New to VM, network config question

Similar Questions

• watching storage NFS since FC storage, have network config question

  I have a lot of hosts running ESX3.5 U3. 4 network cards each have... 1 SC, 2 for VM, 1 for SC2 and VMotion. My question is when I go to use storage NFS I should use the vswitch which has the port of VKernel configured on it, correct? and I can only have a VKernel port on a host, correct? If those who are both good while I have my storage VMotion traffic and NFS on the same vswitch (NIC), correct? for my tests, I added a quad-port nic to a couple of hosts and predicted the addition of these NICs to the existing vswitch SC2/VMotion.

  current:

  vmnic0 = SC (vswitch0)

  vmnic1 = VM (vswitch1)

  vmnic2 = VM (vswitch1)

  No nic (vswitch2) network

  vmnic3 = VMotion/SC2/NFS (vswitch3)

  Futures:

  vmnic0 = SC (vswitch0)

  vmnic1 = VM (vswitch1)

  vmnic2 = VM (vswitch1)

  No nic (vswitch2) network

  vmnic3 = unassigned or add to VM vswitch network

  vmnic4 = VMotion/SC2/NFS (vswitch3)

  vmnic5 = VMotion/SC2/NFS (vswitch3)

  vmnic6 = unassigned or add to vswitch3

  vmnic7 = unassigned or add to vswitch3

  control at will!

  You can have multiple vmkernel ports, but not on the same subnet.  If you segment your NFS traffic in a separate network, you can create another vmkernel port to take advantage of this way.

  In addition, the only reason to have multiple sc ports is if you didn't trust your configuration VLAN switch.  To provide redundancy, I pair a 2nd NETWORK card with the first port of sc and get the hardware redundancy rather than adding complexity with a 2nd service console IP.  Then use a 2nd pair for vmotion, a 3rd pair for the vm traffic and a 4th pair for NFS.  That would give you redundancy at each layer, and if you use separate network segments with each type of data, provide you a better level of security as well.

  -KjB

• No aaa new-model in the config

  Hi all.

  First Cisco router and first post so please be gentle.

  I did a search on it and I get the same as in the post that see the deliverance

  Router (config) aaa new-model #no

  IOS 12.4 (24)

  I erased the router and when I got it.

  I had configuration, a little as I wanted as a reference point.

  I saved.

  I then started to work on the wireless part of the walk through is because:

  Router (config) #aaa new-model

  Router (config) #.

  So, I went back and tried to erase this line in the config file.

  Yes, I did:

  Router (config) aaa new-model #no

  Router (config) #exit

  router #wr

  See the router # running

  I continue to see the no aaa new-model line in the config.

  So I erased the whole thing to help:

  router #write clear

  and

  router #reload

  said no to save and then default to the last question.

  All recharged and it seemed to be back as before, but then exits show run this OK not how long I erase and reload:

  Router > en
  Router #show run
  Building configuration...

  Current configuration: 1331 bytes
  !
  version 12.4
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  router host name
  !
  boot-start-marker
  boot-end-marker
  !
  forest-meter operation of syslog messages
  !
  No aaa new-model
  !
  !
  dot11 syslog
  IP source-route
  !
  !
  !
  !
  IP cef
  No ipv6 cef
  !
  Authenticated MultiLink bundle-name Panel
  !
  !
  !
  !
  !
  !
  Archives
  The config log
  hidekeys
  !
  !
  !
  !
  !
  interface Dot11Radio0
  no ip address
  Shutdown
  base speed - 1.0 2.0 basic basic-5, 5 6.0 9.0 basic-11, 0 12.0 18.0 24.0 36.0 48.0 54.0
  root of station-role
  !
  interface Dot11Radio1
  no ip address
  Shutdown
  Speed - Basic6.0 9.0 basic - 12.0 18.0 basic-24, 0-36.0 48.0 54.0
  -More-
  * 23:40:09.207 Jan 16: % LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, modified root of station-s role
  !
  interface FastEthernet0
  no ip address
  Shutdown
  automatic duplex
  automatic speed
  !
  interface FastEthernet1
  no ip address
  Shutdown
  automatic duplex
  automatic speed
  !
  interface FastEthernet2
  !
  interface FastEthernet3
  !
  interface FastEthernet4
  !
  interface FastEthernet5
  !
  FastEthernet6 interface
  !
  interface FastEthernet7
  !
  interface FastEthernet8
  !
  interface FastEthernet9
  !
  interface Vlan1
  no ip address
  !
  interface Async1
  no ip address
  encapsulation sheet
  !
  IP forward-Protocol ND
  no ip address of the http server
  no ip http secure server
  !
  !
  !
  !
  !
  !
  !
  !
  !
  control plan
  !
  !
  Line con 0
  line 1
  Modem InOut
  StopBits 1
  Speed 115200
  FlowControl hardware
  line to 0
  line vty 0 4
  opening of session
  !
  end

