ESX 3.5 Service Console ARP breaks

We have a machine in our cluster running ESX 3.5.0 build 163429.

According to vCenter, the Mac address of the console vmk0 service is 00:50:56:7 C: 30:84.

If I connect via ssh and do/sbin/ifconfig vswif0, I get 00:50:56:40:95:A1.

We have a Nagios server that pings the Service Console once per minute under its health check.

Every twenty minutes, we get on the monitor like this server log entries:

oct 6 17:11:06 monitor kernel: arp: 192.168.1.123 left 00:50:56:40:95:a1 for 00:50:56:7 c: 30:84 on 1 ' IME

oct 6 17:11:06 monitor kernel: arp: 192.168.1.123 left 00:50:56:7 c: 30:84 to 00:50:56:40:95:a1 on 1 ' IME

oct 6 17:31:08 followed kernel: arp: 192.168.1.123 left 00:50:56:40:95:a1 for 00:50:56:7 c: 30:84 on 1 ' IME

oct 6 17:31:08 followed kernel: arp: 192.168.1.123 left 00:50:56:7 c: 30:84 to 00:50:56:40:95:a1 on 1 ' IME

6 oct 17:51:09 monitor kernel: arp: 192.168.1.123 left 00:50:56:40:95:a1 for 00:50:56:7 c: 30:84 on 1 ' IME

6 oct 17:51:09 monitor kernel: arp: 192.168.1.123 left 00:50:56:7 c: 30:84 to 00:50:56:40:95:a1 on 1 ' IME

6 Oct 18:11:10 monitor kernel: arp: 192.168.1.123 left 00:50:56:40:95:a1 for 00:50:56:7 c: 30:84 on 1 ' IME

6 Oct 18:11:10 monitor kernel: arp: 192.168.1.123 left 00:50:56:7 c: 30:84 to 00:50:56:40:95:a1 on 1 ' IME

Does anyone have an idea of what might be happening here?  It seems just as strange and undesirable behavior.

Thanks for your suggestions!

OK, now I'm wondering why you have a vmkernel port named "Service Console" and a vswif port named "Service Console".  In classic ESX and ESXi not, your vmk0 port is not used by the Console of your Service, your port of vswif is, that's why you get arp updates, change the Mac.  You have actually added a duplicate IP address.  Here is my config.  You will see that there is no port vmkernel in use.  If you use this second IP for vmotion, then you need a different IP address for this portgroup.

# vmware - v

VMware ESX 4.0.0 build-171294

# esxcfg - vswif - l

Port Group/DVPort IP IP family name address Netmask Broadcast Enabled TYPE

Service Console IPv4 10.x.x.x 255.255.255.0 vswif0 real 10.x.x.x STATIC

# esxcfg - vmknic - l

Interface Port Group/DVPort IP IP family address Netmask Broadcast MAC address MTU TSO MSS active Type

-KjB

VMware vExpert

Don't forget to leave some points for messages useful/correct.

Tags: VMware

Similar Questions

  • ESX 3.5 Service Console memory

    I run an ESX 3.5 server and it has 800 MB of memory allocated to the service console. We use IPMonitor to monitor our servers and uses 750MO regularly for a while now. Is it necessary to upgrade the service console memory? Then the cause of performance problems?

    Thank you

    Scott

    The important line is the + / cache line, which shows that you have 480 MB of free space.  You're golden and good to go.

    Basically linux (which is the service console) will use 'extra' memory for caching, leading many monitoring programs to believe you have only 26 MB of free space in this case.  Recommend that you find a monitoring program that is more intelligent.

    -Matt

    VCP, vExpert, Unix Geek

  • In the Service Console the path value preferred on vSphere?

    Hello

    We have a problem here.

    Environmental: political vSphere Host, 8 HBAs, path: fixed path of vmware, on 1,000 paths to storage

    To reduce the total number of paths we want to reconfigure our warehouses of data and reduce the number of used HBA for warehouses of test and reference using only 2 of the 8 host bus adapters. We use all the time, then put 6 of them on all our servers of vsphere for people with reduced mobility, only two remain active.

    That is why we have active and people with disabilities with the help of a script on paths of console service - it works very well.

    But after that we reduce active host bus adapters, vsphere seems to forget reset the preferred path (just checked in the GUI). We put vmhba1 and vmhba7 to be active, 0-8 (except no. 6 as is the lsi controller) should be disabled, but on most of these disabled HBA Lun remains the favorite.

