLAN native)
VLAN 100
private - vlan primary school
private - vlan association 101-102
!
VLAN 101
name PVLAN_Isolated
private - vlan isolated
!
VLAN 102
name PVLAN_Community
Community of private - vlan
!
!
!
interface FastEthernet1/0/1
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport trunk vlan 100 native
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast
spanning tree enable bpduguard
!
interface FastEthernet1/0/2
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport trunk vlan 100 native
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast
spanning tree enable bpduguard
!
interface FastEthernet1/0/3
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport trunk vlan 100 native
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/4
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport trunk vlan 100 native
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/5
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport trunk vlan 100 native
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/6
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport trunk vlan 100 native
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast trunk
spanning tree enable bpduguard
interface Vlan100
Description «PVLAN» primary
74.X.X.X 255.255.252.0 IP address
no ip redirection
private - vlan mapping 101-102
config #3 (affecting the trunk port vlan native 2 - another thing that the vlan primary - on the trunk ports on ESX servers)
VLAN 100
private - vlan primary school
private - vlan association 101-102
!
VLAN 101
name PVLAN_Isolated
private - vlan isolated
!
VLAN 102
name PVLAN_Community
Community of private - vlan
!
!
!
interface FastEthernet1/0/1
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport vlan trunk native 2
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast
spanning tree enable bpduguard
!
interface FastEthernet1/0/2
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport vlan trunk native 2
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast
spanning tree enable bpduguard
!
interface FastEthernet1/0/3
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport vlan trunk native 2
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/4
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport vlan trunk native 2
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/5
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport vlan trunk native 2
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast trunk
spanning tree enable bpduguard
!
interface FastEthernet1/0/6
Description ESX_VM_Trunk_Ports
switchport trunk encapsulation dot1q
switchport vlan trunk native 2
switchport trunk allowed vlan 101 102
switchport mode trunk
Speed 100
full duplex
spanning tree portfast trunk
spanning tree enable bpduguard
interface Vlan100
Description «PVLAN» primary
74.X.X.X 255.255.252.0 IP address
no ip redirection
private - vlan mapping 101-102
What I've found, is that Cisco 3750 s are PVLAN informed, but do not support promiscuous chutes for the ESX servers. Only the 4500, 4900 and 6500 s have the possibility of doing circuits PVLAN promiscuity due to their hardware ASICs.
-
NIC teaming + with leaves HP VirtualConnect and Cisco load balancing
Hello
I configure ESX infrastructure running on the blades HP (c7000 enclosure), VirtualConnect and Cisco 3750 switches for the uplink. My network configuration is based on the HP VirtualConnnect Cookbook, scenario 11.
On the ESX Server, I configured a vSwitch with two NICs grouped. Each card can see a different network of VirtualConnect. Each VC network has active SmartLink.
Each network of VirtualConnect is associated with two ports on a Bay of VC. These two ports are the uplinks in Cisco 3750 switches. Cisco switches are configured in a pile, and each port associated with the VC network is configured with LACP.
Here are the facts:
-Each network (Host A and host B) is properly configured for the LACP Protocol, in other words, the links are shown as active/active in the VC Manager.
-Communication of ESX is good.
-Failover and failback function OK.
The problem: I can't get the load balancer to work. All virtual machines use a single bear. I tried different algorithms on the server ESX (source port ID, mac, IP hash hash) and the configuration of the equivalent from Cisco.
I have attached a diagram of the physical network, but also the setting to ports.
What Miss me? Thank you very much
Pablo
Because you want to create technically not a channel in an ESX perspective, you do want to use the hash of the IP. If ESX attempts to send traffic through the two network cards, the cisco switch should drop this package as part of its loop avoidance algorithms. You should be able to check that out in the switch port statistics. You should not use the switch port ID.
Not sure about the promiscuous mode. Who do not have any account, as far as load balancing is concerned, unless the portgroup was not properly inherit the vSwitch properties?
