VMware vSphere

 View Only
  • 1.  Cannot access Internet with different Vlan ID

    Posted Nov 25, 2012 05:41 AM

    Hello there,

    I wanted to test the port groups and vlan id with no of them.  the ESXi Vlan is 4095 but no of the VM are able to access the internet with vlan id.  I have also tried to set "Promicuous" to Accept but no use. But if I remove the vlan or set to 0, then it can access the internet.  Please refer to the attached and advise what should be done.

    Many Thanks.



  • 2.  RE: Cannot access Internet with different Vlan ID

    Posted Nov 25, 2012 08:00 AM

    Looks like you are running with a Port based VLAN , in which the packets are tagged at the physical switch level so no tagging /VLAN ID is needed at the vSwitch level. Confirm that with your network team.



  • 3.  RE: Cannot access Internet with different Vlan ID

    Posted Nov 25, 2012 09:39 AM

    The physical switch has only vlan 20, nothing else.

    I was told to isolate the network commiuncation to use port group with vlan.. scrrenshot of cdp from pswitch.



  • 4.  RE: Cannot access Internet with different Vlan ID

    Posted Nov 25, 2012 09:50 AM

    With ESXi you can configure different modes for which - depending on the mode - you need to configure the uplink ports on the physical switch accordingly.

    Take a look at http://www.vmware.com/files/pdf/virtual_networking_concepts.pdf which explains the different configurations.

    What you basically need to do when you configure VLANs on the virtual port groups is to configure the uplink ports as trunk ports (for Cisco switches). See http://kb.vmware.com/kb/1004074 for an sample configuration. Using VLAN ID 4095 is a special configuration, where the VLAN ID has to be managed in the guest OS itself rather than on the switch side (see VGT mode - http://kb.vmware.com/kb/1004252)

    André



  • 5.  RE: Cannot access Internet with different Vlan ID

    Posted Nov 27, 2012 05:32 PM

    The screenshot that you have attached confirms my reasoning that you are using port based VLAN. You can get more Port based VLAN configured on the physical switch and create a vswitch with the uplinks attached to that port to get traffic segregation or go for trunk based in which you will tagging the packet at vSwitch level.