guywood
Contributor
Contributor

Remove ability to add VM's to distributed port group for VMKernel traffic

Hey,


I'm trying to remove the capability to add VM's to my distributed port groups that I want to use solely for VMKernel type traffic:

vmk_only_dpg.PNG

Anyone know how to do this?  Looked around all the settings and documentation but can't find the way.

Guy

0 Kudos
3 Replies
rcporto
Leadership
Leadership

Not 100% if there is another way, but you may try configure the number of ports in your management port group to the exact number of ports you're using to your VMkernel interfaces, this way users will not be able to add virtual machine to this port group since there is no free port available.

---

Richardson Porto
Senior Infrastructure Specialist
LinkedIn: http://linkedin.com/in/richardsonporto
npadmani
Virtuoso
Virtuoso

my answer is not going to be much different then the one you got from Richardson.

So Ideally, I would try to control it using fixed - static port binding using same number of ports you need for VMkernel ports.

and

also setup permissions accordingly so only few people can see/use that port group, others don't have permission.

Narendra Padmani VCIX6-DCV | VCIX7-CMA | VCI | TOGAF 9 Certified
guywood
Contributor
Contributor

Thanks both

0 Kudos