Sample Configuration - ESX/ESXi connecting to physical switch via VLAN access mode and External Switch VLAN Tagging (EST Mode) (1004127)
This article describes connecting ESX/ESXi to Cisco IOS switches VLAN port.
VLAN Access and Layer 2 switching
- Physical LAN switch is configured for Virtual LAN (VLAN) segmentation.
- ESX/ESXi simply connects to a switch port that belongs to a VLAN at physical switch level.
- Cisco defines a VLAN as a broadcast domain within a switched network.
- VLANs allow you to segment your switched network so that broadcast domains are smaller, leaving more bandwidth for your end nodes.
- Devices that are in one VLAN do not receive broadcasts from devices in another VLAN.
- For devices on different VLANs to communicate, a layer 3 device (usually a router) must be used.
VLAN configuration is recommended for securing network traffic.
Virtual Switch (ESX/ESXi) configuration to connect to VLAN switch port
- No VLAN configuration is required on ESX/ESXi side.
- Set ESX port group to belong to VLAN 0.
- Value zero as VLAN means that the vSwitch is not VLAN tagging the ESX/ESXi packets.
- Virtual switch NIC teaming policy set to route based on originating virtual port ID by default depending if ether-channel is enabled on switch port.
If Ether-channel is configured on Cisco switch port virtual switch NIC teaming policy is set to route base on IP HASH.
Physical Switch Configuration (Cisco, HP, DELL, etc)
- Physical switch Mode Access (Layer2)
- Switch port access VLAN tagging (ID)
- Define VLAN interface
- Assign IP range to VLAN interface
- VLAN routing may be required or VLAN Isolation – (refer to VLAN layer 3 routing Article)
The following commands are applied on Cisco IOS to configure switch port for VLAN access:
interface GigabitEthernet1/15switchport ( Configures the LAN port for Layer 2 switching)switchport access vlan vlan_ID ( The value can be 1 through 4094, except reserved VLANs)
switchport mode access ( Configures the port to be an access port to prevent trunk negotiation delays)spanning-tree portfast ( Configure port-fast for initial STP delay)
The following is a sample EST topology:
Configuration within the vSphere/VMware Infrastructure Client
To configure this within the vSpher/VMware Infrastructure Client:
Highlight the ESX/ESXi Server host.
- Click Configuration > Networking > Properties.
- Highlight the virtual switch in the Ports tab.
- Click Edit.
- Click the General tab.
- Type a value of 0 or NONE in the VLAN ID field. This indicates that VLAN Tagging is off.
- Click the NIC Teaming tab.
- From the Load Balancing dropdown, choose Route based on originating virtual port ID
Verify that there is at least one network adapter listed under ActiveAdapters
To perform VLAN configuration and verification via command line:
Run the following command:
The results appear similar to:
Switch Name Num Ports Used Ports Configured Ports MTU UplinksvSwitch0 64 5 64 1500 vmnic3,vmnic1PortGroup Name VLAN ID Used Ports UplinksVM Network 0 0 vmnic1,vmnic3Service Console 0 1 vmnic1,vmnic3Switch Name Num Ports Used Ports Configured Ports MTU UplinksvSwitch2 64 8 64 1500 vmnic2,vmnic0PortGroup Name VLAN ID Used Ports UplinksVMkernel 0 1 vmnic0,vmnic2Service Console 2 0 1 vmnic0,vmnic2Production 0 2 vmnic0,vmnic2
If the VLAN ID is missing or incorrect, correct the VLAN ID value with the following command:
esxcfg-vswitch -v <VLAN> -p “Service Console” vSwitch0