flow of traffic inside and off-host vSphere

Similar Questions

• Isolate the vCenter and management host ESXi5.1 of LAN traffic

  I would add two Dell switches to an existing installation, create a private management network (192.168.x.x subnet) containing the hosts and vCenter server, so that the management traffic is isolated and in no way dependent on connectivity LAN... for now that the vCenter server and the hosts are on the local network using public IP addresses.

  Is this possible with vCenter as vCenter that one IP can be configured and how should we switch be configured to allow access to vCenter from the local network via the web and customer management interface vSphere.

  Thank you very much

  Gary

  Facing your audience of LAN?  I think it depends a little bit of what looks like your LAN.  I don't think - you need not NAT your management network.  If you simply use public IPs rather than private to your internal LAN, the answer is no.  I have a client who does this same thing using 191.x.x.x for its internal network.  You try to access your network over the Internet?  It would be a different matter, and I recommend that to consult a competent network engineer.

  In short, just because you go to a public IP address range a private range of IP addresses does not mean you need to NAT.  You see NAT several times when these IP address ranges are used because they are intended.  For example, a company has a single public IP address assigned.  It uses private in its local network IP addresses.  For devices that must leave the LAN and access the Internet, you would NAT because everyone has to share this single public IP.

  Without knowing a little more, I think you'd be fine with the standard range or switching (inter - VLAN routing layer 3).

  All the best,

  Mike

  -----------------------------------------

  Remember to mark this reply 'proper' or 'useful', if you found it useful.

  Mike Brown

  NetApp, VMware and Cisco data center guy

  Consultant engineer

  [email protected]

  Twitter: @VirtuallyMikeB

  Blog: http://VirtuallyMikeBrown.com

  LinkedIn: http://LinkedIn.com/in/michaelbbrown

• How to use vGPU and vSGA both on the same host vSphere 6.0

  I tested vGPU on a host vSphere 6.0 to 6.1 of the Horizon, and I would now add a vSGA pool to this host. Only two physical GPU is used with the two vGPU vm that I turned on.

  My question is, what should I do to make this Host allow compatible vSGA VM turning on and share resources on the other two other GPU?  I put the office pool to use the 'Material' 3D rendering engine and added a VM pool.

  When I try to turn on the virtual machine, I get this error message in vSphere client Web:

  "GPU hardware is required but not available. The virtual machine will not start until the GPU resources are available or the virtual machine is configured to allow software rendering. »

  It's the output of command line gpuvm and nvidia-smi:

  

  The host ESXi 6.0 has two cards of K2 of GRID for a total of 4 GPUS. Only two vGPU-enabled vm is turned on, it seems that I can use the other two GPU for vSGA VM, right?

  It is currently not possible since the Nvidia VIB:s vSGA and vGPU cannot be loaded at the same time.

  The driver will claim all compatible GPU:s (except those configured for passthrough, IE vDGA)

  An exception to this rule is if you have an AMD GPU for vSGA and a Nvidia GPU for vGPU.

  Can't comment on if, and when this will be resolved, perhaps krd can do.

  Linjo

• vSphere Distributed Switch 5.5 traffic filtering and tagging

  Someone had a chance to create a script to update the traffic filtering and marking of area of a group of ports on a vSphere 5.5 Distributed Switch? The settings are only exposed in the web client for Onyx is not an option.

  I need to create a rule with the values below.

  Traffic Filterig and marking:

  Set State enabled

  New rule of network traffic

  Name: name of the traffic rule

  Action: Tag

  CoS value: tag value Update CoS: 4

  Qualifiers of traffic:

  Traffic management: evacuation

  New qualifying traffic system: vMotion

  This is as much as I can get.

  $VDSPortGroup = get-VDSwitch Test - dvSwitch | Get-VDPortGroup Test-PG

  $Spec = new-Object VMware.Vim.DVPortgroupConfigSpec

  $Spec.configVersion = $VDSPortGroup.ExtensionData.Config.ConfigVersion

  $Spec.defaultPortConfig = new-Object VMware.Vim.VMwareDVSPortSetting

  $Spec.defaultPortConfig.FilterPolicy = new-Object VMware.Vim.DvsFilterPolicy

  Sorry, it took a little longer than expected.

  Try like this

  $dvSwName = "dvSw1".

  $dvPgNames = "dvPg1".

