vmware vmkernel port and netapp

I have  esxis in a cluster and trying mount NFS and iscsi. My case both iscsi and NFS are in same subnet,
I created vmkernel port as on the picture and tried to mount the NFS datastore , some reason the NFS was not able to  mount, that is, access denied, i checked the exfortfs file and everything was ok( the nfs ip has had root access).
i created separate vswitch for NFS and iscsi, tried again and it did not work either.
I removed iscsi vswitch and tried with NFS only, this time it was mounted.
Then i created iscsi vswitch and tried to mount another NFS data store and I was able to mount. this case, the iscsi switch was below the NFS switch.
What I can think of that  the Esxi was using the first available vmkernel port to connect the datastore and did not try with other vmkernel port since both are on same subnet.
Can that be true?
or my esxi will break?switch order
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
This is correct, you have to specify the correct IP Address of the correct VMKernel Portgroup in your NetApp IP Address Access (e.g. Export IP, permissions).
It is good practice to split traffic and not have iSCCI and NFS on the same subnet.
If you have two vmkernel nics on the same subnet the routing gets confused so it might pic the unintended nic as there is routing allowed from that.
VMware suggests to have them in separate subnets.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Yes, exactly scaryskullz somehow this seems to be overlooked and seen as trivial with most design suggestions I have seen on here.
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

sara2000Author Commented:
Yes we have to specify correct IP.

My question was,
Will it pick the first available vmkernel or randomly pick the vmkernel, if it going to pick the first available vmkernel then i can deny the iscsi ip from exportfs so the NFS will always going though its portgroup?
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
It's highly recommended you have different VLANs or IP Address ranges for Storage Traffic, NFS and iSCSI.
if you want to use one NIC/group of NICS (in one vSwitch / dvSwitch) to do that you can achieve this by using trunk port and VLAN tagging it with appropriate VLANs and have separate subnets in each VLAN.
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
to check which VMKernel Portgroup and vmnic, and IP Address is in use, you will need to use esxtop in network mode, at the console or via SSH remotely.

HOW TO:  Performance Monitor vSphere 4.x or 5.0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.