separate the vlan for the service console and vkernel

Similar Questions

• Change the id vlan of the Service Console and now can't connect

  Hello

  My ESX 3.5 server was with a Service Console PG and a PG VMotion on vSwitch0. There are 2 physical NIC assigned to the vSwitch, which are transmitted to the 2 physical network switches.

  Guys id assigned netoeking vlan 200 to 2 ports on the 2 natachasery physical switches is connected. In the VI client, if I change the properties of vSwitch0-> Console of Service and the value of the vlan 200, I completely lose connectivity to the host. I can't ping the IP address SC longer. I have a keyboard/screen connected to the host and when I connect to the SC, I can't ping the default gateway of the SC or whatever it is.

  I used esxcfg-vswitch to set of the SC vlan id 0 (all) and bingo!, I can speak to the host again and he can talk. The network guys arrure me, they put the vlan id = 200 on the OK physical switch ports. So what goes wrong?

  FWIW, we also have an ESX4 from same host configured the host to 3.5 and it communicates very well. It's the SC a vlan = 200 and issued for the same physical switches.

  George.

  the switch port config are not the same between the hosts of working and non-working.  See http://kb.vmware.com/kb/1003806 for example config

• Stop the Service Console and shell scripts

  Now that VMware announced ESX 4.1 is their last hypervisor with a service console, I was wondering-

  What are the options to make what is now a large number of Linux shell scripts perform the same functions on ESXi - i.e. PowerCLI, Host Profiles, etc. and how long we have until officially support chips for the ESX service console?

  Thank you

  PowerCLI does not rely on a service console. However, you must have paid the ESXi version for them to work.  With respect to the profiles of the host, which is a characteristic of vCenter and has more no dependencies on the COS.  You can start watching to convert all of your shell scripts PowerCLI and use scripts.

  What about when VMware will stop support for ESX, I do not anticipate happening any time soon.

• ESX 3.5: copy files using the service console from a network share to the esx host data store

  Hello

  I wonder. Is there a command that I can run the service console that would allow me to copy a file from a network share on the data store on the esx host?

  Eric

  If sharing is a Windows, you can also use smbclient within the service console and ride sharing.

  André

  * If you found this device or any other answer useful please consider awarding points for correct or helpful answers

• Service console and VM kernel port group Question

  I have the separate subnet of installation for the service console and the port the kernel VM group. Currently, I plan to install the software iSCSI adapter to connect the LUN. Is there something else I need to do to configure?

  It is said that if the console VM kernel and service are in separate groups of port.

  Usually I use a different physical network for iSCSI.

  But if you only have two network adapters is not applicable.

  Don't forget the vmkernel interface used for iSCSI is in the same logical network and same VLAN as your iSCSI target.

  I need to create a service console more, I do not have it?

  With ESX 3.x, you need a SC for iSCSI (or routing rules).

  With ESX 4.x is not necessary.

  André

• Own VLAN for the Service console

  Hello

  I was reading the esx3 best practices document and saw in it that it was recommended to the Service console on its own VLAN. I was wondering why... I can see why this with vMotion, but I'm not sure for the SC.

  Thank you

  The Service Console is a VM with access to the ESX kernel. If it is compromised, the attacker a free course on your virtual machines and VMFS leading to back and potential data theft. Using a VLAN independent is a way to strengthen security for the Service Console with the isolation.

• public network for virtual machines, private storage and the service console?

  Hello

  So far I had a pretty small facility with 2 servers with 4 physical network adapters each running ESX 3.5, a small box of EqualLogic SAN to shared storage and a few virtual machines on our network of regular reinforcement, routed, not on a private.   The network config was really simple.  I just put everything on real IP addresses on our network of building.

  Now I want to move the SAN and the traffic on a private service console network, but I don't know how to do this.

  Right now I use 2 NETWORK cards on each server:

  vmnic0 is configured on vSwitch0 and has the network of the VM on it that all my use of VMS to talk to the outside world, and it also has the Service Console that uses Virtual Center and I use ssh to it.

  vmnic1 is configured on vSwitch1 and a VMKernel Port and also a Service Console Port for iSCSI Software to talk to my SAN.  (never been clear on why both are needed to talk to the SAN, but doctors say they are)

  My plan is to set up a vSwitch2 and bind it to vmnic2 and implemented a VMKernel Port and the Service Console Port for software iSCSI on the 10.x.x.x network, set up my new (larger) SAN box on the 10.x.x.x network and simply use Storage vMotion to move virtual machines to the new storage space.  As soon as I did this, I would like to not use the Service Console on vSwitch2 and not a Console Service at all on vSwitch0.  Is it possible to delete the one on vSwitch0 and just use a new vSwitch2 for Virtual Center and ssh access?

  So my proposed configuration would be:

  vSwitch0: VM network only, used by the VM guests for oriented public access network, no construction of Network Service Console, linked to vmnic0

  vSwitch1: superfluous once I do storage vMotion of everything on my old SAN, will eventually remove and pair vmnic 1 with vmnic0, linked to vmnic1

  vSwitch2: VMKernel and Service Console on the network 10.x.x.x, used to access the new SAN, used by Virtual Center to access the ESX, used to SSH in to ESX on private network, associated vmnic2

  If it works?

