Skip to main content
Pure Technical Services

Equinix Metal Guide: VLAN Management

Currently viewing public documentation. Please login to access the full scope of documentation.

KP_Ext_Announcement.png

 

In Equinix Metal, users can provision their own private VLANs to segregate traffic. VLANs can either be assigned to a bond (all interfaces for a server in bonded mode) or specifically to a single interface in unbonded mode. The same VLAN (currently) cannot be assigned to more than one interface in an unbonded configuration. For this reason unbonded mode is not recommended for environments that need NIC/switch-level redundant availability.

Creating a VLAN

To create a VLAN, login to the Equinix Console and click on IPs & Networks and choose Layer 2 from the list.

clipboard_e697a9cabc118ca290a2622877ebdf9d8.png

Then click Add VLAN.

clipboard_ed3534d06a1bbc61723c95039cabb7594.png

Then choose a facility and then give the VLAN a friendly name. The VLAN ID is created upon completion, so just a friendly name will suffice.

clipboard_e3e0e990f6d19ec4d7d550365fbf5cd00.png

This will create the VLAN.

clipboard_e9218b56b6bc94a09909828a620946ba5.png

Note that this does not provision a subnet or IP range--you must decide upon this yourself as you assign networking to hosts.

Add a VLAN to a Equinix Metal Server

Once a VLAN has been created, you can add it to a server. This can happen upon network mode conversion or at any time once that server is in either Layer 2 mode or Hybrid mode.

In the Equinix Console, choose Servers then choose a server. Click on the Network panel.

clipboard_e9419ef77bc33f11e349f355f90aa8636.png

Scroll down to Layer 2 and choose Add new VLAN.

clipboard_ea3dbd3b8f5bb8823dc0042eae04fc25a.png

Choose an interface and then choose a VLAN. This will currently only show VLANs that have not yet been assigned to any interface on that host.

clipboard_e86ce03b870f27a6fed5f4fb11f7f80b7.png

Click Add.

Adding the VLAN to ESXi

Virtual Standard Switch

Once you have added a VLAN, login into the vSphere Client. In Hosts & Clusters, click on a host and then choose Configure > Virtual Switches.

clipboard_ebfc276ea88a22825353c84aa828b0460.png

Next, find the vSwitch and click Add Networking.

clipboard_e15f55a2c45cb3b51d507ecb821cc04be.png

Choose Virtual Machine Port Group for a Standard Switch and click Next.

clipboard_ea3f66b9913ed6ee27e7873a3d83463e0.png

Name the network and for VLAN ID, if it is the only VLAN assigned AND it is not in Hybrid mode then no VLAN ID is needed. Otherwise, add the VLAN ID.

clipboard_eccd0c731bf6792a464ce3e96bf49c284.png clipboard_e2f62eb06cb49ed47414cfbba068a7b73.png

Complete the wizard.

Virtual Distributed Standard Switch

Once you have added a VLAN, login into the vSphere Client. In Networking, right-click on the desired VDS and choose Distributed Port Group > New Distributed Port Group.

clipboard_e2af87bd0001923e099de23485f0388a7.png

Give the port group a name.

clipboard_e515edb07e87b3a46661edfb23b44db5f.png

Configure the settings as needed, defaults are usually fine. Choose VLAN and then the correct VLAN ID in the VLAN ID box.

clipboard_e62b4f5a25ed5bab043ff7874a229a791.png clipboard_e134b0286d623e6d4b2f8d2cda7b5588b.png

Pure Storage VLAN Connectivity Requirements

Depending on the integration you plan to use there are varying requirements for connectivity. Note that you can choose one or all of these options.

Virtual Volumes

If you are using Virtual Volumes (vVols) the following connections are required:

  1. All iSCSI VLANs for the desired FlashArray must be connected to the interfaces of the ESXi hosts consuming the storage. It is highly advised to not route iSCSI so it is preferable that the VLANs be directly attached.
  2. The management VLAN should be connected to the vCenter VM AND the ESXi compute. This connectivity does not need to be direct, it can be accessible via routing. Note that individual VLANs cannot natively route to one another--you must configure software-based routing between the VLANs.

VMFS

If you are using VMFS, the only requirement is below:

  1. All iSCSI VLANs for the desired FlashArray must be connected to the interfaces of the ESXi hosts consuming the storage. It is highly advised to not route iSCSI so the VLANs should be directly attached.

Management Integrations

If you plan to use integrations like the vSphere Plugin for others, the VM or appliance hosting that plugin must have direct or routed connectivity to the management VLAN of the FlashArray.

  1. vSphere Plugin--management VLAN access from the vCenter appliance
  2. Storage Replication Adapter--management VLAN access from the SRM server(s). The SRM server must have management access to both the source and target FlashArrays.
  3. vRealize Orchestrator Plugin--management VLAN access from the vRO appliance(s)
  4. vRealize Operations Manager Management Pack--management VLAN access from the vROps appliance(s)