-KjB
VMware vExpert
-
the need to increase the speed of the network on my vpshere 4.1 with cisco 3750
Hello
Must I increase now my network speed on my esxi vpshere 4.1 my switch cisco 3750. the rdp on the erp application is now affected with speed. What would be the best solution on this? each host on my vpshere have two NICs for the network of the vm and vmotion. each network adapter is 1 G and cisco 3750 is the bandwidth of 1 G.
Add multiple NICs for vmotion separated and the vm network? do all the network adapters in vm network stuck for a bandwidth of submission? or do I just have to prioritize the rdp session in my cisco switch? or all will help?
help please, thank you.
It is recommended to separate management, vmotion, storage and LAN VM traffic from each other (or in the case of 10 G, use QOS at the rate limit and separate each type of traffic...
On a standard server with 50 or so VM on it, double 1Gbit nic is much band bandwidth for traffic of vm... and actually on the blades, I saw 2x1GB nic handle all traffic very well...
RDP uses about 121kbits/s of traffic per session rdp (on average)... I highly doubt that the speed of ar causing you performance issues your card network interface, but you should easily be able to tell if you are having problems of saturation of the network with a simple PRTG, MRTG or solarwinds type of surveillance.
-
Issue of Telnet and SSH on Cisco 3750.
I turn on Cisco 3750 and everything so I wasn't able to connect in the area. I even changed the source interface and update transport under the VTY lines input method, no luck.
Can I choose to disable SSH by removing the corresponding lines of configs and RSA keys. And I changed the entry to transport back to Telnet. After the reboot of the switch, I'm still not able to connect despite the fact that the box is accessible.
Any help?
Thank you
Jean-Marie
Hello
This should help to confirm the configuration and troubleshooting SSH on your device: -.
http://www.Cisco.com/c/en/us/support/docs/security-VPN/Secure-Shell-SSH/4145-SSH.html
I hope this helps.
Kind regards
Dinesh MoudgilPS Please rate helpful messages.
-
Hi all
I could really do with help with my Cisco 3750 X; Basically, I use the 3750 as a dedicated iSCSI switch which is connected to 3 Hyper-V servers via 1 GB (each server Hyper-V a 4x1Go connections) and it is also a hybrid storage device connected to the switch using 10 GB SFP +.
Interfaces 1 GB I see quite a few drops of output, but on 10 GB interfaces, I do not see drops of output. I really need to find what causes the output drops, and how I can solve this problem.
That's what I've configured on the switch:
- Extended on a MTU of 9000 frames
- Control flow receive desired is on all interfaces
- Quality of service has been disabled (see issues prior to allowing QoS)
- Spanning-Tree Portfast enabled on all interfaces
I also downloaded the release of some show commands that should help out if all goes well (let me know if there are other commands you want to start).
Thanks in advance for any help that anyone can give.
Disclaimer
The author of this announcement offers the information in this publication without compensation and with the understanding of the reader that there is no implicit or explicit adequacy or adaptation to any purpose. Information provided is for information purposes only and should not be interpreted as making the professional advice of any kind. Use information from this announcement is only at risk of the reader.
RESPONSIBILITY
Any author will be responsible for any damage that it (including, without limitation, damages for loss of use, data or profits) arising out of the use or inability to use the information in the view even if author has been advised of the possibility of such damages.
Poster
You probably are bumping within the buffer of the 3750 X series.
You could update your IOS to the liberation of SE8, doubt that will help you in this case.
The only thing that could mitigate your drops is active flow control, although this can cause latency.
PS:
Jumbo Ethernet deactivation may decrease drops too, if it slows down the effective data transfer rate.
-
Newbie connection DELL 6248 pile to pile of CISCO 3750
Hi all
I need to extend the desktop LAN by connecting a battery of CISCO 3750 existing a new pile of DELL 6248.
I intend to use the fiber/combo harbour in DELL 6248 to connect to the CISCO uplink port.
I want to use DELL port 48 but I saw there was 1/g48 and 1/xg48. From memory, they are mutually exclusive.
Q1. That means I'll just set up 1/g48 and do not enter the config of 1/xg48 of the sentence?
