Isolate the vMotion and storage traffic?

Similar Questions

• Question on isolate the vmotion traffic.

  Hello

  I have a question, we try to isolate the vmotion traffic and I have a problem.

  I have two vswitches.

  Vswitch 0

  only management option selected, 10.85.85.4, 255.255.254.0 subnet, gateway 10.85.85.1, trunk, VLAN 85 port

  Nic0 and nic 1

  vswitch 1

  VMotion selected only, 10.85.80.2, subnet 255.255.255.0, gateway 10.85.80.1, access port, VLAN 80

  When I change the default GW on vswitch 1 change the default GW on vswitch 0 also and I lose
  connectivity.  I understand that you cannot have two vmkernel of GW, if this is not how to fix this?

  Thank you

  Greg

  It is correct as long as vmotion ports are on the same subnet, there will be no need for routing - whther vlan can span the main switch is a matter of idfferent.

• Isolate the VMotion traffic

  I can't find other reasons to isolate the VMotion traffic, other than to keep the information unsecurred that they are exposed to the rest of the network.  Is a VLAN for VMotion only a safety precaution?

  Hello

  It is not required to devote vSwitch for VMotion, defining the right policy for the use of network cards is enough.

  Not sure I agree with that, but it's because of the layer 2 issues more than anything else. It's okay if you APPROVE VLAN. If you do not trust VLAN because of the possible layer 2 attacks within your physical network so it is not acceptable.

  There are two reasons to separate the VMotion traffic:

  (1) performance. When you need VMotion you want as quickly as possible, you don't want it was contesting with disk i/o or any other network IO. In generally, it was acceptable to share networks VMotion and SC SC being generally low use unless you're cold migration of virtual machines from node to node, etc..

  (2) security. You absolutely want VMOtion to be separated. Think what you are doing, you transfer the image memory of the VMs on a wire in CLEAR TEXT. Is that if you flip the bit that says to use SSL to ensure this. Despite this, SSL MiTM may be possible (not tested yet). Images of memory contains identifying information. Hackers love this type of data.

  So yes, security is the main reason... Are enough VLAN? It depends on your level of TRUST in virtual LANs as well as your security policy.

  Best regards

  Edward L. Haletky VMware communities user moderator, VMware vExpert 2009, url = http://www.virtualizationpractice.comvirtualization practical analyst [url]
  "Now available: url = http://www.astroarch.com/wiki/index.php/VMware_Virtual_Infrastructure_Security' VMware vSphere (TM) and Virtual Infrastructure Security: securing the virtual environment ' [url]
  Also available url = http://www.astroarch.com/wiki/index.php/VMWare_ESX_Server_in_the_Enterprise"VMWare ESX Server in the enterprise" [url]
  [url =http://www.astroarch.com/wiki/index.php/Blog_Roll] SearchVMware Pro [url] | URL = http://www.astroarch.com/blog Blue Gears [url] | URL = http://www.astroarch.com/wiki/index.php/Top_Virtualization_Security_Links Top security virtualization [url] links | URL = http://www.astroarch.com/wiki/index.php/Virtualization_Security_Round_Table_Podcast Virtualization Security Table round Podcast [url]

• County of vMotion and Storage vMotion over the last 24 hours

  I am under the below a line to count the number of vMotion and Storage vMotion, which happened in the past 24 hours in the middle and it not give me the required result, but when I combine them in the script that I use to collect additional information, it's just returns 0 (zero) as the County.

  Rely on Storage vMotion and vMotion

  Get-VIEvent - MaxSamples ([int]: MaxValue)-start (Get-Date). AddDays(-1) |

  Where {$_.} GetType(). {Name - eq "TaskEvent" - and $_.Info.DescriptionId - eq "VirtualMachine.relocate" - or $_.Info.DescriptionId - eq "StorageResourceManager.applyRecommendation"} |

  Measure-object | Select-Object - ExpandProperty County

  Get-VIEvent - MaxSamples ([int]: MaxValue)-start (Get-Date). AddDays(-1) |

  Where {$_.} GetType(). {Name - eq "TaskEvent" - and $_.Info.DescriptionId - eq "VirtualMachine.migrate"} |

