Port of vSphere groups 5

Similar Questions

• Substitute a port of Dvs group strategy

  For the life of me I can't understand this point, otherwise I'm just completely missing it in the UI (web client). I put a deposit on a group of ports for uplink "grouping" allowed. I have * taken * this meant that I could change my order of uplink for this group of ports on a host unique, different from all other hosts, because the substitution would allow me too.

  Now, assuming that my thinking is correct, I have no idea where I can change the order of uplink on the specific host. Am I missing something? Thank you!

  Unless I missed something, you cannot set a different configuration of grouping by host based since you are using vDS... substitution option that you authorized, means that you can have a different policy of consolidation of the vDS together, but not for a specific host.

  If you use vSwitch Standard you can do another political collection for each Port Groud and host, but don't not using vDS.

• Setting Port with PowerCLI group permissions

  Hello

  I write a script that creates a pool of resources, add a security group to her permissions and creates then 2 groups of ports on each host in the data center, defines their VLANiD and then add a security group and port group permissions. I managed to go as far as to create the Port groups I can't get to add the security group for port group permissions. I managed to make it work with the resource pool.

  I was wondering if anyone knew how to add a security group AD for port using PowerClI group permissions?

  Thank you

  The New-VIPermission cmdlet does not support newer entities, such as the network.

  This means that you will have to fall back on SetEntityPermissionsSDK method.

  $esxName = 
  $pgName = 
  $user =                   # Ex "TEST\luc"
  $role =                         # Ex "Admin"
  $group = $false
  $propagate = $false
  
  $authMgr = Get-View (Get-View ServiceInstance).Content.authorizationManager
  $perm = New-Object VMware.Vim.Permission
  $perm.Principal = $user
  $perm.roleId = ($authMgr.RoleList | where{$_.Name -eq $role}).RoleId
  $perm.group = $group
  $perm.propagate = $propagate
  
  $esx = Get-VMHost -Name $esxName
  $esx.ExtensionData.Network | %{
       $net = Get-View $_
       if($net.Name -eq $pgName){
            $authMgr.SetEntityPermissions($_,$perm)
       }
  }
  

  ____________

  Blog: LucD notes

  Twitter: lucd22

• Strategy of port security VM group?

  A VMWare health check is conducted by a consultant.  He wrote:

  The virtual Port Group computer security policy are the default and not changed value according to BP AND

  Storage Multipathing strategy is according to BP.

  We wonder what means BP means and how to change the security policy for the Port Group.  We would like to have some knowledge base before discussing with him.

  Your opinion is requested.

  Best practices. They are probably referring to the promiscuous mode, change MAC address and forged pass parameters on the vSS or vDS. Many counselors draw conclusions of VMware vSphere Security Hardening Guide. Google that and it should be the first shot. Our guide will explain each of these parameters.

• Basic questions about the port of Vsphere mirror

  I set up a lightweight VM that would deal with inter-VM traffic. To do this, I want to activate the duplication of port between virtual machines.

  
  

  I have ESXi 5.5 Update 1 installed, use the Vsphere (no webclient) client. I see no duplication of port capacity on my Vsphere Client

  

  I have some very basic questions:

  (1) all documentation I've read involving 'Port mirror' is done via web Vsphere client. Vsphere is provided with Vcenter (please, correct me if I'm wrong)

  (2) only functions with "Distributed Virtual Switch", not "switch vSphere Standard" port mirroring. How can I activate "Distributed Virtual Switch"? What products can I download/install and try (suppose I go to the user a license for 60 days)

  (3) exist what API to enable/disable/setup Port mirroring?

  (1) all documentation I've read involving 'Port mirror' is done via web Vsphere client. Vsphere is provided with Vcenter (please, correct me if I'm wrong)

  Because the mirror of port requires a distributed switch, you will need to vCenter Server and once in vCenter Server, you can the vSphere Web Client of the user or the vSphere Client (c# version).

  (2) only functions with "Distributed Virtual Switch", not "switch vSphere Standard" port mirroring. How can I activate "Distributed Virtual Switch"? What products can I download/install and try (suppose I go to the user a license for 60 days)

  You can download the server vCenter Server (60 day trial) and you'll have an Enterprise Plus version for your ESXi host vSphere.

  (3) exist what API to enable/disable/setup Port mirroring?

  Check the comments of this blog: http://blogs.vmware.com/vsphere/2013/01/vsphere-5-1-vds-feature-enhancements-port-mirroring-part-1.html

• Change the default Port of vSphere Web Client to any other port 9443

  How can I change vSphere Web Client by default Port 9443 for any other port in Windows vmware web client server after the installation of the client web and vCenter camera well?

  You can change the post-install Web Frontend Client vSphere 5.1 port by editing the following on the Server Web Client configuration file:
  

  C:\Program Files\VMware\Infrastructure\vSphereWebClient\server\config\tomcat-server.xml

  
  

  Find the entry below and change the port accordingly:
  

  Then restart the WebClient service to make the change take effect.

• Network design... Need help cont.

