VMware Cloud Community
mabasot
Contributor
Contributor
Jump to solution

iSCSI setup

Dear All, I would like to find out the best practise to setup iSCSI.

Here is my setup: 1 x ST2510, x4150 with 6 x 1G NIC's. So I will have setup VMotion and iSCSI. Here is my plan:

2 x Nic for service console and iSCSI traffic not sure if I can mix service console and iSCSI is the same NIC's?

1x Nic for VMotion

3x NIC's for Virtual Machines

Cheers,

0 Kudos
1 Solution

Accepted Solutions
Saadat
Enthusiast
Enthusiast
Jump to solution

I recommend to read this articel from Ken, it is really good. http://kensvirtualreality.wordpress.com/2009/03/29/the-great-vswitch-debate-part-1/

These are some of the tips that I have:

For Security:

VMotion traffic is not encrypted, if you want to consider security, you have to put VMotion traffice on a different VLAN

Service Console should be on anohter VLAN (out of reach of regular users)

For performance

You have to put iSCSI traffic on a redundent physical Switch dedicated to this traffic (no latency is accepted)

Or in simple words, you have to find a balance between Security, Performance and availability

http://www.linkedin.com/in/ernestsaadat

View solution in original post

0 Kudos
2 Replies
AndreTheGiant
Immortal
Immortal
Jump to solution

If possible iSCSI must be isolated and with redundancy... so to NICs for iSCSI.

If possible VMotion must be isolated (from VM traffic) and Management must have redundancy... so you can use 2 NICs for a vswitch with a VMotion and a Management interfaces.

The last 2 NICs can be used for VM traffic.

Andre

Andrew | http://about.me/amauro | http://vinfrastructure.it/ | @Andrea_Mauro
0 Kudos
Saadat
Enthusiast
Enthusiast
Jump to solution

I recommend to read this articel from Ken, it is really good. http://kensvirtualreality.wordpress.com/2009/03/29/the-great-vswitch-debate-part-1/

These are some of the tips that I have:

For Security:

VMotion traffic is not encrypted, if you want to consider security, you have to put VMotion traffice on a different VLAN

Service Console should be on anohter VLAN (out of reach of regular users)

For performance

You have to put iSCSI traffic on a redundent physical Switch dedicated to this traffic (no latency is accepted)

Or in simple words, you have to find a balance between Security, Performance and availability

http://www.linkedin.com/in/ernestsaadat
0 Kudos