VMware: ESXi Networking

Posted on 2013-12-23
Last Modified: 2014-01-06
I am configuring a new vSphere 5.1 environment, and trying to configure it using the same strategy as our other offices.

Office A (ProCurve switches):
* vSwitch0 -- VMkernel for management: Switch ports tagged on 1000, VMkernel tagged 1000.
* vSwitch1 -- VMkernel for NFS: Switch ports tagged on 1002, VMkernel tagged on 1002.
* vSwitch2 -- VM Port Groups for VM traffic: Switch ports tagged on 300,400,500,600, same for VM Port Group taggings.

Office B (Cisco switches):
* vSwitch0 -- VMkernel for management: Switch ports set to Access mode, untagged on 1000, VMkernel VLAN set to NONE.
* vSwitch1 -- VMkernel for NFS: Switch ports set to Access mode, untagged on 1002, VMkernel VLAN set to NONE.
* vSwitch2 -- VM Port Groups for VM traffic: Switch ports set to TRUNK on 300,400,500,600, same for VM Port Group taggings.

As you can see Office A has tagged traffic going to the VMkernels and Office B has untagged traffic going to the VMkernels.

What is the correct way? Does it matter which way you choose? Advantages vs. Disadvantages?
Question by:pzozulka
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
LVL 122

Accepted Solution

Andrew Hancock (VMware vExpert / EE MVE^2) earned 500 total points
ID: 39736550
Sometimes it depends on your physical switch hardware, often you would use Tagged Frames, when running multiple VLANs down a trunk of more than one network interface.

If using a single access port, you would use untagged frames.

Personally, we would like to see configurations all the same across all hardware, which includes vSwitches.

Because I would guess, some of your vSwitches are Tagged, and some are Untagged. e.g. some you specify the VLAN, and others you do not.

It depends if you and your VMware Admin Team, understand your networking configuration, and you have it well documented.

Author Comment

ID: 39736594
In both environments, when running multiple VLANs down a pipe, we use Tagged Frames. My question is more for the other connections, such as, the Management and NFS connections where only a single VLAN is used for each.

Each of those VMkernels are using NIC Teaming on the ESXi hosts across two same model switches. This is used in both environments. This strategy helps us with redundancy in case one of the switches die. This strategy implements the NIC Team - based on port ID so technically only one network interface is active at a time.

Having said that, it seems both Trunked and Access ports -- tagged or untagged should work OK for our new office setup using the above mentioned strategy. Please confirm.
LVL 122
ID: 39736597
Yes, it will work fine.

Document it, print screen shots of networking, and print out and document configurations from ALL physical switches to aid, with any changes in the future.

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will show you how to create an ISO CD-ROM/DVD-ROM image (*.iso), and MD5 checksum signature, for use with VMware vSphere Hypervisor 6.5 (ESXi 6.5). It's a good idea to compare checksums, because many installations fail because of a corr…
In this article, I will show you HOW TO: Suppress Configuration Issues and Warnings Alert displayed in Summary status for ESXi 6.5 after enabling SSH or ESXi Shell.
Teach the user how to use configure the vCenter Server storage filters Open vSphere Web Client:  Navigate to vCenter Server Advanced Settings: Add the four vCenter Server storage filters: Review the advanced settings: Modify the values of the four v…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question