    On esx 3.5 service console, we were used to:

    / usr/sbin/esxcfg-mpath - favorite - political fixed = - lun = $lun - path = $: ${lun # *------:}}

    but these options (favorite, political) seem to be outdated since vsphere, which apparently obtained these commands on the api storage?

    Can someone answer the following questions on this issue:

    1 did affect the feature if you prefer the path is one of the disabled?

    2 will be the vsphere host keeps this configuration after reboot (disabled HBA to a lun, active paths)?

    3. is there a new command to set the access path AND / OR politics (MRU, FIXED, RR) to a logical unit number?

    Thanks in advance,

    Kind regards

    Alex

    Hello

    for active/passive, please use MRU;

    as you know, when fixed in use and the LUNS mapped to multiple hosts, 1 host perhaps selects path fixed-to-controller 0 and 2nd host perhaps selects fixed path to controller 1, then the current path will change between two controllers, way stolen here;

    Binoche, VMware VCP, Cisco CCNA

  • How to access the ESX service console

    Hi all.

    I'm a TV engineer trying to solve a problem of network with our equipment. I'm not a network engineer.

    I'm trying to follow the VMWareKB: "Troubleshooting connection problems network using the Protocol ARP (Address Resolution)" I'm just trying to check the ARP table exists on our ESX Server and has some entries.

    KB said running 'arp - a' for a list of the ARP table.

    To do this, I need to open a service console. I have now read articles 3 or 4 on the use of the Service Console but I am still unable to open it to run the command. I do not understand what I am doing wrong, I am incredibly stupid or miss me something completely.

    An article said, press 'Alt F1"exactly where I am doing this? A virtual machine is connected to the ESX? An article said "to VIM summary screen' I tried logging on the virtual machine and point a web browser on the server, I get a screen of welcome of ESX with link"Connecting to Web Access", when I click on it I get"Internet Explorer Can t Open The Web page.

    I had a look at VIM, I can see the details of the Vswitch network on the configuration page, including the IP address of the console service. Can't see how to open a service console. VIM of pointing at the address for service console is unable to do anything.

    I just need to know how to open the Service console and check the tables of ARP based on the KB.

    Please dumb down of your responses to me!

    The fundamental problem is about some units of electric distribution that we use to power the equipment in the racks. They have a network connection which we track using Virtual Machines to the report of a third person of monitoring and control software. The virtual machines are running alarm software driver used to report to the third party. The virtual machine is on a blade server.

    We have a problem where a unit of the IML has been replaced but configured with incorrect default gateway address. In the hours to do so, the monitoring and control software lost connection to ILM and one by one, all units of the IML began to send the ARP requests - "who has 10.172.248.254'.

    Finally, the MDU constantly send ARP requests and the MDU have lost connectivity to the virtual computer. If we open the VM machine, follow up and a MUD, the ping command ping fails, if we put a laptop in place an ILM and ping the machine VM, the ping works fine.

    If power us off/on the ILM voltage they are good, but we are a 24/7 operation and power cycling the MDU is considered risky.

    We have had this problem before and the only solution was to rebuild the virtual machine and assign all MDU to a new network address.

    All switches ILM is connected (foundry Falstron GS) have been verified by the support of our network guys and we are told are all good. The blade server hosts about 20 VM and they work just fine from other systems SNMP traffic monitoring.

    If anyone has any ideas I'm all ears.

    Hello

    As stated, the console is the administration interface that you can use directly on the hardware. It is not a VM (as such) that connect you with the standard management GUI. You can SSH in the network or you can be "physically connected" as you say (I would use HP SIM or the ILO to connect directly to the blade). Once you have that screen upward, press 'Alt + F1' and you connect. Then you should be able to follow the KB to check the ARP table.

    See you soon,.

  • Update of the modules for security issues ESX service console

    Today, I was asked a question on the vervsion of OpenSSH used on the service console for our environment vSphere 4.0. Apparently, there is a vulnerability in OpenSSH 5.6/7 with a certificate which has been corrected in version 5.8. My response to the security team has been we are the 4.3.p2 and as a result, this issue does not concern us. So the following questions then becomes why you are not in the latest version?

    I'm curious to know if someone has already discussed with VMware on these types of security issues where the components used by RHEL, like OpenSSH, are vulnerable. What was their response to attempts to update this kind of things? I guess some of the answers would not be supported, you'll break, if you patch it's no guarantee your fix will not get downgraded, etc..