Q2. To connect together the 2 batteries, devrais I defined just two ports to connect as a trunk port? I have no experience in doing so. FOR INFO. We already use VLAN in piles CISCO and so the new DELL batteries must know about it.
Any help will be very appreciated!
Combo ports have a combined input and output of the PHY chip. Only the optical port or RJ-45 port can be used individually, but not at the same time. Any cable is connected will first use the port PHY. If the Ethernet port is used, you will configure with 1/g48, if fiber port is used then set up uses 1 / x 48.
Yes, you are right, a network connection is what you want between the two battery. Commands on the switch PowerConnect looks like this.
Console > activate
Console # config
Console (config) # interface ethernet 1/g48
console switchport mode trunk #.
console # permit trunk switchport vlan add 2,3,4,5
On the PowerConnect 62xx switches, you must use general mode if you want to allow traffic from management on the switch on the PVID. If you use the Trunk mode, you will not have the default VLAN on these ports. The ports will only allow labeled traffic. So if the Trunk mode does not you, then switch to general mode.
As the pile of Cisco has already VLAN on it, we must ensure to the PowerConnect switch has those same VLAN. Here is an example of creating a VLAN on the PowerConnect switch.
Console > activate
Console # config
Console (config) # vlan database
VLAN console(config-VLAN) # 2
output console(config-VLAN) #.
Console (config) # interface vlan 2
Console # name Marketing
Console # end
Another thing you may perform is place a static route to help the traffic at the back of the battery.
IP route {network} {mask with joker} {Next Hop-IP}
Console # config
Console (config) # ip route 172.16.0.0 255.255.0.0 10.0.0.2
Console (config) # end
I hope this info helps,
Thank you.
-
CISCO 3750: OSPF interface IP unnumbered
Hi Expert,
This is the first time that I'm working on OSPF and IP Unnumbered interfaces.
My task is to adjacencies OSPF put forward two switches CISCO 3750 connected back-to-back by IP of interfaces not numbered. I use the loopback interface to borrow the IP addresses for the interfaces not numbered on both CISCO switches. After trying so many times, OSPF is not at all to come through Unnumbered interfaces but when tried with numbered interface was fine.
I'm pasting here complete running-config. Please help me to solve the problem:
Here is the brief info put in place:
R1(Gi1/0/19) - R (article gi1/0/19)
Swicth R1:
===========
Current configuration: 2129 bytes
!
version 12.2
no service button
horodateurs service debug datetime msec
Log service timestamps datetime msec
no password encryption service
!
Switch host name
!
boot-start-marker
boot-end-marker
!
!
No aaa new-model
1 supply ws-c3750g-24ts-1u switch
mtu 1500 routing system
IP subnet zero
IP routing
!
!
!
!
!
!
!
!
!
!
pvst spanning-tree mode
spanning tree extend id-system
!
internal allocation policy of VLAN ascendant
!
!
!
!
interface Loopback1
IP 10.10.10.10 address 255.255.255.0
!
GigabitEthernet1/0/1 interface
Shutdown
!
interface GigabitEthernet1/0/2
Shutdown
!
interface GigabitEthernet1/0/3
Shutdown
!
interface GigabitEthernet1/0/4
Shutdown
!
interface GigabitEthernet1/0/5
Shutdown
!
interface GigabitEthernet1/0/6
Shutdown
!
interface GigabitEthernet1/0/7
Shutdown
!
interface GigabitEthernet1/0/8
Shutdown
!
interface GigabitEthernet1/0/9
Shutdown
!
interface GigabitEthernet1/0/10
Shutdown
!
interface GigabitEthernet1/0/11
Shutdown
!
interface GigabitEthernet1/0/12
Shutdown
!
interface GigabitEthernet1/0/13
Shutdown
!
interface GigabitEthernet1/0/14
Shutdown
!
interface GigabitEthernet1/0/15
Shutdown
!
interface GigabitEthernet1/0/16
Shutdown
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
Shutdown
!
interface GigabitEthernet1/0/19
No switchport
IP unnumbered Loopback1
IP ospf network point
!
interface GigabitEthernet1/0/20
Shutdown
!