  $dvSw = get-VDSwitch-name $dvSwName

  # Activate LBT

  foreach ($pg in (Get-View-Id $dvSw.ExtensionData.Portgroup |)) Where {$dvPgNames - contains $_.} {Name}))

  $spec = new-Object VMware.Vim.DVPortgroupConfigSpec

  $spec. ConfigVersion = $pg. Config.ConfigVersion

  $spec. DefaultPortConfig = New-Object VMware.Vim.VMwareDVSPortSetting

  $spec. DefaultPortConfig.FilterPolicy = New-Object VMware.Vim.DvsFilterPolicy

  $filter = new-Object VMware.Vim.DvsTrafficFilterConfig

  $filter. Nom_agent = "dvfilter-credits-vmware.

  $ruleSet = new-Object VMware.Vim.DvsTrafficRuleset

  $ruleSet.Enabled = $true

  $rule = new-Object VMware.Vim.DvsTrafficRule

  $rule. Description = "name of traffic rule".

  $rule. Direction = "outgoingPackets."

  $action = new-Object VMware.Vim.DvsUpdateTagNetworkRuleAction

  $action. QosTag = 4

  $rule. Action += $action

  $ruleSet.Rules += $rule

  $filter. TrafficRuleSet += $ruleSet

  $spec. DefaultPortConfig.FilterPolicy.FilterConfig += $filter

  $pg. ReconfigureDVPortgroup ($spec)

  }

• One migrated from my virtual machine to another host VSphere and it does not start

  I have a virtual machine that I've initially converted to Hyper-V to host VSphere. After I did it would start very well, but I got up two errors when starting.

  "An IDE controller is found but the VM does not support the option" and

  "A plate supporting the option not found."

  When I looked at the hard drive in the settings it looks like it is not supported. Is it because I badly converted to Hyper-V to VSphere using VMWare Converter?

  But now, I configure VCenter Server and tested a migration of these machines to another host and using the VSphere Client. It does not start now. I get an error message that says.

  "Device 'drive hard 1' uses a controller that is not supported." This is a general limitation of the compatibility of the virtual machine with the selected host ESXi version. »

  Remember that it is the same VSphere host it is running on initially. Any suggestion would be appreciated.

  If it works now - is that correct? n ' forget not to award points useful and/or correct

  I removed these entries;

  ide0:0. FileName = 'PIC-JVM-v0001 - 000001.vmdk ".
  IDE1:0. Present = 'TRUE '.
  IDE1:0.clientDevice = 'TRUE '.
  IDE1:0. DeviceType = "cdrom-raw"
  IDE1:0.startConnected = "FALSE".
  ide0:0. Redo = «»
  IDE1:0. FileName = ' / usr/lib/vmware/isoimages/windows.iso '.
  scsi0:0. DeviceType = "scsi-passthru.
  scsi0:0. FileName = ' / vmfs/devices/cdrom/mpx.vmhba1:C0:T0:L0 '.
  scsi0:0.allowGuestConnectionControl = "FALSE".

  And added to them;

  ide0:0.clientDevice = 'true '.
  ide0:0. DeviceType = "cdrom-raw"
  ide0:0.startConnected = "false".
  scsi0:0. FileName = 'PIC-JVM-v0001 - 000001.vmdk ".
  scsi0:0. DeviceType = "scsi-disk" hard
  scsi0:0. Redo = «»

  Although there is a high probability that the other six you have to do will be similar to this, they will have to be assessed individually and modified accordingly.

  See you soon,.

  Jon

• ICMP failed on inside the remote host by vpn

  A strange problem is then seen that he was working on an ipsec vpn on asa.

  ASA inside: 192.168.100.1 255.255.255.240

  host of the customer directly connected to ASA inside: 192.168.100.2

  tunnel to form properly. When the remote client 10.20.15.5 is crazy to asa, he answers.

  the same ping when tried customer 192.168.100.2 directly connected to the asa on the inside does not work.

  & This also does not bring the tunnel upward.

  of asa ping 192.168.100.1 & vice versa is very good.

  plotter configuration & race packet is attached. Ping between host traffic capture and asa inside the interface only displays not any what exit.

  Help, please.

  Thank you.

  That doesn't sound right.

  If it goes through the VPN tunnel, the traffic will be encrypted, and you shouldn't be able to see the break of your internet service provider.

  Can you please delete the xlate and connections to this host: disable 192.168.100.2 local

• Unable to stop comments and vMA host

  Hi all

  I installed ESXi 4 then vma on esix. Now I am trying to stop all the guest operating system and then host through vM.I am using the script ghettoUPSHostShutdown.pl (check the link http://communities.vmware.com/docs/DOC-11902.

  but when I am trying to run this script, I get following error-

  VI-admin@localhos $./ghettoUPSHostShutdown.pl--host_operation stop - stop - ups_vm MAS vm_operation - timeout 5

  = GhettoUPSHostShutdown.pl START =.

