Solved

VM unable to ping another VM in different ESX host with the same VM Network Label

Posted on 2013-01-10
12
3,898 Views
Last Modified: 2013-01-20
Hi All,

I'm having weird issue here with one of my VM, the SCCM Vm in the below scenario cannot even ping the domain controller (DC02-VM) hosted in different ESXi blade host while it can ping the DC01-VM in the same blade host.

in the vSwitch there are two pNIC working as the uplink simultaneously. All of the servers only have one vNIC.

ESXi01 contains the following VM:
SCCM01-VM
DC01-VM

ESXi02 contains the following VM:
DC02-VM

after migrating it into another host as follows, the SCCM server can ping to the DC02-VM which wasn't ping-able, but now it cannot ping DC01-VM:
ESXi01 contains the following VM:
DC01-VM

ESXi02 contains the following VM:
DC02-VM
SCCM01-VM

the strange thing is that between DC01-VM and DC02-VM they can both ping-ing to each other.

what to look for and idea for trouble shoot please ?
I noticed that the VM network label are all the same VLAN and IP address class.
0
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 3
12 Comments
 
LVL 121
ID: 38766203
are the VLANs tagged correctly on the vSphere vSwitch and physical switch.
0
 
LVL 5

Assisted Solution

by:Harsem
Harsem earned 400 total points
ID: 38766585
Hello,

From what you have described I would suggest that the physical switch to which the ESX hosts are connected to are not properly configured.

Most likely the VLAN that is hosting these VMs is not tagged to one or both of the ports that the ESX Servers are connected to.

ESX uses its own internal Virtual Switch (vSwitch) to which the VMs connect. In turn you connect that vSwitch to a physical NIC which then leads to the physical switch.

Seeing that things work within ESX, it look slike the physical switch that is defeating you here.

Jens
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 38772821
Hm.. if that is the case then it is the Networking team issue not us the server team ?
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 
LVL 121
ID: 38772827
could you upload screenshots of your vSwitches

what physical switches are you using.
0
 
LVL 5

Assisted Solution

by:Harsem
Harsem earned 400 total points
ID: 38772848
Hello,

from what you have written that is where I would check next.

it might well be that the VLAN Tag is not being sent through to your ESX Server(s). It may be sent to one, but not the other, but that is impossible to tell from what you have described.

If you are using Cisco switches & Cisco Discovery Protocal is enabled, then you can press on the Blue icon next to the NIC in Configuration->Networking
 CDPThis shows you to which Switch port your ESX Server is connected. This can be used to verify if the networking team has configured the correct Switch Port.

If this is not a production environment you can try to create a new Virtual Machine network - but this time do not assign a VLAN ID - do this on both ESX Servers and move your VMs into it. If they can ping each other (across the ESX Servers) then it is almost certain that a VLAN as not been properly presented to the ESX NIC on which that VLAN should be active.

Jens
0
 
LVL 5

Accepted Solution

by:
Harsem earned 400 total points
ID: 38773317
One thing I forgot about

The physical switch that these two ESX Servers are conencted to. Is it just 1 switch or are there 2 (or more) switches involved in traffic from ESXi01 to ESXi02?

If they are seperate you also have to ensure that the VLAN that these VMs communicate over is also allowed to pass the link that connects these switches.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 38773330
I believe that there are two CISCO switches for redundancy reason.

the Cisco CDP is turned off based on PCI requirement (for security purpose in production facility).
0
 
LVL 5

Assisted Solution

by:Harsem
Harsem earned 400 total points
ID: 38773400
If they are there for redundancy then is it correc tthat each single switch is connected to both ESXi01 & 02 Server.

In which case I would check VLAN Tags on the ESX ports of the Cisco Switch.
0
 
LVL 121

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE^2)
Andrew Hancock (VMware vExpert / EE MVE^2) earned 100 total points
ID: 38773567
Ask you network engineers for the Cisco configuration of the switches and compare between switches and server ports.
0
 
LVL 121
ID: 38774335
0
 
LVL 5

Expert Comment

by:Harsem
ID: 38797960
Hello,

did you have an update for us?
0
 
LVL 8

Author Closing Comment

by:Senior IT System Engineer
ID: 38798302
Yes it is the network config changes.
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question