  Is there a way to remove that line from the config, or it is stuck and if stuck is there any effect of him?

  Thank you very much

  Maurice

  Hello Maurice.

  Just to confirm: you want the 'no aaa new-model' command to be removed from your config? If so, this is the default when AAA is disabled on the device. If you want to enable AAA, then just run the same command without the 'no '.

   aaa new-model

  Then save your config:

   write mem

  For more information about this and other controls, you can reference 'Command search tool' Cisco

  https://Tools.Cisco.com/support/CLILookup/cltSearchAction.do

  I hope this helps!

  Thank you for evaluating useful messages!

• Integrate the new routers BGP network Nexus 5 K

  Hello

  I'm having a little trouble wrapping my head around how to do it.  We have an existing network that consists of Nexus 5 K in the data center.  We are now trying to design and implement a new site in the new network.

  I have attached a diagram of the network in question segment.

  To simplify the management of roads, we want to integrate the new routers in BGP network (both routers 2900 are new).  What I'm having lot to grasp, is how to intigrate the new existing network from the network.

  In a lab, I am only able to implement the VRF, BGP using RD & RT scenario.  From my understanding and correct me if I'm wrong, if I use RD and RT. on the 2900 s I would need the same configuration on the Nexus for traffic.  Under normal circumstances I might just add RDs and RTs to the N5K but then I also need to go to all other locations and configure them as well.

  I would be grateful for comments on how I can integrate these new routers with the existing network and maintain routing Dynamics using BGP.

  Thank you

  If all inter the VRF routing is handled by the firewall, then your installation program can be quite simple.  You probably don't want BGP/MPLS on the dark - fiber link

  lets say it was a vlan per VRF.

  (1) If you can import/export routes on the 2911 on the main site of each VRF see other VRF routes. If you want to only route through the firewall there is not need to do. In fact, as far as I can see that you want to import and export routes, you simply use subinterfaces on the firewall to control the flow of traffic.

  The way to completely isolate the traffic is-

  (1) extend the VRF all the way from the main site to the remote site. Do you this by creating some subinterfaces on dark fiber between the 2900 connections s and then place each subinterface in the corresponding VRF.

  (2) on each LAN interface facing the 2900 s you again create the same subinterfaces and assign in the corresponding VRF.

  (3) to each LAN interface run you a trunk to the switch. (Not sure what you have on the remote site). In the primary site of this trunk would go to the Nexus switch and there would then be a trunk of the Nexus switch to the firewall. If it were a vlan by VRF there was no need of lass on the Nexus switch.

  By VRF you can then run a protocol for routing if necessary for example. EIGRP or OSPF.

  With the above, the only way for any device in a particular VRF to communicate with any other device is via a firewall interface. There is no import and export from any road. Are not in the VRF subinterfaces on the firewall and the firewall has a global routing table that contains all the routes each VRF and you strictly control access with a stateful filtering.

  If you could not use subinterfaces on dark fiber connections, you can always watch GRE tunnnels.

  The foregoing assumes that it is a vlan per VRF. If several VLANs, so there is a need of lass on the Nexus if routing between VLANS in the same VRF could be done. It is the same on a remote site.