interface GigabitEthernet1/0/21
Shutdown
!
interface GigabitEthernet1/0/22
Shutdown
!
interface GigabitEthernet1/0/23
Shutdown
!
interface GigabitEthernet1/0/24
Shutdown
!
interface GigabitEthernet1/0/25
!
interface GigabitEthernet1/0/26
!
interface GigabitEthernet1/0/27
!
interface GigabitEthernet1/0/28
!
interface Vlan1
no ip address
Shutdown
!
router ospf 100
router ID - 100.100.100.100
Log-adjacency-changes
Network 10.10.10.0 0.0.0.255 area 0
!
IP classless
IP route 20.20.20.20 255.255.255.255 GigabitEthernet1/0/19
IP http server
IP http secure server
!
!
!
control plan
!
!
Line con 0
line vty 5 15
!
!
control the source session interface 1 item in gi1/0/19
control interface of destination session 1 item in gi1/0/17
end
===
The #show switch ip interface brief | include the
The #show switch ip interface brief | include the
GigabitEthernet1/0/17 no undefined upward down YES
GigabitEthernet1/0/19 10.10.10.10 YES manual up up
Loopback1 10.10.10.10 YES manual up up
==================================================
Switch R2:
==================
Switch #sho run
Switch #sho running-config
Building configuration...
Current configuration: 2079 bytes
!
version 12.2
no service button
horodateurs service debug datetime msec
Log service timestamps datetime msec
no password encryption service
!
Switch host name
!
boot-start-marker
boot-end-marker
!
!
!
!
No aaa new-model
switch 1 supply ws-c3750g-24 t
mtu 1500 routing system
allow authentication mac-move
IP subnet zero
IP routing
!
!
!
!
!
!
!
!
pvst spanning-tree mode
spanning tree etherchannel guard misconfig
spanning tree extend id-system
!
internal allocation policy of VLAN ascendant
!
!
!
!
interface Loopback1
IP 20.20.20.20 255.255.255.0
!
GigabitEthernet1/0/1 interface
Shutdown
!
interface GigabitEthernet1/0/2
Shutdown
!
interface GigabitEthernet1/0/3
Shutdown
!
interface GigabitEthernet1/0/4
Shutdown
!
interface GigabitEthernet1/0/5
Shutdown
!
interface GigabitEthernet1/0/6
Shutdown
!
interface GigabitEthernet1/0/7
Shutdown
!
interface GigabitEthernet1/0/8
Shutdown
!
interface GigabitEthernet1/0/9
Shutdown
!
interface GigabitEthernet1/0/10
Shutdown
!
interface GigabitEthernet1/0/11
Shutdown
!
interface GigabitEthernet1/0/12
Shutdown
!
interface GigabitEthernet1/0/13
Shutdown
!
interface GigabitEthernet1/0/14
Shutdown
!
interface GigabitEthernet1/0/15
Shutdown
!
interface GigabitEthernet1/0/16
Shutdown
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
Shutdown
!
interface GigabitEthernet1/0/19
No switchport
IP unnumbered Loopback1
IP ospf network point
!
interface GigabitEthernet1/0/20
Shutdown
!
interface GigabitEthernet1/0/21
Shutdown
!
interface GigabitEthernet1/0/22
Shutdown
!
interface GigabitEthernet1/0/23
Shutdown
!
interface GigabitEthernet1/0/24
Shutdown
!
interface Vlan1
no ip address
Shutdown
!
router ospf 100
router ID - 200.200.200.200
Log-adjacency-changes
network 20.20.20.0 0.0.0.255 area 0
!
IP classless
Route IP 10.10.10.10 255.255.255.255 GigabitEthernet1/0/19
IP http server
IP http secure server
!
!
activate the IP sla response alerts
!
!
!
Line con 0
line vty 5 15
!
!
control the source session interface 1 item in gi1/0/19
control interface of destination session 1 item in gi1/0/17
end
====================
The #sho switch ip interface brief | include the
GigabitEthernet1/0/17 no undefined upward down YES
20.20.20.20 GigabitEthernet1/0/19 YES manual up up
Loopback1 20.20.20.20 YES manual up up
====================================
Thank you very much in advance for your answer!