  Measure-object | Select-Object - ExpandProperty County

  Combined script

  Get-Cluster |

  {ForEach-Object

  $Cluster = $_

  $VMHost = $Cluster | Get-VMHost

  $CpuUsageMhz = $VMHost | Measure-object-property CpuUsageMhz-sum | Select-Object - ExpandProperty sum

  $CpuTotalMhz = $VMHost | Measure-object-property CpuTotalMhz-sum | Select-Object - ExpandProperty sum

  $MemoryUsageGB = $VMHost | Measure-object-property MemoryUsageGB-sum | Select-Object - ExpandProperty sum

  $MemoryTotalGB = $VMHost | Measure-object-property MemoryTotalGB-sum | Select-Object - ExpandProperty sum

  $Cluster | Select-Object - property @{Name = "ClusterName"; Expression = {$_.} Name}},

  @{Name = 'vSphere HA'; Expression = {$_.} HAEnabled}},

  @{Name = 'Analysis HA-Host'; Expression = {$_.} ExtensionData.Configuration.DasConfig.HostMonitoring}},

  @{Name = 'HA-Failover capacity'; Expression = {$_.} ExtensionData.Summary.CurrentFailoverLevel}},

  @{Name = 'HA-Admission Control'; Expression = {$_.} HAAdmissionControlEnabled}},

  @{Name = 'Configuration problem'; Expression = {[string]: join (",", ($_.))} ExtensionData.ConfigIssue | {{(Select-ExpandProperty FullFormattedMessage))}}.

  @{Name = 'vSphere DRS'; Expression = {$_.} DrsEnabled}},

  @{Name = "The DRS automation level"; Expression = {$_.} DrsAutomationLevel}},

  @{Name = "Use of the CPU (Mhz)"; Expression is {$CpuUsageMhz}},

  @{Name = "Cpu (Mhz) Total"; Expression is {$CpuTotalMhz}},

  @{Name = 'Cpu use (%) » ; {Expression = {[Math]: Round(100*$CpuUsageMhz/$CpuTotalMhz)}},

  @{Name = "use (GB) of memory"; Expression is {$MemoryUsageGB}},

  @{Name = "Total (GB) of memory"; Expression is {$MemoryTotalGB}},

  @{Name = 'use of memory (%) » ; {Expression = {[Math]: Round(100*$MemoryUsageGB/$MemoryTotalGB)}},

  @{Name = 'VMS NB'; Expression = {$_ |} Get - VM | Measure-object | {{Select-Object - ExpandProperty County}},

  @{Name = 'Virtual machines without VMXNET3 NB'; Expression = {$_ |} Get - VM | Get-NetworkAdapter | WHERE-object {$_.} Type - not "Vmxnet3"} | Measure-object | {{Select-Object - ExpandProperty County}},

  @{Name = 'VMotions NB'; Expression = {$_ |} Get-VIEvent - MaxSamples ([int]: MaxValue)-start (Get-Date). AddDays(-1) | Where {$_.} GetType(). {Name - eq "TaskEvent" - and $_.Info.DescriptionId - eq "VirtualMachine.migrate"} | Measure-object | {{Select-Object - ExpandProperty County}},

  @{Name = 'SvMotions NB'; Expression = {$_ |} Get-VIEvent - MaxSamples ([int]: MaxValue)-start (Get-Date). AddDays(-1) | Where {$_.} GetType(). {Name - eq "TaskEvent" - and $_.Info.DescriptionId - eq "VirtualMachine.relocate" - or $_.Info.DescriptionId - eq "StorageResourceManager.applyRecommendation"} | Measure-object | {{Select-Object - ExpandProperty County}}

  } |

  Export-Csv "C:\Script\Clusters.csv" - NoTypeInformation - UseCulture

  Could you please someone check the script above and let me know if there is something wrong

  Thank you!!

  But wait a minute, you mean that the "Num vMotions" and "Num of SvMotions" properties have a value of 0?

  This is normal, since you ask for events for the entity of the group, while you should do it for all the virtual machines in the cluster.