  Info: UPS_MONITORING: vMA

  Info: VM_OPERATION: stop

  Info: HOST_OPERATION: stop

  Info: HOST_LIST: AUTOMATIC

  info: ==========================================

  Info: found host: "IP ADDRESS OF ESXi HOST HERE.

  Debug: Hand: Login by vi-fastpass at: IP ADDRESS OF ESXi HOST HERE

  Info: start the stop on the VMS operation...

  Info: hard power off power Fedora12, no Vmware tools on...

  Info: unable to hard power off of the Fedora12!

  Info: closure of vSphere Management Assistant!

  Info: cannot stop vSphere Management Assistant!

  Info: shutdown complete operation!

  Debug: Hand: Disconnect: IP ADDRESS OF ESXi HOST HERE

  Info: check all virtual machines are either suspended or powered-DELAY set on: 5 min

  Debug: Login by vi-fastpass at: IP ADDRESS OF ESXi HOST HERE

  Info: host: IP ADDRESS OF ESXi HOST HERE has 2/5 VMs still lit!

  News: County: 1 - sleeping for 60secs...

  Debug: Login by vi-fastpass at: IP ADDRESS OF ESXi HOST HERE

  Info: host: IP ADDRESS OF ESXi HOST HERE has 2/5 VMs still lit!

  Info: Count: 2 - sleeping for 60secs...

  Debug: Login by vi-fastpass at: IP ADDRESS OF ESXi HOST HERE

  Info: host: IP ADDRESS OF ESXi HOST HERE has 2/5 VMs still lit!

  News: County: 3 - sleeping for 60secs...

  Debug: Login by vi-fastpass at: IP ADDRESS OF ESXi HOST HERE

  Info: host: IP ADDRESS OF ESXi HOST HERE has 2/5 VMs still lit!

  Info: Count: 4 - bed for 60secs...

  Info: host: completed verification step!

  Info: put the hosts in "stop" mode

  use of uninitialized value in string on line 236 de./ghettoUPSHostShutdown.pl.

  Info: ERROR:

  SOAP fault:

  Error string: error. RestrictedVersion.summary

  Lack of details: RestrictedVersionFault

  Info: IP ADDRESS OF ESXi HOST HERE is now closed!

  Info: finally put UPS tracking VM host int o in "stop" mode

  Use of uninitialized value chain eq /usr/lib/perl5/site_perl/5.8.8/VMware/VIFPLib.pm line 355.

  login_by_fastpass: host name can not be empty in line /usr/lib/perl5/site_perl/5.8.8/VMware/VIFPLib.pm 355.

  Help, please...

  At this vMA 4.0 or 4.1 of vMA and you use ESX(I) 4.0 or 4.1? The script currently supports 4.0 only as it some major changes that currently breaks the script. Also the error tells me too that he is unable to identify targets for the table vi-fastpass... can you also run the following command and provides the output:

  vifp listservers
  

  =========================================================================

  William Lam

  VMware vExpert 2009,2010

  VMware scripts and resources at: http://www.virtuallyghetto.com/

  Twitter: @lamw

  repository scripts vGhetto

  Introduction to the vMA (tips/tricks)

  Getting started with vSphere SDK for Perl

  VMware Code Central - Scripts/code samples for developers and administrators

  VMware developer community

  If you find this information useful, please give points to "correct" or "useful".

• There is a transparent circle at the bottom of my screen with my cursor inside and my touchscreen is unresponsive especially.

  There is a transparent circle at the bottom of my screen with the cursor of the mouse inside and my touch screen has become mainly unresposive.

  With respect to the cursor, I followed instructions stating that "USB input device" under "Human Interface Devices" in Device Manager should be disabled, I found. This seems to have resolved this issue, but I can leave this option off or something will not work?

  Regarding my touch screen becomes mostly unresponsive, sometimes I can scroll in my Firefox browser and very very occasionally I can touch the screen to access something but not normally.

  My laptop is a Sony VAIO

  Product name: SVT1312B4E

  ModelSVT131A11M

  Any help would be appreciated.

