Unable to access UCS ESXi5.0 U1 from outside network

Suresh_thirumalaisamy · ‎10-30-2012

Dear Cisco Experts,

Greeting for the day. I hope this email find your well and wishing you the same.

I have the below setup in my data center and trying to deploy VMWARE ESXi5.0 U1 on UCS and having some challenges to access my esxi from outside network. Please find the below details and help me to overcome from this issue

1) UCS chassis (1 x 5108)

2) M200 blades (2 blade have been installed and rest of the 6 slots are empty)

3) UCS2208XP IOM (2 IOM's)

4) UCS cisco fabric interconnect 6648 (2 interconnects)

5) MDS9124 cisco switch --> Exisiting fabric switch from our DC (only 1 switch/fabric, no redundancy)

6) Netapp V6080

7) Catalyst 2960 L2 switch.

From UCS chassis, 2 ports per IOM have been connected with each fabric interconnect and interconnects are clustered between them. From Interconnect i have connected 2 FC uplink port to my MDS 9124 switch.I have deployed vmware esxi5.0 u1 on both of my blades and created a VSAN from UCS and found that virtual HBA's are logged into fabric. Hence i have zonned with Netapp and registered with netapp, created some test lan.

From my Layer2 cisco 2960G switch, i have connected 2 network cables to my interconnects via GLC-T SFP ( 1 cabler per fabric interconnect) and placed those 2 ports vlan2 from cisco L2 switch. created same vlan from UCS and added my vNIC from UCS Servers.

From the L2 switch, my exisiting vmware cluster is running with 3 HP G7 servers and vcenter is running in virtuam machine. My Vcenter IP is:192.168.1.1/255.255.255.0 , my esxi servers are having ip ranges from 172.21.1.1-172.21.1.3 /255.255.255.0 (3 servers totally) and between these 2 networks communication has been allowed.

Question:

I would like to assign the same range of IP to my new ESXi servers which are running from 2 UCS blades. IP's are 172.21.1.10 & 172.21.1.11 /255.255.255.0. So that i can add these servers to my exisiting Vcenter and able to increase the resources but where as i am unable to ping the new esxi server from my network. May i know the reason why? Did i missed anything to configure? Did i not followed the best practise?

I would greately appreciate if anyone can able to help me to correct my configuration. As of now facing access problem to reach out my ESXi server from my network.Let me know if you need any additional information regarding this subject

FYI:-

interface GigabitEthernet0/21

switchport access vlan 2

switchport mode trunk

!

interface GigabitEthernet0/22

switchport access vlan 2

switchport mode trunk

With Regards,

Suresh Thirumalaisamy,

Gestalt Gild Limited,

Kenya, Nairobi

+254 739 712 395

padramas · ‎10-30-2012

Hello Suresh,

Assuming you created the VLANs on UCS and vNICs are associated with correct VLANID for vmkernel IP,

please re-configure the upstream 2960 switch port and let us know the outcome.

no switchport access vlan 2

switchport trunk native vlan 2

spanning-tree portfast trunk

If it still does not work, provide output of following commands

connect nxos a

show mac address-table

## 2960 switch

show mac address-table

Padma

Suresh_thirumalaisamy · ‎10-30-2012

Dear Padma,

Thank you for your immediate response. trunk and spanning tree have been configured and i have doubled checked the same. As per your request, please find the details:

ggdc-ucs-fabric-A(nxos)# show mac address-table

Legend:

* - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC

age - seconds since last seen,+ - primary entry using vPC Peer-Link

VLAN MAC Address Type age Secure NTFY Ports

---------+-----------------+--------+---------+------+----+------------------

* 2 0025.b501.000c dynamic 650 F F Veth713

* 2 0025.b501.000e static 0 F F Veth713

* 4044 30f7.0d21.d2ff dynamic 0 F F Eth1/1/33

* 4044 30f7.0d6d.96c6 dynamic 0 F F Eth1/1/33

* 4044 c464.135e.fdff dynamic 0 F F Eth1/1/33

* 4043 d48c.b573.7c00 static 0 F F Po1281

* 4043 d48c.b573.a700 static 0 F F Po1283

* 4042 30f7.0d6d.96c7 dynamic 0 F F Eth1/2

* 4042 30f7.0d6d.96c8 dynamic 0 F F Eth1/1

* 4042 30f7.0d6d.96c9 dynamic 0 F F Eth1/2

ggdc-ucs-fabric-A(nxos)#

ggdc-ucs-fabric-B(nxos)# show mac address-table

Legend:

* - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC

age - seconds since last seen,+ - primary entry using vPC Peer-Link

VLAN MAC Address Type age Secure NTFY Ports

---------+-----------------+--------+---------+------+----+------------------

* 2 0025.b501.000d static 0 F F Veth710

* 2 0025.b501.000e dynamic 210 F F Veth710

* 2 0025.b501.000f static 0 F F Veth714

* 4044 30f7.0d21.d2fe dynamic 0 F F Eth1/1/33

* 4044 c464.135e.fdfe dynamic 0 F F Eth1/1/33

* 4044 d48c.b5f5.5322 dynamic 0 F F Eth1/1/33

* 4043 d48c.b573.7c01 static 0 F F Po1280

* 4043 d48c.b573.a701 static 0 F F Po1282

* 4042 d48c.b5f5.5323 dynamic 0 F F Eth1/1

* 4042 d48c.b5f5.5324 dynamic 0 F F Eth1/2

* 4042 d48c.b5f5.5325 dynamic 0 F F Eth1/1

ggdc-ucs-fabric-B(nxos)#

ggdcswt1#sh mac address-table

Mac Address Table

-------------------------------------------

Vlan Mac Address Type Ports

---- ----------- -------- -----

All 0100.0ccc.cccc STATIC CPU

All 0100.0ccc.cccd STATIC CPU

All 0180.c200.0000 STATIC CPU

All 0180.c200.0001 STATIC CPU

All 0180.c200.0002 STATIC CPU

All 0180.c200.0003 STATIC CPU

All 0180.c200.0004 STATIC CPU

All 0180.c200.0005 STATIC CPU

All 0180.c200.0006 STATIC CPU

All 0180.c200.0007 STATIC CPU

All 0180.c200.0008 STATIC CPU

All 0180.c200.0009 STATIC CPU

All 0180.c200.000a STATIC CPU

All 0180.c200.000b STATIC CPU

All 0180.c200.000c STATIC CPU

All 0180.c200.000d STATIC CPU

All 0180.c200.000e STATIC CPU

All 0180.c200.000f STATIC CPU

All 0180.c200.0010 STATIC CPU

All ffff.ffff.ffff STATIC CPU

2 0025.b501.000c DYNAMIC Gi0/21

2 0050.5642.db7a DYNAMIC Gi0/17

2 0050.5645.bd97 DYNAMIC Gi0/18

2 0050.56b0.0001 DYNAMIC Gi0/18

1 00a0.980b.e224 DYNAMIC Gi0/11

1 00a0.9827.7d60 DYNAMIC Gi0/3

1 547f.eead.4a4f DYNAMIC Gi0/21

1 547f.eead.510f DYNAMIC Gi0/22

1 c89c.1df2.d1a8 DYNAMIC Gi0/12

1 c89c.1df2.d1a9 DYNAMIC Gi0/12

Total Mac Addresses for this criterion: 30

Let me know if you need any additional information.