  Try the attached version.

• Random virtual machines after vMotion and Storage vMotion network loss

  Hi all -

  I have a couple of tickets open with VMware and our supplier of SAN, EqualLogic, on this issue.  Since the configuration of our production and DMZ clusters we noticed that the virtual machines will sometimes drop network connectivity after a successful vMotion and Storage vMotion.  Sometimes, although much less frequently, virtual machines also spontaneously lose network overnight.  What happened only a few times.  The strange thing is that the other guests on the VM host are fine - they lose any network.  Actually, I can do no more than 3 computers virtual host to another, and 2 of 3 can switch correctly, so that we lose the network.  The work around?  Simply 'disconnect' from the virtual NETWORK card 'reconnect' and the virtual machine will start the return packets.  I can also switch the VM troubled return to the host State and it will find the network.  I can it reboot and re - win network.  I can re - install the virtual card completely, and she re - win network.

  VMware has seen a lot of mistakes of SAN in our log files in order to update us our SAN firmware to the latest version.  That seems to have fixed that but we still have the issue.  Here are some of the specifications - all environments are virtually identical except for memory:

  Of PowerEdge R810

  NICs Broadcom 5709

  EqualLogic SAN running 5.0.5 F/W

  We use frames.  ESXi is fully patched.  I haven't seen a boss or not, it is only some guest operating system that loses the network, but we are a Windows environment.

  When a virtual machine loses the network, we can not:

  • Ping to it
    
  • Ping it
    
  • Ping him at the virtual machines on the same host or vSwitch
    
  • Ping outside our network
    
  • resolve DNS, etc..
    

  I followed some KBs VMware without success, including:

  http://KB.VMware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 1003839
  http://KB.VMware.com/selfservice/microsites/search.do?cmd=displayKC & externalId = 1002811 (port security is not enabled)

  -All the VMware tools have been updated to the latest version correct and corresponds to the ESXi host
  -Connected to the service ESXi console, I cannot ping the VM problem by name of host or IP address, but I can ping do not affected by the issue of the OTHER virtual machines.  I can also pings the service console.
  -Connected to the troubled virtual machine itself, I cannot ping other virtual machines, I can't resolve host names, I cannot ping by IP.  The machine virtual CAN ping itself by IP, but not hostname.  I cannot ping other virtual computers on the same virtual switch or network by either IP or host name.  I can't ping the vSwitch network management.
  -All vSwitches are configured in the same way and the same.
  -Notify the switches is set to yes
  -There are a lot of available virtual ports
  -We tried the E1000 and VMXNET virtual cards with no difference.
  -All cards are configured to negotiate, but we tried to force individuals speeds as well as with no difference

  I appreciate your help.  I have problems getting anywhere on this issue with the sellers.

  wkucardinal wrote:

  Still having the issue...

  Sometimes, it might be useful to really check that all uplinks VMNIC for all VLAN does work them. Try this is to create a new portgroup on the vSwitch used by your virtual machines on the host of the first, put a test VM on the portgroup, then go into the NIC teaming policy from the new portgroup and select "Override switch command failover."

  Then down vmnic all except one in unused, then only a single VMNIC is active. Then set the portgroup VLAN to a production of VLAN and try to see if we could ping some expected from the different addresses. If it works, then move VMNIC work until unused and move up to another asset. Try again, and this for all the vmnic. If it works, then you have verified that the configuration of VLANS and other settings are correct on the physical switch in the face of this host ports.

  If several VLANs, repeat the process for all other productions VLAN. Then repeat on the other hosts.

  While that may take some time, occurs if everything is properly configured on the physical switches. When occurs a vMotion virtual machine gets a new "Port code" and is assigned to a new outgoing VMNIC. If there is an error of configuration on one or more physical ports that might seem random, but may still happen on VLAN x on y VMNIC. Given that Port ID policy you use indeed spread randomly VMs on the vmnic these problems may be difficult to diagnose. (Make a disconnection of the VM vNIC gives the virtual machine a new port-ID, which it will move to a new outgoing VMNIC, which might seem to solve the problem.)

