bhards4 Tracker

Re: unable to establish east-west communication using NSX-T

bhards4 — Fri, 06 Mar 2020 13:19:39 GMT

ok,

let me brief you again for your convinience

Im using VMware workstation 15.5 as the underlay infrasructure.

1) I have 2 ESXi host with IP 192.168.0.111 and 192.168.0.112

2) 2 segments created web (192.68.1.1/24 and 192.168.2.1/24)

3) TEP pool is in 192.168.0.131.-140

TEP IP assigned on ESXi are 192.168.0.131 and 192.168.0.132

Now as you have asked whether you were able to ping TEP on both the ESXi or not, then the ans is yes

Host 1

[root@esxi2021in:~] vmkping -S vxlan 192.168.0.132 -d -s 1465 -c 10

PING 192.168.0.132 (192.168.0.132): 1465 data bytes

1473 bytes from 192.168.0.132: icmp_seq=0 ttl=64 time=0.032 ms

1473 bytes from 192.168.0.132: icmp_seq=1 ttl=64 time=0.362 ms

1473 bytes from 192.168.0.132: icmp_seq=2 ttl=64 time=0.054 ms

1473 bytes from 192.168.0.132: icmp_seq=3 ttl=64 time=0.267 ms

1473 bytes from 192.168.0.132: icmp_seq=4 ttl=64 time=0.156 ms

1473 bytes from 192.168.0.132: icmp_seq=5 ttl=64 time=0.033 ms

1473 bytes from 192.168.0.132: icmp_seq=6 ttl=64 time=0.230 ms

1473 bytes from 192.168.0.132: icmp_seq=7 ttl=64 time=0.052 ms

1473 bytes from 192.168.0.132: icmp_seq=8 ttl=64 time=0.065 ms

1473 bytes from 192.168.0.132: icmp_seq=9 ttl=64 time=0.085 ms

Host 2

[root@esxi2021in:~] vmkping -S vxlan 192.168.0.131 -d -s 1465 -c 10

PING 192.168.0.132 (192.168.0.132): 1465 data bytes

1473 bytes from 192.168.0.131: icmp_seq=0 ttl=64 time=0.230 ms

1473 bytes from 192.168.0.131: icmp_seq=1 ttl=64 time=0.478 ms

1473 bytes from 192.168.0.131: icmp_seq=2 ttl=64 time=0.491 ms

1473 bytes from 192.168.0.131: icmp_seq=3 ttl=64 time=0.328 ms

1473 bytes from 192.168.0.131: icmp_seq=4 ttl=64 time=0.099 ms

1473 bytes from 192.168.0.131: icmp_seq=5 ttl=64 time=0.462 ms

1473 bytes from 192.168.0.131: icmp_seq=6 ttl=64 time=0.157 ms

1473 bytes from 192.168.0.131: icmp_seq=7 ttl=64 time=0.445 ms

1473 bytes from 192.168.0.131: icmp_seq=8 ttl=64 time=0.133 ms

1473 bytes from 192.168.0.131: icmp_seq=9 ttl=64 time=0.255 ms

- Sachin

Re: unable to establish east-west communication using NSX-T

bhards4 — Fri, 06 Mar 2020 13:00:55 GMT

@daphnissov Im not playing here quiz quiz show.

I really have the issue then only I have raised the issue in community.

If you have the solution thats well and good. otherwise its ok no issue at all.

-Sachin

Re: unable to establish east-west communication using NSX-T

bhards4 — Fri, 06 Mar 2020 12:48:11 GMT

@daphnissov Im able to do vmkping of TEP between both the ESXi host without any issue , no matter if the mtu is smaller or jumbo frame. So nothing fundamentally wrong anywhere.

As stated, the issue is the same, where im not able to perform East-West connectivity of vms which are on diffrent subnet hosting on individual ESXi host.

Let me know if have have any solution for this.