    I'm looking for is a solid answer that explains why we do not have that kind of stuff to ESX, only when VMware provides the fix. I could contact the support, but I thought her first check and see what others have met.

    Thank you

    Hello.

    I think that all the reasons you mentioned (not supported, you're going to break, if you patch it's no guarantee your fix will not get downgraded, etc.) are pretty much true.  The ESX 4.1 Patch Management Guide stated in the FAQ section:

    When a rpm on my ESX host has an equivalent Linux, can I use the Linux RPM to upgrade my system?
    N ° VMware recommends that you update your host ESX 4.1 with RPM provided by VMware.

    An answer I could use would be to take a step back to look at the bigger picture.  Is a SSH, which should be secluded/protected to some extent in a first time, have a vulnerability more risky than having an ESX host unstable/not supported with X number of VMS running on it.

    Good luck!

  • Command not found in the service console ESX 4.0 u2

    Hi all

    I have a very simple question.

    I have haven´t access to the service console ESX 4.0 for some time and today I need run commands to verify information on some host bus adapters.

    I logged a user then used 'su root' to switch to the ROOT user.

    I use Putty to connect to the Service Console.

    But when I try to execute the following commands it said "Command Not Found":

    vmkload_mod

    esxcfg-module

    I read VMware KBs, that say to use these commands for this version of ESX, but I can´t do run.

    I think the answer is something very simple, but I can´t find it.

    Anyone have any ideas?

    Thank you

    Mark

    Try this command:

    quo

    as documented in http://kb.vmware.com/kb/1006573

  • Comments about "VMware KB: verification of the deprivation of resources of the ESX/ESXi Service Console ' (1003496)

    Hi and happy 2012!

    Is the title of the article VMware 1003496 KB (Knowledge Base) - http://kb.vmware.com/kb/1003496 - "VMware KB: verification of the deprivation of resources of the ESX/ESXi Service Console" (article updated May 16, 2011). A better title might be "VMware KB: searching for deprivation of resources of the Console of the ESX Service / ESXi Tech Support Mode" since ESXi does not have a "Service Console".
    Article also mentions in ESXi running the command "top":
    " (...) ESX/ESXi includes the top utility to be able to check the use of the resources on the service console. (...)"
    " (...)  To check the use of the methods on the service console:
    1. Sign in to your service console of the ESX host as root from a SSH session or directly from the console of the server.  If you connect ESXi Support mode.
    2. Type back to top ."

    However, if you enable the Remote Tech Support Mode (SSH) in ESXi (at least in ESXi 4.1 Update 1) - similar to a "Service Console" - the 'top' command seems to not be available:
    ~ # top
    -Ash: top: not found

    ~ # find /-iname high
    ~ #
    On the other hand, the article could have mentioned "esxtop" which is available in 'ESXi' (at least in ESXi 4.1 Update 1):
    ~ # find /-iname esxtop
    / sbin/esxtop
    I hope this information is useful. I propose that this article (1003496) is updated accordingly.
    Thank you!

    Ricardo, we have updated the article to take account of the ESX Classic only.

    Kind regards

    Stu

  • Address IP of the Service console & Esx server name

    Hello

    How to get the address Ip of the service console & the name of the ESX Server in the data center based on the cluster?

    Property 'Networkinfo"of the esx server does not give advice for Service console Ip address to me.

    Thanks in advance for the answer.

    Try it like this

    foreach($cluster in Get-Cluster){
        Get-VMHost -Location $cluster | `    Select @{N="Cluster";E={$cluster.Name}},
            @{N="Host";E={$_.Name}},
            @{N="Console IP";E={[string]::Join(',',((Get-VMHostNetwork -VMHost $_).ConsoleNic | %{$_.IP}))}}
    }
    
  • Can I create a second service console in ESX 2.5.5?

    Can I create a second service console in ESX 2.5.5?

    Yes, I did in ESX 3. +, but I can not find/check it's ok in ESX 2.5.

    Procedures, orders or comments appreciated.

    ALL POINTS WILL BE AWARDED.

    No, you can not - the service in ESX 2.x actuallys console loads before the vmkernel and has control over its own NETWORK card and the physical memory - in esx 3.x (vSphere) the VMkernel charge first and provides these resources to the service console allowing you to create several service console ports -

    If you find this or any other answer useful please consider awarding points marking the answer correct or useful

  • How to control the service console in ESX?