• Problem with the importation and storage of library

  I have sewing miss the logic in the import and storage of the photos in the library. This causes a situation that whenever I need a picture I need to go to C: and import it. My library is almost empty and I don't see how the images can be stored. In any case, this has created situations where I open the import window and I can see the pictures, but I can't access somehow? I get same messages telling me that there is that a dublicate somewhere, but where, remains a mystery. I am so set on logic in windows to manage and store files and which confuses me maybe? Is there a tutorial "how to import and store your images in Lightroom? Enlighten me about the logic of this.

  Thank you

  Lightroom is a database; not a file browser. A file Explorer "focuses on" your records, sees that the pictures are here and allows you to work with them. Lightroom does not. He knows only the photos that have been imported into Lightroom. Once the photo is imported into Lightroom, then Lightroom knows the location of the photo and it's metadata and you can perform tasks (such as editing on the photo). At no time does Lightroom contains your photo. At no time Lightroom stores your photo. But since it is not a file Explorer, if you move or rename or delete the photo outside of Lightroom, then Lightroom no longer knows where's the picture (it is not a file browser) and if the photo is reported as missing (it has a question mark icon) and you can no longer perform tasks on this photo.

  Therefore, once you import a photo in Lightroom, you must perform all the management of this photo of in Lightroom. This means do not move or rename or delete the photo in your operating system or another program. You will need to browse/search the photo in Lightroom, not your operating system. All the actions performed on the photo must be done in Lightroom.

  Why? A database allows you to organize in a way that is not possible (or possible but very difficult) to do in your operating system. The main tool of organization ensuring (in my opinion) by Lightroom's keywords. Keywords and other metadata (captions, titles, collections, etc.) give you the opportunity to organize in ways that folder organization cannot reach.

  In addition, Lightroom allows you to simplify your workflow (if you want). My workflow is very simple. In my workflow, there is no need to move photos from here to there, to reach the organization. A photo comes out a camera and is placed in a folder by default (by date of capture), and he never moves out of this folder again. Instead, I use the keywords and other metadata to enable me to quickly find my photos, and another advantage is that I don't no need to know the pictures are found in the folder. With 22000 photos, I just can't remember what they are stored in folders - it is a task that is impossible for me to do. However, I can find any photo quickly; for example, if the content of the photo is a skyscraper, I simply tell Lightroom to find all my photos that have the keyword "skyscraper" and Lightroom will find that almost instantly and I didn't even have to know which folder the file was in. It is difficult for me to imagine a simple workflow.

  Note: you can continue to use the files as a method of organization, you don't have to use keywords, but you must "respect the rules of Lightroom" and use Lightroom to move pictures from here to there, and you must use the methods of Lightroom to rename your photos; etc. And of course, if your organization only be made via the files and folders, you do not get profits of keywords and other metadata.

  Then, I suggest you do the following with your workflow:

  Import photos into Lightroom once and only once. After that, there are all the management of the pictures that have been imported into Lightroom. Photos should be assigned keywords as appropriate and enter captions, titles and other metadata. All the searching and browsing of photos that were imported should be made in Lightroom, preferably using keywords and other metadata.

  References:

  http://forums.Adobe.com/docs/doc-3682

  http://TV.Adobe.com/watch/getting-started-with-Adobe-Photoshop-Lightroom-5/Lightroom-5-IMP orting your images.

  http://TV.Adobe.com/watch/getting-started-with-Adobe-Photoshop-Lightroom-5/Lightroom-5-org anizing-your-pictures.

• Absent the privacy and storage room in Control Panel

  In Chrome, Miss me the privacy and storage room in the same Adobe Flash Player settings panel in non-private windows navigation/incognito mode. Other browsers work fine. Please check image as an attachment.

  

  Relocation of browser resolved the problem.
  Thanks for your help fpMonster!

• Peut funtion Vmotion and Storage Vmotion with Intel and AMD hosts within the same cluster

  Hi, I can do storage Vmotion OR Vmotion between Intel and AMD hosts within the same group?

