This was one of the original designs I had, however one issue with this is that say I have allocated 1.1.1.0/24 to use for all external access and the subnet has a limited amount of ip's remaining. Then one of the existing customers wants a large subnet routed to them say /26 or /27, I won't be able to allocate those IP's to them since the 1.1.1.0/24 is full, so that means I will need to re-ip the whole customer with a new external network. So it doesn't really scale well.
Re: Routing public subnets to NSX Edge external interface within vCloud Director, possible ?
↧
↧
Re: Routing public subnets to NSX Edge external interface within vCloud Director, possible ?
Let say you have that scenario with one subnet 1.1.1.0/24, it has limited amount IP and one customer need a new subnet 2.2.2.0/24.
If the new customer needs only the new subnet you can create new VLAN/interface in the physical router for the subnet 2.2.2.0/24 and connect that to the customer Edge.
However, if you want the customer to have 1.1.1.0/24 and 2.2.2.0/24 that would be tricky if you are running on static routing.
Edge can use multiple external network but you can only choose one as the default
What I can think of is the customer would need either use separate Edge and choose which vApp for which Edge or use Dynamic Routing on the Edge and potentially use ECMP
NSX supports Dynamic Routing and this feature is now exposed to vCD 8.2.0 Advanced Routing Configuration Using the vCloud Director Tenant Portal
↧
Re: VMW Log insight using /var/log/vsfwd.log?
Hi, are you looking for DFW message bus user world logs?
The logs are in ESXi host /var/log/vsfwd.log.
If you configure ESXi host to forward its logs to external syslog such as vRealize Log Insight, you should be able to see the logs in the syslog system
Here are some references on configuring syslog on ESXi hosts
Configuring syslog on ESXi (2003322) | VMware KB
Configure Syslog on ESXi Hosts
If you are interested in DFW rule or packet logs, you are looking for /var/log/dfwpktlogs.log
Similar to vsfwd.log, this logs are inside ESXi host and you can forward this to external syslog by configuring syslog on your ESXi hosts
Make sure to Enable logging for the rule(s)
See this documentation Firewall Logs
↧
Re: Routing with VMware NSX - no external access for vxLAN machines
Hi, I was referring to SNAT and not DNAT my mistake.
SNAT or Outbound NAT to translate internal network in VXLAN 5000 to a public external IP address.
↧
Re: Routing with VMware NSX - no external access for vxLAN machines
Hi
Where do you NAT/SNAT for access to the Internet? UBNT USG or other firewall?
Make sure:
1. VM on VXLAN 5001 - 10.100.101.100 can access UBNT USG 10.100.100.1 which I think this looks okay based on your explanation
2. Add SNAT or Outbound NAT for 10.100.101.0/24
↧
↧
Re: Routing with VMware NSX - no external access for vxLAN machines
OK, that makes more sense, but my public IP lies on the USG, so if I did a SNAT on the machines on the vxLAN, aren't I simply making life difficult for me from my other internal resources?
↧
Re: VMW Log insight using /var/log/vsfwd.log?
Thanks again. From the doc you sent over I think /var/log/dfwpktlogs.log. is the
file I was really seeking. One detail I don't see is if logging for a particular NSX edge firewall
is different from the firewall found in Networking and Security/Firewall. Do you know if
both send pass/drops to /var/log/dfwpktlogs.log - or just the latter?
↧
Mint Linux - vmware thinks it is still installed, cannot reinstall
I installed workstation 12.5 to a laptop running Mint Linux 18.1 Sarah 64-bit and then uninstalled it by right clicking the three resulting icons and taking the Uninstall option from the Mint Cinnamon Menu system. I was unaware of the process for using the *.bundle file from the terminal to do an uninstall at that time.
The reason for the uninstall was that the first install would not run, I had found and run an apt-get update, and that has made massive additions and changes to the install. So I thought uninstalling and reinstalling workstation might get it working.