  Thank you.

  Hello

  VMkernel ports cannot live on the same subnet. So if you have 3 vmkernel ports say: vMotion, iSCSI and NFS. You really need 3 subnets. 1 for each vmkernel port.

  Otherwise how does he know all send properly?

  Best regards

  Edward L. Haletky VMware communities user moderator, VMware vExpert 2009, url = http://www.virtualizationpractice.comvirtualization practical analyst [url]
  "Now available: url = http://www.astroarch.com/wiki/index.php/VMware_Virtual_Infrastructure_Security' VMware vSphere (TM) and Virtual Infrastructure Security: securing the virtual environment ' [url]
  Also available url = http://www.astroarch.com/wiki/index.php/VMWare_ESX_Server_in_the_Enterprise"VMWare ESX Server in the enterprise" [url]
  [url =http://www.astroarch.com/wiki/index.php/Blog_Roll] SearchVMware Pro [url] | URL = http://www.astroarch.com/blog Blue Gears [url] | URL = http://www.astroarch.com/wiki/index.php/Top_Virtualization_Security_Links Top security virtualization [url] links | URL = http://www.astroarch.com/wiki/index.php/Virtualization_Security_Round_Table_Podcast Virtualization Security Table round Podcast [url]

• Limit the software and Services that run in the Service Console in ESXi 4.0?

  How to limit the software and Services running in the Services Console in ESXi 4.0?

  Hello.

  There is no Service in ESXi Console, and it is not really a lot of apps for ESXi either. Policy and/or limited access is the best way to limit these things.

  Good luck!

• Installation Partition problem (allocated too expensive for the Service Console?)

  Installation Partition problem (allocated too expensive for the Service Console?)

  RAID1 (15K 146 GB SAS) on Dell R710 and VMFS is on table EQL.

  What I did during the ESX4.1 excavation, it's that I have used ALL the space in 146 GB (mainly for / and / var), after adding this ESX host to vCenter, VC and EQL ASM/VE started to complain about the following points:

  1 VC: health check of localstorage warning (only has 245 MB left on 146SAS localstorage)

  2 EQL ASM/VE: warning rootFolder folder (due to the above)

  I thought that he is authorized to use all the space for / (50 GB) and / var (50 GB) in my case for only 146 GB, I don't think I need to leave any space on the installation disc.

  Could someone share some lights here?

  Thank you

  As you can see SDS use all the SDC VMFS partition space.

  This create the alarm.

  The thing really confused me why I have to leave a space on the disk at all?

  Technically there is no reason to let the space... but also no reason to have a big service console

  Usually, you need 10 to 20% free space for each snapshot data store and Exchange files... but in your case, you will not have these files.

  If you have any problems, but you receive the alarm until you do not disable them on this specific data store.

  PS: I suggest you switch to ESXi, is quite simple and it doesn't have this strange vmdk for the "console".

  André

• Command not found in the service console ESX 4.0 u2

  Hi all

  I have a very simple question.

  I have haven´t access to the service console ESX 4.0 for some time and today I need run commands to verify information on some host bus adapters.

  I logged a user then used 'su root' to switch to the ROOT user.

  I use Putty to connect to the Service Console.

  But when I try to execute the following commands it said "Command Not Found":

  vmkload_mod

  esxcfg-module

  I read VMware KBs, that say to use these commands for this version of ESX, but I can´t do run.

  I think the answer is something very simple, but I can´t find it.

  Anyone have any ideas?

  Thank you

  Mark

  Try this command:

  quo

  as documented in http://kb.vmware.com/kb/1006573

• Adding an IP to the service console more

  Hi team,

  We have a race ESX 4 and the service console has already been configured with an IP address, I would like to add an IP more (another beach) so this service console must be accessible by both intellectual property.

  Now my console IP service is 172.18.111.155 with a subnet mask of 255.255.255.0, GW - 172.18.111.1

  Now, I need to add another IP 172.18.105.45 Beach IE with a subnet mask of 255.255.254.0. GW - 172.18.104.1

  Could you please let me know if possible, if so how can be done.

  Thank you

  Akhi

  Hello

  Next, you create just a new vSwitch with your 2nd service console using the dedicated bear. Marking will be on the side of the physical switch.

  If this host is in a HA Cluster, you may receive warnings about redundancy.

  Seeing that it is your 2nd service console, you can remove these messages. Watch http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004700

  Please allow points for correct answers

• Slow performance NFS (16 MB/s) of the Service Console

  I'm trying to set up an environment with ghettoVCB but I have problems with the flow to the NFS share.

  My configuration:

  ESXi host:

  ESXi 4.0.0 164009

  Reference Dell R710 with 8x300GB 10 k SAS.