  Thank you

  No, it is not possible to vmotion or storage vmotion between CPUs from different manufacturers - I heard rumors that two manufacturers are working on technology that will help in the future-

  If you find this or any other answer useful please consider awarding points marking the answer correct or useful

• Isolate the vCenter and management host ESXi5.1 of LAN traffic

  I would add two Dell switches to an existing installation, create a private management network (192.168.x.x subnet) containing the hosts and vCenter server, so that the management traffic is isolated and in no way dependent on connectivity LAN... for now that the vCenter server and the hosts are on the local network using public IP addresses.

  Is this possible with vCenter as vCenter that one IP can be configured and how should we switch be configured to allow access to vCenter from the local network via the web and customer management interface vSphere.

  Thank you very much

  Gary

  Facing your audience of LAN?  I think it depends a little bit of what looks like your LAN.  I don't think - you need not NAT your management network.  If you simply use public IPs rather than private to your internal LAN, the answer is no.  I have a client who does this same thing using 191.x.x.x for its internal network.  You try to access your network over the Internet?  It would be a different matter, and I recommend that to consult a competent network engineer.

  In short, just because you go to a public IP address range a private range of IP addresses does not mean you need to NAT.  You see NAT several times when these IP address ranges are used because they are intended.  For example, a company has a single public IP address assigned.  It uses private in its local network IP addresses.  For devices that must leave the LAN and access the Internet, you would NAT because everyone has to share this single public IP.

  Without knowing a little more, I think you'd be fine with the standard range or switching (inter - VLAN routing layer 3).

  All the best,

  Mike

  -----------------------------------------

  Remember to mark this reply 'proper' or 'useful', if you found it useful.

  Mike Brown

  NetApp, VMware and Cisco data center guy

  Consultant engineer

  [email protected]

  Twitter: @VirtuallyMikeB

  Blog: http://VirtuallyMikeBrown.com

  LinkedIn: http://LinkedIn.com/in/michaelbbrown

• Query vMotion and Storage vMotion events

  Hello

  I found the attached script on the site of Alan and it works very well in the listing of vmotion for a period of time selective event. I have been asked to do the same thing for Storage vMotion and would like to try this if possible in a single query.

  Thank you

  Take a look at get vMotion/svMotion history.

  When you have events, it will be easy to calculate meters through a Measure-Object cmdlet.

• Need details on the tablespace and storage used by the queue oracel

  Hi all
  
  I'm working on the lines of the Oracle. I need some details about the storage space of the queues.
  
  1. is it mandatory that we have space separate for the queue table? What will happen if we run out of table space? Lose us data?
  2. how much storage space is required for a queue of the oracle?
  
  Please suggest me on this.

  Hello

  946965 wrote:
  1. is it mandatory that we have space separate for the queue table? What will happen if we run out of table space? Lose us data?

  No - it is not necessary to separate queue objects, you can do however purely for the simplicity of space management, but is certainly not a requirement. Space missing in a storage space for a queue is not different to press space to a normal process - Oracle will trigger an error ("ORA-xxxxx cannot extend... ") and the process trying to NQ to the queue will fail or do what it has been coded so that error." So, if your code NQ did something stupid mistake so I guess it's possible loss of data in case of error (not only exhausted space) but in general I'm expecting the process to report the error and stop.

  946965 wrote:
  2. how much storage space is required for a queue of the oracle?

  It is depends entirely on how you plan to use the queues, queues are not generally intended for long-term data storage, they do not perform well for this - they work better with the message in. message on (enqueue | dequeue) so unless you intend to leave messages in the queue for long periods of time I expect no significant space consumption. But only you guys can really work it to according to the type of user data and how long messages remain in the queue.

  There are some useful notes on My Oracle Support on the management of the space occupied by the queues which is very important for performance, for example
  How can I reduce the high watermark (HWM) of advanced queue objects? (Doc ID 421474.1)

  Hope this helps,

  Paul

• two 6220 switches connected to the towing and storage Equalogic servers

  any suggestion for the discrepancy between the switches of towing configuration

  For redundancy of the switch, you would stack the switches. See page 59 of the guide: http://dell.to/1MVFCsU , he will learn more about the feature and set it up between the two switches.

