Solved

VM unable to ping another VM in different ESX host with the same VM Network Label

Posted on 2013-01-10
12
3,611 Views
Last Modified: 2013-01-20
Hi All,

I'm having weird issue here with one of my VM, the SCCM Vm in the below scenario cannot even ping the domain controller (DC02-VM) hosted in different ESXi blade host while it can ping the DC01-VM in the same blade host.

in the vSwitch there are two pNIC working as the uplink simultaneously. All of the servers only have one vNIC.

ESXi01 contains the following VM:
SCCM01-VM
DC01-VM

ESXi02 contains the following VM:
DC02-VM

after migrating it into another host as follows, the SCCM server can ping to the DC02-VM which wasn't ping-able, but now it cannot ping DC01-VM:
ESXi01 contains the following VM:
DC01-VM

ESXi02 contains the following VM:
DC02-VM
SCCM01-VM

the strange thing is that between DC01-VM and DC02-VM they can both ping-ing to each other.

what to look for and idea for trouble shoot please ?
I noticed that the VM network label are all the same VLAN and IP address class.
0
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 3
12 Comments
 
LVL 120
ID: 38766203
are the VLANs tagged correctly on the vSphere vSwitch and physical switch.
0
 
LVL 5

Assisted Solution

by:Harsem
Harsem earned 400 total points
ID: 38766585
Hello,

From what you have described I would suggest that the physical switch to which the ESX hosts are connected to are not properly configured.

Most likely the VLAN that is hosting these VMs is not tagged to one or both of the ports that the ESX Servers are connected to.

ESX uses its own internal Virtual Switch (vSwitch) to which the VMs connect. In turn you connect that vSwitch to a physical NIC which then leads to the physical switch.

Seeing that things work within ESX, it look slike the physical switch that is defeating you here.

Jens
0
 
LVL 7

Author Comment

by:Senior IT System Engineer
ID: 38772821
Hm.. if that is the case then it is the Networking team issue not us the server team ?
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 120
ID: 38772827
could you upload screenshots of your vSwitches

what physical switches are you using.
0
 
LVL 5

Assisted Solution

by:Harsem
Harsem earned 400 total points
ID: 38772848
Hello,

from what you have written that is where I would check next.

it might well be that the VLAN Tag is not being sent through to your ESX Server(s). It may be sent to one, but not the other, but that is impossible to tell from what you have described.

If you are using Cisco switches & Cisco Discovery Protocal is enabled, then you can press on the Blue icon next to the NIC in Configuration->Networking
 CDPThis shows you to which Switch port your ESX Server is connected. This can be used to verify if the networking team has configured the correct Switch Port.

If this is not a production environment you can try to create a new Virtual Machine network - but this time do not assign a VLAN ID - do this on both ESX Servers and move your VMs into it. If they can ping each other (across the ESX Servers) then it is almost certain that a VLAN as not been properly presented to the ESX NIC on which that VLAN should be active.

Jens
0
 
LVL 5

Accepted Solution

by:
Harsem earned 400 total points
ID: 38773317
One thing I forgot about

The physical switch that these two ESX Servers are conencted to. Is it just 1 switch or are there 2 (or more) switches involved in traffic from ESXi01 to ESXi02?

If they are seperate you also have to ensure that the VLAN that these VMs communicate over is also allowed to pass the link that connects these switches.
0
 
LVL 7

Author Comment

by:Senior IT System Engineer
ID: 38773330
I believe that there are two CISCO switches for redundancy reason.

the Cisco CDP is turned off based on PCI requirement (for security purpose in production facility).
0
 
LVL 5

Assisted Solution

by:Harsem
Harsem earned 400 total points
ID: 38773400
If they are there for redundancy then is it correc tthat each single switch is connected to both ESXi01 & 02 Server.

In which case I would check VLAN Tags on the ESX ports of the Cisco Switch.
0
 
LVL 120

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE^2)
Andrew Hancock (VMware vExpert / EE MVE^2) earned 100 total points
ID: 38773567
Ask you network engineers for the Cisco configuration of the switches and compare between switches and server ports.
0
 
LVL 120
ID: 38774335
0
 
LVL 5

Expert Comment

by:Harsem
ID: 38797960
Hello,

did you have an update for us?
0
 
LVL 7

Author Closing Comment

by:Senior IT System Engineer
ID: 38798302
Yes it is the network config changes.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SCCM, SCOM or Something Else 6 65
vSphere VM Sysprepped + deleted a snapshot 3 66
X2 to x0 on sonicwall tz200 1 20
VMWare vSAN 5 27
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
When rebooting a vCenters 6.0 and try to connect using vSphere Client we get this issue "Invalid URL: The hostname could not parsed." When we get this error we need to do some changes in the vCenter advanced settings to fix the issue.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question