  If you do not run BGP to import and export on the 2900 s then you then trade routes between VRF. If the default gateway of customers has been set on the firewall then you should always get separation but if the customer has changed the door of the subinterface 2900 for example then this device would have within each VRF to VRF other routes.

  So, based on what you described I do not see the need for any import/export routes.

  Does make sense?

  Jon

• New flexible deployed network adapters

  Hello

  I use the library 'Clone, Linux with multiple NICs' item as part of a workflow. My model is a linux VM with 1 NIC (VMXNET), but I usually deploy VMs with 2 or 3 network cards. However, these additional NETWORK cards is created with the type 'Flexible '.

  The workflow, to the Network Config Spec box device, there is a "Get VirtualEthernet several devices", which has the following variables:

  nic1Type, nic2Type, nic3Type, nic4Type.

  I create a new attribute (string) for the workflow and set the value ""VirtualVmxnet3 "for her (found the name here: http://www.vmware.com/support/developer/vc-sdk/visdk400pubs/ReferenceGuide/vim.vm.device.VirtualVmxnet3.html ) "

  Then I assign this attribute to nic1Type, nic2Type, nic3Type, nic4Type

  If I run the workflow, network cards are flexible again.

  What I'm missing here to get a specific type additional network cards?

  Thanks in advance

  Hello!

  If I read correctly the workflow "To get multiple changes in VirtualEthernetCard device", this workflow only uses the type specified to identify existing maps.

  If it creates new network cards, they will be always flexible (he always calls the "getVirtualPcNet32" action).

  Works as expected.

  So I guess you need to build your own workflow clone, by duplicating the original clone workflow and the original "get multiple devices VirtualEthernet" and change the latter to create vmxnet3 adapters.

  See you soon,.

  Joerg

• Virtual network config

  How set up my network LM4 using a closed network and not change the IP address of the virtual machine?

  The physical network config is pretty simple, and I can create a fence where the virtual machine gets a new IP address of the static pool, but I can't work on the creation of a fence without impacting on IP of the virtual machine.

  This should be a common configuration, but it seems to me to miss something.

  You can configure the VM with static IP address.

  StarWind Software R & D

• My new banking partner asks a question have not found an answer to. Firefox support encryption?

  My new banking partner asks a question have not found an answer to Firefox support encryption?

  Of course, it does.

  https://support.Mozilla.org/en-us/KB/how-do-i-tell-if-my-connection-is-secure

• How can I get my new/old office to connect to the internet? I ran to the implementation of new Internet and network connection wizards, nothing happens.

  LAN and WLAN connections

  My old wired desktop xp died, it was the first computer on my home network. My friend just got a new office and gave me an old. I have a laptop which has windows 7 and is connected wireless. It is still plugged in and works fine.  How can I get my new/old office to connect to the internet? I ran to the implementation of new Internet and network connection wizards, nothing happens. When I go to internet connections, it shows that it is connected, but I can't seem to connect. Help, please!

  Hi ShannonStrong,

  ·         What exactly happens when you try to connect to the network?

  ·         You receive an error message or error code?

  You can follow the steps in the Microsoft Knowledge Base article mentioned below and check.

  How to troubleshoot possible causes of Internet connection problems in Windows XP

  http://support.Microsoft.com/kb/314095

  You can also see this article:

  Networking of computers running different versions of Windows

  http://Windows.Microsoft.com/en-us/Windows7/networking-home-computers-running-different-versions-of-Windows

   

  Note: The article also applies to Windows XP

  Let us know if this information useful.

• You will need to create a new ad hoc network every time?

  Long story short, I used this method to share a wired connection with others at work. But every day I have to create a new ad hoc network, because the old network stops working. Is it possible for me to solve this problem?

  Ad hoc by strict definition is for a purpose or in the end at hand; also, by extension, improvised or impromptu. Ad hoc networks are removed when members in network disconnect.

