VMware Cloud Community
mactechnogeek
Enthusiast
Enthusiast
Jump to solution

Vsphere - Promiscuous Mode?

I have a VM that runs in the Vsphere Hypervisor.   I am attempting to install a VPN utility (SoftEther) that requires the network adapter to be set in Promiscuous mode. After reviewing ESXI documentation, it tells me to go the "Configuration" tab, but that tab is missing.

Is it possible for me to configure my network adapter as such? I called tech support and they pointed me here.

0 Kudos
1 Solution

Accepted Solutions
mactechnogeek
Enthusiast
Enthusiast
Jump to solution

I was able to download the command line tool (esxcli) and that allowed me to set promiscuous mode. It was not trivial to figure this out, but at least I got around it. For anyone else running into this problem, you can do something like this:

To list interfaces /ports

esxcli --server IPADDRESS --username USER --password PASSWORD network ip interface list

My switch was vSwitch0 after running this.

To check the policy:

esxcli --server IPADDRESS --username USER --password PASSWORD network vswitch standard policy security get -v vSwitch0

To set the policy:

esxcli --server IPADDRESS --username USER --password PASSWORD network vswitch standard policy security set -f true -m false -p true -v vSwitch0

View solution in original post

0 Kudos
7 Replies
mactechnogeek
Enthusiast
Enthusiast
Jump to solution

I was able to download the command line tool (esxcli) and that allowed me to set promiscuous mode. It was not trivial to figure this out, but at least I got around it. For anyone else running into this problem, you can do something like this:

To list interfaces /ports

esxcli --server IPADDRESS --username USER --password PASSWORD network ip interface list

My switch was vSwitch0 after running this.

To check the policy:

esxcli --server IPADDRESS --username USER --password PASSWORD network vswitch standard policy security get -v vSwitch0

To set the policy:

esxcli --server IPADDRESS --username USER --password PASSWORD network vswitch standard policy security set -f true -m false -p true -v vSwitch0

0 Kudos
King_Robert
Hot Shot
Hot Shot
Jump to solution

When promiscuous mode is enabled at the portgroup level, objects defined within that portgroup have the option of receiving all incoming traffic on the vSwitch. Interfaces and virtual machines within the portgroup will be able to see all traffic passing on the vSwitch, but all other portgroups within the same virtual switch do not.

When promiscuous mode is enabled at the virtual switch level, all portgroups within the vSwitch will default to allowing promiscuous mode. However, promiscuous mode can be explicitly disabled at one or more portgroups within the vSwitch, which override the vSwitch-defined default.

  1. Log into the ESXi/ESX host or vCenter Server using the vSphere Client.
  2. Select the ESXi/ESX host in the inventory.
  3. Click the Configuration tab.
  4. In the Hardware section, click Networking.
  5. Click Properties of the virtual switch for which you want to enable promiscuous mode.
  6. Select the virtual switch or portgroup you wish to modify and click Edit.
  7. Click the Security tab.
  8. From the Promiscuous Mode dropdown menu, click Accept.
mactechnogeek
Enthusiast
Enthusiast
Jump to solution

Thanks, but I don't have the "Configuration" tab. Is it because I am running the free VSphere version?

0 Kudos
a_p_
Leadership
Leadership
Jump to solution

The Configuration tab is available in all editions, even the free one. Make sure you select the host in the inventory in the left pane.

André

mactechnogeek
Enthusiast
Enthusiast
Jump to solution

Interesting. The only tabs I see after clicking on the server in the inventory section are:

Getting Started, Summary, Resource Allocation, Performance, Events, Console and Permissionsscrenshot.PNG

Am I in the wrong spot?

0 Kudos
a_p_
Leadership
Leadership
Jump to solution

It looks like you selected a virtual machine in the library, rather than the ESXi host.

André

0 Kudos
mactechnogeek
Enthusiast
Enthusiast
Jump to solution

Yep, you're right. I could have sworn I looked at that 10x. Now I see it. Well, at least I learned how to do it the hard way (with command line) in the process.

0 Kudos