Vsphere Esxi Vcenter Server 60 Client Administration Guide
Vsphere Esxi Vcenter Server 60 Client Administration Guide
Vsphere Esxi Vcenter Server 60 Client Administration Guide
vSphere Client
vCenter Server 6.0
ESXi 6.0
EN-001606-02
vSphere Administration with the vSphere Client
You can find the most up-to-date technical documentation on the VMware Web site at:
http://www.vmware.com/support/
The VMware Web site also provides the latest product updates.
If you have comments about this documentation, submit your feedback to:
[email protected]
Copyright © 2015 VMware, Inc. All rights reserved. Copyright and trademark information.
VMware, Inc.
3401 Hillview Ave.
Palo Alto, CA 94304
www.vmware.com
2 VMware, Inc.
Contents
Updated Information 11
5 Managing Tasks 51
Viewing Tasks 51
VMware, Inc. 3
vSphere Administration with the vSphere Client
Cancel a Task 53
Schedule Tasks 53
Policy Rules for Task Operations 57
4 VMware, Inc.
Contents
VMware, Inc. 5
vSphere Administration with the vSphere Client
6 VMware, Inc.
Contents
VMware, Inc. 7
vSphere Administration with the vSphere Client
Index 429
8 VMware, Inc.
vSphere Administration with the vSphere Client
The vSphere Administration with the vSphere Client documentation provides information on managing a
single ESXi host or vCenter Server system through a direct connection from the vSphere Client. You can use
these tasks to manage hosts that are not connected to a vCenter Server system, or to troubleshoot or manage
hosts that have become disconnected from the vCenter Server system that managed them.
This documentation is intended primarily as a reference for tasks that you can perform when you connect
directly to a host or vCenter Server with the vSphere Client. For detailed information about vSphere
networking, storage, security, virtual machine management, and other topics, see the appropriate vSphere
documentation.
Intended Audience
This information is intended for anyone who wants to manage a single ESXi host or vCenter Server system
by connecting directly with the vSphere Client. The information is written for experienced Windows system
administrators who are familiar with virtual machine technology and datacenter operations.
VMware, Inc. 9
vSphere Administration with the vSphere Client
10 VMware, Inc.
Updated Information
This vSphere Administration with the vSphere Client is updated with each release of the product or when
necessary.
This table provides the update history of the vSphere Administration with the vSphere Client .
Revision Description
EN-001606-02 Removed information related to vSphere Storage Appliance. This functionality is deprecated in vSphere
6.0.
EN-001606-01 n Removed information related to Storage Views and Storage Reports. This functionality is deprecated
inv Sphere 6.0.
n Updated the number of LUN IDs in “Change the Number of Scanned Storage Devices,” on page 322
n Added licensing limitation topic “Licensing Limitations in the vSphere Client,” on page 45.
VMware, Inc. 11
vSphere Administration with the vSphere Client
12 VMware, Inc.
Using the vSphere Client 1
The vSphere Client is an interface for administering vCenter Server and ESXi.
The vSphere Client user interface is configured based on the server to which it is connected:
n When the server is a vCenter Server system, the vSphere Client displays all the options available to the
vSphere environment, according to the licensing configuration and the user permissions.
n When the server is an ESXi host, the vSphere Client displays only the options appropriate to single host
management.
When you first log in to the vSphere Client, it displays a Home page with icons that you select to access
vSphere Client functions. When you log out of the vSphere Client, the client application retains the view
that was displayed when it closed, and returns you to that view when you next log in.
You perform many management tasks from the Inventory view, which consists of a single window
containing a menu bar, a navigation bar, a toolbar, a status bar, a panel section, and pop-up menus.
VMware, Inc. 13
vSphere Administration with the vSphere Client
A login screen appears when you start the vSphere Client. After you log in, the client displays the objects
and functionality appropriate to the server you are accessing and the permissions available to the user you
logged in as.
Procedure
1 Log in to your Windows system.
If this is the first time you are starting the vSphere Client, log in as the administrator.
n If the managed host is not a domain controller, log in as either local_host_name\user or user, where
user is a member of the local Administrators group.
n If the managed host is a domain controller, you must log in as domain\user, where domain is the
domain name for which the managed host is a controller and user is a member of that domain’s
Domain Administrators group. VMware does not recommend running on a domain controller.
2 Double-click a shortcut or select the vSphere Client from Start > Programs > VMware > VMware
vSphere Client.
3 Enter the IP address or server name, your user name, and your password.
NOTE If you connect to an ESXi host that is currently managed by a vCenter Server system, you will receive
a warning message and changes made to the host may not be reflected in the vCenter Server system
NOTE Closing a vSphere Client session does not stop the host system.
Procedure
u Click the close box (X) , or select File > Exit.
The vSphere Client shuts down. The vSphere Client is logged out of the ESXi host or vCenter Server system.
The host continues to run all its normal activities in the background.
The status bar appears at the bottom of the window. It displays any currently running or recently completed
active tasks. Included is a progress bar indicating the percentage complete of each task.
14 VMware, Inc.
Chapter 1 Using the vSphere Client
Procedure
n Click the Close Tab link to disable Getting Started tabs for the type of object selected.
n Change the vSphere Client settings to hide all Getting Started tabs.
c Deselect the Show Getting Started Tabs check box and click OK.
Procedure
1 Select Edit > Client Settings.
Procedure
1 Select a powered-on virtual machine.
3 (Optional) Click the pop-out icon in the navigation bar to show the virtual machine console in a
separate window.
VMware, Inc. 15
vSphere Administration with the vSphere Client
Using Lists
Many vSphere Client inventory tabs display lists of information.
For example, the Virtual Machines tab displays a list of all the virtual machines associated with a host or a
cluster. Sort any list in the vSphere Client by clicking the column label heading. A triangle in the column
head shows the sort order as ascending or descending.
You can also filter a list, sorting and including only selected items. A filter is sorted by a keyword. Select the
columns to include in the search for the keyword.
The list view is updated based on whether filtering is on or off. For example, if you are in the Virtual
Machines tab and the filtered text is “powered on", then only virtual machines whose state is set to powered
on will be displayed. If the state of any virtual machine changes, the virtual machine is removed from the
list. Virtual machines that are added to the list are also filtered.
Procedure
1 On any inventory panel that displays a list, click the arrow next to the filter box at the top right of the
pane.
The search automatically starts after a pause of more than one second. Neither boolean expressions nor
special characters are supported. Filtering is not case-sensitive.
Export a List
You can export a list in the vSphere Client to a file. Multiple file types are available when saving the file
locally.
Procedure
1 In the vSphere Client, navigate to a list view. For example, click the Virtual Machines tab when
viewing a host.
4 Click Save.
16 VMware, Inc.
Chapter 1 Using the vSphere Client
Procedure
u You can save the client data by either printing a copy of the window or exporting the server data.
Option Description
Copy the window Use the Microsoft Windows Print Screen option to print a copy of the
vSphere Client window.
Export server data Select File > Export and select a format in which to save the data. Open the
data in an appropriate application and print from that application.
Panel Sections
The body of the vSphere Client page has a panel section. Most views have a left and a right panel: the
Inventory panel and the Information panel.
Inventory panel Displays a hierarchical list of vSphere objects when an Inventory or Maps
view appears.
Information panels Display lists and charts. Depending on the navigation items or Inventory
item selected, the Information panel is divided into tabbed elements.
If the vSphere Client is connected to a vCenter Server system that is part of a connected group in vCenter
Linked Mode, you can search the inventories of all vCenter Server systems in that group. You can view and
search only for inventory objects that you have permission to view. Because the search service queries
Active Directory for information about user permissions, you must be logged in to a domain account to
search all vCenter Server systems in Linked Mode. If you log in using a local account, searches return results
only for the local vCenter Server system, even if it is joined to other servers in Linked Mode.
NOTE If your permissions change while you are logged in, the search service might not immediately
recognize these changes. To ensure that your search is performed with up-to-date permissions, log out of all
your open sessions and log in again before performing the search.
Procedure
1 Click the icon in the search field at the top right of the vSphere Client window and select the type of
inventory item to search for.
n Virtual Machines
n Hosts
VMware, Inc. 17
vSphere Administration with the vSphere Client
n Folders
n Datastores
n Networks
n Inventory, which finds matches to the search criteria in any of the available managed object types.
2 Type one or more search terms into the search field and press Enter.
3 (Optional) If more items are found than can be displayed in the results pane, click Show all.
What to do next
If you are not satisfied with the results of the simple search, perform an advanced search.
Prerequisites
n Open a vSphere Client session to a vCenter Server system
Procedure
1 In the vSphere Client, select View > Inventory > Search to display the advanced search page.
2 Click the icon in the search text box and select the type of object you want to search for.
3 Type one or more search terms into the search text box.
b From the drop-down menu, select the additional property that you want to use to restrict the
search results. The available properties depend on the type of object you are searching for.
c Select or type the appropriate options for the property you have selected.
An advanced search always finds objects that match all the properties in the list.
5 Click Search.
Custom Attributes
You can use custom attributes to associate user-specific meta-information with virtual machines and
managed hosts.
Attributes are the resources that are monitored and managed for all the managed hosts and virtual
machines in your vSphere environment. Attributes’ status and states appear on the inventory panels.
After you create the attributes, set the value for the attribute on each virtual machine or managed host, as
appropriate. This value is stored with vCenter Server and not with the virtual machine or managed host.
Use the new attribute to filter information about your virtual machines and managed hosts. If you no longer
need the custom attribute, remove it. A custom attribute is always a string.
18 VMware, Inc.
Chapter 1 Using the vSphere Client
For example, suppose you have a set of products and you want to sort them by sales representative. Create a
custom attribute for sales person name, Name. Add the custom attribute, Name, column to one of the list
views. Add the appropriate name to each product entry. Click the column title Name to sort alphabetically.
The custom attributes feature is available only when you are connected to a vCenter Server system.
Procedure
1 Select Administration > Custom Attributes.
b Select the attribute type from the Type drop-down menu: Virtual Machine, Host, or Global.
c In the Value text box, type the value you want to give to the attribute for the currently selected
object.
d Click OK.
After you have defined an attribute on a single virtual machine or host, it is available to all objects
of that type in the inventory. However, the value you specify is applied only to the currently
selected object.
4 (Optional) To change the attribute name, click in the Name field and type the name you want to assign
to the attribute.
5 Click OK.
Procedure
1 Select the virtual machine or host in the inventory.
4 To edit the value of an attribute that has already been defined, double-click the Value field for that
attribute and enter the new value.
VMware, Inc. 19
vSphere Administration with the vSphere Client
Select Objects
vCenter Server objects are datacenters, networks, datastores, resource pools, clusters, hosts, and virtual
machines. Selecting an object allows you to view the status of the object and enables the menus so you can
select actions to take on the object.
Procedure
u Locate the object by browsing or search.
n From the vSphere Client Home page, click the icon for the appropriate inventory view, and browse
through the inventory hierarchy to select the object.
n Perform a search for the object, and double-click it in the search results.
n View available plug-ins that are not currently installed on the client.
Install Plug-Ins
You can install plug-ins using the Plug-in Manager.
Procedure
1 Launch the vSphere Client and log in to a vCenter Server system.
3 Select the Available Plug-ins tab in the Plug-in Manager dialog box.
4 Click Download and Install for the plug-in you want.
6 After installation is complete, verify that the plug-in is listed under the Installed Plug-ins tab and that
it is enabled.
There might be short delay between the completion of the installation and the plug-in appearing in the
list of installed plug-ins.
Disabling a plug-in does not remove it from the client. You must uninstall the plug-in to remove it.
Procedure
1 Launch the vSphere Client and log in to a vCenter Server system.
20 VMware, Inc.
Chapter 1 Using the vSphere Client
4 Right-click on a plug-in and select Enable to enable a plug-in, or select Disable to disable it.
Remove Plug-Ins
You can remove plug-ins through the operating system’s control panel.
Procedure
u Consult your operating system’s documentation for instructions on how to use the Add/Remove
Programs control panel.
vCenter Server plug-ins that run on the Tomcat server have extension.xml files, which contain the URL
where the corresponding Web application can be accessed. These files are located in C:\Program
Files\VMware\Infrastructure\VirtualCenter Server\extensions. Extension installers populate these XML
files using the DNS name for the machine.
vCenter Server, plug-in servers, and the clients that use them must be located on systems under the same
domain. If they are not under the same domain, or if the DNS of the plug-in server is changed, the plug-in
clients will not be able to access the URL, and the plug-in will not work.
You can edit the XML files manually by replacing the DNS name with an IP address. Reregister the plug-in
after you edit its extension.xml file.
These features are not available when your vSphere Client is connected to an ESXi host.
Procedure
u From the Home page of a vSphere Client connected to a vCenter Server system, click the Sessions
button.
Procedure
1 On the Home page of a vSphere Client connected to a vCenter Server system, click the Sessions button.
VMware, Inc. 21
vSphere Administration with the vSphere Client
The Message of the day text is sent as a notice message to all active session users and to new users when
they log in.
Procedure
1 On the Home page of a vSphere Client connected to a vCenter Server system, click the Sessions button.
3 Click Change.
The message is broadcast to all users logged into the vSphere Client.
22 VMware, Inc.
Configuring ESXi Hosts and vCenter
Server in the vSphere Client 2
Use the vSphere Client to configure ESXi and vCenter Server settings.
n “Configuring Communication Among ESXi, vCenter Server, and the vSphere Client,” on page 32
The following host features are unavailable or read-only in the vSphere Client
n Guest authorization
n Lockdown mode
Use the vSphere Web Client as the primary interface for managing the full range of host functions available
in your vSphere 6.0 environment.
Redirect the Direct Console to a Serial Port by Using the vSphere Client
You can redirect the direct console to either of the serial ports com1 or com2. When you use the vSphere
Client to redirect the direct console to a serial port, the boot option that you set persists after subsequent
reboots.
Prerequisites
n Verify that you can access the host from the vSphere Client.
VMware, Inc. 23
vSphere Administration with the vSphere Client
n Verify that the serial port is not already in use for serial logging and debugging, or for ESX Shell
(tty1Port).
Procedure
1 In the vSphere Client, select the host in the inventory.
2 Click the Configuration tab.
4 In the left pane, expand the VMkernel listing and select Boot.
5 Make sure that the VMkernel.Boot.logPort and VMkernel.Boot.gdbPort fields are not set to use the
com port that you want to redirect the direct console to.
6 Set VMkernel.Boot.tty2Port to the serial port to redirect the direct console to: com1 or com2.
7 Click OK.
You can now manage the ESXi host remotely from a console that is connected to the serial port.
Prerequisites
The directory to use for the scratch partition must exist on the host.
Procedure
1 In the vSphere Client, select the host in the inventory.
4 Select ScratchConfig.
The field ScratchConfig.CurrentScratchLocation shows the current location of the scratch partition.
5 In the field ScratchConfig.ConfiguredScratchLocation, enter a directory path that is unique for this
host.
You can use the vSphere Client or the esxcli system syslog vCLI command to configure the syslog service.
For more information about using vCLI commands, see Getting Started with vSphere Command-Line Interfaces.
Procedure
1 In the vSphere Client inventory, select the host.
24 VMware, Inc.
Chapter 2 Configuring ESXi Hosts and vCenter Server in the vSphere Client
5 To set up logging globally, click global and make changes to the fields on the right.
Option Description
Syslog.global.defaultRotate Sets the maximum number of archives to keep. You can set this number
globally and for individual subloggers.
Syslog.global.defaultSize Sets the default size of the log, in KB, before the system rotates logs. You
can set this number globally and for individual subloggers.
Syslog.global.LogDir Directory where logs are stored. The directory can be located on mounted
NFS or VMFS volumes. Only the /scratch directory on the local file
system is persistent across reboots. The directory should be specified as
[datastorename] path_to_file where the path is relative to the root of the
volume backing the datastore. For example, the path
[storage1] /systemlogs maps to the
path /vmfs/volumes/storage1/systemlogs.
Syslog.global.logDirUnique Selecting this option creates a subdirectory with the name of the ESXi host
under the directory specified by Syslog.global.LogDir. A unique directory
is useful if the same NFS directory is used by multiple ESXi hosts.
Syslog.global.LogHost Remote host to which syslog messages are forwarded and port on which
the remote host receives syslog messages. You can include the protocol
and the port, for example, ssl://hostName1:514. UDP (default), TCP,
and SSL are supported. The remote host must have syslog installed and
correctly configured to receive the forwarded syslog messages. See the
documentation for the syslog service installed on the remote host for
information on configuration.
6 (Optional) To overwrite the default log size and log rotation for any of the logs.
a Click loggers.
b Click the name of the log you that want to customize and enter the number of rotations and log
size you want.
7 Click OK.
VIB signatures are checked and accepted for installation based on a combination of the VIB acceptance level
and the host image profile acceptance level. VIBs are tagged with an acceptance level that depends on their
signature status.
Prerequisites
Required privileges: Host.Configuration.SecurityProfile and Host.Configuration.Firewall
Procedure
1 In the vSphere Client, select the host in the inventory.
VMware, Inc. 25
vSphere Administration with the vSphere Client
The following vCenter Server features are unavailable or read-only in the vSphere Client:
n Runtime settings
n Licensing reports
n Certificate management
Use the vSphere Web Client as the primary interface for managing the full range of vCenter Server functions
available in your vSphere 6.0 environment.
Prerequisites
To configure licenses, the vSphere Client must be connected to a vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
2 If the vCenter Server system is part of a connected group, select the server you want to configure from
the Current vCenter Server drop-down menu.
26 VMware, Inc.
Chapter 2 Configuring ESXi Hosts and vCenter Server in the vSphere Client
3 In the vCenter License section, select the type of license key to assign to this vCenter Server.
n Select Assign an existing license key to this vCenter Server and select a license key from the
Product list.
n Select Assign a new license key to this vCenter Server, click Enter Key, and enter a
vCenter Server license key and an optional label for the key.
NOTE To enter ESXi host license keys, select View > Administration > Licensing
Prerequisites
To configure statistics settings, the vSphere Client must be connected to a vCenter Server system.
Procedure
1 If necessary, select Administration > Settings to open the vCenter Server Settings dialog box
vCenter Server.
3 In the Statistics Intervals section, select or deselect a collection interval to enable or disable it.
4 To change a collection interval attribute, select its row in the Statistics Interval section and click Edit to
open the Edit Collection Interval dialog box.
This option is configurable only for the Day and Year intervals.
Level 4 uses the highest number of statistics counters. Use it only for debugging purposes.
The statistics level must be less than or equal to the statistics level set for the preceeding statistics
interval. This is a vCenter Server dependency.
5 (Optional) In the Database Size section, estimate the effect of the statistics settings on the database.
The estimated space required and number of database rows required are calculated and displayed.
6 Click OK.
VMware, Inc. 27
vSphere Administration with the vSphere Client
Prerequisites
To configure runtime settings, the vSphere Client must be connected to the vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
2 If the vCenter Server system is part of a connected group, select the server you want to configure from
the Current vCenter Server drop-down menu.
5 In vCenter Server Managed IP, enter the vCenter Server system IP address.
6 In vCenter Server Name, enter the name of the vCenter Server system.
If you change the DNS name of the vCenter Server, use this option to modify the vCenter Server name
to match.
What to do next
If you made changes to the vCenter Server system Unique ID, you must restart the vCenter Server system
for these changes to take effect.
Prerequisites
To configure active directory settings, the vSphere Client must be connected to the vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
3 In Active Directory Timeout, enter the timeout interval in seconds for connecting to the Active
Directory server.
4 Select Enable Query Limit to limit the number of users and groups displayed in the Add Permissions
dialog box.
28 VMware, Inc.
Chapter 2 Configuring ESXi Hosts and vCenter Server in the vSphere Client
5 In Users & Groups, enter the maximum number of users and groups to display.
6 Select Enable Validation to have vCenter Server periodically check its known users and groups against
the Active Directory server.
7 In Validation Period, enter the number of minutes between instances of synchronization.
Prerequisites
To configure SMTP notifications, the vSphere Client must be connected to the vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
The SMTP Server is the DNS name or IP address of the SMTP gateway to use for sending email
messages
NOTE The full email address must be entered, including the domain name (the information after the @
sign).
5 Click OK.
What to do next
To test the mail settings, create an alarm that can be triggered by a user action, such as an alarm triggered by
powering off a virtual machine, and verify that you receive an email when the alarm is triggered.
Prerequisites
To configure SNMP settings, the vSphere Client must be connected to a vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
VMware, Inc. 29
vSphere Administration with the vSphere Client
3 In Receiver URL, enter the host name or IP address of the SNMP receiver.
4 In the field next to the Receiver URL field, enter the port number of the receiver.
6 Click OK.
Prerequisites
To configure timeout settings, the vSphere Client must be connected to the vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
3 In Normal Operations, enter the timeout interval in seconds for normal operations.
4 In Long Operations, enter the timeout interval in minutes for long operations.
5 Click OK.
6 Restart the vCenter Server system for the changes to take effect.
Prerequisites
To configure statistics settings, the vSphere Client must be connected to a vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
Option Description
None (Disable logging) Turn off logging
Error (Errors only) Display only error log entries
Warning (Errors and warnings) Display warning and error log entries
30 VMware, Inc.
Chapter 2 Configuring ESXi Hosts and vCenter Server in the vSphere Client
Option Description
Info (Normal logging) Displays information, error, and warning log entries
Verbose (Verbose) Displays information, error, warning, and verbose log entries
Trivia (Extended verbose) Displays information, error, warning, verbose, and trivia log entries
4 Click OK.
Changes to the logging settings take effect immediately. You do not need to restart vCenter Server system.
Prerequisites
To configure database settings, the vSphere Client must be connected to a vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
Generally, you do not need to change this value. You might want to increase this number if your
vCenter Server system frequently performs many operations and performance is critical. You might
want to decrease this number, if the database is shared and connections to the database are costly.
VMware recommends that you not change this value unless one of these issues pertains to your system.
4 Click OK.
Do not use these options if you want to retain a complete history of tasks and events for your
vCenter Server.
Prerequisites
To configure the database retention policy, the vSphere Client must be connected to a vCenter Server
system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
3 (Optional) Select Tasks retained for, and type a value in days in the text box.
Information about tasks performed on this vCenter Server system will be discarded after the specified
number of days.
4 (Optional) Select Events retained for, and type a value in days in the text box.
Information about events for this vCenter Server system will be discarded after the specified number of
days.
VMware, Inc. 31
vSphere Administration with the vSphere Client
5 Click OK.
Prerequisites
To configure statistics settings, the vSphere Client must be connected to a vCenter Server system.
Procedure
1 If necessary, select Administration > vCenter Server Settings to display the vCenter Server Settings
dialog box.
5 Click Add.
6 Click OK.
What to do next
Many advanced options changes require that the vCenter Server system be restarted before they take effect.
Consult VMware technical support to determine if your changes require a restart.
Configure your firewall to allow communication between the vSphere Client and vCenter Server by opening
ports 80 and 443.
vCenter Server acts as a web service. If your environment requires the use of a web proxy, vCenter Server
can be proxied like any other web service.
Procedure
1 In the vSphere Client, select the host in the inventory.
n If you select Reboot, the ESXi host shuts down and reboots.
n If you select Shut Down, the ESXi host shuts down. You must manually power the system back on.
32 VMware, Inc.
Chapter 2 Configuring ESXi Hosts and vCenter Server in the vSphere Client
VMware, Inc. 33
vSphere Administration with the vSphere Client
34 VMware, Inc.
Organizing Your Inventory 3
Plan how you will set up your virtual environment. A large vSphere implementation might contain several
virtual data centers with a complex arrangement of hosts, clusters, resource pools, and networks. Smaller
implementations might require a single virtual data center with a much less complex topology. Regardless
of the scale of your virtual environment, consider how the virtual machines it will support are going to be
used and administered.
Here are questions you should answer as you create and organize an inventory of virtual objects:
n Do you want to use multiple vSphere Standard Switches, or you want to have a single vSphere
Distributed Switch per data center?
n Do you want to use vMotion and Distributed Resource Management with certain virtual machines but
not others?
n Will some virtual objects require one set of system permissions, while other objects will require a
different set of permissions?
The left pane of the vSphere Client displays your vSphere inventory. You can add and arrange objects in
any way with the following restrictions:
n vApp names must be unique within the Virtual Machines and Templates view.
n Setup networking by using vSphere Standard Switches or vSphere Distributed Switches. To use
services such as vMotion, TCP/IP storage, Virtual SAN, and Fault Tolerance, setup VMkernel
networking for these services. For more information, see vSphere Networking.
n Configure storage systems and create datastore inventory objects to provide logical containers for
storage devices in your inventory. See vSphere Storage.
VMware, Inc. 35
vSphere Administration with the vSphere Client
n Create clusters to consolidate the resources of multiple hosts and virtual machines. You can enable
vSphere HA and vSphere DRS for increased availability and more flexible resource management. See
vSphere Availability for information about configuring vSphere HA and vSphere Resource Management for
information about configuring vSphere DRS.
n Create resource pools to provide logical abstraction and flexible management of the resources in
vSphere. Resource pools can be grouped into hierarchies and used to hierarchically partition available
CPU and memory resources. See vSphere Resource Management for details.
Create Datacenters
A virtual datacenter is a container for all the inventory objects required to complete a fully functional
environment for operating virtual machines. You can create multiple datacenters to organize sets of
environments. For example, you might create a datacenter for each organizational unit in your enterprise or
create some datacenters for high performance environments and others for less demanding virtual
machines.
Prerequisites
n Open a vSphere Client session to a vCenter Server.
NOTE Inventory objects can interact within a datacenter, but interaction across datacenters is limited. For
example, you can hot migrate virtual machines from one host to another host in the same datacenter, but not
from a host in one datacenter to a host in a different datacenter.
Procedure
1 Go to Home > Inventory > Hosts and Clusters.
What to do next
Add hosts, clusters, resource pools, vApps, networking, datastores, and virtual machines to the datacenter.
36 VMware, Inc.
Chapter 3 Organizing Your Inventory
Add Hosts
You can add hosts under a datacenter object, folder object, or cluster object. If a host contains virtual
machines, those virtual machines are added to the inventory together with the host. Information about
configuring hosts is located in the vSphere Networking, vSphere Storage, vSphere Security, and vSphere Host
Profiles documentation.
Prerequisites
n Open a vSphere Client session to a vCenter Server.
n Obtain the user name and password for an account with administrative privileges on the host.
n Verify that hosts behind a firewall are able to communicate with the vCenter Server system and all
other hosts through port 902 or other custom-configured port.
Procedure
1 Select Home > Inventory > Hosts and Clusters.
4 Enter host name or IP address and administrator credentials and click Next.
5 (Optional) Select Enable Lockdown Mode to disable remote access for the administrator account after
vCenter Server takes control of this host.
Selecting this check box ensures that the host is managed only through vCenter Server. You can
perform certain management tasks while in lockdown mode by logging into the local console on the
host.
7 (Optional) Assign a license key to the host if needed and click Next.
Option Description
If you are adding the host to a Select a resource pool option and click Next.
cluster
If you are not adding the host to a Select a location where you want to place virtual machines that already
cluster exist on the host and click Next.
The host and its virtual machines are added to the inventory.
VMware, Inc. 37
vSphere Administration with the vSphere Client
Create Clusters
A cluster is a group of hosts. When a host is added to a cluster, the host's resources become part of the
cluster's resources. The cluster manages the resources of all hosts within it. Clusters enable the vSphere
High Availability (HA) and vSphere Distributed Resource Scheduler (DRS) solutions.
Prerequisites
n Open vSphere Client session to a vCenter Server.
Procedure
1 Right-click a datacenter or folder in the vSphere Client and select New Cluster.
Option Description
If you chose to use DRS with this a Click the vSphere DRS box.
cluster b Select an automation level and a migration level and click Next.
c Select a default power management setting and a DPM threshold, and
click Next.
If you chose to use HA with this a Click vSphere HA.
cluster b Select whether to enable host monitoring and admission control.
c If admission control is enabled, specify a policy.
d Click Next.
e Specify cluster default behavior and click Next.
f Specify virtual machine monitoring settings and click Next.
EVC ensures that all hosts in a cluster present the same CPU feature set to virtual machines, even if the
actual CPUs on the hosts differ. This prevents migrations with vMotion from failing due to
incompatible CPUs.
5 Select a swap file policy and click Next.
6 Review the options you selected for the cluster and click Finish.
What to do next
Add hosts and resource pools to the cluster.
Prerequisites
n Verify that the vSphere Client is connected to a vCenter Server system.
n Make sure you have permissions sufficient to create a resource pool object.
38 VMware, Inc.
Chapter 3 Organizing Your Inventory
n Verify that a cluster, vApp, or other resource pool object is parent to the resource pool.
Procedure
1 Select Home > Inventory > Hosts and Clusters.
5 Click OK.
What to do next
Add virtual machines and vApps to your resource pool.
Create Datastores
A datastore is a logical container that holds virtual machine files and other files necessary for virtual
machine operations. Datastores can exist on different types of physical storage, including local storage,
iSCSI, Fibre Channel SAN, or NFS. A datastore can be VMFS-based or NFS-based.
Prerequisites
n Open a vSphere Client session to a vCenter Server.
n Verify that at least one host in the inventory has access to physical storage.
Procedure
1 Select Home > Inventory > Datastores.
Option Description
Disk or LUN a Select a disk or LUN and click Next.
b Review the disk layout information and click Next.
c Enter a name for the datastore and click Next.
d Specify maximum file and block sizes.
e Specify disk or LUN capacity and click Next.
Network File System a Enter server and folder information.
b Select whether clients should mount the NFS as read-only.
c Enter a name and click Next.
VMware, Inc. 39
vSphere Administration with the vSphere Client
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Select a host from the inventory.
If you chose to use an existing standard switch, a new port group is added to it. If you chose to create a
standard switch, it is added with a port group.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Select Home > Inventory > Networking view, and select a data center.
2 Right-click on the data center and select New vSphere Distributed Switch.
40 VMware, Inc.
Chapter 3 Organizing Your Inventory
5 Specify the maximum number of uplink ports (physical adapters per host) and click Next.
6 Select Add now to add hosts and their physical adapters to the switch.
Select Add later to add hosts and their physical adapters to the switch after the vSphere Distributed
Switch has been created.
7 Select the hosts to add in the Host/Physical adapters section and click Next.
8 Select Automatically create a default port group to automatically create a port group and click Finish.
A vSphere Distributed Switch, with its associated uplink ports and port groups, is added to the inventory.
What to do next
n Add hosts to the switch.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
Option Description
Name Type the name for the distributed switch.
Number of Uplink Ports Select the number of uplink ports for the distributed switch.
Notes Type any notes for the distributed switch.
c Click OK.
5 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
VMware, Inc. 41
vSphere Administration with the vSphere Client
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
Option Description
Maximum MTU Maximum MTU size for the vSphere distributed switch.
Discovery Protocol Status Choose the status for discovery protocol on the vSphere distributed
switch.
n Enabled. Enabled discovery protocol for the vSphere distributed
switch.
1 Select Cisco Discovery Protocol or Link Layer Discovery Protocol
from the Type drop-down menu.
2 Set Operation to Listen, Advertise, or Both.
n Disabled.
Admin Contact Info Enter the Name and Other Details for the vSphere distributed switch
administrator.
4 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Add Host.
4 Under the selected hosts, select the physical adapters to add and click Next.
You can select physical adapters that are not being used and physical adapters that are being used.
NOTE Moving a physical adapter to a distributed switch without moving any associated virtual
adapters can cause those virtual adapters to lose network connectivity.
5 For each virtual adapter, select Destination port group and select a port group from the drop-down
menu to migrate the virtual adapter to the distributed switch or select Do not migrate.
b Select the maximum number of ports for the host from the drop-down menu.
c Click OK.
7 Click Next.
42 VMware, Inc.
Chapter 3 Organizing Your Inventory
b For each virtual machine, select Destination port group and select a port group from the drop-
down menu or select Do not migrate.
9 Click Next.
10 (Optional) If you need to make any changes, click Back to the appropriate screen.
11 Review the settings for the distributed switch and click Finish.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane and select New Port Group.
3 Enter a Name and the Number of Ports for your new distributed port group.
Option Description
None Do not use VLAN.
VLAN In the VLAN ID field, enter a number between 1 and 4094.
VLAN Trunking Enter a VLAN trunk range.
Private VLAN Select a private VLAN entry. If you did not create any private VLANs, this
menu is empty.
5 Click Next.
6 Click Finish.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
VMware, Inc. 43
vSphere Administration with the vSphere Client
Option Action
Name Type the name for the distributed port group.
Description Type a brief description of the distributed port group.
Number of Ports Type the number of ports on the distributed port group.
Port binding Choose when ports are assigned to virtual machines connected to this
distributed port group.
n Select Static binding to assign a port to a virtual machine when the
virtual machine connects to the distributed port group. This option is
not available when the vSphere Client is connected directly to ESXi.
n Select Dynamic binding to assign a port to a virtual machine the first
time the virtual machine powers on after it is connected to the
distributed port group. Dynamic binding is deprecated in ESXi 5.x.
n Select Ephemeral for no port binding. This option is not available
when the vSphere Client is connected directly to ESXi.
4 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
Option Description
Allow override of port policies Select this option to allow distributed port group policies to be overridden
on a per-port level. Click Edit Override Settings to select which policies
can be overridden at the port level.
Edit Override Settings Select which policies can be overridden at the port level.
Configure reset at disconnect When a distributed port is disconnected from a virtual machine, the
configuration of the distributed port is reset to the distributed port group
setting. Any per-port overrides are discarded.
4 Click OK.
44 VMware, Inc.
Managing License Keys in the
vSphere Client 4
Use the vSphere Client to manage license keys directly on individual ESXi hosts or centrally in the license
inventory of a vCenter Server system.
n License Reporting
Use the vSphere Web Client as the primary interface for managing the full range of licensing functions
available in your vSphere 6.0 environment.
Access the ESXi License Key and Licensed Features in the vSphere Client
If you are not local to the host and cannot access the direct console, use the vSphere Client to access the ESXi
license key.
Procedure
1 From the vSphere Client, select the host in the inventory.
The license key and a list of features that you can configure on the host appears. The license key
appears in the form XXXXX-XXXXX-XXXXX-XXXXX-XXXXX.
VMware, Inc. 45
vSphere Administration with the vSphere Client
If the vSphere Client is connected directly to the host, on the host Configuration tab, click Licensed
Features > Edit to change the license key.
Prerequisites
Verify that you have the Global.Licenses privilege.
Procedure
1 In the vSphere Client, select the host in the inventory and click the Configuration tab.
n Select Assign an existing license key to this host and select a license key from the Product list.
n Select Assign a new license key to this host, click Enter Key, and specify a license key in the form
XXXXX-XXXXX-XXXXX-XXXXX-XXXXX.
4 Click OK.
Procedure
1 In the vSphere Client, select the host in the inventory.
The host is in evaluation mode and you can explore the entire set of features for ESXi. If you have already
used the host in evaluation mode, the time that remains in the evaluation period is decreased by the time
already used. For example, suppose you have used the host in evaluation mode for 20 days and then
assigned a vSphere Standard license key to the host. If you set the host back in evaluation mode, you can
explore the entire set of features that are available for the host for the remaining evaluation period of 40
days. You can track the remaining days from the evaluation period of a host in the host's page in the
vSphere Client.
NOTE After the evaluation period of the host expires, you receive a warning message, and the host cannot
be connected to a vCenter Server system. All powered-on virtual machines continue to work, but you
cannot power on any new virtual machines. You cannot change the current configuration of the features that
are already in use. You cannot use the features that remained unused while the host was in evaluation
mode.
46 VMware, Inc.
Chapter 4 Managing License Keys in the vSphere Client
Problem
You use the vSphere Client to connect directly to an ESXi host. You use the Configuration > Licensed
Features > Edit operation to assign a license key to the host. Later, a different license key replaces the license
key you assigned to the host.
Cause
If a vCenter Server system manages an ESXi host, changes made to the host license through direct
connection to the host do not persist, because the license key assigned through vCenter Server overwrites
the changes.
If you use the Configuration > Licensed Features > Edit operation, any license assignment operation that
you perform in vCenter Server overrides the host license configuration.
Solution
If you use vCenter Server to manage the host, use either the Home > Administration > Licensing interface
or the Add Host operation to configure host licensing.
Prerequisites
n Verify that you have the Global.Licenses privilege.
n Ensure that the vSphere Client is connected to the vCenter Server system.
Procedure
1 In the vSphere Client, select View > Administration > Licensing.
You can view and manage the license keys available in the vCenter Server inventory from the
Management tab.
3 In the Management tab, select a sorting option for the license information.
Option Description
Product Displays the available license keys listed by product.
License key Displays the available license keys listed by license key.
Asset Displays the available license keys listed by the asset to which they are
assigned: host, vCenter Server, or solution.
VMware, Inc. 47
vSphere Administration with the vSphere Client
The Management tab displays the available license keys listed by product, license key, or asset. You can
right-click any of the listed items to add, assign, and remove license keys and copy license information to
your clipboard.
What to do next
If you have a license key with zero assigned capacity, you can:
You should not keep unassigned license keys in the vCenter Server license inventory.
Prerequisites
n Verify that you have the Global.Licenses privilege.
n Ensure that the vSphere Client is connected to the vCenter Server system.
Procedure
1 In the vSphere Client, select Home > Administration > Licensing.
3 In the Add License Keys text area, specify license keys one per line.
If you specify any invalid license keys, you receive an error message that lists only the invalid keys. You
can either delete the invalid keys, or add them after correcting them.
6 If you are not ready to assign the license keys to assets, click Next through the remaining wizard
screens and click Finish to save your changes.
The license keys are added to the vCenter Server license inventory.
What to do next
Assign the license keys to assets that require licensing. You should not keep unassigned license keys in the
vCenter Server license inventory.
NOTE If an ESXi host disconnects from vCenter Server immediately after you assign a license key, the
license assignment operation does not complete but the host appears as licensed. The host is licensed after it
reconnects to vCenter Server.
Prerequisites
n Verify that you have the Global.Licenses privilege.
n Ensure that the vSphere Client is connected to the vCenter Server system.
48 VMware, Inc.
Chapter 4 Managing License Keys in the vSphere Client
Procedure
1 In the vSphere Client, select Home > Administration > Licensing.
7 In the Product window, select an appropriate license key and click Next.
If the license key you assign has a strong limit, the license capacity must be greater than or equal to the
required license use for the asset. Otherwise, you cannot assign the license key. Check the EULA of the
license to determine whether it has a strong limit.
8 (Optional) If you are not ready to remove any license keys, click Next to skip the Remove License Keys
page and click Finish to save your changes.
Prerequisites
n Verify that you have the Global.Licenses privilege.
n Ensure that the vSphere Client is connected to the vCenter Server system.
Procedure
1 In the vSphere Client, select Home > Administration > Licensing.
2 In the Management tab, select Asset as a primary entity for sorting the license information.
6 Click OK.
The license key is added to the vCenter Server license inventory and assigned to the corresponding asset.
What to do next
Assign the license key to other assets of the same type in case the license key has available capacity.
Prerequisites
n Verify that you have the Global.Licenses privilege.
n Ensure that the vSphere Client is connected to the vCenter Server system.
VMware, Inc. 49
vSphere Administration with the vSphere Client
Procedure
1 In the vSphere Client, select Home > Administration > Licensing.
2 In the Management tab, select the view that you want to export.
n Product
n License key
n Asset
3 Click Export.
4 In the Save As dialog box, select a folder, a filename, and a format for the exported license data and
click Save.
50 VMware, Inc.
Managing Tasks 5
Tasks represent system activities that do not complete immediately, such as migrating a virtual machine.
They are initiated by high-level activities that you perform with the vSphere Client in real time and activities
that you schedule to occur at a later time or on a recurring basis.
For example, powering off a virtual machine is a task. You can perform this task manually every evening, or
you can set up a scheduled task to power off the virtual machine every evening for you.
NOTE The functionality available in the vSphere Client depends on whether the vSphere Client is connected
to a vCenter Server system or an ESXi host. Unless indicated, the process, task, or description applies to both
kinds of vSphere Client connections. When the vSphere Client is connected to an ESXi host, the Tasks
option is not available; however, you can view recent tasks in the Status Bar at the bottom of the
vSphere Client.
Viewing Tasks
You can view tasks that are associated with a single object or all objects in the vSphere Client inventory. The
Tasks & Events tab lists completed tasks and tasks that are currently running.
By default, the tasks list for an object also includes tasks performed on its child objects. You can filter the list
by removing tasks performed on child objects and by using keywords to search for tasks.
Prerequisites
n Open a vSphere Client session to a vCenter Server.
Procedure
1 In the vSphere Client, select the object in the inventory.
VMware, Inc. 51
vSphere Administration with the vSphere Client
2 Display the tasks for a single object or the entire vCenter Server.
n To display the tasks in the vCenter Server, select the root folder.
4 (Optional) To view detailed information for a task, select the task in the list.
The Task Details pane displays details such as task status, any error messages in the error stack, and
any related events.
Procedure
1 In the vSphere Client, select the host from the inventory.
2 If necessary, select View > Status Bar to display the status bar at the bottom of the vSphere Client.
The list of tasks appears in the Recent Tasks pane of the Status Bar.
Prerequisites
n Open a vSphere Client session to a vCenter Server.
Procedure
u In the vSphere Client, select Home > Management > Scheduled Tasks.
Prerequisites
n Open a vSphere Client session to a vCenter Server.
Procedure
1 In the vSphere Client, select the host or datacenter in the inventory and click the Tasks & Events tab.
3 If the Show all entries list and the search field are not displayed under the Tasks and Events buttons,
select View > Filtering.
4 Click Show all entries and select Show host entries or Show datacenter entries, depending on the
object selected.
52 VMware, Inc.
Chapter 5 Managing Tasks
Prerequisites
n Open a vSphere Client session to a vCenter Server.
Procedure
1 In the vSphere Client, select the object in the inventory.
2 If the Name, Target or Status contains search field is not displayed above the Recent Tasks pane, select
View > Filtering.
3 Click the search field arrow and select the attributes to include in the search.
Cancel a Task
Canceling a task stops a running task from occurring. Canceling a scheduled task does not cancel
subsequent runs. To cancel a scheduled task that has not run, reschedule it.
NOTE You can only cancel a subset of tasks by using the vSphere Client.
Required privileges:
Prerequisites
n Open a vSphere Client session to a vCenter Server.
Procedure
1 Locate the task in the Recent Tasks pane of the Status Bar.
By default, the Status Bar is displayed at the bottom of the vSphere Client. If it is not visible, select
View > Status Bar.
The vCenter Server system or ESXi host stops the progress of the task and returns the object to its previous
state. The vSphere Client displays the task with a Canceled status.
Schedule Tasks
You can schedule tasks to run once in the future or multiple times, at a recurring interval.
The tasks you can schedule are listed in the following table.
VMware, Inc. 53
vSphere Administration with the vSphere Client
Add a host Adds the host to the specified data center or cluster.
Change the power state of a virtual Powers on, powers off, suspends, or resets the state of the virtual machine.
machine
Change cluster power settings Enable or disable DPM for hosts in a cluster.
Change resource settings of a resource pool Changes the following resource settings:
or virtual machine n CPU – Shares, Reservation, Limit.
n Memory – Shares, Reservation, Limit.
Check compliance of a profile Checks that a host's configuration matches the configuration specified in a
host profile.
Clone a virtual machine Makes a clone of the virtual machine and places it on the specified host or
cluster.
Create a virtual machine Creates a new virtual machine on the specified host.
Deploy a virtual machine Creates a new virtual machine from a template on the specified host or
cluster.
Migrate a virtual machine Migrate a virtual machine to the specified host or datastore by using
migration or migration with vMotion.
Make a snapshot of a virtual machine Captures the entire state of the virtual machine at the time the snapshot is
taken.
Scan for Updates Scans templates, virtual machines, and hosts for available updates.
This task is available only when vSphere Update Manager is installed.
Remediate Installs missing patches from the baselines selected for remediation on the
hosts discovered during the scan operation and applies the newly
configured settings.
This task is available only when vSphere Update Manager is installed.
You create scheduled tasks by using the Scheduled Task wizard. For some scheduled tasks, this wizard
opens the wizard used specifically for that task. For example, if you create a scheduled task that migrates a
virtual machine, the Scheduled Task wizard opens the Migrate Virtual Machine wizard, which you use to
set up the migration details.
Scheduling one task to run on multiple objects is not possible. For example, you cannot create one scheduled
task on a host that powers on all virtual machines on that host. You must create a separate scheduled task
for each virtual machine.
After a scheduled task runs, you can reschedule it to run again at another time.
You can schedule a limited number of tasks by using the vSphere Client. If the task to schedule is not
available, use the vSphere API. See the vSphere SDK Programming Guide.
CAUTION Do not schedule multiple tasks to be performed at the same time on the same object. The results
are unpredictable.
Prerequisites
The vSphere Client must be connected to a vCenter Server system to schedule tasks.
54 VMware, Inc.
Chapter 5 Managing Tasks
Procedure
1 In the navigation bar, click Home > Management > Scheduled Tasks.
NOTE For some scheduled tasks, the wizard opens the wizard used specifically for that task. For
example, to migrate a virtual machine, the Scheduled Task wizard opens the Migrate Virtual Machine
Wizard, which you use to set up the migration details.
5 In the Schedule Task section, enter a task name and task description.
You can schedule a task to run only once during a day. To set up a task to run multiple times in one
day, set up additional scheduled tasks.
Once n To run the scheduled task immediately, select Now and click Next.
n To run the scheduled task at a later time and date, select Later and enter a Time. Click
the Date arrow to display the calendar and click a date.
After Startup n In Delay, enter the number of minutes to delay the task.
Hourly 1 In Start Time, enter the number of minutes after the hour to run the task.
2 In Interval, enter the number of hours after which to run the task.
For example, to start a task at the half-hour mark of every 5th hour, enter 30 and 5.
last runs the task on the last week in the month that the day occurs. For example, if
you select the last Monday of the month and the month ends on a Sunday, the task
runs six days before the end of the month.
3 In Interval, enter the number of months between each task run.
7 Click Next.
9 Click Finish.
The vCenter Server system adds the task to the list in the Scheduled Tasks window.
VMware, Inc. 55
vSphere Administration with the vSphere Client
Prerequisites
n Open a vSphere Client session to a vCenter Server system.
Procedure
1 In the vSphere Client, click Home > Management > Scheduled Tasks.
6 Click Finish.
Prerequisites
To remove scheduled tasks, the vSphere Client must be connected to the vCenter Server system.
Procedure
1 In the vSphere Client, click Home > Management > Scheduled Tasks.
4 Click OK.
Tasks that aren’t running can be cleared when they are in a queued or scheduled state. In such cases,
because the cancel operation is not available, either remove the task or reschedule it to run at a different
time. Removing a scheduled task requires that you recreate it to run it in the future, rescheduling does not.
n Connecting to a host
56 VMware, Inc.
Chapter 5 Managing Tasks
n Migrating a powered off virtual machine. This task is cancelable only when the source disks have not
been deleted.
If your vSphere environment uses virtual services, you can also cancel the following scheduled tasks:
The vCenter Server system and ESXi hosts use the following rules to process tasks:
n The user performing the task in the vSphere Client must have the correct permissions on the relevant
objects. After a scheduled task is created, it will be performed even if the user no longer has permission
to perform the task.
n When the operations required by manual tasks and scheduled tasks conflict, the activity due first is
started first.
n When a virtual machine or host is in an incorrect state to perform any activity, manual or scheduled,
vCenter Server or the ESXi host does not perform the task. A message is recorded in the log.
n When an object is removed from the vCenter Server or the ESXi host, all associated tasks are also
removed.
n The vSphere Client and vCenter Server system use UTC time to determine the start time of a scheduled
task. This ensures vSphere Client users in different time zones see the task scheduled to run at their
local time.
Events are logged in the event log at start and completion of a task. Any errors that occur during a task are
also recorded in the event log.
CAUTION Do not schedule multiple tasks to be performed at the same time on the same object. The results
are unpredictable.
VMware, Inc. 57
vSphere Administration with the vSphere Client
58 VMware, Inc.
Securing the Management Interface 6
Secure the management Interface of an ESXi host and the virtual machine guest operating system by
restricting the services and management agents that are allowed to interface directly with the host or virtual
machine.
An ESXi host is also protected with a firewall. You can open ports for incoming and outgoing traffic as
needed, but should restrict access to services and ports. Using the ESXi lockdown mode and limiting access
to the ESXi Shell can further contribute to a more secure environment. Starting with vSphere 6.0, ESXi hosts
participate in the certificate infrastructure. Hosts are provisioned with certificate that are signed by the
VMware Certificate Authority (VMCA) by default.
See the VMware white paper Security of the VMware vSphere Hypervisor for additional information on ESXi
security.
You add information about allowed services and management agents to the host configuration file. You can
enable or disable these services and agents using the vSphere Client or at the command line.
NOTE If different services have overlapping port rules, enabling one service might implicitly enable
overlapping services. To minimize the effects of this behavior, you can specify which IP addresses are
allowed to access each service on the host.
Procedure
1 Select the host in the inventory panel.
2 Click the Configuration tab, then in the Software section, click Security Profile.
The vSphere Client displays a list of active incoming and outgoing connections with the corresponding
firewall ports.
VMware, Inc. 59
vSphere Administration with the vSphere Client
The Firewall Properties dialog box lists all the rule sets that you can configure for the host.
4 Select the rule sets to enable, or deselect the rule sets to disable.
The Incoming Ports and Outgoing Ports columns indicate the ports that the vSphere Client opens for
the service. The Protocol column indicates the protocol that the service uses. The Daemon column
indicates the status of daemons associated with the service.
5 Click OK.
You can use the vSphere Client or the command line to update the Allowed IP list for a service. By default,
all IP addresses are allowed.
Procedure
1 Select the host in the inventory panel.
5 Select Only allow connections from the following networks and enter the IP addresses of networks
that are allowed to connect to the host.
You can enter IP addresses in the following formats: 192.168.0.0/24, 192.168.1.2, 2001::1/64, or fd3e:
29a6:0a81:e478::/64.
6 Click OK.
Procedure
1 In the vSphere Client, select the host in the inventory.
2 Click the Configuration tab, then under Software click Security Profile.
All the firewall services and management agents that you can configure for the host are listed.
You can set the service start policy, verify the status of the service, and manually start, stop, or restart
the service through this configuration.
6 Click OK.
60 VMware, Inc.
Chapter 6 Securing the Management Interface
Enable the ESXi Shell for troubleshooting only. The ESXi Shell can be enabled and disabled whether or not
the host is running in lockdown mode. See the vSphere Security publication for more information on
lockdown mode behavior.
ESXi Shell Enable this service to access the ESXi Shell locally.
SSH Enable this service to access the ESXi Shell remotely using SSH. You can
upload SSH keys to your hosts. See the vSphere Security publication for more
information on SSH keys.
Direct Console UI When you enable this service while running in lockdown mode, you can log
(DCUI) in locally to the direct console user interface as the root user and disable
lockdown mode. You can then access the host using a direct connection to
the vSphere Client or by enabling the ESXi Shell.
The root user and users with the Administrator role can access the ESXi Shell. Users who are in the Active
Directory group ESX Admins are automatically assigned the Administrator role. By default, only the root
user can execute system commands (such as vmware -v) using the ESXi Shell.
NOTE Do not enable the ESXi Shell until you actually need access.
Procedure
1 Select the host in the inventory panel.
n ESXi Shell
n SSH
n Direct Console UI
When you select Start and stop manually, the service does not start when you reboot the host. If you
want the service to start when you reboot the host, select Start and stop with host.
7 Click OK.
The availability timeout setting is the amount of time that can elapse before you must log in after the
ESXi Shell is enabled. After the timeout period, the service is disabled and users are not allowed to log in.
VMware, Inc. 61
vSphere Administration with the vSphere Client
Procedure
1 Select the host in the inventory and click the Configuration tab.
You must restart the SSH service and the ESXi Shell service for the timeout to take effect.
5 Click OK.
If you are logged in when the timeout period elapses, your session will persist. However, after you log out
or your session is terminated, users are not allowed to log in.
The idle timeout is the amount of time that can elapse before the user is logged out of an idle interactive
sessions. Changes to the idle timeout apply the next time a user logs in to the ESXi Shell and do not affect
existing sessions.
Procedure
1 Select the host in the inventory and click the Configuration tab.
You must restart the SSH service and the ESXi Shell service for the timeout to take effect.
5 Click OK.
If you are logged in when the timeout period elapses, your session will persist. However, after you log out
or your session is terminated, users are not allowed to log in.
Prerequisites
n Open a vSphere Client session to a vCenter Server system.
Procedure
1 Select the host in the inventory panel.
5 Click OK.
62 VMware, Inc.
Chapter 6 Securing the Management Interface
2 Disable Copy and Paste Operations Between Guest Operating System and Remote Console on
page 64
Copy and paste operations between the guest operating system and remote console are disabled by
default. For a secure environment, retain the default setting. If you require copy and paste operations,
you must enable them using the vSphere Client.
4 Prevent the Guest Operating System Processes from Sending Configuration Messages to the Host on
page 65
You can prevent guests from writing any name-value pairs to the configuration file that are sent to the
host. This is appropriate when guest operating systems must be prevented from modifying
configuration settings.
Prerequisites
Turn off the virtual machine.
Procedure
1 Log in to the vCenter Server system using the vSphere Client.
4 Select Options > Advanced > General and click Configuration Parameters.
VMware, Inc. 63
vSphere Administration with the vSphere Client
Name Value
isolation.tools.diskWiper.disable TRUE
isolation.tools.diskShrink.disable TRUE
6 Click OK to close the Configuration Parameters dialog box, and click OK again to close the Virtual
Machine Properties dialog box.
When you disable this feature, you cannot shrink virtual machine disks when a datastore runs out of space.
Disable Copy and Paste Operations Between Guest Operating System and
Remote Console
Copy and paste operations between the guest operating system and remote console are disabled by default.
For a secure environment, retain the default setting. If you require copy and paste operations, you must
enable them using the vSphere Client.
Prerequisites
Power off the virtual machine.
Procedure
1 In the vSphere Client, select the virtual machine.
3 Select Options > Advanced > General and click Configuration Parameters.
4 Ensure that the following values are in the Name and Value columns, or click Add Row to add them.
Name Value
isolation.tools.copy.disable TRUE
isolation.tools.paste.disable TRUE
These options override any settings made in the guest operating system’s VMware Tools control panel.
5 Click OK to close the Configuration Parameters dialog box, and click OK again to close the Virtual
Machine Properties dialog box.
6 (Optional) If you made changes to the configuration parameters, restart the virtual machine.
Prerequisites
Power off the virtual machine.
Procedure
1 In the vSphere Client, select the virtual machine in the inventory panel.
3 Select Options > Advanced > General and click Configuration Parameters.
64 VMware, Inc.
Chapter 6 Securing the Management Interface
4 If the size limit attribute is not present, you must add it.
5 Click OK to close the Configuration Parameters dialog box, and click OK again to close the Virtual
Machine Properties dialog box.
Prerequisites
Power off the virtual machine.
Procedure
1 In the vSphere Client, select the virtual machine in the inventory panel.
3 Click Options > Advanced > General, and click Configuration Parameters.
4 Click Add Row and type the following values in the Name and Value columns.
5 Click OK to close the Configuration Parameters dialog box, and click OK again to close the Virtual
Machine Properties dialog box.
Prerequisites
Turn off the virtual machine.
Procedure
1 Log in to a vCenter Server system using the vSphere Client and select the virtual machine.
3 Select Options > Advanced > General and click Configuration Parameters.
VMware, Inc. 65
vSphere Administration with the vSphere Client
Name Value
isolation.device.connectable.disabl true
e
isolation.device.edit.disable true
These options override any settings made in the guest operating system's VMware Tools control panel.
5 Click OK to close the Configuration Parameters dialog box, and click OK again to close the Virtual
Machine Properties dialog box.
6 (Optional) If you made changes to the configuration parameters, restart the virtual machine.
You can use the vSphere Client or the esxcli system syslog vCLI command to configure the syslog service.
For more information about using vCLI commands, see Getting Started with vSphere Command-Line Interfaces.
Procedure
1 In the vSphere Client inventory, select the host.
5 To set up logging globally, click global and make changes to the fields on the right.
Option Description
Syslog.global.defaultRotate Sets the maximum number of archives to keep. You can set this number
globally and for individual subloggers.
Syslog.global.defaultSize Sets the default size of the log, in KB, before the system rotates logs. You
can set this number globally and for individual subloggers.
Syslog.global.LogDir Directory where logs are stored. The directory can be located on mounted
NFS or VMFS volumes. Only the /scratch directory on the local file
system is persistent across reboots. The directory should be specified as
[datastorename] path_to_file where the path is relative to the root of the
volume backing the datastore. For example, the path
[storage1] /systemlogs maps to the
path /vmfs/volumes/storage1/systemlogs.
Syslog.global.logDirUnique Selecting this option creates a subdirectory with the name of the ESXi host
under the directory specified by Syslog.global.LogDir. A unique directory
is useful if the same NFS directory is used by multiple ESXi hosts.
Syslog.global.LogHost Remote host to which syslog messages are forwarded and port on which
the remote host receives syslog messages. You can include the protocol
and the port, for example, ssl://hostName1:514. UDP (default), TCP,
and SSL are supported. The remote host must have syslog installed and
correctly configured to receive the forwarded syslog messages. See the
documentation for the syslog service installed on the remote host for
information on configuration.
66 VMware, Inc.
Chapter 6 Securing the Management Interface
6 (Optional) To overwrite the default log size and log rotation for any of the logs.
a Click loggers.
b Click the name of the log you that want to customize and enter the number of rotations and log
size you want.
7 Click OK.
VMware, Inc. 67
vSphere Administration with the vSphere Client
68 VMware, Inc.
ESXi Authentication and User
Management 7
ESXi handles user authentication and supports user permissions.
When you connect directly to an ESXi host with the vSphere Client, you can create users and groups that are
local to that ESXi host. You can also assign permissions to these users and groups.
vCenter Server is not aware of users that are local to ESXi, and ESXi is not aware of vCenter Server users.
For more information on managing users for ESXi hosts managed by vCenter Server, see the vSphere Security
documentation.
In vSphere 5.1 and later, ESXi user management has the following caveats.
n The users created when you connect directly to an ESXi host are not the same as the vCenter Server
users. When the host is managed by vCenter Server, vCenter Server ignores users created directly on
the host.
n You cannot create ESXi users with the vSphere Web Client. You must log directly into the host with the
vSphere Client to create ESXi users.
n ESXi 5.1 and later does not support local groups. However, Active Directory groups are supported.
To prevent anonymous users such as root from accessing the host with the Direct Console User Interface
(DCUI) or ESXi Shell, remove the user's administrator privileges on the root folder of the host. This applies
to both local users and Active Directory users and groups.
VMware, Inc. 69
vSphere Administration with the vSphere Client
Prerequisites
n Open a vSphere Client session to an ESXi host.
Procedure
1 Log in to ESXi using the vSphere Client.
You cannot create ESXi users with the vSphere Web Client. You must directly log into the host with the
vSphere Client to create ESXi users.
2 Click Users.
NOTE Do not create a user named ALL. Privileges associated with the name ALL might not be available
to all users in some situations. For example, if a user named ALL has Administrator privileges, a user
with ReadOnly privileges might be able to log in to the host remotely. This is not the intended
behavior.
n Create a password that meets the length and complexity requirements. The host checks for
password compliance using the default authentication plug-in, pam_passwdqc.so. If the password is
not compliant, the following error appears: A general system error occurred: passwd:
Authentication token manipulation error.
5 Click OK.
Prerequisites
n Open a vSphere Client session to an ESXi host.
Procedure
1 Log in to ESXi using the vSphere Client.
You cannot create ESXi users with the vSphere Web Client. You must log directly into the host with the
vSphere Client to create ESXi users.
