Loading

×Sorry to interrupt
CSS Error

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

Skip to main content

My Subscriptions

Loading

Knowledge Base

Enabling vMotion on internal vswitch behind bridged-mode firewalls and other network appliances (1006701)

Last Updated: 2/14/2020Categories: How toTotal Views: 13503Language:
English

2 like this article

Subscribe to get an email
newsletter with new updates

2 people found this helpful Please provide article feedback:

Details

How can I enable vMotion for servers behind a firewall virtual appliance (or other service virtual machine) deployed in bridged networking mode?

Solution

Increasingly, network security and other infrastructure services are being delivered as virtual appliances, rather than as external physical appliances. Many ISVs or IHVs have announced or shipped virtual appliance editions of their physical appliance solutions. Common network security and services that are being virtualized include firewalls, intrusion detection and prevention (IDS/IPS), content filtering, load balancing, access control, and NAT routing.

As these network services are on-boarded to the same ESX host as a workload server virtual machine itself, a common network configuration is to deploy the network virtual appliance in bridged mode between two vswitches.

One vswitch connected to the physical network through a physical NIC, the other vswitch internal-only to the workload virtual machines in order to be inline with the workload traffic.

By default, migrating a virtual machine with vMotion produces an error if the virtual machine has an active connection to an internal vswitch (that is, one that is not directly connected to a physical NIC). The intent of this restriction was to ensure server availability through a live migration, and avoid problems where the target ESX host might be misconfigured without an active connection to the physical network. However, this restriction does not take into account when a bridged-mode virtual machine is being used to filter traffic between the workload and the physical network.

To enable vMotion when using network security or service virtual machines in bridged mode, perform one of these options:

Add these lines to the <config> flag in the VirtualCenter vpxd.cfg configuration file to turn off the internal vswitch restriction on vMotion events, then restart the VirtualCenter Server service:

<config>
<migrate>
<test>
<CompatibleNetworks>
<VMOnVirtualIntranet>false</VMOnVirtualIntranet>
</CompatibleNetworks>
</test>
</migrate>
</config>

Notes: For more information on restarting the VirtualCenter Server Service, see Stopping, starting, or restarting vCenter services (1003895).

From a vSphere Client connected to the vCenter Server navigate to Administration > vCenter Server Settings > Advanced Settings and add config.migrate.test.CompatibleNetworks.VMOnVirtualIntranet with a value of "false".

Note: Making this change from the vSphere Client does not require a restart of the VirtualCenter Server service. To restore the usual checks, change the setting to "true".

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
English

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

KB
•
为 VMware Update Manager 收集诊断信息 (1003693)

KB
•
Falha de 99% na implantação de um OVA/OVF com o vSphere Client (1032863)

Results 1-3 of 3

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vSphere ESXi

VMware VirtualCenter

VMware vCenter Server

VMware ESX Server

Related Versions:

VMware VirtualCenter 2.5.x

VMware vCenter Server 4.1.x

VMware vCenter Server 4.0.x

VMware ESXi 4.1.x Installable

VMware ESXi 4.1.x Embedded

VMware ESXi 4.0.x Installable

VMware ESXi 4.0.x Embedded

VMware ESXi 3.5.x Installable

VMware ESXi 3.5.x Embedded

VMware ESX Server 3.5.x

VMware ESX Server 3.0.x

VMware ESX Server 2.5.x

VMware ESX Server 2.1.x

VMware ESX Server 2.0.x

VMware ESX 4.1.x

VMware ESX 4.0.x

view all

Take Our Survey

Was this article helpful?

YES

NO

Copyright © 2005-2024 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.

Terms of Use

Your California Privacy Rights

Privacy

Accessibility

Cookie Settings

Support Assistant