  Create an Ad Hoc wireless network

• New Network Configuration Question

  Out of my element here, have a new building we are evolving towards and want to check the right way to install our network. Rooms include 1 - TZ-200, 1 - LAN + Modem wireless switch dell 1-2824 (data), switch dell 1-2824 (voice), 1 - security DVR. If I configure the TZ-200 to the dhcp server, remove the dsl, taken in the wan port modem dhcp will be the sonicwall pick up the wireless and purge the IP for wireless addresses, as well as configure the remaining ports on TZ-200 LAN will all devices to be on the same subnet/nat for easy access? can provide simple schema, if that helps.

  Forget the feature wireless modem from your Internet service provider. You cannot have two routers 'work' (not in this configuration in any case). The only jobs of the modem is to feed the WAN in the Sonic and the Sonic is one that will manage all SonicOS is designed for, such as the creation and serving Dhcp. unless you are forced by the ISP contract to use the material they gave you, it may be more easy to get just a modem ADSL2 + regular that you can find in any * sale because they are unpopular with the houses of our days.

  To get WiFi in your network, you will fill a WiFi 'something' to one of the LAN in the Sonic ports. It can be of any router wireless of quality home set in Bridge mode (all DLink, Netgear, Linksys, etc, they can all work such as bridges), or a wireless bridge of commercial quality (as Unifi AP).

• Force10 MXL config question

  My MXL blades have been set up by Dell Technology Services and work fine, but I would like to make a few changes now and not being Setup is not a network engineer, I have a problem with the docs I could find on the config of Force 10.  Specifically, I want to do 3 things:

  (1) change the SSH root password

  (2) remove a port to a LAG (port channel) group

  (3) add a new VLAN to some ports in the switch, including the one I just removed the lag, but abandon the SHIFT since the new VLAN

  Can someone point me to a doc that explains how to do this kind of things?

  Also, is it possible to access the console somehow by SSH in the CMC?  I swear I've seen Dell Tech Services people who do somehow, but I don't know how they did it.  Maybe I misunderstood what they were doing.  It would be nice to not have the addresses of IP config exposed and control access through the permissions of CMC.

  Thank you.

  Hi amunter,

  You can SSH to the CMC racadm commands and use to set it up. You just need to use PuTTY or other terminal program and go to the CMC host name or IP address.

  You should be able to change the password in this way

  (Force10) > activate

  (Force10) #config

  (Force10) (Config) #username admin passwd un_mot_de_passe

  _Config_07_29_2014.PDF https://www.force10networks.com/CSPortal20/Knowledgebase/documentation/CLIConfig/FTOS/MXL_9.5 (0.1)

  You can remove a port of a port channel in the channel of the port and using the command config no channel-member interface

  Page 395

  You can assign a VLAN to a port with the command interface vlan id - vlan

  Page 910

• NAT for DVR Config question

  Hai all,

  New to Cisco IAM, I have a Cisco 2811 router with 2 ethernet ports:

  Here is my config:

  2-port ethernet on my router

  1 port 0/0 directly connected to the ISP link

  WAN IP is configured as 122.183.1xx.6 ip and the gateway is 122.183.1xx.5

  1 port 0/1 connected to my local network which is 192.168.1.0 network

  LAN Port 0/1 IP's 192.168.1.200

  Internet works fine

  -----------------------------------------------------------------------------------------------------------

  If I do one that is my IP address?

  I get the IP as 122.183.1xx.42

  My ISP says its a Pool of LAN IP:

  122.183.1xx.43 - 47

  ----------------------------------------------------------------------------------------------------------

  Now I just discovered my DVR outside of my internet network?

  Do I need a NAT to view my DVR?

  If I use an ID DYDNS my 2811 router filters the 37777.how port of release

  DVR IP is 192.168.1.242 port is no 37777

  What is the procedure for nat to a static pool of ip from my ISP? How to unblock port 37777?

  Help to sort it out...

  Thank you...

  have you tried the previous suggestion? I asked for but I don't see everything.