2 Click Users.
3 Right-click the user and click Edit to open the Edit User dialog box.
70 VMware, Inc.
Chapter 7 ESXi Authentication and User Management
NOTE Do not create a user named ALL. Privileges associated with the name ALL might not be available
to all users in some situations. For example, if a user named ALL has Administrator privileges, a user
with ReadOnly privileges might be able to log in to the host remotely. This is not the intended
behavior.
n Create a password that meets the length and complexity requirements. The host checks for
password compliance using the default authentication plug-in, pam_passwdqc.so. If the password is
not compliant, the following error appears: A general system error occurred: passwd:
Authentication token manipulation error.
5 Click OK.
If you remove a user from the host, they lose permissions to all objects on the host and cannot log in again.
NOTE Users who are logged in and are removed from the domain keep their host permissions until you
restart the host.
Procedure
1 Log in to ESXi using the vSphere Client.
2 Click the Local Users & Groups tab and click Users.
Procedure
1 Log in to ESXi using the vSphere Client.
2 Click the Local Users & Groups tab and click Users .
3 Determine how to sort the table, and hide or show columns according to the information you want to
see in the exported file.
n To sort the table by any of the columns, click the column heading.
n To show or hide columns, right-click any of the column headings and select or deselect the name of
the column to hide.
n To show or hide columns, right-click any of the column headings and select or deselect the name of
the column to hide.
4 Right-click anywhere in the table and click Export List to open the Save As dialog box.
VMware, Inc. 71
vSphere Administration with the vSphere Client
For example, to configure memory for the host, a user must be granted a role that includes the
Host.Configuration.Memory Configuration privilege. By assigning different roles to users for different
objects, you can control the tasks that users can perform in your vSphere environment.
When connecting directly to a host with the vSphere Client, the root and vpxuser user accounts have the
same access rights as any user assigned the Administrator role on all objects.
All other users initially have no permissions on any objects, which means they cannot view these objects or
perform operations on them. A user with Administrator privileges must assign permissions to these users to
allow them to perform tasks.
Many tasks require permissions on more than one object. These rules can help you determine where you
must assign permissions to allow particular operations:
n Any operation that consumes storage space, such as creating a virtual disk or taking a snapshot,
requires the Datastore.Allocate Space privilege on the target datastore, as well as the privilege to
perform the operation itself.
n Moving an object in the inventory hierarchy requires appropriate privileges on the object itself, the
source parent object (such as a folder or cluster), and the destination parent object.
n Each host and cluster has its own implicit resource pool that contains all the resources of that host or
cluster. Deploying a virtual machine directly to a host or cluster requires the Resource.Assign Virtual
Machine to Resource Pool privilege.
The list of privileges is the same for both ESXi and vCenter Server.
You can create roles and set permissions through a direct connection to the ESXi host.
Permission Validation
vCenter Server and ESXi hosts that use Active Directory regularly validate users and groups against the
Windows Active Directory domain. Validation occurs whenever the host system starts and at regular
intervals specified in the vCenter Server settings.
For example, if user Smith was assigned permissions and in the domain the user’s name was changed to
Smith2, the host concludes that Smith no longer exists and removes permissions for that user when the next
validation occurs.
Similarly, if user Smith is removed from the domain, all permissions are removed when the next validation
occurs. If a new user Smith is added to the domain before the next validation occurs, the new user Smith
receives all the permissions the old user Smith was assigned.
Change Permissions
After a user and role pair is set for an inventory object, you can change the role paired with the user or
change the setting of the Propagate check box. You can also remove the permission setting.
Procedure
1 From the vSphere Client, select an object in the inventory.
3 Right-click the line item to select the user and role pair.
72 VMware, Inc.
Chapter 7 ESXi Authentication and User Management
4 Select Properties.
5 Select a role for the user or group from the drop-down menu.
6 To propagate the privileges to the children of the assigned inventory object, click the Propagate check
box and click OK.
Remove Permissions
Removing a permission for a user does not remove the user from the list of those available. It also does not
remove the role from the list of available items. It removes the user and role pair from the selected inventory
object.
Prerequisites
n Open a vSphere Client session to an ESXi host.
Procedure
1 From the vSphere Client, click the Inventory button.
Procedure
1 From the vSphere Client connected to a vCenter Server system, select Administration > vCenter Server
Settings.
4 If validation is enabled, enter a value in the Validation Period text box to specify a time, in minutes,
between validations.
ESXi hosts provide three default roles, and you cannot change the privileges associated with these roles.
Each subsequent default role includes the privileges of the previous role. For example, the Administrator
role inherits the privileges of the Read Only role. Roles you create yourself do not inherit privileges from
any of the default roles.
VMware, Inc. 73
vSphere Administration with the vSphere Client
You can create custom roles by using the role-editing facilities in the vSphere Client to create privilege sets
that match your user needs. If you use the vSphere Client connected to vCenter Server to manage ESXi
hosts, you have additional roles to choose from in vCenter Server. Also, the roles you create directly on a
host are not accessible within vCenter Server. You can work with these roles only if you log in to the host
directly from the vSphere Client.
NOTE When you add a custom role and do not assign any privileges to it, the role is created as a Read Only
role with three system-defined privileges: System.Anonymous, System.View, and System.Read.
If you manage ESXi hosts through vCenter Server, maintaining custom roles in the host and vCenter Server
can result in confusion and misuse. In this type of configuration, maintain custom roles only in
vCenter Server.
You can create host roles and set permissions through a direct connection to the ESXi host with the vSphere
Client.
Create a Role
VMware recommends that you create roles to suit the access control needs of your environment.
Prerequisites
Verify that you are logged in as a user with Administrator privileges, such as root or vpxuser.
Procedure
1 On the vSphere Client Home page, click Roles.
Clone a Role
You can make a copy of an existing role, rename it, and later edit it. When you make a copy, the new role is
not applied to any users or groups and objects. You must assign the role to users or groups and objects.
Prerequisites
Verify that you are logged in as a user with Administrator privileges, such as root or vpxuser.
Procedure
1 On the vSphere Client Home page, click Roles.
2 To select the role to duplicate, click the object in the list of Roles.
3 To clone the selected role, select Administration > Role > Clone.
A duplicate of the role is added to the list of roles. The name is Copy of rolename.
Edit a Role
When you edit a role, you can change the privileges selected for that role. When completed, these privileges
are applied to any user or group assigned the edited role.
Prerequisites
Verify that you are logged in as a user with Administrator privileges, such as root or vpxuser.
74 VMware, Inc.
Chapter 7 ESXi Authentication and User Management
Procedure
1 On the vSphere Client Home page, click Roles.
Rename a Role
When you rename a role, no changes occur to that role’s assignments.
Prerequisites
Verify that you are logged in as a user with Administrator privileges, such as root or vpxuser.
Procedure
1 On the vSphere Client Home page, click Roles.
2 Click the object in the list of roles that you want rename.
Remove a Role
When you remove a role that is not assigned to any users or groups, the definition is removed from the list
of roles. When you remove a role that is assigned to a user or group, you can remove assignments or replace
them with an assignment to another role.
CAUTION You must understand how users will be affected before removing all assignments or replacing
them. Users who have no permissions granted to them cannot log in.
Prerequisites
Verify that you are logged in as a user with Administrator privileges, such as root or vpxuser.
Procedure
1 On the vSphere Client Home page, click Roles.
4 Click OK.
Option Description
Remove Role Assignments Removes configured user or group and role pairings on the server. If a
user or group does not have other permissions assigned, they lose all
privileges.
Reassign affected users to Reassigns any configured user or group and role pairings to the selected
new role.
VMware, Inc. 75
vSphere Administration with the vSphere Client
Creating local user accounts on each host presents challenges with having to synchronize account names
and passwords across multiple hosts. Join ESXi hosts to an Active Directory domain to eliminate the need to
create and maintain local user accounts. Using Active Directory for user authentication simplifies the ESXi
host configuration and reduces the risk for configuration issues that could lead to unauthorized access.
When you use Active Directory, users supply their Active Directory credentials and the domain name of the
Active Directory server when adding a host to a domain.
Prerequisites
n Verify that you have an Active Directory domain. See your directory server documentation.
n Verify that the host name of ESXi is fully qualified with the domain name of the Active Directory forest.
Procedure
1 Synchronize the time between ESXi and the directory service system using NTP.
ESXi supports synchronizing time with an external NTPv3 or NTPv4 server that is compliant with RFC
5905 and RFC 1305. The Microsoft Windows W32Time service does not meet these requirements when
running with default settings. See the vSphere Security documentation or the VMware Knowledge Base
for information about how to synchronize ESXi time with a Microsoft Domain Controller.
2 Ensure that the DNS servers you configured for the host can resolve the host names for the Active
Directory controllers.
d In the DNS and Routing Configuration dialog box, verify that the host name and DNS server
information for the host are correct.
What to do next
Use the vSphere Client to join a directory service domain.
n name.tld (for example, domain.com): The account is created under the default container.
To use the vSphere Authentication Proxy service (CAM service), see the vSphere Security documentation.
76 VMware, Inc.
Chapter 7 ESXi Authentication and User Management
Prerequisites
Verify that the vSphere Client is connected to the host.
Procedure
1 Select a host in the vSphere Client inventory, and click the Configuration tab.
3 Click Properties.
4 In the User Directory Services dialog box, select the directory service from the drop-down menu.
5 Enter a domain.
7 Enter the user name and password of a directory service user who has permissions to join the host to
the domain, and click OK.
Procedure
1 Select a host in the vSphere Client inventory, and click the Configuration tab.
The Authentication Services Settings page displays the directory service and domain settings.
n name.tld (for example, domain.com): The account is created under the default container.
Prerequisites
n Verify that the vSphere Client is connected to the host.
n If ESXi is configured with a DHCP address, set up the DHCP range as described in the vSphere Security
documentation..
n If ESXi is configured with a static IP address, verify that its associated profile is configured to use the
vSphere Authentication Proxy service to join a domain so that the authentication proxy server can trust
the ESXi IP address.
n If ESXi is using a self-signed certificate, verify that the host has been added to vCenter Server. This
allows the authentication proxy server to trust ESXi.
VMware, Inc. 77
vSphere Administration with the vSphere Client
n If ESXi is using a CA-signed certificate and is not provisioned by Auto Deploy, verify that the CA
certificate has been added to the local trust certificate store of the authentication proxy server as
described in the vSphere Security documentation.
n Authenticate the vSphere Authentication Proxy server to the host as described in the vSphere Security
documentation.
Procedure
1 In the vSphere Client inventory, select the host.
3 Click Properties.
4 In the Directory Services Configuration dialog box, select the directory server from the drop-down
menu.
5 Enter a domain.
9 Click OK.
NOTE This procedure applies only to vCenter Server user lists. ESXi host user lists cannot be searched in the
same way.
Prerequisites
To configure Active Directory settings, the vSphere Client must be connected to the vCenter Server system.
Procedure
1 From the vSphere Client connected to a vCenter Server system, select Administration > vCenter Server
Settings.
Option Description
Active Directory Timeout Timeout interval in seconds for connecting to the Active Directory server.
This value specifies the maximum amount of time vCenter Server allows a
search to run on the selected domain. Searching large domains can take a
long time.
Enable Query Limit Select the check box to limit the number of users and groups that vCenter
Server displays in the Add Permissions dialog box for the selected domain.
Users & Groups value Specifies the maximum number of users and groups vCenter Server
displays from the selected domain in the Select Users or Groups dialog
box. If you enter 0 (zero), all users and groups appear.
4 Click OK.
78 VMware, Inc.
Managing Hosts in vCenter Server 8
To access the full capabilities of your hosts and to simplify the management of multiple hosts, you should
connect your hosts to a vCenter Server system.
For information about configuration management of ESXihosts, see the vSphere Networking documentation,
the vSphere Storage documentation, or the vSphere Security documentation.
The views and capabilities displayed vary depending on whether the vSphere Client is connected to a
vCenter Server system or an ESXi host. Unless indicated, the process, task, or description applies to all kinds
of vSphere Client connections.
The managed host and its associated virtual machines remain in the vCenter Server inventory. By contrast,
removing a managed host from vCenter Server removes the managed host and all its associated virtual
machines from the vCenter Server inventory.
Procedure
1 From the vSphere Client connected to a vCenter Server system, display the inventory and click the
managed host to disconnect.
2 Right-click the host and select Disconnect from the pop-up menu.
If the managed host is disconnected, the word “disconnected” is appended to the object name in
parentheses, and the object is dimmed. All associated virtual machines are similarly dimmed and
labeled.
VMware, Inc. 79
vSphere Administration with the vSphere Client
Procedure
1 From the vSphere Client connected to a vCenter Server system, display the inventory and click the
managed host to reconnect.
2 Right-click the host and select Connect from the pop-up menu.
When the managed host’s connection status to vCenter Server is changed, the statuses of the virtual
machines on that managed host are updated to reflect the change.
If vCenter Server fails to decrypt a host password, the host is disconnected from vCenter Server. You must
reconnect the host and supply the login credentials, which will be encrypted and stored in the database
using the new certificate.
You can remove hosts from a cluster by selecting them in the inventory and dragging them to a new location
within the inventory. The new location can be a folder as a standalone host or another cluster.
Prerequisites
Before you can remove a host from a cluster, you must power off all virtual machines that are running on
the host, or migrate the virtual machines to a new host using vMotion.
Procedure
1 From the vSphere Client connected to a vCenter Server system, display the inventory.
2 Right-click the appropriate managed host icon in the inventory panel, and select Enter Maintenance
Mode from the pop-up menu.
If all virtual machines on the host are not powered off, the host will not enter maintenance mode.
If the host is inside a DRS-enabled cluster, entering maintenance mode causes DRS to attempt to
automatically evacuate powered-on virtual machines from the host using vMotion.
The confirmation dialog also asks if you want to automatically evacuate virtual machines that are not
powered on from the host. This is useful if you want those virtual machines to remain registered to a
host within the cluster.
The host icon changes and the term “maintenance mode” is added to the name in parentheses.
80 VMware, Inc.
Chapter 8 Managing Hosts in vCenter Server
4 Select the host icon in the inventory panel, and drag it to the new location.
The host can be moved to another cluster or another datacenter. When the new location is selected, a
blue box surrounds the cluster or datacenter name.
If possible, remove managed hosts while they are connected. Removing a disconnected managed host does
not remove the vCenter Server agent from the managed host.
Prerequisites
Make sure NFS mounts are active. If NFS mounts are unresponsive, the operation fails.
Procedure
1 From the vSphere Client connected to a vCenter Server system, display the inventory.
2 (Optional) If the host is part of a cluster, you must put it in maintenance mode.
a Right-click the managed host in the inventory and select Enter Maintenance Mode from the pop-
up menu.
The host icon changes and the term “maintenance mode” is added to the name in parentheses.
3 Right-click the appropriate host in the inventory panel, and select Remove from the pop-up menu.
4 In the confirmation dialog that appears, click Yes to remove the managed host.
vCenter Server removes the managed host and associated virtual machines from the vCenter Server
environment. vCenter Server then returns the status of all associated processor and migration licenses
to available.
VMware, Inc. 81
vSphere Administration with the vSphere Client
82 VMware, Inc.
Using vCenter Maps 9
A vCenter map is a visual representation of your vCenter Server topology. Maps show the relationships
between the virtual and physical resources available to vCenter Server.
Maps are available only when the vSphere Client is connected to a vCenter Server system.
The maps can help you determine such things as which clusters or hosts are most densely populated, which
networks are most critical, and which storage devices are being utilized. vCenter Server provides the
following map views.
You can use a map view to limit or expand the scope of a map. You can customize all map views, except
vMotion Resources maps. If you are accessing map views using the navigation bar, all vCenter Server
resources are available for display. If you are using the Maps tab of a selected inventory item, only items
related to that item are displayed. For virtual machine inventory items, the vMotion Resources view is the
only map view available on the Maps tab.
You can customize a map view by selecting or deselecting objects in the inventory pane or by selecting or
deselecting options in the Map Relationships area.
You can reposition the map by dragging it (click and hold anywhere on the map and drag the map to the
new location). A grey box in the overview area represents the section of the total map that is viewable and
moves as you drag the map. You can resize the grey box to zoom in or out of a section of the map.
You can double-click any object in a map to switch to the Map tab for that item (providing a Map tab is
available for that type of object).
VMware, Inc. 83
vSphere Administration with the vSphere Client
Procedure
1 In the vSphere Client, select Edit > Client Settings > Maps tab.
3 Click OK.
When a user attempts to view a map that has more objects than the specified limit, the user encounters a
message that provides the option to cancel the map or to proceed with displaying it.
Procedure
1 Display the object in the inventory.
For example, to display the resource map for your entire vCenter Server system, select the
vCenter Server in the inventory panel. To display the resource map for a host, select the host in the
inventory panel.
Procedure
1 Select File > Print Maps > Print.
2 In the printer Name list, select the printer.
3 Click Print.
Procedure
1 If necessary, view the resource map.
5 Click Export.
84 VMware, Inc.
Creating a Virtual Machine in the
vSphere Client 10
Virtual machines are the key component in a virtual infrastructure. You can create virtual machines to add
to the host inventory.
When you create a virtual machine, you associate it to a particular datastore and select an operating system
and virtual hardware options. After you turn on the virtual machine, it consumes resources dynamically as
the workload increases, or it returns resources dynamically as the workload decreases.
Every virtual machine has virtual devices that provide the same function as physical hardware. A virtual
machine gets CPU and memory, access to storage, and network connectivity from the host it runs on.
n “Start the Virtual Machine Creation Process in the vSphere Client,” on page 85
n “Select a Configuration Option for the New Virtual Machine in the vSphere Client,” on page 86
n “Enter a Name and Location for the Virtual Machine in the vSphere Client,” on page 87
The selections you make in the New Virtual Machine wizard are not saved until you click Finish on the
Ready to Complete page. If you cancel the wizard without completing all tasks, you cannot resume the
wizard where you left off. You must start a new creation task.
You can create a new virtual machine in a datacenter, host, cluster, resource pool, or virtual machine folder.
VMware, Inc. 85
vSphere Administration with the vSphere Client
Prerequisites
Verify that you have the following privileges:
n Virtual machine.Configuration.Add new disk on the destination folder or datacenter, if you are
adding a new disk.
n Virtual machine.Configuration.Add existing disk on the destination folder or datacenter, if you are
adding an existing disk.
n Virtual machine.Configuration.Raw device on the destination folder or datacenter, if you are using a
RDM or SCSI pass-through device.
n Virtual Machine.Configuration.Network
n Resource.Assign virtual machine to resource pool on the destination host, cluster, or resource pool.
n Network.Assign network on the network that the virtual machine will be assigned to.
Procedure
1 Display the inventory objects in the vSphere Client by using the Host and Clusters view or the VM and
Templates view.
What to do next
Select a Typical or Custom configuration option in the New Virtual Machine wizard.
Several relationships affect the information that you must provide during virtual machine creation. These
relationships include the inventory object on which you place the virtual machine, the customization path
option you select, the datastore on which the virtual machine and its files reside, and the host or cluster on
which it runs.
If you select a Typical configuration, the virtual machine hardware version defaults to that of the host on
which you place the virtual machine. If you select a Custom configuration, you can accept the default or
select an earlier hardware version. This configuration is useful if maintaining compatibility with an earlier
version of an ESX/ESXi host is necessary.
Prerequisites
For a Typical configuration, verify that you have the following information:
n Location in which to place the virtual machine (cluster, host, resource pool).
86 VMware, Inc.
Chapter 10 Creating a Virtual Machine in the vSphere Client
In addition to the information for a Typical configuration, for a Custom configuration, verify that you have
the following information:
Procedure
1 On the Configuration page of the New Virtual Machine wizard, select an option for creating the virtual
machine.
2 Click Next.
What to do next
Select a name and location for the virtual machine.
Enter a Name and Location for the Virtual Machine in the vSphere
Client
The name you enter is used as the virtual machine’s base name in the inventory. It is also used as the name
of the virtual machine’s files.
The name can be up to 80 characters long. Names are not case-sensitive, so the name my_vm is identical to
My_Vm.
Prerequisites
Verify that you have an appropriate naming strategy in place.
Procedure
1 On the Name and Location page of the New Virtual Machine wizard, type a name.
NOTE This option is only available when you are connected to a vCenter Server system.
3 Click Next.
A cluster is a collection of ESXi hosts and associated virtual machines with shared resources and a shared
management interface. Grouping hosts into clusters allows you to enable many optional features that
enhance the availability and flexibility of your infrastructure.
VMware, Inc. 87
vSphere Administration with the vSphere Client
Procedure
1 On the Host / Cluster page of the New Virtual Machine wizard, select the host or cluster where you
want to run the virtual machine.
NOTE The Host / Cluster page is only available when you are connected to a vCenter Server system.
2 Click Next.
If resource pools are configured on the host, the Resource Pool page opens. Otherwise, the Datastore
page opens.
What to do next
Select a resource pool or a datastore on which to run the virtual machine.
The Resource Pool page appears only when resource pools are configured on the host.
Procedure
1 On the Resource Pool page of the New Virtual Machine wizard, navigate to the resource pool where
you want to run the virtual machine.
What to do next
Select a datastore in which to store the virtual machine files.
You can select from datastores already configured on the destination host or cluster.
Procedure
1 On the Storage page of the New Virtual Machine wizard, select a datastore in which to store the virtual
machine files.
2 (Optional) To turn off Storage DRS for the virtual machine, select Disable Storage DRS for this virtual
machine.
3 Click Next.
If you selected a Typical configuration path, the Guest Operating System page appears. If you selected a
Custom configuration path, the Virtual Machine Version page appears.
88 VMware, Inc.
Chapter 10 Creating a Virtual Machine in the vSphere Client
For virtual machine and host compatibility options, see “Virtual Machine Hardware Versions,” on
page 139.
Procedure
1 Select a virtual machine hardware version.
Option Description
Virtual machine version 11 Compatible with ESXi 6.0 hosts. Provides the latest virtual machine
features including improved accelerated 3D graphics rendering.
Recommended for virtual machines that do not need to migrate to
ESX/ESXi 4.x and 5.x hosts.
Virtual machine version 10 Compatible with ESXi 5.5 and later hosts. Recommended for virtual
machines that do not need to migrate to ESX/ESXi 4.x and 5.1 hosts.
Virtual machine version 9 Compatible with ESXi 5.1 and later hosts. Recommended for virtual
machines that do not need to migrate to ESX/ESXi 4.x and 5.0 hosts.
Virtual machine version 8 Compatible with ESXi 5.0 and later hosts. Recommended for virtual
machines that do not need to migrate to ESX/ESXi 4.x hosts.
Virtual machine version 7 Compatible with ESX/ESXi 4, 4.x, and later hosts. Recommended for
sharing storage or virtual machines with ESX/ESXi versions 3.5 to 4.1.
Virtual machine version 4 Compatible with ESX/ESXi 4 and later hosts. Recommended for virtual
machines that need to run on ESX/ESXi versions 4.
2 Click Next.
What to do next
Select a guest operating system for the virtual machine.
The New Virtual Machine wizard does not install the guest operating system. The wizard uses this
information to select appropriate default values, such as the amount of memory needed.
When you select a guest operating system, BIOS or Extensible Firmware Interface (EFI) is selected by
default, depending on the firmware supported by the operating system. Mac OS X Server guest operating
systems support only EFI. If the operating system supports BIOS and EFI, you can change the default from
the Options tab of the Virtual Machine Properties editor after you create the virtual machine and before you
install the guest operating system. If you select EFI, you cannot boot an operating system that supports only
BIOS, and the reverse.
IMPORTANT Do not change the firmware after the guest operating system is installed.
The Mac OS X Server must run on Apple hardware. You cannot power on a Mac OS X Server if it is running
on other hardware.
VMware, Inc. 89
vSphere Administration with the vSphere Client
Procedure
1 On the Guest Operating System page of the New Virtual Machine wizard, select an operating system
family.
2 Select an operating system and version from the drop-down menu and click Next.
If any of the total cores available on the host, the maximum virtual CPUs supported by the virtual
machine hardware version, or the maximum supported CPUs on the guest operating system equal 1,
the virtual machine CPU count is set to 1 and the Memory page opens.
3 If you selected Other (32-bit) or Other (64-bit), enter a name for the operating system in the text box.
4 Click Next.
What to do next
You can add memory or CPUs for the virtual machine.
VMware Virtual Symmetric Multiprocessing (Virtual SMP) enables a single virtual machine to use multiple
physical processors simultaneously. You must have Virtual SMP to power on multiprocessor virtual
machines.
Procedure
1 On the CPUs page of the New Virtual Machine wizard, select a value from the Number of virtual
sockets drop-down menu.
2 Select a value from the Number of cores per socket drop-down menu.
To determine the total number of cores, multiply the number of cores per socket by the number of
virtual sockets. The resulting total number of cores is a number equal to or less than the number of
logical CPUs on the host.
3 Click Next.
What to do next
Select the memory for the virtual machine.
The minimum memory size is 4 MB for virtual machines that use BIOS firmware. Virtual machines that use
EFI firmware require at least 96 MB of RAM or they cannot power on.
The maximum memory size for a virtual machine depends on the host's physical memory and the virtual
machine's hardware version.
90 VMware, Inc.
Chapter 10 Creating a Virtual Machine in the vSphere Client
If the virtual machine memory is greater than the host memory size, swapping occurs, which can have a
severe effect on virtual machine performance. The memory size must be a multiple of 4 MB. The maximum
for best performance represents the threshold above which the host’s physical memory is insufficient to run
the virtual machine at full speed. This value fluctuates as conditions on the host change, for example, as
virtual machines are powered on or off.
The ESXi host version indicates when support began for the increased memory size. For example, the
memory size of a version 7 virtual machine that is running on ESXi 5.0 is restricted to 255 GB.
Procedure
1 On the Memory page of the New Virtual Machine wizard, select a size for the virtual memory.
You can use the slider or use the up and down arrows to select the number. To access the predefined
default or recommended setting, click the colored triangles on the right side of the memory bar.
2 Click Next.
What to do next
Select network adapters for the virtual machine.
CAUTION Because virtual machines share their physical network hardware with the host, the accidental or
malicious bridging of two networks by a virtual machine can occur. Spanning Tree protocol cannot protect
against these occurrences.
You can select only four NICs during virtual machine creation. You can add more virtual NICs by selecting
Edit the virtual machine settings before completion on the Ready to Complete page of the wizard, or by
editing the virtual machine after it is created.
For more information about networking, see the vSphere Networking documentation.
Procedure
1 On the Network page of the New Virtual Machine wizard, select the number of NICs to connect from
the drop-down menu.
VMware, Inc. 91
vSphere Administration with the vSphere Client
2 For each NIC, select a network and adapter type from the drop-down menus
Depending on the host version and the guest operating system, a choice of adapter types for each
virtual NIC might not be available. In many cases, only one type of adapter is supported. If more than
one type of adapter is supported, the recommended type for the guest operating system is selected by
default.
3 (Optional) Click Connect at Power On to connect the NIC when the virtual machine is powered on.
The wizard preselects the correct default controller based on the guest operation system you selected on the
Guest Operating System page.
LSI Logic SAS and VMware Paravirtual controllers are available only for virtual machines with hardware
version 7 or later. For details about VMware Paravirtual controllers, including conditions for use and
limitations, see “About VMware Paravirtual SCSI Controllers,” on page 166.
Disks with snapshots might not experience performance gains when used on LSI Logic SAS and LSI Logic
Parallel controllers.
Procedure
1 On the SCSI Controller page of the New Virtual Machine wizard, accept the default or select a SCSI
controller type.
n BusLogic Parallel
n VMware Paravirtual
2 Click Next.
What to do next
Select a disk on which to store the guest operating system files and data.
You use the Create Virtual Machine wizard to add virtual disks during virtual machine creation. To add
disks later, select the Do Not Create Disk option and use the Add Hardware wizard in the Virtual Machine
Properties dialog box.
92 VMware, Inc.
Chapter 10 Creating a Virtual Machine in the vSphere Client
For detailed information about disk types, see the vSphere Storage publication.
Procedure
1 On the Create a Disk page of the New Virtual Machine wizard, select the disk size.
You can increase the disk size later or add disks in the Virtual Machine Properties dialog box.
2 Select the format for the virtual machine's disks and click Next.
Option Action
Thick Provision Lazy Zeroed Create a virtual disk in a default thick format. Space required for the
virtual disk is allocated during creation. Any data remaining on the
physical device is not erased during creation, but is zeroed out on demand
at a later time on first write from the virtual machine.
Thick Provision Eager Zeroed Create a thick disk that supports clustering features such as Fault
Tolerance. Space required for the virtual disk is allocated at creation time.
In contrast to the flat format, the data remaining on the physical device is
zeroed out during creation. It might take much longer to create disks in
this format than to create other types of disks.
Thin Provision Use the thin provisioned format. At first, a thin provisioned disk uses only
as much datastore space as the disk initially needs. If the thin disk needs
more space later, it can grow to the maximum capacity allocated to it.
3 Select a location to store the virtual disk files and click Next.
Option Description
Store with the virtual machine Stores the files with the configuration and other virtual machine files. This
option makes file management easier.
Specify a datastore or datastore Stores the file separately from other virtual machine files.
cluster
In most cases, you can accept the default device node. For a hard disk, a nondefault device node is
useful to control the boot order or to have different SCSI controller types. For example, you might want
to boot from an LSI Logic controller and share a data disk with another virtual machine using a
BusLogic controller with bus sharing turned on.
VMware, Inc. 93
vSphere Administration with the vSphere Client
5 (Optional) To change the way disks are affected by snapshots, click Independent and select an option.
Option Description
Independent - Persistent Disks in persistent mode behave like conventional disks on your physical
computer. All data written to a disk in persistent mode are written
permanently to the disk.
Independent - Nonpersistent Changes to disks in nonpersistent mode are discarded when you power off
or reset the virtual machine. With nonpersistent mode, you can restart the
virtual machine with a virtual disk in the same state every time. Changes
to the disk are written to and read from a redo log file that is deleted when
you power off or reset.
6 Click Next.
Your changes are recorded and the Ready to Complete page opens.
What to do next
View the selections for your virtual machine on the Ready to Complete page.
Procedure
1 On the Select Existing Disk page of the New Virtual Machine wizard, browse for a virtual disk file, click
OK, and click Next.
In most cases, you can accept the default device node. For a hard disk, a nondefault device node is
useful to control the boot order or to have different SCSI controller types. For example, you might want
to boot from an LSI Logic controller and share a data disk with another virtual machine using a
BusLogic controller with bus sharing turned on.
3 (Optional) To change the way disks are affected by snapshots, click Independent and select an option.
Option Description
Independent - Persistent Disks in persistent mode behave like conventional disks on your physical
computer. All data written to a disk in persistent mode are written
permanently to the disk.
Independent - Nonpersistent Changes to disks in nonpersistent mode are discarded when you power off
or reset the virtual machine. With nonpersistent mode, you can restart the
virtual machine with a virtual disk in the same state every time. Changes
to the disk are written to and read from a redo log file that is deleted when
you power off or reset.
4 Click Next.
Your changes are recorded and the Ready to Complete page opens.
What to do next
Review the virtual machine configuration.
94 VMware, Inc.
Chapter 10 Creating a Virtual Machine in the vSphere Client
When you map a LUN to a VMFS volume, vCenter Server creates a Raw Device Mapping (RDM) file that
points to the raw LUN. Encapsulating disk information in a file allows vCenter Server to lock the LUN so
that only one virtual machine can write to it at a time. For details about RDM, see the vSphere Storage
documentation.
The RDM file has a .vmdk extension, but the file contains only disk information that describes the mapping
to the LUN on the ESXi host. The actual data is stored on the LUN.
You can create the RDM as an initial disk for a new virtual machine or add it to an existing virtual machine.
When you create the RDM, you specify the LUN to be mapped and the datastore on which to put the RDM.
NOTE You cannot deploy a virtual machine from a template and store its data on a LUN. You can only store
its data in a virtual disk file.
Procedure
1 On the Select a Disk page of the New Virtual Machine wizard, select Raw Device Mapping and click
Next.
2 From the list of SAN disks or LUNs, select a LUN for your virtual machine to access directly and click
Next.
3 Select a datastore for the LUN mapping file and click Next.
You can place the RDM file on the same datastore where your virtual machine configuration file
resides, or select a different datastore.
NOTE To use vMotion for virtual machines with enabled NPIV, make sure that the RDM files of the
virtual machines are located on the same datastore. You cannot perform Storage vMotion or vMotion
between datastores when NPIV is enabled.
Option Description
Physical Allows the guest operating system to access the hardware directly.
Physical compatibility is useful if you are using SAN-aware applications
on the virtual machine. However, a virtual machine with a physical
compatibility RDM cannot be cloned, made into a template, or migrated if
the migration involves copying the disk.
Virtual Allows the RDM to behave as if it were a virtual disk, so you can use such
features as taking a snapshot, cloning, and so on. When you clone the disk
or make a template from it, the contents of the LUN are copied into
a .vmdk virtual disk file. When you migrate a virtual compatibility mode
RDM, you can migrate the mapping file or copy the contents of the LUN
into a virtual disk.
In most cases, you can accept the default device node. For a hard disk, a nondefault device node is
useful to control the boot order or to have different SCSI controller types. For example, you might want
to boot from an LSI Logic controller and share a data disk with another virtual machine using a
BusLogic controller with bus sharing turned on.
VMware, Inc. 95
vSphere Administration with the vSphere Client
6 (Optional) To change the way disks are affected by snapshots, click Independent and select an option.
Option Description
Independent - Persistent Disks in persistent mode behave like conventional disks on your physical
computer. All data written to a disk in persistent mode are written
permanently to the disk.
Independent - Nonpersistent Changes to disks in nonpersistent mode are discarded when you power off
or reset the virtual machine. With nonpersistent mode, you can restart the
virtual machine with a virtual disk in the same state every time. Changes
to the disk are written to and read from a redo log file that is deleted when
you power off or reset.
7 Click Next.
Your changes are recorded and the Ready to Complete page opens.
What to do next
Review the virtual machine configuration.
You can configure additional virtual machine settings before or after completing the wizard.
Procedure
1 On the Ready to Complete page of the New Virtual Machine wizard, review the configuration settings
for the virtual machine.
2 (Optional) Select Edit the virtual machine settings before completion and click Continue.
The Virtual Machine Properties editor opens. After you complete your changes and click Finish, both
the Virtual Machine Properties editor and the New Virtual Machine wizard close. You cannot go back
to review the wizard settings unless you click Cancel.
4 Click Finish to complete the creation task and close the wizard.
What to do next
Before you can use the new virtual machine, you must partition and format the virtual drive, install a guest
operating system, and install VMware Tools. Typically, the operating system’s installation program handles
partitioning and formatting the virtual drive.
96 VMware, Inc.
Working with Templates and Clones
in the vSphere Client 11
A clone is a copy of a virtual machine. A template is a master copy of a virtual machine that can be used to
create many clones.
When you clone a virtual machine, you create a copy of the entire virtual machine, including its settings,
any configured virtual devices, installed software, and other contents of the virtual machine's disks. You
also have the option to use guest operating system customization to change some of the properties of the
clone, such as the computer name and networking settings.
Cloning a virtual machine can save time if you are deploying many similar virtual machines. You can create,
configure, and install software on a single virtual machine, and then clone it multiple times, rather than
creating and configuring each virtual machine individually.
If you create a virtual machine that you want to clone frequently, make that virtual machine a template. A
template is a master copy of a virtual machine that can be used to create and provision virtual machines.
Templates cannot be powered on or edited, and are more difficult to alter than ordinary virtual machine. A
template offers a more secure way of preserving a virtual machine configuration that you want to deploy
many times.
When you clone a virtual machine or deploy a virtual machine from a template, the resulting cloned virtual
machine is independent of the original virtual machine or template. Changes to the original virtual machine
or template are not reflected in the cloned virtual machine, and changes to the cloned virtual machine are
not reflected in the original virtual machine or template.
n “Create a Scheduled Task to Clone a Virtual Machine in the vSphere Client,” on page 100
n “Deploy a Virtual Machine from a Template in the vSphere Client,” on page 103
Optionally, you can customize the guest operating system of the clone to change the virtual machine name,
network settings, and other properties. This prevents conflicts that can occur if a virtual machine and a clone
with identical guest operating system settings are deployed simultaneously.
VMware, Inc. 97
vSphere Administration with the vSphere Client
Prerequisites
n You must be connected to vCenter Server in order to clone a virtual machine. You cannot clone virtual
machines if you connect directly to an ESXi host.
n To customize the guest operating system of the virtual machine, check that your guest operating system
meets the requirements for customization. See “Guest Operating System Customization Requirements,”
on page 109.
n To use a customization specification, you must first create or import the customization specification.
n To use a custom script to generate the host name or IP address for the new virtual machine, configure
the script. See “Configure a Script to Generate Computer Names and IP Addresses During Guest
Operating System Customization in the vSphere Client,” on page 110.
Procedure
1 Right-click the virtual machine and select Clone.
Option Action
Run the virtual machine on a Select the host and click Next.
standalone host.
Run the virtual machine in a cluster Select the cluster and click Next.
with DRS automatic placement.
Run the virtual machine in a cluster a Select the cluster and click Next.
without DRS automatic placement. b Select a host within the cluster and click Next.
4 Select a resource pool in which to run the virtual machine and click Next.
5 Select the datastore location where you want to store the virtual machine files.
Option Action
Store all virtual machine files in the a Apply a virtual machine storage policy for the virtual machine home
same location on a datastore. files and the virtual disks from the VM storage policy drop-down
menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
b Select a datastore and click Next.
Store all virtual machine files in the a Apply a virtual machine storage policy for the virtual machine home
same datastore cluster. files and the virtual disks from the VM storage policy drop-down
menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
b Select a datastore and click Next.
Store virtual machine configuration a Click Advanced.
files and disk in separate locations. b For the virtual machine configuration file and for each virtual disk,
click Browse and select a datastore or datastore cluster.
c Click Next.
98 VMware, Inc.
Chapter 11 Working with Templates and Clones in the vSphere Client
Option Action
Same format as source Use the same format as the source virtual machine.
Thick Provision Lazy Zeroed Create a virtual disk in a default thick format. Space required for the
virtual disk is allocated during creation. Any data remaining on the
physical device is not erased during creation, but is zeroed out on demand
at a later time on first write from the virtual machine.
Thick Provision Eager Zeroed Create a thick disk that supports clustering features such as Fault
Tolerance. Space required for the virtual disk is allocated at creation time.
In contrast to the thick provision lazy zeroed format, the data remaining
on the physical device is zeroed out during creation. It might take longer
to create disks in this format than to create other types of disks.
Thin Provision Use the thin provisioned format. At first, a thin provisioned disk uses only
as much datastore space as the disk initially needs. If the thin disk needs
more space later, it can grow to the maximum capacity allocated to it.
Option Description
Do not customize Select Do not customize and click Next.
Does not customize any of the guest operating system settings. All settings
remain identical to those of the source virtual machine.
Customize using the Customization Opens the Customization Wizard so that you can select customization
Wizard options for the guest operating system.
Select this option and click Next to launch the Customization Wizard.
n To customize a Linux guest operating system, see “Customize Linux
During Cloning or Deployment in the vSphere Client,” on page 113.
n To customize a Windows guest operating system, see “Customize
Windows During Cloning or Deployment in the vSphere Client,” on
page 111.
Customize using an existing Uses the settings in a saved customization specification to customize the
customization specification guest operating system.
a Select Customize using an existing customization specification.
b Select the customization specification that you want to use.
c (Optional) Select Use the Customization Wizard to temporarily
adjust the specification before deployment if you want to make
changes to the specification for this deployment only.
d Click Next.
8 Review your selections and select whether to power on the virtual machine or edit virtual machine
settings.
Option Action
Power on this virtual machine after Select this option and click Finish.
creation. The virtual machine powers on after the deployment task completes.
Edit virtual hardware. a Select this option and click Continue.
b Make any changes and click OK.
The cloned virtual machine is deployed. You cannot use or edit the virtual machine until the cloning is
complete. This might take several minutes if the cloning involves creating a virtual disk. You can cancel the
cloning at any point before the customization stage.
VMware, Inc. 99
vSphere Administration with the vSphere Client
Prerequisites
n You must be connected to a vCenter Server system with the vSphere Client.
Procedure
1 From the Home page, click Scheduled Tasks.
3 Select Clone a virtual machine from the drop-down menu, and click OK.
5 Follow the wizard through the same steps as those in the previous task in which you cloned a virtual
machine.
8 Select Now or Later. If later, enter the time and date when you want the virtual machine to be
deployed, and click Next.
To see the calendar, click Later, and click the drop-down arrow to select a date from the calendar. A red
circle indicates today’s date, and a dark circle indicates the scheduled date.
9 Review the information on the Ready to Complete New Virtual Machine page, and click Finish.
Optionally, you can select the check box to power on the new virtual machine after it is created.
vCenter Server adds the new task to the scheduled task list and completes it at the designated time.
When it is time to perform the task, vCenter Server first verifies that the user who created the task still
has permission to complete the task. If the permission levels are not acceptable, vCenter Server sends a
message to the log and the task is not performed.
You can create a template by converting a virtual machine to a template, cloning a virtual machine to a
template, or cloning another template.
When you convert a virtual machine to a template, you cannot edit or power on the template unless you
convert it back to a virtual machine.
Prerequisites
n You must be connected to vCenter Server to convert a virtual machine to a template. You cannot create
templates if you connect the vSphere Client directly to an ESXi host.
n Before you convert a virtual machine to a template, select it in the inventory and power it off.
Procedure
u Right-click the virtual machine and select Template > Convert to Template.
vCenter Server marks that virtual machine as a template and displays the task in the Recent Tasks pane.
Prerequisites
You must be connected to vCenter Server to clone a virtual machine to a template. You cannot create
templates if you connect directly to an ESXi host.
Procedure
1 Right-click the virtual machine and select Template > Clone to Template.
2 Give the new template a name, select its inventory location, and click Next.
4 Specify in which format to store the template’s virtual disks and click Next.
Option Action
Same format as source Use the same format as the source virtual machine.
Thick Provision Lazy Zeroed Create a virtual disk in a default thick format. Space required for the
virtual disk is allocated during creation. Any data remaining on the
physical device is not erased during creation, but is zeroed out on demand
at a later time on first write from the virtual machine.
Thick Provision Eager Zeroed Create a thick disk that supports clustering features such as Fault
Tolerance. Space required for the virtual disk is allocated at creation time.
In contrast to the thick provision lazy zeroed format, the data remaining
on the physical device is zeroed out during creation. It might take longer
to create disks in this format than to create other types of disks.
Thin Provision Use the thin provisioned format. At first, a thin provisioned disk uses only
as much datastore space as the disk initially needs. If the thin disk needs
more space later, it can grow to the maximum capacity allocated to it.
5 Select the datastore location where you want to store the virtual machine files.
Option Action
Store all virtual machine files in the a Apply a virtual machine storage policy for the virtual machine home
same location on a datastore. files and the virtual disks from the VM storage policy drop-down
menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
b Select a datastore and click Next.
Store all virtual machine files in the a Apply a virtual machine storage policy for the virtual machine home
same datastore cluster. files and the virtual disks from the VM storage policy drop-down
menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
b Select a datastore and click Next.
Store virtual machine configuration a Click Advanced.
files and disk in separate locations. b For the virtual machine configuration file and for each virtual disk,
click Browse and select a datastore or datastore cluster.
c Click Next.
6 Click Finish.
vCenter Server displays the Tasks inventory panel for reference and adds the cloned template to the list
in the information panel.
Prerequisites
You must be connected to vCenter Server to clone a template. You cannot create templates if you connect
directly to an ESXi host.
Procedure
1 Right-click the template and select Clone.
2 Give the new template a unique name and description and click Next.
3 Select the host or cluster and click Next.
Option Action
Same format as source Use the same format as the source virtual machine.
Thick Provision Lazy Zeroed Create a virtual disk in a default thick format. Space required for the
virtual disk is allocated during creation. Any data remaining on the
physical device is not erased during creation, but is zeroed out on demand
at a later time on first write from the virtual machine.
Option Action
Thick Provision Eager Zeroed Create a thick disk that supports clustering features such as Fault
Tolerance. Space required for the virtual disk is allocated at creation time.
In contrast to the thick provision lazy zeroed format, the data remaining
on the physical device is zeroed out during creation. It might take longer
to create disks in this format than to create other types of disks.
Thin Provision Use the thin provisioned format. At first, a thin provisioned disk uses only
as much datastore space as the disk initially needs. If the thin disk needs
more space later, it can grow to the maximum capacity allocated to it.
6 Click Next.
You cannot use the new template until the cloning task completes.
vCenter Server adds the cloned template to the list in the Virtual Machines tab.
Prerequisites
n Verify that you are connected to vCenter Server. You cannot work with templates if you connect the
vSphere Client directly to an ESXi host.
n You must be connected to vCenter Server to deploy a virtual machine from a template. You cannot
deploy from a template if you connect the vSphere Client directly to an ESXi host.
n To customize the guest operating system of the virtual machine, check that your guest operating system
meets the requirements for customization. See “Guest Operating System Customization Requirements,”
on page 109.
n To use a custom script to generate the host name or IP address for the new virtual machine, configure
the script. See “Configure a Script to Generate Computer Names and IP Addresses During Guest
Operating System Customization in the vSphere Client,” on page 110.
Procedure
1 Right-click the template, and select Deploy Virtual Machine from this Template.
Option Action
Run the virtual machine on a Select the host and click Next.
standalone host.
Run the virtual machine in a cluster Select the cluster and click Next.
with DRS automatic placement.
Run the virtual machine in a cluster a Select the cluster and click Next.
without DRS automatic placement. b Select a host within the cluster and click Next.
4 Select a resource pool in which to run the virtual machine and click Next.
5 Select the datastore location where you want to store the virtual machine files.
Option Action
Store all virtual machine files in the a (Optional) Apply a virtual machine storage policy for the virtual
same location on a datastore. machine home files and the virtual disks from the VM storage policy
drop-down menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
b Select a datastore and click Next.
Store all virtual machine files in the a (Optional) Apply a virtual machine storage policy for the virtual
same datastore cluster. machine home files and the virtual disks from the VM storage policy
drop-down menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage profile.
b Select a datastore cluster.
c (Optional) If you do not want to use Storage DRS with this virtual
machine, select Disable Storage DRS for this virtual machine and
select a datastore within the datastore cluster.
d Click Next.
Store virtual machine configuration a Click Advanced.
files and disks in separate b For the virtual machine configuration file and for each virtual disk,
locations. click Browse and select a datastore or datastore cluster.
c (Optional) Apply a virtual machine storage policy from the VM
storage profile drop-down menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
d (Optional) If you selected a datastore cluster and do not want to use
Storage DRS with this virtual machine, select Disable Storage DRS for
this virtual machine and select a datastore within the datastore
cluster.
e Click Next.
Option Action
Same format as source Use the same format as the source virtual machine.
Thick Provision Lazy Zeroed Create a virtual disk in a default thick format. Space required for the
virtual disk is allocated during creation. Any data remaining on the
physical device is not erased during creation, but is zeroed out on demand
at a later time on first write from the virtual machine.
Thick Provision Eager Zeroed Create a thick disk that supports clustering features such as Fault
Tolerance. Space required for the virtual disk is allocated at creation time.
In contrast to the thick provision lazy zeroed format, the data remaining
on the physical device is zeroed out during creation. It might take longer
to create disks in this format than to create other types of disks.
Thin Provision Use the thin provisioned format. At first, a thin provisioned disk uses only
as much datastore space as the disk initially needs. If the thin disk needs
more space later, it can grow to the maximum capacity allocated to it.
Option Description
Do not customize Select Do not customize and click Next.
Does not customize any of the guest operating system settings. All settings
remain identical to those of the source virtual machine.
Customize using the Customization Opens the Customization Wizard so that you can select customization
Wizard options for the guest operating system.
Select this option and click Next to launch the Customization Wizard.
n To customize a Linux guest operating system, see “Customize Linux
During Cloning or Deployment in the vSphere Client,” on page 113.
n To customize a Windows guest operating system, see “Customize
Windows During Cloning or Deployment in the vSphere Client,” on
page 111.
Customize using an existing Uses the settings in a saved customization specification to customize the
customization specification guest operating system.
a Select Customize using an existing customization specification.
b Select the customization specification that you want to use.
c (Optional) Select Use the Customization Wizard to temporarily
adjust the specification before deployment if you want to make
changes to the specification for this deployment only.
d Click Next.
8 Review your selections and select whether to power on the virtual machine or edit virtual machine
settings.
Option Action
Power on this virtual machine after Select this option and click Finish.
creation The virtual machine powers on after the deployment task completes.
Edit virtual hardware a Select this option and click Continue.
b Make any changes and click OK.
Show all storage recommendations This option appears only when the virtual machine disks are stored on a
datastore cluster and Storage DRS is enabled.
Select this option, and click Continue. The dialog box lists the datastores in
the datastore cluster that are recommended for virtual machine placement.
Edit Storage DRS rules This option appears only when the virtual machine disks are stored on a
datastore cluster.
This option is selected when you select Edit virtual hardware. You can edit
Storage DRS rules on the Options tab of the Virtual Machine Properties
dialog box.
Select the Edit Storage DRS rules check box, and click Continue.
The virtual machine is deployed. You cannot use or edit the virtual machine until the deployment is
complete. This might take several minutes if the deployment involves creating a virtual disk.
Prerequisites
Verify that you are connected to vCenter Server. You cannot work with templates if you connect the
vSphere Client directly to an ESXi host.
Procedure
1 Right-click the template and select Rename.
2 Enter a new name and click outside the field to save your changes.
Deleting Templates
You can delete a template by removing it from the inventory or deleting the template from the disk. If you
remove the template from the inventory, it remains on the disk and can be reregistered with vCenter Server
to restore it to the inventory.
n Remove Templates from the Inventory in the vSphere Client on page 106
If you remove a template from the inventory, it is unregistered from the vCenter Server inventory, but
it is not removed from the datastore.
n Delete a Template from the Disk in the vSphere Client on page 106
Deleted templates are permanently removed from the system.
Prerequisites
You must be connected to vCenter Server to remove a template from the inventory. You cannot work with
templates if you connect directly to an ESXi host.
Procedure
1 Right-click the template, and select Remove from Inventory.
2 Click OK to confirm removing the template from the vCenter Server database.
Prerequisites
You must be connected to vCenter Server to delete a template. You cannot work with templates if you
connect the vSphere Client directly to an ESXi host.
Procedure
1 Right-click the template, and select Delete from Disk.
Prerequisites
n You must be connected to a vCenter Server system with the vSphere Client.
Procedure
1 From the Home page, click Datastores and Datastore Clusters.
2 Right-click the datastore that contains the template and select Browse Datastore.
If you want the template to retain its original name, do not enter a name in the Add to Inventory
wizard. vCenter Server will use the original name if the field in the wizard is left blank.
6 Select a host or cluster on which to store the template, and click Next.
The template is registered to the host. You can view the template from the host’s Virtual Machine tab.
Prerequisites
You must be connected to vCenter Server to convert a template to a virtual machine. You cannot work with
templates if you connect directly to an ESXi host.
Procedure
1 Right-click the template and select Convert to Virtual Machine.
Option Action
Run the virtual machine on a Select the host and click Next.
standalone host.
Run the virtual machine in a cluster Select the cluster and click Next.
with DRS automatic placement.
Run the virtual machine in a cluster a Select the cluster and click Next.
without DRS automatic placement. b Select a host within the cluster and click Next.
If the template resides on a legacy VMFS2 datastore, you must select the host on which the template
was created as the destination for the virtual machine.
3 Select a resource pool in which to run the virtual machine and click Next.
Customizing guest operating systems can help prevent conflicts that can result if virtual machines with
identical settings are deployed, such as conflicts due to duplicate computer names.
You can specify the customization settings by choosing to launch the Guest Customization wizard during
the cloning or deployment process. Alternatively, you can create customization specifications, which are
customization settings stored in the vCenter Server database. During the cloning or deployment process,
you can select a customization specification to apply to the new virtual machine.
Use the Customization Specification Manager to manage customization specifications you create with the
Guest Customization wizard.
n “Configure a Script to Generate Computer Names and IP Addresses During Guest Operating System
Customization in the vSphere Client,” on page 110
n “Customize Windows During Cloning or Deployment in the vSphere Client,” on page 111
n “Customize Linux During Cloning or Deployment in the vSphere Client,” on page 113
Windows Requirements
Customization of Windows guest operating systems requires the following conditions:
n The ESXi host that the virtual machine is running on must be 3.5 or later.
Linux Requirements
Customization of Linux guest operating systems requires that Perl is installed in the Linux guest operating
system.
The application can be an arbitrary executable binary or script file appropriate for the corresponding
operating system in which vCenter Server is running. After you configure a name-ip-generation application
in vCenter Server, each time you initiate a guest os customization for a virtual machine, the name-ip-app is
executed and an XML string is generated in place and passed to its standard input. The name-ip-generation
application on its behalf should generate and return the resulting XML string through its standard output.
The application must comply with the reference XML file in the VMware knowledge base article at
http://kb.vmware.com/kb/2007557.
Prerequisites
Verify that Perl is installed on vCenter Server.
Procedure
1 Create the script and save it on the vCenter Server system's local disk.
2 In the vSphere Client connected to vCenter Server, select Administration > vCenter Server Settings.
d In the Value text box, type the path to the script file on the vCenter Server system and click Add.
For example, type c:\sample-generate-name-ip.pl.
5 Click OK.
You can select the option to use an application to generate computer names or IP addresses during
customization.
NOTE The default administrator password is not preserved for Windows Server 2008 after customization.
During customization, the Windows Sysprep utility deletes and recreates the administrator account on
Windows Server 2008. You must reset the administrator password when the virtual machine boots the first
time after customization.
Prerequisites
Verify that all requirements for customization are met. See “Guest Operating System Customization
Requirements,” on page 109.
Procedure
1 Select View > Management > Customization Management Manager and click New to start the
Windows Guest Customization.
2 Select the Target Virtual Machine OS and enter the name and description for the Customization
Specification Information, then click Next.
NOTE If you want to use a custom sysprep file, select Use Custom Sysprep Answer File.
3 Type the virtual machine owner’s name and organization and click Next.
4 Enter the guest operating system's computer name and click Next.
The operating system uses this name to identify itself on the network. On Linux systems, it is called the
host name.
Option Action
Enter a name a Type a name.
The name can contain alphanumeric characters and the hyphen (-)
character. It cannot contain periods (.) or blank spaces and cannot be
made up of digits only. Names are not case-sensitive.
b (Optional) To ensure that the name is unique, select Append a
numeric value to ensure uniqueness. This appends a hyphen
followed by a numeric value to the virtual machine name. The name is
truncated if it exceeds 15 characters when combined with the numeric
value.
Use the virtual machine name The computer name that vCenter Server creates is identical to the name of
the virtual machine on which the guest operating system is running. If the
name exceeds 15 characters, it is truncated.
Option Action
Enter a name in the Deploy wizard The vSphere Web Client prompts you to enter a name after the cloning or
deployment is complete.
Generate a name using the custom Enter a parameter that can be passed to the custom application.
application configured with vCenter
Server
5 Provide licensing information for the Windows operating system and click Next.
Option Action
For non-server operating systems Type the Windows product key for the new guest operating system.
For server operating systems a Type the Windows product key for the new guest operating system.
b Select Include Server License Information.
c Select either Per seat or Per server.
d (Optional) If you select Per server, enter the maximum number of
simultaneous connections for the server to accept.
6 Configure the administrator password for the virtual machine and click Next.
a Type a password for the administrator account and confirm the password by typing it again.
NOTE You can change the administrator password only if the administrator password on the
source Windows virtual machine is blank. If the source Windows virtual machine or template
already has a password, the administrator password does not change.
b (Optional) To log users into the guest operating system as Administrator, select the check box, and
select the number of times to log in automatically.
7 Select the time zone for the virtual machine and click Next.
8 (Optional) On the Run Once page, specify commands to run the first time a user logs into the guest
operating system and click Next.
See the Microsoft Sysprep documentation for information about RunOnce commands.
9 Select the type of network settings to apply to the guest operating system.
Option Action
Typical settings Select Typical settings and click Next.
vCenter Server configures all network interfaces from a DHCP server
using default settings.
Custom settings a Select Custom settings and click Next.
b For each network interface in the virtual machine, click the ellipsis
button (...) .
c Enter IP address and other network settings and click OK.
d When all network interfaces are configured, click Next.
10 Select how the virtual machine will participate in the network and click Next.
Option Action
Workgroup Type a workgroup name. For example, MSHOME.
Windows Server Domain a Type the domain name.
b Type the user name and password for a user account that has
permission to add a computer to the specified domain.
A Windows Security ID (SID) is used in some Windows operating systems to uniquely identify systems
and users. If you do not select this option, the new virtual machine has the same SID as the virtual
machine or template from which it was cloned or deployed.
Duplicate SIDs do not cause problems when the computers are part of a domain and only domain user
accounts are used. However, if the computers are part of a Workgroup or local user accounts are used,
duplicate SIDs can compromise file access controls. For more information, see the documentation for
your Microsoft Windows operating system.
You return to the Deploy Template or to the Clone Virtual Machine wizard. The customization is finished
after you complete the Deploy Template or the Clone Virtual Machine wizard.
When the new virtual machine starts for the first time, the guest operating system runs finalization scripts to
complete the customization process. The virtual machine might restart several times during this process.
If the guest operating system pauses when the new virtual machine starts, it might be waiting for you to
correct errors, such as an incorrect product key or an invalid user name. Open the virtual machine’s console
to determine whether the system is waiting for information.
What to do next
After you deploy and customize versions of Windows XP or Windows 2003 that are not volume licensed,
you might need to reactivate your operating system on the new virtual machine.
If the new virtual machine encounters customization errors while it is booting, the errors are logged to
%WINDIR%\temp\vmware-imc. To view the error log file, click the Windows Start button and select Programs >
Administrative Tools > Event Viewer.
Prerequisites
Ensure that all requirements for customization are met. See “Guest Operating System Customization
Requirements,” on page 109.
Procedure
1 Select View > Management > Customization Management Manager and click New to start the
Windows Guest Customization.
2 Select the Target Virtual Machine OS and enter the name and description for the Customization
Specification Information, then click Next.
NOTE If you want to use a custom sysprep file, select Use Custom Sysprep Answer File.
4 Specify how to determine the host name to identify the guest operating system on the network.
Option Action
Enter a name a Type a name.
The name can contain alphanumeric characters and the hyphen (-)
character. It cannot contain periods (.) or blank spaces and cannot be
made up of digits only. Names are not case-sensitive.
b (Optional) To ensure that the name is unique, select Append a
numeric value to ensure uniqueness. This appends a hyphen
followed by a numeric value to the virtual machine name. The name is
truncated if it exceeds 15 characters when combined with the numeric
value.
Use the virtual machine name The computer name that vCenter Server creates is identical to the name of
the virtual machine on which the guest operating system is running. If the
name exceeds 15 characters, it is truncated.
Enter a name in the Deploy wizard The vSphere Web Client prompts you to enter a name after the cloning or
deployment is complete.
Generate a name using the custom Enter a parameter that can be passed to the custom application.
application configured with vCenter
Server
5 Enter the Domain Name for the computer and click Next.
6 Select the time zone for the virtual machine and click Next.
7 Select the type of network settings to apply to the guest operating system.
Option Action
Typical settings Select Typical settings and click Next.
vCenter Server configures all network interfaces from a DHCP server
using default settings.
Custom settings a Select Custom settings and click Next.
b For each network interface in the virtual machine, click the ellipsis
button (...) .
c Enter IP address and other network settings and click OK.
d When all network interfaces are configured, click Next.
You return to the Deploy Template or to the Clone Virtual Machine wizard. The customization is finished
after you complete the Deploy Template or the Clone Virtual Machine wizard.
When the new virtual machine starts for the first time, the guest operating system runs finalization scripts to
complete the customization process. The virtual machine might restart several times during this process.