Kind regards
Aerts
Hi AEK.
the IP unnumbered command does not work on multiaccess-interfaces such as Ethernet (even when you set it up as a point-to-point OSPF):
Understand and configure the IP without order number
Cisco IOS IP Addressing Services Command Reference #ip unnumberd
HTH
Rolf
[EDIT]:
... apparently, with the exception of high range as the 6 k platforms:
Order history
(...)
12.2 (18) SXF: this command has been modified to support the physical Ethernet interfaces and switched virtual interfaces (LASS).
-
Cisco 3750 X - 24 Port stacked: support VRF?
Hello community,
We have 2 x switch WS-C3750X-24 t-S that are stacked through StackWise cables. We would like to activate VRF on it, but orders aren't there. We currently have a basic IP license (which I know is the reason). I tried to do some research and looking at the release notes, but the answer is not clear. I read that it is only available as a stand-alone and not stacked switch. Is - anyone out there know if this device is capable of making the VRF as a battery? If so, what are the requirements?
Thank you
Neocec
Hello
You can use this link to verify what image you want.
Ref: http://www.Cisco.com/go/fn
1 select 'Search by feature' and "Multi-VRF VRF Lite support"
2. Select "" Cisco 3750 x".
Finally, you will see that taken IOS support this feature. Then go to the download page (if you have the right to download.)
HTH,
Toshi
-
NCS and Cisco Security Manager 4.2 servers
Hi all
I spec'ing on two new servers; one is for a box of first NCS and other area of Cisco Security Manager 4.2. I have decided to go with the range servers Cisco UCS, but am a little unsure of something on the said recommended in the datasheet for the AC.
The NCS data sheet
... reads as follows:
******************************
If the first Cisco NCS deployment as a virtual appliance on a server provided by the customer, one of the following versions
VMware ESX or ESXi can be used:
Version of VMWare ESX or VMWare ESXi 4.1
******************************
This means that the NCS software MUST be be virtualized, or can it be installed and simply turn on something like Windows Server 2008? If Yes, through a serious disk image?
Secondly,.
the two servers are running RAID arrays and I was wondering what are your views on the execution of any (OS, Cisco software, records and other data) set on the RAID array, or the OS and Cisco software on a separate boot disk and store data only on the RAID?
I see no reason why it would not run together on the RAID, but I'm curious to know what you think about it.
In addition, we are upgrading our WCS courses and I was wondering if some kind of migration is necessary or can we just install fresh NCS on the server and configure it accordingly.
See you soon,.
-Dave
Dave,
For the first part, the NCS works only as a virtual machine. You can buy the device hardened to it, but it's still a virtual machine, NCS is presented as a .ova.
Regarding separate them, with NCS I don't think you'll be able to.
Steve
-
How to compare premises, iSCSI and storage NFS for VMware ESXi 5 with IO Analyzer?
Hello
I have 2 hosts ESXi 5.0 with a few virtual machines running. I would compare the IO throughput for my local storage, iSCSI and NFS vmware storage store. Can someone point me to the right direction? I read the documents and tutorials, but I'm not sure how to compare tests from these 3 options.
I have a need to compare the following storage options.
Local disk on the ESX host
iSCSI on QNAP NAS device
iSCSI on EMC e 3100
NFS on QNAP NAS device
NFS on EMC e 3100
IOmeter seems to be good tool based on reading, but still not clear where to make changes to pass tests of storage to another.
Thanks in advance,
Sam
If you use IO monitor, then you must simply vmotion the VMS to the data store for the device you want to test, and then run the test (and Records results). Can vmotion for the following data store and repeat.
-
How config FCoe to work with esx4.1 and CISCO?
Hello
I installed a server esx 4.1 intended to test and we want to configure to work with FCoe.
The Esx has a Qlogic 10 G card to do this, we have a problem with our network team.
The cards are regognized as vmnic and my HC is on them, but we now want to make the connection on the
Cisco side so that I could also see the storage.
