ESXi 4.1 & Intel(R) PRO/1000 MT Network Card & Windows 2008 x64

[nettech1]

If any one is running the same configuration as mine, can you check what "large send offload (ipv4)" is set to on your VM (Click configure on the Nic and switch to advanced)

I ran in to some sort of a bug or network miss-configuration and suspect large send offload (ipv4) to the problem.

Network diagram is attached

[vmroyale]

Hello and welcome to the forums.

I am seeing "Enabled" for this value.

Good Luck!

[nettech1]

Mine is also Enabled.

So here is my problem, actually I have two, but here is the 1st.

If i try to RDP to Windows 2008 Server form any computer on 20.0 network. My session terminates almost instantly with an error message "Because of an error in data encryption, this session will end. Please try connecting to the remote computer again"

But if i RDP to the same 2008 server from 2003 or XP virtual machine running on the same box i have no problems.

[nettech1]

Same issue mentioned here and SOME people are listing virtualization. (just Microsoft, no VMWare)

http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/3e4e9d8a-cf6a-4e7a-9072-f9ecd3f1...

[nettech1]

vmroyale,

How many NICs do you have in your ESXi?

Take a look here

http://www.petri.co.il/network-issues-with-windows-server-2008-rdp-on-dell-servers.htm

Can you RDP to your virtual 2008 server and stay connected without getting "Because of an error in data encryption, this session will end. Please try connecting"

[weinstein5]

Moved to ESXi 4 Forum -

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful

[WessexFan]

quick question: Are the nics on the vm set to auto-detect link speed & duplex?

[nettech1]

WessexFan,

There is only 1 NIC in my esxi server and it's used for both vm & Management Network traffic

looking at the vm nic configuration IT"S NOT set to auto (see attached), but in the 2008 Server VM link speed and duplex is configured for auto-negotiation.

Another thing I should mention is this ESXi is connected to a non managed 10/100 switch

[WessexFan]

ESXi4.1 is hard-coded with 1000 full. (Dont ask me why). You can run esxcfg-nics -a vmnic0 on each pNIC to "fix" this.

Rolling with 1 nic on your ESXi host can be bad business, but I understand working with what you have.

This may not be to root cause, but its worth a look. Are your switches configured with auto/auto?

[nettech1]

Sorry, the pic in the post above was my vSwitch.

vmnic0 is configured with 100 Full. I am guessing I have to run "esxcfg-nics -a vmnic0" as you said because there is no way to change it to auto in the VMware vSphere Client, however I can change vswitch setting.

[nettech1]

is Alt-F1 on the ESXi box itself the only way to issue esxcfg-nics -a vmnic0 ?

[WessexFan]

Ok, try that and see if it helps communication.

Good luck!

[WessexFan]

You will need to enter tech support mode in order to enable ssh into the machine. That is my understanding and the way I have always done it. I may be mistaken here..

[nettech1]

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=101791...

Looks like I can enable SSH from the client

[nettech1]

OK. I got vnic0 changed to auto, but don't see where I can make changes to the vswitch.

Is there anything to change on vswitch?

[WessexFan]

You shouldn’t have to do anything to your vswitch, unless you want to configure traffic shaping or create policies on it.

[nettech1]

Unfortunately auto negotiation didn’t fix the RDP problem…

I am out of ideas…

[nettech1]

Attaching a wireshark trace from the Windows 7 client.

[WessexFan]

okay, have you checked rdp versions against each other? Maybe 2008R2 has some wonky settings that your 7 rdp version doesn't like or vice-versa. Thats the only thing that comes to mind.

[nettech1]

yeah. rdp client is not a problem and this is a 2008 server NOT R2.

i have tried from Vista, XP & 7 clients, they all get disconnected, which makes me think it's a network misconfiguration somewhere in the host, guest or router.

i am ready to pull my hair out.