If the guest operating system pauses when the new virtual machine starts, it might be waiting for you to
correct errors, such as an incorrect product key or an invalid user name. Open the virtual machine’s console
to determine whether the system is waiting for information.
What to do next
If the new virtual machine encounters customization errors while it is booting, the errors are reported using
the guest’s system logging mechanism. View the errors by opening /var/log/vmware-
imc/toolsDeployPkg.log.
vCenter Server saves the customized configuration parameters in the vCenter Server database. If the
customization settings are saved, the administrator, and domain administrator, passwords are stored in
encrypted format in the database. Because the certificate used to encrypt the passwords is unique to each
vCenter Server system, reinstalling vCenter Server, or attaching a new instance of the server the database,
invalidates the encrypted passwords. The passwords must be re-entered before they can be used.
Prerequisites
Ensure that all requirements for customization are met. See “Guest Operating System Customization
Requirements,” on page 109.
Procedure
1 From the vSphere Client Home page, select Customization Specifications Manager.
4 Under Customization Specification Information, enter a name for the specification and an optional
description and click Next.
5 Specify how to determine the host name to identify the guest operating system on the network.
Option Action
Enter a name a Type a name.
The name can contain alphanumeric characters and the hyphen (-)
character. It cannot contain periods (.) or blank spaces and cannot be
made up of digits only. Names are not case-sensitive.
b (Optional) To ensure that the name is unique, select Append a
numeric value to ensure uniqueness. This appends a hyphen
followed by a numeric value to the virtual machine name. The name is
truncated if it exceeds 15 characters when combined with the numeric
value.
Use the virtual machine name The computer name that vCenter Server creates is identical to the name of
the virtual machine on which the guest operating system is running. If the
name exceeds 15 characters, it is truncated.
Enter a name in the Deploy wizard The vSphere Web Client prompts you to enter a name after the cloning or
deployment is complete.
Generate a name using the custom Enter a parameter that can be passed to the custom application.
application configured with vCenter
Server
6 Enter the Domain Name for the computer and click Next.
7 Select the time zone for the virtual machine and click Next.
8 Select the type of network settings to apply to the guest operating system.
Option Action
Typical settings Select Typical settings and click Next.
vCenter Server configures all network interfaces from a DHCP server
using default settings.
Custom settings a Select Custom settings and click Next.
b For each network interface in the virtual machine, click the ellipsis
button (...) .
c Enter IP address and other network settings and click OK.
d When all network interfaces are configured, click Next.
The customization specification that you created is listed in the Customization Specification Manager. You
can use the specification to customize virtual machine guest operating systems.
NOTE The default administrator password is not preserved for Windows Server 2008 after customization.
During customization, the Windows Sysprep utility deletes and recreates the administrator account on
Windows Server 2008. You must reset the administrator password when the virtual machine boots the first
time after customization.
Prerequisites
Ensure that all requirements for customization are met. See “Guest Operating System Customization
Requirements,” on page 109.
Procedure
1 From the vSphere Client Home page, select Customization Specifications Manager.
3 In the Guest Customization wizard, select Windows from the Target Virtual Machine OS menu.
4 Under Customization Specification Information, enter a name for the specification and an optional
description and click Next.
5 Type the virtual machine owner’s name and organization and click Next.
6 Enter the guest operating system's computer name and click Next.
The operating system uses this name to identify itself on the network. On Linux systems, it is called the
host name.
Option Action
Enter a name a Type a name.
The name can contain alphanumeric characters and the hyphen (-)
character. It cannot contain periods (.) or blank spaces and cannot be
made up of digits only. Names are not case-sensitive.
b (Optional) To ensure that the name is unique, select Append a
numeric value to ensure uniqueness. This appends a hyphen
followed by a numeric value to the virtual machine name. The name is
truncated if it exceeds 15 characters when combined with the numeric
value.
Use the virtual machine name The computer name that vCenter Server creates is identical to the name of
the virtual machine on which the guest operating system is running. If the
name exceeds 15 characters, it is truncated.
Enter a name in the Deploy wizard The vSphere Web Client prompts you to enter a name after the cloning or
deployment is complete.
Generate a name using the custom Enter a parameter that can be passed to the custom application.
application configured with vCenter
Server
7 Provide licensing information for the Windows operating system and click Next.
Option Action
For non-server operating systems Type the Windows product key for the new guest operating system.
For server operating systems a Type the Windows product key for the new guest operating system.
b Select Include Server License Information.
c Select either Per seat or Per server.
d (Optional) If you select Per server, enter the maximum number of
simultaneous connections for the server to accept.
8 Configure the administrator password for the virtual machine and click Next.
a Type a password for the administrator account and confirm the password by typing it again.
NOTE You can change the administrator password only if the administrator password on the
source Windows virtual machine is blank. If the source Windows virtual machine or template
already has a password, the administrator password does not change.
b (Optional) To log users into the guest operating system as Administrator, select the check box, and
select the number of times to log in automatically.
9 Select the time zone for the virtual machine and click Next.
10 (Optional) On the Run Once page, specify commands to run the first time a user logs into the guest
operating system and click Next.
See the Microsoft Sysprep documentation for information about RunOnce commands.
11 Select the type of network settings to apply to the guest operating system.
Option Action
Typical settings Select Typical settings and click Next.
vCenter Server configures all network interfaces from a DHCP server
using default settings.
Custom settings a Select Custom settings and click Next.
b For each network interface in the virtual machine, click the ellipsis
button (...) .
c Enter IP address and other network settings and click OK.
d When all network interfaces are configured, click Next.
12 Select how the virtual machine will participate in the network and click Next.
Option Action
Workgroup Type a workgroup name. For example, MSHOME.
Windows Server Domain a Type the domain name.
b Type the user name and password for a user account that has
permission to add a computer to the specified domain.
Duplicate SIDs do not cause problems when the computers are part of a domain and only domain user
accounts are used. However, if the computers are part of a Workgroup or local user accounts are used,
duplicate SIDs can compromise file access controls. For more information, see the documentation for
your Microsoft Windows operating system.
The customization specification that you created is listed in the Customization Specification Manager. You
can use the specification to customize virtual machine guest operating systems.
Windows 2000, Windows Server 2003, and Windows XP use a text file called sysprep.inf. Windows Server
2008, Windows Vista, and Windows 7 use an XML file called sysprep.xml. You can create these files using a
text editor, or use the Microsoft Setup Manager utility to generate them. For more information about how to
create a custom sysprep answer file, see the documentation for the relevant operating system.
Prerequisites
Ensure that all requirements for customization are met. See “Guest Operating System Customization
Requirements,” on page 109.
Procedure
1 From the vSphere Client Home page, select Customization Specifications Manager.
3 In the Guest Customization wizard, select Windows from the Target Virtual Machine OS menu.
5 Under Customization Specification Information, enter a name for the specification and an optional
description and click Next.
6 Select the option to import or create a sysprep answer file and click Next.
Option Description
Import a Sysprep answer file Click Browse and browse to the file.
Create a Sysprep answer file Type the contents of the file in the text box.
7 Select the type of network settings to apply to the guest operating system.
Option Action
Typical settings Select Typical settings and click Next.
vCenter Server configures all network interfaces from a DHCP server
using default settings.
Custom settings a Select Custom settings and click Next.
b For each network interface in the virtual machine, click the ellipsis
button (...) .
c Enter IP address and other network settings and click OK.
d When all network interfaces are configured, click Next.
A Windows Security ID (SID) is used in some Windows operating systems to uniquely identify systems
and users. If you do not select this option, the new virtual machine has the same SID as the virtual
machine or template from which it was cloned or deployed.
Duplicate SIDs do not cause problems when the computers are part of a domain and only domain user
accounts are used. However, if the computers are part of a Workgroup or local user accounts are used,
duplicate SIDs can compromise file access controls. For more information, see the documentation for
your Microsoft Windows operating system.
The customization specification that you created is listed in the Customization Specification Manager. You
can use the specification to customize virtual machine guest operating systems.
Prerequisites
You must have at least one customization specification.
Procedure
1 From the vSphere Client Home page, select Customization Specifications Manager.
Prerequisites
You must have at least one customization specification.
Procedure
1 From the vSphere Client Home page, select Customization Specifications Manager.
Prerequisites
You must have at least one customization specification.
Procedure
1 From the vSphere Client Home page, select Customization Specifications Manager.
Prerequisites
You must have at least one customization specification.
Procedure
1 From the vSphere Client Home page, select Customization Specifications Manager.
4 Click Save.
Prerequisites
Before you begin, you must have at least one customization specification saved as an xml file located on a
file system accessible from the vSphere Client.
Procedure
1 From the vSphere Client Home page, select Customization Specifications Manager.
2 Click Import.
3 From the Open dialog, browse to the .xml to import and click Open.
You can use cold or hot migration to move virtual machines to different hosts or datastores.
Cold Migration You can move a powered off or suspended virtual machine to a new host.
Optionally, you can relocate configuration and disk files for powered off or
suspended virtual machines to new storage locations. You can also use cold
migration to move virtual machines from one datacenter to another. To
perform a cold migration, you can move virtual machines manually or set up
a scheduled task.
Hot Migration Depending on the type of migration you are using, vMotion or Storage
vMotion, you can move a turned on virtual machine to a different host, or
move its disks or folder to a different datastore without any interruption in
the availability of the virtual machine. vMotion is also referred to as live
migration or hot migration.
You cannot move a powered on virtual machine from one datacenter to
another.
NOTE Copying a virtual machine creates a new virtual machine. It is not a form of migration. Cloning a
virtual machine or copying its disks and configuration file creates a new virtual machine. Cloning is not a
form of migration.
Change Host Moving a virtual machine, but not its storage to another host. You can move
the virtual machine using cold migration or hot migration. You use vMotion
to move a powered on virtual machine to another host.
Change Datastore Moving a virtual machine and its storage, including virtual disks and
configuration files or a combination of these, to a new datastore on the same
host. You can change the datastore using cold or hot migration. You use
Storage Migration to move a powered on virtual machine and its storage to a
new datastore.
Change Host and Moving a virtual machine to another host and moving its disk or virtual
Datastore machine folder to another datastore. You can change the host and datastore
using cold or hot migration. Hot migration is a combination of Storage
vMotion and vMotion.
To migrate virtual machines with disks larger than 2TB, the source and destination hosts must run ESXi 5.5
or later.
n “Migrate a Powered-On Virtual Machine with vMotion in the vSphere Client,” on page 124
n “Migrate a Virtual Machine with Storage vMotion in the vSphere Client,” on page 125
n “Migrate a Powered-Off or Suspended Virtual Machine in the vSphere Client,” on page 126
Prerequisites
Before migrating a virtual machine with vMotion, ensure that your hosts and virtual machines meet the
requirements for migration with vMotion. See the vCenter Server and Host Management publication for more
information on host configuration and VM conditions and limitations for vMotion.
Procedure
1 Select the virtual machine that you want to migrate in the inventory.
2 Right-click on the virtual machine and select Migrate from the pop-up menu.
Any compatibility problem appears in the Compatibility panel. Fix the problem, or select another host
or cluster.
Possible targets include hosts and fully automated DRS clusters. You can select a non-automated cluster
as a target. You are prompted to select a host within the non-automated cluster.
Option Description
High Priority On hosts running ESX/ESXi version 4.1 or later, vCenter Server attempts to
reserve resources on both the source and destination hosts to be shared
among all concurrent migrations with vMotion. vCenter Server grants a
larger share of host CPU resources to high priority migrations than to
standard priority migrations. Migrations always proceed regardless of the
resources that have been reserved.
On hosts running ESX/ESXi version 4.0 or earlier, vCenter Server attempts
to reserve a fixed amount of resources on both the source and destination
hosts for each migration. High priority migrations do not proceed if
resources are unavailable.
Standard Priority On hosts running ESX/ESXi version 4.1 or later, vCenter Server reserves
resources on both the source and destination hosts to be shared among all
concurrent migration with vMotion. vCenter Server grants a smaller share
of host CPU resources to standard priority migrations than to high priority
migrations. Migrations always proceed regardless of the resources that
have been reserved.
On hosts running ESX/ESXi version 4.0 or earlier, vCenter Server attempts
to reserve a fixed amount resources on the source and destination hosts for
each migration. Standard priority migrations always proceed. However,
the migration might proceed more slowly or fail to complete if sufficient
resources are not available.
You cannot change the virtual machine’s execution host during a migration with Storage vMotion.
Procedure
1 Select the virtual machine that you want to migrate in the inventory.
2 Right-click on the virtual machine and select Migrate from the pop-up menu.
3 Select Change datastore and click Next.
Option Description
Same as Source Use the format of the original virtual disk.
Thin provisioned Use the thin format to save storage space. The thin virtual disk uses just as
much storage space as it needs for its initial operations. When the virtual
disk requires more space, it can expand up to its maximum allocated
capacity.
Thick Allocate a fixed amount of hard disk space to the virtual disk. The virtual
disk in the thick format does not change its size and from the beginning
occupies the entire datastore space provisioned to it.
5 Select the datastore location where you want to store the virtual machine files.
Option Action
Store all virtual machine files in the a Apply a virtual machine storage policy for the virtual machine home
same location on a datastore. files and the virtual disks from the VM storage policy drop-down
menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
b Select a datastore and click Next.
Store all virtual machine files in the a Apply a virtual machine storage policy for the virtual machine home
same datastore cluster. files and the virtual disks from the VM storage policy drop-down
menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
b Select a datastore and click Next.
Store virtual machine configuration a Click Advanced.
files and disk in separate locations. b For the virtual machine configuration file and for each virtual disk,
click Browse and select a datastore or datastore cluster.
c Click Next.
Procedure
1 Right-click the virtual machine and select Migrate.
a To locate a virtual machine, select a data center, folder, cluster, resource pool, host, or vApp.
Option Description
Change compute resource only Move the virtual machine to another host.
Change storage only Move the virtual machine’s configuration file and virtual disks.
Change both compute resource and Move the virtual machine to another host and move its configuration file
storage and virtual disks.
Migrate virtual machine(s) to a Move the virtual machine to a virtual data center, where you can assign
specific datacenter policies to VMs.
3 To move the virtual machine to another host, select the destination host or cluster for this virtual
machine migration and click Next.
Any compatibility problem appears in the Compatibility panel. Fix the problem, or select another host
or cluster.
Possible targets include hosts and DRS clusters with any level of automation. If a cluster has no DRS
enabled, select a specific host in the cluster rather than selecting the cluster itself.
5 If you chose to move the configuration file and virtual disks of the virtual machine, select a disk format.
Option Description
Same as Source Use the format of the original virtual disk.
Thin provisioned Use the thin format to save storage space. The thin virtual disk uses just as
much storage space as it needs for its initial operations. When the virtual
disk requires more space, it can expand up to its maximum allocated
capacity.
Thick Allocate a fixed amount of hard disk space to the virtual disk. The virtual
disk in the thick format does not change its size and from the beginning
occupies the entire datastore space provisioned to it.
Disks are converted from thin to thick format or thick to thin format only when they are copied from
one datastore to another. If you leave a disk in its original location, the disk format is not converted,
regardless of the selection made here.
6 Select the datastore location where you want to store the virtual machine files.
Option Action
Store all virtual machine files in the a (Optional) Apply a virtual machine storage policy for the virtual
same location on a datastore. machine home files and the virtual disks from the VM storage policy
drop-down menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
b Select a datastore and click Next.
Store all virtual machine files in the a (Optional) Apply a virtual machine storage policy for the virtual
same datastore cluster. machine home files and the virtual disks from the VM storage policy
drop-down menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage profile.
b Select a datastore cluster.
c (Optional) If you do not want to use Storage DRS with this virtual
machine, select Disable Storage DRS for this virtual machine and
select a datastore within the datastore cluster.
d Click Next.
Store virtual machine configuration a Click Advanced.
files and disks in separate b For the virtual machine configuration file and for each virtual disk,
locations. click Browse and select a datastore or datastore cluster.
c (Optional) Apply a virtual machine storage policy from the VM
storage profile drop-down menu.
The list shows which datastores are compatible and which are
incompatible with the selected virtual machine storage policy.
d (Optional) If you selected a datastore cluster and do not want to use
Storage DRS with this virtual machine, select Disable Storage DRS for
this virtual machine and select a datastore within the datastore
cluster.
e Click Next.
vCenter Server moves the virtual machine to the new host. Event messages appear in the Events tab. The
data displayed on the Summary tab shows the status and state throughout the migration. If errors occur
during migration, the virtual machines revert to their original states and locations.
vMotion transfers the running state of a virtual machine between underlying ESXi systems. Live migration
requires that the processors of the target host provide the same instructions to the virtual machine after
migration that the processors of the source host provided before migration. Clock speed, cache size, and
number of cores can differ between source and target processors. However, the processors must come from
the same vendor class (AMD or Intel) to be vMotion compatible.
NOTE Do not add virtual ESXi hosts to an EVC cluster. ESXi virtual machines are not supported in EVC
clusters.
Migrations of suspended virtual machines also require that the virtual machine be able to resume execution
on the target host using equivalent instructions.
When you initiate a migration with vMotion or a migration of a suspended virtual machine, the Migrate
Virtual Machine wizard checks the destination host for compatibility and produces an error message if
compatibility problems will prevent migration.
The CPU instruction set available to the operating system and to applications running in a virtual machine
is determined at the time that a virtual machine is powered on. This CPU feature set is based on the
following items:
To improve CPU compatibility between hosts of varying CPU feature sets, some host CPU features can be
hidden from the virtual machine by placing the host in an Enhanced vMotion Compatibility (EVC) cluster.
NOTE You can hide Host CPU features from a virtual machine by applying a custom CPU compatibility
mask to the virtual machine, but this is not recommended. VMware, in partnership with CPU and hardware
vendors, is working to maintain vMotion compatibility across the widest range of processors. For additional
information, search the VMware Knowledge Base for the vMotion and CPU Compatibility FAQ.
When you create an EVC cluster, use one of the following methods:
n Create an empty cluster, enable EVC, and move hosts into the cluster.
VMware recommends creating an empty EVC cluster as the simplest way of creating an EVC cluster with
minimal disruption to your existing infrastructure.
Prerequisites
n You must be connected to a vCenter Server system with the vSphere Client.
n Before you create an EVC cluster, ensure that the hosts you intend to add to the cluster meet the
requirements listed in the vCenter Server and Host Management publication.
Procedure
1 In the vSphere Client, right-click on a data center and click New Cluster.
2 Enter a name for the cluster and select cluster features, then click Next.
Cluster features such as vSphere DRS and vSphere HA are fully compatible with EVC. You can enable
these features when you create the cluster. For information on specific cluster options, see the vSphere
Client online Help.
3 Select the CPU vendor and EVC mode appropriate for the hosts you intend to add to the cluster and
click Next.
5 Review the selected options for the cluster and click Finish to create the cluster.
7 If the host feature set is greater than the EVC mode that you have enabled for the EVC cluster, ensure
that the cluster has no powered-on virtual machines.
9 Repeat Step 7 and Step 8 for each additional host that you want to move into the cluster.
Prerequisites
n You must be connected to a vCenter Server system with the vSphere Client.
n Before you enable EVC on an existing cluster, ensure that the hosts in the cluster meet the requirements
listed in the vCenter Server and Host Management publication.
Procedure
1 In the vSphere Client, select the cluster for which you want to enable EVC.
2 If virtual machines are running on hosts that have feature sets greater than the EVC mode you intend to
enable, ensure that the cluster has no powered-on virtual machines.
n Power off all the virtual machines on the hosts with feature sets greater than the EVC mode
Because these virtual machines are running with more features than the EVC mode you intend to
set, power off the virtual machines to migrate them back into the cluster after enabling EVC.
3 Ensure that the cluster contains hosts with CPUs from only one vendor, either Intel or AMD.
Select the CPU vendor and feature set appropriate for the hosts in the cluster.
5 If you powered off or migrated virtual machines out of the cluster, power on the virtual machines in the
cluster, or migrate virtual machines into the cluster.
Any virtual machines running with a larger feature set than the EVC mode you enabled for the cluster
must be powered off before they can be moved back into the cluster.
To raise the EVC mode from a CPU baseline with fewer features to one with more features, you do not need
to turn off any running virtual machines in the cluster. Virtual machines that are running do not have access
to the new features available in the new EVC mode until they are powered off and powered back on. A full
power cycling is required. Rebooting the guest operating system or suspending and resuming the virtual
machine is not sufficient.
To lower the EVC mode from a CPU baseline with more features to one with fewer features, you must first
power off any virtual machines in the cluster that are running at a higher EVC mode than the one you
intend to enable, and power them back on after the new mode has been enabled.
Prerequisites
n You must be connected to a vCenter Server system with the vSphere Client.
n If you intend to lower the EVC mode, power off any currently running virtual machines with a higher
EVC mode than the one you intend to enable. See “Determine EVC Modes for Virtual Machines,” on
page 130.
Procedure
1 Display the cluster in the inventory.
5 From the VMware EVC Mode drop-down menu, select the baseline CPU feature set you want to enable
for the cluster.
If the selected EVC Mode cannot be selected, the Compatibility pane displays the reason or reasons
why, along with the relevant hosts for each reason.
6 Click OK to close the EVC Mode dialog box, and click OK to close the cluster settings dialog box.
When a virtual machine is powered on, it determines the EVC mode of the cluster in which it is running. If
the EVC mode of the cluster is subsequently raised, the virtual machine does not change its EVC mode until
it is powered off and powered on again. This means that the virtual machine does not make use of any
additional CPU features exposed by the cluster's new EVC mode until the virtual machine has been
powered off and powered on again.
For example, consider a cluster containing hosts with Intel Xeon 45nm Core™ 2 processors that have been
® ®
set to the Intel "Merom" Generation (Xeon Core™ 2) EVC mode. A virtual machine powered on in this
cluster runs in the Intel "Merom" Generation (Xeon Core 2) EVC mode. If the cluster's EVC mode is raised to
Intel "Penryn" Generation (Xeon 45nm Core 2), the virtual machine remains at the lower Intel "Merom"
Generation (Xeon Core 2) EVC mode. To use any of the features exposed by the higher cluster EVC mode,
such as SSE4.1, you must power off the virtual machine and power it on again.
You can use the Virtual Machines tab of a cluster or a host to determine the EVC modes of the running
virtual machines.
Prerequisites
n You must be connected to a vCenter Server system with the vSphere Client.
Procedure
1 Select the cluster or host in the inventory.
3 If the EVC Mode column is not displayed, right-click on the column titles and select EVC Mode.
The EVC modes of all running or suspended virtual machines are displayed in the EVC Mode column.
Powered off virtual machines and virtual machines that are not in EVC clusters show N/A as the EVC
mode.
The vCenter Server AMD Opteron Gen. 3 (no 3DNow!) EVC mode masks the 3DNow! instructions from
virtual machines. You can apply this EVC mode to EVC clusters containing only AMD Opteron Generation
3 hosts to allow the clusters to maintain vMotion compatibility with AMD Opteron hosts that do not have
3DNow! instructions. Clusters containing AMD Opteron Generation 1 or AMD Opteron Generation 2 hosts
cannot be made vMotion-compatible with hosts that do not have 3DNow! instructions.
Prerequisites
n You must be connected to a vCenter Server system with the vSphere Client.
n Ensure that the cluster contains only hosts with AMD Opteron Generation 3 or newer processors.
Procedure
u Enable the AMD Opteron Gen. 3 (no 3DNow!) EVC mode for your EVC cluster.
The steps to enable the EVC mode differ depending on whether you are creating a cluster or enabling
the mode on an existing cluster, and on whether the existing cluster contains powered-on virtual
machines.
Option Description
Creating a new cluster In the New Cluster wizard, enable EVC for AMD hosts and select the
AMD Opteron Gen. 3 (no 3DNow!) EVC mode.
Editing a cluster without powered- In the Cluster Settings dialog box, edit the VMware EVC settings and
on virtual machines select the AMD Opteron Gen. 3 (no 3DNow!) EVC mode.
Editing a cluster with powered-on The AMD Opteron Gen. 3 (no 3DNow!) EVC mode cannot be enabled
virtual machines while there are powered-on virtual machines in the cluster.
a Power-off any running virtual machines in the cluster, or migrate them
out of the cluster using vMotion.
Migrating the virtual machines out of the cluster with vMotion allows
you to delay powering off the virtual machines until a more
convenient time.
b In the Cluster Settings dialog box, edit the VMware EVC settings and
select the AMD Opteron Gen. 3 (no 3DNow!) EVC mode.
c If you migrated virtual machines out of the cluster, power them off
and cold migrate them back into the cluster.
d Power on the virtual machines.
You can now add hosts with AMD processors without 3DNow! instructions to the cluster and preserve
vMotion compatibility between the new hosts and the existing hosts in the cluster.
You can view the CPUID feature flags currently exposed by the hosts in an EVC cluster using the Current
CPUID Details dialog box.
Prerequisites
n You must be connected to a vCenter Server system with the vSphere Client.
Procedure
1 Display the cluster in the inventory.
4 To view the CPUID feature flags currently enforced by EVC, click Current CPUID Details.
The Current CPUID Details dialog box displays the CPUID feature flags that EVC is enforcing for the hosts
in this cluster. For more information on CPUID feature flags, see Intel Processor Identification and the CPUID
Instruction (available from Intel), or CPUID Specification (available from AMD).
Procedure
1 In the vSphere Client, select File > Deploy OVF Template.
Option Action
Deploy from File Browse your file system for an OVF or OVA template.
Deploy from URL Specify a URL to an OVF template located on the internet. Example:
http://vmware.com/VMTN/appliance.ovf
4 If license agreements are packaged with the OVF template, the End User License Agreement page
appears. Agree to accept the terms of the licenses and click Next.
5 Select the deployment configuration from the drop-down menu and click Next.
The option selected typically controls the memory settings, number of CPUs and reservations, and
application-level configuration parameters.
NOTE This page appears only if the OVF template contains deployment options.
6 Select a datastore to store the deployed OVF template, and click Next.
Datastores are a unifying abstraction for storage locations such as Fibre Channel, iSCSI LUNs, or NAS
volumes. On this page, you select from datastores already configured on the destination cluster or host.
The virtual machine configuration file and virtual disk files are stored on the datastore. Select a
datastore large enough to accommodate the virtual machine and all of its virtual disk files.
7 Select the disk format to store the virtual machine virtual disks, and click Next.
Format Description
Thick Provisioned Lazy Zeroed Creates a virtual disk in a default thick format. Space required for the
virtual disk is allocated when the virtual disk is created data remaining on
the physical device is not erased during creation, but is zeroed out on
demand at a later time on first write from the virtual machine.
Thick Provision Eager Zeroed A type of thick virtual disk that supports clustering features such as Fault
tolerance. Space required for the virtual disk is allocated at creation time.
In contrast to the flat format the data remaining on the physical device is
zeroed out when the virtual disk is created. it might take much longer to
create disks in this format than to create other types o disks.
Thin Provision Use this format to save storage space. For the thin disk, you provision as
much datastore space as the disk would require based on the value that
you enter for the disk size. However, the thin disk starts small and at first,
uses only as much datastore space as the disk needs for its initial
operations. The disk space grows as the virtual machine needs more
storage.
8 If the appliance that you are deploying has one ore more vService dependencies, select a binding
service provider.
9 For each network specified in the OVF template, select a network by right-clicking the Destination
Network column in your infrastructure to set up the network mapping and click Next.
10 On the IP Allocation page, configure how IP addresses are allocated for the virtual appliance and click
Next.
Option Description
Fixed You will be prompted to enter the IP addresses in the Appliance
Properties page.
Transient IP addresses are allocated from a specified range when the appliance is
powered on. The IP addresses are released when the appliance is powered
off.
DHCP A DHCP server is used to allocate the IP addresses.
This page does not appear if the deployed OVF template does not contain information about the IP
scheme it supports.
The set of properties that you are prompted to enter depend on the selected IP allocation scheme. For
example, you are prompted for IP related information for the deployed virtual machines only in the
case of a fixed IP allocation scheme.
The progress of the import task appears in the vSphere Client Status panel.
Procedure
1 In the vSphere Client, select the virtual machine or vApp and select File > Export > Export OVF
Template.
2 In the Export OVF Template dialog, type the Name of the template.
NOTE When exporting an OVF template with a name that contains asterisk (*) characters, those
characters turn into underscore characters (_).
3 Enter the Directory location where the exported virtual machine template is saved, or click “...” to
browse for the location.
The C:\ drive is the default location where the template is stored.
4 In the Format field, determine how you want to store the files.
n Select Folder of files (OVF) to store the OVF template as a set of files (.ovf, .vmdk, and .mf) This
format is optimal if you plan to publish the OVF files on a web server or image library. The
package can be imported, for example, into the vSphere client by publishing the URL to the .ovf
file.
n Select Single file (OVA) to package the OVF template into a single .ova file. This might be
convenient to distribute the OVF package as a single file if it needs to be explicitly downloaded
from a web site or moved around using a USB key.
By default, the text from the Notes pane on the virtual machine’s Summary tab appears in this text box.
6 Select the checkbox if you want to include image files attached to floppy and CD/DVD devices in the
OVF package.
NOTE This checkbox only shows if the virtual machine is connected to an ISO file or if the floppy drive
is connected to a floppy image.
7 Click OK.
n C:\OvfLib\MyVm\MyVm.ovfI
n C:\OvfLib\MyVm.mf
n C:\OvfLib\MyVm-disk1.vmdk
If you type C:\NewFolder\OvfLib for a new OVF folder, the following files might be created:
n C:\NewFolder\OvfLib\MyVm\MyVm.ovfI
n C:\NewFolder\OvfLib\MyVm.mf
n C:\NewFolder\OvfLib\MyVm-disk1.vmdk
If you choose to export into the OVA format, and type MyVm, the file C:\MyVm.ova is created.
Options View and configure a number of virtual machine properties, such as power
management interaction between the guest operating system and virtual
machine, and VMware Tools settings.
n “Locate the Hardware Version of a Virtual Machine in the vSphere Client,” on page 140
n “Change the Virtual Machine Name in the vSphere Client,” on page 141
n “View the Virtual Machine Configuration File Location in the vSphere Client,” on page 141
n “Change the Configured Guest Operating System in the vSphere Client,” on page 142
n “SCSI and SATA Storage Controller Conditions, Limitations, and Compatibility,” on page 163
n “USB Configuration from a Client Computer to a Virtual Machine in the vSphere Client,” on page 177
The following virtual machine features are unavailable or read-only in the vSphere Client:
n Intel vGPU
n AMD vGPU
n 2TB HDD
n 128 vCPUs for virtual machines with hardware versions earlier than version 10
n 32 Serial Ports for virtual machines with hardware versions earlier than version 10
n VMCI firewall
n SR-IOV settings
n Nested hypervizor
n Fast checkpointing
When you create a virtual machine, you can accept the default hardware version, which corresponds to the
host on which you create the virtual machine, or an earlier version. You can use an earlier hardware version
in the following situations:
Virtual machines with hardware versions earlier than version 11 can run on ESXi 6.0 hosts, but do not have
all the capabilities available in hardware version 11. For example, you cannot use 128 virtual processors or
4080GB of memory in virtual machines with hardware versions earlier than version 11.
The vSphere Web Client and the vSphere Client allows you to upgrade virtual machines only to the latest
hardware version. If virtual machines do not have to stay compatible with older ESX/ESXi hosts, you can
upgrade them on ESXi 6.0 hosts. In this case, they are upgraded to version 11.
n To maintain virtual machine compatibility with ESX/ESXi 3.5 hosts, upgrade the virtual machine on an
ESX/ESXi 3.5 host, which results in a virtual machine upgrade to version 4.
n To maintain virtual machine compatibility with ESX/ESXi 4.x hosts, upgrade the virtual machine on an
ESX/ESXi 4.x host, which results in a virtual machine upgrade to version 7.
n To maintain virtual machine compatibility with ESXi 5.0 hosts, upgrade the virtual machine on an
ESX/ESXi 5.0 host, which results in a virtual machine upgrade to version 8.
n To maintain virtual machine compatibility with ESXi 5.1 hosts, upgrade the virtual machine on an
ESX/ESXi 5.1 host, which results in a virtual machine upgrade to version 9.
n To maintain virtual machine compatibility with ESXi 5.5 hosts, upgrade the virtual machine on an
ESX/ESXi 5.5 host, which results in a virtual machine upgrade to version 10.
A virtual machine can have an earlier hardware version than that of the host on which it runs in the
following cases:
n You migrate a virtual machine created on an ESX/ESXi 4.x or earlier host to an ESXi 5.0 host.
n You create a virtual machine on an ESXi 5.0 host by using an existing virtual disk that was created on
an ESX/ESXi 4.x or earlier host.
n You add a virtual disk created on an ESX/ESXi 4.x or earlier host to a virtual machine created on an
ESXi 5.0 host.
You can create, edit, and run different virtual machine versions on a host if the host supports that version.
Sometimes, virtual machine actions on a host are limited or the virtual machine has no access to the host.
Table 15‑1. ESXi Hosts and Compatible Virtual Machine Hardware Versions
Versio Versio Versio Version Version Compatible with vCenter
n 11 n 10 n9 8 7 Version 4 Server Version
ESXi 6.0 Create, Create, Create, Create, Create, Create, edit, vCenter Server 6.0
edit, edit, edit, edit, edit, run run
run run run run
ESXi 5.5 Not Create, Create, Create, Create, Create, edit, vCenter Server 5.5 and later
support edit, edit, edit, edit, run run
ed run run run
ESXi 5.1 Not Not Create, Create, Create, Create, edit, vCenter Server 5.1 and later
support support edit, edit, edit, run run
ed ed run run
ESXi 5.0 Not Not Not Create, Create, Create, edit, vCenter Server 5.0 and later
support support support edit, edit, run run
ed ed ed run
ESX/ESXi 4.x Not Not Not Not Create, Create, edit, vCenter Server 4.x and later
support support support support edit, run run
ed ed ed ed
ESX/ESXi 3.x Not Not Not Not Not Create, edit, vCenter Server 3.5 and later
support support support support supporte run
ed ed ed ed d
Virtual machine hardware versions earlier than hardware version 4 are not supported on ESXi 6.0 hosts. To
make full use of these virtual machines, upgrade the virtual hardware.
NOTE Virtual machine hardware versions 9, 10 and 11 features are limited to hardware version 8 and earlier
when connected to the ESXi host or vCenter Server system using the vSphere Client.
Procedure
1 In the vSphere Client inventory, select the virtual machine.
Option Description
Click the Summary tab. The virtual machine hardware version appears under General on the
virtual machine's Summary tab.
Right-click the virtual machine and The virtual machine hardware version appears in the upper-right corner of
select Edit Settings. the Virtual Machine Properties dialog box.
Select a datacenter, host, or cluster The virtual machine hardware version appears in the VM Version column.
and click the Virtual Machine tab. If the VM Version column is not displayed, right-click any column title and
select VM Version.
Changing the name does not change the name of any virtual machine files or the name of the directory that
the files are located in.
Prerequisites
n Verify that you have access to the virtual machine in the vSphere Client inventory list.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Prerequisites
n Verify that you are connected to the vCenter Server or ESXi host on which the virtual machine runs.
n Verify that you have access to the virtual machine in the vSphere Client inventory list.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 Record the location of the configuration and working files and click OK to close the dialog box.
You also might see VMware documentation that instructs you to change or add a parameter. In such cases,
you can safely follow the recommended procedure.
n To change a parameter, you change the existing value for the keyword/value pair. For example, if you
start with the keyword/value pair, keyword/value, and change it to keyword/value2, the result is
keyword=value2.
CAUTION You must assign a value to configuration parameter keywords. If you don't assign a value, the
keyword can return a value of 0, false, or disable, which can result in a virtual machine that cannot power
on.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
When you set the guest operating system type for a new virtual machine, vCenter Server chooses
configuration defaults based on the guest type. Changing the guest operating system type after the virtual
machine is created does not retroactively change those settings. It affects the recommendations and setting
ranges offered after the change.
Prerequisites
Power off the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
The virtual machine configuration parameters for the guest operating system are changed. You can now
install the guest operating system.
NOTE Automatic VMware Tools upgrade is not supported for virtual machines with Solaris or NetWare
guest operating systems.
Prerequisites
n Verify that the virtual machines have a version of VMware Tools shipped with ESX/ESXi 3.5 or later
installed.
n Verify that the virtual machines are hosted on ESX/ESXi 3.5 or later and vCenter Server 3.5 or later.
n Verify that the virtual machines are running a Linux or Windows guest OS that ESX/ESXi 3.5 or later
and vCenter Server 3.5 or later support.
Procedure
1 Right-click the virtual machine and click Edit Settings.
3 Select Check and upgrade Tools during power cycling in the Advanced pane.
The next time the virtual machine is powered on, it checks the ESX/ESXi host for a newer version of
VMware Tools. If one is available, it is installed and the guest operating system is restarted (if required).
VMware uses the following terminology. Understanding these terms can help you plan your CPU resource
allocation strategy.
CPU The CPU or processor is the portion of a computer system that carries out the
instructions of a computer program and is the primary element carrying out
the computer's functions. CPUs contain cores.
Core Comprises a unit containing an L1 cache and functional units needed to run
programs. Cores can independently run programs or threads. One or more
cores can exist on a single CPU.
Resource sharing Shares specify the relative priority or importance of a virtual machine or
resource pool. If a virtual machine has twice as many shares of a resource as
another virtual machine, it is entitled to consume twice as much of that
resource when these two virtual machines are competing for resources.
Resource allocation You can change CPU resource allocation settings, such as shares, reservation,
and limit, when available resource capacity does not meet demands. For
example, if at year end, the workload on accounting increases, you can
increase the accounting resource pool reserve.
vSphere Virtual Feature that enables a single virtual machine to have multiple processors.
Symmetric
Multiprocessing (Virtual
SMP)
n For best results, use virtual machines with hardware version 8 or later.
n Hot-adding multicore virtual CPUs is supported only with hardware version 8 or later.
n Not all guest operating systems support CPU hot add. You can disable these settings if the guest is not
supported.
n To use the CPU hot-add feature with hardware version 7 virtual machines, set Number of cores per
socket to 1.
n Adding CPU resources to a running virtual machine with CPU hot plug enabled disconnects and
reconnects all USB passthrough devices connected to that virtual machine.
Prerequisites
Verify that the virtual machine is running under the following conditions:
n VMware Tools is installed. This condition is required for hot plug functionality with Linux guest
operating systems.
n The virtual machine has a guest operating system that supports CPU hot plug.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Options tab and under Advanced, select Memory/CPU Hotplug.
What to do next
You can now add CPUs to the powered on virtual machine.
Virtual CPU hot add is supported for virtual machines with multicore CPU support that are running on
hardware version 8 or later. When the virtual machine is powered on, and CPU hot add is enabled, you can
hot add virtual CPUs to the running virtual machine. You can add only multiples of the number of cores per
socket. For multicore CPUs, the host must have a license for vSphere Virtual Symmetric Multiprocessing
(Virtual SMP).
IMPORTANT When you configure your virtual machine for multicore virtual CPU settings, you must ensure
that your configuration complies with the requirements of the guest operating system EULA.
Prerequisites
n If CPU hot add is not enabled, power off the virtual machine before adding CPUs.
n If CPU hot remove is not enabled, power off the virtual machine before removing CPUs.
n To hot add multicore CPUs, verify that the virtual machine has hardware version 8.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
4 Select a value from the Number of cores per socket drop-down menu.
The resulting total number of cores is a number equal to or less than the number of logical CPUs on the
host.
With CPU hot plug enabled and the virtual machine running, you can select the number of sockets to add
from the Number of virtual sockets drop-down menu. The Number of cores per socket drop-down menu
is unavailable and retains a value of 2. If you select 3 virtual sockets, you are adding 1 socket with 2 cores so
that the virtual machine has 6 virtual CPUs.
A virtual machine has the following user-defined settings that affect its CPU resource allocation.
Limit Places a limit on the consumption of CPU time for a virtual machine. This
value is expressed in MHz.
Reservation Specifies the guaranteed minimum allocation for a virtual machine. The
reservation is expressed in MHz.
Shares Each virtual machine is granted a number of CPU shares. The more shares a
virtual machine has, the more often it gets a time slice of a CPU when there is
no CPU idle time. Shares represent a relative metric for allocating CPU
capacity.
NOTE Virtual machine hardware versions 9, 10 and 11 features are read-only when connected to the ESXi
host or vCenter Server system using the vSphere Client.
Prerequisites
Required Privilege: Virtual machine.Configuration.Change resource
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Option Description
Shares CPU shares for this virtual machine in relation to the parent’s total. Sibling
virtual machines share resources according to their relative share values
bounded by the reservation and limit. Select Low, Normal, or High, which
specify share values respectively in a 1:2:4 ratio. Select Custom to give each
virtual machine a specific number of shares, which express a proportional
weight.
Reservation Guaranteed CPU allocation for this virtual machine.
Limit Upper limit for this virtual machine’s CPU allocation. Select Unlimited to
specify no upper limit.
Hyperthreading technology allows a single physical processor to behave like two logical processors. The
hyperthreaded core sharing option provides detailed control over whether to schedule a virtual machine to
share a physical processor core. The processor can run two independent applications at the same time.
Although hyperthreading does not double the performance of a system, it can increase performance by
better utilizing idle resources.
Prerequisites
n The hyperthreaded core sharing option must be enabled in your system's BIOS settings. For more
information, see the Resource Management documentation.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Option Description
Any (default) The virtual CPUs of this virtual machine can share cores with other virtual
CPUs of this or other virtual machines.
None The virtual CPUs of this virtual machine have exclusive use of a processor
core whenever they are scheduled to it. The other hyperthread of the core
is halted while this virtual machine is using the core.
Internal On a virtual machine with exactly two virtual processors, the two virtual
processors are allowed to share one physical core (at the discretion of the
host scheduler), but this virtual machine never shares a core with any
other virtual machine. If this virtual machine has any other number of
processors other than two, this setting is the same as the None setting.
Using CPU affinity, you can assign a virtual machine to a specific processor. This assignment allows you to
restrict the assignment of virtual machines to a specific available processor in multiprocessor systems.
For potential issues with CPU affinity, see the Resource Management documentation.
Prerequisites
Power off the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 In the Scheduling Affinity panel, enter a comma-separated list of hyphenated processor ranges.
For example, "0,4-7" would indicate affinity with CPUs 0,4,5,6, and 7. Selecting all processors is identical
to selecting no affinity. You must provide at least as many processor affinities as you have virtual
CPUs.
For example, masking the AMD No eXecute (NX) and the Intel eXecute Disable (XD) bits prevents the
virtual machine from using these features, but provides compatibility that allows you to migrate virtual
machines to ESXi hosts that do not include this capability. When the NX/XD bit is visible to the guest
operating system, the virtual machine can use this feature, but you can migrate the virtual machine only to
hosts on which the feature is enabled.
NOTE You rarely need to change the CPU identification mask configuration settings. Almost all changes are
made only to the NX/XD bit.
See the vCenter Server and Host Management documentation for detailed information about vMotion
compatibility and CPU masks.
Prerequisites
n Verify that you have access to the virtual machine in the vSphere Client inventory list.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Options tab and under Advanced, select CPUID Mask.
Option Description
Hide the NX/XD flag from guest Increases vMotion compatibility.
Hiding the NX/XD flag increases vMotion compatibility between hosts, but
might disable certain CPU security features.
Expose the NX/XD flag to guest Keeps all CPU security features enabled.
Keep current Advanced setting Uses the NX/XD flag settings specified in the CPU Identification Mask
values for the NX/XD flag dialog box. Enabled only when current settings specify something other
than what is specified in the other NX/XD flag options, for example, if the
NX/XD flag bit setting varies with processor brand.
4 (Optional) To edit mask values other than the NX bit or to set NX mask values to states other than “0”
or “H”, click Advanced.
c Click OK to apply the changes and return to the Virtual Machine Properties dialog box.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Options tab and under Advanced, select CPU/MMU Virtualization.
n Automatic
n Use Intel VT-x/AMD-V for instruction set virtualization and software for MMU
n Use Intel VT-x/AMD-V for instruction set virtualization and Intel EPT/AMD RVI for MMU
virtualization
Minimum memory size is 4 MB for virtual machines that use BIOS firmware. Virtual machines that use EFI
firmware require at least 96 MB of RAM or they cannot power on.
Maximum memory size for a virtual machine depends on the host's physical memory and the virtual
machine's hardware version.
If the virtual machine memory is greater than the host memory size, swapping occurs, which can have a
severe effect on virtual machine performance. The memory size must be a multiple of 4 MB. The maximum
for best performance represents the threshold above which the host’s physical memory is insufficient to run
the virtual machine at full speed. This value fluctuates as conditions on the host change, for example, as
virtual machines are powered on or off.
The ESXi host version indicates when support began for the increased memory size. For example, the
memory size of a version 7 virtual machine running on ESXi 5.0 is restricted to 255 GB.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
A virtual machine has three user-defined settings that affect its memory resource allocation.
Limit Places a limit on the consumption of memory for a virtual machine. This
value is expressed in megabytes.
Reservation Specifies the guaranteed minimum allocation for a virtual machine. The
reservation is expressed in megabytes.
Shares Each virtual machine is granted a number of memory shares. The more
shares a virtual machine has, the more often it gets a time slice of a memory
when no memory idle time is present. Shares represent a relative metric for
allocating memory capacity. For more information about share values, see
the vSphere Resource Management documentation.
Assigning a virtual machine a reservation larger than its configured memory is wasteful. The vSphere Client
does not allow you to make such an assignment on the Resources tab. If you give a virtual machine a large
reservation and then reduce its configured memory size on the Hardware tab, the reservation is reduced to
match the new configured memory size. You must power off the virtual machine before configuring
memory resources.
NOTE Virtual machine hardware versions 9, 10 and 11 features are read-only when connected to the ESXi
host or vCenter Server system using the vSphere Client.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Option Description
Shares The values Low, Normal, High, and Custom are compared to the sum of
all shares of all virtual machines on the server. You can use share
allocation symbolic values to configure their conversion into numeric
values.
Reservation Guaranteed memory allocation for this virtual machine.
Limit Upper limit for this virtual machine’s memory allocation.
Unlimited No upper limit is specified.
Prerequisites
n The virtual machine has a guest operating system that supports Memory hot add functionality.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Options tab and under Advanced, select Memory/CPU Hotplug.
n The NUMA option is available on the Advanced Memory Resources page only if the host uses NUMA
memory architecture.
n Affinity settings are meaningful only when used to modify the performance of a specific set of virtual
machines on one host. This option is not available when the virtual machine resides on a DRS cluster.
All affinity values are cleared when you move the virtual machine to a new host.
n You can specify nodes to use for future memory allocations only if you have also specified CPU affinity.
If you make manual changes only to the memory affinity settings, automatic NUMA rebalancing does
not work properly.
For information about NUMA and advanced memory resources, including usage examples, see the Resource
Management documentation.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 In the NUMA Memory Affinity panel, set the NUMA node affinity for the virtual machine.
n No affinity
For more information about host swap file settings, see the vCenter Server and Host Management
documentation. For more information about cluster settings, see the Resource Management documentation.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Option tab and under Advanced, select Swapfile Location.
3 Select an option.
Option Description
Default Stores the virtual machine swap file at the default location defined by the
host or cluster swap file settings.
Always store with the virtual Stores the virtual machine swap file in the same folder as the virtual
machine machine configuration file.
Store in the host's swapfile Stores the virtual machine swap file in the swap file datastore defined by
datastore the host or cluster swap file settings.
Change the Virtual Network Adapter (NIC) Configuration in the vSphere Client
You can change the power-on connection setting, the MAC address, and the network connection for the
virtual network adapter configuration for a virtual machine.
Prerequisites
Required Privileges:
n Virtual machine.Configuration.Modify device settings for editing the MAC address and network.
n Virtual machine.Interaction.Device connection for changing Connect and Connect at power on.
n Network.Assign network
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and select the appropriate NIC in the Hardware list.
3 (Optional) To connect the virtual NIC when the virtual machine is powered on, select Connect at power
on.
4 (Optional) Click the blue information icon under DirectPath I/O to view details regarding the virtual
NIC's DirectPath I/O status and capability.
Option Description
Automatic vSphere assigns a MAC address automatically.
Manual Type the MAC address to use.
Option Description
Standard settings The virtual NIC connects to a standard or distributed port group. Select
the port group for the virtual NIC to connect to from the Network label
drop-down menu.
Advanced settings The virtual NIC connects to a specific port on a vSphere distributed switch.
This option appears only when a vSphere distributed switch is available.
a Click Switch to advanced settings.
b Select a vSphere distributed switch for the virtual NIC to use from the
VDS drop-down menu.
c Type the Port ID of the distributed port for virtual NIC to connect to.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
5 In the Network connection panel, select either a named network with a specified label or a legacy
network.
6 To connect the virtual NIC when the virtual machine is powered on, select Connect at power on.
7 Click Next.
You can set up virtual serial ports to send data in the following ways.
Physical serial port on Sets the virtual machine to use a physical serial port on the host computer.
the host This method lets you use an external modem or a hand-held device in a
virtual machine.
Output to file Sends output from the virtual serial port to a file on the host computer. This
method lets you capture the data that a program running in the virtual
machine sends to the virtual serial port.
Connect to a named Sets a direct connection between two virtual machines or a connection
pipe between a virtual machine and an application on the host computer. With
this method, two virtual machines or a virtual machine and a process on the
host can communicate as if they were physical machines connected by a
serial cable. For example, use this option for remote debugging of a virtual
machine.
Connect over the Enables a serial connection to and from a virtual machine's serial port over
network the network. The Virtual Serial Port Concentrator (vSPC) aggregates traffic
from multiple serial ports onto one management console. vSPC behavior is
similar to physical serial port concentrators. Using a vSPC also allows
Server and Client Connections for Named Pipe and Network Serial Ports
You can select a client or server connection for serial ports. Your selection determines whether the system
waits for a connection or initiates it. Typically, to control a virtual machine over a serial port, you select a
server connection. This selection lets you control the connections, which is useful if you connect to the
virtual machine only occasionally. To use a serial port for logging, select a client connection. This selection
lets the virtual machine connect to the logging server when the virtual machine starts and to disconnect
when it stops.
n Serial ports connected through USB are not supported for serial port passthrough. They might be
supported by USB passthrough from an ESXi host to a virtual machine. See USB Configuration from an
ESXi Host to a Virtual Machine.
In addition, you cannot use Migration with VMotion when you use a physical serial port for serial
passthrough.
Before you connect network-backed virtual serial ports, you must add one of the following firewall rule sets
to prevent the firewall from blocking communication:
n VM serial port connected to vSPC. Use to connect the serial port output through a network with the
Use virtual serial port concentrator option enabled to allow only outgoing communication from the
host.
n VM serial port connected over network. Use to connect the serial port output through a network
without the virtual serial port concentrator.
IMPORTANT Do not change the allowed IP list for either rule set. Updates to the IP list can affect other
network services that might be blocked by the firewall.
For details about allowing access to an ESXi service through the firewall, see the vSphere Security
documentation.
Prerequisites
n Verify that the virtual machine is powered off.
n Familiarize yourself with the media types for the port to access, vSPC connections, and any conditions
that might apply. See “Using Serial Ports with vSphere Virtual Machines,” on page 154.
n To connect a serial port over a network, add a Firewall rule set. See Adding a Firewall Rule Set for
Serial Port Network Connections.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
4 On the Serial Port Type page, select the type of media for the port to access.
Option Description
Use physical serial port on the host Click Next and select the port from the drop-down menu.
Output to file Click Next and browse to the location of the file on the host to store the
output of the virtual serial port.
Connect to named pipe a Click Next and type a name for the pipe in the Pipe Name field.
b Select the Near end and Far end of the pipe from the drop-down
menus.
Connect via network a Click Next and clickServer or Client and type the Port URI.
The URI is the remote end of the serial port to which the virtual
machine's serial port should connect.
b If vSPC is used as an intermediate step to access all virtual machines
through a single IP address, select Use Virtual Serial Port
Concentrator (vSPC) and type the vSPC URI location.
5 (Optional) Deselect Connect at power on if you do not want the parallel port device to be connected
when the virtual machine powers on.
Select this option only for guest operating systems that use serial ports in polled mode. This option
prevents the guest from consuming excessive CPUs.
7 Review the information on the Ready to Complete page and click Finish.
Similarly, if you run the Telnet Server on your Linux system on port 23 (telnet://yourLinuxBox:23), you
configure the virtual machine as a client URI.
telnet://yourLinuxBox:23
The virtual machine initiates the connection to your Linux system on port 23.
Prerequisites
n Check that you known the correct media types for the port to access, vSPC connections, and any
conditions that might apply. See “Using Serial Ports with vSphere Virtual Machines,” on page 154.
n To connect a serial port over a network, add a Firewall rule set. See Adding a Firewall Rule Set for
Serial Port Network Connections.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and select a serial port in the Hardware list.
Option Description
Connected Connects or disconnects the device while the virtual machine is running.
Connect at power on Connects the device whenever you power on the virtual machine. You can
change this setting when the virtual machine is either powered on or
powered off.
Option Description
Use physical serial port Select this option to have the virtual machine use a physical serial port on
the host computer. Select the serial port form the drop-down menu.
Use output file Select this option to send output from the virtual serial port to a file on the
host computer. Browse to select an output file to connect the serial port to.
Option Description
Use named pipe Select this option to set a direct connection between two virtual machines
or a connection between a virtual machine and an application on the host
computer.
a Type a name for the pipe in the Pipe Name field.
b Select the Near End and Far End of the pipe from the drop-down
menus.
Use network Select Use network to connect through a remote network.
a Select the network backing.
n Select Server to have the virtual machine monitor incoming
connections from other hosts.
n Select Client to have the virtual machine initiate a connection to
another host.
b Enter a Port URI.
The URI is the remote end of the serial port to which the virtual
machine's serial port should connect.
c If vSPC is used as an intermediate step to access all virtual machines
through a single IP address, select Use Virtual Serial Port
Concentrator and enter the vSPC URI location.
Select this option only for guest operating systems that use serial ports in polled mode. This option
prevents the guest from consuming excessive CPUs.
Similarly, if you run the Telnet Server on your Linux system on port 23 (telnet://yourLinuxBox:23), you
configure the virtual machine as a client URI.
telnet://yourLinuxBox:23
The virtual machine initiates the connection to your Linux system on port 23.
Prerequisites
n Verify that the virtual machine is powered off.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
5 Browse to the location of the output file and Select or deselect the Connect at power on check box to
connect or disconnect the device.
6 Click Next.
7 Review the information on the Ready to Complete page, and click Finish.
You can use a parallel port on the virtual machine to send output to a file. You cannot use a physical parallel
port on ESXi hosts.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and select the parallel port to change.
3 Select Output to file and click Browse to navigate to the file location.
4 (Optional) Deselect Connect at power on if you do not want the parallel port device to be connected
when the virtual machine powers on.
Each virtual port is identified by a pair of world wide names (WWNs): a world wide port name (WWPN)
and a world wide node name (WWNN). These WWNs are assigned by vCenter Server.
For detailed information on how to configure NPIV for a virtual machine, see vSphere Storage.
n NPIV must be enabled on the SAN switch. Contact the switch vendor for information about enabling
NPIV on their devices.
n NPIV is supported only for virtual machines with RDM disks. Virtual machines with regular virtual
disks continue to use the WWNs of the host’s physical HBAs.
n The physical HBAs on the ESXi host must have access to a LUN using its WWNs in order for any
virtual machines on that host to have access to that LUN using their NPIV WWNs. Ensure that access is
provided to both the host and the virtual machines.
n The physical HBAs on the ESXi host must support NPIV. If the physical HBAs do not support NPIV,
the virtual machines running on that host will fall back to using the WWNs of the host’s physical HBAs
for LUN access.
n Each virtual machine can have up to 4 virtual ports. NPIV-enabled virtual machines are assigned
exactly 4 NPIV-related WWNs, which are used to communicate with physical HBAs through virtual
ports. Therefore, virtual machines can utilize up to 4 physical HBAs for NPIV purposes.
You can view or edit the virtual machines WWNs on the Options tab.
Prerequisites
n To edit the virtual machine’s WWNs, power off the virtual machine.
n Verify that the virtual machine has a datastore containing a LUN that is available to the host.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Options tab and under Advanced select Fibre Channel NPIV.
3 (Optional) Select the Temporarily Disable NPIV for this virtual machine check box.
n To have the ESXi host generate new WWNs, select Generate New WWNs.
The administrator needs the assignments to configure virtual machine access to the LUN.
You can store virtual machine data in a new virtual disk, an existing virtual disk, or a mapped SAN LUN. A
virtual disk, which appears as a single hard disk to the guest operating system, is composed of one or more
files on the host file system. You can copy or move virtual disks on the same hosts or between hosts.
For virtual machines running on an ESXi host, you can store the virtual machine data directly on a SAN
LUN instead of storing it in a virtual disk file. This ability is useful if you are running applications in your
virtual machines that must detect the physical characteristics of the storage device. Additionally, mapping a
SAN LUN allows you to use existing SAN commands to manage storage for the disk.
To accelerate virtual machine performance, you can configure virtual machines to use vSphere Flash Read
Cache™. For details about Flash Read Cache behavior, see the vSphere Storage documentation.
When you map a LUN to a VMFS volume, vCenter Server or the ESXi host creates a raw device mapping
(RDM) file that points to the raw LUN. Encapsulating disk information in a file allows vCenter Server or the
ESXi host to lock the LUN so that only one virtual machine can write to it. This file has a .vmdk extension,
but the file contains only disk information that describes the mapping to the LUN on the ESXi system. The
actual data is stored on the LUN. You cannot deploy a virtual machine from a template and store its data on
a LUN. You can store only its data in a virtual disk file.
The amount of free space in the datastore is always changing. Ensure that you leave sufficient space for
virtual machine creation and other virtual machine operations, such as growth of sparse files, snapshots,
and so on. To review space utilization for the datastore by file type, see the vSphere Monitoring and
Performance documentation.
Thin provisioning lets you create sparse files with blocks that are allocated upon first access, which allows
the datastore to be over-provisioned. The sparse files can continue growing and fill the datastore. If the
datastore runs out of disk space while the virtual machine is running, it can cause the virtual machine to
stop functioning.
NOTE The Manage Paths feature for RDM disks is not available for virtual machines on legacy hosts
running versions of ESX Server earlier than 3.0.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and select the hard disk to modify.
The name of the disk file and the disk type (thick or thin) appear in the upper-right pane.
This option is read-only when editing a virtual machine that is powered on.
4 To change the size of the disk, enter a new value in the Provisioned Size text box.
5 (Optional) To change the way disks are affected by snapshots, click Independent and select an option.
Option Description
Independent - Persistent Disks in persistent mode behave like conventional disks on your physical
computer. All data written to a disk in persistent mode are written
permanently to the disk.
Independent - Nonpersistent Changes to disks in nonpersistent mode are discarded when you power off
or reset the virtual machine. With nonpersistent mode, you can restart the
virtual machine with a virtual disk in the same state every time. Changes
to the disk are written to and read from a redo log file that is deleted when
you power off or reset.
NOTE You cannot use migration with vMotion to migrate virtual machines that use raw disks for clustering
purposes.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Option Action
Create a new virtual disk a Type the disk capacity.
b Select a disk format.
n Thick Provision Lazy Zeroed creates a virtual disk in a default
thick format.
n Thick Provision Eager Zeroed creates a type of thick virtual disk
that supports clustering features such as Fault Tolerance.
n Thin Provision creates a disk in thin format. Use this format to
save storage space.
c Select a location to store the disk. Store with the virtual machine or
Specify a datastore.
d If you selected Specify a datastore, browse for the datastore location,
and click Next.
Use an Existing Virtual Disk Browse for the disk file path and click Next.
Raw Device Mappings Gives your virtual machine direct access to SAN.
a Select the LUN to use for the raw disk, and click Next.
b Select the datastore and click Next.
c Select the compatibility mode.
n Physical allows the guest operating system to access the hardware
directly.
n Virtual allows the virtual machine to use VMware snapshots and
other advanced functions.
d Click Next.
