Cant connect to different VLAN-s, because they must reach the same destination. I dont usually move VM-s to different host. And example when I move, then nothing more happens that this VM still goes out through previous ESXi DLR. Im using now vDS-es. Some VM-s ports communicate only between themselves (firewalls in chain), some VM-s ports must reach common physical devices (hardware firewalls and servers), and some VM-s ports accessed through VLAN translation by Mikrotik SwOS. And then I have 24 port central managed L2 physical switch, that communicates all this VLAN-s army. Also, things go harder because not all ESXi-s are the same versions (hardware dont allow upgrade) and this means vDS-s are also different version. This all goes here little too much complicated. I have NSX ready and installed, only right now its turned off. I have plan to go to NSX and make traffic things little clear, let VM-s communicate without central L2 switch and all this VLAN-s army. Only I have one restriction - all VMs must be able to connect to outside world only through the same ESXi in which they located. Because I have only 1Gbit network and some ESXi-s with only one nic-s. When traffic starts flowing out not directly from local ESXi, but through next ESXi, then this puts my network into too pressure. Also its not safe when VM-s cant communicate with outsaid world locally - maybe next ESXi is down, maybe network is down.
↧