VMware ESX 3.5 and MSCS

Similar Questions

• VMware ESX 3.5 and disabling carrots

  Hi all

  We have a Cluster ESX from VMware ESX 3.5 U3 that was built for a specific product that has a licensing model that doesn't fit well with the virtual server running model.

  The basis of this cluster is 3 x BL465c G1 Dual Core servers HP with 16 GB of memory each. We're going to run out of memory, and I can't add memory without add because of the architecture of AMD processors.

  Adding more CPU will have a big impact on licensing costs - once again not the licenses of VMware.

  I want to do is add a second processor DC and then use BIOS to disable half of the cores in each processor.  This will allow me to add an extra 16 GB memory per server and stay within the limits of the license.

  My question - has anyone with disabilities hearts on a host ESX from VMware, specifically after ESX has been installed. All that needs to be done?

  I tested the disabling function of carrots on a Windows Server and who did replace the drivers, I was wondering if VMware ESX should similar updates / management.

  Rob of TIA.

  You'll be fine, apart from the fact that, by adding the Jepp second you will need an additional CPU, per ESX host licensing doesn't mind.

  If you have found this device or any other answer useful please consider useful or correct buttons using attribute points

  Tom Howarth

  VMware communities user moderator

  Blog: www.planetvm.net

• IPSec on VMWare ESX 5.1 communication problems

  Hello

  We have 2 computer systems.  You running us VMWare ESX 5.1 and the other is running Ubuntu 14.04.  We have problems for IPSec to work between the two systems.  We cannot find any documentation or known issues with IPsec on VMWare ESX 5.1, so we're going to reach out to the community.

  Here's what we did:

  1. we configured Ubuntu and VMWare systems to use IPv6, we can ping each other using IPv6.

  2. we configure IPSec on an Ubuntu operating system by following the instructions below:

  https://help.Ubuntu.com/community/IPSecHowTo

  3. we have followed the instructions below to configure IPsec on VMWare.

  http://KB.VMware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 1021769

  Here's the problem:

  When 2 Ubuntu systems run IPsec, they are able to ping each other.  However, when allow us IPSec communications between VMWare and Ubuntu, the ping is suspended.

  Here is the result of the configuration of command esxcli on VMWare:

  UBUNTU. IPv6.ADDRESS-> Ubuntu IPv6 address

  VMWARE. IPv6.ADDRESS-> address IPv6 from VMWARE

  
  Name Source address Destination address State SPI Mode Encryption Algorithm, integrity algorithm to life

  --------           -------------------------------------  -------------------------------------  ------      -----     ---------     --------------------               -------------------           --------

  GoToDPSA UBUNTU. IPv6.ADDRESS VMWARE. Mature IPv6.ADDRESS infinity 0 256 transport 3des-cbc hmac-sha2-256 x

  VMWARE DPToGoSA. IPv6.ADDRESS UBUNTU. Mature IPv6.ADDRESS infinity 0 x 300 transport 3des-cbc hmac-sha2-256

  Name of the Source address Source Port Destination address Destination Port Protocol flow Action Mode SA

  --------          ----------------------------------------  -----------        ----------------------------------------  ----------------          --------       ----     ------     ---------      --------

  VMWARE DPToGoSP. IPv6.ADDRESS/64 0 UBUNTU. IPv6.ADDRESS/64 0 everything on transport ipsec DPToGoSA

  GoToDPSP UBUNTU. IPv6.ADDRESS/64 0 VMWARE. IPv6.ADDRESS/64 0 in ipsec transport GoToDPSA

  Here's what we found:

  After debugging the problem (using tcpdump), we found that the VMWare system sends the ESP packets, but never sends a package AH (required for IPSec authentication).  Even when the encryption protocol is null, the system of VMWare would always send ESP packets, but never once sent a package of AH.

  Here is the resulting execution trace: Ubuntu - ping-> VMWare:

  ...

  IP6 UBUNTU. IPv6.ADDRESS > VMWARE. IPv6.ADDRESS: AH(spi = 0 x 00000256, seq = 0 x 16): ICMP6, an echo request, seq 1, length 64

  IP6 VMWARE. IPv6.ADDRESS > UBUNTU. IPv6.ADDRESS: ESP(spi = 0 x 00000300, seq = 0 x 1), length 160

  IP6 UBUNTU. IPv6.ADDRESS > VMWARE. IPv6.ADDRESS: AH(spi = 0 x 00000256, seq = 0 x 17): ICMP6, an echo request, seq 2, length 64

  IP6 VMWARE. IPv6.ADDRESS > UBUNTU. IPv6.ADDRESS: ESP(spi = 0 x 00000300, seq = 0 x 2), length 160

  IP6 UBUNTU. IPv6.ADDRESS > VMWARE. IPv6.ADDRESS: AH(spi = 0 x 00000256, seq = 0 x 18): ICMP6, an echo request, seq 3, length 64

  IP6 VMWARE. IPv6.ADDRESS > UBUNTU. IPv6.ADDRESS: ESP(spi = 0 x 00000300, seq = 0 x 3), length 160

  Summary:

  There seems to be a problem with IPSec in VMWare ESX 5.1 on IPv6.

  We noticed that the downloads section of the site support provided patches for VMWare ESx 4.x and earlier, but lack of patches for VMWare ESx 5.x.

  Are there known issues in this area or available patches to fix this problem?  Your kind suggestions would be greatly appreciated.  Thank you.

  Sorry for the late reply, but here the analysis of what is happening and why you are experiencing a problem.

  The Encapsulating Security Payload (ESP) to IPsec protocol will encrypt a payload of the packet and can

  Optionally authenticate the packages as well. You do not include orders allowing you to set the

  Security Association (SA) and political security (PS), but the output in your post indicates that you

  you want to encrypt the payloads both authenticate packets in mode of transport between the hosts.

  I don't know why the Ubuntu IPsec HowTo examples using protocols AH and ESP to encrypt and

  authenticate the packets. In our view, it is best done in a single step with ESP, ESXi only

  offer the option of AH with IPsec. Of course, this requires configuring the ESXi server and your

  The host with a configuration of IPsec compatible Ubuntu (or any other operating system).

  To illustrate, suppose the ESXi server has the address 2001:db8:1 and the host of Ubuntu has the

  address 2001:db8:2. We will use cbc-3des for encryption of the useful and hmac-sha2-256 load for integrity

  authentication mode of transport - just like in your message.

  On the ESXi host, the commands to do this might look like this (of course, you need to generate your)

  own keys and not re-use those I did).

  # Add the outbound security association ESXi

  esxcli ipsec ip network his Add.

  -sa-source = 2001:db8:1.

  -sa-destination = 2001:db8:2.

  -sa-mode = transport.

  -sa-spi = 0 x 200.

  -encryption = 3des-cbc algorithm-

  -encryption key = 0x6dd50fa97e919365d393fd0d404c655f80651316e9418682.

  -the integrity algorithm hmac-sha2-256 =.

  -integrity key = 0x730047c680d9812535a741bbb3521a29322cca77464cf16092519c4165ca6958.

  -sa-name = sa_1to2

  # Add the ESXi inbound security association

  esxcli ipsec ip network his Add.

  -sa-source = 2001:db8:2.

  -sa-destination = 2001:db8:1.

  -sa-mode = transport.

  -sa-spi = 0 x 300.

  -encryption = 3des-cbc algorithm-

  -encryption key = 0x50988e55ca6a0d0440cf0c29f80d308df884616ec4b55552.

  -the integrity algorithm hmac-sha2-256 =.

  -integrity key = 0xf76caa5b4985a8a9d1c7cedbcf43f21b83401818e3b8d5e526a8c99ff4d4baa7.

  -sa-name = sa_2to1

  # Add the outbound security policy ESXi

  esxcli network ip ipsec Ms Add.

  -sp-source = 2001:db8:1 / 64.

  -source-port = 0.

  -sp-destination = 2001:db8:2 / 64.

  -destination-port = 0.

  -top-layer-protocol = any.

  -action = ipsec.

  -output = flow direction.

  sp-= transport mode.

  -sa-name = sa_1to2.

  -sp - name = sp_1to2

  # Add the ESXi incoming security policy

  esxcli network ip ipsec Ms Add.

  -sp-source = 2001:db8:2 / 64.

  -source-port = 0.

  -sp-destination = 2001:db8:1 / 64.

  -destination-port = 0.

  -top-layer-protocol = any.

  -action = ipsec.

  -direction of flow = in.

  sp-= transport mode.

  -sa-name = sa_2to1.

  -sp - name = sp_2to1

  # List the ESXi security associations

  esxcli network ip ipsec its list

  Name Source address Destination address State SPI Mode Encryption Algorithm, integrity algorithm to life

  -------  --------------  -------------------  ------  -----  ---------  --------------------  -------------------  --------

  sa_2to1 2001:db8:2 infinite mature 2001:db8:1 of hmac-sha2-256 0 x 300 transport 3des-cbc

  sa_1to2 2001:db8:1 infinite mature 2001:db8:2 of hmac-sha2-256 0 x 200 transport 3des-cbc

  # List the ESXi security policies

  List of the sp network ip ipsec esxcli

  Name of the Source address Source Port Destination address Destination Port Protocol flow Action Mode SA

  -------  --------------  -----------  -------------------  ----------------  --------  ----  ------  ---------  -------

  sp_1to2 2001:db8:1 / 64 0 2001:db8:2 / 64 0 everything on ipsec transport sa_1to2

  sp_2to1 2001:db8:2 / 64 0 2001:db8:1 / 64 0 in ipsec transport sa_2to1

  On your Ubuntu host, you need a compatible IPsec configuration. In general, on linux systems

  use the command setkey BSD-door, this is done by changing the system-wide

  in/etc/ipsec configuration file - tools.conf.

  #! / usr/sbin/setkey - f

  flush;

  spdflush;

  #

  # SAs ESP using 192 bit long keys (168 + 24 parity)

  # generated using: dd if account = / dev/random = 24 bs = 1 | xxd - ps

  # ESXi supports 3des-cbc, aes128-cbc, or null

  #

  # AH SAs using 256 bit long keys

  # generated using: dd if account = / dev/random = 32 = 1 bs | xxd - ps

  # ESXi supports hmac-sha1 or hmac-sha2-256

  #

  Add 2001:db8:1 2001:db8:2 esp 0x200

  E 3des-cbc 0x6dd50fa97e919365d393fd0d404c655f80651316e9418682

  -A hmac-sha256 0x730047c680d9812535a741bbb3521a29322cca77464cf16092519c4165ca6958;

  Add 2001:db8:2 2001:db8:1 esp 0 x 300

  E 3des-cbc 0x50988e55ca6a0d0440cf0c29f80d308df884616ec4b55552

  -A hmac-sha256 0xf76caa5b4985a8a9d1c7cedbcf43f21b83401818e3b8d5e526a8c99ff4d4baa7;

  # Security policies

  spdadd 2001:db8:1 2001:db8:2 all Pei in ipsec

  ESP/transport / / need;

  spdadd 2001:db8:2 2001:db8:1 all Pei on ipsec

  ESP/transport / / need;

  I have no problem of encryption and authentication of IPv6 traffic between a server ESXi 5.1

  and a host of 14.10 Ubuntu using this configuration.

• VMWare ESX Server training

  Hello experts,
  I'm new to vitrualization.
  I installed vmware workastation v 7.0 and I also have VMWare ESX Server training Trainsignal dvd for training so here are my questions:

  Can I install VMware vSphere Hypervisor 3.5 on my VMWare Workstation 7.0 for training v?

  Is - this VMWare vSphere Hypervisor 3.5 product different from VMWare ESX Server 3.5?

  I'm you ask all these questions because I want to be sure I can complete a training with VMWare vSphere Hypervisor 3.5 suite drive of my Trainsignal VMWare ESX Server 3 and because I am not allowed to download the evaluation version on VMWare ESX Server 3 and because the VMWare customer service could not answer my simple question and quoted me to the community by them to get advice.

  Thanks in advance for your help and advice.

  Hi nasolsi,

  Can I install VMware vSphere Hypervisor 5 straight on my VMWare Workstation 7 training without affecting my HDD physical whole?

  Yes, it has nothing to do with your actual score and highlights form the part of space, he took from your partition to create the disk of the virtual machine. So basically it will eat the space in the physical partition but does nothing else like the formatting of the entire disk.
  

  
  

  and the performance on my PC?

  No, this will not affect your PC's performance as the workstation will run the pages of RAM and cycles on your physical PC hardware microprocessor.

  
  

  If permitted increase RAM by a value so that you do not encounter CMTF or any other problem. 2048MB is the minimum memory required to run ESXi.

• VMware ESX version and build #.

  Hi all

  Y at - it a sort of table or list that displays all versions and build number of ESX 3.5 and ESXi 3.5? I know that whenever I run the Update Manager and there is an update of firmware, build number changes, and I have to go to the download section of the vmware.com website to compare construction #. I am looking for a central place with details about each version and build #.

  Also, apart from the VMware Commnities, are there other sites third popular forum/support?

  Thank you!

  Click on the link 3.5

  http://support.VMware.com/selfsupport/download/allpatches.html

• PE2950, virtualization and VMware ESX 3.5.2 technology bios setting

  I PE2950 with VMware ESX server 3.5.2 is installed.

  The activation of the "Virtualization Technology" BIOS setting (under information CPU) will cause problems with the operating system? (it was disabled when installing ESX on it – default setting)

  
  

• Is it possible to switch between level of datacenter in VMware ESX?

  Suppose I have a site US and others a United Kingdom so is possible that I can my American site failover to the United Kingdom at the time of the disater? This is possible in VMware ESX at the WAN level or data center?

  Thank you

  Pitoux

  VCS at the level comments or MSCS at the level of the comments will get your failover, but that would require your ethernet network to span multiple sites.  Not always very convenient, especially if you talk about the United States and the United Kingdom

  I guess then that instead of failover, you mean that the DR or continuity of operations.  That, as noted above, would require some kind of replication and backup/restore, your recovery time objectives and your recovery point objective.   All what you can do to get your vm data store blocks in one data center to another.

  -KjB

  VMware vExpert

• VMware ESX server CPU use test alarm

  Hi all

  For a new client, I need to show the alarm and ticket slot functionlity vmware ESX server logging settings

  • Use of the CPU of a server ESX VMW
  • Use of memory for the server ESX VMW

  While I reduced the threshold value of VMW ESX Server CPU use as beloow format

  WARNING - 5% and STDev.warning - 0

  I made this two days before configuration, but still no alarm generated for this rule.

  Help the creation of a test of the abveo metric ESX alarm

  Hi - I ended up having to do such things in the past as well. I just built a virtual machine added lots of processors and memory, then for the CPU, I used the script CPUBusy.vbs from VMware (Google search which) and down it load times so that he began to max real physical processors... For memory, I just opened a massive text file in Wordpad and scroll up and down it. This gave me the circumstances to test the alarms, just don't do as a busy time or use some dev ESX servers... Danny Bravo

• Cisco Secure ACS 4.2 on VMware ESX 4.0.

  We must move from ESX 3.5 to ESX 4.0 a virtual machine running Cisco Secure ACS for Windows version 4.2.

  This solution is compatible and supported by Cisco?

  Thank you.

  Andrea

  ACS Windows 4.2 is not supported by Cisco, when installed on VMWare ESX 4.0 in accordance with the following documentation:

  http://Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/device/guide/sdt42.html#wp37898

  Only ACS 5.1 is supported on ESX 4.0:

  http://www.Cisco.com/en/us/partner/docs/net_mgmt/cisco_secure_access_control_system/5.1/installation/guide/csacs_vmware.html

• What is the best for VMware esx 4.0

  If I understand correctly, 4.2.1 for windows only supports VMware esx 3.0? IF ACS 5.0 supports VMware esx 4.0? Or is it a solution Manually applciation compete with hardware?

  Pls help?

  5.1 of the ACS is FCS and running on ESX 4.0

  See http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_system/5.1/installation/guide/csacs_vmware.html

• How do you know what was the latest patch installed on VMware ESX Server 3i, 3.5.0 207095

  Hello guys,.

  I've been running an old server that was installed in a test system on workstation DELL - Optiplex GX620 (32 bit).

  During installation, I had to confirgure the file: /usr/lib/vmware/installer/Core/TargetFilter.py to change the following line:

  "interface returned. GetInterfaceType() == ScsiInterface.SCSI_IFACE_TYPE_IDE' as follows:

  "interface returned. GetInterfaceType() == ScsiInterface.SCSI_IFACE_TYPE_ISCSI' this is it worked and I used it for 3 years now. However, right now, I was hoping to be updated with the latest patches and updates and I do not know if I just ESX or ESXi, or what was my last update, and what it takes then.

  I used this command to get the following result:

  # vmware - v

  VMware ESX Server 3i 3.5.0 build-207095

  ... I think that the 3i says I have an ESXi 3.5.0 but build 207095 the buid even as ESXi 3.5.0 patch 5?

  If this is not the case, how should I do to update? What is the KB # I should download?

  I can manage using vSphere Client 5.5 and I can't SSH using PuTTY.