In most cases, you can accept the default device node. For a hard disk, a nondefault device node is
useful to control the boot order or to have different SCSI controller types. For example, you might want
to boot from an LSI Logic controller and share a data disk with another virtual machine using a
BusLogic controller with bus sharing turned on.
6 (Optional) To change the way disks are affected by snapshots, click Independent and select an option.
Option Description
Independent - Persistent Disks in persistent mode behave like conventional disks on your physical
computer. All data written to a disk in persistent mode are written
permanently to the disk.
Independent - Nonpersistent Changes to disks in nonpersistent mode are discarded when you power off
or reset the virtual machine. With nonpersistent mode, you can restart the
virtual machine with a virtual disk in the same state every time. Changes
to the disk are written to and read from a redo log file that is deleted when
you power off or reset.
7 Click Next.
You can allocate the host disk's I/O bandwidth to the virtual hard disks of a virtual machine. Disk I/O is a
host-centric resource so you cannot pool it across a cluster.
Shares is a value that represents the relative metric for controlling disk bandwidth to all virtual machines.
The values are compared to the sum of all shares of all virtual machines on the server.
Disk shares are relevant only within a given ESXi host. The shares assigned to virtual machines on one host
have no effect on virtual machines on other hosts.
You can select an IOP limit, which sets an upper bound for storage resources that are allocated to a virtual
machine. IOPs are the number of I/O operations per second.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 In the Resource Allocation panel, select the virtual hard disk to change.
4 Click the Shares column and change the value to allocate a number of shares of its disk bandwidth to
the virtual machine.
n Low (500)
n Normal (1000)
n High (2000)
n Custom
When you select a shares symbolic value, the numeric value appears in the Shares Value column. You
can select Custom to enter a user-defined shares value.
5 Click the Limit - IOPS column and enter the upper limit of storage resources to allocate to the virtual
machine.
When you create a virtual machine, the default controller is optimized for best performance. The controller
type depends on the guest operating system, the device type, and in some cases, the virtual machine's
compatibility. For example, when you create virtual machines with Apple Mac OS X guests and ESXi 5.5
and later compatibility, the default controller type for both the hard disk and the CD/DVD drive is SATA.
When you create virtual machines with Windows Vista and later guests, a SCSI controller is the default for
the hard disk and a SATA controller is the default for the CD/DVD drive.
Each virtual machine can have a maximum of four SCSI controllers and four SATA controllers. The default
SCSI or SATA controller is 0. When you create a virtual machine, the default hard disk is assigned to the
default controller 0 at bus node (0:0).
When you add storage controllers, they are numbered sequentially 1, 2, and 3. If you add a hard disk, SCSI,
or CD/DVD-ROM device to a virtual machine after virtual machine creation, the device is assigned to the
first available virtual device node on the default controller, for example (0:1).
If you add a SCSI controller, you can reassign an existing or new hard disk or device to that controller. For
example, you can assign the device to (1:z ), where 1 is SCSI controller 1 and z is a virtual device node from 0
to 15. For SCSI controllers, z cannot be 7. By default, the virtual SCSI controller is assigned to virtual device
node (z:7), so that device node is unavailable for hard disks or other devices.
If you add a SATA controller, you can reassign an existing or new hard disk or device to that controller. For
example, you can assign the device to (1:z ), where 1 is SATA controller 1 and z is a virtual device node from
0 to 29. For SATA controllers, you can use device nodes 0 through 29, including 0:7.
n LSI Logic SAS and VMware Paravirtual SCSI are available for virtual machines with ESXi 4.x and later
compatibility.
n AHCI SATA is available only for virtual machines with ESXi 5.5 and later compatibility.
n BusLogic Parallel controllers do not support virtual machines with disks larger than 2TB.
CAUTION Changing the controller type after the guest operating system is installed will make the disk and
any other devices connected to the adapter inaccessible. Before you change the controller type or add a new
controller, make sure that the guest operating system installation media contains the necessary drivers. On
Windows guest operating systems, the driver must be installed and configured as the boot driver.
n If the virtual machine boots from AHCI SATA, and you add BusLogic Parallel or LSI Logic controllers.
Adding additional disks to virtual machines that use EFI firmware does not cause boot problems.
VMware
Existing BusLogic LSI Logic Paravirtual
Controller Parallel LSI Logic SAS SCSI AHCI SATA IDE
LSI Logic SAS Requires BIOS Requires BIOS Usually Usually Requires BIOS Yes
setup setup Works Works setup
VMware Requires BIOS Requires BIOS Usually Usually Requires BIOS Yes
Paravirtual setup setup Works Works setup
SCSI
AHCI SATA Requires BIOS Requires BIOS Yes Yes Yes Yes
setup setup
Adding a new hard disk on an unused SCSI bus number automatically creates a new SCSI controller.
Prerequisites
Sufficient privileges to edit the virtual machine.
Procedure
1 Right-click on a virtual machine and select Edit Settings.
3 Click Add.
5 Proceed through the wizard, selecting options that suit your needs.
6 In the Advanced Options page > Virtual Device Node section, select an unused SCSI Bus number.
For example, bus and device numbers 0:0 - 0:15 are used by the initial SCSI controller. The second SCSI
controller uses bus and device numbers 1:0 - 1:15.
The new hard disk and new SCSI controller are simultaneously created.
You can change the SCSI controller configuration for a virtual machine on an ESXi host only.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and select a SCSI Controller in the hardware list.
Option Description
None Virtual disks cannot be shared by other virtual machines.
Virtual Virtual disks can be shared by virtual machines on the same server.
Physical Virtual disks can be shared by virtual machines on any server.
The choice of SCSI controller does not affect whether your virtual disk is an IDE or SCSI disk. The IDE
adapter is always ATAPI. The default for your guest operating system is already selected. Older guest
operating systems default to the BusLogic adapter.
If you create an LSI Logic virtual machine and add a virtual disk that uses BusLogic adapters, the virtual
machine boots from the BusLogic adapters disk. LSI Logic SAS is available only for virtual machines with
hardware version 7 or later. Disks with snapshots might not experience performance gains when used on
LSI Logic SAS, VMware Paravirtual, and LSI Logic Parallel adapters.
CAUTION Changing the SCSI controller type might result in a virtual machine boot failure.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
VMware Paravirtual SCSI controllers are available for virtual machines with ESXi 4.x and later
compatibility. Disks on such controllers might not experience optimal performance gains if they have
snapshots or if memory on the ESXi host is over committed. This behavior does not mitigate the overall
performance gain of using VMware Paravirtual SCSI controllers as compared to other SCSI controller
options.
If you have virtual machines with VMware Paravirtual SCSI controllers, those virtual machines cannot be
part of an MSCS cluster.
For platform support for VMware Paravirtual SCSI controllers, see the VMware Compatibility Guide at
http://www.vmware.com/resources/compatibility.
VMware Paravirtual SCSI controllers are best suited for environments, especially SAN environments,
running I/O-intensive applications.
Prerequisites
n Verify that the virtual machine has a guest operating system with VMware Tools installed.
n Ensure that you are familiar with VMware Paravirtual SCSI limitations. See “About VMware
Paravirtual SCSI Controllers,” on page 166.
n To access boot disk devices attached to a VMware Paravirtual SCSI controller, verify that the virtual
machine has a Windows 2003 or Windows 2008 guest operating system.
n In some operating systems, before you change the controller type you need to create a virtual machine
with an LSI Logic controller, install VMware Tools, then change to paravirtual mode.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
For device node SCSI (0:2), 0 is the controller number and 2 is the number of the device that is attached
to the controller. If you select a node on which devices already exist (for example, SCSI 0:3) you will
add a SCSI device to the existing controller. To add a new controller, you must select an unused device
node on an unused SCSI controller (for example 1:0).
New SCSI Controller (adding) and New SCSI Device (adding) appear in the Hardware list.
If you are adding a CD/DVD drive that is backed by USB CD/DVD drive on the host, you must add the
drive as a SCSI device. Hot adding or removing SCSI devices from an ESXi host is not supported.
You cannot use vMotion to migrate virtual machines that have CD drives that are backed by the physical
CD drive on the host. You must disconnect these devices before you migrate the virtual machine.
Prerequisites
Ensure that the host is powered off before you add USB CD/DVD devices.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Option Description
Use physical drive a Select Client or Host as the location.
b Select a Pass through (recommended) or ATAPI emulation
connection type.
Use ISO Image Enter the path and filename for the image file, or click Browse to navigate
to the file.
5 If you do not want the CD-ROM drive connected when the virtual machine starts, deselect Connect at
power on.
6 Click Next.
7 Select the virtual device node the drive uses in the virtual machine and click Next.
8 Review the information on the Ready to Complete window, and click Finish or click Back to change
the settings.
Configure a Client Device Type for the DVD/CD-ROM Drive in the vSphere Client
You can connect the DVD/CD-ROM device to a physical DVD or CD-ROM device on the system running the
vSphere Client.
Procedure
1 Select the virtual machine in the vSphere Client inventory.
3 Select a drive or ISO image from the CD/DVD drive drop-down menu.
Passthrough IDE (raw) mode access is set by default, which lets you write or burn a remote CD.
Configure a Host Device Type for the CD/DVD Drive in the vSphere Client
You can connect the CD/DVD device to a physical DVD or CD-ROM device that resides on the host.
You cannot use vMotion to migrate virtual machines that have CD drives that are backed by the physical
CD drive on the host. You must disconnect these devices before you migrate the virtual machine.
When you add a CD/DVD-ROM drive that is backed by a USB CD/DVD drive on the host, you must add the
drive as a SCSI device. Hot adding or removing SCSI devices from an ESXi host is not supported.
Prerequisites
Ensure that the host is powered off before you add USB CD/DVD-ROM devices.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
4 If you do not want the CD-ROM drive connected when the virtual machine starts, deselect Connect at
power on.
5 Select Host Device under Device Type and select a device from the drop-down menu.
6 (Optional) In the drop-down menu under Virtual Device Node, select the node the drive uses in the
virtual machine.
Configure a Datastore ISO File for the CD/DVD Drive in the vSphere Client
You can connect the CD/DVD device to an ISO file that is stored on a datastore accessible to the host.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 Select or deselect the Connected check box to connect or disconnect the device.
4 If you do not want the CD-ROM drive connected when the virtual machine starts, deselect Connect at
power on.
5 Select Datastore ISO File under Device Type and click Browse to navigate to the file.
6 In the drop-down menu under Virtual Device Node, select the node the drive uses in the virtual
machine.
7 Click OK to save your changes.
ESXi does not support floppy drives that are backed by a physical floppy drive on the host.
NOTE You cannot use vMotion to migrate virtual machines that have floppy drives backed by a physical
floppy drive on ESX 3.5, 4. 0, and 4.x hosts that vCenter Server 5.0 manages. You must disconnect these
devices before you migrate the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Option Description
Use a physical floppy drive Select this option to connect the floppy device to a physical floppy device
or a .flp floppy image on the system running the vSphere Client.
To connect the device, click the Floppy Connections button in the toolbar
when you power on the virtual machine.
Use a floppy image a Select this option to connect the virtual device to an existing floppy
image on a datastore accessible to the host.
b Click Browse and select the floppy image.
Create a blank floppy image a Select this option to create a floppy image on a datastore accessible to
the host.
b Click Browse and browse to the location for the floppy image.
c Enter a name for the floppy image and click OK.
5 To have the floppy drive connected to the virtual machine when you power it on, select Connect at
power on.
6 Click Next.
7 Review the information on the Ready to Complete page, and click Finish.
8 Click OK to save your changes.
ESXi does not support floppy drives that are backed by a physical floppy drive on the host.
NOTE You cannot use vMotion to migrate virtual machines that have floppy drives backed by a physical
floppy drive on ESX 3.5, 4. 0, and 4.x hosts that vCenter Server 5.0 manages. You must disconnect these
devices before you migrate the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and select the Floppy drive.
3 Under Device Status, select Connect at power on to connect this virtual machine to the floppy drive
when the virtual machine is powered on.
Option Description
Client Device Select this option to connect the floppy device to a physical floppy device
or a .flp floppy image on the system running the vSphere Client.
To connect the device, click the Floppy Connections button in the toolbar
when you power on the virtual machine.
Use existing floppy image in a Select this option to connect the virtual device to an existing floppy
datastore image on a datastore accessible to the host.
b Click Browse and select the floppy image.
Create new floppy image in a Select this option to create a floppy image on a datastore accessible to
datastore the host.
b Click Browse and browse to the location for the floppy image.
c Enter a name for the floppy image and click OK.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
5 Under Virtual Device Node, select the virtual device node where you want this device to appear in the
virtual machine.
6 Review the information in the Ready to Complete page, and click Finish.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and select a SCSI device in the Hardware list.
Under Virtual device node, select the virtual device node where you want this device to appear in the
virtual machine.
Snapshots are not supported with PCI vSphere Direct Path I/O devices.
Prerequisites
®
n To use DirectPath I/O, verify that the host has Intel Virtualization Technology for Directed I/O (VT-d)
or AMD I/O Virtualization Technology (IOMMU) enabled in the BIOS.
n Verify that the PCI devices are connected to the host and marked as available for passthrough.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 In the Add Hardware wizard, select PCI Device and click Next.
4 Select the passthrough device to connect to the virtual machine from the drop-down list and click Next.
5 Click Finish.
The default setting for total video RAM is adequate for minimal desktop resolution. For more complex
situations, you can change the default memory.
Some 3D applications require a minimum video memory of 64MB. Keep this in mind when you assign video
memory.
Prerequisites
Verify that the virtual machine is powered off.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 Select the display settings type and configure the available settings.
Option Description
Auto-detect video settings Applies common video settings to the guest operating system.
Specify custom settings Lets you select the number of displays and the total video memory.
The vSphere Client supports setting a number of displays and extending the screen across them. True
multimonitor support is not available with the vSphere Client.
This check box is active only for guest operating systems on which VMware supports 3D.
Sufficient memory allocation is set for the virtual machine’s video display.
Configuring vServices
A vService dependency allows a vApp or a virtual machine to request that a vService be available on a
specified platform.
A vService specifies a particular service on which vApps and virtual machines can depend.
The vService configuration tab monitors and manages vService dependencies. This tab displays all the
dependencies that a virtual machine or vApp has and each of their states. Each dependency shows the
dependency name, description, requirement, bound status, and provider name.
Procedure
1 Display the virtual machine or vApp in the inventory.
5 Click Add.
6 In the Add Dependency wizard, select the provider for this dependency and click Next.
8 (Optional) If this dependency is required, select the check box and click Next.
9 (Optional) If this dependency should be bound to the provider immediately, select the Bind to provider
immediately check box, and click Next after the validation is complete.
If you choose to bind this dependency now, the validation result displays. If the validation fails, you
cannot complete adding the dependency. Deselect the check box to proceed.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine or vApp and select Edit Settings
2 From the vServices tab in the Edit Settings dialog box, right-click on the dependency and click Edit.
3 In the Dependency Properties dialog box, edit the dependency name and description.
4 Select or deselect the check box to change the required status of the dependency.
The required check box is disabled if the virtual machine or vApp is running.
When you select a provider, the description is entered containing the provider description. The
validation box displays the results of the validation. If validation fails, the OK button is disabled until
another provider or no provider is selected.
6 Click OK.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine or vApp and select Edit Settings
2 From the vServices tab in the Edit Settings dialog box, select the dependency and click Remove.
The dependency is removed from the list.
A USB device is available to only one virtual machine at a time. When a device is connected to a powered-on
virtual machine, it is not available to connect to other virtual machines that run on the host. When you
remove the active connection of a USB device from a virtual machine, it becomes available to connect to
other virtual machines that run on the host.
Connecting a USB passthrough device to a virtual machine that runs on the ESXi host to which the device is
physically attached requires an arbitrator, a controller, and a physical USB device or device hub.
USB Arbitrator Manages connection requests and routes USB device traffic. The arbitrator is
installed and enabled by default on ESXi hosts. It scans the host for USB
devices and manages device connection among virtual machines that reside
on the host. It routes device traffic to the correct virtual machine instance for
delivery to the guest operating system. The arbitrator monitors the USB
device and prevents other virtual machines from using it until you release it
from the virtual machine it is connected to.
USB Controller The USB hardware chip that provides USB function to the USB ports that it
manages. The virtual USB Controller is the software virtualization of the USB
host controller function in the virtual machine.
USB controller hardware and modules that support USB 3.0, 2.0, and USB 1.1
devices must exist on the host. Eight virtual USB controllers are available to
each virtual machine. A controller must be present before you can add USB
devices to the virtual computer.
USB Devices You can add up to 20 USB devices to a virtual machine. This is the maximum
number of devices supported for simultaneous connection to one virtual
machine. The maximum number of USB devices supported on a single ESXi
host for simultaneous connection to one or more virtual machines is also 20.
For a list of supported USB devices, see the VMware knowledge base article
at http://kb.vmware.com/kb/1021345. You can add USB 3.0 devices to Mac
OSX guest operating system for VMware Fusion.
You can add one virtual xHCI controller, one virtual EHCI controller, and one virtual UHCI controller per
virtual machine. With Hardware Version 11, the supported number of root hub ports per xHCI controller is
eight (four logical USB 3.0 ports and four logical USB 2.0 ports).
The conditions for adding a controller vary, depending on the device version, the type of passthrough (host
or client computer), and the guest operating system.
xHCI 3.0, 2.0, and 1.1 Yes (USB 3.0, 2.0, and 1.1 Yes (Linux, Windows 8 and later, and
devices only) Windows Server 2012 and later
guests)
NOTE Drivers are not available for the xHCI controller on Windows guest operating systems.
For Mac OS X systems, the EHCI+UHCI controller is enabled by default and is required for USB mouse and
keyboard access.
For virtual machines with Linux guests, you can add one or both controllers, but 3.0 superspeed devices are
not supported for passthrough from an ESXi host to a virtual machine. You cannot add two controllers of
the same type.
For USB passthrough from an ESXi host to a virtual machine, the USB arbitrator can monitor a maximum of
15 USB controllers. If your system includes controllers that exceed the 15 controller limit and you connect
USB devices to them, the devices are not available to the virtual machine.
Prerequisites
n ESXi hosts must have USB controller hardware and modules that support USB 3.0, 2.0, and 1.1 devices
present.
n Client computers must have USB controller hardware and modules that support USB 3.0, 2.0, and 1.1
devices present.
n To use the xHCI controller on a Linux guest, ensure that the Linux kernel version is 2.6.35 or later.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and click Add.
5 Click Finish.
When you reopen the Properties Editor, the xHCI controller appears on the Hardware tab as USB xHCI
controller. The EHCI+UHCI controller appears as USB controller.
What to do next
Add one or more USB devices to the virtual machine.
Prerequisites
n Verify that all USB devices are disconnected from the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 Click Remove.
The controller is no longer connected to the virtual machine, but remains available to add at a later time.
Add USB Devices from an ESXi Host to a Virtual Machine in the vSphere Client
You can add one or more USB passthrough devices from an ESXi host to a virtual machine if the physical
device is connected to the host on which the virtual machine runs.
If a USB device is connected to another virtual machine, you cannot add it until that machine releases it.
NOTE If you have the Apple Frontpanel Controller device in your environment, you can safely add it to a
virtual machine. However, this device has no documented function and no known use. ESXi hosts do not
use it and do not provide Xserver functionality for USB passthrough
Prerequisites
n Verify that the virtual machine is using hardware version 7 or later.
n Verify that a USB controller is present. See “Add a USB Controller to a Virtual Machine in the vSphere
Client,” on page 174.
n To use vMotion to migrate a virtual machine with multiple USB devices, you must enable all attached
USB devices for vMotion. You cannot migrate individual USB devices.
n When you add a CD/DVD-ROM drive that is backed by a USB CD/DVD drive on the host, you must
add the drive as a SCSI device. Hot adding and removing SCSI devices is not supported.
n Verify that you know the virtual machine requirements for USB devices. See USB Configuration from
an ESXi Host to a Virtual Machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
5 If you do not plan to migrate a virtual machine with USB devices attached, deselect the Support
vMotion option.
This reduces migration complexity, which results in better performance and stability.
You can add multiple USB devices, but only one device at a time.
7 Click Finish.
When you reopen the Properties editor, the USB device appears on the Hardware tab of the Properties
Editor. The device type and ID appear in the right pane.
To minimize the risk of data loss, follow the instructions to safely unmount or eject hardware for your
operating system. Safely removing hardware allows accumulated data to be transmitted to a file. Windows
operating systems typically include a "Remove Hardware" icon located in the System Tray. Linux operating
systems use the umount command.
NOTE It might be necessary to use the sync command instead of or in addition to the umount command, for
example after you issue a dd command on Linux or other UNIX operating systems.
Procedure
1 Unmount or eject the USB device from the guest operating system.
2 Right-click the virtual machine and select Edit Settings.
4 Click Remove and click OK to save your changes and close the dialog box.
You can add up to 20 USB devices to a virtual machine. This is the maximum number of devices supported
for simultaneous connection to one virtual machine.
You can add multiple devices to a virtual machine, but only one at a time. The virtual machine retains its
connection to the device while in S1 standby. USB device connections are preserved when you migrate
virtual machines to another host in the datacenter.
A USB device is available to only one powered-on virtual machine at a time. When a virtual machine
connects to a device, that device is no longer available to other virtual machines or to the client computer.
When you disconnect the device from the virtual machine or shut the virtual machine down, the device
returns to the client computer and becomes available to other virtual machines that the client computer
manages.
For example, when you connect a USB mass storage device to a virtual machine, it is removed from the
client computer and does not appear as a drive with a removable device. When you disconnect the device
from the virtual machine, it reconnects to the client computer's operating system and is listed as a removable
device.
n The virtual machine that you connect the USB 3.0 device to must be configured with an xHCI controller
and have a Linux guest operating system with a 2.6.35 or later kernel.
n You can connect only one USB 3.0 device operating at superspeed to a virtual machine at a time.
n USB 3.0 devices are available only for passthrough from a client computer to a virtual machine. They
are not available for passthrough from an ESXi host to a virtual machine.
If the vSphere Client disconnects from the vCenter Server or host, or if you restart or shut down the client
computer, the device connection breaks. It is best to have a dedicated client computer for USB device use or
to reserve USB devices connected to a client computer for short-term use, such as updating software or
adding patches to virtual machines. To maintain USB device connections to a virtual machine for an
extended time, use USB passthrough from an ESXi host to the virtual machine.
The number of ports on each client computer depends on the physical setup of the client. When you
calculate the depth of hub chaining, remember that on a typical server the front ports connect to an internal
hub.
The USB arbitrator can monitor a maximum of 15 USB controllers. If your system includes controllers that
exceed the 15 controller limit and you connect USB devices to them, the devices are not available to the
virtual machine.
Prerequisites
Verify that you know the requirements for configuring USB devices from a remote computer to a virtual
machine.
Procedure
u To add a USB device to a client computer, connect the device to an available port or hub.
What to do next
You can now add the USB device to the virtual machine.
Add USB Devices From a Client Computer to a Virtual Machine in the vSphere
Client
You can add one or more USB passthrough devices from a client computer to a virtual machine in the
vSphere Client. The devices must be connected to a client computer that connects to the ESXi host on which
the virtual machines reside.
The devices maintain their virtual machine connections in S1 standby, if the vSphere Client is running and
connected. After you add the USB device to the virtual machine, an information message appears on the
client computer stating that the device is disconnected. The device remains disconnected from the client
computer until the virtual machine releases it.
FT is not supported with USB passthrough from a client computer to a virtual machine.
Prerequisites
n Verify that a USB controller is installed.
n Verify that the vSphere Client is connected to the ESXi host on which the virtual machines are running.
Procedure
1 Select the virtual machine in the vSphere Client inventory.
3 Select an available device from the Connect to USB Devices drop-down menu.
The device appears in the USB Connections drop-down menu and is ready to use. The device remains
connected until you power off the virtual machine or disconnect the vSphere Client from the ESXi host.
Remove USB Devices That Are Connected Through a Client Computer in the
vSphere Client
You can remove USB devices from a virtual machine if the devices are no longer needed. When you
disconnect a USB device from a virtual machine, the device is released from the virtual machine and is given
back to the client computer, which starts using it.
Prerequisites
To minimize the risk of data loss, follow the instructions to safely unmount or eject hardware for your
operating system. Safely removing hardware allows accumulated data to be transmitted to a file. Windows
operating systems typically include a "Remove Hardware" icon located in the System Tray. Linux operating
systems use the umount command.
NOTE You might need to use the sync command instead of or in addition to the umount command, for
example after you run a dd command on Linux or other UNIX operating systems.
Procedure
1 Unmount or eject the USB device from the guest operating system.
For example, select USB Device 1 > Disconnect from device name.
The device reconnects to the client computer and is available to add to another virtual machine. In some
cases, Windows Explorer detects the device and opens a dialog box on the client computer. You can close
this dialog box.
Power Management options are not available on every guest operating system. Wake on LAN supports
only Windows guest operating systems and is not available on Vlance NICs, or when a Flexible NIC is
operating in Vlance mode (that is, the current VMware Tools are not installed on the guest operating
system).
Wake on LAN can resume virtual machines that are in an S1 sleep state only. It cannot resume suspended,
hibernated, or powered off virtual machines.
n vmxnet
n Enhanced vmxnet
n vmxnet 3
Prerequisites
You must power off the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
n Put the guest OS into standby mode and leave the virtual machine powered on
4 (Optional) Select Wake on LAN for virtual machine traffic on and select the virtual NICs to trigger this
action.
You can modify many virtual machine configurations while the virtual machine is running, but you might
need to change the virtual machine power state for some configurations.
Table 15-5 lists available power buttons and describes their behavior.
Shuts down the guest operating system or powers off the virtual machine. A
power off operation displays a confirmation dialog box indicating that the
guest operating system might not shut down properly. Use this power off
option only when necessary.
Suspends the virtual machine without running a script when VMware Tools is
not installed. When VMware Tools is installed and available, a suspend action
runs a script, and suspends the virtual machine.
Resets the virtual machine when VMware Tools is not installed. Restarts the
guest operating system when VMware Tools is installed and available. A reset
operation displays a confirmation dialog box indicating that the guest
operating system is not shut down properly.
Prerequisites
n Verify that you have access to at least one virtual machine in the inventory.
n Verify that you have privileges to perform the intended power operation on the virtual machine.
n To set optional power functions, you must install VMWare Tools in the virtual machine.
n Power off the virtual machine before editing the VMware Tools options.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
3 In the right panel, select the Power Controls for the virtual machine.
Option Description
Shut Down Guest Uses VMware Tools to initiate an orderly system shut down of the virtual
machine. This type of powering off is known as a "soft" power operation.
Soft power operations are possible only if the tools are installed in the
guest operating system.
Power Off Immediately stops the virtual machine. This type of powering off is known
as a "hard" power operation.
System Default Follows system settings. The current value of the system settings is shown
in parentheses.
Option Description
Suspend Pauses all virtual machine activity.
System Default Follows system settings. The current value of the system setting is shown
in parentheses.
Option Description
Restart Guest Uses VMware Tools to initiate an orderly reboot. (This type of reset is
known as a "soft" power operation. Soft power operations are possible only
if the tools are installed in the guest operating system.)
Reset Shuts down and restarts the guest operating system without powering off
the virtual machine. (This type of reset is known as a "hard" power
operation.)
System Default Follows system settings; the current value of the system setting is shown in
parentheses.
What to do next
Configure VMware Tools scripts to run before or after power operations.
Delaying the boot operation is useful for changing BIOS or EFI settings such as the boot order. For example,
you can change the BIOS or EFI settings to force a virtual machine to boot from a CD-ROM.
Prerequisites
Required Privilege: Virtual machine.Configuration.Settings
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Options tab and under Advanced select Boot Options.
3 In the Power on Boot Delay panel, select the time in milliseconds to delay the boot operation.
4 (Optional) Select whether to force entry into the BIOS or EFI setup screen the next time the virtual
machine boots.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
In rare instances, you might find that when you install or run software in a virtual machine, the virtual
machine appears to stop responding. Generally, the problem occurs early in the program’s execution. Often,
you can get past the problem by temporarily disabling acceleration in the virtual machine.
Disabling acceleration slows down virtual machine performance. You must enable acceleration after the
program stops encountering problems to run the program with acceleration.
You can enable and disable acceleration when the virtual machine is running.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings
3 To enable debugging mode, select an option from the Debugging and Statistics pane.
n Run normally
n Record Statistics
The Virtual Machine Startup and Shutdown (automatic startup) feature is disabled for all virtual machines
residing on hosts that are in (or moved into) a vSphere HA cluster. Automatic startup is not supported
when used with vSphere HA.
Procedure
1 In the vSphere Client inventory, select the host where the virtual machine is located and click the
Configuration tab.
3 Select Allow virtual machines to start and stop automatically with the system.
Option Action
Default Startup Delay Select the amount of time to delay starting the operating system.
This delay allows time for VMware Tools or the booting system to run
scripts.
Continue immediately if the VMware Select to start the operating system immediately after VMware Tools starts.
Tools starts
Option Action
Default Shutdown Delay Select the amount of time to delay shutdown for each virtual machine.
The shutdown delay applies only if the virtual machine does not shut
down before the delay period elapses. If the virtual machine shuts down
before the delay time is reached, the next virtual machine starts shutting
down.
Shutdown Action Select a shutdown option from the drop-down menu.
n Power Off
n Suspend
n Guest Shutdown
Move Up and Move Down Select a virtual machine in the Manual Startup category and use the Move
Up button to move it up to Automatic Startup or Any Oder.
When virtual machines are in the Automatic Startup category, you can use
Move Up and Move Down to order them so that they start in a preferred
sequence. During shutdown, the virtual machines are stopped in the
opposite order.
Edit Click Edit to configure user-specified autostartup and shutdown behavior
for virtual machines in the Automatic Startup or Any Order category.
Procedure
1 In the vSphere Client inventory, select the virtual machine and click the Summary tab.
3 Click anywhere inside the console window to enable your mouse, keyboard, and other input devices to
work in the console.
Prerequisites
Power off the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Remove from Inventory.
2 To confirm that you want to remove the virtual machine from the inventory, click Yes.
The host removes references to the virtual machine and no longer tracks its condition.
Prerequisites
Power off the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Delete from Disk.
The host deletes the virtual machine from its datastore. Disks that are shared with other virtual machines
are not deleted.
Procedure
1 In the vSphere Client, navigate to Home > Inventory > Datastores and Datastore Clusters.
4 Right-click the virtual machine or template .vmx file and select Add to Inventory.
5 Complete the Add to Inventory wizard to add the virtual machine or template.
You can take multiple snapshots of a virtual machine to create restoration positions in a linear process. With
multiple snapshots, you can save many positions to accommodate many kinds of work processes. Snapshots
operate on individual virtual machines. Taking snapshots of multiple virtual machines, for example, taking
snapshots for all members of a team, requires that you take a separate snapshot of each team member's
virtual machine.
Snapshots are useful as a short term solution for testing software with unknown or potentially harmful
effects. For example, you can use a snapshot as a restoration point during a linear or iterative process, such
as installing update packages, or during a branching process, such as installing different versions of a
program. Using snapshots ensures that each installation begins from an identical baseline.
With snapshots, you can preserve a baseline before diverging a virtual machine in the snapshot tree.
The Snapshot Manager in the vSphere Web Client and the vSphere Client provide several operations for
creating and managing virtual machine snapshots and snapshot trees. These operations let you create
snapshots, restore any snapshot in the snapshot hierarchy, delete snapshots, and more. You can create
extensive snapshot trees that you can use to save the virtual machine state at any specific time and restore
the virtual machine state later. Each branch in a snapshot tree can have up to 32 snapshots.
n Virtual machine settings. The virtual machine directory, which includes disks that were added or
changed after you took the snapshot.
n Power state. The virtual machine can be powered on, powered off, or suspended.
Parent Snapshots The first virtual machine snapshot that you create is the base parent
snapshot. The parent snapshot is the most recently saved version of the
current state of the virtual machine. Taking a snapshot creates a delta disk
file for each disk attached to the virtual machine and optionally, a memory
file. The delta disk files and memory file are stored with the base .vmdk file.
The parent snapshot is always the snapshot that appears immediately above
the You are here icon in the Snapshot Manager. If you revert or restore a
snapshot, that snapshot becomes the parent of the You are here current state.
NOTE The parent snapshot is not always the snapshot that you took most
recently.
Child Snapshots A snapshot that is taken of the same virtual machine after the parent
snapshot. Each child constitutes delta files for each attached virtual disk, and
optionally a memory file that points from the present state of the virtual disk
(You are here). Each child snapshot's delta files merge with each previous
child snapshot until reaching the parent disks. A child disk can later be a
parent disk for future child disks.
The relationship of parent and child snapshots can change if you have multiple branches in the snapshot
tree. A parent snapshot can have more than one child. Many snapshots have no children.
IMPORTANT Do not manually manipulate individual child disks or any of the snapshot configuration files
because doing so can compromise the snapshot tree and result in data loss. This restriction includes disk
resizing and making modifications to the base parent disk using vmkfstools.
Snapshot Behavior
Taking a snapshot preserves the disk state at a specific time by creating a series of delta disks for each
attached virtual disk or virtual RDM and optionally preserves the memory and power state by creating a
memory file. Taking a snapshot creates a snapshot object in the Snapshot Manager that represents the
virtual machine state and settings.
Each snapshot creates an additional delta .vmdk disk file. When you take a snapshot, the snapshot
mechanism prevents the guest operating system from writing to the base .vmdk file and instead directs all
writes to the delta disk file. The delta disk represents the difference between the current state of the virtual
disk and the state that existed at the time that you took the previous snapshot. If more than one snapshot
exists, delta disks can represent the difference between each snapshot. Delta disk files can expand quickly
and become as large as the entire virtual disk if the guest operating system writes to every block of the
virtual disk.
When you take a snapshot, other activity that is occurring in the virtual machine might affect the snapshot
process when you revert to that snapshot. The best time to take a snapshot from a storage perspective, is
when you are not incurring a large I/O load. The best time to take a snapshot from a service perspective is
when no applications in the virtual machine are communicating with other computers. The potential for
problems is greatest if the virtual machine is communicating with another computer, especially in a
production environment. For example, if you take a snapshot while the virtual machine is downloading a
file from a server on the network, the virtual machine continues downloading the file and communicating
its progress to the server. If you revert to the snapshot, communications between the virtual machine and
the server are confused and the file transfer fails. Depending on the task that you are performing, you can
create a memory snapshot or you can quiesce the file system in the virtual machine.
Memory Snapshots The default selection for taking snapshots. When you capture the virtual
machine's memory state, the snapshot retains the live state of the virtual
machine. Memory snapshots create a snapshot at a precise time, for example,
to upgrade software that is still working. If you take a memory snapshot and
the upgrade does not complete as expected, or the software does not meet
your expectations, you can revert the virtual machine to its previous state.
When you capture the memory state, the virtual machine's files do not
require quiescing. If you do not capture the memory state, the snapshot does
not save the live state of the virtual machine and the disks are crash
consistent unless you quiesce them.
Quiesced Snapshots When you quiesce a virtual machine, VMware Tools quiesces the file system
of the virtual machine. A quiesce operation ensures that a snapshot disk
represents a consistent state of the guest file systems. Quiesced snapshots are
appropriate for automated or periodic backups. For example, if you are
unaware of the virtual machine's activity, but want several recent backups to
revert to, you can quiesce the files.
If the virtual machine is powered off or VMware Tools is not available, the
Quiesce parameter is not available. You cannot quiesce virtual machines that
have large capacity disks.
IMPORTANT Do not use snapshots as your only backup solution or as a long-term backup solution.
Change Disk Mode to Exclude Virtual Disks from Snapshots in the vSphere Client
You can set a virtual disk to independent mode to exclude the disk from any snapshots taken of its virtual
machine.
Prerequisites
Power off the virtual machine and delete any existing snapshots before you change the disk mode. Deleting
a snapshot involves committing the existing data on the snapshot disk to the parent disk.
Required privileges:
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Edit Settings.
2 Click the Hardware tab and select the hard disk to exclude.
NOTE Any disk, regardless of its type, that is created after you take a snapshot does not appear if you
revert to that snapshot.
Option Description
Independent - Persistent Disks in persistent mode behave like conventional disks on your physical
computer. All data written to a disk in persistent mode are written
permanently to the disk.
Independent - Nonpersistent Changes to disks in nonpersistent mode are discarded when you power off
or reset the virtual machine. With nonpersistent mode, you can restart the
virtual machine with a virtual disk in the same state every time. Changes
to the disk are written to and read from a redo log file that is deleted when
you power off or reset.
5 Click OK.
When you create a memory snapshot, the snapshot captures the state of the virtual machine's memory and
the virtual machine power settings. When you capture the virtual machine's memory state, the snapshot
operation takes longer to complete. You might also see a momentary lapse in response over the network.
When you quiesce a virtual machine, VMware Tools quiesces the file system in the virtual machine. The
quiesce operation pauses or alters the state of running processes on the virtual machine, especially processes
that might modify information stored on the disk during a restore operation.
NOTE You cannot revert to a snapshot with dynamic disks, so quiesced snapshots are not used when you
restore dynamic disks. Snapshot technology has no visibility into Dynamic Disks. Dynamic Disks are
commonly known as Microsoft specific file systems.
Prerequisites
n If you are taking a memory snapshot of a virtual machine that has multiple disks in different disk
modes, verify that the virtual machine is powered off. For example, if you have a special purpose
configuration that requires you to use an independent disk, you must power off the virtual machine
before taking a snapshot.
n To capture the memory state of the virtual machine, verify that the virtual machine is powered on.
n To quiesce the virtual machine files, verify that the virtual machine is powered on and that VMware
Tools is installed.
n Required privilege: Virtual machine.Snapshot management. Create snapshot on the virtual machine.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine and select Snapshot > Take Snapshot.
Adding a date and time or a description, for example, "Snapshot before applying XYZ patch," can help
you determine which snapshot to restore or delete.
4 (Optional) When the virtual machine is powered on, select the Snapshot the virtual machine’s memory
check box to capture the memory of the virtual machine.
5 (Optional) When the virtual machine is powered on, select the Quiesce guest file system (Needs
VMware Tools installed) check box to pause running processes on the guest operating system so that
file system contents are in a known consistent state when you take the snapshot.
6 Click OK.
After you take the snapshot, you can view its status in the Recent Tasks field at the bottom of the vSphere
Client.
Restoring Snapshots
To return a virtual machine to its original state, or to return to another snapshot in the snapshot hierarchy,
you can restore a snapshot.
When you restore a snapshot, you return the virtual machine's memory, settings, and the state of the virtual
machine disks to the state they were in at the time you took the snapshot. If you want the virtual machine to
be suspended, powered on, or powered off when you start it, make sure that it is in the correct state when
you take the snapshot.
Revert to Latest Restores the parent snapshot, one level up in the hierarchy from the You are
Snapshot Here position. Revert to Latest Snapshot activates the parent snapshot of the
current state of the virtual machine.
Revert To Lets you restore any snapshot in the snapshot tree and makes that snapshot
the parent snapshot of the current state of the virtual machine. Subsequent
snapshots from this point create a new branch of the snapshot tree.
n The current disk and memory states are discarded, and the virtual machine reverts to the disk and
memory states of the parent snapshot.
n Existing snapshots are not removed. You can restore those snapshots at any time.
n If the snapshot includes the memory state, the virtual machine will be in the same power state as when
you created the snapshot.
Powered on (includes memory) Reverts to the parent snapshot, and the virtual machine is
powered on and running.
Powered on (does not include memory) Reverts to the parent snapshot and the virtual machine is
powered off.
Powered off (does not include memory) Reverts to the parent snapshot and the virtual machine is
powered off.
Virtual machines running certain kinds of workloads can take several minutes to resume responsiveness
after reverting from a snapshot.
NOTE vApp metadata for virtual machines in vApps does not follow the snapshot semantics for virtual
machine configuration. vApp properties that are deleted, modified, or defined after a snapshot is taken
remain intact (deleted, modified, or defined) after the virtual machine reverts to that snapshot or any
previous snapshots.
When you revert to a snapshot, disks that you added or changed after the snapshot was taken are reverted
to the snapshot point. For example, when you take a snapshot of a virtual machine, add a disk, and revert
the snapshot, the added disk is removed.
Prerequisites
Required privilege: Virtual machine.Snapshot management.Revert to snapshot on the virtual machine.
Procedure
u Right-click a virtual machine in the vSphere Client inventory and select Revert to Current Snapshot.
The virtual machine power and data states are returned to the states they were in at the time you took the
parent snapshot. If the parent snapshot is a memory snapshot, the virtual machine is restored to an on
power state.
NOTE Virtual machines running certain kinds of workloads might take several minutes to resume
responsiveness after reverting from a snapshot.
Prerequisites
Required privilege: Virtual machine.Snapshot management.Revert to snapshot on the virtual machine
Procedure
1 Right-click a virtual machine in the vSphere Client inventory and select Snapshot Manager.
Subsequent child snapshots from this point create a new branch of the snapshot tree. The delta disks for
snapshots that you took after you restored the current snapshot are not removed and you can restore those
snapshots at any time.
Deleting Snapshots
Deleting a snapshot removes the snapshot from the Snapshot Manager. The snapshot files are consolidated
and written to the parent snapshot disk and merge with the virtual machine base disk.
Deleting a snapshot leaves the current state of the virtual machine or any other snapshot untouched.
Deleting a snapshot consolidates the changes between snapshots and previous disk states and writes to the
parent disk all data from the delta disk that contains the information about the deleted snapshot. When you
delete the base parent snapshot, all changes merge with the base virtual machine disk.
Deleting snapshots involves large amounts of disk reads and writes, which can reduce virtual machine
performance until consolidation is complete. Consolidating snapshots removes redundant disks, which
improves virtual machine performance and saves storage space. The time it takes to delete snapshots and
consolidate the snapshot files depends on the volume of data that the guest operating system wrote to the
virtual disks after you took the last snapshot. The required time is proportional to the amount of data the
virtual machine is writing during consolidation if the virtual machine is powered on.
If disk consolidation fails when you delete a snapshot or delete all snapshots and you notice a degradation
in virtual machine performance, you can view a list of virtual machines to determine if any files require
consolidation, and if so, run a separate consolidation operation. For information about locating and viewing
the consolidation state of multiple virtual machines and running a separate consolidation operation, see
“Consolidate Snapshots in the vSphere Client,” on page 194
Delete Use the Delete option to remove a single parent or child snapshot from the
snapshot tree. Delete writes disk changes between the snapshot and the
previous delta disk state to the parent snapshot.
You can also use the Delete option to remove a corrupt snapshot and its files
from an abandoned branch of the snapshot tree without merging them with
the parent snapshot.
Delete All Use the Delete All option to delete all snapshots from the Snapshot
Manager. Delete all consolidates and writes changes between snapshots and
previous delta disk states to the base parent disk and merges them with the
base virtual machine disk.
To prevent snapshot files from merging with the parent snapshot, for example in cases of failed updates or
installations, first use the Go to command to restore to a previous snapshot. This action invalidates the
snapshot delta disks and deletes the memory file. You can then use the Delete option to remove the
snapshot and any associated files.
Use care when you delete snapshots. You cannot restore a deleted snapshot. For example, you might want
to install several browsers, a, b, and c, and capture the virtual machine state after you install each browser.
The first, or base snapshot, captures the virtual machine with browser a and the second snapshot captures
browser b. If you restore the base snapshot that includes browser a and take a third snapshot to capture
browser c and delete the snapshot that contains browser b, you cannot return to the virtual machine state
that includes browser b.
Prerequisites
n Ensure that you are familiar with the Delete and Delete all actions and how they might affect virtual
machine performance. See “Deleting Snapshots,” on page 193.
Procedure
1 Select Inventory > Virtual Machine > Snapshot > Snapshot Manager.
Option Description
Delete Consolidates the snapshot data to the parent snapshot and removes the
selected snapshot from the Snapshot Manager and virtual machine.
Delete All Consolidates all of the immediate snapshots before the You are here
current state to the base parent disk and removes all existing snapshots
from the Snapshot Manager and virtual machine.
4 Click Yes.
Snapshot consolidation is useful when snapshot disks fail to compact after a Delete or Delete all operation
or if the disk did not consolidate. This might happen, for example, if you delete a snapshot but its associated
disk does not commit back to the base disk.
The Needs Consolidation column in the vSphere Client shows the virtual machines that need to be
consolidated and the virtual machine's Summary tab shows a Configuration Issues consolidation message if
the virtual machine needs to be consolidated. If you see errors for failed conditions, such as running out of
disk space, correct them and run the consolidation task.
Prerequisites
Required privilege: Virtual machine.Snapshot management.Remove Snapshot
Procedure
1 Display the Need Consolidation column in the vSphere Client.
a Select a vCenter Server, host, or cluster and click the Virtual Machines tab.
b Right-click the menu bar for any virtual machine column and select Needs Consolidation from the
menu.
The Needs Consolidation column appears. A Yes status indicates that the snapshot files for the virtual
machine should be consolidated and that the virtual machine's Tasks and Events tab shows a
configuration problem. A No status indicates that the files are OK.
2 To consolidate the files, right-click the virtual machine and select Snapshot > Consolidate.
3 Check the Need Consolidation column to verify that the task succeeded.
If the task succeeded, the Configuration Issues message should be cleared and the Needs Consolidation
value should be No.
A vApp is a container, like a resource pool and can contain one or more virtual machines. A vApp also
shares some functionality with virtual machines. A vApp can power on and power off, and can also be
cloned.
In the vSphere Client, a vApp is represented in both the Host and Clusters view and the VM and Template
view. Each view has a specific summary page with the current status of the service and relevant summary
information, as well as operations on the service.
NOTE The vApp metadata resides in the vCenter Server's database, so a vApp can be distributed across
multiple ESXi hosts. This information can be lost if the vCenter Server database is cleared or if a standalone
ESXi host that contains a vApp is removed from vCenter Server. You should back up vApps to an OVF
package to avoid losing any metadata.
vApp metadata for virtual machines within vApps do not follow the snapshots semantics for virtual
machine configuration. So, vApp properties that are deleted, modified, or defined after a snapshot is taken
remain intact (deleted, modified, or defined) after the virtual machine reverts to that snapshot or any prior
snapshots.
You can use VMware Studio to automate the creation of ready-to-deploy vApps with pre-populated
application software and operating systems. VMware Studio adds a network agent to the guest so that
vApps bootstrap with minimal effort. Configuration parameters specified for vApps appear as OVF
properties in the vCenter Server deployment wizard. For information about VMware Studio and for
download, see the VMware Studio developer page on the VMware web site.
This chapter includes the following topics:
Create a vApp
A vApp allows you to perform resource management and certain other management activities such as
power operations for multiple virtual machines at the same time. You can think of the vApp as the container
for the virtual machines, and you can perform the operations on the container.
When you create a vApp, you can add it to a folder, standalone host, resource pool, cluster enabled for DRS,
or another vApp.
Prerequisites
Verify that one of those objects is available in your datacenter.
Procedure
1 Navigate to an object that supports vApp creation and select the New vApp icon ( ).
2 In the vApp Name text box, type a name for the vApp.
n If you start the action from a folder or vApp, you are prompted for a host, cluster, or resource pool.
n If you start the action from a resource pool, host, or cluster, you are prompted for a folder or data
center.
4 In the Resource Allocation page, allocate CPU and memory resources to this vApp.
Option Description
Shares CPU shares for this vApp with respect to the parent's total. Sibling
vApps share resources according to their relative share values bounded
by the reservation and limit. Select Low, Normal, or High, which
specify share values respectively in a 1:2:4 ratio. Select Custom to give
each vApp a specific number of shares, which express a proportinal
weight.
Reservation Guaranteed CPU allocation for this vApp.
Reservation Type Select the Expandable check box to make the reservation expandable.
When the vApp is powered on, if the combined reservations of its
virtual machines are larger than the reservation of the vApp, the vApp
can use resources from its parent or ancestors.
Limit Upper limit for this vApp's CPU allocation. Select Unlimited to specify
no upper limit.
Option Description
Shares Memory shares for this vApp with respect to the parent's total. Sibling
vApps share resources according to their relative share values bounded
by the reservation and limit. Select Low, Normal, or High, which
specify share values respectively in a 1:2:4 ratio. Select Custom to give
each vApp a specific number of shares, which express a proportinal
weight.
Reservation Guaranteed memory allocation for this vApp.
Reservation Type Select the Expandable check box to make the reservation expandable.
When the vApp is powered on, if the combined reservations of its
virtual machines are larger than the reservation of the vApp, the vApp
can use resources from its parent or ancestors.
Limit Upper limit for this vApp's memory allocation. Select Unlimited to
specify no upper limit.
5 Click Next.
When powering on a vApp within a DRS cluster in manual mode, no DRS recommendations are generated
for virtual machine placements. The power-on operation performs as if DRS is run in a semiautomatic or
automatic mode for the initial placements of the virtual machines. This does not affect vMotion
recommendations. Recommendations for individual powering on and powering off of virtual machines are
also generated for vApps that are running.
Procedure
u In the Summary page for the service, click Power On.
If a delay is set in the startup settings, the vApp waits for the set length of time before powering up that
virtual machine.
In the Summary tab, the status indicates when the vApp has started and is available. Links to the product
and vendor Web sites are also found under the General section.
Clone a vApp
Cloning a vApp is similar to cloning a virtual machine.
Prerequisites
To clone a vApp, the vSphere Client must be connected to the vCenter Server system.
A host must be selected in the inventory that is running ESX 4.0 or greater, or a cluster enabled with DRS.
Procedure
1 Select the vApp in the inventory.
NOTE This step is available only if you select a cluster that is in DRS manual mode.
5 Enter a name for the vApp clone and select the vApp Inventory Location, then click Next.
7 Select a disk format to store the virtual machines virtual disks and click Next.
n Thick format
Procedure
u In the Summary page for the service, click Power Off.
If a delay is set in the shutdown settings, the vApp waits for the set length of time before powering
down that virtual machine.
The virtual machines within a vApp are suspended based on their stop order. All virtual machines are
suspended regardless of stop action.
Procedure
1 From the vSphere Client select the vApp you want to place in suspended state.
The suspended virtual machines within the vApp are resumed in reverse order to the order in which they
were suspended.
Procedure
1 From the vSphere Client, select the vApp.
After you create a vApp, you can populate it with virtual machines or other vApps.
Procedure
1 In the inventory, select the vApp in which you want to create the object machine.
An existing virtual machine or another vApp that is not already contained inside the vApp can be moved
into the currently selected vApp.
Procedure
1 Display the object in the inventory.
n If the move is permitted, a box appears around the target-object, indicating it is selected.
n If the move is not permitted, a naught sign (zero with a slash) appears, and the object is not moved.
Either the object moves to the new location or an error message indicates what needs to be done to
permit the move.
Procedure
1 On the Summary page of the vApp, click Edit Settings.
NOTE The deployer typically edits the IP allocation policy and properties. The vApp author typically
edits the other, more advanced settings.
3 Click the Start Order tab to edit vApp startup and shutdown options.
4 Click OK.
Procedure
1 On the Summary page of the vApp, click Edit Settings.
2 In the Start Order tab of the Edit vApp Settings window, select a virtual machine and use the arrow
keys to change the startup order.
Virtual Machines and vApps with the same start order (or within the same grouping) will start
concurrently with each other.
3 Select the startup and shutdown action for each virtual machine.
4 (Optional) Use the arrow keys to change the time delay for startup and shutdown for each virtual
machine.
5 Click OK.
Reservations on vApps and all their child resource pools, child vApps, and child virtual machines count
against the parent resources only when they are powered on.
Procedure
1 On the Summary page of the vApp, click Edit Settings.
4 Click OK.
Procedure
1 On the Summary page of the vApp, click Edit Settings.
4 Click OK.
Prerequisites
n For automatic (transient) IP allocation to work, you must use the vSphere Client and configure an IP
pool. See “Configuring IP Pools,” on page 204.
Procedure
1 On the Summary page of the vApp, click Edit Settings.
Option Description
Fixed IP addresses are manually configured. No automatic allocation is
performed.
Transient IP addresses are automatically allocated using IP pools from a specified
range when the vApp is powered on. The IP addresses are released when
the appliance is powered off.
DHCP A DHCP server is used to allocate the IP addresses. The addresses
assigned by the DHCP server are visible in the OVF environments of
virtual machines started in the vApp.
4 Click OK.
Procedure
1 Display the virtual machine or vApp in the inventory.
5 Click Add.
6 In the Add Dependency wizard, select the provider for this dependency and click Next.
8 (Optional) If this dependency is required, select the check box and click Next.
Required dependencies must be bound before powering on.
9 (Optional) If this dependency should be bound to the provider immediately, select the Bind to provider
immediately check box, and click Next after the validation is complete.
If you choose to bind this dependency now, the validation result displays. If the validation fails, you
cannot complete adding the dependency. Deselect the check box to proceed.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine or vApp and select Edit Settings
2 From the vServices tab in the Edit Settings dialog box, right-click on the dependency and click Edit.
3 In the Dependency Properties dialog box, edit the dependency name and description.
4 Select or deselect the check box to change the required status of the dependency.
The required check box is disabled if the virtual machine or vApp is running.
When you select a provider, the description is entered containing the provider description. The
validation box displays the results of the validation. If validation fails, the OK button is disabled until
another provider or no provider is selected.
6 Click OK.
Procedure
1 In the vSphere Client inventory, right-click the virtual machine or vApp and select Edit Settings
2 From the vServices tab in the Edit Settings dialog box, select the dependency and click Remove.
Procedure
1 On the Summary page of the vApp, click Edit Settings.
3 Set and configure the settings that appear on the summary page of the virtual machine.
If you configure the virtual machine to use the property called webserver_ip and the virtual machine has
a web server, you can enter http://${webserver_ip}/ as the Application URL.
4 (Optional) Click View to test the Product URL and Vendor URL.
7 Click OK.
Procedure
1 On the Summary page of the vApp, click Edit Settings.
3 Click Properties.
5 Click OK.
Procedure
1 On the Summary page of the vApp, click Edit Settings.
3 Click IP Allocation.
4 In the Advanced IP Allocation dialog box, you can perform the following actions.
5 Click OK.
Configuring IP Pools
IP pools provide a network identity to vApps. An IP pool is a network configuration that is assigned to a
network used by a vApp. The vApp can then leverage vCenter Server to automatically provide an IP
configuration to its virtual machines.
IP pool ranges are configured with IPv4 and IPv6. vCenter Server uses these ranges to dynamically allocate
IP addresses to virtual machines when a vApp is set up to use transient IP allocation.
Procedure
1 In the inventory, select the datacenter that contains the vApp.
2 In the IP Pools tab, right-click the IP pool that you want to edit and select Properties.
3 In the Properties dialog box, select the IPv4 or the IPv6 tab, depending on your IP protocol.
4 Enter the IP Subnet and Gateway in their respective fields.
6 (Optional) Enter a comma-separated list of host address ranges in the Ranges field.
A range consists of an IP address, a pound sign (#), and a number indicating the length of the range.
The gateway and the ranges must be within the subnet, but must exclude the gateway address.
For example, 10.20.60.4#10, 10.20.61.0#2 indicates that the IPv4 addresses can range from 10.20.60.4
to 10.209.60.13 and 10.20.61.0 to 10.20.61.1.
7 Click OK.
Select DHCP
You can specify that an IPv4 or IPv6 DHCP server is available on the network.
Procedure
1 In the inventory, select the datacenter that contains the vApp you are configuring.
2 In the IP Pools tab, right-click the IP pool that you want to edit and select Properties.
4 Select either the IPv4 DHCP Present or IPv6 DHCP Present check box to indicate that one of the DHCP
servers is available on this network.
5 Click OK.
Procedure
1 In the inventory, select the datacenter that contains the vApp you are configuring.
2 In the IP Pools tab, right-click the IP pool that you want to edit and select Properties.
n DNS Domain
n Host Prefix
5 Click OK.
Procedure
1 In the inventory, select the datacenter that contains the vApp.
2 In the IP Pools tab, right-click the IP pool that you want to edit and select Properties.
The server name can optionally include a colon and a port number.
5 Click OK.
Procedure
1 In the inventory, select the datacenter that contains the vApp.
2 In the IP Pools tab, right-click the IP pool that you want to edit and select Properties.
5 Click OK.
Procedure
1 Select the vApp in the inventory.
5 Click OK.
You can monitor and manage vSphere solutions from the vSphere Client or the vSphere Web Client. Both
clients display an inventory of vSphere solutions and details about each solution.
A solution is an extension of the vCenter Server that adds new functions to a vCenter Server instance. For
example, vSphere ESX Agent Manager is a standard vCenter solution provided by VMware that allows you
to manage ESX host agents that add new capabilities to ESX hosts. Another standard solution that vSphere
provides is vService Manager. VMware products that integrate with vCenter Sever are also considered
solutions. You can install a solution to add functionality from third-party technologies to the standard
functions of vCenter Server. Solutions typically are delivered as OVF packages. You can install and deploy
solutions from vSphere Client. Solutions can be integrated into the vCenter Solutions Manager.
If a virtual machine or vApp is running a solution, a custom icon appears next to it in the inventory view of
the vSphere Client. When you power on or power off a virtual machine or vApp, you are notified that you
are performing this operation on an entity that is managed by the solution manager.
Each solution registers a unique icon to identify that the virtual machine or vApp is being managed by that
solution. The icons show the power states (powered on, paused, powered off).
The solutions display more than one type of icon if they manage more than one type of virtual machine or
vApp.
When you attempt an operation on a virtual machine or a vApp that is managed by a solution, an
informational warning message appears.
For more information, see the Developing and Deploying vSphere Solutions, vServices, and ESX Agents
documentation.
Viewing Solutions
You can deploy, monitor, and interact with solutions that are installed in a vCenter Server instance with the
vCenter Solutions Manager. The Solutions Manager displays information about the health of a solution.
You can navigate to the Solutions Manager from the home page of the vSphere Client. The Solutions
Manager view displays information about the solution:
n Solution name
n Solution health
n vService providers
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Click the Solutions Manager icon from vSphere Client home.
n Summary tab. Lists the number of installed solutions and a brief health overview for each of the
solutions.
n Health tab. Provides the health status of the vCenter services. It also shows alerts or warnings for
each of the services.
n Summary tab. Lists information about the solution, including a link to the product and vendor
Web sites, a link to launch the management UI in a separate window, and a link to the virtual
machine or vApp running this solution.
Selecting the vendor Web site link takes you to the Summary page of the virtual machine or vApp.
A link under "Managed by" returns you to the solution.
n Virtual Machines tab. Lists all the virtual machines belonging to the solution
Monitoring Agents
The vCenter Solutions Manager displays the vSphere ESX Agent Manager agents that you use to deploy and
manage related agents on ESX/ESXi hosts.
You can use the Solutions Manager to keep track of whether the agents of a solution are working as
expected. Outstanding issues are reflected by the solution's ESX Agent Manager status and a list of issues.
When the status of a solution changes, the Solutions Manager updates the ESX Agent Manager summary
status and state. Administrators use this status to track whether the goal state is reached.
Red The solution must intervene for the ESX Agent Manager to
proceed. For example, if a virtual machine agent is
powered off manually on a compute resource and the ESX
Agent Manager does not attempt to power on the agent.
The ESX Agent Manager reports this action to the solution,
and the solution alerts the administrator to power on the
agent.
Green A solution and all its agents have reached the goal state.
Monitoring vServices
A vService is a service or function that a solution provides to virtual machines and vApps. A solution can
provide one or more vServices. These vServices integrate with the platform and are able to change the
environment in which the vApp or virtual machine runs.
A vService is a type of service for a virtual machine and a vApp provided by a vCenter extension. Virtual
machines and vApps can have dependencies on vServices. Each dependency is associated with a vService
type. The vService type must be bound to a particular vCenter extension that implements that vService type.
This vService type is similar to a virtual hardware device. For example, a virtual machine can have a
networking device that at deployment must be connected to a particular network.