  To check if your ISP blocks or do not do the following:

  1. create an ACL as follows

  access-list 199 permit tcp any newspaper EQ 37777 122.183.1xx.43 host

  access ip-list 199 permit a whole

  2. apply to the external interface

  Router (config) # int fa0/1

  (config-if) #ip group-access 199 in

  3. now Telnet 37777 outdoor port 122.183.1xx.43

  4. check if the th packages hit you box by running the following command:

  See the list of 199 ip access

  If you see numbers of access increases on the front-line ACL meanas your ISP does not block the traffic.

  After doing this. Please send the latest config.

• Network configuration question

  I'm one of our 5.5 hosts replace with new material and want to make sure that I get the right networking. We have unit vcenter and a HA cluster with shared on an EQ San storage and complete double switches for redundancy. My old hosts have 2 quad port NIC, so configure each vswitch with double vmnic for a total redundancy was easy - I split each pair on the physical network interface cards. If one of the physical network cards is dead, I was still all my connections.

  The new host has 1 quad port nic and dual 2 network cards to port. Network interface cards double port match and have tcp offload capabilities, but the quad port does not. I want to use the dual port 2 for my iscsi and vmotion, so that leaves the quad port for my public connections. What happens if the public NIC dies, especially if they vcenter on this host? I know that all the virtual machines will still work, but will they automatically vmotion to other hosts if only the public network fails?

  Thank you.

  NIC failures are very rare. So, I would place too much emphasis on this scenario.

  Is the answer to your question, it depends. HA has a configuration option called isolation response of the host, who controls what happens when the host loses connectivity management. By default, it is configured to leave it powered on. You can change it to Shut Down, which makes sense in your scenario, as the loss of connectivity management means the loss of connectivity to the virtual machine as well. And in this way when management network goes down all your virtual machines is gracefully closed and restarted on another host.

• Can not get working on new facility management network

  I'm trying to connect to my new installation ESXi 6 but I am having trouble.

  Background: Previously, I had 5.1 running on this computer. I use the same configuration of network that I was before. My 3 cards in the machine were 8111f Realtek and so initially, I couldn't install ESXi 6. I bought a Broadcom BCM5751 I think it is on the HCL, but I had a hard time to navigate that sometimes. ESXi 6 is installed with no problems, once this card was present.

  Problem: I can't ping my new ESXi installation. The network configuration has not changed since the previous server, just the physical network adapter is different. The ESXi server can ping its own IP and localhost. The router can ping its own IP (gateway). Or the other cannot ping. Is a static route that is defined in the (unchanged compared to the previous) router, and the router says that the link is active. Router is Mikrotik Routerboard RB2011UiAS-2HnD-po

  Network configuration:

  IP: 10.0.0.6

  Mask: 255.255.255.252 (30-bit)

  Gateway: 10.0.0.5

  IPv6: disabled

  All opinions are appreciated. I can provide more information if necessary.

  Just checked and the card NETWORK is on the HAL

  VMware Compatibility Guide: search for i/o device

  You can try this fix? http://KB.VMware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalID=2035701

  Does not specify v6 but worth it for the moment.

  Someone else seems to see the same question about 5.5 with this card:

  5.5 ESXi host is not able to connect to the network

  Rich

• Mgmnt network vCenter question 5

  Our VMware environment is expanding - we are currently redesigning the network connections.  Can anyone offer recommendations or best practices on the following questions.
  (1) on new construction of host can use another range of IP for the management network without causing problems with already used by existing hosts subnets?  Can I change the IP address of the existing hosts without a reconstruction?
  (2) we are very shortage of Cisco ports.  My Network Services team asking if we can combine the network traffic with vMotion traffic on the same physical connection management.  Which would have ramifications

  be if we allow at the same time?  Unless you have a failure of the host all vMotion activities is controlled manually and very light.  We work (ongoing project) on a DR plan, but have nothing in place.

  Is it 2x1GbE or 2x10GbE?
  If it is 2x10GbE and that you have vSphere Ent +, I'd go for the unique design of VDS using NIOC

  

  Check out this blog on a design layout NIC: VMware vSphere 5 host NIC network design layout and vSwitch Configuration [Major Update] | Tech blog | Blog