  Note: When I run... "# esxupdate - bundle = ESXe350-201302401-I - SG.zip updated ' of in the folder where his property in the data store, nothing happens... just a new line scrolls.

  Also...

  # esxupdate query

  <? XML version = "1.0"? >

  <>request-response

  < installed packages >

  < package ID = "ESX-207095" >

  firmware < name > < / name >

  < version > 3.5.0 < / version >

  < rel > 207095 < / rel >

  < / packages >

  < package ID = "ESX-CLIENT-204907" >

  < name > viclient < / name >

  < version > 2.5.0 < / version >

  < rel > 204907 < / rel >

  < / packages >

  < package ID = "ESX-TOOLS-207095" >

  < name > tools < / name >

  < version > 3.5.0 < / version >

  < rel > 207095 < / rel >

  < / packages >

  < / packages installed >

  < / request-response >

  # /vmfs/volumes/525300ce-5ff6ad3d-e2ed-0014222aedb7/patches/ESXe350-201302401-O-SG

  ... is there any update for this system? I therefore believe that the patch software etc was not around when I was installing this server in 2010.

  Based on KB http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1014508 you run ESX 3.5 Update 5.

• Data growing in vmware esx server disk 3

  Hi, I have been asked by a colleague If I can be useful to expand d: ------disc on an existing virtual windows server 2003.

  They use:

  VMware ESX Server 3i Version 3.5.0 Build 110271

  VMware Infrastructure Client Version 2.5.0 build 119826

  Is it possible to extend the disc in vSphere clienten, start by clicking on the edit \ disk and then expand the *. wmdk file of 25 GB to 40 GB? After this connection in the server and expand the disk using a few better disk expansion program.

  / T.

  Yes, it should work even with the virtual machine. After having developed the virtual disk in the graphical interface, connect to the virtual machine Windows 2003 (or open the console or via the administrative RDP session) and rescan storage in disk management. Assuming that the data disk has only one partition or is the last partition on the disk and does not have the file exchange/swapfile on it, you may even be able to extend disk space by using the diskpart command-line utility.

  André

• Maximum number of map of VMware ESX 5.0 10 Gbit Ethernet/ISCSI

  Can you confirm me, what is the maximum limit of VMware ESX 5.0 10 Gb Ethernet/ISCSI support for single-server map.
  We have 2 blade BL460 G7 in Enclouser
  We have 4 Emulex Corporation 10 GB NIC and 4 NIC Broadcom Corporation 10 GB installed in it. But it shows only 2 Emulex and 2 Broadcom.
  PFA for reference.

  Welcome to the community!

  Take a look at this screenshot. It shows that the maximum limit of VMware ESX 5.0 cards 10 Gb Ethernet/ISCSI.

  

  Soure: http://www.vmware.com/pdf/vsphere5/r50/vsphere-50-configuration-maximums.pdf

• Error: Running VMware ESX in a virtual machine requires the external virtual machine

  We are running ESX Vmware 5 on a virtual test in ESX 4.x environment and machine unable to start the virtual machine on Vmware ESX 5. with the following error.

  Error: -.

  Running on a virtual machine VMware ESX requires the external virtual machine is configured to run a VMware ESX guest operating system. You can not power on a virtual machine until the external virtual machine is reconfigured.

  We found after KB

  http://KB.VMware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 1030283

  Howerver, I'm not able to find the option

  1. Select the virtual machine that is running ESX.
  2. Go in VM > Settings.
  3. Click the Options tab.
  4. Select the General settings.
  5. Under Guest operating system , select VMware ESX.
  6. Click OK.

  We are not able to find this option in ESX 4, so we can run this VM.

  Please help urgently...

  Kind regards

  The log file looks good now.  However, it seems that ESX 4.0 is older than I remembered.  Please, add the following line to your ESX VM configuration file and try again:

  monitor_control.restrict_backdoor = TRUE

• Y at - it an update for VMware ESX 4.1 update 1?

  Dear friends;

  I heard that VMware releases update for VMware ESX 4.1 update 1. Could you please tell me if this is correct?

  And would you please reference me this article?

  ESX will not available in vSphere 5.0. It will be always supported in the same way that VI 3.5 is still supported, however. Here's an official blog stating that ESX 4.1 is the latest major version of ESX.

  With the release of VMware vSphere 4.1, we announced that 4.1 will be the last version of vSphere to support the ESX and ESXi hypervisor architectures.