The vService Manager allows a solution to connect to operations related to OVF templates:
n Importing OVF templates. Receive a callback when OVF templates with a vService dependancy of a
certain type is imported.
n Exporting OVF templates. Inserts OVF sections when a virtual machine is exported.
n OVF environment generation. Inserts OVF sections into the OVF environment at the power-on instance.
The vServices tab in the Solution Manager provides details for each vCenter extension. This information
allows you to monitor vService providers and list the virtual machines or vApps to which they are bound.
Host profiles eliminates per-host, manual, or UI-based host configuration and maintains configuration
consistency and correctness across the datacenter by using host profile policies. These policies capture the
blueprint of a known, validated reference host configuration and use this to configure networking, storage,
security, and other settings on multiple hosts or clusters. You can then check a host or cluster against a
profile’s configuration for any deviations.
You must have an existing vSphere installation with at least one properly configured host.
1 Set up and configure the host that will be used as the reference host.
4 Check the host's compliance to the reference host's profile. If all hosts are compliant with the reference
host, they are correctly configured.
5 Apply the host profile of the reference host to other hosts or clusters of hosts.
Using host profiles is only supported for VMware vSphere 4.0 hosts or later. This feature is not supported
for VMware Infrastructure 3.5 or earlier hosts. If you have VMware Infrastructure 3.5 or earlier hosts
managed by your vCenter Server 4.0 or later, the following problems can occur if you try to use host profiles
for those hosts:
n You cannot create a host profile that uses a VMware Infrastructure 3.5 or earlier host as a reference host.
n You cannot apply a host profile to any VMware Infrastructure 3.5 or earlier hosts. The compliance check
fails.
n While you can attach a host profile to a mixed cluster that contains VMware Infrastructure 3.5 or earlier
hosts, the compliance check for those earlier hosts fails.
As a licensed feature of vSphere, host profiles are only available when the appropriate licensing is in place.
If you see errors, ensure that you have the appropriate vSphere licensing for your hosts.
If you want the host profile to use directory services for authentication, the reference host needs to be
configured to use a directory service. See the vSphere Security documentation.
The Host Profiles main view should be used by experienced administrators who wish to perform host
profile operations and configure advanced options and policies. Most operations such as creating new
profiles, attaching entities, and applying profiles can be performed from the Hosts and Clusters view.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
u Select View > Management > Host Profiles.
Any existing profiles are listed on the left side in the profiles list. When a profile is selected from the profile
list, the details of that profile are displayed on the right side.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
You must have a vSphere installation and at least one properly configured host in the inventory.
Procedure
1 In the Host Profiles main view, click Create Profile.
3 Select the host you want to designate as the reference host for the new host profile and click Next.
4 Type the name and enter a description for the new profile and click Next.
5 Review the summary information for the new profile and click Finish to complete creating the profile.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
You must have a vSphere installation and at least one properly configured host in the inventory.
Procedure
1 In the Host and Clusters view, select the host that you want to designate as the reference host for the
new host profile.
3 Type the name and enter a description for the new profile and click Next.
4 Review the summary information for the new profile and click Finish to complete creating the profile.
NOTE When a host profile is exported, administrator and user profile passwords are not exported. This is a
security measure and stops passwords from being exported in plain text when the profile is exported. You
will be prompted to re-enter the values for the password after the profile is imported and the password is
applied to a host.
Procedure
1 In the Host Profiles view page, select the profile to export from the profile list.
3 Select the location and type the name of the file to export the profile.
4 Click Save.
NOTE When a host profile is exported, administrator and user profile passwords are not exported. This is a
security measure and stops passwords from being exported in plain text when the profile is exported. You
will be prompted to re-enter the values for the password after the profile is imported and the password is
applied to a host.
Procedure
1 In the Host Profiles main view, click the Create Profile icon.
The Create Profile wizard appears.
3 Enter or browse the VMware Profile Format file to import and click Next.
4 Select a valid host you want to designate as the reference host for the imported profile and click Next.
5 Type the name, enter a description for the imported profile, and click Next when finished.
6 Review the summary information for the imported profile and click Finish to complete importing the
profile.
Procedure
1 In the Host Profiles main view, select the profile to clone.
Procedure
1 In the Host Profiles main view, select the profile to edit from the profile list.
3 (Optional) Change the profile name or description in the fields at the top of the Profile Editor.
Edit a Policy
A policy describes how a specific configuration setting should be applied. The Profile Editor allows you to
edit policies belonging to a specific host profile.
On the left side of the Profile Editor, you can expand the host profile. Each host profile is composed of
several subprofiles that are designated by functional group to represent configuration instances. Each
subprofile contains many policies and compliance checks that describe the configuration that is relevant to
the profile. You can configure certain subprofiles, example policies, and compliance checks.
Each policy consists of one or more options that contains one or more parameters. Each parameter consists
of a key and a value. The value can be one of a few basic types, for example integer, string, string array, or
integer array.
Storage Configure storage options, including n Use the vSphere CLI to configure or modify
Native Multi-Pathing (NMP), Pluggable the NMP and PSA policies on a reference
Storage Architecture (PSA), FCoE and host first, and then extract the host profile
iSCSI adapters, and NFS storage. from that host. If you use the Profile Editor
to edit the policies, to avoid compliance
failures, make sure that you thoroughly
understand interrelationships between the
NMP and PSA policies and the
consequences of changing individual
policies. For information on the NMP and
PSA, see the vSphere Storage documentation.
n Setting values for the Initiator IPv6 Address
and Initiator IPv6 Prefix options in a host
profile with independent hardware iSCSI
adapters has no effect on the HBA because
no independent iSCSi HBAs have IPv6
support.
n Add the rules that change device attributes
before extracting the host profile from the
reference host. After attaching a host to the
host profile, if you edit the profile and
change the device attributes (for example,
mask device paths or adding SATP rules to
mark the device as SSD) you are prompted
to reboot the host in order to make the
changes. However, after rebooting
compliance failures occur because the
attributes changed. Because Host Profiles
extract device attributes before rebooting, if
any changes occur after the reboot, it
evaluates and finds those changes, and
reports it as non-compliant.
Networking Configure virtual switch, port groups, When DHCPv6 is enabled in the networking
physical NIC speed, security and NIC sub-profile, the corresponding ruleset must also
teaming policies, vSphere Distributed be manually turned on in the firewall
Switch, and vSphere Distributed Switch subprofile.
uplink port.
Date and Time Configure the time settings and For the time zone, enter a UTC string. For
timezone of server. example, "America/Los_Angeles" for United
States Pacific time zone.
The default time zone is set to the local time
and location of the vSphere Client machine.
Network Time Protocol (NTP) should be
correctly configured. You can configure the
NTP settings on the host's configuration tab.
Click Time Configuration, then Properties at
the top right of the panel.
Other profile configuration categories include: user group, authentication, kernel module, DCUI keyboard,
host cache settings, SFCB, resource pools, login banner, SNMP agent, power system, and CIM indication
subscriptions.
Procedure
1 Open the Profile Editor for the profile to edit.
2 On the left side of the Profile Editor, expand a subprofile until you reach the policy to edit.
On the right side of the Profile Editor, the policy options and parameters are displayed on the
Configuration Details tab.
4 Select a policy option from the drop-down menu and set its parameter.
NOTE The change is made when the "Update host profile" task is completed in the Recent Tasks status.
If you attempt to apply the profile before the task is complete, the profile configuration does not contain
the change.
6 (Optional) If you make a change to a policy, but want to revert back to the default option, click Revert
and the option is reset.
Procedure
1 Open the Profile Editor for a profile and navigate to the policy you wish to enable for compliance check.
2 On the right side of the Profile Editor, select the Compliance Details tab.
NOTE The check box is enabled by default. If you disable the check box so this policy is not checked for
compliance, the other policies that are enabled for compliance check will still be checked.
Manage Profiles
After you create a host profile, you can manage the profile by attaching a profile to a particular host or
cluster and then applying that profile to the host or cluster.
You can associate a profile and a host or cluster either by attaching the profile to the host or cluster, or by
attaching the host or cluster to the profile. You can then apply the profile to the host or cluster.
NOTE A host profile must have a valid reference host associated with it before you can manage the profile.
Profiles can also be attached to a cluster. In order to be compliant, all hosts within an attached cluster must
be configured according to the profile. Hosts are not automatically configured in accordance to the host
profile that is attached with the cluster when it is added to the cluster. When a host is added to a cluster that
is attached to a profile, the host is automatically attached to the profile.
You can attach a host or cluster to a profile from the Host Profiles main view.
When a host profile is attached to a cluster, the host or hosts within that cluster are also attached to the host
profile. However, when the host profile is detached from the cluster, the association between the host or
host within the cluster and that host profile remains.
Procedure
1 In the Host Profiles main view, select the profile to which you want to add the host or cluster from the
profile list.
3 Select the host or cluster from the expanded list and click Attach.
You can attach a profile to a host from the host's context menu in the Hosts and Clusters inventory view.
When a host profile is attached to a cluster, the host or hosts within that cluster are also attached to the host
profile. However, when the host profile is detached from the cluster, the association between the host or
host within the cluster and that host profile remain.
Procedure
1 In the Host and Clusters view, select the host to which you want to attach a profile.
2 Right-click the host and select Host Profile > Manage Profile.
NOTE If no host profiles exist in your inventory, a dialog appears asking if you want to create and
attach the host to this profile.
3 In the Attach Profile dialog, select the profile to attach to the host and click OK.
Applying Profiles
To bring a host to the desired state as specified in the profile, apply the profile to the host.
If the profile is not applied, or configured to what is specified in the profile, it will cause the compliance
status for the profile to fail the next time a compliance check is performed. You fix this by applying the
profile to the host.
Prerequisites
The profile must be attached to the host and the host must be in maintenance mode before a profile is
applied to it.
Procedure
1 In the Host Profiles main view, select the profile you want to apply to the host.
In the Profile Editor, you might be prompted to enter the required parameters needed to apply the
profile.
6 Click Finish.
Prerequisites
The host must be in maintenance mode before a profileis applied to it.
Procedure
1 In the Host and Clusters view, select the host to which you want to apply a profile.
2 Right-click the host and select Host Profile > Apply Profile.
5 Click Finish.
You can perform this task from the Host Profiles main view or from the host's context menu.
Prerequisites
The host profile must already exist.
Procedure
1 In the Host Profiles main view, right-click the profile you wish to change the reference host and select
Change Reference Host.
2 Expand the inventory list and select the host you want to use as the new reference host for the profile.
3 Click Update.
4 Click OK.
The Summary tab for the host profile lists the updated reference host.
Procedure
u In the Hosts and Clusters view, right-click a cluster and select Host Profile > Manage Profile.
Depending on your host profile setup, one of the following results occurs:
Once you create a host profile, you might need to make incremental updates to the profile. You can do this
using two methods:
n Make the configuration changes to the reference host in the vSphere Client, then update the profile
from the reference host. The settings within the existing profile are updated to match those of the
reference host.
While updating the profile from the Profile Editor can be more comprehensive and provide more options,
updating the profile from the reference host allows you to validate the configuration before rolling it out to
other hosts that are attached to the profile.
Updating the profile from the reference host is performed from the Host Profiles main view.
Procedure
u In the Host Profiles main view, right-click the profile you want to update and select Update Profile
From Reference Host.
Checking Compliance
Checking compliance ensures that the host or cluster continues to be correctly configured.
After a host or cluster is configured with the reference host profile, a manual change, for example, can occur,
making the configuration incorrect. Checking compliance on a regular basis ensures that the host or cluster
continues to be correctly configured.
Procedure
1 From the Host Profiles list, select the profile that you want to check.
2 In the Hosts and Clusters tab, select the host or cluster from the list under Entity Name.
If the compliance status is Non-compliant, you can apply the the profile to the host.
Procedure
1 In the Host and Clusters view, select the host on which you want to run the compliance check.
2 Right-click the host and select Host Profile > Check Compliance
If the host is not compliant, you must apply the profile to the host.
Procedure
1 In the Host and Clusters view, select the cluster on which you want to run the compliance check.
2 In the Profile Compliance tab, click Check Compliance Now to check the cluster's compliance with
both the host profile that is attached to this cluster and the cluster requirements, if any.
n The cluster is checked for compliance with specific settings for hosts in the cluster, such as DRS,
HA, and DPM. For example, it may check if vMotion is enabled. The compliance status for the
cluster requirements is updated. This check is performed even if a host profile is not attached to the
cluster.
n If a host profile is attached to the cluster, the cluster is checked for compliance with the host profile.
The compliance status for the host profile is updated.
3 (Optional) Click Description next to the Cluster Requirements for a list of the specific cluster
requirements.
4 (Optional) Click Description next to Host Profiles for a list of the specific host profile compliance
checks.
5 (Optional) Click Change to change the host profile that is attached to the cluster.
6 (Optional) Click Remove to detach the host profile that is attached to the cluster.
If the cluster is not compliant, the profile must be applied separately to each host within the cluster.
Configuration state information cannot be stored directly on a host provisioned with Auto Deploy. Instead,
you can create a reference host and configure it with the settings you want. Then, create a host profile using
this reference host. Auto Deploy can apply the host profile to these hosts so they are configured with these
settings, or you can apply the host profile using the client.
To apply a host profile to a host, the host must be placed into maintenance mode. The user is prompted to
type answers for policies that are specified during host profile creation when the host profile is applied.
A host provisioned with Auto Deploy can be rebooted while the host profile is attached to the host. After
rebooting, values stored in the answer file help the host provisioned with Auto Deploy to apply the profile.
An answer file is created that contains a series of key value pairs for the user input options.
The answer file contains the user input policies for a host profile. The file is created when the profile is
initially applied to a particular host.
NOTE If you deploy ESXi through host profiles, configure syslog to store logs on a remote server. See "Set
up Syslog from the Host Profiles Interface" in the Installation and Setup documentation for instructions.
See "Setting up an Auto Deploy Reference Host" in the vSphere Auto Deploy documentation for more
information.
Prerequisites
The answer file status can only be checked when the host profile is atached to a host.
Procedure
u In the host profiles view, click Check Answer File.
The Answer File Status for the host profile is updated. The status indicates one of the following states:
Incomplete The answer file is missing some of the required user input answers.
Complete The answer file has all of the user input answers needed.
Unknown The host and associated profile exist but the status of the answer file is not
known. This is the initial state of an answer file.
Procedure
1 Right-click the host entity and select Update Answer File.
2 When prompted, enter or change the user input parameter, and click Next.
Prerequisites
The imported answer file must be associated with at least one host.
Procedure
1 Right-click the host entity and select Import Answer File.
The answer file might contain sensitive information such as passwords and IP addresses. If exported, this
information is vulnerable to unauthorized access. During the export process all passwords are removed
from the answer file. When the answer file is imported, the password information must be re-entered.
Procedure
1 Right-click the host entity and select Export Answer File.
The following network features are unavailable or read-only in the vSphere Client:
n Network DRS
n Open vSwitch
n Opaque networks
n SR-IOV
n LACP
n Multicast
n IPv6 support for ESX architecture, NFS 4.1 storage operations, iSCSI, guest OS customizations, virtual
datacenters
Use the vSphere Web Client as the primary interface for managing the full range of network functions
available in your vSphere 6.0 environment.
Procedure
1 Log in to the vSphere Client and select the host from the inventory panel.
Option Description
vSphere Standard Switch Displays vSphere standard switch networking on the host.
vSphere Distributed Switch Displays vSphere distributed switch networking on the host.
The vSphere Distributed Switch option appears only on hosts that are connected to one or more
vSphere distributed switches.
Procedure
1 Log in to the ESXi host using the vSphere Client and select the host in the inventory pane.
Wake on LAN supported Network adapter ability to support Wake on the LAN.
Procedure
1 Log in to the ESXi host using the vSphere Client and select the host in the inventory pane.
5 Accept the default connection type, Virtual Machine, and click Next.
6 Select Create a vSphere standard switch or one of the listed existing standard switches and the
associated physical adapters to use for this port group.
If you create a standard switch without physical network adapters, all traffic on that switch is confined
to that switch. No other hosts on the physical network or virtual machines on other standard switches
can send or receive traffic over this standard switch. You might create a standard switch without
physical network adapters if you want a group of virtual machines to be able to communicate with each
other, but not with other hosts or with virtual machines outside the group.
7 Click Next.
8 In the Port Group Properties group, enter a network label that identifies the port group that you are
creating.
Use network labels to identify migration-compatible connections common to two or more hosts.
9 (Optional) If you are using a VLAN, for VLAN ID, enter a number between 1 and 4094.
If you enter 0 or leave the option blank, the port group detects only untagged (non-VLAN) traffic. If
you enter 4095, the port group can detect traffic on any VLAN while leaving the VLAN tags intact.
10 Click Next.
11 After you determine that the switch is configured correctly, click Finish.
Procedure
1 Log in to the ESXi host using the vSphere Client and select the host in the inventory pane.
5 Select the vSphere standard switch to use, or select Create a vSphere standard switch to create a new
vSphere standard switch.
6 Select the check boxes for the network adapters for your vSphere standard switch to use.
Select adapters for each vSphere standard switch so that virtual machines or other services that connect
through the adapter can reach the correct Ethernet segment. If no adapters appear under Create a new
vSphere standard switch, all the network adapters in the system are being used by existing vSphere
standard switches or vSphere distributed switches. You can either create a vSphere standard switch
without a network adapter, or select a network adapter that an existing vSphere standard switch uses.
7 Click Next.
Option Description
Network Label A name that identifies the port group that you are creating. This is the
label that you specify when you configure VMkernel services such as
vMotion and IP storage and you configure a virtual adapter to be attached
to this port group.
VLAN ID Identifies the VLAN that the port group’s network traffic will use.
9 (Optional) Select Use this port group for vMotion to enable this port group to advertise itself to
another host as the network connection through which vMotion traffic should be sent.
10 (Optional) Select Use this port group for fault tolerance logging.
12 If IPv6 is enabled on the host, select IP (Default), IPv6, or IP and IPv6 networking.
This option does not appear on hosts that do not have IPv6 enabled. IPv6 configuration cannot be used
with dependent hardware iSCSI adapters.
13 Click Next.
Option Description
Obtain IP settings automatically Use DHCP to obtain IP settings.
Use the following IP settings Specify IP settings manually.
a Enter the IP address and subnet mask for the VMkernel interface.
b Click Edit to set the VMkernel Default Gateway for VMkernel services,
such as vMotion, NAS, and iSCSI.
15 If you are using IPv6 for the VMkernel interface, select an option for obtaining IPv6 addresses.
Option Description
Obtain IPv6 addresses Use DHCP to obtain IPv6 addresses.
automatically through DHCP
Obtain IPv6 addresses Use router advertisement to obtain IPv6 addresses.
automatically through Router
Advertisement
Static IPv6 addresses a Click Add to add a new IPv6 address.
b Enter the IPv6 address and subnet prefix length, and click OK.
c To change the VMkernel default gateway, click Edit.
16 Click Next.
17 Review the information, click Back to change any entries, and click Finish.
Procedure
1 Log in to the ESXi host using the vSphere Client and select the host in the inventory pane.
2 Click Properties for the standard switch associated with the VMkernel interface to view.
3 On the Ports tab, select the VMkernel network adapter to view, and click View Routing Table under IP
Settings or IPv6 Settings.
A routing table that includes network, prefix, and gateway information for the selected VMkernel network
adapter appears.
Procedure
1 Log in to the ESXi host using the vSphere Client and select the host in the inventory pane.
3 On the right side of the page, click Properties for the standard switch that you want to edit.
5 Select the standard switch item in the Configuration list, and click Edit.
7 Choose the number of ports that you want to use from the drop-down menu.
8 Click OK.
What to do next
Changes will not take effect until the system is restarted.
Procedure
1 Log in to the ESXi host using the vSphere Client and select the host in the inventory pane.
5 To change the configured speed and duplex value of a network adapter, select the network adapter and
click Edit.
6 To select the connection speed manually, select the speed and duplex from the drop-down menu.
Choose the connection speed manually if the NIC and a physical switch might fail to negotiate the
proper connection speed. Symptoms of mismatched speed and duplex include low bandwidth or no
link connectivity.
The adapter and the physical switch port it is connected to must be set to the same value, such as auto
and auto or ND and ND, where ND is some speed and duplex, but not auto and ND.
7 Click OK.
Procedure
1 Log in to the ESXi host using the vSphere Client and select the host in the inventory pane.
6 Select one or more adapters from the list and click Next.
7 (Optional) To reorder the NICs into a different category, select a NIC and click Move Up and Move
Down.
Option Description
Active Adapters Adapters that the standard switch uses.
Standby Adapters Adapters that become active if one or more of the active adapters fails.
8 Click Next.
9 Review the information on the Adapter Summary page, click Back to change any entries, and click
Finish.
The list of network adapters reappears, showing the adapters that the standard switch now claims.
10 Click Close to exit the dialog box.
The Networking section in the Configuration tab shows the network adapters in their designated order
and categories.
If your system has complex port group requirements, create a distributed port group rather than a default
port group.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 In the vSphere Client, select the Networking inventory view and select the datacenter.
Option Description
vSphere Distributed Switch Compatible with ESX/ESXi version 4.0 and later. Features released with
Version: 4.0 later vSphere distributed switch versions are not supported.
vSphere Distributed Switch Compatible with ESX/ESXi version 4.1 and later. Features released with
Version: 4.1.0 later vSphere distributed switch versions are not supported.
vSphere Distributed Switch Compatible with ESXi version 5.0 and later.
Version: 5.0.0
vSphere Distributed Switch Compatible with ESXi version 5.1 and later. eatures released with later
Version: 5.1.0 vSphere distributed switch versions are not supported.
vSphere Distributed Switch Compatible with ESXi version 5.5 and later. eatures released with later
Version: 5.5.0 vSphere distributed switch versions are not supported.
vSphere Distributed Switch Compatible with ESXi version 6.0 and later.
Version: 6.0.0
4 Click Next.
5 In the Name text box, type a name for the new vSphere distributed switch.
6 Use the arrow buttons to select the Number of uplink ports, and click Next.
Uplink ports connect the distributed switch to physical NICs on associated hosts. The number of uplink
ports is the maximum number of allowed physical connections to the distributed switch per host.
7 Select whether to add hosts and their physical adapters to the vSphere distributed switch now or later.
If you select Add now, select the hosts and physical adapters to use by clicking the check box next to
each host or adapter. You can only free physical adapters to a vSphere distributed switch during
distributed switch creation.
b Select the maximum number of ports for the host from the drop-down menu.
c Click OK.
9 Click Next.
11 Click Finish.
What to do next
If you chose to add hosts later, you must add hosts to the distributed switch before adding network
adapters.
Network adapters can be added from the host configuration page of the vSphere Client, using Manage
Hosts, or by using Host Profiles.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Add Host.
3 Select the hosts to add.
4 Under the selected hosts, select the physical adapters to add and click Next.
You can select physical adapters that are not being used and physical adapters that are being used.
NOTE Moving a physical adapter to a distributed switch without moving any associated virtual
adapters can cause those virtual adapters to lose network connectivity.
5 For each virtual adapter, select Destination port group and select a port group from the drop-down
menu to migrate the virtual adapter to the distributed switch or select Do not migrate.
b Select the maximum number of ports for the host from the drop-down menu.
c Click OK.
7 Click Next.
b For each virtual machine, select Destination port group and select a port group from the drop-
down menu or select Do not migrate.
9 Click Next.
10 (Optional) If you need to make any changes, click Back to the appropriate screen.
11 Review the settings for the distributed switch and click Finish.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
4 Select the physical adapters to add, deselect the physical adapters to remove, and click Next.
5 For each virtual adapter, select the Destination port group from the drop-down menu to migrate the
virtual adapter to the distributed switch or select Do not migrate.
6 Click Next.
7 Migrate virtual machine networking to the vSphere distributed switch.
b For each virtual machine, select the Destination port group from the drop-down menu or select Do
not migrate.
8 Click Next.
9 (Optional) If you need to make any changes, click Back to the appropriate screen.
10 Review the settings for the distributed switch, and click Finish.
Procedure
1 Log in to the vCenter Server system using the vSphere Client.
6 Select the maximum number of ports from the drop-down menu, and click OK.
What to do next
If you are changing the maximum number of ports for a host after the host is added to the distributed
switch, you must restart the host before the new maximum takes effect.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
Option Description
Name Type the name for the distributed switch.
Number of Uplink Ports Select the number of uplink ports for the distributed switch.
Notes Type any notes for the distributed switch.
c Click OK.
5 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
Option Description
Maximum MTU Maximum MTU size for the vSphere distributed switch.
Discovery Protocol Status Choose the status for discovery protocol on the vSphere distributed
switch.
n Enabled. Enabled discovery protocol for the vSphere distributed
switch.
1 Select Cisco Discovery Protocol or Link Layer Discovery Protocol
from the Type drop-down menu.
2 Set Operation to Listen, Advertise, or Both.
n Disabled.
Admin Contact Info Enter the Name and Other Details for the vSphere distributed switch
administrator.
4 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
3 On the Network Adapters tab, you can view network adapter and uplink assignments for associated
hosts.
This tab is read-only. Distributed switch network adapters must be configured at the host level.
4 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
The upgrade wizard details the features available to the upgraded distributed switch that are not
available to the earlier version.
Option Description
vSphere Distributed Switch Compatible with ESX/ESXi version 4.1 and later. Features released with
Version: 4.1.0 later vSphere distributed switch versions are not supported.
vSphere Distributed Switch Compatible with ESXi version 5.0 and later. Features released with later
Version: 5.0.0 vSphere distributed switch versions are not supported.
vSphere Distributed Switch Compatible with ESXi version 5.1 and later. Features released with later
Version: 5.1.0 vSphere distributed switch versions are not supported.
vSphere Distributed Switch Compatible with ESXi version 5.5 and later. Features released with later
Version: 5.5.0 vSphere distributed switch versions are not supported.
vSphere Distributed Switch Compatible with ESXi version 6.0 and later.
Version: 6.0.0
5 Click Next.
The upgrade wizard lists the hosts associated with this vSphere distributed switch and whether or not
they are compatible with the upgraded vSphere distributed switch version. You can proceed with the
upgrade only if all hosts are compatible with the new vSphere distributed switch version.
6 Click Next.
7 Verify that the upgrade information listed is correct and click Finish.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane and select New Port Group.
3 Enter a Name and the Number of Ports for your new distributed port group.
Option Description
None Do not use VLAN.
VLAN In the VLAN ID field, enter a number between 1 and 4094.
VLAN Trunking Enter a VLAN trunk range.
Private VLAN Select a private VLAN entry. If you did not create any private VLANs, this
menu is empty.
5 Click Next.
6 Click Finish.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
Option Action
Name Type the name for the distributed port group.
Description Type a brief description of the distributed port group.
Number of Ports Type the number of ports on the distributed port group.
Port binding Choose when ports are assigned to virtual machines connected to this
distributed port group.
n Select Static binding to assign a port to a virtual machine when the
virtual machine connects to the distributed port group. This option is
not available when the vSphere Client is connected directly to ESXi.
n Select Dynamic binding to assign a port to a virtual machine the first
time the virtual machine powers on after it is connected to the
distributed port group. Dynamic binding is deprecated in ESXi 5.x.
n Select Ephemeral for no port binding. This option is not available
when the vSphere Client is connected directly to ESXi.
4 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
Option Description
Allow override of port policies Select this option to allow distributed port group policies to be overridden
on a per-port level. Click Edit Override Settings to select which policies
can be overridden at the port level.
Edit Override Settings Select which policies can be overridden at the port level.
Configure reset at disconnect When a distributed port is disconnected from a virtual machine, the
configuration of the distributed port is reset to the distributed port group
setting. Any per-port overrides are discarded.
4 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
The table on the Ports tab for the distributed switch now displays runtime statistics for each distributed
port, including broadcast, multicast, and unicast ingress and egress traffic and packets.
The State column displays the current state for each distributed port.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
4 Click General.
6 Click OK.
Private VLANs
Private VLANs are used to solve VLAN ID limitations and waste of IP addresses for certain network setups.
A private VLAN is identified by its primary VLAN ID. A primary VLAN ID can have multiple secondary
VLAN IDs associated with it. Primary VLANs are Promiscuous, so that ports on a private VLAN can
communicate with ports configured as the primary VLAN. Ports on a secondary VLAN can be either
Isolated, communicating only with promiscuous ports, or Community, communicating with both
promiscuous ports and other ports on the same secondary VLAN.
To use private VLANs between a host and the rest of the physical network, the physical switch connected to
the host needs to be private VLAN-capable and configured with the VLAN IDs being used by ESXi for the
private VLAN functionality. For physical switches using dynamic MAC+VLAN ID based learning, all
corresponding private VLAN IDs must be first entered into the switch's VLAN database.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
4 Under Primary Private VLAN ID, click [Enter a Private VLAN ID here], and enter the number of the
primary private VLAN.
5 Click anywhere in the dialog box, and then select the primary private VLAN that you just added.
The primary private VLAN you added appears under Secondary Private VLAN ID.
6 For each new secondary private VLAN, click [Enter a Private VLAN ID here] under Secondary Private
VLAN ID, and enter the number of the secondary private VLAN.
7 Click anywhere in the dialog box, select the secondary private VLAN that you just added, and select
either Isolated or Community for the port type.
8 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n Before removing a private VLAN, be sure that no port groups are configured to use it.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
5 Click Remove under Primary Private VLAN ID, and click OK.
Removing a primary private VLAN also removes all associated secondary private VLANs.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n Before removing a private VLAN, be sure that no port groups are configured to use it.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
4 Select a primary private VLAN to display its associated secondary private VLANs.
6 Click Remove under Secondary Private VLAN ID, and click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
5 Click Click to Add NIC for the uplink port to add an uplink to.
If you select an adapter that is attached to another switch, it will be removed from that switch and
reassigned to this vSphere distributed switch.
7 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
5 Click Remove to remove the uplink from the vSphere distributed switch.
6 Click OK.
Remove NICs from an active virtual machine without a guest operating system installed
You cannot remove NICs from an active virtual machine if the virtual machine has no operating system
installed.
The vSphere Client might report that the NIC has been removed, but you will continue to see it attached to
the virtual machine.
Remove NICs from an active virtual machine with a guest operating system installed
You can remove a NIC from an active virtual machine, but it might not be reported to the vSphere Client for
some time. If you open Edit Settings for the virtual machine, you might still see the NIC that you removed
listed, even when the task is complete. The Edit Settings dialog box for the virtual machine does not
immediately display the removed NIC.
You may also still see the NIC attached to the virtual machine if the guest operating system of the virtual
machine does not support hot-removal of NICs.
You can configure VMkernel virtual adapters for a host through an associated vSphere distributed switch
either by creating new virtual adapters or migrating existing virtual adapters.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
5 Click Add.
8 Choose a distributed port or distributed port group connection for the virtual adapter.
Option Description
Select a port group Choose the distributed port group for the virtual adapter to connect to
from the drop-down menu.
Select port Type the port ID of the distributed port for the virtual network adapter to
connect to.
9 Select Use this virtual adapter for vMotion to enable this port group to advertise itself to another ESXi
host as the network connection where vMotion traffic is sent.
You can enable this property for only one vMotion and IP storage port group for each host. If this
property is not enabled for any port group, migration with vMotion to this host is not possible.
10 Choose whether to Use this virtual adapter for Fault Tolerance logging.
11 Choose whether to Use this virtual adapter for management traffic, and click Next.
13 Click Edit to set the VMkernel default gateway for VMkernel services, such as vMotion, NAS, and
iSCSI.
14 On the DNS Configuration tab, the name of the host is entered by default. The DNS server addresses
and domain that were specified during installation are also preselected.
15 On the Routing tab, enter gateway information for the VMkernel. A gateway is needed for connectivity
to machines not on the same IP subnet as the VMkernel.
Static IP settings is the default. Do not use routing with software iSCSI Multipathing configurations or
dependent hardware iSCSI adapters.
17 Click Finish.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
5 Click Add.
8 For each selected adapter, choose a port group from the Select a port group drop-down menu.
9 Click Next.
10 Click Finish.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
6 Select the standard switch to migrate the adapter to and click Next.
7 Enter a Network Label and optionally a VLAN ID for the virtual adapter, and click Next.
8 Click Finish to migrate the virtual adapter and complete the wizard.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
6 Under Network Connection, select vSphere Distributed Switch and Port Group or Port to add this
virtual adapter to.
7 Select Use this virtual adapter for vMotion to enable this port group to advertise itself to another host
as the network connection that vMotion traffic should be sent through.
You can enable this property for only one vMotion and IP storage port group for each host. If this
property is not enabled for any port group, migration with vMotion to this host is not possible.
8 (Optional) Select Use this virtual adapter for fault tolerance logging.
10 Under IP Settings, specify the IP Address and Subnet Mask, or select Obtain IP settings
automatically .
11 Click Edit to set the VMkernel Default Gateway for VMkernel services, such as vMotion, NAS, and
iSCSI.
On the DNS Configuration tab, the name of the host appears in the name field by default. The DNS
server addresses that were specified during installation are also preselected, as is the domain.
On the Routing tab, a gateway is needed for connectivity to machines not on the same IP subnet as the
VMkernel.
12 Use the up and down arrows to set the MTU for the VMkernel adapter.
13 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
4 Select the VMkernel adapter to view, and click View Routing Table under IP Settings or IPv6 Settings.
A routing table that includes network, prefix, and gateway information for the selected VMkernel adapter
appears.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
A dialog box appears with the message, Are you sure you want to remove adapter name?
6 Click Yes.
Connect virtual machines to vSphere distributed switches by connecting their associated virtual network
adapters to distributed port groups. You can do this either for an individual virtual machine by modifying
the virtual machine’s network adapter configuration, or for a group of virtual machines by migrating virtual
machines from an existing virtual network to a vSphere distributed switch.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
Option Description
Include all virtual machine network Migrates virtual machine network adapters from a particular network.
adapters that are connected to the Select the source network from the Network drop-down menu.
following network (Filter by
Network)
Include all virtual machine network Migrates virtual machine network adapters from a network on a particular
adapters that are connected to the vSphere distributed switch. To migrate from a network, select Switch and
following network (Filter by VDS) Network from the drop-down menus.
Include all virtual machine network Migrates virtual machine network adapters that are not connected to any
adapters that are not connected to network.
any network
Option Description
Filter by Network Migrates virtual machine network adapters to a particular network. Select
the destination network from the Network drop-down menu.
Filter by VDS Migrates virtual machine network adapters to a network on a particular
vSphere Distritubed Switch. To migrate to a network, select Switch and
Network from the drop-down menus.
5 Click Next.
7 Select the virtual machines and adapters to migrate to the destination network and click Next.
8 Verify that the source network, destination network, and number of virtual machines to migrate are
correct and click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the virtual machine from the inventory panel.
4 Select the distributed port group to migrate to from the Network Label drop-down menu, and click
OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n Verify that your datacenter has at least one vSphere distributed switch version 4.1.0 or later.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
4 Select Enable Network I/O Control on this vSphere ditributed switch, and click OK.
User-defined network resource pools are available only on vSphere distributed switches version 5.0.0 or
later.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
6 Select the Physical adapter shares for the network resource pool.
Option Description
Custom Type a specific number of shares, from 1 to 100, for this network resource
pool.
High Sets the shares for this resource pool to 100.
Normal Sets the shares for this resource pool to 50.
Low Sets the shares for this resource pool to 25.
7 Set the Host limit for the network resource pool in megabits per second or select Unlimited.
8 (Optional) Select the QoS priority tag for the network resource pool.
9 Click OK.
The new resource pool appears on the Resource Allocation tab under User-defined network resource pools.
What to do next
Add one or more distributed port groups to the network resource pool.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n Create one or more network resource pools on the vSphere distributed switch.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
4 (Optional) Select the user-defined network resource pool to associate with a single distributed port
group from the Network resource pool drop-down menu or select None to remove that distributed port
group from a user-defined resource pool.
5 (Optional) Select the user-defined network resource pool to associate with multiple distributed port
groups.
a Hold Ctrl to select multiple distributed port groups to modify, and click Assign multiple.
b Select the user-defined network resource pool to associate with the distributed port groups from
the Network Resource Pool drop-down menu, or select None to remove the distributed port
groups from all user-defined resource pools.
6 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Resource Allocation tab, right-click the network resource pool to edit, and select Edit Settings.
4 Select the Physical adapter shares for the network resource pool.
Option Description
Custom Enter a specific number of shares, from 1 to 100, for this network resource
pool.
High Sets the shares for this resource pool to 100.
Normal Sets the shares for this resource pool to 50.
Low Sets the shares for this resource pool to 25.
5 Set the Host limit for the network resource pool in megabits per second or select Unlimited.
6 (Optional) Select the QoS priority tag from the drop-down menu.
The QoS priority tag specifies an IEEE 802.1p tag, allowing quality of service at the media access control
level
7 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n Remove all distributed port groups from the network resource pool.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Resource Allocation tab, right-click the user-defined network resource pool to delete, and select
Remove.
4 Click Yes.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the virtual machine from the inventory panel.
4 Record the network settings and MAC address that the network adapter is using.
5 Click Remove to remove the network adapter from the virtual machine.
6 Click Add.
9 Select the network setting and MAC address that the old network adapter was using and click Next.
11 If the virtual machine is not set to upgrade VMware Tools at each power on, you must upgrade
VMware Tools manually.
TSO is enabled on a VMkernel interface. If TSO becomes disabled for a particular VMkernel interface, the
only way to enable TSO is to delete that VMkernel interface and recreate it with TSO enabled.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
3 Click Properties for the vSphere standard switch associated with the VMkernel to modify.
4 On the Ports tab, select the VMkernel interface and click Edit.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
4 Set the Maximum MTU to the largest MTU size among all the virtual network adapters connected to
the vSphere distributed switch, and click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the virtual machine from the inventory panel.
4 Record the network settings and MAC address that the network adapter is using.
5 Click Remove to remove the network adapter from the virtual machine.
6 Click Add.
10 Click Finish.
12 Under MAC Address, select Manual, and enter the MAC address that the old network adapter was
using.
13 Click OK.
14 Check that the Enhanced vmxnet adapter is connected to a standard switch or distributed switch with
jumbo frames enabled.
15 Inside the guest operating system, configure the network adapter to allow jumbo frames.
16 Configure all physical switches and any physical or virtual machines to which this virtual machine
connects to support jumbo frames.
DirectPath I/O
DirectPath I/O allows virtual machine access to physical PCI functions on platforms with an I/O Memory
Management Unit.
The following features are unavailable for virtual machines configured with DirectPath:
n Fault tolerance
n High availability
n DRS (limited availability. The virtual machine can be part of a cluster, but cannot migrate across hosts)
n Snapshots
The following features are only available for virtual machines configured with DirectPath I/O on Cisco
Unified Computing Systems (UCS) through Cisco Virtual Machine Fabric Extender (VM-FEX) distributed
switches.
n vMotion
n High availability
n DRS
n Snapshots
See Cisco VM-FEX documentation for details on supported switches and switch configuration information.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a host from the inventory panel of the vSphere Client.
The Passthrough Configuration page appears, listing all available passthrough devices. A green icon
indicates that a device is enabled and active. An orange icon indicates that the state of the device has
changed and the host must be rebooted before the device can be used.
3 Click Edit.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a virtual machine from the inventory panel of the vSphere Client.
2 From the Inventory menu, select Virtual Machine > Edit Settings.
6 Click Finish.
Adding a DirectPath device to a virtual machine sets memory reservation to the memory size of the virtual
machine.
Prerequisites
n Enable high performance network I/O on at least one Cisco UCS port profile on a supported Cisco VM-
FEX distributed switch. For supported switches and switch configuration, see Cisco's documentation at
http://www.cisco.com/go/unifiedcomputing/b-series-doc.
Procedure
1 Log in to the vSphere Client and select the VMs and Templates inventory view.
4 Select Unlimited.
5 On the Hardware tab, select the network adapter to configure as a passthrough device.
6 Select a port profile with high performance enabled from the network label drop-down menu, and click
OK.
After the virtual machine is powered on, DirectPath I/O appears as Active on the Hardware tab of the
virtual machine properties dialog box.
Overview of SR-IOV
SR-IOV is a specification that allows a single Peripheral Component Interconnect Express (PCIe) physical
device under a single root port to appear as multiple separate physical devices to the hypervisor or the guest
operating system.
SR-IOV uses physical functions (PFs) and virtual functions (VFs) to manage global functions for the SR-IOV
devices. PFs are full PCIe functions that are capable of configuring and managing the SR-IOV functionality.
It is possible to configure or control PCIe devices using PFs, and the PF has full ability to move data in and
out of the device. VFs are lightweight PCIe functions that support data flowing but have a restricted set of
configuration resources.
The number of virtual functions provided to the hypervisor or the guest operating system depends on the
device. SR-IOV enabled PCIe devices require appropriate BIOS and hardware support, as well as SR-IOV
support in the guest operating system driver or hypervisor instance. See the vSphere Networking publication
for more information.
In vSphere 5.5 and later, though a virtual switch (standard switch or distributed switch) does not handle the
network traffic of an SR-IOV enabled virtual machine connected to the switch, you can control the assigned
virtual functions by using switch configuration policies at port group or port level.
You can also enable SR-IOV virtual functions on the host by using the esxcli system module parameters
set vCLI command on the NIC driver parameter for virtual functions in accordance with the driver
documentation. For more information about using vCLI commands, see vSphere Command-Line Interface
Documentation.
Prerequisites
n Verify that the configuration of your environment supports SR-IOV. See SR-IOV Support.
n Create a host profile using the SR-IOV capable host as a reference. For more information about host
profiles, see the vSphere Host Profiles documentation.
Procedure
1 In the vSphere Client, click Home and select the Host Profiles main view.
2 Select the host profile from the list and click Edit Profile.
3 Expand Kernel Module Configuration > Kernel Module and select the kernel module for the physical
function driver.
4 Expand Kernel Module Parameter and select the parameter of the physical function driver for creating
virtual functions.
For example, the parameter for the physical function driver of an Intel physical NIC is max_vfs.
5 Click Edit.
6 In the Value text box, type a comma-separated list of valid virtual function numbers.
Each list entry is the number of virtual functions that you want to configure for each physical function.
A value of 0 means SR-IOV will not be enabled for that physical function.
x,y
where x or y is the number of virtual functions you want to enable for a single port.
If the target number of virtual functions on a single host is 30, you might have two dual port cards set to
0,10,10,10.
NOTE The number of virtual functions supported and available for configuration depends on your
system configuration.
7 Click OK.
After the virtual functions become enabled on the host, the physical NIC no longer shows up as a host
network adapter in the Network Adapters list within the Configuration tab for the host. It appears in the
Advanced Settings list for the host.
What to do next
Associate a virtual function with a virtual machine as a PCI device for networking through Direct Path I/O.
After you enable the virtual functions on the host, each of them becomes available as a PCI device.
Prerequisites
n Verify that the configuration of your environment supports SR-IOV. See SR-IOV Support.
n Verify that the passthrough networking device for the virtual function is active on the host.
Procedure
1 Select a virtual machine from the inventory panel of the vSphere Client.
3 From the Inventory menu, select Virtual Machine > Edit Settings.
5 Select Unlimited.
9 Click Finish.
Adding a virtual function as a PCI device to a virtual machine sets memory reservation to the memory size
of the virtual machine.
In the virtual machine configuration .vmx file, you can assign a static MAC address and a default VLAN to
the virtual function.
Prerequisites
Verify that the virtual function is assigned to the virtual machine as a PCI device.
Procedure
1 Select a virtual machine from the inventory panel of the vSphere Client.
2 Power off the virtual machine.
3 From the Inventory menu, select Virtual Machine > Edit Settings.
5 Click Configuration.
Parameter Value
pciPassthruX.MACAddressType static
pciPassthruX.MACAddress MAC_address_of_the_virtual_function
X next to pciPassthru stands for the sequence number of the PCI device in the virtual machine. For
example, 0 in pciPassthru0 represents the settings of the PCI device added first to the virtual machine.
7 To assign a default VLAN, add or edit the pciPassthruX.defaultVlan parameter according to the
following value guidelines. X next to pciPassthru stands for the sequence number of the PCI device in
the virtual machine.
Option Description
0 Allow no VLAN and do NOT allow guest VLAN tagging. In this way,
administratively disallow guest VLAN tagging.
1-4095 Allow tagged only and do NOT allow guest VLAN tagging.
No entry Allow untagged only and allow guest VLAN tagging.
8 Click OK.
n “Manage Policies for Multiple Port Groups on a vSphere Distributed Switch,” on page 279
vSphere Standard Switch Entire switch When you apply policies on the entire standard
switch, the policies are propagated to all standard
port groups on the switch.
Standard port group You can apply different policies on individual port
groups by overriding the policies that are
inherited from the switch.
vSphere Distributed Switch Distributed port group When you apply policies on a distributed port
group, the policies are propagated to all ports in
the group.
Uplink port group You can apply policies at uplink port group level,
and the are policies are propagated to all ports in
the group.
Table 22‑2. Policies Available for a vSphere Standard Switch and vSphere Distributed Switch
Standard Distributed
Policy Switch Switch Description
Teaming and Yes Yes Lets you configure the physical NICs that handle the network
failover traffic for a standard switch, standard port group, distributed port
group, or distributed port. You arrange the physical NICs in a
failover order and apply different load balancing policies over
them.
Security Yes Yes Provides protection of traffic against MAC address impersonation
and unwanted port scanning. The networking security policy is
implemented in Layer 2 of the networking protocol stack.
Traffic shaping Yes Yes Lets you restrict the network bandwidth that is available to ports,
but also to allow bursts of traffic to flow through at higher speeds.
ESXi shapes outbound network traffic on standard switches and
inbound and outbound traffic on distributed switches.
VLAN Yes Yes Lets you configure the VLAN tagging for a standard or
distributed switch. You can configure External Switch
Tagging(EST), Virtual Switch Tagging (VST), and Virtual Guest
Tagging (VGT).
Traffic filtering and No Yes Lest you protect the virtual network from unwanted traffic and
marking security attacks or apply a QoS tag to a certain traffic type.
Resources No Yes Lets you associate a distributed port or port group with a user-
allocation defined network resource pool. In this way, you can better control
the bandwidth that is available to the port or port group. You can
use the resource allocation policy with vSphere Network I/O
Control version 2 and 3.
Port blocking No Yes Lets you selectively block ports from sending and receiving data.
NOTE All ports on the physical switch in the same team must be in the same Layer 2 broadcast domain.
For more information about each load balancing algorithm, see the vSphere Networking publication.
Link status only Relies only on the link status that the network adapter provides. Detects
failures, such as removed cables and physical switch power failures.
However, link status does not detect the following configuration errors:
Beacon probing Sends out and listens for Ethernet broadcast frames, or beacon probes, that
physical NICs send to detect link failure in all physical NICs in a team. ESXi
hosts send beacon packets every second. Beacon probing is most useful to
detect failures in the closest physical switch to the ESXi host, where the
failure does not cause a link-down event for the host.
Use beacon probing with three or more NICs in a team because ESXi can
detect failures of a single adapter. If only two NICs are assigned and one of
them loses connectivity, the switch cannot determine which NIC needs to be
taken out of service because both do not receive beacons and as a result all
packets sent to both uplinks. Using at least three NICs in such a team allows
for n-2 failures where n is the number of NICs in the team before reaching an
ambiguous situation.
Failback Policy
By default, a failback policy is enabled on a NIC team. If a failed physical NIC returns online, the virtual
switch sets the NIC back to active by replacing the standby NIC that took over its slot.
If the physical NIC that stands first in the failover order experiences intermittent failures, the failback policy
might lead to frequent changes in the NIC that is used. The physical switch sees frequent changes in MAC
addresses, and the physical switch port might not accept traffic immediately when an adapter becomes
online. To minimize such delays, you might consider changing the following settings on the physical switch:
n Disable Spanning Tree Protocol (STP) on physical NICs that are connected to ESXi hosts .
n For Cisco based networks, enable PortFast mode for access interfaces or PortfFast trunk mode for trunk
interfaces. This might save about 30 seconds during the initialization of the physical switch port.
Edit Failover and Load Balancing Policy for a vSphere Standard Switch
Use Load Balancing and Failover policies to determine how network traffic is distributed between adapters
and how to reroute traffic in the event of an adapter failure.
The Failover and Load Balancing policies include the following parameters:
n Load Balancing policy: The Load Balancing policy determines how outgoing traffic is distributed
among the network adapters assigned to a standard switch. Incoming traffic is controlled by the Load
Balancing policy on the physical switch.
In some cases, you might lose standard switch connectivity when a failover or failback event occurs. This
causes the MAC addresses used by virtual machines associated with that standard switch to appear on a
different switch port than they previously did. To avoid this problem, put your physical switch in portfast
or portfast trunk mode.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
5 To edit the Failover and Load Balancing values, select the standard switch item and click Edit.
You can override the failover order at the port group level. By default, new adapters are active for all
policies. New adapters carry traffic for the standard switch and its port group unless you specify
otherwise.
7 In the Load Balancing list, select an option for how to select an uplink.
Option Description
Route based on the originating port Select an uplink based on the virtual port where the traffic entered the
ID standard switch.
Route based on ip hash Select an uplink based on a hash of the source and destination IP addresses
of each packet. For non-IP packets, whatever is at those offsets is used to
compute the hash.
Route based on source MAC hash Select an uplink based on a hash of the source Ethernet.
Use explicit failover order Always use the highest order uplink from the list of Active adapters that
passes failover detection criteria.
8 In the Network failover detection list, select the option to use for failover detection.
Option Description
Link Status only Relies solely on the link status that the network adapter provides. This
option detects failures, such as cable pulls and physical switch power
failures, but not configuration errors, such as a physical switch port being
blocked by spanning tree or misconfigured to the wrong VLAN or cable
pulls on the other side of a physical switch.
Beacon Probing Sends out and listens for beacon probes on all NICs in the team and uses
this information, in addition to link status, to determine link failure. This
option detects many of the failures mentioned above that are not detected
by link status alone.
NOTE Do not use beacon probing with IP-hash load balancing.
If you select Yes, whenever a virtual NIC is connected to the standard switch or whenever that virtual
NIC’s traffic is routed over a different physical NIC in the team because of a failover event, a
notification is sent over the network to update the lookup tables on the physical switches. In almost all
cases, this is desirable for the lowest latency of failover occurrences and migrations with vMotion.
Do not use this option when the virtual machines using the port group are using Microsoft Network
Load Balancing (NLB) in unicast mode. No such issue exists with NLB running in multicast mode.
This option determines how a physical adapter is returned to active duty after recovering from a
failure. If failback is set to Yes, the adapter is returned to active duty immediately on recovery,
displacing the standby adapter that took over its slot, if any. If failback is set to No, a failed adapter is
left inactive even after recovery until another active adapter fails, requiring its replacement.
11 Set Failover Order to specify how to distribute the work load for adapters.
To use some adapters but reserve others for emergencies, you can set this condition using the drop-
down menu to place them into groups.
Option Description
Active Adapters Continue to use the adapter when the network adapter connectivity is
available and active.
Standby Adapters Use this adapter if one of the active adapter’s connectivity is unavailable.
Unused Adapters Do not use this adapter.
If you are using iSCSI Multipathing, your VMkernel interface must be configured to have one active
adapter and no standby adapters. See the vSphere Storage documentation.
NOTE When using IP-hash load balancing, do not configure standby uplinks.
Edit the Failover and Load Balancing Policy on a Standard Port Group
Failover and load balancing policies allow you to determine how network traffic is distributed between
adapters and how to re-route traffic in the event of an adapter failure.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
You can override the failover order at the port-group level. By default, new adapters are active for all
policies. New adapters carry traffic for the standard switch and its port group unless you specify
otherwise.
Option Description
Load Balancing Specify how to choose an uplink.
n Route based on the originating port ID. Choose an uplink based on
the virtual port where the traffic entered the virtual switch.
n Route based on ip hash. Choose an uplink based on a hash of the
source and destination IP addresses of each packet. For non-IP packets,
whatever is at those offsets is used to compute the hash.
n Route based on source MAC hash. Choose an uplink based on a hash
of the source Ethernet.
n Use explicit failover order. Always use the highest order uplink from
the list of Active adapters which passes failover detection criteria.
NOTE IP-based teaming requires that the physical switch be configured
with etherchannel. For all other options, etherchannel should be disabled.
Network Failover Detection Specify the method to use for failover detection.
n Link Status only. Relies solely on the link status that the network
adapter provides. This option detects failures, such as cable pulls and
physical switch power failures, but not configuration errors, such as a
physical switch port being blocked by spanning tree or that is
misconfigured to the wrong VLAN or cable pulls on the other side of a
physical switch.
n Beacon Probing. Sends out and listens for beacon probes on all NICs
in the team and uses this information, in addition to link status, to
determine link failure. This detects many of the failures previously
mentioned that are not detected by link status alone.
Notify Switches Select Yes or No to notify switches in the case of failover.
If you select Yes, whenever a virtual NIC is connected to the standard
switch or whenever that virtual NIC’s traffic would be routed over a
different physical NIC in the team because of a failover event, a
notification is sent out over the network to update the lookup tables on
physical switches. In almost all cases, this process is desirable for the
lowest latency of failover occurrences and migrations with vMotion.
NOTE Do not use this option when the virtual machines using the port
group are using Microsoft Network Load Balancing in unicast mode. No
such issue exists with NLB running in multicast mode.
Failback Select Yes or No to disable or enable failback.
This option determines how a physical adapter is returned to active duty
after recovering from a failure. If failback is set to Yes (default), the adapter
is returned to active duty immediately upon recovery, displacing the
standby adapter that took over its slot, if any. If failback is set to No, a
failed adapter is left inactive even after recovery until another currently
active adapter fails, requiring its replacement.
Failover Order Specify how to distribute the work load for uplinks. If you want to use
some uplinks but reserve others for emergencies in case the uplinks in use
fail, set this condition by moving them into different groups:
n Active Uplinks. Continue to use the uplink when the network adapter
connectivity is up and active.
n Standby Uplinks. Use this uplink if one of the active adapter’s
connectivity is down.
n Unused Uplinks. Do not use this uplink.
7 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
3 Select Policies.
Option Description
Load Balancing Specify how to choose an uplink.
n Route based on the originating virtual port — Choose an uplink
based on the virtual port where the traffic entered the distributed
switch.
n Route based on ip hash — Choose an uplink based on a hash of the
source and destination IP addresses of each packet. For non-IP packets,
whatever is at those offsets is used to compute the hash.
n Route based on source MAC hash — Choose an uplink based on a
hash of the source Ethernet.
n Route based on physical NIC load — Choose an uplink based on the
current loads of physical NICs.
n Use explicit failover order — Always use the highest order uplink
from the list of Active adapters which passes failover detection criteria.
NOTE IP-based teaming requires that the physical switch be configured
with etherchannel. For all other options, etherchannel should be disabled.
Network Failover Detection Specify the method to use for failover detection.
n Link Status only – Relies solely on the link status that the network
adapter provides. This option detects failures, such as cable pulls and
physical switch power failures, but not configuration errors, such as a
physical switch port being blocked by spanning tree or that is
misconfigured to the wrong VLAN or cable pulls on the other side of a
physical switch.
n Beacon Probing – Sends out and listens for beacon probes on all NICs
in the team and uses this information, in addition to link status, to
determine link failure. This detects many of the failures previously
mentioned that are not detected by link status alone.
NOTE Do not use beacon probing with IP-hash load balancing.
Notify Switches Select Yes or No to notify switches in the case of failover.
If you select Yes, whenever a virtual NIC is connected to the distributed
switch or whenever that virtual NIC’s traffic would be routed over a
different physical NIC in the team because of a failover event, a
notification is sent out over the network to update the lookup tables on
physical switches. In almost all cases, this process is desirable for the
lowest latency of failover occurrences and migrations with vMotion.
NOTE Do not use this option when the virtual machines using the port
group are using Microsoft Network Load Balancing in unicast mode. No
such issue exists with NLB running in multicast mode.
Option Description
Failback Select Yes or No to disable or enable failback.
This option determines how a physical adapter is returned to active duty
after recovering from a failure. If failback is set to Yes (default), the adapter
is returned to active duty immediately upon recovery, displacing the
standby adapter that took over its slot, if any. If failback is set to No, a
failed adapter is left inactive even after recovery until another currently
active adapter fails, requiring its replacement.
Failover Order Specify how to distribute the work load for uplinks. If you want to use
some uplinks but reserve others for emergencies in case the uplinks in use
fail, set this condition by moving them into different groups:
n Active Uplinks — Continue to use the uplink when the network
adapter connectivity is up and active.
n Standby Uplinks — Use this uplink if one of the active adapter’s
connectivity is down.
n Unused Uplinks — Do not use this uplink.
NOTE When using IP-hash load balancing, do not configure standby
uplinks.
5 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
Option Description
Load Balancing Specify how to choose an uplink.
n Route based on the originating virtual port — Choose an uplink
based on the virtual port where the traffic entered the vSphere
distributed switch.
n Route based on ip hash — Choose an uplink based on a hash of the
source and destination IP addresses of each packet. For non-IP packets,
whatever is at those offsets is used to compute the hash.
n Route based on source MAC hash — Choose an uplink based on a
hash of the source Ethernet.
n Route based on physical NIC load — Choose an uplink based on the
current loads of physical NICs.
n Use explicit failover order — Always use the highest order uplink
from the list of Active adapters which passes failover detection criteria.
NOTE IP-based teaming requires that the physical switch be configured
with etherchannel. For all other options, etherchannel should be disabled.
Network Failover Detection Specify the method to use for failover detection.
n Link Status only – Relies solely on the link status that the network
adapter provides. This option detects failures, such as cable pulls and
physical switch power failures, but not configuration errors, such as a
physical switch port being blocked by spanning tree or that is
misconfigured to the wrong VLAN or cable pulls on the other side of a
physical switch.
n Beacon Probing – Sends out and listens for beacon probes on all NICs
in the team and uses this information, in addition to link status, to
determine link failure. This detects many of the failures previously
mentioned that are not detected by link status alone.
NOTE Do not choose beacon probing with IP-hash load balancing.
Notify Switches Select Yes or No to notify switches in the case of failover.
If you select Yes, whenever a virtual NIC is connected to the vSphere
distributed switch or whenever that virtual NIC’s traffic would be routed
over a different physical NIC in the team because of a failover event, a
notification is sent out over the network to update the lookup tables on
physical switches. In almost all cases, this process is desirable for the
lowest latency of failover occurrences and migrations with vMotion.
NOTE Do not use this option when the virtual machines using the port
group are using Microsoft Network Load Balancing in unicast mode. No
such issue exists with NLB running in multicast mode.
Failback Select Yes or No to disable or enable failback.
This option determines how a physical adapter is returned to active duty
after recovering from a failure. If failback is set to Yes (default), the adapter
is returned to active duty immediately upon recovery, displacing the
standby adapter that took over its slot, if any. If failback is set to No, a
failed adapter is left inactive even after recovery until another currently
active adapter fails, requiring its replacement.
Failover Order Specify how to distribute the work load for uplinks. If you want to use
some uplinks but reserve others for emergencies in case the uplinks in use
fail, set this condition by moving them into different groups:
n Active Uplinks — Continue to use the uplink when the network
adapter connectivity is up and active.
n Standby Uplinks — Use this uplink if one of the active adapter’s
connectivity is down.
NOTE When using IP-hash load balancing, do not configure standby
uplinks.
n Unused Uplinks — Do not use this uplink.
6 Click OK.
VLAN Policy
VLAN policies determine how VLANs function across your network environment.
A virtual local area network (VLAN) is a group of hosts with a common set of requirements, which
communicate as if they were attached to the same broadcast domain, regardless of their physical location. A
VLAN has the same attributes as a physical local area network (LAN), but it allows for end stations to be
grouped together even if not on the same network switch.
The scope of VLAN policies can be distributed port groups and ports, and uplink port groups and ports.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
3 Select Policies.
4 Select the type of VLAN filtering and marking from the VLAN Type drop-down menu.
Option Description
None Do not use VLAN.