  NAS server:

  Nexenta 3.1.0

  Dell PE2950 with 6x2TB Sata

  Local write on the nas performance is around 230 Mbps. tested by running these two commands in two different sessions of PuTTY:

  zpool iostat tank 5
  
  dd if=/dev/zero of=sometestfile2 bs=1024000 count=5000
  
  

  Zpool iostat output:

                 capacity     operations    bandwidth
  pool        alloc   free   read  write   read  write
  
  ----------  -----  -----  -----  -----  -----  -----
  tank        7.59G  10.9T      0      0      0      0
  tank        6.74G  10.9T      0    709      0  64.2M
  tank        8.11G  10.9T      0  2.06K      0   235M
  tank        9.62G  10.9T      0  2.07K      0   254M
  tank        10.8G  10.9T      0  1.81K      0   219M
  
  
  

  Switch dedicated for storage area network:

  Cisco 3750 with mtu 9000 system

  Nexenta hosts both ESXi are connected to the switch with network cards with Jumbo enabled frames.

  I created an NFS share and mounted as a data store in ESXi. When I run the command "dd" even the service console, I get this:

  tank        6.94G  10.9T      0    178      0  16.9M
  tank        7.03G  10.9T      0    190      0  16.2M
  tank        7.11G  10.9T      0    180      0  17.0M
  
  
  

  To test another way, I created a vmnic in the vSwitch dedicated for nfs and then attached this nic to a guest vm under Debian. I mounted the same nfs share and run the same command "dd":

  splunk01:mount 192.168.XXX.XXX:/volumes/tank/vmbackup /mnt/nas0
  splunk01:/mnt/nas0# dd if=/dev/zero of=sometestfile4 bs=1024000 count=5000
  5000+0 records in
  5000+0 records out
  5120000000 bytes (5.1 GB) copied, 56.1965 s, 91.1 MB/s
  splunk01:/mnt/nas0#
  
  
  
  
  
  

  zpool iostat output:

  admin@nas0:~$ zpool iostat tank 5
               capacity     operations    bandwidth
  
  pool        alloc   free   read  write   read  write
  ----------  -----  -----  -----  -----  -----  -----
  tank        8.73G  10.9T      0      1  5.72K   143K
  tank        8.73G  10.9T      0      0      0      0
  tank        8.73G  10.9T      0    389      0  47.5M
  tank        9.49G  10.9T      0    684      0  80.7M
  tank        4.24G  10.9T      0    702      0  84.6M
  tank        4.63G  10.9T      0    780      0  92.7M
  tank        4.63G  10.9T      0    750      0  91.1M
  tank        5.74G  10.9T      0    820      0  98.4M
  tank        6.27G  10.9T      0    729      0  87.9M
  tank        6.27G  10.9T      0    756      0  91.1M
  tank        7.28G  10.9T      0    785      0  94.9M
  tank        7.80G  10.9T      0    694      0  83.6M
  tank        7.80G  10.9T      0    801      0  96.6M
  tank        8.74G  10.9T      0    595      0  69.2M
  tank        8.74G  10.9T      0      0      0      0
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  

  So there is clearly no problem on the side of Nexenta.

  What I am doing wrong?

  Is there a problem with this build exakt?

  Andreas

  Hello

  you try this optimalizations in the GUI:

  1 / disable ZIL
  Settings-> preferences-> system
  Sys_zfs_nocacheflush Yes (default: No.)
  WARNING: it is dangerous without UPS

  2 / disable Nagel algoritm
  Settings-> preferences-> network
  Net_tcp_naglim_def 1 (default: 4095)

  3 / adapt for HDD SATA

  Settings-> preferences-> system
  Sys_zfs_vdev_max_pending 1 (default: 10)

  4 / disabling synchronization

  Data-> actions-> folder xxx management

  Turning off synchronization (default: Standard)

• How many cards to the Service Console

  I hope that my question is not too noob like... Can someone tell me what the rule of thumb is for network cards how much should I use for the service console? Thanks in advance.

  I use two and set an active and a standby adapter. In addition, if you can balance between edge and PCI

• Identify the process of the virtual machine in the Service Console

  Maybe it's a little challenging, but I need to "hang" a VM intentionally for purposes of Compliance\Qualification.  I'm trying to understand the best way to do this and my colleague suggested to connect to the service console, identify the process virtual machine running and terminate, so suspend the virtual machine.  The problem is, I'm not sure how to proceed.  Could someone point me to the light?

  Thank you very much.

  Steve

  You must know the name of the vmx file (usually it is the first name of the virtual machine).

  Then, connect SSH (or console) to your ESX and run the following command

  PS auxfww | grep 'VMXname '.

  At this point, you can locate the correct PID of the virtual machine. The first number to appear in the output is your PID.

  The PID can be used to complete the process by issuing the command kill-9 PID.

  André

• Failed to create the Service Console

  Hello

  Anyone could answer this, why I can't create service console? For some reason, the service console did not appear as an option in the Network Setup Wizard dialog box. Any clue?

  Thank you

  You use ESXi.

  It is not a service console, and it is not a service console port.

  You manage ESXi using a vmkernel interface.

  André