1

I have a BNT (now an IBM) RackSwitch G8264 and am having problems trying to get standard VLANs configured and working with my two ESXi 5.5 hosts.

I've followed the documentation (which can be found here) for the version of switch software I am running, and I believe I have configured the VLANs correctly. However, when I create a standard port group on both my ESXi hosts and tag them with my newly created VLANs, traffic does not work. If I do not tag any traffic on the standard ESXi port group, everything works fine.

Here is my current setup:

2 x ESXi hosts running 5.5 update 1.
Standard switch with one physical adapter uplink.
One port group tagging on VLAN 202 with test VMs connected to them.
Switchports set to trunk mode with a default VLAN (for untagged packets) of 1 and allowed VLANs of 1 and 202.

If I set the VLAN ID in both port groups on each host to 202, the VMs on each host can not ping each other.

If I set the VLAN ID in both port groups on each host to 0 (None), the VMs on each host can ping each other successfully.

If I set the VLAN ID in both port groups on each host to 1, the VMs on each host can not ping each other.

So it seems that if I set any kind of VLAN tag on my port group on my ESXi hosts, communication fails.

What can I use on the switch or my ESXi hosts to inspect the frames to see if the tagging is happening? As far as I'm aware, you can't install Wireshark on a switch?

Any assistance would be appreciated.

Here is the entire dump of my switch config:

version "7.8.1"
switch-type "IBM Networking Operating System RackSwitch G8264"
iscli-new
!
ssh enable
!
interface port 53
    description "ESXi 1"
    switchport mode trunk
    switchport trunk allowed vlan 1,202
    exit
!
interface port 55
    description "ESXi 2"
    switchport mode trunk
    switchport trunk allowed vlan 1,202
    exit
!
vlan 202
    name "VLAN 202"
!
!spanning-tree mode disable
!no spanning-tree stg-auto
!
!interface ip 1
        addr <default>
        enable
!
!interface ip 128
        addr <default>
        enable

!end'

9
  • You can't install Wireshark on a switch but you can install it on a workstation and then have the switch trunk port traffic mirrored to the workstation switch port. Run Wireshark on the workstation and you should see all of the traffic transiting your switch trunk port. I haven't used VLANs with vSphere but I'm assuming you should see tagged frames being sent out of your switch trunk port to the vSwitch, which in turn should remove the tag before sending the frame to the VM.
    – joeqwerty
    Jun 23, 2014 at 13:28
  • IBM makes switches?!?
    – ewwhite
    Jun 23, 2014 at 13:50
  • @ewwhite IBM acquired BNT a while back, yes.
    – MikeyB
    Jun 23, 2014 at 13:52
  • The vSwitch should have no special configuration. Your port groups should be tagged appropriately. Are you relying on a default VLAN 1 for general traffic? I tend not to use VLAN 1 for anything once I start introducing other tags.
    – ewwhite
    Jun 23, 2014 at 14:04
  • 1
    on the vSwitch properties did you confirm that on the NIC Teaming tab that Load Balancing is set to Route based on the originating virtual port ID? Also, it looks like the vSwitch dropping VLAN 1 frames is the expected behavior (assuming that VLAN 1 is the default/native VLAN) - kb.vmware.com/selfservice/microsites/…
    – joeqwerty
    Jun 23, 2014 at 14:27

1 Answer 1

2

The vSwitch should have no special configuration.

Your port groups should contain all of the actual VLAN tags. On the switch side, is VLAN 1 actually defined anywhere?

See my example from: vSwitch configuration with 12 uplinks

There's nothing untagged at the vSwitch level because it makes more sense to associate port groups with a VLAN once you start trunking back to the physical switch. As @joeqwerty mentioned above, vSphere doesn't support what you're doing with the native VLANs.

Caution: Native VLAN ID on ESXi/ESX VST Mode is not supported. Do not assign a VLAN to a port group that is same as the native VLAN ID of the physical switch. Native VLAN packets are not tagged with the VLAN ID on the outgoing traffic toward the ESXi/ESX host. Therefore, if the ESXi/ESX host is set to VST mode, it drops the packets that are lacking a VLAN tag.

12
  • Thanks for your comment. I only have one physical NIC in my standard switch. I am trying not to run all my traffic down VLAN 1. I want to be able to create separate VLANs for all my traffic - but can't seem to do so. At this stage, I'm thinking it's more of a switch problem as I have similar hosts setup in another environment with Netgear switches, and they work fine.
    – cpjones44
    Jun 23, 2014 at 22:29
  • See the note above. If you introduce a tagged-VLAN port group, ALL of your portgroups need to be tagged.
    – ewwhite
    Jun 23, 2014 at 22:43
  • As in, ALL the port groups on the virtual switch? At the moment, I have two port groups on each host. First one is for management - not assigned a VLAN ID - works as expected (as I can access the host). Second one is VLAN 202 which i have VMs connected to. Communication between hosts does not work.
    – cpjones44
    Jun 23, 2014 at 22:51
  • Yes, please tag all portgroups.
    – ewwhite
    Jun 23, 2014 at 22:58
  • 2
    Hi @Shane. I've managed to solve the problem. I was able to determine this by testing VLAN trunks with a downstream switch I connected. Everything worked fine first go. The issue with ESXi wasn't with the switch, it was with the driver I was using for my NICs. I have these Emulex 10g cards, and there were two lots of offline bundles I could use from the Emulex website. I installed the second available bundle (be3) and now everything works as expected. Thanks for your help :)
    – cpjones44
    Jun 25, 2014 at 6:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .