new vlan can not reach lan in esxi

[piaakit1210]

Dear all,

      I have a esxi and 10 vm inside this esxi, and one of the vm I want to use vlan 5, and I created a new port group call vlan 5 and tap this port group with vlan id 5 and assign a physical network port in this esx, and in one of the vm i want to assign with vlan 5, i changed the network for this vm to vmnic3, and the esxi physical network port i connect to the cisco switch that assigned with switchport access vlan5, and the vm i can not reach the lan, just wonder anything i did wrongly ? any help would be appreicated 

keith 

[alumbwage]

Hi @piaakit1210 

If you are using portgroup with vlan id. You need to have cisco switch port as trunk and allow the vlan id 5. with switchport mode trunk and switchport trunk allow vlan add 5

This way will work kindly check it and see if it works. 

[Sachchidanand]

Hi,

 One way is to create your phisical link to trunk and create port group as Vlan 5 but as you defined your uplink as access port with vlan 5, you have to create port group with vlan 0 which will send untagged packet and as your port is already in vlan 5, you will be able to access the vm.

Sachchidanand 

[piaakit1210]

so that in the cisco switch port side i need to configured as trunk port rather than switchport access vlan 5 right ? 

[alumbwage]

Yes, if you assign vlan id 5 in portgroup you need to have it as trunk and allow vlan 5.

The second option @Sachchidanand mentioned is you leave it as access vlan 5, but you create portgroup with vlan id 0. However this may be an issue if you have more than one vlans going through the same port. 

[piaakit1210]

Just changed the setting to trunk rather than access vlan5 but still unreachable, dedicate port group vlan5 with dedicate vSwitch1, vmnic3 assigned to this port group vlan5, in vm machine network using this group already 

[alumbwage]

I think you can share the network architecture so i can understand more of what you what to achieve.

But if you have a a switch configured as trunk you need also to add command switchport trunk allow vlan add 5 to allow vlan 5.  and also the switch uplink to the Gateway router should be configured to allow vlan 5. And also do you have a gateway ip address configured in the VM? is the gateway configured in the Router? this way may be case if LAN is in different network

[piaakit1210]

Yes the Cisco switch port already allowed vlan all, and the vm itself has default gateway assigned, but The esxi management port are using a fake ip 10.0.0.1 without any gateway, will this be the issue ? and I also have a DMZ network with subnet 192.168.81.0/24 I have a dedicated port group call DMZ with dedicated vmnic and a vm using this port group could access to lan in DMZ, but this time with vlan 5 it’s doesn’t work, 

[alumbwage]

Okay, to make sure i understand correctly. You want to reach ESXi LAN from the VM  connected to portgroup with VLAN 5, right?

If that is the case and ESXi management are using a different VLAN and subnet, Yes you need to configure gateway to the ESXi management also. Make sure the ESXi gateway is reachable from the ESXi host and also VM gateway is reachable from the VM. Also make sure that the gateway for ESXI management and VM VLAN 5 gateway are in the same VRF(if using VRF) or same router (without VRF) If on different router then routing need to be done 

[piaakit1210]

pls find below screenshot of the port group for vlan 510, using dedicate vSwitch1 with physical interface vmnic3 and mapped to vm, so in this case i need to have the esxi management IP with the default gateway in order for the vm to reach the lan with vlan 510 ? 

[alumbwage]

Yes you need a gateway. But what i see from the screenshot is that the VLAN 510 is not used by ESXI management network. But it is used by certain VM. So you need to configure gateway on the VM in vlan 510 and also on VM with vlan 5. Make sure these gateways are reachable from the VMs. 

[piaakit1210]

so that i also need to create vlan 510 with gateway for the esxi management ? the current esxi management using 10.0.0.1 255.255.255.0, if i want to assign vlan 510 with gateway, i need to change the current esxi management IP from 10.0.0.1 to vlan 510 segment ?