Is there a manual for config this thing on both sides? VMware and CISCO?
is there something special, that I need the config on my side?
I did not FCoE with Cisco, but I made many configurations with Brocade/VMware & Qlogic FCoE. It works like a charm. In this case, everything I do is:
(1) plug the Qlogic card to the server & get the vmnic up & working with qlogic drivers (I think you are finished with this step, if you have not mentioned about installing qla & pilots qlge on the box of ESX. You all TWO qlge & qla drivers for the Qlogic fcoe card)
(2) after step 1, you should be ready for the FCoE, you don't have to do anything once the ESX box came.
(3) a last step to the area both the FCoE (QLogic) adapter with your target of FCoE in your Cisco box. With Brocade switches, all I have to do is:
(i) set up the port connected as a "fcoeport" to get the connected port
(II) create a box with 2 WWN & add this area to the cfg, & activate this cfg. That's all.
I feel that you do not "installed the qlogic drivers (qlge & qla in ESX yet), just in case if you have not, here is the driver names you need (doesn't have to be exact, just look for the part"qlge"&"qla"):"
VMware-ESX-drivers-net-qlge_400.1.0.0.39-1.0.4.00000.265875.ISO*
VMware-ESX-drivers-SCSI-qla2xxx_400.832.K1.27.1-1vmw.2.17.00000.291979.ISO*
-
Questions about iSCSI and subnets
IM planning on a deployment of 8 ESX servers connected to an array of iSCSI on double dedicated switches.
- 2 cards on each ESX host network is dedicated to iSCSI and VMware dependent ontraffic.
- SAN iSCSI target consists of two controllers with 2 uplinks of iscsi on each controller (4 total)
- The manufacturer of SAN is suggesting setting up of their SAN ports in separate subnets for higher throughput
- For the sake of simplicity lets say assign 10.10.100.1 24 ports SAN 1 & 3 and 10.10.200.1 24-port SAN 2 & 4
- On the side of ESX, a single iSCSI VMKernel address will be 10.10.100.2 and the other will be 10.10.200.2.
My questions:
- do I have to enable trunking VLAN on the side of the switch so that the initiator 10.10.100.2 ESX failover to the port of SAN 10.10.200.1 and vice versa, because they are not in the same subnet and therefore not in the same VLAN?
- If this is the case, will trunking VLAN also solve the problem if we were to buy an identical iSCSI SAN on the road and 2 subnets more setup for controllers, but still only have two cards on the ESX Server.
- I would assign the 2nd ESX Server in this config with the same IP addresses as the first, or I re them with differnet IPs (but obviously still in the same subnet as the storage arrays), for example ESX 1 is 10.10.100.2 and ESX 2 would be 10.10.100.3
Any other associated iSCSI I get with VMware, simply not able to think through this particular obsticle and I don't have the equipment to test it yet. Doesn't help that it's late in my part of the world and my brain power is depleting fast!
Thank you!
I mean really isolated network. No routing between them.
Is the software of multiple paths that can pass a path to another, and if you need one network to another.
Note that the PowerVault will have an interface of a mosquito net and to one another for each processor.
André
-
Hello gurus!
I have a VI 3.5 with FC SAN environment, but now we need more hard drive space. I think the use of ISCSI SAN, but some people says that it is not correct (unstable) to use ISCSI and FC SAN in the same environment.
What do you think of this?
Thank you!
You can always have FC, ISCSI and NFS presented to the same ESX Server, it will not come into conflict each other as long as you do not present the same logic of FC and ISCSI each unit number.
Craig
vExpert 2009
Malaysia, VMware communities - http://www.malaysiavm.com
-
A VLAN is created on a Cisco 3750 G with the last IOS a 'good' way to secure a vmware network? In this case, I'm hiding vmotion traffic, and the entire network is behind a firewall. I realize, it would be better to have dedicated and isolated switch, but it's a VLAN on a reliable and secure Cisco switch? Or safety lies elsewhere, for example, encrypt the vmotion traffic or ACL solid?
