VMware

This Question is Possibly Answered

1 "correct" answer available (10 pts)
1 2 3 4 Previous Next 53 Replies Last post: Dec 9, 2008 2:58 AM by davidjerwood   Go to original post
Click to view KBrown01's profile Novice 5 posts since
Jul 31, 2008

Besides the issues of not having enough IP space, I think the biggest issue with this change is that VMWare has taken something that worked in VC2.5u1 and previous, changed the requirements, made no notification of said change, and made no way to work around it. If I was with my previous employer I know they would have their legal people looking into this since that was the way they operated. On top of all that there is no way to test out the upgrades to the rest of the products without upgrading to VC2.5u2 first (at least to be able to test out through VC), and the roll back works for crap...I had to roll back to u1 becasue of a failure during the upgrade..and that hosed the DB even more...the roll back means you restore from backup tape. All that being said, I would have been at least a little more tolerant of the change if I had been made aware of it PRIOR to performing the upgrade...in the release notes...but I am guessing that would have been too much to ask for....
Click to view marxk's profile Enthusiast 38 posts since
Sep 20, 2005

I thought maybe if I drew a picture of how I have it setup you might be able to see a better way:

There are 3 hosts in the cluster I am working on at the moment and each is configured nearly identical. I removed a redundant console for each from either the Prod 1 or Prod 2 networks:

vSwitch0- 1 nic (1000/full)
Service Console - "Unix/Backup Network 255.255.255.0"
Host 000- 172.xx.AA.230
Host 001- 172.xx.BB.231
Host 002- 172.xx.BB.230

vSwitch1- 3 nics (1000/full)
VM Port Group - "deployment/management network 255.255.255.0 "
VMotion 0 192.xx.xx.246

vSwitch2- 2 nics (1000/full)
VM Port group - "Production network 1 255.255.255.0"

vSwitch3- 2 nics (1000/full)
VM Port Group - "Production Nework 2 255.255.255.0"

vSwitch4- NO nics
VM Port Group - "Isolation"

vSwitch5- NO nics
VM Port Group - "Local Development"

Thanks

Click to view msevigny's profile Enthusiast VMware Employees 56 posts since
May 22, 2006

I appreciate your frustration. You are right, this change was not properly communicated in the release notes.

One correction, though....

"VMWare has taken something that worked in VC2.5u1"

There never used to be a cluster configuration validity check, so improper configurations were unrecognized. While things may have appeard to be working properly, the cluster was vulnerable when there wasn't complete network compatibilty. This is due to the way the cluster communication multi-paths its cluster communication over the available networks. Certain host restart scenarios could lead to split-brain conditions (where the cluster divides into two separate clusters). Also, the heartbeats would never be recieved over non-routable networks, leading to degraded host failure detection.

And I agree, the upgrade process is painful for large installations. That is something we are committed to improving.


Click to view marxk's profile Enthusiast 38 posts since
Sep 20, 2005
I have to agree. Due to issues when performing updrades previously (several times we had to restore the DB from tape) we decided to build a fresh server, fresh database and install vcenter 2.5u2 cleanly. Now I have a mess because there was no "Oh, by the way..." I am not a professional programmer but even I could have figured out a way to run a query on the database to see if the current configuration would fail if machines in the same cluster violated this new rule.
Click to view marxk's profile Enthusiast 38 posts since
Sep 20, 2005
How do you configure for 2 consoles on separate subnets? It only gives me the option to set the default console gateway but I would like to put a console on another subnet.
Click to view boy's profile Enthusiast 77 posts since
Jun 13, 2005
KB article is released

http://kb.vmware.com/kb/1006541
Click to view rsullivan's profile Novice 2 posts since
Dec 21, 2005
Ok, so how does one use this das.allowNetwork feature?
I keep getting "Object reference not set to an instance of an object." errors.

I have two vlans I'm trying to work with. 3 of my hosts are on 1 vlan, and the rest are on another..