Use this option in case of External Switch Tagging (EST).
VLAN Tag traffic with the ID from the VLAN ID field.
Type a number between 1 and 4094 for Virtual Switch Tagging (VST).
VLAN Trunking Pass VLAN traffic with ID within the VLAN trunk range to guest
operating system. You can set multiple ranges and individual VLANs by
using a comma-separated list.
Use this option for VGT.
Private VLAN Associate the traffic with a private VLAN created on the distributed
switch.
5 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
4 Click Policies.
Option Action
None Do not use VLAN.
VLAN In the VLAN ID field, enter a number between 1 and 4094.
VLAN Trunking Enter one or more VLAN trunk range.
Private VLAN Select an available private VLAN to use.
6 Click OK.
Use the VLAN policy at the uplink port level to propagate a trunk range of VLAN IDs to the physical
network adapters for traffic filtering. The physical network adapters drop the packets from the other
VLANs if the adapters support filtering by VLAN. Setting a trunk range improves networking performance
because physical network adapters filter traffic instead of the uplink ports in the group.
If you have a physical network adapter which does not support VLAN filtering, the VLANs might still not
be blocked. In this case, configure VLAN filtering on a distributed port group or on a distributed port.
See the technical documentation from the adapter vendors for information about VLAN filtering support.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the uplink port group in the inventory pane, and select Edit Settings.
3 Under Policies, click VLAN and type a VLAN trunk range to propagate to the physical network
adapters.
For trunking of several ranges and individual VLANs, separate the entries with commas.
4 Click OK.
Use the VLAN policy at the uplink port to propagate a trunk range of VLAN IDs to the physical network
adapter for traffic filtering. The physical network adapter drops packets from the other VLANs if the
adapter supports filtering by VLAN. Setting a trunk range improves networking performance because the
physical network adapter filters traffic instead of the uplink port.
If you have a physical network adapter which does not support VLAN filtering, the VLANs might still not
be blocked. In this case, configure VLAN filtering on a distributed port group or on a distributed port.
See the technical documentation from the adapter vendor for information about VLAN filtering support.
Launch the vSphere Client and log in to a vCenter Server system.
Prerequisites
To override the VLAN policy at the port level, enable the port-level overrides. See “Edit Advanced
Distributed Port Group Settings,” on page 44.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
For trunking of several ranges and individual VLANs, separate the entries with commas.
6 Click OK.
Security Policy
Networking security policy provides protection of traffic against MAC address impersonation and
unwanted port scanning
The security policy of a standard or distributed switch is implemented in Layer 2 (Data Link Layer) of the
network protocol stack. The three elements of the security policy are promiscuous mode, MAC address
changes, and forged transmits. See the vSphere Security documentation for information about potential
networking threats.
Layer 2 is the data link layer. The three elements of the Layer 2 Security policy are promiscuous mode, MAC
address changes, and forged transmits. In non-promiscuous mode, a guest adapter listens to traffic only on
its own MAC address. In promiscuous mode, it can listen to all the packets. By default, guest adapters are
set to non-promiscuous mode.
You can override the switch-level settings for individual standard port groups by editing the settings for the
port group.
For more information about security, see the vSphere Security documentation.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
3 Click Properties for the standard switch whose Layer 2 Security policy you want to edit.
4 In the Properties dialog box for the standard switch, click the Ports tab.
7 In the Policy Exceptions pane, select whether to reject or accept the Layer 2 Security policy exceptions.
Option Description
Promiscuous Mode n Reject — Placing a guest adapter in promiscuous mode has no effect
on which frames are received by the adapter.
n Accept — Placing a guest adapter in promiscuous mode causes it to
detect all frames passed on the vSphere standard switch that are
allowed under the VLAN policy for the port group that the adapter is
connected to.
MAC Address Changes n Reject — If you set the MAC Address Changes to Reject and the guest
operating system changes the MAC address of the adapter to anything
other than what is in the .vmx configuration file, all inbound frames
are dropped.
If the Guest OS changes the MAC address back to match the MAC
address in the .vmx configuration file, inbound frames are passed
again.
n Accept — Changing the MAC address from the Guest OS has the
intended effect: frames to the new MAC address are received.
Forged Transmits n Reject — Any outbound frame with a source MAC address that is
different from the one currently set on the adapter are dropped.
n Accept — No filtering is performed and all outbound frames are
passed.
8 Click OK.
Edit the Layer 2 Security Policy Exception for a Standard Port Group
Control how inbound and outbound frames are handled by editing Layer 2 Security policies.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
3 Choose the vSphere Standard Switch view and click Properties for the port group to edit.
6 In the Properties dialog box for the port group, click the Security tab.
By default, Promiscuous Mode is set to Reject. MAC Address Changes and Forged Transmits are set
to Accept.
The policy exception overrides any policy set at the standard switch level.
7 In the Policy Exceptions pane, select whether to reject or accept the security policy exceptions.
MAC Address Changes If the guest OS changes the MAC If the MAC address from the guest
address of the adapter to anything OS changes, frames to the new MAC
other than what is in the .vmx address are received.
configuration file, all inbound
frames are dropped.
If the guest OS changes the MAC
address back to match the MAC
address in the .vmx configuration
file, inbound frames are sent again.
Forged Transmits Outbound frames with a source No filtering is performed, and all
MAC address that is different from outbound frames are passed.
the one set on the adapter are
dropped.
8 Click OK.
The three elements of the Security policy are promiscuous mode, MAC address changes, and forged
transmits.
In nonpromiscuous mode, a guest adapter listens to traffic only on its own MAC address. In promiscuous
mode, it can listen to all the packets. By default, guest adapters are set to non-promiscuous mode.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
3 Select Policies.
By default, Promiscuous Mode is set to Reject. MAC Address Changes and Forced Transmits are set
to Accept.
4 In the Security group, select whether to reject or accept the Security policy exceptions.
Option Description
Promiscuous Mode n Reject — Placing a guest adapter in promiscuous mode has no effect
on which frames are received by the adapter.
n Accept — Placing a guest adapter in promiscuous mode causes it to
detect all frames passed on the vSphere standard switch that are
allowed under the VLAN policy for the port group that the adapter is
connected to.
MAC Address Changes n Reject — If you set the MAC Address Changes to Reject and the guest
operating system changes the MAC address of the adapter to anything
other than what is in the .vmx configuration file, all inbound frames
are dropped.
If the Guest OS changes the MAC address back to match the MAC
address in the .vmx configuration file, inbound frames are passed
again.
n Accept — Changing the MAC address from the Guest OS has the
intended effect: frames to the new MAC address are received.
Forged Transmits n Reject — Any outbound frame with a source MAC address that is
different from the one currently set on the adapter are dropped.
n Accept — No filtering is performed and all outbound frames are
passed.
5 Click OK.
In nonpromiscuous mode, a guest adapter listens to traffic only on its own MAC address. In promiscuous
mode, it can listen to all the packets. By default, guest adapters are set to non-promiscuous mode.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
4 Click Policies.
By default, Promiscuous Mode is set to Reject, MAC Address Changes, and Forged Transmits are set
to Accept.
5 In the Security group, select whether to reject or accept the Security policy exceptions.
Option Description
Promiscuous Mode n Reject — Placing a guest adapter in promiscuous mode has no effect
on which frames are received by the adapter.
n Accept — Placing a guest adapter in promiscuous mode causes it to
detect all frames passed on the vSphere distributed switch that are
allowed under the VLAN policy for the port group that the adapter is
connected to.
MAC Address Changes n Reject — If you set the MAC Address Changes to Reject and the guest
operating system changes the MAC address of the adapter to anything
other than what is in the .vmx configuration file, all inbound frames
are dropped.
If the Guest OS changes the MAC address back to match the MAC
address in the .vmx configuration file, inbound frames are passed
again.
n Accept — Changing the MAC address from the Guest OS has the
intended effect: frames to the new MAC address are received.
Forged Transmits n Reject — Any outbound frame with a source MAC address that is
different from the one currently set on the adapter are dropped.
n Accept — No filtering is performed and all outbound frames are
passed.
6 Click OK.
ESXi shapes outbound network traffic on standard switches and inbound and outbound traffic on
distributed switches. Traffic shaping restricts the network bandwidth available on a port, but can also be
configured to allow bursts of traffic to flow through at higher speeds.
Average Bandwidth Establishes the number of bits per second to allow across a port, averaged
over time. This number is the allowed average load.
Peak Bandwidth Maximum number of bits per second to allow across a port when it is
sending or receiving a burst of traffic. This number limits the bandwidth that
a port uses when it is using its burst bonus.
Burst Size Maximum number of bytes to allow in a burst. If this parameter is set, a port
might gain a burst bonus if it does not use all its allocated bandwidth. When
the port needs more bandwidth than specified by the average bandwidth, it
might be allowed to temporarily transmit data at a higher speed if a burst
bonus is available. This parameter limits the number of bytes that have
accumulated in the burst bonus and transfers traffic at a higher speed.
A traffic shaping policy is defined by three characteristics: average bandwidth, peak bandwidth, and burst
size.
Average Bandwidth Establishes the number of bits per second to allow across a port, averaged
over time—the allowed average load.
Burst Size The maximum number of bytes to allow in a burst. If this parameter is set, a
port may gain a burst bonus when it doesn’t use all its allocated bandwidth.
Whenever the port needs more bandwidth than specified by Average
Bandwidth, it may be allowed to temporarily transmit data at a higher speed
if a burst bonus is available. This parameter tops the number of bytes that
may be accumulated in the burst bonus and thus transferred at a higher
speed.
Peak Bandwidth The maximum number of bits per second to allow across a port when it is
sending a burst of traffic. This tops the bandwidth used by a port whenever
it is using its burst bonus. This parameter can never be smaller than the
average bandwidth.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
The Status policy here is applied to each virtual adapter attached to the port group, not to the standard
switch as a whole. If you enable the policy exception in the Status field, you set limits on the amount of
networking bandwidth allocation for each virtual adapter associated with this particular port group. If
you disable the policy, services have a clear connection to the physical network by default.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
3 Choose the vSphere Standard Switch view and click Properties for the port group to edit.
Option Description
Status If you enable the policy exception in the Status field, you are setting limits
on the amount of networking bandwidth allocated for each virtual adapter
associated with this particular port group. If you disable the policy,
services have a free and clear connection to the physical network.
Average Bandwidth A value measured over a particular period of time.
Peak Bandwidth Limits the maximum bandwidth during a burst. It can never be smaller
than the average bandwidth.
Burst Size Specifies how large a burst can be in kilobytes (KB).
A traffic shaping policy is defined by three characteristics: average bandwidth, peak bandwidth, and burst
size.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
3 Select Policies.
4 In the Traffic Shaping group, you can configure both Ingress Traffic Shaping and EgressTraffic
Shaping.
Status — If you enable the policy exception for either Ingress Traffic Shaping or Egress Traffic
Shaping in the Status field, you are setting limits on the amount of networking bandwidth allocated for
each virtual adapter associated with this particular port group. If you disable the policy, services have a
free, clear connection to the physical network by default.
Option Description
Average Bandwidth Establishes the number of bits per second to allow across a port, averaged
over time—the allowed average load.
Peak Bandwidth The maximum number of bits per second to allow across a port when it is
sending/receiving a burst of traffic. This tops the bandwidth used by a port
whenever it is using its burst bonus.
Burst Size The maximum number of bytes to allow in a burst. If this parameter is set,
a port may gain a burst bonus when it doesn’t use all its allocated
bandwidth. Whenever the port needs more bandwidth than specified by
Average Bandwidth, it may be allowed to temporarily transmit data at a
higher speed if a burst bonus is available. This parameter tops the number
of bytes that may be accumulated in the burst bonus and thus transferred
at a higher speed.
6 Click OK.
A traffic shaping policy is defined by three characteristics: average bandwidth, peak bandwidth, and burst
size.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
4 Click Policies.
5 In the Traffic Shaping group, you can configure both Inbound Traffic Shaping and Outbound Traffic
Shaping.
Status — If you enable the policy exception for either Inbound Traffic Shaping or Outbound Traffic
Shaping in the Status field, you are setting limits on the amount of networking bandwidth allocated for
each virtual adapter associated with this particular port group. If you disable the policy, services have a
free, clear connection to the physical network by default.
n Average Bandwidth establishes the number of bits per second to allow across a port, averaged
over time—the allowed average load.
n Peak Bandwidth is the maximum number of bits per second to allow across a port when it is
sending/receiving a burst of traffic. This tops the bandwidth used by a port whenever it is using its
burst bonus.
n Burst Size the maximum number of bytes to allow in a burst. If this parameter is set, a port may
gain a burst bonus when it doesn’t use all its allocated bandwidth. Whenever the port needs more
bandwidth than specified by Average Bandwidth, it may be allowed to temporarily transmit data
at a higher speed if a burst bonus is available. This parameter tops the number of bytes that may be
accumulated in the burst bonus and thus transferred at a higher speed.
7 Click OK.
For information about creating and configuring network resource pools, see “vSphere Network I/O
Control,” on page 247.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n Enable Network I/O Control on the host and create one or more user-defined network resource pools.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
3 Select Policies.
4 In the Resource Allocation group, select the Network Resource Pool to associate the distributed port
group with from the drop-down menu.
5 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n Enable Network I/O Control on the host and create one or more user-defined network resource pools.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
4 Select Policies.
5 In the Resource Allocation group, select the Network Resource Pool to associate the port with from the
drop-down menu.
6 Click OK.
Monitoring Policy
The monitoring policy enables or disables NetFlow monitoring on a distributed port or port group.
NetFlow settings are configured at the vSphere distributed switch level. See “Configure NetFlow Settings,”
on page 293.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
3 Select Policies.
Option Description
Disabled NetFlow is disabled on the distributed port group.
Enabled NetFlow is enabled on the distributed port group. You can configure
NetFlow settings at the vSphere distributed switch level. See “Configure
NetFlow Settings,” on page 293.
5 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
4 Select Policies.
Option Description
Disabled NetFlow is disabled on the port.
Enabled NetFlow is enabled on the port. You can configure NetFlow settings at the
distributed switch level. See “Configure NetFlow Settings,” on page 293.
6 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed port group in the inventory pane, and select Edit Settings.
3 Select Policies.
4 In the Miscellaneous group, choose whether to Block all ports in this distributed port group.
5 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
3 On the Ports tab, right-click the port to modify and select Edit Settings.
4 Click Policies.
6 Click OK.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
Option Description
Security Set MAC address changes, forged transmits, and promiscuous mode for
the selected port groups.
Traffic Shaping Set the average bandwidth, peak bandwidth, and burst size for inbound
and outband traffic on the selected port groups.
VLAN Configure how the selected port groups connect to physical VLANs.
Teaming and Failover Set load balancing, failover detection, switch notification, and failover
order for the selected port groups.
Resource Allocation Set network resource pool association for the selected port groups. This
option is available for vSphere distributed switch versions 5.0.0 and later
only.
Monitoring Enable or disable NetFlow on the selected port groups. This option is
available for vSphere distributed switch versions 5.0.0 and later only.
Miscellaneous Enable or disable port blocking on the selected port groups.
4 Click Next.
The policy configuration page appears. Only the policy categories you previously selected are
displayed.
6 (Optional) In the Security group, select whether to reject or accept the Security policy exceptions.
Option Description
Promiscuous Mode n Reject — Placing a guest adapter in promiscuous mode has no effect
on which frames are received by the adapter.
n Accept — Placing a guest adapter in promiscuous mode causes it to
detect all frames passed on the vSphere distributed switch that are
allowed under the VLAN policy for the port group that the adapter is
connected to.
MAC Address Changes n Reject — If you set the MAC Address Changes to Reject and the guest
operating system changes the MAC address of the adapter to anything
other than what is in the .vmx configuration file, all inbound frames
are dropped.
If the Guest OS changes the MAC address back to match the MAC
address in the .vmx configuration file, inbound frames are passed
again.
n Accept — Changing the MAC address from the Guest OS has the
intended effect: frames to the new MAC address are received.
Forged Transmits n Reject — Any outbound frame with a source MAC address that is
different from the one currently set on the adapter are dropped.
n Accept — No filtering is performed and all outbound frames are
passed.
7 (Optional) In the Traffic Shaping group, you can configure both Ingress Traffic Shaping and Egress
Traffic Shaping.
Status — If you enable the policy exception for either Ingress Traffic Shaping or Egress Traffic
Shaping in the Status field, you are setting limits on the amount of networking bandwidth allocated for
each distributed port associated with the selected port groups. If you disable the policy, the amount of
network bandwidth is not limited before it reaches the physical network .
Option Description
Average Bandwidth Establishes the number of bits per second to allow across a port, averaged
over time—the allowed average load.
Peak Bandwidth The maximum number of bits per second to allow across a port when it is
sending/receiving a burst of traffic. This tops the bandwidth used by a port
whenever it is using its burst bonus.
Burst Size The maximum number of bytes to allow in a burst. If this parameter is set,
a port may gain a burst bonus when it doesn’t use all its allocated
bandwidth. Whenever the port needs more bandwidth than specified by
Average Bandwidth, it may be allowed to temporarily transmit data at a
higher speed if a burst bonus is available. This parameter tops the number
of bytes that may be accumulated in the burst bonus and thus transferred
at a higher speed.
Option Description
None Do not use VLAN.
VLAN In the VLAN ID field, enter a number between 1 and 4094.
VLAN Trunking Enter a VLAN trunk range.
Private VLAN Select an available private VLAN to use.
Option Description
Load Balancing Specify how to choose an uplink.
n Route based on the originating virtual port — Choose an uplink
based on the virtual port where the traffic entered the distributed
switch.
n Route based on ip hash — Choose an uplink based on a hash of the
source and destination IP addresses of each packet. For non-IP packets,
whatever is at those offsets is used to compute the hash.
n Route based on source MAC hash — Choose an uplink based on a
hash of the source Ethernet.
n Route based on physical NIC load — Choose an uplink based on the
current loads of physical NICs.
n Use explicit failover order — Always use the highest order uplink
from the list of Active adapters which passes failover detection criteria.
NOTE IP-based teaming requires that the physical switch be configured
with etherchannel. For all other options, etherchannel should be disabled.
Network Failover Detection Specify the method to use for failover detection.
n Link Status only – Relies solely on the link status that the network
adapter provides. This option detects failures, such as cable pulls and
physical switch power failures, but not configuration errors, such as a
physical switch port being blocked by spanning tree or that is
misconfigured to the wrong VLAN or cable pulls on the other side of a
physical switch.
n Beacon Probing – Sends out and listens for beacon probes on all NICs
in the team and uses this information, in addition to link status, to
determine link failure. This detects many of the failures previously
mentioned that are not detected by link status alone.
NOTE Do not use beacon probing with IP-hash load balancing.
Notify Switches Select Yes or No to notify switches in the case of failover.
If you select Yes, whenever a virtual NIC is connected to the distributed
switch or whenever that virtual NIC’s traffic would be routed over a
different physical NIC in the team because of a failover event, a
notification is sent out over the network to update the lookup tables on
physical switches. In almost all cases, this process is desirable for the
lowest latency of failover occurrences and migrations with vMotion.
NOTE Do not use this option when the virtual machines using the port
group are using Microsoft Network Load Balancing in unicast mode. No
such issue exists with NLB running in multicast mode.
Failback Select Yes or No to disable or enable failback.
This option determines how a physical adapter is returned to active duty
after recovering from a failure. If failback is set to Yes (default), the adapter
is returned to active duty immediately upon recovery, displacing the
standby adapter that took over its slot, if any. If failback is set to No, a
failed adapter is left inactive even after recovery until another currently
active adapter fails, requiring its replacement.
Failover Order Specify how to distribute the work load for uplinks. If you want to use
some uplinks but reserve others for emergencies in case the uplinks in use
fail, set this condition by moving them into different groups:
n Active Uplinks — Continue to use the uplink when the network
adapter connectivity is up and active.
n Standby Uplinks — Use this uplink if one of the active adapter’s
connectivity is down.
n Unused Uplinks — Do not use this uplink.
NOTE When using IP-hash load balancing, do not configure standby
uplinks.
11 (Optional) In the Resource Allocation group, choose the Network Resource Pool to associate the
distributed port group with from the drop-down menu.
Option Description
Disabled NetFlow is disabled on the distributed port group.
Enabled NetFlow is enabled on the distributed port group. NetFlow settings can be
configured at the vSphere distributed switch level.
13 (Optional) In the Miscellaneous group, choose whether to Block all ports in this distributed port
group.
14 Click Next.
All displayed policies are applied to all selected port groups, inculding those policies that have not been
changed.
15 (Optional) If you need to make any changes, click Back to the appropriate screen.
IPv6 is designated by the Internet Engineering Task Force as the successor to IPv4. The most obvious
difference is address length. IPv6 uses 128-bit addresses rather than the 32-bit addresses used by IPv4. This
increase resolves the problem of address exhaustion and eliminates the need for network address
translation. Other differences include link-local addresses that appear as the interface is initialized,
addresses that are set by router advertisements, and the ability to have multiple IPv6 addresses on an
interface.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 From the vSphere Client Home page, click Hosts and Clusters.
VLAN Configuration
Virtual LANs (VLANs) enable a single physical LAN segment to be further isolated so that groups of ports
are isolated from one another as if they were on physically different segments.
You can configure VLANs in ESXi using three methods: External Switch Tagging (EST), Virtual Switch
Tagging (VST), and Virtual Guest Tagging (VGT).
With EST, all VLAN tagging of packets is performed on the physical switch. Host network adapters are
connected to access ports on the physical switch. Port groups that are connected to the virtual switch must
have their VLAN ID set to 0.
With VST, all VLAN tagging of packets is performed by the virtual switch before leaving the host. Host
network adapters must be connected to trunk ports on the physical switch. Port groups that are connected
to the virtual switch must have a VLAN ID between 1 and 4094.
With VGT, all VLAN tagging is done by the virtual machine. VLAN tags are preserved between the virtual
machine networking stack and external switch when frames pass to and from virtual switches. Host
network adapters must be connected to trunk ports on the physical switch. For a standard switch the VLAN
ID of port groups with VGT must be set to 4095. For a distributed switch the VLAN trunking policy must
include the range of the VLANs to which virtual machines are connected.
NOTE When using VGT, you must have an 802.1Q VLAN trunking driver installed on the virtual machine.
Port mirroring is used on a switch to send a copy of packets seen on one switch port (or an entire VLAN) to
a monitoring connection on another switch port. Port mirroring is used to analyze and debug data or
diagnose errors on a network.
vSphere 5.1 and later vSphere 5.1 and later vSphere 5.1 and later vSphere 5.1 port mirroring is
available for use. Features
for vSphere 5.0 and earlier
port mirroring are not
available.
vSphere 5.1 and later vSphere 5.1 and later vSphere 5.0 and earlier vSphere 5.0 and earlier hosts
can be added to vSphere 5.1
vCenter Server, but cannot
be added to distributed
switches version 5.1 and
later.
vSphere 5.1 and later vSphere 5.0 vSphere 5.0 vSpherevCenter Server
version 5.1 and later can
configure port mirroring on
a vSphere 5.0 distributed
switch.
vSphere 5.1 and later vSphere 5.0 vSphere 5.1 and later Hosts running vSphere 5.1
can be added to vSphere 5.0
distributed switches and
support vSphere 5.0 port
mirroring.
vSphere 5.1 and later Pre-vSphere 5.0 vSphere 5.5 and earlier Port mirroring is not
supported.
vSphere 5.0 and earlier vSphere 5.0 and earlier vSphere 5.1 A vSphere 5.1 host cannot be
added to vCenter Server 5.0
and earlier.
If you use a host profile with port mirroring settings, the host profile must be adapted to the new version of
port mirroring in vSphere 5.1 and later.
vMotion
vMotion functions differently depending on which vSphere 5.1 port mirroring session type you select.
During vMotion, a mirroring path could be temporarily invalid, but is restored when vMotion completes.
IP destination No
When TSO is enabled on a vNIC, the vNIC might send a large packet to a distributed switch. When LRO is
enabled on a vNIC, small packets sent to it might be merged into a large packet.
TSO LRO Packets from the source vNIC might be large packets, and whether they are split is
determined by whether their sizes are larger than the destination vNIC LRO limitation.
TSO Any destination Packets from the source vNIC might be large packets, and they are split to standard
packets at the destination vNIC.
Any source LRO Packets from the source vNIC are standard packets, and they might be merged into
larger packets at the destination vNIC.
Prerequisites
Create a vSphere distributed switch version 5.0.0 or later.
Procedure
1 Specify Port Mirroring Name and Session Details on page 289
Specify the name, description, and session details for the new port mirroring session.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
5 (Optional) Select Allow normal IO on destination ports to allow normal IO traffic on destination ports.
If you do not select this option, mirrored traffic will be allowed out on destination ports, but no traffic
will be allowed in.
6 (Optional) Select Encapsulation VLAN to create a VLAN ID that encapsulates all frames at the
destination ports.
If the original frames have a VLAN and Preserve original VLAN is not selected, the encapsulation
VLAN replaces the original VLAN.
7 (Optional) Select Preserve original VLAN to keep the original VLAN in an inner tag so mirrored
frames are double encapsulated.
8 (Optional) Select Mirrored packet length to put a limit on the size of mirrored frames.
If this option is selected, all mirrored frames are truncated to the specified length.
9 Click Next.
Procedure
1 Choose whether to use this source for Ingress or Egress traffic, or choose Ingress/Egress to use this
source for both types of traffic.
2 Type the source port IDs and click >> to add the sources to the port mirroring session.
3 Click Next.
Port Mirroring is checked against the VLAN forwarding policy. If the VLAN of the original frames is not
equal to or trunked by the destination port, the frames are not mirrored.
Procedure
1 Choose the Destination type.
Option Description
Port Type in one or more Port IDs to use as a destination for the port mirroring
session. Separate multiple IDs with a comma.
Uplink Select one or more uplinks to use as a destination for the port mirroring
session.
2 Click >> to add the selected destinations to the port mirroring session.
4 Click Next.
Procedure
1 Verify that the listed name and settings for the new port mirroring session are correct.
3 (Optional) Click Enable this port mirroring session to start the port mirroring session immediately.
4 Click Finish.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
3 On the Port Mirroring tab, select the port mirroring session to view.
Details for the selected port mirroring session appear under Port Mirroring Session Details.
4 (Optional) Click Edit to edit the details for the selected port mirroring session.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
3 On the Port Mirroring tab, select the port mirroring session to modify and click Edit.
8 (Optional) Select Allow normal IO on destination ports to allow normal IO traffic on destination ports.
If you do not select this option, mirrored traffic is allowed out on destination ports, but no traffic is
allowed in.
9 (Optional) Select Encapsulation VLAN to create a VLAN ID that encapsulates all frames at the
destination ports.
If the original frames have a VLAN and Preserve original VLAN is not selected, the encapsulation
VLAN replaces the original VLAN.
10 (Optional) Select Preserve original VLAN to keep the original VLAN in an inner tag so mirrored
frames are double encapsulated.
11 (Optional) Select Mirrored packet length to put a limit on the size of mirrored frames.
If this option is selected, all mirrored frames are truncated to the specified length.
12 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
3 On the Port Mirroring tab, select the port mirroring session to modify and click Edit.
5 (Optional) Select whether to use this source for Ingress or Egress traffic, or select Ingress/Egress to use
this source for both types of traffic.
6 (Optional) Type one or more port IDs or ranges of port IDs to add as source for the port mirroring
session, and click >>.
Separate multiple IDs with commas.
7 (Optional) Select a source in the right-hand list and click << to remove the source from the port
mirroring session.
8 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
3 On the Port Mirroring tab, select the port mirroring session to modify and click Edit.
Option Description
Port Type one or more Port IDs to use as a destination for the port mirroring
session. Separate multiple IDs with a comma.
Uplink Select one or more uplinks to use as a destination for the port mirroring
session.
6 (Optional) Type one or more port IDs or ranges of port IDs to add as a destination for the port
mirroring session and click >>.
7 (Optional) Select a destination from the right-hand column and click << to remove the destination from
the port mirroring session.
8 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
With an IP address to the vSphere distributed switch, the NetFlow collector can interact with the
vSphere distributed switch as a single switch, rather than interacting with a separate, unrelated switch
for each associated host.
6 (Optional) Use the up and down menu arrows to set the Active flow export timeout and Idle flow
export timeout.
7 (Optional) Use the up and down menu arrows to set the Sampling rate.
The sampling rate determines what portion of data NetFlow collects, with the sampling rate number
determining how often NetFlow collects the packets. A collector with a sampling rate of 2 collects data
from every other packet. A collector with a sampling rate of 5 collects data from every fifth packet.
8 (Optional) Select Process internal flows only to collect data only on network activity between virtual
machines on the same host.
9 Click OK.
vSphere 5.0 and later supports Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP).
CDP is available for vSphere standard switches and vSphere distributed switches connected to Cisco
physical switches. LLDP is available for vSphere distributed switches version 5.0.0 and later.
When CDP or LLDP is enabled for a particular vSphere distributed switch or vSphere standard switch, you
can view properties of the peer physical switch such as device ID, software version, and timeout from the
vSphere Web Client.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
Option Description
Listen ESXi detects and displays information about the associated Cisco switch
port, but information about the vSphere distributed switch is not available
to the Cisco switch administrator.
Advertise ESXi makes information about the vSphere distributed switch available to
the Cisco switch administrator, but does not detect and display
information about the Cisco switch.
Both ESXi detects and displays information about the associated Cisco switch
and makes information about the vSphere distributed switch available to
the Cisco switch administrator.
7 Click OK.
LLDP is available only on vSphere distributed switch version 5.0.0 and later.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the vSphere distributed switch in the inventory pane, and select Edit Settings.
5 Select Link Layer Discovery Protocol from the Type drop-down menu.
Option Description
Listen ESXi detects and displays information about the associated physical switch
port, but information about the vSphere distributed switch is not available
to the switch administrator.
Advertise ESXi makes information about the vSphere distributed switch available to
the switch administrator, but does not detect and display information
about the physical switch.
Both ESXi detects and displays information about the associated physical switch
and makes information about the vSphere distributed switch available to
the switch administrator.
7 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the host from the inventory panel.
3 Click the information icon to the right of the vSphere standard switch or vSphere distributed switch to
display information for that switch.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the host from the inventory panel.
5 Choose whether to obtain the DNS server address automatically or use a DNS server address.
8 Click OK.
Each network adapter manufacturer is assigned a unique three-byte prefix called an Organizationally
Unique Identifier (OUI), which it can use to generate unique MAC addresses.
VMware supports several address allocation mechanisms, each of them with a separate OUI:
n Generated for legacy virtual machines, but no longer used with ESXi
If you reconfigure the network adapter of a powered off virtual machine, for example by changing the
automatic MAC address allocation type, or setting a static MAC address, vCenter Server resolves any MAC
address conflict before the adapter reconfiguration takes effect.
To change allocation schemes from VMware OUI to a range- or prefixed-based allocation, you must add a
key and default value to Advanced Settings. If you already added the key and default values, use Advanced
Settings to adjust the parameters for each key.
To change from a range- or prefixed-based allocation to the VMware OUI allocation, you cannot use the
vSphere Client. You must edit the vpxd.cfg file manually. VMware recommends changing allocation types
through the vSphere Client because editing files can introduce errors. For information about editing the
vpxd.cfg file, see the vSphere Networking publication.
CAUTION Prefix-based MAC address allocation is only supported invCenter Server 5.1 and 5.1 hosts. If you
add pre-5.1 hosts to vCenter Server 5.1 , and use anything other than VMware OUI prefix-based MAC
address allocation, virtual machines assigned non-VMware OUI prefixed MAC addresses fail to power on
their pre-5.1 hosts.
The prefix-based MAC address allocation schemes are not supported on pre-5.1 hosts because pre-5.1 hosts
explicitly validate if an assigned MAC address uses the VMware OUI 00:50:56 prefix. If the MAC address is
not prefixed with 00:50:56, the virtual machine pre-5.1 host fails to power on.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select Administration > Server Settings.
u Prefix-based allocation
config.vpxd.macAllocScheme.prefixScheme.prefix 005026
config.vpxd.macAllocScheme.prefixScheme.prefixLength 23
Change the default values to your choice of prefix and prefix length.
u Range-based allocation
config.vpxd.macAllocScheme.rangeScheme.range[0].begin 005067000000
config.vpxd.macAllocScheme.rangeScheme.range[0].end 005067ffffff
Change the default values to the allocation range of your choice. Replace [0] with the range ID of
your choice.
4 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the virtual machine from the inventory panel.
n “Display Storage Devices for a Host in the vSphere Client,” on page 300
n “Display Storage Devices for an Adapter in the vSphere Client,” on page 301
n “Configure Advanced Parameters for iSCSI in the vSphere Client,” on page 320
The following storage features are unavailable or read-only in the vSphere Client:
n Virtual Volumes
Use the vSphere Web Client as the primary interface for managing the full range of storage functions
available in your vSphere 6.0 environment.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a host and click the Configuration tab.
3 Click Devices.
4 To view additional details about a specific device, select the device from the list.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a host and click the Configuration tab.
4 Click Devices.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a host and click the Configuration tab.
3 To view details for a specific adapter, select the adapter from the Storage Adapters list.
4 To list all storage devices the adapter can access, click Devices.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a host and click the Configuration tab.
4 To display details for a particular datastore, select the datastore from the list.
You can create from 1 to 16 WWN pairs, which can be mapped to the first 1 to 16 physical HBAs on the host.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
Procedure
1 Open the New Virtual Machine wizard.
5 From a list of SAN disks or LUNs, select a raw LUN you want your virtual machine to access directly.
You can place the RDM file on the same datastore where your virtual machine files reside, or select a
different datastore.
NOTE If you want to use vMotion for a virtual machine with enabled NPIV, make sure that the RDM
file is located on the same datastore where the virtual machine configuration file resides.
7 Follow the steps required to create a virtual machine with the RDM.
8 On the Ready to Complete page, select the Edit the virtual machine settings before completion check
box and click Continue.
A minimum of 2 WWPNs are needed to support failover with NPIV. Typically only 1 WWNN is
created for each virtual machine.
10 Click Finish.
What to do next
Register newly created WWNs in the fabric so that the virtual machine is able to log in to the switch, and
assign storage LUNs to the WWNs.
Typically, you do not need to change existing WWN assignments on your virtual machine. In certain
circumstances, for example, when manually assigned WWNs are causing conflicts on the SAN, you might
need to change or remove WWNs.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
Make sure to power off the virtual machine if you want to edit the existing WWNs.
Before you begin, ensure that your SAN administrator has provisioned the storage LUN ACL to allow the
virtual machine’s ESXi host to access it.
Procedure
1 Open the Virtual Machine Properties dialog box by clicking the Edit Settings link for the selected
virtual machine.
Option Description
Temporarily disable NPIV for this Disable the WWN assignments for the virtual machine.
virtual machine
Leave unchanged The existing WWN assignments are retained. The read-only WWN
Assignments section of this dialog box displays the node and port values
of any existing WWN assignments.
Generate new WWNs New WWNs are generated and assigned to the virtual machine,
overwriting any existing WWNs (those of the HBA itself are unaffected).
Remove WWN assignment The WWNs assigned to the virtual machine are removed and it uses the
HBA WWNs to access the storage LUN. This option is not available if you
are creating a new virtual machine.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
5 Select Create a vSphere standard switch to create a new vSphere standard switch.
6 Select the network adapter (vmnic#) that supports FCoE and click Next.
If your host has multiple network adapters or multiple ports on the adapter, you can add all of them to
a single vSphere standard switch. An alternative is to connect each FCoE NIC to a separate standard
switch.
NOTE ESXi supports the maximum of four network adapter ports used for software FCoE.
Network label is a friendly name that identifies the VMkernel adapter that you are creating, for
example, FCoE.
Because FCoE traffic requires an isolated network, make sure that the VLAN ID you enter is different
from the one used for regular networking on your host. For more information, see the vSphere
Networking documentation.
9 Specify the IP settings and click Next.
You have created the virtual VMkernel adapter for the physical FCoE network adapter installed on your
host.
NOTE To avoid FCoE traffic disruptions, do not remove the FCoE network adapter (vmnic#) from the
vSphere standard switch after you set up FCoE networking.
The number of software FCoE adapters you can activate corresponds to the number of physical FCoE NIC
ports on your host. ESXi supports the maximum of four software FCoE adapters on one host.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab and click Storage Adapters in the Hardware panel.
4 On the Add Software FCoE Adapter dialog box, select an appropriate vmnic from the drop-down list of
physical network adapters.
Only those adapters that are not yet used for FCoE traffic are listed.
5 Click OK.
After you activate the software FCoE adapter, you can view its properties. If you do not use the adapter, you
can remove it from the list of adapters.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the host in the inventory panel.
2 Click the Configuration tab and click Advanced Settings under Software.
3 Click Disk in the left panel and scroll down to Disk.EnableNaviReg on the right.
When you connect the vSphere Client directly to a host, the setup and configuration process for the
independent hardware iSCSI adapters involves these steps:
For installation information and information on firmware updates, see vendor documentation.
3 Verity that the adapter is installed correctly.
See “View Independent Hardware iSCSI Adapters in the vSphere Client,” on page 305.
Prerequisites
Required privilege: Host.Configuration.Storage Partition Configuration
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab and click Storage Adapters in the Hardware panel.
If it is installed, the hardware iSCSI adapter appears on the list of storage adapters.
The default details for the adapter appear, including the model, iSCSI name, iSCSI alias, IP address, and
target and paths information.
4 Click Properties.
The iSCSI Initiator Properties dialog box appears. The General tab displays additional characteristics of
the adapter.
You can now configure your independent hardware adapter or change its default characteristics.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Access the iSCSI Initiator Properties dialog box.
2 Click Configure.
3 To change the default iSCSI name for your adapter, enter the new name.
Make sure the name you enter is worldwide unique and properly formatted or some storage devices
might not recognize the iSCSI adapter.
The alias is a name that you use to identify the independent hardware iSCSI adapter.
You must change the default IP settings so that they are configured properly for the IP SAN. Work with
your network administrator to determine the IP setting for the HBA.
If you change the iSCSI name, it will be used for new iSCSI sessions. For existing sessions, new settings will
not be used until logout and re-login.
An example of a dependent iSCSI adapter is a Broadcom 5709 NIC. When installed on a host, it presents its
two components, a standard network adapter and an iSCSI engine, to the same port. The iSCSI engine
appears on the list of storage adapters as an iSCSI adapter (vmhba). Although the iSCSI adapter is enabled
by default, to make it functional, you must first connect it, through a virtual VMkernel adapter (vmk), to a
physical network adapter (vmnic) associated with it. You can then configure the iSCSI adapter.
After you configure the dependent hardware iSCSI adapter, the discovery and authentication data are
passed through the network connection, while the iSCSI traffic goes through the iSCSI engine, bypassing the
network.
The entire setup and configuration process for the dependent hardware iSCSI adapters involves these steps:
If your dependent hardware adapters do not appear on the list of storage adapters, check whether they
need to be licensed. See your vendor documentation.
2 Determine the association between the dependent hardware adapters and physical NICs.
See “Determine Association Between iSCSI and Network Adapters,” on page 308.
Make sure to note the names of the corresponding physical NICs. For example, the vmhba33 adapter
corresponds to vmnic1 and vmhba34 corresponds to vmnic2.
Configuring the network involves creating a VMkernel interface for each physical network adapter and
associating the interface with an appropriate iSCSI adapter.
If the dependent hardware adapter does not appear on the list of storage adapters, check whether it needs to
be licensed. See your vendor documentation.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab and click Storage Adapters in the Hardware panel.
If it is installed, the dependent hardware iSCSI adapter appears on the list of storage adapters under
such category as, for example, Broadcom iSCSI Adapter.
The iSCSI Initiator Properties dialog box opens. It displays the default details for the adapter, including
the iSCSI name, iSCSI alias, and the status.
What to do next
Although the dependent iSCSI adapter is enabled by default, to make it functional, you must set up
networking for the iSCSI traffic and bind the adapter to the appropriate VMkernel iSCSI port. You then
configure discovery addresses and CHAP parameters.
Prerequisites
Required privilege: Host.Configuration.Storage Partition Configuration
Procedure
1 In the iSCSI Initiator Properties dialog box, click the Network Configuration tab.
2 Click Add.
The network adapter, for example vmnic2, that corresponds to the dependent iSCSI adapter is listed.
What to do next
You must bind the associated dependent hardware iSCSI and network adapters by creating the network
connections.
Before you can use the software iSCSI adapter, you must set up networking, activate the adapter, and
configure parameters such as discovery addresses and CHAP.
NOTE Designate a separate network adapter for iSCSI. Do not use iSCSI on 100Mbps or slower adapters.
See “Activate the Software iSCSI Adapter in the vSphere Client,” on page 308.
Configuring the network involves creating a VMkernel interface for each physical network adapter that
you use for iSCSI and associating all interfaces with the software iSCSI adapter.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
NOTE If you boot from iSCSI using the software iSCSI adapter, the adapter is enabled and the network
configuration is created at the first boot. If you disable the adapter, it is reenabled each time you boot the
host.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab and click Storage Adapters in the Hardware panel.
4 Select the iSCSI adapter from the list and click Properties.
5 Click Configure.
After enabling the adapter, the host assigns the default iSCSI name to it. If you change the default
name, follow iSCSI naming conventions.
NOTE If you disable the adapter that is used for software iSCSI boot, the adapter is reenabled each time you
boot the host.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab and click Storage Adapters in the Hardware panel.
3 Select the software iSCSI adapter from the list of storage adapters and click Properties.
4 Click Configure.
After reboot, the adapter no longer appears on the list of storage adapters.
Configuring the network connection involves creating a virtual VMkernel adapter for each physical network
adapter. You then associate the VMkernel adapter with an appropriate iSCSI adapter. This process is called
port binding.
For specific considerations on when and how to use network connections with software iSCSI, see the
VMware knowledge base article at http://kb.vmware.com/kb/2038869.
You can connect the software iSCSI adapter with any physical NICs available on your host. The dependent
iSCSI adapters must be connected only to their own physical NICs.
NOTE Physical NICs must be on the same subnet as the iSCSI storage system they connect to.
virtual
vmk1 vmk2 vmk1 vmk2
adapters
vSwitch vSwitch
IP network
The iSCSI adapter and physical NIC connect through a virtual VMkernel adapter, also called virtual
network adapter or VMkernel port. You create a VMkernel adapter (vmk) on a vSphere switch (vSwitch)
using 1:1 mapping between each virtual and physical network adapter.
One way to achieve the 1:1 mapping when you have multiple NICs, is to designate a separate vSphere
switch for each virtual-to-physical adapter pair.
NOTE If you use separate vSphere switches, you must connect them to different IP subnets. Otherwise,
VMkernel adapters might experience connectivity problems and the host will fail to discover iSCSI LUNs.
The following examples show configurations that use vSphere standard switches, but you can use
distributed switches as well. For more information about vSphere distributed switches, see the vSphere
Networking documentation.
iSCSI1 vmnic1
vmk1
vSwitch2
iSCSI2 vmnic2
vmk2
An alternative is to add all NICs and VMkernel adapters to a single vSphere standard switch. In this case,
you must override the default network setup and make sure that each VMkernel adapter maps to only one
corresponding active physical adapter.
NOTE You must use the single vSwitch configuration if VMkernel adapters are on the same subnet.
iSCSI2 vmnic2
vmk2 vmnic1
iSCSI1
vmk1
The following table summarises the iSCSI networking configuration discussed in this topic.
Software iSCSI
vmk2 vmnic2
The following tasks discuss the iSCSI network configuration with a vSphere standard switch.
If you use a vSphere distributed switch with multiple uplink ports, for port binding, create a separate
distributed port group per each physical NIC. Then set the team policy so that each distributed port group
has only one active uplink port. For detailed information on vSphere distributed switches, see the vSphere
Networking documentation.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
IMPORTANT If you are creating a VMkernel interface for the dependent hardware iSCSI adapter, select
the NIC that corresponds to the iSCSI component. See “Determine Association Between iSCSI and
Network Adapters,” on page 308.
7 Click Next.
A network label is a friendly name that identifies the VMkernel adapter that you are creating, for
example, iSCSI.
9 Click Next.
You created the virtual VMkernel adapter for a physical network adapter on your host.
What to do next
If your host has one physical network adapter for iSCSI traffic, you must bind the virtual adapter that you
created to the iSCSI adapter.
If you have multiple network adapters, create additional VMkernel adapters and then perform iSCSI
binding. The number of virtual adapters must correspond to the number of physical adapters on the host.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
You must create a vSphere standard switch that maps an iSCSI VMkernel adapter to a single physical NIC
designated for iSCSI traffic.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
3 Select the vSphere standard switch that you use for iSCSI and click Properties.
b Select one or more NICs from the list and click Next.
With dependent hardware iSCSI adapters, select only those NICs that have a corresponding iSCSI
component.
c Review the information on the Adapter Summary page and click Finish.
The list of network adapters reappears, showing the network adapters that the vSphere standard
switch now claims.
5 Create iSCSI VMkernel adapters for all NICs that you added.
The number of VMkernel interfaces must correspond to the number of NICs on the vSphere standard
switch.
a In the standard switch Properties dialog box, click the Ports tab and click Add.
When you enter the subnet mask, make sure that the NIC is set to the subnet of the storage system
it connects to.
CAUTION If the NIC you use with your iSCSI adapter, either software or dependent hardware, is not in
the same subnet as your iSCSI target, your host cannot establish sessions from this network adapter to
the target.
What to do next
Change the network policy for all VMkernel adapters, so that it is compatible with the network binding
requirements. You can then bind the iSCSI VMkernel adapters to the software iSCSI or dependent hardware
iSCSI adapters.
By default, for each virtual adapter on the vSphere standard switch, all network adapters appear as active.
You must override this setup, so that each VMkernel interface maps to only one corresponding active NIC.
For example, vmk1 maps to vmnic1, vmk2 maps to vmnic2, and so on.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Create a vSphere standard switch that connects VMkernel with physical network adapters designated for
iSCSI traffic. The number of VMkernel adapters must correspond to the number of physical adapters on the
vSphere standard switch.
Procedure
1 Log in to the vSphere Client and select the host from the inventory panel.
3 Select the vSphere standard switch that you use for iSCSI and click Properties.
4 On the Ports tab, select an iSCSI VMkernel adapter and click Edit.
5 Click the NIC Teaming tab and select Override switch failover order.
6 Designate only one physical adapter as active and move all remaining adapters to the Unused Adapters
category.
7 Repeat Step 4 through Step 6 for each iSCSI VMkernel interface on the vSphere standard switch.
What to do next
After you perform this task, bind the virtual VMkernel adapters to the software iSCSI or dependent
hardware iSCSI adapters.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Create a virtual VMkernel adapter for each physical network adapter on your host. If you use multiple
VMkernel adapters, set up the correct network policy.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab, and click Storage Adapters in the Hardware panel.
3 Select the software or dependent iSCSI adapter to configure and click Properties.
4 In the iSCSI Initiator Properties dialog box, click the Network Configuration tab.
5 Click Add and select a VMkernel adapter to bind with the iSCSI adapter.
You can bind the software iSCSI adapter to one or more VMkernel adapters. For a dependent hardware
iSCSI adapter, only one VMkernel interface associated with the correct physical NIC is available.
6 Click OK.
The network connection appears on the list of VMkernel port bindings for the iSCSI adapter.
7 Verify that the network policy for the connection is compliant with the binding requirements.
Jumbo Frames are Ethernet frames with the size that exceeds 1500 Bytes. The maximum transmission unit
(MTU) parameter is typically used to measure the size of Jumbo Frames. ESXi allows Jumbo Frames with
the MTU up to 9000 Bytes.
When you use Jumbo Frames for iSCSI traffic, the following considerations apply:
n The network must support Jumbo Frames end-to-end for Jumbo Frames to be effective.
n Check with your vendors to ensure your physical NICs and iSCSI HBAs support Jumbo Frames.
n To set up and verify physical network switches for Jumbo Frames, consult your vendor documentation.
The following table explains the level of support that ESXi provides to Jumbo Frames.
Enable Jumbo Frames on the Standard switch and VMkernel adapter by changing the maximum
transmission units (MTU) parameter.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
3 Click Properties for the standard switch you use for iSCSI traffic.
4 On the Ports tab, select the standard switch and click Edit.
5 Set the MTU parameter for the standard switch, and click OK.
This step sets the MTU for all physical NICs on that standard switch. The MTU value should be set to
the largest MTU size among all NICs connected to the standard switch.
6 On the Ports tab, select the VMkernel adapter and click Edit.
7 Set the MTU to match the value configured on the standard switch, and click OK.
Dynamic Discovery Also known as SendTargets discovery. Each time the initiator contacts a
specified iSCSI server, the initiator sends the SendTargets request to the
server. The server responds by supplying a list of available targets to the
initiator. The names and IP addresses of these targets appear on the Static
Discovery tab. If you remove a static target added by dynamic discovery, the
target might be returned to the list the next time a rescan happens, the iSCSI
adapter is reset, or the host is rebooted.
NOTE With software and dependent hardware iSCSI, ESXi filters target
addresses based on the IP family of the iSCSI server address specified. If the
address is IPv4, IPv6 addresses that might come in the SendTargets response
from the iSCSI server are filtered out. When DNS names are used to specify
an iSCSI server, or when the SendTargets response from the iSCSI server has
DNS names, ESXi relies on the IP family of the first resolved entry from DNS
lookup.
Static Discovery In addition to the dynamic discovery method, you can use static discovery
and manually enter information for the targets. The iSCSI adapter uses a list
of targets that you provide to contact and communicate with the iSCSI
servers.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab, and click Storage Adapters in the Hardware panel.
3 Click the Configuration tab, and click Storage Adapters in the Hardware panel.
7 Type the IP address or DNS name of the storage system and click OK.
After your host establishes the SendTargets session with this system, any newly discovered targets
appear in the Static Discovery list.
What to do next
After configuring Dynamic Discovery for your iSCSI adapter, rescan the adapter.
When you set up Static Discovery, you can only add new iSCSI targets. You cannot change the IP address,
DNS name, iSCSI target name, or port number of an existing target. To make changes, remove the existing
target and add a new one.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab, and click Storage Adapters in the Hardware panel.
The tab displays all dynamically discovered targets and any static targets already entered.
What to do next
After configuring Static Discovery for your iSCSI adapter, rescan the adapter.
CHAP uses a three-way handshake algorithm to verify the identity of your host and, if applicable, of the
iSCSI target when the host and target establish a connection. The verification is based on a predefined
private value, or CHAP secret, that the initiator and target share.
ESXi supports CHAP authentication at the adapter level. In this case, all targets receive the same CHAP
name and secret from the iSCSI initiator. For software and dependent hardware iSCSI adapters, ESXi also
supports per-target CHAP authentication, which allows you to configure different credentials for each
target to achieve greater level of security.
The CHAP name should not exceed 511 alphanumeric characters and the CHAP secret should not exceed
255 alphanumeric characters. Some adapters, for example the QLogic adapter, might have lower limits, 255
for the CHAP name and 100 for the CHAP secret.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
n Before setting up CHAP parameters for software or dependent hardware iSCSI, determine whether to
configure one-way or mutual CHAP. Independent hardware iSCSI adapters do not support mutual
CHAP.
n In mutual CHAP, both the target and the initiator authenticate each other. Use different secrets for
CHAP and mutual CHAP.
When you configure CHAP parameters, verify that they match the parameters on the storage side.
Procedure
1 Access the iSCSI Initiator Properties dialog box.
n Do not use CHAP unless required by target (software and dependent hardware iSCSI only)
n Use CHAP (software and dependent hardware iSCSI only). To configure mutual CHAP, you
must select this option.
b Specify the CHAP name.
Make sure that the name you specify matches the name configured on the storage side.
n To set the CHAP name to the iSCSI initiator name, select Use initiator name.
n To set the CHAP name to anything other than the iSCSI initiator name, deselect Use initiator
name and type a name in the Name text box.
c Enter a one-way CHAP secret to be used as part of authentication. Use the same secret that you
enter on the storage side.
4 To configure mutual CHAP, first configure one-way CHAP by following the directions in Step 3.
Make sure to select Use CHAP as an option for one-way CHAP. Then, specify the following under
Mutual CHAP:
c Enter the mutual CHAP secret. Make sure to use different secrets for the one-way CHAP and
mutual CHAP.
5 Click OK.
If you change the CHAP or mutual CHAP parameters, they are used for new iSCSI sessions. For existing
sessions, new settings are not used until you log out and log in again.
When configuring CHAP parameters, make sure that they match the parameters on the storage side. The
CHAP name should not exceed 511 and the CHAP secret 255 alphanumeric characters.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Before setting up CHAP parameters for software and dependent hardware iSCSI, determine whether to
configure one-way or mutual CHAP.
n In mutual CHAP, both the target and initiator authenticate each other. Make sure to use different
secrets for CHAP and mutual CHAP.
Procedure
1 Access the iSCSI Initiator Properties dialog box.
3 From the list of available targets, select a target you want to configure and click Settings > CHAP.
n Use CHAP. To be able to configure mutual CHAP, you must select this option.
Make sure that the name you specify matches the name configured on the storage side.
n To set the CHAP name to the iSCSI initiator name, select Use initiator name.
n To set the CHAP name to anything other than the iSCSI initiator name, deselect Use initiator
name and enter a name in the Name field.
d Enter a one-way CHAP secret to be used as part of authentication. Make sure to use the same secret
that you enter on the storage side.
5 To configure mutual CHAP, first configure one-way CHAP by following directions in Step 4.
Make sure to select Use CHAP as an option for one-way CHAP. Then, specify the following in the
Mutual CHAP area:
d Enter the mutual CHAP secret. Make sure to use different secrets for the one-way CHAP and
mutual CHAP.
6 Click OK.
7 Rescan the initiator.
If you change the CHAP or mutual CHAP parameters, they are used for new iSCSI sessions. For existing
sessions, new settings are not used until you log out and login again.
Disable CHAP
You can disable CHAP if your storage system does not require it.
If you disable CHAP on a system that requires CHAP authentication, existing iSCSI sessions remain active
until you reboot your host, end the session through the command line, or the storage system forces a logout.
After the session ends, you can no longer connect to targets that require CHAP.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Open the CHAP Credentials dialog box.
2 For software and dependent hardware iSCSI adapters, to disable just the mutual CHAP and leave the
one-way CHAP, select Do not use CHAP in the Mutual CHAP area.
3 To disable one-way CHAP, select Do not use CHAP in the CHAP area.
The mutual CHAP, if set up, automatically turns to Do not use CHAP when you disable the one-way
CHAP.
4 Click OK.
CAUTION Do not make any changes to the advanced iSCSI settings unless you are working with the
VMware support team or otherwise have thorough information about the values to provide for the settings.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Access the iSCSI Initiator Properties dialog box.
2 To configure advanced parameters at the initiator level, on the General tab, click Advanced. Proceed to
Step 4.
At the target level, advanced parameters can be configured only for software and dependent hardware
iSCSI adapters.
4 Enter any required values for the advanced parameters you want to modify and click OK to save your
changes.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the host in the vSphere Client inventory.
Use this procedure if you want to limit the rescan to storage available to a particular host or accessed
through a particular adapter on the host. If you want to rescan storage available to all hosts managed by
your vCenter Server system, you can do so by right-clicking a datacenter, cluster, or folder that contains the
hosts and selecting Rescan for Datastores.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select a host and click the Configuration tab.
Option Description
Storage In the Hardware panel, click Storage, and click Rescan All above the
Datastores or Devices panel.
Storage Adapters In the Hardware panel, click Storage Adapters, and click Rescan All above
the Storage Adapters panel.
NOTE You can also right-click an individual adapter and select Rescan to
rescan just that adapter.
Option Description
Scan for New Storage Devices Rescan all adapters to discover new storage devices. If new devices are
discovered, they appear in the device list.
Scan for New VMFS Volumes Rescan all storage devices to discover new datastores that have been
added since the last scan. Any new datastores appear in the datastore list.
The value of Disk.MaxLUN also determines how many LUNs the SCSI scan code attempts to discover using
individual INQUIRY commands if the SCSI target does not support direct discovery using REPORT_LUNS.
You can modify the Disk.MaxLUN parameter depending on your needs. For example, if your environment has
a smaller number of storage devices with LUN IDs from 0 through 100, you can set the value to 101 to
improve device discovery speed on targets that do not support REPORT_LUNS. Lowering the value can
shorten the rescan time and boot time. However, the time to rescan storage devices might depend on other
factors, including the type of storage system and the load on the storage system.
In other cases, you might need to increase the value if your environment uses LUN IDs that are greater than
1023.
Procedure
1 In the vSphere Client inventory panel, select the host, click the Configuration tab, and click Advanced
Settings under Software.
2 Select Disk.
4 Change the existing value to the value of your choice, and click OK.
The value you enter specifies the LUN ID after the last one you want to discover.
For example, to discover LUN IDs from 0 through 100, set Disk.MaxLUN to 101.
You use the vSphere Client to access different types of storage devices that your ESXi host discovers and to
deploy datastores on them.
Depending on the type of storage you use, datastores can be backed by the following file system formats:
After creating datastores, you can organize them in different ways. For example, you can group them into
folders according to business practices. This allows you to assign the same permissions and alarms on the
datastores in the group at one time.
You can also add datastores to datastore clusters. A datastore cluster is a collection of datastores with shared
resources and a shared management interface. When you create a datastore cluster, you can use Storage
DRS to manage storage resources. For information about datastore clusters, see the vSphere Resource
Management documentation.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Before creating datastores, you must install and configure any adapters that your storage requires. Rescan
the adapters to discover newly added storage devices.
Procedure
1 Log in to the vSphere Client and select the host from the Inventory panel.
2 Click the Configuration tab and click Storage in the Hardware panel.
IMPORTANT Select the device that does not have a datastore name displayed in the VMFS Label column.
If a name is present, the device contains a copy of an existing VMFS datastore.
IMPORTANT If you select VMFS3 you must select the maximum file size under Formatting.
7 If the disk is not blank, review the current disk layout in the top panel of the Current Disk Layout page
and select a configuration option from the bottom panel.
Option Description
Use all available partitions Dedicates the entire disk to a single VMFS datastore. If you select this
option, all file systems and data currently stored on this device are
destroyed.
Use free space Deploys a VMFS datastore in the remaining free space of the disk.
If the disk you are formatting is blank, the Current Disk Layout page presents the entire disk space for
storage configuration.
8 Click Next.
10 If the space specified for storage is excessive for your purposes, you can adjust the capacity values.
11 Click Next.
12 In the Ready to Complete page, review the datastore configuration information and click Finish.
A datastore on the SCSI-based storage device is created. If you use the vCenter Server system to manage
your hosts, the newly created datastore is added to all hosts.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Because NFS requires network connectivity to access data stored on remote servers, before configuring NFS,
you must first configure VMkernel networking.
Procedure
1 Log in to the vSphere Client and select the host from the Inventory panel.
2 Click the Configuration tab and click Storage in the Hardware panel.
4 Select Network File System as the storage type and click Next.
5 Enter the server name, the mount point folder name, and the datastore name.
For the server name, you can enter an IP address, a DNS name, or an NFS UUID.
NOTE When you mount the same NFS volume on different hosts, make sure that the server and folder
names are identical across the hosts. If the names do not match exactly, the hosts see the same NFS
volume as two different datastores. This might result in a failure of such features as vMotion. An
example of such discrepancy could be if you enter filer as the server name on one host and
filer.domain.com on the other.
6 (Optional) Select Mount NFS read only if the volume is exported as read only by the NFS server.
7 Click Next.
8 In the Network File System Summary page, review the configuration options and click Finish.
Each VMFS datastore created in a storage disk has a unique signature, also called UUID, that is stored in the
file system superblock. When the storage disk is replicated or its snapshot is taken on the storage side, the
resulting disk copy is identical, byte-for-byte, with the original disk. As a result, if the original storage disk
contains a VMFS datastore with UUID X, the disk copy appears to contain an identical VMFS datastore, or a
VMFS datastore copy, with exactly the same UUID X.