  I redid this thread in order to give the points. Here's the original:

  http://communities.VMware.com/message/1515861#1515861

  1. vMotion and HA will not work if you have virtual machines stored on the hard disk of the local server. This is why you MUST use a SAN. Centralized storage allows all servers see virtual machines, so being able to move VMs from server to server is possible (iSCSI, NFS, FC, FCoE). If the virtual machines are sitting on the local server, you can not have HA or vMotion.

  2. don't shoot yourself in the foot and try to start production on 2 network cards. You'll end up with people shouting at you on performance. Get a detailed plan and follow it carefully. Get the right equipment and infrastructure in place first or people will not want to embrace virtualization

  Your installation will work? Yes.  It will be the best performance? N ° you need to invest in some more NIC (6 physical NIC in ESX host is a minimum of IMO, I usually go with 10. There you have before, levels of redundancy and less liklihood of the neck of the bottle.

  If you can't do anything else and MUST use 2 network cards, I would honeslty think to keep everything on 1 vSwitch and tagging VLAN to the port of vSphere group layer. In this way, you can use two NICs for all traffic. No best practices.

• vSphere port replication group

  What type of failover policy is necessary for a port of dvs group used for replication of vSphere? (active / active)?  (active / standby?)

  I recommend always to use Active/active, unless there is a reason not to. For example, if you have two cards of VMkernel iSCSI on the same subnet and you must use the binding of ports.

• Create groups of ports from excel

  I have a spreadsheet with 60 groups of ports, that I need to create. My fields are VLAN and name. Looking at the cmdlets reference guide , it seems that the command to create one would be Get-VDSwitch-name 'Boston ' | New-VDPortgroup-name 'test SQL VLAN 250″ - VLanId 250. Can someone help with the structure to create it from an excel file? I'm checking the rate maximum config to see if I hit a limit about my ports with vSphere 5.1 and need to set a number of ports per port group. Thank you.

  Try something like this

  $dvSw = Get-VDSwitch -Name "Boston"
  
  Import-Csv dvPortgroups.csv -UseCulture | %{  New-VDPortgroup -Name $_.PgName -VlanId $_.VLanId -NumPorts $_.Ports -VDSwitch $dvSw}
  

  The CSV file is supposed to have 3 columns

  PgName, VLanId, Ports

  PG1, 100, 32

  PG2, 100, 32

  You can check the number of available ports on the dvSwitch first, to see if you can add he's the ports required for exchanges

• Remove the port from the channel-group

  I met a strange problem with port aggregation, where I decided to remove a port of a port channel and put it in another, but in my SNMP tool, it still belongs to the old channel of port and the new at the same time.

  Port channel was created using:

  (config) #interface gigabitEthernet 0/1/22

  (config-if) trunk mode #switchport

  (config-if) active in mode #channel-group 1

  Then passes through

  (config) #interface gigabitEthernet 0/1/22

  (config-if) #no active mode channel-group 1
  (config-if) active in mode #channel-group 2

  I have also that when I pull up some information on configuring etherchannel.

  #show interfaces gigabitEthernet 0/1/22 etherchannel

  Port status Up Mstr Assoc in Bndl

  Group of channels = 2 Mode = active = Gcchange-

  Port channel = GC Po2 = - port-channel Pseudo = Po2

  Port index = 0 load = 0 x 00 Protocol = LACP

  Flags: S - device sends slow LACPDUs F - device sends Rapids LACPDUs.

  A - unit is in Active mode.        P - peripheral is in passive mode.

  Local information:

  LACP Admin Oper Port Port port

  Port flags State priority key number

  Item in gi1/0/22 SFT bndl 32768 0 x 2 0 x 2 0 x 117 0x3D

  Partner information:

  LACP Admin Oper Port Port port

  Key priority indicators Dev ID Age port key number status

  Item in gi1/0/22 SFT 32768 0817.35e4.2c80 26 s 0x0 0 x 2 0 x 118 0x3D

  Age of the port in the current state: 164d: 21 h: 32 m: 44s

  This could be a problem with my (observium) snmp tool or are there additional measures to eliminate a port of a group of channels? Reboot of the switch?

  System image file is "flash: c2960s-universalk9 - mz.150 - 2.SE4.bin.

  Hello

  I would say that it is related to the snmp tool, once you remove the port of the chain earlier and added to the new, which will be to the one, it is impossible that an interface will be less than 2 different port channels.

  Also there is no need to restart the switch or something like that, you can use the following commands to verify that the interface is now part of the new channel group:

  Show etherchannel summary

  Show interface execution item in gi1/0/22

  With these commands, you will see that the interface belongs to the Group channel 2, and the order that you set above shows that the interface belongs to po2.

  Hope this helps

• Rename groups of ports

  Hello

  In vCenter via web client, I added a vswitch to some host. I have added a group of ports for the new vswitch so that I have two groups of ports on each vswitch who manage some physical cards and renamed the old port 'VM Network' groups while it appears on the web with a unique name client network tab that hostname in it.

