?
Solved

networking best practice esxi 5.1 with 10GB adapters

Posted on 2013-12-17
8
Medium Priority
?
1,570 Views
Last Modified: 2016-11-23
Hi Guys i have a new dell r620 which contains
2 dual port 10GB adapter cards
1 quad port 1GB adapter

10 GB equallogic SAN iscsi
esxi 5.1 (enterprise )

need to manage ;

vmotion/management networks
Iscsi
Local LAN network
DMZ network

Please let me know what your thoughts of the best way on setting this up with what i have

Thanks !
0
Comment
Question by:Saputo
  • 3
  • 3
  • 2
8 Comments
 
LVL 57

Expert Comment

by:giltjr
ID: 39724769
What NICs do you have on your other ESXi servers?

How many other ESXi servers do you have?

Does the new server have any NIC's on the MB?  If not, right of the bat I would get a second NIC with at least two 1 Gb ports.
0
 

Author Comment

by:Saputo
ID: 39724813
iv got 4 brand new servers to set up and they all have the same hardware.

1 intel i350 quadport (onboard) these are 1GB
2 BCM57810 10GB adapters
0
 
LVL 124
ID: 39724881
What SAN do you have an can it take advantage of 10GB iSCSI

otherwise,

virtual machine network or iSCSI for 10GB

Management Network and vMotion - 1GBe

do you use VLANs?

you could use 10GBe in a trunked VLAN?
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 1000 total points
ID: 39725018
When back and re-read your specs:

I agree with hanccocka, to get more specific, my idea would be to make use of all ports would be to (using VLAN's of course):

VLAN#1 - iSCIS - NIC TEAM 10 Gb CARD1PORT1 with 10 Gb CARD2PORT1  (JUMBO Frames of course)

VLAN#2 - VM Network  - NIC TEAM 10 Gb CARD1PORT2with 10 Gb CARD2PORT2

VLAN#3/4 - VMotion/MGMT - TRUNK and  NIC TEAM 1Gb CARD1PORT1 with 1Gbps CARD1PORT3

VLAN#5 - DMZ - NICTEAM 1Gb CARD1PORT2 with 1Gbps CARD1PORT4

If you don't really care about using all ports, you could:

VLAN#1 - iSCIS - NIC TEAM 10 Gb CARD1PORT1 with 10 Gb CARD2PORT1

VLAN#2/3/4 - VM Network/VMotion/MGMT  - NIC TEAM and TRUNK 10 Gb CARD1PORT2 with 10 Gb CARD2PORT2

VLAN#5 - DMZ - NICTEAM 1Gb CARD1PORT2 with 1Gbps CARD1PORT4


The DMZ should be on its own NIC's assuming you have that traffic isolated as much as possible physically.

iSCSI should be physically isolated as much as possible.

Unless your VMNetwork is really pushing 10Gbps to its limit, you can really share the same interfaces for the VM network, mgmt, and VMotion.
0
 

Author Comment

by:Saputo
ID: 39725041
yes my san is 10GB, its an equallogic 6110 iscsi and yes we do use vlans
0
 
LVL 124
ID: 39725148
I would use ALL 10GBe NICs and use the 1GBe for Management Only.
0
 

Author Comment

by:Saputo
ID: 39786367
thanks, for the DMZ i was going to trunk it on the same cards as vm_network. The networking guys  have created 2 diff vlans on the physical switches for them.

or is it really best practice to keep DMZ on its own NIC ???
0
 
LVL 124

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE^2) earned 1000 total points
ID: 39786443
That very much depends on your Security Policy.

Some organisation do not even allow VLANs.

and some organisation would much rather isolate the DMZ traffic on it's own physical network.

If DMZ traffic in your organisation is already VLANed, I so no reason why not also to present that Tagged VLAN to your trunk, to keep the same configuration.

If you have a physical network to support your VLAN, keep it on it's own nic, and label accordingly.
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question