Solved

vSphere and the isolation adress

Posted on 2010-11-29
6
1,722 Views
Last Modified: 2012-05-10
We had network problems yesterday and our 2 host ESX cluster couldn't see the default gateway, so (this is what i think anyway) HA was activated and things got in a right state. The gateway was down for a while and and we then couldn't start VMs due to "insufficient resources to satisfy configured failover level for HA."

Why does vSphere activate HA when it can't see the default gateway, I guess there's some logic behind but i can't figure out why?   That's the question.

Cheers
0
Comment
Question by:kswan_expert
6 Comments
 
LVL 14

Accepted Solution

by:
Deepak Kosaraju earned 300 total points
Comment Utility
To avoid this, you create an advanced parameter by clicking the advanced tab in HA settings and then enter das.isolationaddress and set the value to a pingable IP address you deem fit to serve as the IP address used by the HA cluster to determine whether or not the host has become isolated from the network.  YOu then create another parameter call das.usedefaultisolationaddress and set a value of FALSE.  You can a couple of IPs using this method, but if you do you should also increase the timeout value, this is das.failuredetectiontime, the default is 15 seconds, increase it to 30 seconds when more than 1 isolation address is used.  Refer to your ESX 3.5 resource management pdf, I've attached it for you.
0
 

Author Comment

by:kswan_expert
Comment Utility
Cheers for speedy reply!   We've set "dasiolation host = false" for the Cluster HA which apparently should fix the problem.  
We've made this change but are still wondering why HA is activated if it can't see the GW??
There's obviously some reason\logic behind it and now that we've disabled the feature will it have unexpected consequnces??


0
 
LVL 3

Assisted Solution

by:Virtalicious
Virtalicious earned 100 total points
Comment Utility
The underlying reason is that the guests may be in a dual brained mode in which it tries to run on multiple machines.  It engages HA to take ownership and ensure the guest is only run in one location.

The Theory being that although network is compromised the SAN may not be.

-Virt
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 5

Expert Comment

by:ianmellor
Comment Utility
Hi kswan_expert,

HA will only try and contact the default gateway if it is unable to communicate with the other hosts. This is it's isolation check. You can change the address it checks for isolation but if the gateway goes down HA won't start, your host have to lose connection to each other.

Hope this helps.  
0
 

Author Comment

by:kswan_expert
Comment Utility
Cheers guys, humour me here but Vmware have set me wrong so I want to be 100% we get this right.

We set the HA advanced option to "dasiolation host = false"  as advised by a Vmware tech but this ain't worked!  We lost access to the GW again last night, HA failed on a host wouldn't restart and we received the message "Host ******* could not reach isolation address: #.#.#.#"

So, if i set the following for HA advanced options will it fix our probs

das.usedefaultisolationaddress = false


Do we have to set  a value for “dasiolation host” what happens if we don’t?  What do people usually use for these values.  I was thinking of using a local physical 2003 DC and a physical  file server that it pretty much never rebooted.
0
 
LVL 5

Assisted Solution

by:ianmellor
ianmellor earned 100 total points
Comment Utility
Hi,

I have never seen the advanced option "dasiolation host = false" , I think you mean the below setting.

das.usedefaultisolationaddress = <value>

This option/value pair disables the use of the default gateway as an isolation address, where <value> is either true or false. By default this value is set to true. This parameter is generally used in conjunction with the das.isolationaddress1 to das.isolationaddress10 parameter(s) listed below.

das.isolationaddress1 to das.isolationaddress10 = <value>

These option/value pair(s) specify more than one alternate isolation address for VMware HA to use, where <value> represents the IP address to be used for isolation detection. When using more than one isolation address it is recommended that the das.failuredetectiontime parameter be increased to ensure proper failover detection can occur. Also, although up to 10 different isolation addresses can be specified one or two addresses should be sufficient for proper failover detection

das.failuredetectiontime = <value>

This option/value pair changes the default failure detection timeout, where <value> represents the failure time in milliseconds. VMware HA uses this timeout in declaring an isolation response, and does not declare a host as isolated until this timeout has been reached without any heartbeats received. By default the default failure detection time is 15 seconds (15000 ms). However, another common alternative is 60 seconds (60000 ms).

Hope this helps you.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

Will try to explain how to use the VMware feature TAGs in the VMs and create Veeam Backup Jobs using TAGs. Since this article is too long, I will create second article for the Veeam tasks.
In this article, I will show you HOW TO: Create your first Windows Virtual Machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, the Windows OS we will install is Windows Server 2016.
Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …
This Micro Tutorial walks you through using a remote console to access a server and install ESXi 5.1. This example is showing remote access and installation using a Dell server. The hypervisor is the very first component of your virtual infrastructu…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now