• pix basic problem the incoming and outgoing traffic.

  I have a problem with the ping command. I can ping to workstations on the network 192.168.100.x but I can not ping to the output interface (e0) on the same network.

  The second problem is that I can ping from outside to inside, ive set the ACLs and static route but did not work.

  I just want to pc1 to be able to get through pix for pc 2 and vice versa. Please give me an example of configuration.

  Here is the config:

  6.3 (4) version PIX

  interface ethernet0 car

  Auto interface ethernet1

  Automatic stop of interface ethernet2

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  nameif ethernet2 intf2 interieure4

  activate the password xxx

  passwd xxx

  pixfirewall hostname

  fixup protocol dns-length maximum 512

  fixup protocol ftp 21

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol http 80

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol sip 5060

  fixup protocol sip udp 5060

  fixup protocol 2000 skinny

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol tftp 69

  names of

  access-list acl_out permit icmp any one

  pager lines 24

  Outside 1500 MTU

  Within 1500 MTU

  intf2 MTU 1500

  outdoor IP 192.168.100.1 address 255.255.255.0

  IP address inside 192.168.1.1 255.255.255.0

  No intf2 ip address

  alarm action IP verification of information

  alarm action attack IP audit

  history of PDM activate

  ARP timeout 14400

  Global (outside) 1 192.168.100.150 - 192.168.100.200 netmask 255.255.255.0

  NAT (inside) 1 0.0.0.0 0.0.0.0 0 0

  Access-group acl_out in interface outside

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  AAA-server GANYMEDE + 3 max-failed-attempts

  AAA-server GANYMEDE + deadtime 10

  RADIUS Protocol RADIUS AAA server

  AAA-server RADIUS 3 max-failed-attempts

  AAA-RADIUS deadtime 10 Server

  AAA-server local LOCAL Protocol

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  Telnet timeout 5

  SSH timeout 5

  Console timeout 0

  Terminal width 80

  Cryptochecksum:xxx

  : end

  Hello!

  If you are not able to ping to interface external of the pix from the inside of the host, but able to ping to the host outside the internal host. It is very good. As it is the safety device designed in pix, ASA. You cannot ping the ip address of the pix of the host connected to the other interface.

  Regarding the other question, please try the following command:

  Global 1 interface (outside)

  static (inside, outside)

  WR mem

  CL xlate

  Where is the free public ip address in the pool which can be used to map the pc1 inside.

  Another configuraiton seems perfect. If you have any questions, feel free to contact me.

  Thank you best regards &,.

  Harish Tandon

  [email protected] / * /.

• question of vMotion and storage vMotion

  I have everything set, UCS 5108, ESXi host, VMs, I don't have a SAN connection yet... My question is if I can enable vMotion? Let's say I have a cluster in vCenter, within this group, I have attached two ESXi host, win2008 VM in an ESXi and running, I can migrate (using vMotion) as win2008 VM to an another ESXi without connection SAN?

  How storage vMotion to an ESXi host hardrive to an another ESXi host hardrive? Is this possible?

  Note: I have not connection SAN in this configuration

  One of the requirements for vMotion is shared storage that would allow visibility between source and destination ESXi hosts. (SAN, iSCSI or NFS).

  http://www.VMware.com/PDF/vSphere4/R41/vsp_41_dc_admin_guide.PDF

  pages 210 to 215

  You can use OpenFiler as an iSCSI for lab tests SAN

  http://www.Openfiler.com/community/download/

  Thank you

  Zouheir

• How to configure vMotion and storage?

  I'm trying to set up with vMotion HA. I can see how the virtual appliance can be moved to another physical server. How to configure storage, so that data are available on the new server?

  Thank you.

  You cannot share your local storage space. That is unless you use a third-party application that turns your local storage space in your storage SAN Lefthands VSA. Think of it like this, you have two servers ESX (ESX1 and ESX2) you have a virtual machine with the disk it's on ESX2. If ESX2 fails, off, etc. it is impossible for the drive be accessible. HA is still based on a shared storage access to the virtual computer files.