We help IT Professionals succeed at work.

vmware vmkernel port and netapp

sara2000
sara2000 asked
on
I have  esxis in a cluster and trying mount NFS and iscsi. My case both iscsi and NFS are in same subnet,
I created vmkernel port as on the picture and tried to mount the NFS datastore , some reason the NFS was not able to  mount, that is, access denied, i checked the exfortfs file and everything was ok( the nfs ip has had root access).
i created separate vswitch for NFS and iscsi, tried again and it did not work either.
I removed iscsi vswitch and tried with NFS only, this time it was mounted.
Then i created iscsi vswitch and tried to mount another NFS data store and I was able to mount. this case, the iscsi switch was below the NFS switch.
What I can think of that  the Esxi was using the first available vmkernel port to connect the datastore and did not try with other vmkernel port since both are on same subnet.
Can that be true?
or my esxi will break?switch order
Comment
Watch Question

Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
CERTIFIED EXPERT
Fellow
Expert of the Year 2017

Commented:
This is correct, you have to specify the correct IP Address of the correct VMKernel Portgroup in your NetApp IP Address Access (e.g. Export IP, permissions).
It is good practice to split traffic and not have iSCCI and NFS on the same subnet.
If you have two vmkernel nics on the same subnet the routing gets confused so it might pic the unintended nic as there is routing allowed from that.
VMware suggests to have them in separate subnets.

Commented:
Yes, exactly scaryskullz somehow this seems to be overlooked and seen as trivial with most design suggestions I have seen on here.

Author

Commented:
hanccocka:
Yes we have to specify correct IP.

My question was,
Will it pick the first available vmkernel or randomly pick the vmkernel, if it going to pick the first available vmkernel then i can deny the iscsi ip from exportfs so the NFS will always going though its portgroup?
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
CERTIFIED EXPERT
Fellow
Expert of the Year 2017

Commented:
It's highly recommended you have different VLANs or IP Address ranges for Storage Traffic, NFS and iSCSI.
if you want to use one NIC/group of NICS (in one vSwitch / dvSwitch) to do that you can achieve this by using trunk port and VLAN tagging it with appropriate VLANs and have separate subnets in each VLAN.
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
CERTIFIED EXPERT
Fellow
Expert of the Year 2017

Commented:
to check which VMKernel Portgroup and vmnic, and IP Address is in use, you will need to use esxtop in network mode, at the console or via SSH remotely.

HOW TO:  Performance Monitor vSphere 4.x or 5.0