Solved

vSphere and the isolation adress

Posted on 2010-11-29
6
1,764 Views
Last Modified: 2012-05-10
We had network problems yesterday and our 2 host ESX cluster couldn't see the default gateway, so (this is what i think anyway) HA was activated and things got in a right state. The gateway was down for a while and and we then couldn't start VMs due to "insufficient resources to satisfy configured failover level for HA."

Why does vSphere activate HA when it can't see the default gateway, I guess there's some logic behind but i can't figure out why?   That's the question.

Cheers
0
Comment
Question by:kswan_expert
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 14

Accepted Solution

by:
Deepak Kosaraju earned 300 total points
ID: 34233718
To avoid this, you create an advanced parameter by clicking the advanced tab in HA settings and then enter das.isolationaddress and set the value to a pingable IP address you deem fit to serve as the IP address used by the HA cluster to determine whether or not the host has become isolated from the network.  YOu then create another parameter call das.usedefaultisolationaddress and set a value of FALSE.  You can a couple of IPs using this method, but if you do you should also increase the timeout value, this is das.failuredetectiontime, the default is 15 seconds, increase it to 30 seconds when more than 1 isolation address is used.  Refer to your ESX 3.5 resource management pdf, I've attached it for you.
0
 

Author Comment

by:kswan_expert
ID: 34233996
Cheers for speedy reply!   We've set "dasiolation host = false" for the Cluster HA which apparently should fix the problem.  
We've made this change but are still wondering why HA is activated if it can't see the GW??
There's obviously some reason\logic behind it and now that we've disabled the feature will it have unexpected consequnces??


0
 
LVL 3

Assisted Solution

by:Virtalicious
Virtalicious earned 100 total points
ID: 34234340
The underlying reason is that the guests may be in a dual brained mode in which it tries to run on multiple machines.  It engages HA to take ownership and ensure the guest is only run in one location.

The Theory being that although network is compromised the SAN may not be.

-Virt
0
Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.

 
LVL 5

Expert Comment

by:ianmellor
ID: 34248000
Hi kswan_expert,

HA will only try and contact the default gateway if it is unable to communicate with the other hosts. This is it's isolation check. You can change the address it checks for isolation but if the gateway goes down HA won't start, your host have to lose connection to each other.

Hope this helps.  
0
 

Author Comment

by:kswan_expert
ID: 34254414
Cheers guys, humour me here but Vmware have set me wrong so I want to be 100% we get this right.

We set the HA advanced option to "dasiolation host = false"  as advised by a Vmware tech but this ain't worked!  We lost access to the GW again last night, HA failed on a host wouldn't restart and we received the message "Host ******* could not reach isolation address: #.#.#.#"

So, if i set the following for HA advanced options will it fix our probs

das.usedefaultisolationaddress = false


Do we have to set  a value for “dasiolation host” what happens if we don’t?  What do people usually use for these values.  I was thinking of using a local physical 2003 DC and a physical  file server that it pretty much never rebooted.
0
 
LVL 5

Assisted Solution

by:ianmellor
ianmellor earned 100 total points
ID: 34255283
Hi,

I have never seen the advanced option "dasiolation host = false" , I think you mean the below setting.

das.usedefaultisolationaddress = <value>

This option/value pair disables the use of the default gateway as an isolation address, where <value> is either true or false. By default this value is set to true. This parameter is generally used in conjunction with the das.isolationaddress1 to das.isolationaddress10 parameter(s) listed below.

das.isolationaddress1 to das.isolationaddress10 = <value>

These option/value pair(s) specify more than one alternate isolation address for VMware HA to use, where <value> represents the IP address to be used for isolation detection. When using more than one isolation address it is recommended that the das.failuredetectiontime parameter be increased to ensure proper failover detection can occur. Also, although up to 10 different isolation addresses can be specified one or two addresses should be sufficient for proper failover detection

das.failuredetectiontime = <value>

This option/value pair changes the default failure detection timeout, where <value> represents the failure time in milliseconds. VMware HA uses this timeout in declaring an isolation response, and does not declare a host as isolated until this timeout has been reached without any heartbeats received. By default the default failure detection time is 15 seconds (15000 ms). However, another common alternative is 60 seconds (60000 ms).

Hope this helps you.
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VMWare ESXi Guest CPU 8 134
VMware:  Virtual switches and multiple NICs 9 134
veeam restore 10 76
Backup Options in vSphere 6.x 1 37
Veeam Backup & Replication has added a new integration – Veeam Backup for Microsoft Office 365.  In this blog, we will discuss how you can benefit from Office 365 email backup with the Veeam’s new product and try to shed some light on the needs and …
This article outlines why you need to choose a backup solution that protects your entire environment – including your VMware ESXi and Microsoft Hyper-V virtualization hosts – not just your virtual machines.
Teach the user how to delpoy the vCenter Server Appliance and how to configure its network settings Deploy OVF: Open VM console and configure networking:
This Micro Tutorial walks you through using a remote console to access a server and install ESXi 5.1. This example is showing remote access and installation using a Dell server. The hypervisor is the very first component of your virtual infrastructu…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question