Information Technology Reference
In-Depth Information
h e shared virtual MAC address is generated by using an algorithm that includes a static component
based on the NLB cluster's confi guration of Unicast or Multicast mode plus a hexadecimal repre-
sentation of the four octets that make up the IP address. h is shared MAC address will certainly
diff er from the MAC address defi ned in the VMX fi le of the VM. If the VM port group does not
allow for diff erences between the MAC addresses in the VMX and guest OS, NLB will not function
as expected. VMware recommends running NLB clusters in Multicast mode because of these issues
with NLB clusters in Unicast mode.
Perform the following steps to edit the security proi le of a vSwitch:
1.
Use a supported web browser to establish a connection to a vCenter Server instance; this
launches the vSphere Web Client.
2.
Navigate to the specii c ESXi host that has the vSwitch you'd like to edit. One way to get
there from the vSphere Web Client home screen is to click vCenter, then select Hosts from
the Inventory Lists, then select the specii c ESXi host from the list of objects on the right.
3.
With an ESXi host selected in the inventory list on the left, click the Manage tab, select
Settings, and then click Virtual Switches.
4.
From the list of virtual switches, select the vSphere Standard Switch you'd like to edit,
then click the Edit link (looks like a pencil). This brings up the Edit Settings dialog box
for the selected vSwitch.
5.
Click Security on the list on the left side of the dialog box, and make the necessary
adjustments.
6.
Click OK.
Perform the following steps to edit the security proi le of a port group on a vSwitch:
1.
Connect to a vCenter Server instance using the vSphere Web Client.
2.
Navigate to the specii c ESXi host and vSphere Standard Switch that contains the port
group you wish to edit. You'll i nd vSwitches in the Virtual Switches section of the
Settings area under the Manage tab for a selected ESXi host.
3.
Click the name of the port group under the graphical representation of the virtual switch,
and then click the Edit link.
4.
Click Security, and make the necessary adjustments. You'll need to place a check mark in
the Override box to allow the port group to use a different setting than its parent virtual
switch.
5.
Click OK to save your changes.
Perform the following steps to edit the security proi le of a distributed port group on a
vSphere Distributed Switch:
1.
Use the vSphere Web Client to connection to an instance of vCenter Server.
2.
Using the vSphere Web Client, navigate to the Distributed Switches inventory list; you
can get there from the vSphere Web Client home page by clicking vCenter, then selecting
Distributed Switches from the Inventory Lists area on the left.
