{"id":1492,"date":"2019-09-26T12:00:00","date_gmt":"2019-09-26T15:00:00","guid":{"rendered":"http:\/\/www.bfnetworks.com.br\/?p=1492"},"modified":"2023-01-15T19:20:35","modified_gmt":"2023-01-15T22:20:35","slug":"allow-trafego-bridges-vmware","status":"publish","type":"post","link":"https:\/\/bfnetworks.com.br\/allow-trafego-bridges-vmware\/","title":{"rendered":"PERMITINDO tr\u00e1fego de bridges no vswitch &#8211; VMWARE"},"content":{"rendered":"\n<pre class=\"wp-block-preformatted\"><strong>Cen\u00e1rio<\/strong>:\nHOST VMware 7.0 ESXI\nVM principal: Debian 9\nVM dentro da principal usando KVM: Debian 9<\/pre>\n\n\n<p>Essa solu\u00e7\u00e3o resolve problemas de comunica\u00e7\u00e3o entre vm ou containers que est\u00e3o atrav\u00e9s de uma bridge numa VM e n\u00e3o est\u00e3o tendo comunica\u00e7\u00e3o com a rede. Quando criamos uma VM por exemplo linux e criamos alguma VM ou Container dentro dessa e criamos uma bridge para que tenha uma comunica\u00e7\u00e3o direta no vSwitch do VMWARE, por padr\u00e3o o vSwitch n\u00e3o deixar\u00e1 passar o tr\u00e1fego desse outro endere\u00e7o MAC que est\u00e1 na bridge abaixo da VM real.<\/p>\n\n\n<p>O comutador virtual do VMWARE s\u00f3 encaminhar\u00e1 pacotes de rede para uma m\u00e1quina virtual se o endere\u00e7o MAC de destino corresponder ao endere\u00e7o MAC\u00a0 que ele conhece, o que estiver por tr\u00e1s ele ir\u00e1 descartar.<\/p>\n\n\n<p>Se voc\u00ea monitorar a interface bridge da VM principal voc\u00ea ver\u00e1 que receber\u00e1 apenas essa mensagem ARP como abaixo, mas ela n\u00e3o sair\u00e1 dali.<\/p>\n\n\n<pre class=\"wp-block-preformatted\">ARP, Request who-has<\/pre>\n\n\n<p>Para resolver, precisamos mudar as op\u00e7\u00f5es como abaixo para <strong>accept<\/strong> em Network do VMWARE, em &#8220;<strong>port group<\/strong>&#8221; ou se n\u00e3o tiver port group altere diretamente no <strong>vSwitch<\/strong>:<\/p>\n\n\n<ul><li><strong>Promiscuous Mode<\/strong><\/li><li><strong>Forged Transmits<\/strong><\/li><\/ul>\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" loading=\"lazy\" width=\"833\" height=\"320\" src=\"http:\/\/168.138.149.254\/wp-content\/uploads\/2020\/05\/vmware02.png\" alt=\"\" class=\"wp-image-1493\" srcset=\"https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2020\/05\/vmware02.png 833w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2020\/05\/vmware02-300x115.png 300w, https:\/\/bfnetworks.com.br\/wp-content\/uploads\/2020\/05\/vmware02-768x295.png 768w\" sizes=\"(max-width: 833px) 100vw, 833px\" \/><\/figure>\n\n\n<p>O modo prom\u00edscuo que habilitamos acima permite que o ESXi monitore todo o tr\u00e1fego do comutador virtual ao qual a VM est\u00e1 conectado e, portanto, fornece conectividade \u00e0s m\u00e1quinas virtuais subjacentes.<\/p>\n\n\n<pre class=\"wp-block-preformatted\">Problems related:\n- linux bridge does not forward arp reply back packets\n- Broadcast packets on standby adapter\n- Bridge linux in vmware esxi<\/pre>\n\n\n<h3>FONTE<\/h3>\n\n\n<p><a href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/6.7\/com.vmware.vsphere.html.hostclient.doc\/GUID-AA716A9F-F63F-4EBE-87F8-F3FB17E736BF.html\">https:\/\/docs.vmware.com\/en\/VMware-vSphere\/6.7\/com.vmware.vsphere.html.hostclient.doc\/GUID-AA716A9F-F63F-4EBE-87F8-F3FB17E736BF.html<\/a><\/p>\n\n\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-virtuallyghetto\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"nVbro2f1UN\"><a href=\"https:\/\/www.virtuallyghetto.com\/2013\/11\/why-is-promiscuous-mode-forged.html\">Why is Promiscuous Mode &amp; Forged Transmits required for Nested ESXi?<\/a><\/blockquote><iframe title=\"&#8220;Why is Promiscuous Mode &amp; Forged Transmits required for Nested ESXi?&#8221; &#8212; virtuallyGhetto\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" src=\"https:\/\/www.virtuallyghetto.com\/2013\/11\/why-is-promiscuous-mode-forged.html\/embed#?secret=nVbro2f1UN\" data-secret=\"nVbro2f1UN\" width=\"600\" height=\"338\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Cen\u00e1rio: HOST VMware 7.0 ESXI VM principal: Debian 9 VM dentro da principal usando KVM: Debian 9 Essa solu\u00e7\u00e3o resolve problemas de comunica\u00e7\u00e3o entre vm ou containers que est\u00e3o atrav\u00e9s de uma bridge numa VM e n\u00e3o est\u00e3o tendo comunica\u00e7\u00e3o com a rede. Quando criamos uma VM por exemplo linux e criamos alguma VM ou [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[24,8,15,17],"tags":[150,152],"_links":{"self":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/posts\/1492"}],"collection":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/comments?post=1492"}],"version-history":[{"count":1,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/posts\/1492\/revisions"}],"predecessor-version":[{"id":1844,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/posts\/1492\/revisions\/1844"}],"wp:attachment":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/media?parent=1492"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/categories?post=1492"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/tags?post=1492"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}