  
  

• MWI delayed power on and off between 5 and 40 minutes

  Unity 4.0.2 unified exchange 2000 tsp 7.02 call Manager 3.3 single does site no cluster

  Hi, I have incorporated the above but got 1 problem of stuborn. the mwi on and off voltage indication are delayed by between 5 and 40 minutes, this problem is related to all users. the problem is internal and external calls. I had this problem of troubleshooting for several days. tests indicate that the message does not appear in the unityMTA but takes about 1 minute to appear in the outlook-box users, when I do a refresh on the light lamps work properly. There is no error on the area of the unit or the gc/dc boxes or e2k clients, but several positions designed, it may be DNS. I tried to add files hosts with no joy. basically is there any way that I can retry the record to know what is happening, or is it possible to force a lamp after so many seconds as a work-around. Thank you. Jim.

  I wonder if the Exchange is slow to tell us...

  In the directory \CommServer\TechTools there is a tool called MBXSuite.exe. Once you open MBXSuite.exe select the mailbox you want to monitor. Choose the account that runs the AvMsgStoreMonitorSvr as for RunAs. Click Notifications, and then click mailbox to logon.

  Once it's done leave a new message to the Subscriber. How long does it take to see you

  Notification received

  TABLE_ROW_MODIFIED

  ?

  Thank you

  Keith

• The QoS traffic shaping and shaping tip

  Hello

  Could someone tell me what is the difference between traffic and shaping of edge smoothing?

  Kind regards.

  The main reasons to use the traffic shaping are to control access to the available bandwidth to ensure that traffic is consistent with specific policies and to regulate the flow of traffic to avoid congestion. Some reasons for example for the use of the following traffic shaping:

  Control access to bandwidth when the policy dictates that the average rate of a given interface must not exceed a certain rate.

  Configure traffic on an interface if you have a network with different access rates. Suppose that one end of the link in a frame relay network runs at 256 Kbps and the other end of the link works to 128 Kbps. sending packets to 256 Kbps may cause applications to stop using the link.

  A similar and more complex case would be a network of link layer giving indications of congestion on the terminal equipment of data access with different rate attached devices (DTE). The network may be able to deliver more speed transit to a DTE device to a precise moment than at any other time.

  If you offer a service of low speed, the traffic shaping allows you to use the router to partition your T1 or T3 links into smaller strings.

  The traffic shaping prevents packet loss. Its use is especially important in Frame Relay networks, because the switch cannot determine which packages have priority or what packages should be removed in the event of congestion.

  Specifying the rate of advanced formatting allows you to make better use of available bandwidth by allowing more data than the EIF to be sent if the bandwidth is available.

• Traffic filtering and tagging

  Any body has used traffic filtering and marking for traffic filtering, such as the declining traffic, creating port includes restrictions by vm, or the creation of DMZ as sets of rules, etc.?

  Thank you

  Sam

  Well, you don't need NSX, this is a core feature of the distributed vSwitch available since vSphere 5.5, it allows you to create a layer 2 and layer rules firewall of 3/4 on distributed distributed groups of ports or ports.

  I used it to isolate the virtual machines on the DMZ network similar to what would achieve a PVLAN configuration and I would say that it works pretty good, at least on a small scale.

  Check out these links:

  http://blogs.VMware.com/vSphere/2014/03/vSphere-distributed-switch-traffic-filtering.html

  https://pubs.VMware.com/vSphere-60/topic/com.VMware.vSphere.networking.doc/GUID-67CA4C18-4F18-4E23-A5C7-BC33112D4433.html

• Connect hosts vSphere 4.1 again Virtual Center 5.0?

  We have Virtual Center 4.1 and all our hosts vSphere 4.1.

  I want to install a new VC 5.0 with dvSwitch 4.1.

  Then I whant to disconnect our hosts vSphere 4.1 4.1 VC, and reconnect them to our VC 5.0.

  I have not created any dvSwitch on the new VC 5.0.

  When I reconnect hosts vSphere 4.1 to the new VC 5.0, are the old dvSwitches then created 4.1 on the new VC 5.0, so I did not need to create them, before I have to reconnect?

  When you create the vDS on the new vCenter you will need to create it as a 4.1 vDS your host still being 4.1.

  You must disconnect and remove your host of your old VC (and former vDS) and then an add-in host on the new Victoria Cross.  After you have added the host of the new Victoria Cross you need to connect them to the new vDS.

  Best thing maybe create standard switches on hosts and migrate all your VMS and vmks to that.  Unplug and remove from current VC.  Add the host to the new CR.  Set and migration of networks to vDS.  This will reduce also any potential stop (against briefly during the network of back migration service VDS standard).

