• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Multiple Subnets for ISCSI traffic

J

jenuster

Limp Gawd
Joined
Mar 8, 2011
Messages
154
Anyone know why certain vendors recommend putting ISCSI dedicated VMkernel ports on multiple subnets?
 
I thought the vmkernel did not route. What would happen if the vmkernel's ports were placed on the same subnet? Will it just use the first ip on that subnet as opposed to using the port that is more readily available to process traffic?
 
You specifically need to bind the swiscsi initiator to the vmkernel ports you want to use -- otherwise you aren't multipathing at all. You may have done that already I cannot tell from your post. The separate subnets for both the vmkernel interface and the target allows you to mulitpath, because as NetJunkie said -- you need it to use the appropriate interfaces to hit the targets on the different subnets. Your statement is correct, it will use the first available vmkernel interface on the appropriate subnet so I suppose you could call that vmkernel routing although I've never heard that phrase exactly. There is also esxcfg / vicfg-route which allows you to setup routes for vmkernel, so the other statement about vmkernel not routing is not right... there is some routing involved. In ESX you could set a default gateway for your service console and one for vmkernel. In ESXi you cannot set multiple default gateways through the GUI, so a second management port potentially could not route... that is where esxcfg/vicfg-route can come in handy ;).
 
In general, it is not a good idea to have multiple interfaces on the same subnet. People try this all the time, and are surprised when they find out that outbound traffic is only using one of the interfaces. Dunno how vmkernel works, but pretty much any unix/linux system I've seen it is not a good idea (and is almost always the wrong solution to whatever problem is being solved...)
 
You must log in or register to reply here.
Back
Top