software iSCSI with different network as COS

[daikyu]

hi community

i have three hosts connected to a NETAPP box via iSCSI software initiator. not a problem at all, but now we need to cange the network, that iSCSI traffic is physically on another networkcard to be completely true the plan is to use two networkcards. (10.10.x.x)

not a big deal also i thought, configured virtual interfaces on the NETAPP side to match the new ip-adresses. cool, i can discover the LUNs with MS Software Initiator from this particular LAN.

the COS: has ip adress 172.x.x.x also VMotion is enabled on that switch. on the other switch, the 2 iSCSI vmkernel portgroups have those ips (SCSI1: 10.10.201.x ; iSCSI2: 10.10.202.x)

now i am able to discover only targets from 172.x.x.x and not from 10.10.x.x. so i guess, the software initiator looks for it on the wrong network card.

sirs, what am i missing at this point ? i am a little bit clueless right now. placing the COS into the 10.10.x.x LAN is simple impossible but i need those targets disvovered properly.

thanks&regards in advance, peter

[SCampbell1]

You need to add a second service console on the same vSwitch as your iSCSI network.

Go to the Your ESX Server/Configuration/Networking in VIClient and click Add Networking...

Then select service console and finish answering the questions. You will need to assign an IP address to the service console in that iSCSI network

You'll also need to do that for each of your three hosts, each with their own second service console and unique IP address.

[Yattong]

Hey,

You must create a 2nd Service console port group onto the correct subnet?

This is because the software initiator actually runs in the Service console and not in the vmkernel. The I/O is running from the vmkernel.

Also be careful, the vmkernel and Service console can only have one gateway each.

If you found this or any other answer useful please consider the use of the Helpful or correct buttons to award points

~y

[Texiwill · Accepted solution]

Hello,

You do not really need a second service console. However, the SC must participate in the iSCSI network. For better security, you may wish for this to be routed through a firewall to the iSCSI netwrok and only the appropriate ports for CHAP authentication between SC and iSCSI host.

Best regards,

Edward L. Haletky

VMware Communities User Moderator

====

Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.

CIO Virtualization Blog: http://www.cio.com/blog/index/topic/168354

As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

[daikyu]

thanks !

i forgot to say i already have a second SC for iSCSI only, but with another physically network.

the point with the SC gateway IMO gets me into the right direction.

i will close the thread and award points after testing that tomorrow (its pretty late in austria)

regards, peter