-Sachin

Re: unable to establish east-west communication using NSX-T

bhards4 — Fri, 06 Mar 2020 08:58:20 GMT

Hi Mauricioamorim,

Yes, Im able to ping the TEP with lower 1470-75 as well as with jumbo frame 9000 but still unable to communicate between TEP-TEP amount 2 ESXi host.

Please find some of the screenshots of Traceflow and Node down status of NSX-T .

-Sachin

Re: unable to establish east-west communication using NSX-T

bhards4 — Wed, 04 Mar 2020 18:04:32 GMT

Tried enabling Jumbo frame on workstation network but still the same.

Re: unable to establish east-west communication using NSX-T

bhards4 — Wed, 04 Mar 2020 17:58:59 GMT

Hi,

Please find the response below

What network have you used for TEP? - Its on the same subnet where the ESXi and the NSX appliance is "192.168.0.x"

When you prepared you host TNs what transport network did you use: I have prepare both the ESXi host using Transport node profile.

Host preparation creates a vmk10 interface : vmk10 interface is showing up on both the ESXi host but im unable to ping the TEP using vmkping on both the ESXi host.

-Sachin

Re: unable to establish east-west communication using NSX-T

bhards4 — Wed, 04 Mar 2020 16:57:33 GMT

hmm, so does that mean VMware workstation has compatibility issue with NSX-T version.

Any further comments.

-Sachin

Re: unable to establish east-west communication using NSX-T

bhards4 — Wed, 04 Mar 2020 15:54:32 GMT

Yes, Im unable to ping the TEP IP's. Is there any solution to resolve this..

Re: unable to establish east-west communication using NSX-T

bhards4 — Wed, 04 Mar 2020 09:07:15 GMT

Well, As per my understanding there is no necessity to deploy edge nodes or cluster on T1 gateway under NSX-T . As by default "DR" Distributed router get installed on each transport node which in my case are ESXi Host which take care of floating distributed services across nodes.

To answer your question : No I have not deployed Edge nodes and cluster under T1 Gateway.

Adding points:

As stated I have 2 segments created using 2 different subnets.

I have deployed 2 VMs connected with 2 segments having different subnet. Whenever, both the VMs ; hosted on same ESXi host, the east west communication works well and there is no down status identified on Node, Transport zone or TEP on ESXi host. However, I'm unable to find any active TEP under the monitoring section of Node in NSX-T UI.

Now, If i move one VM to other ESXi host, then whole thing breaks down where the communication between both the VMs lost. TEP status shows as down on both the ESXi host, Node and Transport zone status shows as down status.

-Sachin

unable to establish east-west communication using NSX-T

bhards4 — Mon, 02 Mar 2020 17:30:52 GMT

Hi All,

I have setup lab of NSX-T 2.4 where Im trying to communicate East-West communication but after multiple attempt Im unable to establish the communication amount 2 diffrent subnet VM's

My lab environment

vmware workstation 15.5.0

NSX-T 2.4

ESXi 6.7

vCenter 6.7

Created 3 network on Workstaton 15.5.0

vmnet-8 ( For management Network) 192.168.0.x

vmnet-0 (vmnetwork) 192.168.1.x)

vmnet-1 (vmnetwork) 192.168.2.x)

I have created T-1 Gateway and 2 segments

Advertise Route (All Static Routes & All Connected Segments & Service Ports) on T-1 Gateway.

Seg-1 subnet 192.168.1.1

Seg-2 subnet 192.168.2.1

Created 2 VMs on vCenter and allocated IP

vm1 192.168.1.2

vm2 192.168.2.2

Added the segment on the VM network as per the IP address.

Now when I try to ping vm2 ip from vm1 VM, I'm unable to ping but only able to ping the default gateways of both the segments.

Please let me know if I missed somewhere.

-Sachin

Re: why vmfd got created

bhards4 — Fri, 14 Feb 2020 15:08:30 GMT

why vmfd got created

bhards4 — Fri, 14 Feb 2020 10:31:45 GMT

Hi All,

As anyone experience viewing VMFD file under VM file directory.

