VMware networking best practices

Last Updated : Dec 11, 2023 |

You can administer networking in a VMware environment for many different configurations. The examples in this section describe some of the VMware networking possibilities.

This section is not a substitute for the VMware documentation. Review the VMware networking best practices before deploying any applications on an ESXi host.

The following are the suggested best practices for configuring a network that supports deployed applications on VMware Hosts:

  • Separate the network services to achieve greater security and performance by creating a vSphere standard or distributed switch with dedicated NICs for each service. If you cannot use separate switches, use port groups with different VLAN IDs.

  • Configure the vMotion connection on a separate network devoted to vMotion.

  • For protection, deploy firewalls in the virtual machines that route between virtual networks that have uplinks to physical networks and pure virtual networks without uplinks.

  • Specify virtual machine NIC hardware type vmxnet3 for best performance.

  • Connect all physical NICs that are connected to the same vSphere standard switch to the same physical network.

  • Connect all physical NICs that are connected to the same distributed switch to the same physical network.

  • Configure all VMkernel vNICs to be the same IP Maximum Transmission Unit (MTU).

Disclaimer: The images in this section represent older ESXi versions and may vary for the latest ESXi versions.

Networking Avaya applications on VMware ESXi – Example 1

Networking Avaya applications within the same ESXi host.

This configuration describes a simple version of networking Avaya applications within the same ESXi host. Highlights to note:

  • Separation of networks: VMware Management, VMware vMotion, iSCSI (SAN traffic), and virtual machine networks are segregated to separate physical NICs.

  • Teamed network interfaces: vSwitch 3 in Example 1 displays use of a load-balanced NIC team for the Virtual Machines Network. Load balancing provides additional bandwidth for the Virtual Machines Network, while also providing network connectivity for the virtual machines in the case of a single NIC failure.

  • Virtual networking: The network connectivity between virtual machines that connect to the same vSwitch is entirely virtual. In example 2, the virtual machine network of vSwitch3 can communicate without entering the physical network. Virtual networks benefit from faster communication speeds and lower management overhead.

Networking Avaya applications on VMware ESXi – Example 2

Redundancy example.

This configuration shows a complex situation using multiple physical network interface cards. The key differences between example 1 and example 2 are:

  • VMware Management Network redundancy: Example 2 includes a second VMkernel Port at vSwitch2 to handle VMware Management Network traffic. In the event of a failure of vmnic0, VMware Management Network operations can continue on this redundant management network.

  • Removal of Teaming for Virtual Machines Network: Example 2 removes the teamed physical NICs on vSwitch3. vSwitch3 was providing more bandwidth and tolerance of a single NIC failure instead of reallocating this NIC to other workloads.

References

Title

Link

Product Support Notice PSN003556u

Go to https://support.avaya.com and search for PSN003556u.

VMware vSphere 8.0 Documentation

Go to https://www.vmware.com/support/pubs/ and search for VMware vSphere 8.0 Documentation.

VMware vSphere 7.0 Documentation

Go to https://www.vmware.com/support/pubs/ and search for VMware vSphere 7.0 Documentation.

VMware Documentation Sets

https://www.vmware.com/support/pubs/