VMware Cloud Community
Robert_F
Contributor
Contributor

iSCSi --> openfiler 3.2 cant find target

I setup openfiler and have that working so that i can connect to it with Microsoft iSCSI Initiator (to see if i setup openfiler the right way). That worked.

Now i want to add that iSCSI disk to my storage group but can not get that to work. In Networking i have a VMKernel port with Vmotion enabled.

Under storage i enabled the iSCSI software adapter, When i add the IP of the Target (the openfiler box) it scans but does not find a target.

I am using the latest version of ESXi. Who can help me in the right direction?

Thank you.

Robert

Reply
0 Kudos
26 Replies
java_cat33
Virtuoso
Virtuoso

This might help...

I've only setup OpenFiler on an ESX server with a service console

Reply
0 Kudos
Robert_F
Contributor
Contributor

Thank you

I did follow that document and also the whitepaper from VMWare

But no luck yet

Robert

Reply
0 Kudos
java_cat33
Virtuoso
Virtuoso

And the IP address of your ESX server has been configured to be allowed from within Openfiler etc (as per your other host via MS iSCSI initiator)...

Reply
0 Kudos
Robert_F
Contributor
Contributor

Yes I am allowing the whole network

Reply
0 Kudos
mike_laspina
Champion
Champion

The console will also need to reach the openfiler iSCSI target IP. This is required so the sendtargets and authentication functions can occur.

You should see this TCP/IP activity using

tcpdump -i vswifX where X is the SC interface to the openfiler network e.g. vswif1 for the second console if it's on a separate network.

on the host look for port 3260 in the dump

Also make sure the MS initiator is disconnected and did not scan for a connection or it will prevent the vmware host from connecting.

http://blog.laspina.ca/ vExpert 2009
Reply
0 Kudos
nick_couchman
Immortal
Immortal

In ESXi network configuration is simplified a bit - the Console and VMkernel are no longer configured separately but instead use the same network configurations.

Reply
0 Kudos
Robert_F
Contributor
Contributor

Thanks mike i was able to ping the openfiler iSCSi target IP would that be enough? I will do the tcpdump tomorrowmorning.

The MS initiator is not connected. Thanks for the responses you all, i hope to get it up and running tomorrow.

Reply
0 Kudos
mike_laspina
Champion
Champion

Oh! I jumped to a conclusion of ESX. Only the MS initiator connection is relavent.

http://blog.laspina.ca/ vExpert 2009
Reply
0 Kudos
mike_laspina
Champion
Champion

Pings are a good validation, I would make sure to restart the openfiler host and then restart the ESXi host right after it's up.

netstat is also a good connection validation tool.

http://blog.laspina.ca/ vExpert 2009
Reply
0 Kudos
fe333
Contributor
Contributor

I had the same problem. I have to allow the iscsi access to every server, not to the whole network.

In my example

172.16.0.0 Sub 255.255.0.0 (that don´t work)

172.16.10.210 (sub 255.255.255.255) esx1 (this works)

172.16.10.211 (sub 255.255.255.255) esx2 (this works)

Reply
0 Kudos
Robert_F
Contributor
Contributor

I changed the openfiler ACL and only gave the ESXi server access.

after this i rebooted the openfiler server and when it was back up i rebooted the esxi server.

Still no success. in this post i added 3 screen shots, I will put 3 more after this.

Reply
0 Kudos
Robert_F
Contributor
Contributor

Here the other 3 screen shots.

Anyone an idea?

Reply
0 Kudos
mike_laspina
Champion
Champion

Check the ESX firewall security settings and verify that the iSCSI client is allowed.

http://blog.laspina.ca/ vExpert 2009
Reply
0 Kudos
Robert_F
Contributor
Contributor

I cant find the firewall in Security profile.Where do you see that in ESXi?

Reply
0 Kudos
mike_laspina
Champion
Champion

I do not have that version running at this location.

It may only be relevent to ESX.

Just checked - it's not relevent to ESXi

Message was edited by: mike.laspina

http://blog.laspina.ca/ vExpert 2009
Reply
0 Kudos
mike_laspina
Champion
Champion

Do you have authentication disabled?

http://blog.laspina.ca/ vExpert 2009
Reply
0 Kudos
Robert_F
Contributor
Contributor

I am not using authentication. from what i have read on ESXi you do not have to open a port on the firewall (wherever the firewall is, i cant find it)

Should i use authentication?

Reply
0 Kudos
mike_laspina
Champion
Champion

Not at this point. I would do that later when everything is in a known state.

http://blog.laspina.ca/ vExpert 2009
Reply
0 Kudos
Robert_F
Contributor
Contributor

I am really stuck, anyone a suggestion?

Reply
0 Kudos