I recently encrypted a vm using KMS server and after that i saw a file -1.vmfd got created automatically. Also the naming convention of all other file started with -1.file name. This was not the case before encrypting the VM. All the vm file structure was same as normal. Also, I have not find any article which states that after encryption of VM file called VMFD will generate.

Anyone who experienced this please comment into it.

Regards,

Bhards4

script to add multiple IP in allow and deny into vCenter 6.5 firewall

bhards4 — Thu, 31 Oct 2019 08:38:50 GMT

Hi All,

I have bulk of IP address which needed to be added in allow and deny filed of vCenter firewall section,

Is there any script available to add multiple IPs in allow and deny section into vCenter firewall.

Regards,

Re: vDS physical nic uplinks not displaying in vCenter web client

bhards4 — Wed, 11 Sep 2019 17:21:04 GMT

Is it showing the same status from flash based webclient and HTML?

Re: Paravirtual os LSI Logiac SAS controller for SQL server ?

bhards4 — Thu, 11 Jul 2019 06:44:59 GMT

Hi,

I suggest you to use VMware Paravirtual SCSI Controllers for the SQL db disks or any critical vms where you require high performace stroage I/O's

VMware Paravirtual SCSI controllers are high performance storage controllers that can result in greater throughput and lower CPU use. These controllers are best suited for high performance storage environments.

Regards,

Sachin Bhardwaj

---------------------------------------------------------------------------------------------------------

Was it helpful? Let us know by completing this short survey here.

Re: Update Manager,

bhards4 — Thu, 11 Jul 2019 06:40:54 GMT

Hi,

Basically VUM and VC is one to one mapping. However, you can add multiple vCenter to vum from Update manager utility but that is not supported by VMware.

VUM has a utility called VMwareUpdateManagerUtility.exe in which we can re-register the vCenter Server . For ex we can install the VUM plugin to the first VCSA 1.1.1.1 and update the ESX host. Later we can re-configure the VUM by running the utility and it will ask for the option to give the VC name or IP in which we can provide the second VC IP address.

Hope that answer your query.

Regards,

Sachin Bhardwaj

Re: enable ssh from vSphere Client cli

bhards4 — Tue, 26 Feb 2019 06:45:00 GMT

Hi,

There is a great article written by Williams for starting and stopping the ssh services remotely.

Follow below link for more details.

hostServiceManagement.pl

Regards,

Sachin

Re: ESXi 6.0 in cluster & migrate the VMs from standalone ESXi 6.0 hosts (Shared nothing vMotion)

bhards4 — Tue, 26 Feb 2019 06:36:01 GMT

Hi,

You can perform vmotion from ESXi host which is not having shared storage by using xvMotion. This feature is available from vCenter 5.5 on-words. Just make sure you have our source and destination host are reachable and should be in cluster for communication.

Next, You can set the permission desired based on the role who would e accessing the vCenter or cluster via vCenter rules, like read only, or setting customer rule and assigning appropriate permissions.

Regards,

Sachin

Re: Upgrade & Migrate from External PSC to Embedded

bhards4 — Sun, 23 Dec 2018 08:16:17 GMT

Hi,

Migrating External PSC to embedded PSC is now supported in ESXi 6.7 Update 1.

https://blogs.vmware.com/vsphere/2018/08/under-the-hood-vsphere-6-7-update-1.html

https://blogs.vmware.com/vsphere/2018/11/external-platform-services-controller-a-thing-of-the-past.html

Regards,

Sachin Bhardwaj

Re: Disabling TLS 1.0 on ESXI

bhards4 — Fri, 09 Nov 2018 06:57:31 GMT

Hi,

Please find below VMware documentation link to disable TLS.

Disable TLS Versions on ESXi Hosts

Regards,

Sachin Bhardwaj