VMware Cloud Community
dconvery
Champion
Champion
‎03-08-2010 01:51 PM

vShield Zones and Maintenance Mode Won't Play Well Together...

I have a small cluster with only a few test VMs and vShield Zones set up. All of the vShield VAs are set to disabled for DRS and HA. The cluster has HA enabled and DRS is in fully automatic mode.

If I out a host into maintenance mode, it stalls at 2%. Any DRS-enabled VM STAYS on the host. I cannot power off the vShield VA or move it because all protected VMs will become disconnected. The only way I see around this is to MANUALLY migrate all VMs off of the host, put it maintenance mode and then power off the vShield VA. This really sucks and will suck worse once in production with lots of VMs.

Anyone else having these problems? Anyone find a work around?

Dave Convery, VCDX

VMware vExpert 2009

Careful. We don't want to learn from this.

Bill Watterson, "Calvin and Hobbes"

Dave Convery, VCDX-DCV #20 ** http://www.tech-tap.com ** http://twitter.com/dconvery ** "Careful. We don't want to learn from this." -Bill Watterson, "Calvin and Hobbes"
0 Kudos
2 Replies
iamzanadoo
Contributor
Contributor
‎02-12-2013 07:04 AM

Hi,

Did you or anyone else ever find a workaround for this? I've just come across this in my test environment and like you the only way I can see it working is to manually migrate the VMs off and then power off the vShield (vCloud Net and Security in this case) down manually. This seems very messy to be honest and kind of breaks the ability to use maintenance mode.

0 Kudos
caledfwlchx
Contributor
Contributor
‎03-31-2014 05:51 AM

Patched the host to the latest patch release (VMware ESXi™ 5.5 Update 1 | 11 MAR 2014 | Build 1623387) that seems to worked.

Move the VM's manually via PowerCLI or Web/Thick client (do not worry about the security appliances since are installed on local storage)

After all VM's are moved, place host in MM, install the patch Build 1623387 and this should fix the problem.

Thanks,

0 Kudos