In addition to LUN snapshotting and replication, the following storage device operations might cause ESXi
to mark the existing datastore on the device as a copy of the original datastore:
n LUN ID changes
ESXi can detect the VMFS datastore copy and display it in the vSphere Client or the vSphere Web Client.
You have an option of mounting the datastore copy with its original UUID or changing the UUID to
resignature the datastore.
Whether you chose resignaturing or mounting without resignaturing depends on how the LUNs are
masked in the storage environment. If your hosts are able to see both copies of the LUN, then resignaturing
is the recommended method. Otherwise, mounting is an option.
You can keep the signature if, for example, you maintain synchronized copies of virtual machines at a
secondary site as part of a disaster recovery plan. In the event of a disaster at the primary site, you mount
the datastore copy and power on the virtual machines at the secondary site.
IMPORTANT You can mount a VMFS datastore copy only if it does not collide with the original VMFS
datastore that has the same UUID. To mount the copy, the original VMFS datastore has to be offline.
When you mount the VMFS datastore, ESXi allows both reads and writes to the datastore residing on the
LUN copy. The LUN copy must be writable. The datastore mounts are persistent and valid across system
reboots.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Before you mount a VMFS datastore, perform a storage rescan on your host so that it updates its view of
LUNs presented to it.
Procedure
1 Log in to the vSphere Client and select the server from the inventory panel.
2 Click the Configuration tab and click Storage in the Hardware panel.
5 From the list of LUNs, select the LUN that has a datastore name displayed in the VMFS Label column
and click Next.
The name present in the VMFS Label column indicates that the LUN is a copy that contains a copy of an
existing VMFS datastore.
7 In the Ready to Complete page, review the datastore configuration information and click Finish.
What to do next
If you later want to resignature the mounted datastore, you must unmount it first.
When resignaturing a VMFS copy, ESXi assigns a new UUID and a new label to the copy, and mounts the
copy as a datastore distinct from the original.
The default format of the new label assigned to the datastore is snap-snapID-oldLabel, where snapID is an
integer and oldLabel is the label of the original datastore.
n The LUN copy that contains the VMFS datastore that you resignature is no longer treated as a LUN
copy.
n A spanned datastore can be resignatured only if all its extents are online.
n The resignaturing process is crash and fault tolerant. If the process is interrupted, you can resume it
later.
n You can mount the new VMFS datastore without a risk of its UUID colliding with UUIDs of any other
datastore, such as an ancestor or child in a hierarchy of LUN snapshots.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Before you resignature a VMFS datastore, perform a storage rescan on your host so that the host updates its
view of LUNs presented to it and discovers any LUN copies.
Procedure
1 Log in to the vSphere Client and select the server from the inventory panel.
2 Click the Configuration tab and click Storage in the Hardware panel.
5 From the list of LUNs, select the LUN that has a datastore name displayed in the VMFS Label column
and click Next.
The name present in the VMFS Label column indicates that the LUN is a copy that contains a copy of an
existing VMFS datastore.
6 Under Mount Options, select Assign a New Signature and click Next.
7 In the Ready to Complete page, review the datastore configuration information and click Finish.
What to do next
After resignaturing, you might have to do the following:
n If the resignatured datastore contains virtual machines, update references to the original VMFS
datastore in the virtual machine files, including .vmx, .vmdk, .vmsd, and .vmsn.
After you upgrade your VMFS2 datastore to VMFS3, the datastore becomes available on the ESXi 6.0
host, where you complete the process of upgrading to VMFS5.
n You can perform a VMFS3 to VMFS5 upgrade while the datastore is in use with virtual machines
powered on.
n While performing an upgrade, your host preserves all files on the datastore.
n The datastore upgrade is a one-way process. After upgrading your datastore, you cannot revert it back
to its previous VMFS format.
For more information about VMFS locking mechanisms and how to upgrade to ATS-only, see the vSphere
Storage publication.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n Commit or discard any changes to virtual disks in the VMFS2 datastore that you plan to upgrade.
n Be sure that no powered on virtual machines are using the VMFS2 datastore.
n To upgrade the VMFS2 file system, its file block size must not exceed 8MB.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
2 Click the Configuration tab and click Storage.
What to do next
After you upgrade your VMFS2 datastore to VMFS3, the datastore becomes available on the ESXi 5.x host.
You can now use the ESXi 5.x host to complete the process of upgrading to VMFS5.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
n If you use a VMFS2 datastore, you must first upgrade it to VMFS3. Follow the instructions in “Upgrade
VMFS2 Datastores to VMFS3,” on page 327.
n Verify that the volume to be upgraded has at least 2MB of free blocks available and 1 free file
descriptor.
Procedure
1 Log in to the vSphere Client, and select a host from the inventory panel.
6 Perform a rescan on all hosts that are associated with the datastore.
n Add a new extent. An extent is a partition on a storage device. You can add up to 32 extents of the same
storage type to an existing VMFS datastore. The spanned VMFS datastore can use any or all of its
extents at any time. It does not need to fill up a particular extent before using the next one.
n Grow an extent in an existing VMFS datastore, so that it fills the available adjacent capacity. Only
extents with free space immediately after them are expandable.
NOTE If a shared datastore has powered on virtual machines and becomes 100% full, you can increase the
datastore's capacity only from the host with which the powered on virtual machines are registered.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host from the Inventory panel.
3 From the Datastores view, select the datastore to increase and click Properties.
4 Click Increase.
5 Select a device from the list of storage devices and click Next.
Option Description
To add a new extent Select the device for which the Expandable column reads NO.
To expand an existing extent Select the device for which the Expandable column reads YES
6 Review the Current Disk Layout to see the available configurations and click Next.
Depending on the current layout of the disk and on your previous selections, the options you see might
vary.
Option Description
Use free space to add new extent Adds the free space on this disk as a new extent.
Use free space to expand existing Expands an existing extent to a required capacity.
extent
Use free space Deploys an extent in the remaining free space of the disk. This option is
available only when you are adding an extent.
Use all available partitions Dedicates the entire disk to a single extent. This option is available only
when you are adding an extent and when the disk you are formatting is
not blank. The disk is reformatted, and the datastores and any data that it
contains are erased.
The minimum extent size is 1.3GB. By default, the entire free space on the storage device is available.
9 Click Next.
10 Review the proposed layout and the new configuration of your datastore, and click Finish.
What to do next
After you grow an extent in a shared VMFS datastore, refresh the datastore on each host that can access this
datastore, so that the vSphere Client can display the correct datastore capacity for all hosts.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Display the datastores.
If you use the vCenter Server system to manage your hosts, the new name appears on all hosts that have
access to the datastore.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client.
NOTE The datastore delete operation permanently deletes all files associated with virtual machines on the
datastore. Although you can delete the datastore without unmounting, it is preferable that you unmount the
datastore first.
Prerequisites
n Open a vSphere Client connection to a vCenter Server.
Procedure
1 Display the datastores.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select the host from the Inventory panel.
2 Click the Configuration tab and click Storage in the Hardware panel.
If you do not see Diagnostic as an option, the host already has a diagnostic partition.
Option Description
Private Local Creates the diagnostic partition on a local disk. This partition stores fault
information only for your host.
Private SAN Storage Creates the diagnostic partition on a non-shared SAN LUN. This partition
stores fault information only for your host.
Shared SAN Storage Creates the diagnostic partition on a shared SAN LUN. This partition is
accessed by multiple hosts and can store fault information for more than
one host.
6 Click Next.
7 Select the device to use for the diagnostic partition and click Next.
Before making any changes to the device filters, consult with the VMware support team. You can turn off
the filters only if you have other methods to prevent device corruption.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select Administration > vCenter Server Settings.
2 In the settings list, select Advanced Settings.
4 In the Value text box, type False for the specified key.
5 Click Add.
6 Click OK.
The following topics contain information about RDMs and provide instructions on how to create and
manage RDMs.
You can create the RDM as an initial disk for a new virtual machine or add it to an existing virtual machine.
When creating the RDM, you specify the LUN to be mapped and the datastore on which to put the RDM.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
Procedure
1 Follow all steps required to create a custom virtual machine.
2 In the Select a Disk page, select Raw Device Mapping, and click Next.
3 From the list of SAN disks or LUNs, select a raw LUN for your virtual machine to access directly.
You can place the RDM file on the same datastore where your virtual machine configuration file
resides, or select a different datastore.
NOTE To use vMotion for virtual machines with enabled NPIV, make sure that the RDM files of the
virtual machines are located on the same datastore. You cannot perform Storage vMotion when NPIV is
enabled.
Option Description
Physical Allows the guest operating system to access the hardware directly.
Physical compatibility is useful if you are using SAN-aware applications
on the virtual machine. However, powered on virtual machines that use
RDMs configured for physical compatibility cannot be migrated if the
migration involves copying the disk. Such virtual machines cannot be
cloned or cloned to a template either.
Virtual Allows the RDM to behave as if it were a virtual disk, so you can use such
features as snapshotting, cloning, and so on.
Option Description
Persistent Changes are immediately and permanently written to the disk.
Nonpersistent Changes to the disk are discarded when you power off or revert to the
snapshot.
8 Click Next.
9 In the Ready to Complete New Virtual Machine page, review your selections.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
Procedure
1 Log in as administrator or as the owner of the virtual machine to which the mapped disk belongs.
4 On the Hardware tab, select Hard Disk, then click Manage Paths.
5 Use the Manage Paths dialog box to enable or disable your paths, set multipathing policy, and specify
the preferred path.
For information on managing paths, see “Understanding Multipathing and Failover,” on page 333.
In case of a failure of any element in the SAN network, such as an adapter, switch, or cable, ESXi can switch
to another physical path, which does not use the failed component. This process of path switching to avoid
failed components is known as path failover.
In addition to path failover, multipathing provides load balancing. Load balancing is the process of
distributing I/O loads across multiple physical paths. Load balancing reduces or removes potential
bottlenecks.
NOTE Virtual machine I/O might be delayed for up to sixty seconds while path failover takes place. These
delays allow the SAN to stabilize its configuration after topology changes. In general, the I/O delays might
be longer on active-passive arrays and shorter on active-active arrays.
By default, the host performs a periodic path evaluation every 5 minutes causing any unclaimed paths to be
claimed by the appropriate MPP.
The claim rules are numbered. For each physical path, the host runs through the claim rules starting with
the lowest number first. The attributes of the physical path are compared to the path specification in the
claim rule. If there is a match, the host assigns the MPP specified in the claim rule to manage the physical
path. This continues until all physical paths are claimed by corresponding MPPs, either third-party
multipathing plug-ins or the native multipathing plug-in (NMP).
For the paths managed by the NMP module, a second set of claim rules is applied. These rules determine
which Storage Array Type Plug-In (SATP) should be used to manage the paths for a specific array type, and
which Path Selection Plug-In (PSP) is to be used for each storage device.
Use the vSphere Client to view which SATP and PSP the host is using for a specific storage device and the
status of all available paths for this storage device. If needed, you can change the default VMware PSP using
the client. To change the default SATP, you need to modify claim rules using the vSphere CLI.
You can find some information about modifying claim rules in the vSphere Storage documentation.
For more information about the commands available to manage PSA, see Getting Started with vSphere
Command-Line Interfaces.
For a complete list of storage arrays and corresponding SATPs and PSPs, see the SAN Array Model
Reference section of the vSphere Compatibility Guide.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a host from the inventory panel.
2 Click the Configuration tab and click Storage in the Hardware panel.
4 From the list of configured datastores, select the datastore whose paths you want to view, and click
Properties.
5 Under Extents, select the storage device whose paths you want to view and click Manage Paths.
The panel underneath displays the path's name. The name includes parameters describing the path:
adapter ID, target ID, and device ID.
7 (Optional) To extract the path's parameters, right-click the path and select Copy path to clipboard.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Log in to the vSphere Client and select a server from the inventory panel.
2 Click the Configuration tab and click Storage in the Hardware panel.
4 Select the storage device whose paths you want to view and click Manage Paths.
The panel underneath displays the path's name. The name includes parameters describing the path:
adapter ID, target ID, and device ID.
6 (Optional) To extract the path's parameters, right-click the path and select Copy path to clipboard.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Open the Manage Paths dialog box either from the Datastores or Devices view.
By default, VMware supports the following path selection policies. If you have a third-party PSP
installed on your host, its policy also appears on the list.
n Fixed (VMware)
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Open the Manage Paths dialog box either from the Datastores or Devices view.
2 In the Paths panel, right-click the path to disable, and select Disable.
You can also disable a path from the adapter’s Paths view by right-clicking the path in the list and selecting
Disable.
The hardware acceleration is supported by block storage devices, Fibre Channel and iSCSI, and NAS
devices.
For additional details, see the VMware knowledge base article at http://kb.vmware.com/kb/1021976.
As with any advanced settings, before you disable the hardware acceleration, consult with the VMware
support team.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory panel, select the host.
2 Click the Configuration tab, and click Advanced Settings under Software.
n VMFS3.HardwareAcceleratedLocking
n DataMover.HardwareAcceleratedMove
n DataMover.HardwareAcceleratedInit
Thin provisioning is a method that optimizes storage utilization by allocating storage space in a flexible on-
demand manner. Thin provisioning contrasts with the traditional model, called thick provisioning. With
thick provisioning, large amount of storage space is provided in advance in anticipation of future storage
needs. However, the space might remain unused causing underutilization of storage capacity.
The VMware thin provisioning features help you eliminate storage underutilization problems at the
datastore and storage array level.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
You can create thin disks only on the datastores that support disk-level thin provisioning.
Procedure
u In the Create a Disk dialog box, select Thin Provision.
What to do next
If you created a virtual disk in the thin format, you can later inflate it to its full size.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
Procedure
1 Select the virtual machine in the inventory.
n Provisioned Storage – Shows datastore space allocated to the virtual machine. The entire space
might not be used by the virtual machine if it has disks in thin provisioned format. Other virtual
machines can occupy any unused space.
n Not-shared Storage – Shows datastore space occupied by the virtual machine and not shared with
any other virtual machines.
n Used Storage – Shows datastore space actually occupied by virtual machine files, including
configuration and log files, snapshots, virtual disks, and so on. When the virtual machine is
running, the used storage space also includes swap files.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
Procedure
1 Select the virtual machine in the inventory.
2 Click Edit Settings to display the Virtual Machine Properties dialog box.
3 Click the Hardware tab and select the appropriate hard disk in the Hardware list.
The Disk Provisioning section on the right shows the type of your virtual disk.
4 Click OK.
What to do next
If your virtual disk is in the thin format, you can inflate it to its full size.
This procedure converts a thin disk to a virtual disk in thick provision format.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
Procedure
1 Select the virtual machine in the inventory.
2 Click the Summary tab and, under Resources, double-click the datastore for the virtual machine to open
the Datastore Browser dialog box.
3 Click the virtual machine folder to find the virtual disk file you want to convert. The file has the .vmdk
extension.
4 Right-click the virtual disk file and select Inflate.
The inflated virtual disk occupies the entire datastore space originally provisioned to it.
The vendor provider is a software plug-in developed by a third party through the Storage APIs - Storage
Awareness. The vendor provider component is typically installed on the storage array side and acts as a
server in the vSphere environment. The vCenter Server uses vendor providers to retrieve information about
storage topology, capabilities, and status.
For information about whether your storage supports the vendor provider plug-ins, contact your storage
vendor.
If your storage supports vendor providers, use the Storage Providers menu option in the vSphere Client or
the vSphere Web Client to register and manage each vendor provider component.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Verify that the vendor provider component is installed on the storage side and obtain its credentials from
your storage administrator.
Procedure
1 Select View > Administration > Storage Providers.
2 Click Add.
3 In the Add Vendor Provider dialog box, type connection information for the vendor provider,
including the name, URL, and credentials.
4 (Optional) To direct the vCenter Server to the vendor provider certificate, select the Use Vendor
Provider Certificate option and specify the certificate's location.
If you do not select this option, the vSphere Client displays a thumbprint of the certificate. You can
check the thumbprint and approve it.
The vCenter Server has registered the vendor provider and established a secure SSL connection with it.
View general vendor provider information and details for each vendor component.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select View > Administration > Storage Providers.
2 In the Vendor Providers list, view the vendor provider components registered with the vCenter Server.
The list shows general vendor information including the name, URL, and the time of the last view
refresh.
3 To display additional details, select a specific vendor provider from the list.
The details include storage array vendors and array models that the vendor provider supports.
NOTE A single vendor provider can support storage arrays from multiple different vendors.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select View > Administration > Storage Providers.
2 From the list of vendor providers, select the one you want to unregister and click Remove.
The vCenter Server terminates the connection and removes the vendor provider from its configuration.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select View > Administration > Storage Providers.
2 From the list, select the vendor provider that you want to synchronise with and click Sync.
The vSphere Client updates the storage data for the provider.
Use the resource allocation settings (shares, reservation, and limit) to determine the amount of CPU,
memory, and storage resources provided for a virtual machine. In particular, administrators have several
options for allocating resources.
n Set an upper bound on the resources that can be allocated to a virtual machine.
n Guarantee that a particular virtual machine is always allocated a higher percentage of the physical
resources than other virtual machines.
Assume that on an ESXi host, you have created two new virtual machines—one each for your QA (VM-QA)
and Marketing (VM-Marketing) departments.
host
VM-QA VM-Marketing
In the following example, assume that VM-QA is memory intensive and accordingly you want to change the
resource allocation settings for the two virtual machines to:
n Specify that, when system memory is overcommitted, VM-QA can use twice as much memory and CPU
as the Marketing virtual machine. Set the memory shares and CPU shares for VM-QA to High and for
VM-Marketing set them to Normal.
n Ensure that the Marketing virtual machine has a certain amount of guaranteed CPU resources. You can
do so using a reservation setting.
Procedure
1 Start the vSphere Client and connect to a vCenter Server system.
2 Right-click VM-QA, the virtual machine for which you want to change shares, and select Edit Settings.
3 Select the Resources tab, and in the CPU panel, select High from the Shares drop-down menu.
4 In the Memory panel, select High from the Shares drop-down menu.
5 Click OK.
6 Right-click the marketing virtual machine (VM-Marketing) and select Edit Settings.
7 In the CPU panel, change the Reservation value to the desired number.
8 Click OK.
If you select the cluster’s Resource Allocation tab and click CPU, you should see that shares for VM-QA are
twice that of the other virtual machine. Also, because the virtual machines have not been powered on, the
Reservation Used fields have not changed.
When a virtual machine is scheduled, its virtual processors are scheduled to run on physical processors. The
VMkernel Resource Manager schedules the virtual CPUs on physical CPUs, thereby managing the virtual
machine’s access to physical CPU resources. ESXi supports virtual machines with up to 128 virtual CPUs.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the host and click the Configuration tab.
2 Select Processors.
You can view the information about the number and type of physical processors and the number of
logical processors.
NOTE In hyperthreaded systems, each hardware thread is a logical processor. For example, a dual-core
processor with hyperthreading enabled has two cores and four logical processors.
Enable Hyperthreading
To enable hyperthreading, you must first enable it in your system's BIOS settings and then turn it on in the
vSphere Client. Hyperthreading is enabled by default.
Consult your system documentation to determine whether your CPU supports hyperthreading.
Prerequisites
n Ensure that your system supports hyperthreading technology.
n Enable hyperthreading in the system BIOS. Some manufacturers label this option Logical Processor,
while others call it Enable Hyperthreading.
Procedure
u Tturn on hyperthreading for the ESXi host.
a In the vSphere Client, select the host and click the Configuration tab.
c In the dialog box, you can view hyperthreading status and turn hyperthreading off or on (default).
Hyperthreading is enabled.
Two virtual CPUs share a core if they are running on logical CPUs of the core at the same time. You can set
this for individual virtual machines.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory panel, right-click the virtual machine and select Edit Settings.
3 Select a hyperthreading mode for this virtual machine from the Mode drop-down menu.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory panel, select a virtual machine and select Edit Settings.
4 Select the processors where you want the virtual machine to run and click OK.
Prerequisites
ESX/ESXi supports the Enhanced Intel SpeedStep and Enhanced AMD PowerNow! CPU power
management technologies. For the VMkernel to take advantage of the power management capabilities
provided by these technologies, you must enable power management, sometimes called Demand-Based
Switching (DBS), in the BIOS.
Procedure
1 In the vSphere Client inventory panel, select a host and click the Configuration tab.
The policy selection is saved in the host configuration and can be used again at boot time. You can
change it at any time, and it does not require a server reboot.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Select Custom for the power management policy, as described in “Select a CPU Power Management
Policy,” on page 344.
Procedure
1 In the vSphere Client inventory, select the host and click the Configuration tab.
4 In the right pane, you can edit the power management parameters that affect the Custom policy.
Power management parameters that affect the Custom policy have descriptions that begin with In
Custom policy. All other power parameters affect all power management policies.
NOTE The default values of power management parameters match the Balanced policy.
Parameter Description
Power.UsePStates Use ACPI P-states to save power when the processor is busy.
Power.MaxCpuLoad Use P-states to save power on a CPU only when the CPU is busy for less
than the given percentage of real time.
Power.MinFreqPct Do not use any P-states slower than the given percentage of full CPU
speed.
Power.UseStallCtr Use a deeper P-state when the processor is frequently stalled waiting for
events such as cache misses.
Power.TimerHz Controls how many times per second ESXi reevaluates which P-state each
CPU should be in.
Power.UseCStates Use deep ACPI C-states (C2 or below) when the processor is idle.
Power.CStateMaxLatency Do not use C-states whose latency is greater than this value.
Power.CStateResidencyCoef When a CPU becomes idle, choose the deepest C-state whose latency
multiplied by this value is less than the host's prediction of how long the
CPU will remain idle. Larger values make ESXi more conservative about
using deep C-states, while smaller values are more aggressive.
Power.CStatePredictionCoef A parameter in the ESXi algorithm for predicting how long a CPU that
becomes idle will remain idle. Changing this value is not recommended.
Power.PerfBias Performance Energy Bias Hint (Intel-only). Sets an MSR on Intel processors
to an Intel-recommended value. Intel recommends 0 for high performance,
6 for balanced, and 15 for low power. Other values are undefined.
When administering memory resources, you can specify memory allocation. If you do not customize
memory allocation, the ESXi host uses defaults that work well in most situations.
n Use the attributes and special features available through the vSphere Client. The vSphere Client user
interface allows you to connect to the ESXi host or vCenter Server system.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the cluster in the inventory and select Edit Settings.
2 In the left pane of the cluster Settings dialog box, click Swapfile Location.
3 Select the Store the swapfile in the datastore specified by the host option and click OK.
4 In the vSphere Client inventory, select one of the hosts in the cluster and click the Configuration tab.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the host in the inventory.
3 Under Software, select Virtual Machine Swapfile Location. and click Edit.
By default, swapfiles for a virtual machine are located on a VMFS3 datastore in the folder that contains the
other virtual machine files. However, you can configure your host to place virtual machine swapfiles on an
alternative datastore.
You can use this option to place virtual machine swapfiles on lower-cost or higher-performance storage.
You can also override this host-level setting for individual virtual machines.
Setting an alternative swapfile location might cause migrations with vMotion to complete more slowly. For
best vMotion performance, store virtual machine swapfiles in the same directory as the virtual machine.
If vCenter Server manages your host, you cannot change the swapfile location if you connect directly to the
host by using the vSphere Client. You must connect the vSphere Client to the vCenter Server system.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the host in the inventory.
The Configuration tab displays the selected swapfile location. If configuration of the swapfile location
is not supported on the selected host, the tab indicates that the feature is not supported.
If the host is part of a cluster, and the cluster settings specify that swapfiles are to be stored in the same
directory as the virtual machine, you cannot edit the swapfile location from the host configuration tab.
To change the swapfile location for such a host, use the Cluster Settings dialog box.
4 Click Edit.
5 Select either Store the swapfile in the same directory as the virtual machine or Store the swapfile in a
swapfile datastore selected below.
If you select Store the swapfile in a swapfile datastore selected below, select a datastore from the list.
6 Click OK.
You might choose to configure an alternative swapfile location to place virtual machine swapfiles on either
lower-cost or higher-performance storage, depending on your needs.
NOTE Setting an alternative swapfile location might cause migrations with vMotion to complete more
slowly. For best vMotion performance, store virtual machine swapfiles in the same directory as the virtual
machine.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Before you configure a virtual machine swapfile location for a cluster, you must configure the virtual
machine swapfile locations for the hosts in the cluster as described in “Configure Virtual Machine Swapfile
Properties for the Host,” on page 346.
Procedure
1 Display the cluster in the inventory.
4 Under Swapfile Policy for Virtual Machines, select where to store the virtual machine swapfile.
Option Description
Store the swapfile in the same Stores the swapfile in the same directory as the virtual machine
directory as the virtual machine configuration file.
Store the swapfile in the datastore Stores the swapfile in the location specified in the host configuration.
specified by the host If the swapfile cannot be stored on the datastore that the host specifies, the
swapfile is stored in the same folder as the virtual machine.
5 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system or an ESXi host.
Procedure
1 Restart the virtual machine that was on the host that failed.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the host in the inventory.
6 To disable the ability for the host to swap to host cache on a per-datastore basis, deselect the Allocate
space for host cache check box.
7 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the host in the inventory.
6 Click OK.
You set the size of the compression cache as a percentage of the memory size of the virtual machine. For
example, if you enter 20 and a virtual machine's memory size is 1000 MB, ESXi can use up to 200MB of host
memory to store the compressed pages of the virtual machine.
If you do not set the size of the compression cache, ESXi uses the default value of 10 percent.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the host in the inventory.
The value of this attribute determines the maximum size of the compression cache for the virtual
machine.
The value is a percentage of the size of the virtual machine and must be between 5 and 100 percent.
6 Click OK.
Storage I/O Control extends the constructs of shares and limits to handle storage I/O resources. You can
control the amount of storage I/O that is allocated to virtual machines during periods of I/O congestion,
which ensures that more important virtual machines get preference over less important virtual machines for
I/O resource allocation.
When you enable Storage I/O Control on a datastore, ESXi begins to monitor the device latency that hosts
observe when communicating with that datastore. When device latency exceeds a threshold, the datastore is
considered to be congested and each virtual machine that accesses that datastore is allocated I/O resources
in proportion to their shares. You set shares per virtual machine. You can adjust the number for each based
on need.
2 Set the number of storage I/O shares and upper limit of I/O operations per second (IOPS) allowed for
each virtual machine.
By default, all virtual machine shares are set to Normal (1000) with unlimited IOPS.
NOTE Storage I/O Control is enabled by default on Storage DRS-enabled datastore clusters.
Storage I/O shares are similar to those used for memory and CPU resource allocation, which are described
in the vSphere Resource Management publication. These shares represent the relative importance of a virtual
machine with regard to the distribution of storage I/O resources. Under resource contention, virtual
machines with higher share values have greater access to the storage array, which typically results in higher
throughput and lower latency.
When you allocate storage I/O resources, you can limit the IOPS that are allowed for a virtual machine. By
default, these are unlimited. If a virtual machine has more than one virtual disk, you must set the limit on all
of its virtual disks. Otherwise, the limit will not be enforced for the virtual machine. In this case, the limit on
the virtual machine is the aggregation of the limits for all virtual disks.
The benefits and drawbacks of setting resource limits are described in the vSphere Resource Management
publication. If the limit you want to set for a virtual machine is in terms of MB per second instead of IOPS,
you can convert MB per second into IOPS based on the typical I/O size for that virtual machine. For
example, to restrict a backup application with 64KB IOs to 10MB per second, set a limit of 160 IOPS.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the datastore in the vSphere Client inventory.
The tab displays each virtual machine running on the datastore and the associated shares value, IOPS
limit, and percentage of datastore shares.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the datastore in the vSphere Client inventory and click the Performance tab.
For more information, see the vSphere Monitoring and Performance documentation.
Unless virtual machine workloads are very similar, shares do not necessarily dictate allocation in terms of
I/O operations or megabytes per second. Higher shares allow a virtual machine to keep more concurrent I/O
operations pending at the storage device or datastore compared to a virtual machine with lower shares. Two
virtual machines might experience different throughput based on their workloads.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a virtual machine in the vSphere Client inventory.
2 Click the Summary tab and click Edit Settings.
5 Click the Shares column to select the relative amount of shares to allocate to the virtual machine (Low,
Normal, or High).
6 Click the Limit - IOPS column and enter the upper limit of storage resources to allocate to the virtual
machine.
IOPS are the number of I/O operations per second. By default, IOPS are unlimited. You select Low
(500), Normal (1000), or High (2000), or you can select Custom to enter a user-defined number of shares.
7 Click OK.
Shares and limits are reflected on the Resource Allocation tab for the host and cluster.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, select a datastore and click the Configuration tab.
2 Click Properties.
4 Click Close.
On the Datastores tab, the Storage I/O Control column shows that Storage I/O Control is enabled for the
datastore.
CAUTION Storage I/O Control will not function correctly unless all datatores that share the same spindles on
the array have the same congestion threshold.
If you change the congestion threshold setting, set the value based on the following considerations.
n A higher value typically results in higher aggregate throughput and weaker isolation. Throttling will
not occur unless the overall average latency is higher than the threshold.
n If throughput is more critical than latency, do not set the value too low. For example, for Fibre Channel
disks, a value below 20 ms could lower peak disk throughput. A very high value (above 50 ms) might
allow very high latency without any significant gain in overall throughput.
n A lower value will result in lower device latency and stronger virtual machine I/O performance
isolation. Stronger isolation means that the shares controls are enforced more often. Lower device
latency translates into lower I/O latency for the virtual machines with the highest shares, at the cost of
higher I/O latency experienced by the virtual machines with fewer shares.
n If latency is more important, a very low value (lower than 20 ms) will result in lower device latency and
better isolation among I/Os at the potential cost of a decrease in aggregate datastore throughput.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, select a datastore and click the Configuration tab.
2 Click Properties.
3 Under Storage I/O Control, select the Enabled check box.
4 (Optional) Click Advanced to edit the congestion threshold value for the datastore.
5 (Optional) Click Reset to restore the congestion threshold setting to the default value (30 ms).
Each standalone host and each DRS cluster has an (invisible) root resource pool that groups the resources of
that host or cluster. The root resource pool does not appear because the resources of the host (or cluster) and
the root resource pool are always the same.
Users can create child resource pools of the root resource pool or of any user-created child resource pool.
Each child resource pool owns some of the parent’s resources and can, in turn, have a hierarchy of child
resource pools to represent successively smaller units of computational capability.
A resource pool can contain child resource pools, virtual machines, or both. You can create a hierarchy of
shared resources. The resource pools at a higher level are called parent resource pools. Resource pools and
virtual machines that are at the same level are called siblings. The cluster itself represents the root resource
pool. If you do not create child resource pools, only the root resource pools exist.
In the following example, RP-QA is the parent resource pool for RP-QA-UI. RP-Marketing and RP-QA are
siblings. The three virtual machines immediately below RP-Marketing are also siblings.
siblings
parent resource pool
child resource pool
For each resource pool, you specify reservation, limit, shares, and whether the reservation should be
expandable. The resource pool resources are then available to child resource pools and virtual machines.
NOTE If a host has been added to a cluster, you cannot create child resource pools of that host. If the cluster
is enabled for DRS, you can create child resource pools of the cluster.
When you create a child resource pool, you are prompted for resource pool attribute information. The
system uses admission control to make sure you cannot allocate resources that are not available.
Prerequisites
The vSphere Client is connected to the vCenter Server system. If you connect the vSphere Client directly to a
host, you cannot create a resource pool.
Procedure
1 In the vSphere Client inventory, select a parent object for the resource pool (a host, another resource
pool, or a DRS cluster).
The CPU resources for your resource pool are the guaranteed physical resources the host reserves for a
resource pool. Normally, you accept the default and let the host handle resource allocation.
Option Description
Shares Specify shares for this resource pool with respect to the parent’s total
resources. Sibling resource pools share resources according to their relative
share values bounded by the reservation and limit.
n Select Low, Normal, or High to specify share values respectively in a
1:2:4 ratio.
n Select Custom to give each virtual machine a specific number of
shares, which expresses a proportional weight.
Reservation Specify a guaranteed CPU or memory allocation for this resource pool.
Defaults to 0.
A nonzero reservation is subtracted from the unreserved resources of the
parent (host or resource pool). The resources are considered reserved,
regardless of whether virtual machines are associated with the resource
pool.
Expandable Reservation When the check box is selected (default), expandable reservations are
considered during admission control.
If you power on a virtual machine in this resource pool, and the combined
reservations of the virtual machines are larger than the reservation of the
resource pool, the resource pool can use resources from its parent or
ancestors.
Limit Specify the upper limit for this resource pool’s CPU or memory allocation.
You can usually accept the default (Unlimited).
To specify a limit, deselect the Unlimited check box.
5 Click OK.
After you create a resource pool, you can add virtual machines to it. A virtual machine’s shares are relative
to other virtual machines (or resource pools) with the same parent resource pool.
1 In the Create Resource Pool dialog box, type a name for the QA department’s resource pool (for
example, RP-QA).
2 Specify Shares of High for the CPU and memory resources of RP-QA.
4 Click OK.
If there is resource contention, RP-QA receives 4GHz and 2GB of memory, and RP-Marketing 2GHz and
1GB. Otherwise, they can receive more than this allotment. Those resources are then available to the virtual
machines in the respective resource pools.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the resource pool in the inventory and select Edit Settings.
2 In the Edit Settings dialog box, you can change all attributes of the selected resource pool as described
in “Create a Resource Pool,” on page 353.
n If the virtual machine’s shares are high, medium, or low, %Shares adjusts to reflect the total number of
shares in use in the new resource pool.
n If the virtual machine has custom shares assigned, the share value is maintained.
NOTE Because share allocations are relative to a resource pool, you might have to manually change a
virtual machine’s shares when you move it into a resource pool so that the virtual machine’s shares are
consistent with the relative values in the new resource pool. A warning appears if a virtual machine
would receive a very large (or very small) percentage of total shares.
n The information displayed in the Resource Allocation tab about the resource pool’s reserved and
unreserved CPU and memory resources changes to reflect the reservations associated with the virtual
machine (if any).
NOTE If a virtual machine has been powered off or suspended, it can be moved but overall available
resources (such as reserved and unreserved CPU and memory) for the resource pool are not affected.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the virtual machine in the inventory.
The virtual machine can be associated with a standalone host, a cluster, or a different resource pool.
If a virtual machine is powered on, and the destination resource pool does not have enough CPU or memory
to guarantee the virtual machine’s reservation, the move fails because admission control does not allow it.
An error dialog box displays available and requested resources, so you can consider whether an adjustment
might resolve the issue.
When you remove a virtual machine from a resource pool, the total number of shares associated with the
resource pool decreases, so that each remaining share represents more resources. For example, assume you
have a pool that is entitled to 6GHz, containing three virtual machines with shares set to Normal. Assuming
the virtual machines are CPU-bound, each gets an equal allocation of 2GHz. If one of the virtual machines is
moved to a different resource pool, the two remaining virtual machines each receive an equal allocation of
3GHz.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the cluster in the inventory and select Edit Settings.
2 Choose one of the following methods to remove the virtual machine from a resource pool.
n Right-click the virtual machine and select Remove from Inventory or Delete from Disk.
You must power off the virtual machine before you can completely remove it.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the resource pool and select Remove.
To customize your DRS cluster and the resources it contains you can configure affinity rules and you can
add and remove hosts and virtual machines. When a cluster’s settings and resources have been defined, you
should ensure that it is and remains a valid cluster. You can also use a valid DRS cluster to manage power
resources and interoperate with vSphere HA.
Depending on whether or not Enhanced vMotion Compatibility (EVC) is enabled, DRS behaves differently
when you use vSphere Fault Tolerance (vSphere FT) virtual machines in your cluster.
Table 25‑1. DRS Behavior with vSphere FT Virtual Machines and EVC
EVC DRS (Load Balancing) DRS (Initial Placement)
Enabled Enabled (Primary and Secondary VMs) Enabled (Primary and Secondary VMs)
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
You can create a cluster without a special license, but you must have a license to enable a cluster for vSphere
DRS (or vSphere HA).
Procedure
1 Right-click a datacenter or folder in the vSphere Client and select New Cluster.
2 Name the cluster in the Name text box.
You can also enable the vSphere HA feature by clicking vSphere HA.
4 Click Next.
7 Click Next.
9 Click Next.
10 If appropriate, enable Enhanced vMotion Compatibility (EVC) and select the mode it should operate in.
11 Click Next.
You can either store a swapfile in the same directory as the virtual machine itself, or a datastore
specified by the host (host-local swap)
13 Click Next.
14 Review the summary page that lists the options you selected.
15 Click Finish to complete cluster creation, or click Back to go back and make modifications to the cluster
setup.
To add hosts and virtual machines to the cluster see “Adding Hosts to a Cluster,” on page 359 and
“Removing Virtual Machines from a Cluster,” on page 361.
For example, you can select Manual for specific virtual machines in a cluster with full automation, or
Partially Automated for specific virtual machines in a manual cluster.
If a virtual machine is set to Disabled, vCenter Server does not migrate that virtual machine or provide
migration recommendations for it. This is known as pinning the virtual machine to its registered host.
NOTE If you have not enabled Enhanced vMotion Compatibility (EVC) for the cluster, fault tolerant virtual
machines are set to DRS disabled. They appear on this screen, but you cannot assign an automation mode to
them.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the cluster in the inventory and select Edit Settings.
2 In the left pane under vSphere DRS, select Virtual Machine Options.
3 Select the Enable individual virtual machine automation levels check box.
4 (Optional) To temporarily disable any individual virtual machine overrides, deselect the Enable
individual virtual machine automation levels check box.
Virtual machine settings are restored when the check box is selected again.
5 (Optional) To temporarily suspend all vMotion activity in a cluster, put the cluster in manual mode and
deselect the Enable individual virtual machine automation levels check box.
7 Click the Automation Level column and select an automation level from the drop-down menu.
Option Description
Manual Placement and migration recommendations are displayed, but do not run
until you manually apply the recommendation.
Fully Automated Placement and migration recommendations run automatically.
Partially Automated Initial placement is performed automatically. Migration recommendations
are displayed, but do not run.
Disabled vCenter Server does not migrate the virtual machine or provide migration
recommendations for it.
8 Click OK.
NOTE Other VMware products or features, such as vSphere vApp and vSphere Fault Tolerance, might
override the automation levels of virtual machines in a DRS cluster. Refer to the product-specific
documentation for details.
Disable DRS
You can turn off DRS for a cluster.
When DRS is disabled, the cluster’s resource pool hierarchy and affinity rules are not reestablished when
DRS is turned back on. So if you disable DRS, the resource pools are removed from the cluster. To avoid
losing the resource pools, instead of disabling DRS, you should suspend it by changing the DRS automation
level to manual (and disabling any virtual machine overrides). This prevents automatic DRS actions, but
preserves the resource pool hierarchy.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the cluster in the vSphere Client inventory.
3 In the left panel, select General, and deselect the Turn On vSphere DRS check box.
After a host has been added, the virtual machines deployed to the host become part of the cluster and DRS
can recommend migration of some virtual machines to other hosts in the cluster.
You can decide whether you want to associate existing virtual machines and resource pools with the
cluster’s root resource pool or graft the resource pool hierarchy.
NOTE If a host has no child resource pools or virtual machines, the host’s resources are added to the cluster
but no resource pool hierarchy with a top-level resource pool is created.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the host from either the inventory or list view.
3 Select what to do with the host’s virtual machines and resource pools.
n Put this host’s virtual machines in the cluster’s root resource pool
vCenter Server removes all existing resource pools of the host and the virtual machines in the
host’s hierarchy are all attached to the root. Because share allocations are relative to a resource
pool, you might have to manually change a virtual machine’s shares after selecting this option,
which destroys the resource pool hierarchy.
n Create a resource pool for this host’s virtual machines and resource pools
vCenter Server creates a top-level resource pool that becomes a direct child of the cluster and adds
all children of the host to that new resource pool. You can supply a name for that new top-level
resource pool. The default is Grafted from <host_name>.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the cluster to which to add the host and select Add Host from the right-click menu.
2 Enter the host name, user name, and password, and click Next.
4 Select what to do with the host’s virtual machines and resource pools.
n Put this host’s virtual machines in the cluster’s root resource pool
vCenter Server removes all existing resource pools of the host and the virtual machines in the
host’s hierarchy are all attached to the root. Because share allocations are relative to a resource
pool, you might have to manually change a virtual machine’s shares after selecting this option,
which destroys the resource pool hierarchy.
n Create a resource pool for this host’s virtual machines and resource pools
vCenter Server creates a top-level resource pool that becomes a direct child of the cluster and adds
all children of the host to that new resource pool. You can supply a name for that new top-level
resource pool. The default is Grafted from <host_name>.
n When you add a host to a cluster, all virtual machines on that host are added to the cluster.
n When a virtual machine is created, the New Virtual Machine wizard prompts you for the location to
place the virtual machine. You can select a standalone host or a cluster and you can select any resource
pool inside the host or cluster.
n You can migrate a virtual machine from a standalone host to a cluster or from a cluster to another
cluster using the Migrate Virtual Machine wizard. To start this wizard either drag the virtual machine
object on top of the cluster object or right-click the virtual machine name and select Migrate.
NOTE You can drag a virtual machine directly to a resource pool within a cluster. In this case, the
Migrate Virtual Machine wizard is started but the resource pool selection page does not appear.
Migrating directly to a host within a cluster is not allowed because the resource pool controls the
resources.
n When you remove a host from a cluster, all of the powered-off virtual machines that you do not migrate
to other hosts are removed as well. You can remove a host only if it is in maintenance mode or
disconnected. If you remove a host from a DRS cluster, the cluster can become yellow because it is
overcommitted.
n You can migrate a virtual machine from a cluster to a standalone host or from a cluster to another
cluster using the Migrate Virtual Machine wizard. To start this wizard right-click the virtual machine
name and select Migrate.
n Resource Pool Hierarchies – When you remove a host from a cluster, the host retains only the root
resource pool, even if you used a DRS cluster and decided to graft the host resource pool when you
added the host to the cluster. In that case, the hierarchy remains with the cluster. You can create a host-
specific resource pool hierarchy.
NOTE Ensure that you remove the host from the cluster by first placing it in maintenance mode. If you
instead disconnect the host before removing it from the cluster, the host retains the resource pool that
reflects the cluster hierarchy.
n Virtual Machines – A host must be in maintenance mode before you can remove it from the cluster and
for a host to enter maintenance mode all powered-on virtual machines must be migrated off that host.
When you request that a host enter maintenance mode, you are also asked whether you want to migrate
all the powered-off virtual machines on that host to other hosts in the cluster.
n Invalid Clusters – When you remove a host from a cluster, the resources available for the cluster
decrease. If the cluster has enough resources to satisfy the reservations of all virtual machines and
resource pools in the cluster, the cluster adjusts resource allocation to reflect the reduced amount of
resources. If the cluster does not have enough resources to satisfy the reservations of all resource pools,
but there are enough resources to satisfy the reservations for all virtual machines, an alarm is issued
and the cluster is marked yellow. DRS continues to run.
Virtual machines that are running on a host entering maintenance mode need to be migrated to another host
(either manually or automatically by DRS) or shut down. The host is in a state of Entering Maintenance
Mode until all running virtual machines are powered down or migrated to different hosts. You cannot
power on virtual machines or migrate virtual machines to a host entering maintenance mode.
When no more running virtual machines are on the host, the host’s icon changes to include under
maintenance and the host’s Summary panel indicates the new state. While in maintenance mode, the host
does not allow you to deploy or power on a virtual machine.
NOTE DRS does not recommend (or perform, in fully automated mode) any virtual machine migrations off
of a host entering maintenance or standby mode if the vSphere HA failover level would be violated after the
host enters the requested mode.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a host and select Enter Maintenance Mode.
n If the host is part of a partially automated or manual DRS cluster, a list of migration
recommendations for virtual machines running on the host appears.
n If the host is part of an automated DRS cluster, virtual machines are migrated to different hosts
when the host enters maintenance mode.
The host is in maintenance mode until you select Exit Maintenance Mode.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the host in the inventory and select Enter Maintenance Mode.
2 When the host is in maintenance mode, drag it to a different inventory location, either the top-level
datacenter or to a different cluster.
After you remove a host from a cluster, you can perform the following tasks.
n Remove the host from vCenter Server: Right-click the host and select Remove.
n Run the host as a standalone host under vCenter Server: Right-click the host and select Exit
Maintenance Mode.
When you move the host, its resources are removed from the cluster. If you grafted the host’s resource pool
hierarchy onto the cluster, that hierarchy remains with the cluster.
Normally, hosts are placed in standby mode by the vSphere DPM feature to optimize power usage. You can
also place a host in standby mode manually. However, DRS might undo (or recommend undoing) your
change the next time it runs. To force a host to remain off, place it in maintenance mode and power it off.
vSphere DPM monitors the cumulative demand of all virtual machines in the cluster for memory and CPU
resources and compares this to the total available resource capacity of all hosts in the cluster. If sufficient
excess capacity is found, vSphere DPM places one or more hosts in standby mode and powers them off after
migrating their virtual machines to other hosts. Conversely, when capacity is deemed to be inadequate, DRS
brings hosts out of standby mode (powers them on) and uses vMotion to migrate virtual machines to them.
When making these calculations, vSphere DPM considers not only current demand, but it also honors any
user-specified virtual machine resource reservations.
NOTE ESXi hosts cannot automatically be brought out of standby mode unless they are running in a cluster
managed by vCenter Server.
vSphere DPM can use one of three power management protocols to bring a host out of standby mode:
Intelligent Platform Management Interface (IPMI), Hewlett-Packard Integrated Lights-Out (iLO), or Wake-
On-LAN (WOL). Each protocol requires its own hardware support and configuration. If a host does not
support any of these protocols it cannot be put into standby mode by vSphere DPM. If a host supports
multiple protocols, they are used in the following order: IPMI, iLO, WOL.
NOTE Do not disconnect a host in standby mode or move it out of the DRS cluster without first powering it
on, otherwise vCenter Server is not able to power the host back on.
Prerequisites
Both IPMI and iLO require a hardware Baseboard Management Controller (BMC) to provide a gateway for
accessing hardware control functions, and allow the interface to be accessed from a remote system using
serial or LAN connections. The BMC is powered-on even when the host itself is powered-off. If properly
enabled, the BMC can respond to remote power-on commands.
If you plan to use IPMI or iLO as a wake protocol, you must configure the BMC. BMC configuration steps
vary according to model. See your vendor’s documentation for more information. With IPMI, you must also
ensure that the BMC LAN channel is configured to be always available and to allow operator-privileged
commands. On some IPMI systems, when you enable "IPMI over LAN" you must configure this in the BIOS
and specify a particular IPMI account.
vSphere DPM using only IPMI supports MD5- and plaintext-based authentication, but MD2-based
authentication is not supported. vCenter Server uses MD5 if a host's BMC reports that it is supported and
enabled for the Operator role. Otherwise, plaintext-based authentication is used if the BMC reports it is
supported and enabled. If neither MD5 nor plaintext authentication is enabled, IPMI cannot be used with
the host and vCenter Server attempts to use Wake-on-LAN.
Procedure
1 Select the host in the vSphere Client inventory.
4 Click Properties.
n User name and password for a BMC account. (The user name must have the ability to remotely
power the host on.)
n IP address of the NIC associated with the BMC, as distinct from the IP address of the host. The IP
address should be static or a DHCP address with infinite lease.
6 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Before testing WOL, ensure that your cluster meets the prerequisites.
n Your cluster must contain at least two ESX 3.5 (or ESX 3i version 3.5) or later hosts.
n Each host's vMotion networking link must be working correctly. The vMotion network should also be a
single IP subnet, not multiple subnets separated by routers.
n The vMotion NIC on each host must support WOL. To check for WOL support, first determine the
name of the physical network adapter corresponding to the VMkernel port by selecting the host in the
inventory panel of the vSphere Client, selecting the Configuration tab, and clicking Networking. After
you have this information, click on Network Adapters and find the entry corresponding to the network
adapter. The Wake On LAN Supported column for the relevant adapter should show Yes.
n To display the WOL-compatibility status for each NIC on a host, select the host in the inventory panel
of the vSphere Client, select the Configuration tab, and click Network Adapters. The NIC must show
Yes in the Wake On LAN Supported column.
n The switch port that each WOL-supporting vMotion NIC is plugged into should be set to auto negotiate
the link speed, and not set to a fixed speed (for example, 1000 Mb/s). Many NICs support WOL only if
they can switch to 100 Mb/s or less when the host is powered off.
After you verify these prerequisites, test each ESXi host that is going to use WOL to support vSphere DPM.
When you test these hosts, ensure that the vSphere DPM feature is disabled for the cluster.
CAUTION Ensure that any host being added to a vSphere DPM cluster that uses WOL as a wake protocol is
tested and disabled from using power management if it fails the testing. If this is not done, vSphere DPM
might power off hosts that it subsequently cannot power back up.
Procedure
1 Click the Enter Standby Mode command on the host's Summary tab in the vSphere Client.
2 Try to bring the host out of standby mode by clicking the Power Oncommand on the host's Summary
tab.
4 For any host that fails to exit standby mode successfully, select the host in the cluster Settings dialog
box’s Host Options page and change its Power Management setting to Disabled.
After you do this, vSphere DPM does not consider that host a candidate for being powered off.
n Used to specify affinity or anti-affinity between a group of virtual machines and a group of hosts. An
affinity rule specifies that the members of a selected virtual machine DRS group can or must run on the
members of a specific host DRS group. An anti-affinity rule specifies that the members of a selected
virtual machine DRS group cannot run on the members of a specific host DRS group.
See “VM-Host Affinity Rules,” on page 367 for information about creating and using this type of rule.
n Used to specify affinity or anti-affinity between individual virtual machines. A rule specifying affinity
causes DRS to try to keep the specified virtual machines together on the same host, for example, for
performance reasons. With an anti-affinity rule, DRS tries to keep the specified virtual machines apart,
for example, so that when a problem occurs with one host, you do not lose both virtual machines.
See “VM-VM Affinity Rules,” on page 366 for information about creating and using this type of rule.
When you add or edit an affinity rule, and the cluster's current state is in violation of the rule, the system
continues to operate and tries to correct the violation. For manual and partially automated DRS clusters,
migration recommendations based on rule fulfillment and load balancing are presented for approval. You
are not required to fulfill the rules, but the corresponding recommendations remain until the rules are
fulfilled.
To check whether any enabled affinity rules are being violated and cannot be corrected by DRS, select the
cluster's DRS tab and click Faults. Any rule currently being violated has a corresponding fault on this page.
Read the fault to determine why DRS is not able to satisfy the particular rule. Rules violations also produce
a log event.
NOTE VM-VM and VM-Host affinity rules are different from an individual host’s CPU affinity rules.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the cluster in the inventory and select Edit Settings.
2 In the left pane of the cluster Settings dialog box under vSphere DRS, select DRS Groups Manager.
4 In the DRS Group dialog box, type a name for the group.
5 In the left pane, select a host and click >> to add it to the group. Continue this process until all desired
hosts have been added.
You can also remove hosts from the group by selecting them in the right pane and clicking <<.
6 Click OK.
What to do next
Using this host DRS group, you can create a VM-Host affinity rule that establishes an affinity (or anti-
affinity) relationship with an appropriate virtual machine DRS group.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the cluster in the inventory and select Edit Settings.
2 In the left pane of the cluster Settings dialog box under vSphere DRS, select DRS Groups Manager.
5 In the left pane, select a host and click >> to add it to the group. Continue this process until all desired
hosts have been added.
You can also remove hosts from the group by selecting them in the right pane and clicking <<.
6 Click OK.
What to do next
“Create a Host DRS Group,” on page 365
When an affinity rule is created, DRS tries to keep the specified virtual machines together on the same host.
You might want to do this, for example, for performance reasons.
With an anti-affinity rule, DRS tries to keep the specified virtual machines apart. You could use such a rule if
you want to guarantee that certain virtual machines are always on different physical hosts. In that case, if a
problem occurs with one host, not all virtual machines would be placed at risk.
NOTE If you use the vSphere HA Specify Failover Hosts admission control policy and designate multiple
failover hosts, VM-VM affinity rules are not supported.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the cluster in the inventory and select Edit Settings.
2 In the left pane of the Cluster Settings dialog box under vSphere DRS, select Rules.
3 Click Add.
5 From the Type menu, select either Keep Virtual Machines Together or Separate Virtual Machines.
6 Click Add.
7 Select at least two virtual machines to which the rule will apply and click OK.
8 Click OK.
n A designation of whether the rule is a requirement ("must") or a preference ("should") and whether it is
affinity ("run on") or anti-affinity ("not run on").
Because VM-Host affinity rules are cluster-based, the virtual machines and hosts that are included in a rule
must all reside in the same cluster. If a virtual machine is removed from the cluster, it loses its DRS group
affiliation, even if it is later returned to the cluster.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Create the virtual machine and host DRS groups to which the VM-Host affinity rule applies.
Procedure
1 In the vSphere Client, right-click the cluster in the inventory and select Edit Settings.
2 In the left pane of the Cluster Settings dialog box under vSphere DRS, select Rules.
3 Click Add.
6 Select the virtual machine DRS group and the host DRS group to which the rule applies.
n Must run on hosts in group. Virtual machines in VM Group 1 must run on hosts in Host Group A.
n Should run on hosts in group. Virtual machines in VM Group 1 should, but are not required, to
run on hosts in Host Group A.
n Must not run on hosts in group. Virtual machines in VM Group 1 must never run on host in Host
Group A.
n Should not run on hosts in group. Virtual machines in VM Group 1 should not, but might, run on
hosts in Host Group A.
8 Click OK.
NOTE Datastore clusters are referred to as storage pods in the vSphere API.
When you add a datastore to a datastore cluster, the datastore's resources become part of the datastore
cluster's resources. As with clusters of hosts, you use datastore clusters to aggregate storage resources,
which enables you to support resource allocation policies at the datastore cluster level. The following
resource management capabilities are also available per datastore cluster.
Space utilization load You can set a threshold for space use. When space use on a datastore exceeds
balancing the threshold, Storage DRS generates recommendations or performs Storage
vMotion migrations to balance space use across the datastore cluster.
I/O latency load You can set an I/O latency threshold for bottleneck avoidance. When I/O
balancing latency on a datastore exceeds the threshold, Storage DRS generates
recommendations or performs Storage vMotion migrations to help alleviate
high I/O load.
Anti-affinity rules You can create anti-affinity rules for virtual machine disks. For example, the
virtual disks of a certain virtual machine must be kept on different
datastores. By default, all virtual disks for a virtual machine are placed on
the same datastore.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the Datastores and Datastore Clusters view of the vSphere Client inventory, right-click the
Datacenter object and select New Datastore Cluster.
When you enable Storage DRS, you enable the following functions.
n Space load balancing among datastores within a datastore cluster.
n Initial placement for virtual disks based on space and I/O workload.
The Enable Storage DRS check box in the Datastore Cluster Settings dialog box enables or disables all of
these components at once. If necessary, you can disable I/O-related functions of Storage DRS independently
of space balancing functions.
When you disable Storage DRS on a datastore cluster, Storage DRS settings are preserved. When you enable
Storage DRS, the settings for the datastore cluster are restored to the point where Storage DRS was disabled.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a datastore cluster and select Edit Settings.
2 Click General.
4 (Optional) To disable only I/O-related functions of Storage DRS, leaving space-related controls enabled,
perform the following steps.
b Deselect the Enable I/O metric for Storage DRS check box.
5 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a datastore cluster and select Edit Settings.
Option Description
No Automation (Manual Mode) Placement and migration recommendations are displayed, but do not run
until you manually apply the recommendation.
Fully Automated Placement and migration recommendations run automatically.
4 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 (Optional) Select or deselect the Enable I/O metric for SDRS recommendations check box to enable or
disable I/O metric inclusion.
When you disable this option, vCenter Server does not consider I/O metrics when making Storage DRS
recommendations. When you disable this option, you disable the following elements of Storage DRS:
n Initial placement for virtual disks based on I/O workload. Initial placement is based on space only.
You set the aggressiveness level of Storage DRS by specifying thresholds for used space and I/O
latency.
n Use the Utilized Space slider to indicate the maximum percentage of consumed space allowed
before Storage DRS is triggered. Storage DRS makes recommendations and performs migrations
when space use on the datastores is higher than the threshold.
n Use the I/O Latency slider to indicate the maximum I/O latency allowed before Storage DRS is
triggered. Storage DRS makes recommendations and performs migrations when latency is higher
than the threshold.
NOTE The Storage DRS I/O Latency threshold for the datastore cluster should be lower than or
equal to the Storage I/O Control congestion threshold.
n No recommendations until utilization difference between source and destination is: Use the slider
to specify the space utilization difference threshold. Utilization is usage * 100/capacity.
This threshold ensures that there is some minimum difference between the space utilization of the
source and the destination. For example, if the space used on datastore A is 82% and datastore B is
79%, the difference is 3. If the threshold is 5, Storage DRS will not make migration
recommendations from datastore A to datastore B.
n Evaluate I/O load every: Specify how often Storage DRS should assess space and I/O load
balancing.
n I/O imbalance threshold: Use the slider to indicate the aggressiveness of I/O load balancing.
Lowering this value makes I/O load balancing less aggressive. Storage DRS computes an I/O
fairness metric between 0 and 1, which 1 being the fairest distribution. I/O load balancing runs only
if the computed metric is less than 1 - (I/O imbalance threshold / 100).
4 Click Next.
You can add to a datastore cluster any datastore that is mounted on a host in the vSphere Client inventory,
with the following exceptions:
n All hosts attached to the datastore must be ESXi 5.0 and later.
n The datastore cannot be in more than one datacenter in the same instance of the vSphere Client.
When you remove a datastore from a datastore cluster, the datastore remains in the vSphere Client
inventory and is not unmounted from the host.
Maintenance mode is available to datastores within a Storage DRS-enabled datastore cluster. Standalone
datastores cannot be placed in maintenance mode.
Virtual disks that are located on a datastore that is entering maintenance mode must be migrated to another
datastore, either manually or using Storage DRS. When you attempt to put a datastore in maintenance
mode, the Placement Recommendations tab displays a list of migration recommendations, datastores
within the same datastore cluster where virtual disks can be migrated. On the Faults tab, vCenter Server
displays a list of the disks that cannot be migrated and the reasons why. If Storage DRS affinity or anti-
affinity rules prevent disks from being migrated, you can choose to enable the Ignore Affinity Rules for
Maintenance option.
The datastore is in a state of Entering Maintenance Mode until all virtual disks have been migrated.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Storage DRS is enabled on the datastore cluster that contains the datastore that is entering maintenance
mode.
Procedure
1 In the vSphere Client inventory, right-click a datastore in a datastore cluster and select Enter SDRS
Maintenance Mode.
2 (Optional) On the Placement Recommendations tab, deselect any recommendations you do not want to
apply.
NOTE The datastore cannot enter maintenance mode without evacuating all disks. If you deselect
recommendations, you must manually move the affected virtual machines.
vCenter Server uses Storage vMotion to migrate the virtual disks from the source datastore to the
destination datastore and the datastore enters maintenance mode.
The datastore icon might not be immediately updated to reflect the datastore's current state. To update the
icon immediately, click Refresh.
When you enable the Ignore Affinity Rules for Maintenance option for a datastore cluster, vCenter Server
ignores Storage DRS affinity and anti-affinity rules that prevent a datastore from entering maintenance
mode.
Storage DRS rules are ignored only for evacuation recommendations. vCenter Server does not violate the
rules when making space and load balancing recommendations or initial placement recommendations.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a datastore cluster and select Edit Settings.
2 In the right pane of the Edit Datastore Cluster dialog box, select SDRS Automation.
4 Select IgnoreAffinityRulesForMaintenance.
6 Click OK.
The Ignore Affinity Rules for Maintenance Mode option is applied to the datastore cluster.
Storage DRS recommendations appear on the Storage DRS tab in the vSphere Client datastore view.