So what is the correct way to express them?

das.allowNetwork195 Service Console
das.allowNetwork228 Service Console

Tried the above and it didn't fix it. Also, if I just create a das.allowNetwork1, and 2 it seems to pre-populate the vlans after I've reconfigured the cluster.
I just need an example to go off of because I'm not getting this to work.
Click to view Ida Soco's profile Novice 6 posts since
Dec 9, 2004

The issue can ONLY be solved by move the Service Console of ALL nodes in a cluster to the same IP network. This is not acceptable because this would mean a redesign of the IP network in lots of VI3 environments.


We are still waiting of a "Workaround" or solution from VMware.

Click to view msevigny's profile Enthusiast VMware Employees 56 posts since
May 22, 2006
The issue can ONLY be solved by move the Service Console of ALL nodes in a cluster to the same IP network.

To be clearer, if you have a single Service Console on each ESX host, then they all need to be on the same IP subnet (even if you know better and are using routable VLANs).

VMware will have to create a patch to "ignore the network compatibility check", which isn't currently in the U2, otherwise, for those who don't have the flexibility to modify their Service Console IP networks, there is no workaround.

Click to view vpert's profile Enthusiast 47 posts since
Mar 2, 2007

Absolutely agree.

Just had a call with the VMware Support - Engineering will not change this "new feature". But Support will ask for a possibility to let the customer decide if he want's to use this enhanced HA compatibility check or not.


Click to view sasser1970's profile Novice 20 posts since
Jul 7, 2008

Hello, I have the same problem, my cluster has 2 ESX and the service console (one NIC/ESX) is in different VLANs. Today I have called the vmware support to open a ticket and now I wait for a answer. ?:| In my environment it is not fatal HA does not work but in few weaks, it must be work ! The vmware solution in KB 1006541 does not work for me :_| My other cluster with no installed Update 02 works fine.

Thanks for all postings

Click to view msevigny's profile Enthusiast VMware Employees 56 posts since
May 22, 2006
A patch will be available soon that will allow you to ignore the network compatibility check by adding an HA advanced setting. The patch needs to run through the QA process before it can be made available. Stay tuned.
Click to view rogerfinch's profile Novice 11 posts since
Jul 2, 2007
so once you add the das.allowNetwork into the HA advanced settings, and it doesn't work, how do you remove the entry?
deleting and ok'ing looks ok, but go back in and it's back!

we have 4 NICs
1 for vmotion (same subnet)
1 for vmkernel (different subnet)
2 for trunked VLANs

so do we run HA on the vmkernel network? or the VLAN'ed networks (3x same subnets). No this fails.

do we use the vmotion network then? sounds all wrong to me.
Click to view sasser1970's profile Novice 20 posts since
Jul 7, 2008
...

Message was edited by: sasser1970
Click to view KBrown01's profile Novice 5 posts since
Jul 31, 2008

If you want to remove that setting http://das.allowNetwork you cannot. When I called into VMWare support on this issue initally the tech took it as a bug report. The only way to remove that setting would be to create a new cluster and move all of your ESX hosts to that new cluster which does not have that setting specified.

Just one more bug from VMWare as of late.

The can sit there all day and say that this HA issue wasn't a bug, but in not telling people that they were making a change to the requirements it is in fact a bug..or, having worked for many software companies a "new feature." It just shows that their quality control and documentation as of late has been horrible I keep bringing up to my VMWare SE that they are following in the steps of Microsoft with code releases and lack of testing...and that is not an enviably quality of Microsoft's to emulate!

VMware Beta Programs

Want to be Considered for Future Beta Programs?

Learn More

VMware Developer

Download SDKs, APIs, videos,
training, and more in the Developer community.

Learn More

Developer
Sample Code

Increase your developer productivity with VMware API sample code.

Learn More

VMworld
Sessions & Labs

Online access to the latest VMworld Sessions & Labs and online services.

Learn more

Purchase PSO Credits Online

Purchase credits to redeem training and consulting services online.

Buy Now

Community Hardware Software

View reported configurations or report your own.

Learn More

Only VMware ... Delivers Nexus 1000V

Ensure consistent, policy-based network capabilities to virtual machines across your data center.

Learn More

Communities