Sly-
I think you got it nailed in your post there are some things you need to do when using VLANs to avoid trouble. The vulnerability referred to as Tom has to do with IOS/CatOS decoding of the VTP frames - just like we see in the Windows RPC/NetbIOS or SMB/CIFS vulnerabilities or other remotely exploitable vulnerabilities, it is possible to design a framework with malicious content that could overflow a buffer, string handling (uncommitted entry), double - frees, etc.. This type of vulns found often by "fuzzing" where you create bad images or images partially wrong and feed them in the unit under test, in the hope of finding an accident or create a denial of service. I remember simple tools like CITI (IP Stack Integrity Checker) to validate the equipment running and occasionally would cause you a switch to plant, especially the more IOS. So it is not limited to any control plane protocols such as VTP, this can also happen in the data plan. The data plan is much more robust because it is attack surface area is much more exposed to attacks that the protocols as VTP and a large number of problems have been corrected. If you look back in history, there are tons of questions of security in the Cisco data plan and other gear in less used features as options of ownership intellectual, management, the fragment of the types and codes rarely used ICMP, TCP sequence overflows. Now, I bet that if the security research community concentrated early protocols such as CDP, VTP and STP - you would have seen several vulnerabilities earlier.
So to say "don't use VLANs otherwise, you are vulnerable due to a VTP vulnerability" is equivalent to say do not run IP using Cisco routers/switches when both IP and ICMP vulnerabilities exist in the data plan.
Now, if you had followed that Cisco and other L2 switches providers recommend, you could be not to expose your VTP domain for such attacks and therefore, you are not vulnerable. Just as you would not expose your switches to receive Spanning Tree BPDU or dynamic routing of packets of protocol like OSPF, ISIS, or BGP of unapproved of speakers. Take a look at a blog I posted w/r/t this topic:
http://blogs.VMware.com/Networking/2009/06/lets-talk-security-DMZs-VLANs-and-L2-attacks.html
There is a lot of fear in the community about the attacks of L2, because networks and network devices are often a mystery to people server and a bad configuration L2 could be a source of security and stability problems. It is important to educate the community on the possible exposures, and VMware and other leaders of the market as Cisco take the responsibility to do.
Disclosure on my part - I'm talking to and had operational experience of implementation and now one of the largest networks of data center global worldwide (Global Crossing/GlobalCenter-> later became the exodus-> Savvis) as one of network engineers senior and even 10 years back we would have data center with massive switch of the fabric that the guests accommodated like Yahoo , Ask Jeeves, etc. - isolated and segmented using VLANS. If you go in a large data center hosted today, you certainly would not get your own physical switch and backbone uplink - you would like to share a 6500, a foundry for 100 + often other customers or the great extreme.
Maybe you are looking for
-
Does not begin with satellite C655-S5128 - power problem
My laptop won't turn once I do a shutdown of windows. After it closes completely, when I try the power button nothing happens (or an led, or screen the wind. it does not start) After I remove the power supply and the battery for a minute and put it b
-
iOS 9.2.1 anyone having problems with Safari?
I can open safari, however as soon as I click on the web bar at the top it closes immediately to the bottom of the app! That's it, since I downloaded the new iOS!
-
HP pavilion notebook 15 15-e049ca drivers win7 32-bit
Hi, I have a hp pavilion notebook 15 15-e049ca laptop and I reformatted with a 32-bit win7. Now in Device Manager, I have an exclamation mark beside: 1. Ethernet controller 2. universal Serial Bus (USB) controller 3 unknown Device (ACPI\HPQ6007) * HP
-
Virtualization to support HP P6-2120 not found
Hi, I need to enable virtualization hardware on my desktop Hp p6-2120-aided, but I'm afraid that I don't find it in the BIOS. Does anyone know how to do? Your help is very appreciated.
-
Acer Predator G6 rumble lights do not work?
OK, so had my g6-710 delivered today and it's a beautiful machine to the search + low noise BUT,. 1, trouble I think = the rumble on the side panels lights don't work only one that surrounds the turbo button makes is this normal or failure or can I f