Recommendations also appear when you attempt to put a datastore into Storage DRS maintenance mode.
When you apply Storage DRS recommendations, vCenter Server uses Storage vMotion to migrate virtual
machine disks to other datastores in the datastore cluster to balance the resources.
You can apply a subset of the recommendations by selecting the Override Suggested DRS
Recommendations check box and selecting each recommendation to apply.
Space Utilization % Before (source) and (destination) Percentage of space used on the source and destination
datastores before migration.
Space Utilization % After (source) and (destination) Percentage of space used on the source and destination
datastores after migration.
I/O Latency Before (source) Value of I/O latency on the source datastore before
migration.
I/O Latency Before (destination) Value of I/O latency on the destination datastore before
migration.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
At least one datastore cluster must exist in the vSphere Client inventory.
Enable Storage DRS for the datastore cluster. The Storage DRS tab appears only if Storage DRS is enabled.
Procedure
1 In the vSphere Client datastore view, select the datastore cluster and click the Storage DRS tab.
2 Select the Recommendations view and click the Run Storage DRS link in the upper right corner.
The recommendations are updated. The Last Updated timestamp displays the time when Storage DRS
recommendations were refreshed.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a datastore cluster and select Edit Settings.
4 In the Automation Level column, select an automation level for the virtual machine.
Option Description
Default (Manual) Placement and migration recommendations are displayed, but do not run
until you manually apply the recommendation.
Fully Automated Placement and migration recommendations run automatically.
Disabled vCenter Server does not migrate the virtual machine or provide migration
recommendations for it.
5 In the Keep VMDKs together column, deselect the check box to override default VMDK affinity.
6 Click OK.
You can create a scheduled task to change the automation level and aggressiveness level for a datastore
cluster. For example, you might configure Storage DRS to run less aggressively during peak hours, when
performance is a priority, to minimize the occurrence of storage migrations. During non-peak hours, Storage
DRS can run in a more aggressive mode and be invoked more frequently.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a datastore cluster and select Edit Settings.
3 Click Add.
4 Type the time and select the days for the task to run.
5 Click Next.
c To disable I/O metrics for Storage DRS recommendations, select the check box.
When you disable I/O metrics for Storage DRS recommendations, I/O metrics are not considered as
part of Storage DRS recommendations or automated migrations for the datastore cluster.
Use the Utilized Space slider to indicate the maximum percentage of consumed space allowed
before Storage DRS is triggered. Storage DRS makes recommendations and performs migrations
when space use on the datastores is higher than the threshold.
Use the I/O Latency slider to indicate the maximum I/O latency allowed before Storage DRS is
triggered. Storage DRS makes recommendations and performs migrations when latency is higher
than the threshold.
NOTE The Storage DRS I/O Latency threshold for the datastore cluster should be lower than or
equal to the Storage I/O Control congestion threshold.
Use the I/O Imbalance Threshold slider to indicate the aggressiveness of I/O load balancing.
Storage DRS makes recommendations and performs migrations if the I/O load imbalance level
exceeds the threshold.
7 Click Next.
n To restore the Storage DRS settings to the pre-task configuration, select the Restore settings check
box.
n To specify settings other than the pre-task configuration, deselect the Restore settings check box.
When you create an anti-affinity rule, it applies to the relevant virtual disks in the datastore cluster. Anti-
affinity rules are enforced during initial placement and Storage DRS-recommendation migrations, but are
not enforced when a migration is initiated by a user.
NOTE Anti-affinity rules do not apply to CD-ROM ISO image files that are stored on a datastore in a
datastore cluster, nor do they apply to swapfiles that are stored in user-defined locations.
Inter-VM Anti-Affinity Specify which virtual machines should never be kept on the same datastore.
Rules See “Create Inter-VM Anti-Affinity Rules,” on page 376.
Intra-VM Anti-Affinity Specify which virtual disks associated with a particular virtual machine must
Rules be kept on different datastores. See “Create Intra-VM Anti-Affinity Rules,”
on page 377.
If you move a virtual disk out of the datastore cluster, the affinity or anti-affinity rule no longer applies to
that disk.
When you move virtual disk files into a datastore cluster that has existing affinity and anti-affinity rules, the
following behavior applies:
n Datastore Cluster B has an intra-VM affinity rule. When you move a virtual disk out of Datastore
Cluster A and into Datastore Cluster B, any rule that applied to the virtual disk for a given virtual
machine in Datastore Cluster A no longer applies. The virtual disk is now subject to the intra-VM
affinity rule in Datastore Cluster B.
n Datastore Cluster B has an inter-VM anti-affinity rule. When you move a virtual disk out of Datastore
Cluster A and into Datastore Cluster B, any rule that applied to the virtual disk for a given virtual
machine in Datastore Cluster A no longer applies. The virtual disk is now subject to the inter-VM anti-
affinity rule in Datastore Cluster B.
n Datastore Cluster B has an intra-VM anti-affinity rule. When you move a virtual disk out of Datastore
Cluster A and into Datastore Cluster B, the intra-VM anti-affinity rule does not apply to the virtual disk
for a given virtual machine because the rule is limited to only specified virtual disks in Datastore
Cluster B.
NOTE Storage DRS rules might prevent a datastore from entering maintenance mode. You can choose to
ignore Storage DRS rules for maintenance mode by enabling the Ignore Affinity Rules for Maintenance
option.
Virtual machines that participate in an inter-VM anti-affinity rule in a datastore cluster must be associated
with an intra-VM affinity rule in the datastore cluster. The virtual machines must also comply with the
intra-VM affinity rule.
If a virtual machine is subject to an inter-VM anti-affinity rule, the following behavior applies:
n Storage DRS places the virtual machine's virtual disks according to the rule.
n Storage DRS migrates the virtual disks using vMotion according to the rule, even if the migration is for
a mandatory reason such as putting a datastore in maintenance mode.
n If the virtual machine's virtual disk violates the rule, Storage DRS makes migration recommendations to
correct the error or reports the violation as a fault if it cannot make a recommendation that will correct
the error.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a datastore cluster and select Edit Settings.
2 In the left pane of the Edit Datastore Cluster dialog box, select Rules.
3 Click Add.
6 Click Add.
VMDK anti-affinity rules apply to the virtual machine for which the rule is defined, not to all virtual
machines. The rule is expressed as a list of virtual disks that are to be separated from one another.
If you attempt to set an intra-VM anti-affinity rule and an intra-VM affinity rule for a virtual machine,
vCenter Server rejects the most recently defined rule.
If a virtual machine is subject to a VMDK anti-affinity rule, the following behavior applies:
n Storage DRS places the virtual machine's virtual disks according to the rule.
n Storage DRS migrates the virtual disks using vMotion according to the rule, even if the migration is for
a mandatory reason such as putting a datastore in maintenance mode.
n If the virtual machine's virtual disk violates the rule, Storage DRS makes migration recommendations to
correct the error or reports the violation as a fault if it cannot make a recommendation that will correct
the error.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a datastore cluster and select Edit Settings.
2 In the left pane of the Edit Datastore Cluster dialog box, select Rules.
3 Click Add.
6 Click Add.
9 Select at least two virtual disks to which the rule applies and click OK.
VMDK affinity rules are enabled by default for all virtual machines that are in a datastore cluster. You can
override the default setting for the datastore cluster or for individual virtual machines.
Virtual machines that are subject to VMDK affinity rules have the following behavior:
n Storage DRS places the virtual machine's virtual disks according to the rule.
n Storage DRS migrates the virtual disks using vMotion according to the rule, even if the migration is for
a mandatory reason such as putting a datastore in maintenance mode.
n If the virtual machine's virtual disk violates the rule, Storage DRS makes migration recommendations to
correct the error or reports the violation as a fault if it cannot make a recommendation that will correct
the error.
When you add a datastore to a datastore cluster that is enabled for Storage DRS, the VMDK affinity rule is
disabled for any virtual machine that has virtual disks on that datastore if it also has virtual disks on other
datastores.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client inventory, right-click a datastore cluster and select Edit Settings.
3 Deselect the Keep VMDKs together check box for the virtual machine.
4 Click OK.
IMPORTANT When you enable the option to clear Storage DRS statistics, statistics are cleared every time
Storage DRS runs until you disable the option. Always disable the option after you diagnose the Storage
DRS problem.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Enable the ClearIoStatsOnSdrsRun option.
a In the vSphere Client, right-click the datastore cluster and select Edit Settings.
e Click OK, then click OK again to dismiss the settings dialog box.
3 Click the Storage DRS tab and select Run DRS in the upper right corner of the page.
The current Storage DRS statistics for all datastores and virtual disks in all datastore clusters in the
vSphere Client inventory are cleared, but no new statistics are collected.
Storage DRS runs normally. Allow several hours for the new setting to take effect.
After you understand how ESXi NUMA scheduling is performed and how the VMware NUMA algorithms
work, you can specify NUMA controls to optimize the performance of your virtual machines.
IMPORTANT When you configure your virtual machine for multicore virtual CPU settings, you must ensure
that your configuration complies with the requirements of the guest operating system EULA.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the virtual machine in the inventory and select Edit Settings.
4 Select a value from the Number of cores per socket drop-down menu.
The resulting total number of cores is a number equal to or less than the number of logical CPUs on the
host.
5 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the virtual machine in the inventory and select Edit Settings.
3 In the Scheduling Affinity panel, set the CPU affinity to the preferred processors.
NOTE You must manually select the boxes for all processors in the NUMA node. CPU affinity is
specified on a per-processor, not on a per-node, basis.
NOTE Specify nodes to be used for future memory allocations only if you have also specified CPU affinity.
If you make manual changes only to the memory affinity settings, automatic NUMA rebalancing does not
work properly.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the virtual machine in the inventory and select Edit Settings.
The CPUs (for example, 4, 5, 6, and 7) are the physical CPU numbers.
1 In the vSphere Client inventory panel, select the virtual machine and select Edit Settings.
1 In the vSphere Client inventory panel, select the virtual machine and select Edit Settings.
4 In the vSphere Client, set memory affinity for the NUMA node to 1.
Completing these two tasks ensures that the virtual machine runs only on NUMA node 1 and, when
possible, allocates memory from the same node.
NOTE When you constrain NUMA node affinities, you might interfere with the ability of the ESXi NUMA
scheduler to rebalance virtual machines across NUMA nodes for fairness. Specify NUMA node affinity only
after you consider the rebalancing issues.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the virtual machine in the inventory and select Edit Settings.
7 In the Value column, enter the NUMA nodes where the virtual machine can be scheduled.
Use a comma-separated list for multiple nodes. For example, enter 0,1 to constrain the virtual machine
resource scheduling to NUMA nodes 0 and 1.
8 Click OK.
Advanced Attributes
You can set advanced attributes for hosts or individual virtual machines to help you customize resource
management.
In most cases, adjusting the basic resource allocation settings (reservation, limit, shares) or accepting default
settings results in appropriate resource allocation. However, you can use advanced attributes to customize
resource management for a host or a specific virtual machine.
CAUTION Changing advanced options is considered unsupported unless VMware technical support or a KB
article instruct you to do so. In all other cases, changing these options is considered unsupported. In most
cases, the default settings produce the optimum result.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the host in the inventory.
4 In the Advanced Settings dialog box, select the appropriate item (for example, CPU or Mem).
5 Locate the attribute in the right panel and edit the value.
6 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, right-click the virtual machine in the inventory and select Edit Settings.
5 Click OK.
Before you create a vSphere HA cluster, you should know how vSphere HA identifies host failures and
isolation and how it responds to these situations. You also should know how admission control works so
that you can choose the policy that fits your failover needs. After you establish a cluster, you can customize
its behavior with advanced options and optimize its performance by following recommended best practices.
NOTE You might get an error message when you try to use vSphere HA. For information about error
messages related to vSphere HA, see the VMware knowledge base article at
http://kb.vmware.com/kb/1033634.
vSphere HA Checklist
The vSphere HA checklist contains requirements that you must be aware of before creating and using a
vSphere HA cluster.
Review this list before you set up a vSphere HA cluster. For more information, follow the appropriate cross
reference.
n All hosts must be licensed for vSphere HA.
n All hosts must be configured with static IP addresses. If you are using DHCP, you must ensure that the
address for each host persists across reboots.
n All hosts must have at least one management network in common. The best practice is to have at least
two management networks in common. You should use the VMkernel network with the Management
traffic checkbox enabled. The networks must be accessible to each other and vCenter Server and the
hosts must be accessible to each other on the management networks. See the vSphere Availability
publication for best practices.
n To ensure that any virtual machine can run on any host in the cluster, all hosts must have access to the
same virtual machine networks and datastores. Similarly, virtual machines must be located on shared,
not local, storage otherwise they cannot be failed over in the case of a host failure.
NOTE vSphere HA uses datastore heartbeating to distinguish between partitioned, isolated, and failed
hosts. So if some datastores are more reliable in your environment, configure vSphere HA to give
preference to them.
n For VM Monitoring to work, VMware tools must be installed. See the vSphere Availability publication for
more information on VM and application monitoring.
n vSphere HA supports both IPv4 and IPv6. See the vSphere Availability publication for more information
on vSphere HA interoperability.
n For VM Component Protection to work, hosts must have the All Paths Down (APD) Timeout feature
enabled.
n To use VM Component Protection, clusters must contain ESXi 6.0 hosts or later.
n Only vSphere HA clusters that contain ESXi 6.0 or later hosts can be used to enable VMCP. Clusters that
contain hosts from an earlier release cannot enable VMCP, and such hosts cannot be added to a VMCP-
enabled cluster.
n If your cluster uses Virtual Volume (vVol) datastores, when vSphere HA is enabled a configuration
vVol is created on each vVol datastore by vCenter Server. In these containers, vSphere HA stores the
files it uses to protect virtual machines. vSphere HA does not function correctly if you delete these
containers. Only one container is created per vVol datastore.
When you create a vSphere HA cluster, you must configure a number of settings that determine how the
feature works. Before you do this, identify your cluster's nodes. These nodes are the ESXi hosts that will
provide the resources to support virtual machines and that vSphere HA will use for failover protection. You
should then determine how those nodes are to be connected to one another and to the shared storage where
your virtual machine data resides. After that networking architecture is in place, you can add the hosts to
the cluster and finish configuring vSphere HA.
You can enable and configure vSphere HA before you add host nodes to the cluster. However, until the
hosts are added, your cluster is not fully operational and some of the cluster settings are unavailable. For
example, the Specify a Failover Host admission control policy is unavailable until there is a host that can be
designated as the failover host.
NOTE The Virtual Machine Startup and Shutdown (automatic startup) feature is disabled for all virtual
machines residing on hosts that are in (or moved into) a vSphere HA cluster. Automatic startup is not
supported when used with vSphere HA.
Open a vSphere Client connection to a to vCenter Server using an account with cluster administrator
permissions.
Prerequisites
Verify that all virtual machines and their configuration files reside on shared storage. Verify that the hosts
are configured to access that shared storage so that you can power on the virtual machines using different
hosts in the cluster,
Verify that hosts are configured to have access to the virtual machine network.
NOTE Use redundant management network connections for vSphere HA. For information about network
redundancy best practices, see the vSphere Availability publication. You should also configure hosts with at
least two datastores to provide redundancy for vSphere HA datastore heartbeating.
Procedure
1 Select the Hosts & Clusters view.
2 Right-click the Datacenter in the Inventory tree and click New Cluster.
5 Based on your plan for the resources and networking architecture of the cluster, use the vSphere Client
to add hosts to the cluster.
The cluster's Settings dialog box is where you can modify the vSphere HA (and other) settings for the
cluster.
n Admission Control
n VM Monitoring
n Datastore Heartbeating
You have a configured vSphere HA cluster, populated with hosts, available. For information about
configuring the cluster settings, see “Configuring vSphere HA Cluster Settings in the vSphere Client,” on
page 386.
In the vSphere Client, you can configure the following vSphere HA settings:
Host Monitoring Enable host monitoring to allow hosts in the cluster to exchange network
heartbeats and to allow vSphere HA to take action when it detects failures.
NOTE Host Monitoring is required for the vSphere Fault Tolerance recovery
process to work properly.
Admission Control Enable or disable admission control for the vSphere HA cluster and choose a
policy for how it is enforced.
Virtual Machine Options Set the VM restart priority and host isolation response.
Datastore Heartbeating Specify preferences for the datastores that vSphere HA uses for datastore
heartbeating.
The Host Monitoring and Admission Control page appears only if you enabled vSphere HA.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, display the cluster in the inventory.
3 In the left pane of the Cluster Settings dialog box, select vSphere HA.
Enabling admission control enforces availability constraints and preserves failover capacity. Any
operation on a virtual machine that decreases the unreserved resources in the cluster and violates
availability constraints is not permitted.
Disabling admission control allows a virtual machine to be powered on even if it causes insufficient
failover capacity. When this happens, no warnings are presented, and the cluster does not turn red.
If a cluster has insufficient failover capacity, vSphere HA can still perform failovers and it uses the
VM Restart Priority setting to determine which virtual machines to power on first.
NOTE Select this option to power on more virtual machines than the vSphere HA failover level can
support. If you select this option, failover is no longer guaranteed.
Option Description
Host failures the cluster tolerates Select the maximum number of host failures that you can recover from or
to guarantee failover for.
Percentage of cluster resources Specify a percentage of the cluster’s CPU and Memory resources to reserve
reserved as failover spare capacity as spare capacity to support failovers.
Specify failover hosts Click to select hosts to use for failover actions. Failovers can still occur to
other hosts in the cluster if a default failover host does not have enough
resources.
Change these settings only when instructed to do so by VMware technical support or when you are
following specific instructions in VMware documentation.
8 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Open the Specify Failover Hosts dialog box from the vSphere HA screen of the Cluster Settings dialog
box of the vSphere Client.
2 In the Available Hosts pane, select an available host to designate as a failover host.
3 Click the >> button to move the host name to the Failover Hosts pane.
4 Repeat steps 1 and 2 for each host you want to designate as a failover host.
5 To remove a host from the failover hosts list, select the name of that host in the Failover Hosts pane.
6 Click the << button to move the host name to the Available Hosts pane.
You can use the hosts designated as failover hosts to support the vSphere HA admission control process.
The Virtual Machine Options page appears only if you enabled vSphere HA.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the VM restart priority for virtual machines in the cluster.
The restart priority determines the order in which virtual machines are restarted when the host fails.
Higher priority virtual machines are started first. This priority applies only on a per-host basis. If
multiple hosts fail, all virtual machines are migrated from the first host in order of priority, then all
virtual machines from the second host in order of priority, and so on.
The host isolation response determines what happens when a host in a vSphere HA cluster loses its
console network connection but continues running.
3 Click Next.
Your virtual machine restart priority and host isolation response settings now take effect.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 (Optional) Select VM Monitoring Only to restart individual virtual machines if their heartbeats are not
received within a set time. You can select VM and Application Monitoring if you also want to enable
application monitoring.
2 Set the virtual machine monitoring sensitivity by moving the slider between Low and High. Select
Custom to provide custom settings.
3 Click Next.
Use the Configure Datastore Heartbeating dialog box to specify the datastores that you want to be used for
this purpose.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, display the cluster in the inventory.
3 In the left pane of the Cluster Settings dialog box, select Datastore Heartbeating.
4 To instruct vSphere HA about how to select the datastores and how to treat your preferences, choose
from the following options:
Table 26‑1.
Datastore Heartbeating Options
5 In the Datastores Available for Heartbeating pane, select the datastores that you want to use for
heartbeating.
The datastores listed are those shared by more than one host in the vSphere HA cluster. When a
datastore is selected, the lower pane displays all the hosts in the vSphere HA cluster that can access it.
6 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the cluster and select Edit Settings from the right-click menu.
3 In the Virtual Machine Settings pane, select a virtual machine and customize its VM Restart Priority or
Host Isolation Response setting.
5 In the Virtual Machine Settings pane, select a virtual machine and customize its VM Monitoring
setting.
6 Click OK.
The virtual machine’s behavior now differs from the cluster defaults for each setting you changed.
Fault Tolerance is built on the ESXi host platform, and it provides continuous availability by having
identical virtual machines run on separate hosts.
To obtain the optimal results from Fault Tolerance you should be familiar with how it works, how to enable
it for your cluster and virtual machines, and the best practices for its usage.
n “Preparing Your Cluster and Hosts for Fault Tolerance,” on page 393
n “Viewing Information About Fault Tolerant Virtual Machines in the vSphere Client,” on page 398
Fault Tolerance provides a higher level of business continuity than vSphere HA. When a Secondary VM is
called upon to replace its Primary VM counterpart, the Secondary VM immediately takes over the Primary
VM’s role with the entire state of the virtual machine preserved. Applications are already running, and data
stored in memory does not need to be re-entered or reloaded. This differs from a failover provided by
vSphere HA, which restarts the virtual machines affected by a failure.
This higher level of continuity and the added protection of state information and data informs the scenarios
when you might want to deploy Fault Tolerance.
n Applications that need to be available at all times, especially those that have long-lasting client
connections that users want to maintain during hardware failure.
n Cases where high availability might be provided through custom clustering solutions, which are too
complicated to configure and maintain.
Another key use case for protecting a virtual machine with Fault Tolerance can be described as On-Demand
Fault Tolerance. In this case, a virtual machine is adequately protected with vSphere HA during normal
operation. During certain critical periods, you might want to enhance the protection of the virtual machine.
For example, you might be executing a quarter-end report which, if interrupted, might delay the availability
of mission critical information. With vSphere Fault Tolerance, you can protect this virtual machine prior to
running this report and then turn off or suspend Fault Tolerance after the report has been produced. You
can use On-Demand Fault Tolerance to protect the virtual machine during a critical time period and return
the resources to normal during non-critical operation.
NOTE The failover of fault tolerant virtual machines is independent of vCenter Server, but you must use
vCenter Server to set up your Fault Tolerance clusters.
n Fault Tolerance logging and VMotion networking configured. See “Configure Networking for Host
Machines in the vSphere Client,” on page 393.
n vSphere HA cluster created and enabled. See “Creating and Configuring a vSphere HA Cluster,” on
page 384. vSphere HA must be enabled before you can power on fault tolerant virtual machines or add
a host to a cluster that already supports fault tolerant virtual machines.
n The configuration for each host must have Hardware Virtualization (HV) enabled in the BIOS.
NOTE VMware recommends that the hosts you use to support FT VMs have their BIOS power management
settings turned to "Maximum performance" or "OS-managed performance".
To confirm the compatibility of the hosts in the cluster to support Fault Tolerance, you can also run profile
compliance checks as described in “Create Cluster and Check Compliance in the vSphere Client,” on
page 395.
n No unsupported devices attached to the virtual machine. See the vSphere Availability publication for
more information on Fault Tolerance Interoperability.
n Incompatible features must not be running with the fault tolerant virtual machines. See the vSphere
Availability publication for more information on Fault Tolerance Interoperability.
n Virtual machine files must be stored on shared storage. Acceptable shared storage solutions include
Fibre Channel, (hardware and software) iSCSI, NFS, and NAS.
n If you are using NFS to access shared storage, use dedicated NAS hardware with at least a 1Gbit NIC to
obtain the network performance required for Fault Tolerance to work properly.
n The memory reservation of a fault tolerant virtual machine is set to the VM's memory size when Fault
Tolerance is turned on. Ensure that a resource pool containing fault tolerant VMs has memory resources
above the memory size of the virtual machines. Without this excess in the resource pool, there might
not be any memory available to use as overhead memory.
n To ensure redundancy and maximum Fault Tolerance protection, you should have a minimum of three
hosts in the cluster. In a failover situation, this provides a host that can accommodate the new
Secondary VM that is created.
The tasks you should complete before attempting to enable Fault Tolerance for your cluster include the
following:
n Ensure that your cluster, hosts, and virtual machines meet the requirements outlined in the Fault
Tolerance checklist.
After your cluster and hosts are prepared for Fault Tolerance, you are ready to turn on Fault Tolerance for
your virtual machines. See “Turn On Fault Tolerance for Virtual Machines in the vSphere Client,” on
page 396.
To enable Fault Tolerance for a host, you must complete this procedure twice, once for each port group
option to ensure that sufficient bandwidth is available for Fault Tolerance logging. Select one option, finish
this procedure, and repeat the procedure a second time, selecting the other port group option.
Prerequisites
Multiple gigabit Network Interface Cards (NICs) are required. For each host supporting Fault Tolerance,
you need a minimum of two physical gigabit NICs. For example, you need one dedicated to Fault Tolerance
logging and one dedicated to vMotion. Use three or more NICs to ensure availability.
NOTE The vMotion and FT logging NICs must be on different subnets and IPv6 is not supported on the FT
logging NIC.
Procedure
1 Log in to the vSphere Client and select a host in the inventory pane.
3 Select Networking under Hardware, and click the Add Networking link.
7 Select either Use this port group for vMotion or Use this port group for Fault Tolerance logging and
click Next.
9 Click Finish.
After you create both a vMotion and Fault Tolerance logging virtual switch, you can create other virtual
switches, as needed. You should then add the host to the cluster and complete any steps needed to turn on
Fault Tolerance.
What to do next
To confirm that you successfully enabled both vMotion and Fault Tolerance on the host, view its Summary
tab in the vSphere Client. In the General pane, the fields vMotion Enabled and Host Configured for FT
should show yes.
NOTE If you configure networking to support FT but subsequently disable the Fault Tolerance logging port,
pairs of fault tolerant virtual machines that are already powered on remain powered on. However, if a
failover situation occurs, when the Primary VM is replaced by its Secondary VM a new Secondary VM is not
started, causing the new Primary VM to run in a Not Protected state.
Fault Tolerance provides full uptime during the course of a physical host failure due to power outage,
system panic, or similar reasons. Network or storage path failures or any other physical server components
that do not impact the host running state may not initiate a Fault Tolerance failover to the Secondary VM.
Therefore, customers are strongly encouraged to use appropriate redundancy (for example, NIC teaming) to
reduce that chance of losing virtual machine connectivity to infrastructure components like networks or
storage arrays.
NIC Teaming policies are configured on the vSwitch (vSS) Port Groups (or Distributed Virtual Port Groups
for vDS) and govern how the vSwitch will handle and distribute traffic over the physical NICs (vmnics)
from virtual machines and vmkernel ports. A unique Port Group is typically used for each traffic type with
each traffic type typically assigned to a different VLAN.
Figure 27-1 depicts the network configuration for a single ESXi host with four 1GB NICs supporting Fault
Tolerance. Other hosts in the FT cluster would be configured similarly.
n VLAN A: Virtual Machine Network Port Group-active on vmnic2 (to physical switch #1); standby on
vmnic0 (to physical switch #2.)
n VLAN B: Management Network Port Group-active on vmnic0 (to physical switch #2); standby on
vmnic2 (to physical switch #1.)
n VLAN C: vMotion Port Group-active on vmnic1 (to physical switch #2); standby on vmnic3 (to physical
switch #1.)
n VLAN D: FT Logging Port Group-active on vmnic3 (to physical switch #1); standby on vmnic1 (to
physical switch #2.)
vMotion and FT Logging can share the same VLAN (configure the same VLAN number in both port
groups), but require their own unique IP addresses residing in different IP subnets. However, separate
VLANs might be preferred if Quality of Service (QoS) restrictions are in effect on the physical network with
VLAN based QoS. QoS is of particular use where competing traffic comes into play, for example, where
multiple physical switch hops are used or when a failover occurs and multiple traffic types compete for
network resources.
FT vMotion
virtual virtual virtual management
machine machine machine network
vmkernel
physical physical
port group teaming policy switch 1 switch 2
active
standby
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vCenter Server inventory, select the cluster and click the Profile Compliance tab.
The results of the compliance test appear at the bottom of the screen. A host is labeled as either Compliant
or Noncompliant.
Before Fault Tolerance can be turned on, validation checks are performed on a virtual machine.
After these checks are passed and you turn on vSphere Fault Tolerance for a virtual machine, new options
are added to the Fault Tolerance section of its context menu. These include turning off or disabling Fault
Tolerance, migrating the Secondary VM, testing failover, and testing restart of the Secondary VM.
When Fault Tolerance is turned on, vCenter Server unsets the virtual machine's memory limit and sets the
memory reservation to the memory size of the virtual machine. While Fault Tolerance remains turned on,
you cannot change the memory reservation, size, limit, or shares. When Fault Tolerance is turned off, any
parameters that were changed are not reverted to their original values.
Prerequisites
Open a vSphere Client connection to a to vCenter Server using an account with cluster administrator
permissions.
Procedure
1 Select the Hosts & Clusters view.
2 Right-click a single virtual machine and select Fault Tolerance > Turn On Fault Tolerance.
If you select more than one virtual machine, the Fault Tolerance menu is disabled. You must turn Fault
Tolerance on for one virtual machine at a time.
The specified virtual machine is designated as a Primary VM and a Secondary VM is established on another
host. The Primary VM is now fault tolerant.
Setting Options for Fault Tolerant Virtual Machines in the vSphere Client
After you turn on vSphere Fault Tolerance for a virtual machine, new options are added to the Fault
Tolerance section of its context menu.
In the vSphere Client, there are options for turning off or disabling Fault Tolerance, migrating the secondary
virtual machine, testing failover, and testing restart of the secondary virtual machine.
Use this option if you do not plan to reenable the feature. Otherwise, use the Disable Fault Tolerance
option.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
If the Secondary VM resides on a host that is in maintenance mode, disconnected, or not responding, you
cannot use the Turn Off Fault Tolerance option. In this case, you should disable and enable Fault Tolerance
instead.
Procedure
1 In the vSphere Client, select the Hosts & Clusters view.
2 Right-click the fault tolerant virtual machine and select Fault Tolerance > Turn Off Fault Tolerance.
Fault Tolerance is turned off for the selected virtual machine. Any history and the secondary virtual
machine for the selected virtual machine are deleted.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the Hosts & Clusters view.
2 Right-click the fault tolerant virtual machine and select Fault Tolerance > Disable Fault Tolerance.
Fault Tolerance is disabled for the selected virtual machine. Any history and the Secondary VM for the
selected virtual machine are preserved and will be used if the feature is re-enabled.
What to do next
After you have disabled Fault Tolerance, the menu option becomes Enable Fault Tolerance. Select this to re-
enable the feature.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the Hosts & Clusters view.
2 Right-click the fault tolerant virtual machine and select Fault Tolerance > Migrate Secondary.
The Migrate Virtual Machine wizard opens with a Migration Type of Change Host selected.
3 Click Next.
4 Select the destination host that you want to migrate the Secondary VM to and click Next.
The Secondary VM associated with the selected fault tolerant virtual machine is migrated to the specified
host. Note that the Primary VM can always be migrated using the Migrate command in its context menu.
This option is unavailable (grayed out) if the virtual machine is powered off.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the Hosts & Clusters view.
2 Right-click the fault tolerant virtual machine and select Fault Tolerance > Test Failover.
This task induces failure of the Primary VM to ensure that the Secondary VM replaces it. A new Secondary
VM is also started placing the Primary VM back in a Protected state.
This option is unavailable (grayed out) if the virtual machine is powered off.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the vSphere Client, select the Hosts & Clusters view.
2 Right-click the fault tolerant virtual machine and select Fault Tolerance > Test Restart Secondary.
This task results in the termination of the Secondary VM that provided Fault Tolerance protection for the
selected Primary VM. A new Secondary VM is then started, placing the Primary VM back in a Protected
state.
NOTE You cannot disable Fault Tolerance from the Secondary VM.
A vSphere Fault Tolerance section (pane) appears in the Summary tab for the Primary VM and includes
information about the virtual machine.
Fault Tolerance Status Indicates the Fault Tolerance status of the virtual machine.
Secondary location Displays the ESXi host on which the Secondary VM is hosted.
Total Secondary CPU The CPU usage of the Secondary VM, displayed in MHz.
Total Secondary The memory usage of the Secondary VM, displayed in MB.
Memory
vLockstep Interval The time interval (displayed in seconds) needed for the Secondary VM to
match the current execution state of the Primary VM. Typically, this interval
is less than one-half of one second. No state is lost during a failover,
regardless of the vLockstep Interval value.
Log Bandwidth The amount of network capacity being used for sending vSphere Fault
Tolerance log information from the host running the Primary VM to the host
running the Secondary VM.
For each host configured to support Fault Tolerance, you can view information about its fault tolerant
virtual machines by accessing the host's Summary tab in the vSphere Client. The Fault Tolerance section of
this screen displays the total number of Primary and Secondary VMs residing on the host and the number of
those virtual machines that are powered on. If the host is ESX/ESXi 4.1 or greater, this section also displays
the Fault Tolerance version the host is running. Otherwise, it lists the host build number. For two hosts to be
compatible they must have matching FT version numbers or matching host build numbers.
The following recommendations for host and networking configuration can help improve the stability and
performance of your cluster.
Host Configuration
Hosts running the Primary and Secondary VMs should operate at approximately the same processor
frequencies, otherwise the Secondary VM might be restarted more frequently. Platform power management
features that do not adjust based on workload (for example, power capping and enforced low frequency
modes to save power) can cause processor frequencies to vary greatly. If Secondary VMs are being restarted
on a regular basis, disable all power management modes on the hosts running fault tolerant virtual
machines or ensure that all hosts are running in the same power management modes.
n Distribute each NIC team over two physical switches ensuring L2 domain continuity for each VLAN
between the two physical switches.
n Use deterministic teaming policies to ensure particular traffic types have an affinity to a particular NIC
(active/standby) or set of NICs (for example, originating virtual port-id).
n Where active/standby policies are used, pair traffic types to minimize impact in a failover situation
where both traffic types will share a vmnic.
n Where active/standby policies are used, configure all the active adapters for a particular traffic type (for
example, FT Logging) to the same physical switch. This minimizes the number of network hops and
lessens the possibility of oversubscribing the switch to switch links.
NOTE FT logging traffic between Primary and Secondary VMs is unencrypted and contains guest network
and storage I/O data, as well as the memory contents of the guest operating system. This traffic can include
sensitive data such as passwords in plaintext. To avoid such data being divulged, ensure that this network is
secured, especially to avoid 'man-in-the-middle' attacks. For example, you could use a private network for
FT logging traffic.
Homogeneous Clusters
vSphere Fault Tolerance can function in clusters with nonuniform hosts, but it works best in clusters with
compatible nodes. When constructing your cluster, all hosts should have the following configuration:
n The same BIOS settings (power management and hyperthreading) for all hosts.
Performance
To increase the bandwidth available for the logging traffic between Primary and Secondary VMs use a
10Gbit NIC, and enable the use of jumbo frames.
For virtual machines with Fault Tolerance enabled, you might use ISO images that are accessible only to the
Primary VM. In such a case, the Primary VM can access the ISO, but if a failover occurs, the CD-ROM
reports errors as if there is no media. This situation might be acceptable if the CD-ROM is being used for a
temporary, noncritical operation such as a patch.
In a partitioned vSphere HA cluster using Fault Tolerance, the Primary VM (or its Secondary VM) could end
up in a partition managed by a master host that is not responsible for the virtual machine. When a failover is
needed, a Secondary VM is restarted only if the Primary VM was in a partition managed by the master host
responsible for it.
To ensure that your management network is less likely to have a failure that leads to a network partition,
follow the recommendations in the vSphere Availability publication.
This screen lists faults related to Fault Tolerance and for each fault it provides the type of fault (red is an
error, yellow is a warning), the name of the virtual machine or host involved, and a brief description.
You can also invoke this screen for a specific failed Fault Tolerance task. To do this, select the task in either
the Recent Tasks pane or the Tasks & Events tab for the entity that experienced the fault and click the View
details link that appears in the Details column.
View Charts
You can connect directly to ESX/ESXi hosts and view information about resource usage in line chart form.
Prerequisites
Connect to an ESX/ESXi host by using the vSphere Client.
Procedure
1 Select the host in the inventory.
n More information. Hover over a data point in a chart and details about that specific data point are
displayed.
n Customizable charts. Change chart settings. Save custom settings to create your own charts.
n Export to spreadsheet.
Prerequisites
Ensure that you have connected to a vCenter Server system by using the vSphere Client.
Procedure
1 Select Edit > Client Settings.
2 In the Tabs section of the Client Settings dialog box, select Default to Advanced Performance Charts.
3 Click OK.
Prerequisites
Connect to a host through the vSphere Client.
Procedure
1 Select an inventory object and click the Performance tab.
n Select Last and set the number of hours, days, weeks, or months for the amount of time to monitor
the object.
You can also customize the time range options by customizing the statistics collection interval setting.
n You can select only one item from the list of measurements.
n Click a counter description name to display information about the counter’s function and whether
the selected metric can be stacked for per-virtual-machine graphs.
You can also specify the objects using the All or None buttons.
You can also specify counters using the All or None buttons.
Click a counter name to display information about the counter in the Counter Description panel.
8 Click Apply.
Changes to chart settings take effect immediately after they are applied.
9 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Customize chart settings as described in “Change Performance Chart Settings,” on page 404.
4 Click OK.
The chart settings are saved and an entry for your chart is added to the Switch to menu.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select any object in the datacenter to enable the Performance tab.
2 Click the Performance tab and click Advanced.
6 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 In the Performance tab, click Advanced.
2 Click Save.
3 In the Save Performance Chart dialog box, navigate to the location to save the file.
4 Enter a name for the file.
6 Click Save.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the object in the inventory.
If performance data is not available for the selected inventory object, the Export Performance option is
not available.
7 (Optional) To customize the options, click Advanced, select the objects and counters to include in the
chart, and click OK.
8 Specify the size of the chart in the exported file.
The host health monitoring tool allows you to monitor the health of a variety of host hardware components
including:
n CPU processors
n Memory
n Fans
n Temperature
n Voltage
n Power
n Network
n Battery
n Storage
n Cable/Interconnect
n Software components
n Watchdog
n PCI devices
n Other
The host health monitoring tool presents data gathered using Systems Management Architecture for Server
Hardware (SMASH) profiles. The information displayed depends on the sensors available on your server
hardware. SMASH is an industry standard specification providing protocols for managing a variety of
systems in the data center. For more information, see http://www.dmtf.org/standards/smash.
You can monitor host health status either by connecting the vSphere Client directly to a host, or by
connecting the vSphere Web Client to a vCenter Server system. You can also set alarms to trigger when the
host health status changes.
NOTE The interpretation of hardware monitoring information is specific for each hardware vendor. Your
hardware vendor can help you understand the results of the host hardware components monitoring.
Prerequisites
Required privilege: Host.Configuration.Advanced Configuration
Procedure
1 Log in to the host using the vSphere Client, and display the inventory.
If a component is functioning normally, the status indicator is green. The status indicator changes to yellow
or red if a system component violates a performance threshold or is not functioning properly. Generally, a
yellow indicator signifies degraded performance. A red indicator signifies that a component stopped
operating or exceeded the highest threshold. If the status is blank, then the health monitoring service cannot
determine the status of the component.
The Reading column displays the current values for the sensors. For instance, the column displays rotations
per minute (RPM) for fans and degrees Celsius for temperature.
Prerequisites
Launch the vSphere Client and log in to the ESXi host.
If you need to preserve sensor data for troubleshooting or other purposes, take a screenshot, export the data,
or download a support bundle before resetting sensors.
Procedure
1 On the host Configuration tab, click Health Status.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a host in the object navigator or the iventory tree.
Events
Events are records of user actions or system actions that occur on objects in vCenter Server or on a host.
Actions that might be recordered as events include, but are not limited to, the following examples:
Event data includes details about the event such as who generated it, when it occured, and what type of
event it is. There are three types of events:
n Information
n Warning
n Error
In the vSphere Client, event data is displayed in Tasks and Events tab for the selected inventory object. See
“View Events,” on page 410.
Alarms
Alarms are notifications that are activated in response to an event, a set of conditions, or the state of an
inventory object. An alarm definition consists of the following elements:
n Triggers - Defines the event, condition, or state that will trigger the alarm and defines the notification
severity.
n Tolerance thresholds (Reporting) - Provides additional restrictions on condition and state triggers
thresholds that must be exceeded before the alarm is triggered.
n Actions - Defines operations that occur in response to triggered alarms. VMware provides sets of
predefined actions that are specific to inventory object types.
n Normal – green
n Warning – yellow
n Alert – red
Alarm definitions are associated with the object selected in the inventory. An alarm monitors the type of
inventory objects specified in its definition.
For example, you might want to monitor the CPU usage of all virtual machines in a specific host cluster.
You can select the cluster in the inventory, and add a virtual machine alarm to it. When enabled, that alarm
will monitor all virtual machines running in the cluster and will trigger when any one of them meets the
criteria defined in the alarm. If you want to monitor a specific virtual machine in the cluster, but not others,
you would select that virtual machine in the inventory and add an alarm to it. One easy way to apply the
same alarms to a group of objects is to place those objects in a folder and define the alarm on the folder.
NOTE You can enable, disable, and modify alarms only from the object in which the alarm is defined. For
example, if you defined an alarm in a cluster to monitor virtual machines, you can only enable, disable, or
modify that alarm through the cluster; you can not make changes to the alarm at the individual virtual
machine level.
Alarm Actions
Alarm actions are operations that occur in response to the trigger. For example, you can have an email
notification sent to one or more administrators when an alarm is triggered.
NOTE Default alarms are not preconfigured with actions. You must manually set what action occurs when
the triggering event, condition, or state occurs.
View Events
You can either view all vSphere events or view events associated with a single object. The events list for a
selected inventory object includes events associated with child objects.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
u To see a list of events associated with a selected inventory object and its child objects, select the Tasks &
Events tab and click Events.
b Use the filter controls above the list to filter the list.
Prerequisites
Connect to an ESX/ESXi host by using the vSphere Client.
Procedure
1 To view system log entries, select Home > Administration > System Logs.
3 (Optional) Click Show All or Show next # lines to see additional log entries.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select File > Export > Export Events.
2 (Linked-mode only) In the vCenter Server list, select the server where the events occurred.
3 Specify Events, Time, and Limits attributes for the events you want to export.
5 Click OK.
vCenter Server creates the file in the specified location. The file contains the Type, Time, and Description of
the events.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
n To view all triggered alarms, click Alarms in the status bar.
n To view alarms triggered on an selected inventory object, select the Alarms tab > Triggered Alarms.
n To view a list of alarms associated with a selected inventory object, select the Alarms tab > Definitions.
The Defined In column indicates the object on which the alarm was set.
Set An Alarm
You can monitor inventory objects by setting alarms on them. Setting an alarm involves selecting the type of
inventory object to monitor, defining when and for how long the alarm will trigger, and defining actions
that will be performed as a result of the alarm being triggered. You define alarms in the Alarm Settings
dialog box.
Prerequisites
Ensure that you have connected to a vCenter Server system by using the vSphere Client.
Prerequisites
Ensure that you have connected to a vCenter Server system by using the vSphere Client.
Procedure
u To view or change alarm settings, open the Alarm Settings dialog box:
Option Description
Create New Alarm Select an inventory object and select File > New > Alarm.
Add Alarm to Object Right-click an inventory object and select Alarm > Add Alarm.
View Alarm Definitions Select the Alarms tab, click the Definitions subtab of the inventory item
with the alarm you want, and double-click an alarm in the list.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Right-click an inventory object and select Alarms > Add Alarm.
The options in the Triggers tab change depending on the type of activity you select.
5 Click OK to save your changes and exit the dialog box or select a different tab to make further changes
to the alarm.
What to do next
NOTE You cannot save an alarm without triggers defined for it.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Open the Triggers tab of the Alarm Settings dialog box. See “Specify Alarm Name, Description, and Type,”
on page 412.
Procedure
1 Select the trigger you want to change or click Add to add a new trigger.
2 Click in the Trigger Type column and select an option from the drop-down menu.
3 Click in the Condition column and select an option from the drop-down menu.
4 Click in the Warning column and select an option from the drop-down menu to set the threshold for
triggering a warning.
5 (Optional) Click in the Condition Length column and select an option from the drop-down menu.
6 Click in the Alert column and select an option from the drop-down menu to set the threshold for
triggering an alert.
7 (Optional) Click in the Condition Length column and select an option from the drop-down menu.
What to do next
Click OK to save the alarm definition and exit the dialog box, or optionally add more triggers, or configure
any of the following settings:for this alarm:
n Alarm actions
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select the trigger you want to change or click Add to add a new trigger.
2 Click in the Event column and select an option from the drop-down menu.
3 Click in the Status column and select an option from the drop-down menu.
4 (Optional) Click Advanced in the Conditions column to configure additional conditions that must be
met before the alarm triggers.
b Click in the Argument column and select an option from the drop-down menu.
c Click in the Operator column and select an option from the drop-down menu.
d Click in the Value column and enter a value into the text field.
e Add more arguments, or click OK to exit the dialog box and return to the Alarm Settings dialog
box.
What to do next
Click OK to save the alarm definition and exit the dialog box, or optionally add more triggers or configure
alarm actions.
Reporting settings include Range and Frequency. Range is the threshold the monitored condition or state
must exceed the specified trigger limit for the alarm to trigger. Frequency is the length of time between each
re-triggering for as long as the condition or state exists. The Reporting tab is disabled for alarms with event-
based triggers.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 (Optional) Specify how far over, or under, trigger limits the conditions must exceed before the alarm is
triggered again.
The frequency sets the time period during which a triggered alarm is not reported again. When the time
period has elapsed, the alarm will report again if the condition or state is still true.
What to do next
Optionally specify alarm actions, or click OK to save your changes and exit the dialog box.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Ensure the vCenter Server is properly configured to use SNMP email or trap notifications as an alarm
action.
Procedure
1 Select the action that you want to change or click Add to add one.
2 Click in the Action column and select an option from the drop-down menu.
3 Click in the Configuration column and enter configuration information for those actions that require
additional information:
Option Action
Send a notification email Enter email addresses, separated by a comma, and press Enter.
Migrate a VM Complete the Migrate Virtual Machine wizard .
Run a command Take one of the following actions and press Enter:
n If the command is a .exe file, enter the full path name of the command
and include any parameters. For example, to run the cmd.exe
command in the C:\tools directory, with the alarmName and
targetName parameters, type:
c:\tools\cmd.exe alarmName targetName
n If the command is a .bat file, enter the full path name of the command
as an argument to the c:\windows\system32\cmd.exe command.
Include any parameters. For example, to run the cmd.bat command in
the C:\tools directory, with the alarmName and targetName
parameters, type:
c:\windows\system32\cmd.exe /c c:\tools\cmd.bat
alarmName targetName
For .bat files, the command and its parameters must be formatted
into one string.
4 (Optional) For each alarm status change column, specify whether the alarm should be triggered when
the alarm status changes.
5 For repeat actions, enter the time interval for the repetition in Repeat After.
What to do next
Click OK to save the alarm definition and exit the dialog box, or navigate to a different tab to make further
changes.
Prerequisites
Ensure that the vCenter Server SMTP agent is properly configured to send email notifications.
Procedure
1 In the Actions tab of the Alarm Settings dialog box, click Add to add an action.
2 In the Actions column, selectSend a notification email from the drop-down menu.
3 In the Configuration column, enter recipient addresses. Use commas to separate multiple addresses.
4 (Optional) Configure alarm transitions and frequency. See “Specify Which Actions to Perform When
Triggered,” on page 415.
What to do next
Click OK to save the alarm definition and exit the dialog box, or navigate to a different tab to make further
changes.
Metric Value Threshold value that triggered the alarm. Applies only to metric condition triggers.
Alarm Definition Alarm definition in vCenter Server, including the alarm name and status.
Summary Alarm summary, including the event type, alarm name, and target object.
UserName Person who initiated the action that caused the event to be created. Events caused by an
internal system activity do not have a UserName value.
Prerequisites
Ensure that vCenter Server SNMP agents and ESXi SNMP agents are properly configured.
Procedure
1 In the Actions tab of the Alarm Settings dialog box, click Add.
2 In the Actions column, select Send a notification trap from the drop-down menu.
What to do next
Click OK to save the alarm definition and exit the dialog box, or navigate to a different tab to make further
changes.
Type The state vCenter Server is monitoring for the alarm. Options include Host Processor (or CPU)
usage, Host Memory usage, Host State, Virtual Machine Processor (or CPU) usage, Virtual
Machine Memory usage, Virtual Machine State, Virtual Machine Heartbeat.
Name The name of the host or virtual machine that triggers the alarm.
Old Status The alarm status before the alarm was triggered.
n Alarm name
When you write the script, include the following environment variables in the script:
n VMWARE_ALARM_NAME
n VMWARE_ALARM_TARGET_NAME
n VMWARE_ALARM_EVENTDESCRIPTION
n VMWARE_ALARM_ALARMVALUE
You can attach the script to any alarm on any object without changing the script.
Prerequisites
Required Privilege: Alarms.Create alarm or Alarms.Modify alarm
Procedure
1 In the Actions tab of the Alarm Settings dialog box, click Add to add an action.
2 In the Actions column, select Run a command from the drop-down menu.
If your script does not make use of the alarm environment variables, include any necessary parameters
in the configuration field. For example:
4 (Optional) Configure alarm transitions and frequency. See “Specify Which Actions to Perform When
Triggered,” on page 415.
What to do next
Click OK to save the alarm definition and exit the dialog box, or navigate to a different tab to make further
changes.
The command-line parameters enable you to pass alarm information without having to change an alarm
script. For example, you can use these parameters when you have an external program for which you do not
have the source. You can pass in the necessary data by using the substitution parameters, which take
precedence over the environment variables. You pass the parameters through the Configuration dialog box
in the alarm definition wizard or on a command line.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
n To disable alarm actions, right-click on the inventory object and select Alarm > Disable Alarm Actions.
n To enable alarm actions, right click on the inventory object and select Alarm > Enable Alarm Actions.
Acknowledging an alarm lets other users know that you are taking ownership of the issue. For example, a
host has an alarm set on it that monitors CPU usage and that sends an email to an administrator when the
alarm is triggered. The host CPU usage spikes, triggering the alarm which sends an email to the host's
administrator. The administrator acknowledges the triggered alarm to let other administrators know he is
working on the problem, and to prevent the alarm from sending more email messages. The alarm, however,
is still visible in the system.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Navigate to the inventory panel.
2 If the status panel is not available, select View > Status Bar to view the status pane.
3 In the status bar, click Alarms to display the Triggered Alarms panel.
To acknowledge multiple alarms at one time, Shift+click each alarm to select it, right-click the selection,
and select Acknowledge Alarm.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Locate the triggered alarm in the Triggered Alarms panel or on the Alarms tab for the object.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select a parent object, depending on the scope of objects you want to examine.
n vCenter Server
n Datacenter
n Cluster
n Host
n Virtual Switch
n Datastore Cluster
2 Select the tab that corresponds to the child objects you want to examine.
For example, if the selected inventory object is a datacenter, you might select the Hosts tab.
You might need to scroll horizontally to bring the column into view.
The value in the Alarm Actions column indicates whether alarm actions are enabled or disabled on the
listed objects.
Viewing Solutions
You can deploy, monitor, and interact with solutions that are installed in a vCenter Server instance with the
vCenter Solutions Manager. The Solutions Manager displays information about the health of a solution.
You can navigate to the Solutions Manager from the home page of the vSphere Client. The Solutions
Manager view displays information about the solution:
n Solution name
n Solution health
n vService providers
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Click the Solutions Manager icon from vSphere Client home.
n Summary tab. Lists the number of installed solutions and a brief health overview for each of the
solutions.
n Health tab. Provides the health status of the vCenter services. It also shows alerts or warnings for
each of the services.
n Summary tab. Lists information about the solution, including a link to the product and vendor
Web sites, a link to launch the management UI in a separate window, and a link to the virtual
machine or vApp running this solution.
Selecting the vendor Web site link takes you to the Summary page of the virtual machine or vApp.
A link under "Managed by" returns you to the solution.
n Virtual Machines tab. Lists all the virtual machines belonging to the solution
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
To complete the following task, the vSphere Client must be connected to a vCenter Server. In addition, you
need the DNS name and IP address of the SNMP receiver, the port number of the receiver, and the
community identifier.
Procedure
1 Select Administration > vCenter Server Settings.
2 If the vCenter Server is part of a linked mode group, in Current vCenter Server, select the appropriate
server.
4 Enter the following information for the Primary Receiver of the SNMP traps.
Option Description
Receiver URL The DNS name or IP address of the SNMP receiver.
Receiver port The port number of the receiver to which the SNMP agent sends traps.
If the port value is empty, vCenter Server uses the default port, 162.
Community The community identifier.
5 (Optional) Enable additional receivers in the Enable Receiver 2, Enable Receiver 3, and Enable
Receiver 4 options.
6 Click OK.
The vCenter Server system is now ready to send traps to the management system you have specified.
What to do next
Configure your SNMP management software to receive and interpret data from the vCenter Server SNMP
agent. See the vSphere Monitoring and Performance publication for more information.
These logs contain additional information about activities in your vSphere environment.
Procedure
1 From the Home page of a vSphere Client connected to either a vCenter Server system or an ESX/ESXi
host, click System Logs.
2 From the drop-down menu, select the log and entry you want to view.
Procedure
1 From the direct console, select View System Logs.
vCenter Server agent (vpxa) logs appear if the host is managed by vCenter Server.
c Press Enter
NOTE On Windows systems, several log files are stored in the Local Settings directory, which is located at
C:\Documents and Settings\<user name>\Local Settings\. This folder is hidden by default.
Table 28-6 lists log files associated with the vSphere Client machine.
vSphere Client \vpx directory in the Application Data directory on the vSphere Client machine.
Service log Pre-Windows 2008 example: C:\Documents and Settings\user_name\Local
Settings\Application Data\VMware\vpx\viclient-x.log
Windows 2008 and Window 7 example: C:\Users\user_name\Local
Settings\AppData\Local\VMware\vpx\viclient-x.log
x(=0, 1, ... 9)
To save diagnostic data for ESX/ESXi hosts and vCenter Server, the vSphere Client must be connected to the
vCenter Server system. If you are connected directly to an ESX/ESXi host, you can save diagnostic data only
for that specific ESX/ESXi host.
Required privileges:
Procedure
1 Select File > Export > Export System Logs.
2 If you are connected to vCenter Server, select the object for which you want to export data.
3 If you are connected to vCenter Server, select Include information from vCenter Server and vSphere
Client to download vCenter Server and vSphere Client logs as well as host logs.
4 Click Browse, and specify the location to which to save the log files.
The host or vCenter Server generates .zip bundles containing the log files. The Recent Tasks panel
shows a task called “Generate diagnostic bundles” in progress.
The Downloading Log Bundles dialog box appears when the Generating Diagnostic Bundle task is
finished. The download status of each bundle appears in the dialog box.
Some network errors can cause download failures. When you select an individual download in the
upper part of the dialog box, any the error message for that operation appears in the lower portion of
the dialog box, below the name and location of the log bundle file.
5 If the download fails, click Retry to attempt to download the generated bundles again.
Diagnostic bundles containing log files for the specified objects are downloaded to the location specified.
You can use the vSphere Client or the esxcli system syslog vCLI command to configure the syslog service.
For more information about using vCLI commands, see Getting Started with vSphere Command-Line Interfaces.
Procedure
1 In the vSphere Client inventory, select the host.
5 To set up logging globally, click global and make changes to the fields on the right.
Option Description
Syslog.global.defaultRotate Sets the maximum number of archives to keep. You can set this number
globally and for individual subloggers.
Syslog.global.defaultSize Sets the default size of the log, in KB, before the system rotates logs. You
can set this number globally and for individual subloggers.
Syslog.global.LogDir Directory where logs are stored. The directory can be located on mounted
NFS or VMFS volumes. Only the /scratch directory on the local file
system is persistent across reboots. The directory should be specified as
[datastorename] path_to_file where the path is relative to the root of the
volume backing the datastore. For example, the path
[storage1] /systemlogs maps to the
path /vmfs/volumes/storage1/systemlogs.
Syslog.global.logDirUnique Selecting this option creates a subdirectory with the name of the ESXi host
under the directory specified by Syslog.global.LogDir. A unique directory
is useful if the same NFS directory is used by multiple ESXi hosts.
Syslog.global.LogHost Remote host to which syslog messages are forwarded and port on which
the remote host receives syslog messages. You can include the protocol
and the port, for example, ssl://hostName1:514. UDP (default), TCP,
and SSL are supported. The remote host must have syslog installed and
correctly configured to receive the forwarded syslog messages. See the
documentation for the syslog service installed on the remote host for
information on configuration.
6 (Optional) To overwrite the default log size and log rotation for any of the logs.
a Click loggers.
b Click the name of the log you that want to customize and enter the number of rotations and log
size you want.
7 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
1 Select Administration > vCenter Server Settings.
4 Click OK.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
Procedure
u View the log file using one of the following methods.
Task Action
View the viclient-*.log file Change to the directory, %temp%.
Download the log bundle from Select Administration > Export System Logs to download the log bundle.
vSphere Client connected to a The log bundle is generated as a .zip file. By default, the vpxd logs within
vCenter Server system the bundle are compressed as .gz files. You must use gunzip to
uncompress these files.
Generate vCenter Server log Select Start > Programs > VMware > Generate vCenter Server log bundle.
bundles from a vCenter Server You can use this to generate vCenter Server log bundles even when you
system are unable to connect to the vCenter Server using the vSphere Client.
The log bundle is generated as a .zip file. By default, the vpxd logs within
the bundle are compressed as .gz files. You must use gunzip to
uncompress these files.
Procedure
u Run the following script on the ESXi Shell: /usr/bin/vm-support
Procedure
1 Log in to the vCenter Server using the vSphere Client.
host profiles, cloning profiles 214 inter-VM anti-affinity rules, creating 376
host profiles,import answer file 223 Internet Protocol version 6 285
host security, virtual disk shrinking 63 intra-VM anti-affinity rules 377
host-local swap inventory
DRS cluster 345 organize 35
standalone host 346 searching 17
hosts selecting objects 20
adding 37
topology maps 83
adding ESXi users 70 inventory objects, set alarm on 411
adding to a vSphere distributed switch 42, inventory panels 17
232
IOMMU 254
adding to DRS clusters 359, 360
IP address
advanced attributes 381 editing 243
clustering 87 vCenter Server 28
configuring 23 IP address configuration 204
connecting to vCenter Server 79 IP addresses
connecting virtual machines to 87 adding allowed 60
custom attributes 18 generating with a script 110
disconnecting 79 IP pools 204
disconnecting from vCenter Server 79 IP storage port groups, creating 227, 242
ESXi 32 IPv4 383
hardware monitoring 406 IPv6 285, 383, 393
health status 407 iSCSI initiators
managing 79 configuring CHAP 318
reconnecting 80 configuring advanced parameters 320
removing from a DRS cluster 362 hardware 305
removing from cluster 80 setting up CHAP parameters 317
removing from vCenter Server 81 iSCSI networking
viable for migration 148 binding adapters 314
virtual machine swapfile location 346 changing policy 314
hot add enablement 144, 151 creating a VMkernel interface 312
hyperthreaded core sharing 147 iSCSI SAN 392
hyperthreading ISO image files 168, 169
disabling 343 ISO images 400
enabling 343 isolation response, host 387
server configuration for 343
hyperthreading modes 343 J
jumbo frames
enabling 251
I
enabling for dependent hardware iSCSI 315
idle session timeout 62
enabling for software iSCSI 315
iLO, configuring 363
image files, ISO 168, 169 using with iSCSI 315
importing host profile 214 virtual machines 250, 251
inbound traffic shaping 276
L
independent disks 190
late binding port groups 43, 237
independent hardware iSCSI adapters
change IP address 306 Layer 2 security 269
change name 306 Layer 2 security policy 269
information panels 17 License management 45, 47
initial placement 356 license key 45
installing, plug-ins 20 License key 47
Intelligent Platform Management Interface license report, export data 49
(IPMI), configuring 363
W
wake protocols 363
Wake-on-LAN (WOL), testing 364
watchdog, health monitoring 406
Windows
customizing during cloning or deployment 111
guest operating system customization 109
requirements for customization 109
World Wide Names, See WWNs
WWNNs 301
WWNs
assigning to virtual machines 301
changing 302