Now I want to install it again, using the sh command and the bundle file, and when I try to do that it reports that it is still installed even though it was uninstalled from Mint and the folders it was installed in have been deleted.
So something somewhere is tricking the vmware install process into thinking I still have Workstation 12.5 installed. Is there some way to clear that mistaken impression?
Jack
↧
Refresh & Recompose
Hi，
Will the refresh and recompose activities impact the Windows and Office Product Activation inside the desktop virtual machines ? Will these cause to lost the activiation information ?
↧
↧
Re: Routing with VMware NSX - no external access for vxLAN machines
As per your requirements, you want the network 10.100.101.0/24 (VXLAN) be able to traverse to the Internet.
Therefore, you will need to do a NAT for network 10.100.101.0/24 either
1. Directly to the public IP on your public facing NAT Device (USG)
2. or a NAT on your NSX Edge (so there will be double NAT, one at USG and one at NSX Edge), your NSX Edge must not have ECMP enabled
↧
Re: VMW Log insight using /var/log/vsfwd.log?
dfwktlogs are logs for DFW and you can enable log on rules with any Action whether it is Allow or Block.
Edge firewall is on NSX Edge and if you want this to be forwarded to external syslog, you will need to configure syslog on the NSX Edge.
See this document: Configure Syslog Servers for NSX Edge
Similar to DFW, you will need to specify which rule you want to log.
See this document: Add an NSX Edge Firewall Rule
↧
Re: VMW Log insight using /var/log/vsfwd.log?
Very helpful - thank you.
↧
Re: Installing VMware Tools on macOS 10.12.3 Error
This is exactly the issue. Thanks for pointing that out. I never even thought to look into whether or not there was another macOS / darwin iso floating around. So VMware needs to either get rid of that iso or work on their detection logic! After mounting the correct darwin.iso it installed perfectly.
Unfortunately Unity display is still not working.
↧
↧
Re: VCenter doesn't work while vmotion at 70%（VMware 6.0）
hi brother：
what‘s it ？ I couldn't see ！
↧
Re: SVGA 3D GPU does not support DirectX 10.0 which is required
I have Workstation Pro 12.5.4 and Fusion 8.5.5 and each have one guest VM that is Windows 10 x64 Professional (both upgraded to W10 from W7 laptops that were converted to VMs).
Oddly enough, if the "Accelerate Graphics" is not checked in the display properties of the VMs, dxdiag reports a higher DX feature level support for the guest VMs.
I am not aware of any free and readily available software to test and verify the DX feature level properties other than dxdiag.
Driver Version: 8.15.1.50
(with Accelerate Graphics checked on both Workstation Pro and Fusion VMs)
DDI Version: 10
Feature Levels: 10_0,9_3,9_2,9_1
(with Accelerate Graphics unchecked on Workstation Pro VM)
DDI Version: 11.2
Feature Levels: 11_1,11_0,10_1,10_0,9_3,9_2,9_1
(with Accelerate Graphics unchecked on Fusion 8.5.5 VM)
DDI Version: 12
Feature Levels: 11_1,11_0,10_1,10_0,9_3,9_2,9_1
So two things you may want to do/check:
(1) you may want to make sure that "Accelerate Graphics" is checked in the Display properties of the VM.
(2) you may also want to check the actual feature level required for the software that you want to run as dxdiag reports 10_0 but there is a 10_1 feature level
↧
Re: Slow Win10 performance on OSX 10.11 Fusion 8
Not sure if VMware reads these or if there's a better forum for these complaints, but I've been seeing poor performance in my Windows 10 VM as well which I think started with the upgrade to Fusion 8. I've been using Fusion for a long time (since version 2 or 3) and have bought every version along the way. I've stuck with VMware partly because I don't like some of Parallels' upgrade practices but between problems like this, the issues with sleeping the Mac with a VM running, and the laying off of the UI team it's getting harder to justify sticking on the Fusion path.