  Hope that makes sense.

  Hersey

  MauroBonder Posted the KB which describes the process a little better that I did.

  Post edited by: herseyc

• VI3 vm LUN at the recommendation of hosts vsphere 4.1

  Hello

  "Note: virtual machines created in an environment of ESX 3.x will work perfectly on ESX 3.x and 4.x hosts." However, when you upgrade the virtual machine virtual material it can only run on ESX 4.x. If you have a mixed environment of hosts 3.x and 4.x, do not improve the virtual material until all ESX hosts have been improved in 4.x. "If the virtual hardware is upgraded before upgrading your ESX 3.x host, then your VMs can only lie on your hosts 4.x.

  I'm looking for the best way to get the VM manged VI3.5 platform, servers, and storage in vsphere 4.1 vsphere Platform of servers and storage.

  What that means I can the current map VI 3.5 to a newly configured LUNS ESXi 4.1 vsphere servers and re platforrm inventory the VM from the installed hosts recently updated?

  Can I map the new LUN storage system to the current VI3, 5 and use svmotion.pl to move them from the virtual computer to new LUNS, map the new LUNS to the new servers and re inventory them?

  What that means I can the current map VI 3.5 to a newly configured LUNS ESXi 4.1 vsphere servers and re platforrm inventory the VM from the installed hosts recently updated?

  Yes - there is a minimum change in VI 3.5 and ESXi 4.1 VMFS file system

  Can I map the new LUN storage system to the current VI3, 5 and use svmotion.pl to move them from the virtual computer to new LUNS, map the new LUNS to the new servers and re inventory them?

  You can it is not necessary

  Maybe support - upgrade to VMware vSphere 4 http://www.vmware.com/pdf/vsphere4/r41/vsp_41_upgrade_guide.pdf Guide

• Virtual LAN with guests and the host only

  Hello

  I have a win server 2008 r2 host and a couple of virtual machines.

  I want to create a VLAN that contains the host and guest of the virtual machine. I intend to host the domain controller.

  I put the network connection from the guest to "host-only '.

  Then I tried ping between the guest and the host. Ping fails. "request time out" @host and "destination host unreachable'@guest.

  Firewall is turned off on both.

  What could be the problem? Is there another way to reach my goal?

  Kind regards

  Dembele.

  Did you stop the firewall service, or you have turned off the firewall? Stopping the service does not work.

  In any case, take a look at for example example 4 in the http://support.microsoft.com/kb/947709/en-us for how to configure ICMP (ping) settings.

  André

• Off-host backup methods (like HDS ShadowImage, EMC BCVS, etc.) works in a virtual machine?

  HI Experts,

  Off-host backup methods (like HDS ShadowImage, EMC BCVS, etc.) works in a Virtual Machine (if the volume to be backed up is created on RDM)?

  This means that each such VM who have need to have backup off-host using ShadowImage have their LUNS dedicated (using RDM) and not on VMFS volumes.

  Any suggestions greatly appreciated.

  Jaikrit Negi

  (VCP, NCDA, BCCFP, ASFS)

  If you find this answer useful please consider giving points by checking the correct or helpful answer.

  I'm not sure it's really a 'problem '.  If you take a snapshot of the side storage (BCV, NetApp snapshot, whatever) you're after a point-in-time backup.  The fact that changes to virtual RDM will make a delta file while the snapshot of the virtual machine exists doesn't make much difference insofar as what is in the snapshot storage - except that he has invited at least FS compliant (compatible app is another debate).  You always have a snapshot of time point, and it is always the data that exist when you trigger the process.

  So, with virtual mode, you can use instant VMware (using RAS as VMware tools are installed) and get a consistent snapshot of comments-FS.

  Physical RDM mode, it's tools, usually from the storage provider, in the prompt flush/being suspended.  NetApp SnapDrive one is an example of this.  SnapDrive one uses the same win32 calls to rinse the NTFS.  You can put SnapManager for Exchange, SQL, SharePoint, in addition to this, and now you're app - are as well.

  You can make snapshots of storage of data a VMFS or NFS warehouses.  You would need a script or a tool to clean virtual machines.  There is an example of a very simple script in NetApp TR3428 (http://www.netapp.com/us/library/technical-reports/tr-3428.html), or if you actually NetApp, you can use IVMS (http://www.netapp.com/us/library/technical-reports/tr-3737.html).  These scripts don't rinse apps by themselves, but depending on the application, you can incorporate pre/post scripts in the virtual machine.

  Enjoy!