  I put the network card of virtual machines to the new port groups.

  The old "VM Network" "VM Network1" and the "VM Network2" still appear in the web client, Network tab, they have even machines in the old network, although I changed to they renamed network. So the machine appears twice, in the new one the old network. I can't get rid of the old network. When I try to migrate virtual machines from the old to the new network, the list is empty.

  

  Also, when I try to clone a machine, I get a warning that the NIC of the virtual computer using a network ("the new network name") that are not accessible. It seems to me, the old network names are still in use. Is there a chance to fix this? I'm afraid to have performance problems.

  The virtual machine have Active snapshots, where shots were created so that virtual machines were still attached to the groups old port? In this case, the ports 'ghost' groups should disappear after deleting snapshots.

  André

• Import of groups of ports in vDS using powershell and

  I have a VCenter 5.5 with a 5.5 vDS. I'm trying to import several groups of ports in the vDS using powershell. The script is below. I'm under problems in trying to put the "Teaming and Failover" option to 'Route based on a physical load' by default 'Route based on originating virtual port' for the Group of individual ports, I know that I can do from the client, but I would like if possible do it with a script. Someone point me in the right direction? Port groups to import very well with all the correct settings, that I put, but I can't seem to find how to set the load balancing policy.

  to connect-viserver 'myvcenter '.

  $vds = Get VDSwitch -name "my Switch VD"

  Import-Csv c:\temp\vdsportgroup.csv | % {New-VDPortgroup -VDSwitch $vds -Name $_. Name -VlanId $_. {VlanId -NumPorts $_.ports}

  
  
  

  
  
  

  
  
  

  Edit: Scratch that I wrote earlier, it was with the older VDS cmdlets. This should work:

  Get-VDPortgroup MyVdPg | Get-VDUplinkTeamingPolicy | Game-VDUplinkTeamingPolicy - LoadBalancingPolicy LoadBalanceLoadBased

  You can simply direct the Group of newly created port directly object to cmdlets like this:

  Import-Csv c:\temp\vdsportgroup.csv | % {New-VDPortgroup - VDSwitch $vds - name $_.} Name - VlanId $_. VlanId - NumPorts $_.ports | Get-VDUplinkTeamingPolicy | Game-VDUplinkTeamingPolicy - LoadBalancingPolicy LoadBalanceLoadBased}

• Adding Port, Tags and IP groups varies - impact on the VMS?

  We need migration of virtual machines to a different environment due to necessary maintenance SAN.  A colleague in another Department has offered to temporarily move VMs to its environment.  Looking at its systems, we need to add a new group of port, add our range of IP addresses to the NICs and tag his current group of port, because it is without label.  I think that this should not affect its virtual machines that are running in production, but am not 100% sure, so I ask confirmation.  We appreciate his willingness to help and don't want to do anything that would affect its systems.  Thanks in advance for your replies.

  Ann8 wrote:

  If you are sure that we can create the necessary tagged group without problem and do not have to worry about its original port of marking group

  This will depend on a bit of the physical switch, but you can almost certain make the port physical switch carry VLANs marked (called a "trunk" on Cisco devices) and use one untagged VLAN per port, which will be his old trade, known as the vlan "native" of Cisco.

• Change the port VM different vSwitch network group

  Hello!  I have four vSwitches (vSwitch0 - vSwitch3) connected to 8 vmnic.  Each vSwitch currently has two vmnic, 1000 full assets and the other waiting.  Unfortunately, we have 6 virtual machines that are running in a VM port on vSwitch0 group, which also has the Service Console and vmkernel.  I want to move the virtual machines in this group on an another vSwitch and port so that the service console/vmkernel can be isolated.

  My understanding is that I really need to do to move virtual machines to another vSwitch group and the port is to change the settings of the virtual machines and etiquette of network to another.  My question is this:

  What kind of effect will a change like this on a production VM?  There will be a brief interruption in connectivity, or that it will be more important?  Less?

  Trying to get a hold if I should make this change during a maintenance window or do it at night sometimes and you worry too much on this subject.  Thoughts, let me know.  Thank you!

  Forget any link vSwitch and VM, there is no such link. VM is always linked to portgroup and he doesn't care at all vSwitch.

  If you want "to an another vSwitch VM" then create new VM portgroup on another vSwitch and then connect all the virtual machines to the new portgroup. That's all.

  ---

  MCSA, MCTS, VCP, VMware vExpert 2009

  http://blog.vadmin.ru

• Groups of ports from a vswitch to another

  Is it possible to move a group of ports of, say, vswitch0 vswitch1?

  Or should I create a new port on vswitch1 group and move the virtual machine to the new port group?

  Thank you.

  Is it possible to move a group of ports of, say, vswitch0 vswitch1?

  No, with Distributed Switch , you can create identical PGs in any of your ESX hosts

  Or should I create a new port on vswitch1 group and move the virtual machine to the new port group?

  If you don't have a Distributed Switch, you need to. If you want to VMotion is one of the sine qua non

  -