    How to control the service console in ESX?

    http://www.Petri.co.il/5-critical-VMware-ESX-CLI-network-commands.htm

    http://download3.VMware.com/VMworld/2006/mdc9694.PDF

    http://download3.VMware.com/VMworld/2006/mdc9807.PDF

    http://download3.VMware.com/VMworld/2006/tac0028.PDF

    http://download3.VMware.com/VMworld/2006/tac9689-b.PDF

    http://download3.VMware.com/VMworld/2006/labs2006/VMworld.06.Lab04-performance-manual.PDF

    http://www.RTFM-ed.co.UK/

    PS: If you have found useful messages then please leave a few points

    André

  • What is the service console command to give the IP address of the ESX host?

    What is the service console command to give the IP address of the ESX host? /

    What is the command to give the IP address of a host that has no IP?

    see this

    http://KB.VMware.com/kb/4309499

    It's good to have as well

    http://VMware-land.com/esxcfg-help.html

  • Change an IP of ESX Service Console

    I have a KB that explains this process and it is said to remove the host to vCenter. I could do with the virtual machines on the hosts, but I think I'll lose all record of performance for those VMs. The alternative is to migrate all virtual machines off the coast of the host before withdrawing. I spoke in support and stressed told the KB to remove guests but, they said that I should be able to disconnect and reconnect the host for the change of intellectual property.

    I try to avoid moving VMS around for it because it's going to take more time and require a different level of approvals. I thought if I could just disconnect and reconnect now, I could delete/re-add the hosts later in my next cycle of patch.

    1 does anyone know if the withdrawal of the army is necessary for the Service Console IP change. I know that a disconnect/reconnect will work I did in the past, but I'm not clear if there is something not update or which does not work properly until you remove/re-add.

    http://kb.vmware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 1006946

    Hello

    Were you able to change the IP addresses? Article http://www.wasabi2k.com/?p=69&cpage=1#comment-292 helped you? We have a TPSP to come and try to get the right way to TPSP esx host 4, Vcenter and virtual machines. My server DNS and DB are also hosted virtual machines on one of the servers theseESX.

    Let me know what I need to know.

    Thanks in advance

    Rupesh

  • ESX 3.5: copy files using the service console from a network share to the esx host data store

    Hello

    I wonder. Is there a command that I can run the service console that would allow me to copy a file from a network share on the data store on the esx host?

    Eric

    If sharing is a Windows, you can also use smbclient within the service console and ride sharing.

    André

    * If you found this device or any other answer useful please consider awarding points for correct or helpful answers

  • After that I changed the Duplex parameter on NIC's Service console, I am not able to connect the ESX host

    Hi all

    Please help solve my problem.

    After that I changed the Duplex parameter on NIC's Service console, I am unable to connect the ESX host. How can I reset the 100 MB NETWORK card duplex. Can someone help me please.

    Concerning

    Vijay

    Hello

    As the bulb you have two problems that are not related.

    (1) duplex setting, your switch and NIC must match. If one is assigned to auto-negotiation, then the other must be set to auto-negotiation. Personally, I tend to let auto-negotiation unless there is an absolute reason to spend. If you then turn on the both sides of the interface, the switch port and esxcfg-NICS allows you to change the duplex, etc.

    (2) passwords for root are not related to the network unless you have also run esxcfg-auth authentication remote.  The only time I saw what you have here is when the system is configured to try to authenticate remote and not locally.

    The two problems are fixable by booting into single-user mode, set the duplex and reset the password.

    Best regards
    Edward L. Haletky
    VMware communities user moderator
    ====
    Author of the book ' VMWare ESX Server in the enterprise: planning and securing virtualization servers, Copyright 2008 Pearson Education.
    Blue gears and SearchVMware Pro items - top of page links of security virtualization - Security Virtualization Round Table Podcast

  • Is it ok/possible to add a GUI to my ESX server service console?

    Can I download one of the lightest LINUX GUI and run it from the service console?  Also, how to connect using putty?  Should be on licence somewhere?

    You can add a graphical interface on the ESX console... Can be... but be careful that the console has only a limited amount of Max (above 800 MB) memory and it has been optimized to manage your virtual machines. He is also set to always run on CPU0.

    If you interfaces graphics crashes... it could take down the management of all your virtual machines.

    So the question is "If you do that?", then the answer is no. you'd better not.

    It also cancels your support/warranty. Your ESX Server will be is no longer supported.

    If it's for an experience... go ahead... If you want to run production on this same host... don't even think about it.

    --

    Wil

    _____________________________________________________

    Visit the new VMware developers at http://www.vi-toolkit.com wiki

Maybe you are looking for