VMware: ESXi Networking

Posted on 2013-12-23
Last Modified: 2014-01-06
I am configuring a new vSphere 5.1 environment, and trying to configure it using the same strategy as our other offices.

Office A (ProCurve switches):
* vSwitch0 -- VMkernel for management: Switch ports tagged on 1000, VMkernel tagged 1000.
* vSwitch1 -- VMkernel for NFS: Switch ports tagged on 1002, VMkernel tagged on 1002.
* vSwitch2 -- VM Port Groups for VM traffic: Switch ports tagged on 300,400,500,600, same for VM Port Group taggings.

Office B (Cisco switches):
* vSwitch0 -- VMkernel for management: Switch ports set to Access mode, untagged on 1000, VMkernel VLAN set to NONE.
* vSwitch1 -- VMkernel for NFS: Switch ports set to Access mode, untagged on 1002, VMkernel VLAN set to NONE.
* vSwitch2 -- VM Port Groups for VM traffic: Switch ports set to TRUNK on 300,400,500,600, same for VM Port Group taggings.

As you can see Office A has tagged traffic going to the VMkernels and Office B has untagged traffic going to the VMkernels.

What is the correct way? Does it matter which way you choose? Advantages vs. Disadvantages?
Question by:pzozulka
  • 2
LVL 119

Accepted Solution

Andrew Hancock (VMware vExpert / EE MVE^2) earned 500 total points
ID: 39736550
Sometimes it depends on your physical switch hardware, often you would use Tagged Frames, when running multiple VLANs down a trunk of more than one network interface.

If using a single access port, you would use untagged frames.

Personally, we would like to see configurations all the same across all hardware, which includes vSwitches.

Because I would guess, some of your vSwitches are Tagged, and some are Untagged. e.g. some you specify the VLAN, and others you do not.

It depends if you and your VMware Admin Team, understand your networking configuration, and you have it well documented.

Author Comment

ID: 39736594
In both environments, when running multiple VLANs down a pipe, we use Tagged Frames. My question is more for the other connections, such as, the Management and NFS connections where only a single VLAN is used for each.

Each of those VMkernels are using NIC Teaming on the ESXi hosts across two same model switches. This is used in both environments. This strategy helps us with redundancy in case one of the switches die. This strategy implements the NIC Team - based on port ID so technically only one network interface is active at a time.

Having said that, it seems both Trunked and Access ports -- tagged or untagged should work OK for our new office setup using the above mentioned strategy. Please confirm.
LVL 119
ID: 39736597
Yes, it will work fine.

Document it, print screen shots of networking, and print out and document configurations from ALL physical switches to aid, with any changes in the future.

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When we have a dead host and we lose all connections to the ESXi, and we need to find a way to move all VMs from that dead ESXi host.
In this article, I show you step by step with screenshots to assist you - HOW TO: Deploy and Install the VMware vCenter Server Appliance 6.5 (VCSA 6.5), with some helpful tips along the way.
This Micro Tutorial steps you through the configuration steps to configure your ESXi host Management Network settings and test the management network, ensure the host is recognized by the DNS Server, configure a new password, and the troubleshooting…
This video shows you how to use a vSphere client to connect to your ESX host as the root user. Demonstrates the basic connection of bypassing certification set up. Demonstrates how to access the traditional view to begin managing your virtual mac…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question