I've been using Parallels on a work machine for the past few months -- not a fair comparison exactly because that's a brand new install of Win10 but its performance is pretty much indistinguishable from native. Like I said, getting harder to keep using Fusion...
↧
Upgrading Patch for ESXi 5.5 Server
Hi All,
What all the things must be noted before updating patch to esxi server ,and what are the backup need to be done .
Thanks,
↧
↧
Re: vSphere 5.1 upgrade to vSAN 6.5 Sound-Off
Hi,
I forgot to mention the VMs will be shutdown and migrate as we have no choice; we have to take the downtime hit. There are only 20 VMs averaging 150GB disk space. Some Hosts are in a cluster while other are in stand alone ESXi.
So the plan is to not live SVM but to migrate them to the NAS and as you stated below.
So to be sure cold migrate is supported correct?
May also look into Veeam for doing this as well.
Thanks
Jeff
↧
Re: For Each Loop and Set-VMNetworkAdapter
Yeah its a typo, not in the actual script.
foreach ($line in $csv)
{
#################################################################################
# Set Variables
#################################################################################
$vmhost_user = "user"
$vmhost_pass = "pass "
$newhost = $line.Host
$host_IP = $line.IP
$san0 = $line.SAN0
$san1 = $line.SAN1
$subnet = $line.Subnet
$gateway = $line.Gateway
$mgmt = $line.ManagementIP
$ntp = $line.NTP
$dns1 = $line.DNS1
$dns2 = $line.DNS2
#################################################################################
# Connect to Hosts
#################################################################################
Write-Host "Connecting to $newhost ESXi Host!" -ForegroundColor Green
Connect-VIServer $newhost -User $vmhost_user -Password $vmhost_pass
#################################################################################
# Get VMKernel PortGroup and Assign IP and Subnet4
#################################################################################
Write-Host "Find the VMKernel PortGroup on Host $newhost and Assign New IP and Subnet to it!" -ForegroundColor Green
$vmkernel0 = Get-VMHostNetworkAdapter $newhost | where { $_.PortGroupName -eq "SAN 0" }
Set-VMHostNetworkAdapter -VirtualNIC $vmkernel0 -IP "$san0" -SubnetMask "$subnet" -confirm:$False
##Dont Test With This One##
#$vmkernel1 = Get-VMHostNetworkAdapter | where { $_.PortGroupName -eq "SAN 1" }
#Set-VMHostNetworkAdapter -VirtualNIC $vmkernel0 -IP "$san0" -SubnetMask "$subnet" -confirm:$False
#################################################################################
# Assign NTP Server Information and Configure NTP Settings
#################################################################################
Write-Host "Configuring NTP and Enabling Auto-Start!" -ForegroundColor Green
Get-VMHost $newhost | Add-VMHostNtpServer -NtpServer $ntp
Get-VmHostService -VMHost $newhost | Where-Object {$_.key -eq "ntpd"} | Start-VMHostService
Get-VmHostService -VMHost $newhost | Where-Object {$_.key -eq "ntpd"} | Set-VMHostService -policy "automatic"
################################################################################
# Disconnect Each Host After Configuration
#################################################################################
Disconnect-VIServer $newhost
↧
Re: vSphere 5.1 upgrade to vSAN 6.5 Sound-Off
Hello Jeff,
If you can attach the NAS to both sites (5.1 environment hosts and the 6.5 vSAN cluster) having a shared vCenter is not necessary.
And yes, cold-migrating these VMs to NAS/other datastore and then to vSAN is supported.
I also thought of mentioning that (but was unsure of what you had available), if you have Veeam or something else that can do full-backup and restore, you could pull from the existing cluster and have vSAN datastore as target (but again, this is likely going to be using the same shared-storage as doing it manually).
Bob
-o- If you found this comment useful or answer please select as 'Answer' and/or click the 'Helpful' button, please ask follow-up questions if you have any -o-
↧
More Pages to Explore .....
