vDS-vSS - standard2distributed virtual switch upgrade and restore commands

First of all...never test thing on production environment...never. I have 3 ESXi 4 servers, two of them on vDS switches and one on old fashion virtual standard switch. When I moved third one to vDS and after assigning vmnic's to appropriate dvPort groups I had problems with connectivity...so because if was urgent (Production), I decided to bring all back to vSS just for this one ESXi 4. If you make mistake and remove physical NIC from vDS you may lose management connectivity to server at all...which is bad. But here are some useful comands which you need to enter directly on ESXi console to restore basic connectivity and after that everything else in your environment:
  • alt+F1, to access cmd line interface on ESXi
  • type unsupported with your admin password
From cli now you can see your curent configuration:
  • esxcfg-vswitch -l, list your curent DVSwitch, DVPort and vmnic names (if output after this cmd is to big and you can't see what you need use | grep or | less or | more options),
  • esxcfg-vswitch -Q vmnic0 -V --dvport --dvSwitch, to unlink vmnic0 from vDS
  • esxcfg-vswitch -L vmnic0 vSwitch0, link vmnic0 to vSwitch0
After this, you have your basic connectivity back and now you can proceed with vSphere client to finish everything you need...optionally, you could check you default gateway by editing /etc/sysconfig/network or adding default gateway with route add default --gateway address.

Comments

Post a Comment

Popular posts from this blog

NSX ALB LetsEncrypt with DNS-01 challenge - BIND example

    In some of my previous posts, mentioned here LetsEncrypt script integration and Script parameter usage , I explained how useful it can be for NSX advanced load balancing solutions to utilise this kind of approach for free and automatic certificate manipulation, especially in environments with large number of web services inside. This approach utilises HTTP-01 based challenge with LetsEncrypt systems and L7 HTTP/S virtual services on NSX ALB side.     Now, from some time ago there is enhancement in this area, developed by official Avi Networks devops page, in terms of using DNS-01 challenge also. I tried on-prem option using Bind DNS as server which works very well.     Steps are pretty much similar to HTTP-01 option, which can be summarised as following:      - Create L7 virtual service with publicly available FQDN - certificates resolved can be in both options RSA or ECDSA, as configured during creation;        - Do...
Read more

VMware SD WAN - multiple locations - LAN IP address space overlapping with NAT

Image
     Different scenarios are possible in terms of routing, NAT-ing and IP overlapping setups using VMware Velocloud SD WAN technology in Customer environments.      Recently I had an PoC with my Customer for the on-prem option with this VMware solution, where different use cases were interesting to show and demonstrate - one of them is something I would like to share and it relates to possibility of LAN-side NAT on Edge (branch) locations, with purpose to have IP overlapped on these setups. Next picture is showing typical Hub&Spoke setup where it can be possible to make this type of configuration: Picture 1. VMware SD WAN lab on-prem environment     Basically thing which needs to be accomplished is appropriate NAT solution for LANs on every branch Edge which are and needs to be the same (192.168.1.0/24 in this example) - as it is shown on Picture 1.      Honestly speaking, NAT is not one of so powerful things insi...
Read more

NSX ALB (Avi Networks) HTTP policy set removal

     As I wrote on some of my previous posts, Lets Encrypt automation of certs renewal inside NSX ALB (Avi) platform is very useful for Customer environments utilising large number of web oriented services, which needs to be on free HTTPS setup. These blogs about integration could be found here LINK-1 or LINK-2 for DNS based configurations.     What I saw from some operational systems is that,  occasionally, there is small piece left under HTTP policies (for HTTP-01 based challenges), in parent-child setups of virtual services, where HTTP policy is not removed properly from parent virtual service and that prohibits further renewal of certificate when it's needed. Typical removal of that piece is making troubles because it's associated to virtual service and system is not allowing that change.     What's needed is to de-associate problematic HTTP policy set from virtual service and then it can be freely removed from system without any issue. This...
Read more