Hi all,
I am planning to install 2-node vSAN ROBO for our small office. I will appreciate your help on the networking side for the witness traffic separation.
I am not sure whether I have to separate the witness traffic from management or put the witness traffic on management.
If I can use the management network for witness traffic, it would be easy for me not to bother the network team too much.
I plan to configure the VDS/VSS as below
Management 192.168.3.11--Will have two 10GB Acrive/Standby
vSAN-Direct Connect 10.10.20.11 -- Server A Port1 Active and Port2 Standby
vMotion-Direct Connect 10.10.30.11 ---Server A Port2 Active and Port1 Standby
Virtual Machines Lan 10.10.1.0/24-- Two 10 GB nic ports
I guess i have to issue the following at each Esxi host at the ROBO site to separate witness traffic to use the management routed netwrok.
esxcli vsan netwrok ip add -I vmk0 -T=Witness
If i am correct with above design,
Should I have to untag vmk1 at the witness appliance and tag it for vmk0 as the vsan traffic or can i put both witness and management at both network and leave vmk1 as the witness port?