Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Adding vSRX Interfaces

    vSRX for VMware supports up to 10 interfaces. The network adapter for each interface uses SR-IOV or VMXNET 3 as the adapter type. The first network adapter is for the management interface (fxp0) and must use VMXNET 3. All additional network adapters should have the same adapter type. The three network adapters created by default use VMXNET 3.

    The first three network adapters are mapped sequentially to the vSRX interfaces, as shown in Interface Naming and Mapping. As you add more network adapters, the load balancing mechanism will disrupt the mapping sequence.

    The following procedures describe how to add more than three network adapters and maintain sequential mapping to the vSRX interfaces:

    Adding and Mapping SR-IOV Interfaces

    SR-IOV interfaces must be added as PCI devices on VMware. To add an SR-IOV interface as a PCI Device, you must first select an available Virtual Function (VF) on the device.

    Use the following procedure to locate available VFs, add PCI devices, and maintain sequential mapping:

    1. To locate one or more VFs:
      1. Use SSH to log in to the ESXi server and enter the following command to view the VFs for vmnic6 (or another vNIC):

        # esxcli network sriovnic vf list -n vmnic6

         
        VF ID  Active  PCI Address  Owner World ID 
        -----  ------  -----------  -------------- 
            0    true  005:16.0     982641     
            1    true  005:16.2     982641         
            2    true  005:16.4     982641         
            3   false  005:16.6      -      
            4   false  005:17.0      -             
            5   false  005:17.2      -             
            6   false  005:17.4      -             
        

        Choose one or more VF IDs that are not active, such as 3 through 6. Note that a VF assigned to a VM that is powered off is shown as inactive.

      2. Enter the lspci command to view the VF number of the chosen VF IDs. In the following example, find the entry that ends with [vmnic6], scroll down to the next entry ending in VF_3, and note the associated VF number 05:10.6. Note that the next VF_3 entry is for vmnic7.

        # lspci

         
        0000:05:00.0 Network controller: Intel Corporation 82599EB 10-Gig ... [vmnic6]
        0000:05:00.1 Network controller: Intel Corporation 82599EB 10-Gig ... [vmnic7]
        0000:05:10.0 Network controller: Intel Corporation 82599 Ethernet Controller Virtual Function [PF_0.5.0_VF_0]  
        0000:05:10.1 Network controller: Intel Corporation 82599 Ethernet Controller Virtual Function [PF_0.5.1_VF_0]
        0000:05:10.2 Network controller: Intel Corporation 82599 Ethernet Controller Virtual Function [PF_0.5.0_VF_1]
        0000:05:10.3 Network controller: Intel Corporation 82599 Ethernet Controller Virtual Function [PF_0.5.1_VF_1]
        0000:05:10.4 Network controller: Intel Corporation 82599 Ethernet Controller Virtual Function [PF_0.5.0_VF_2]
        0000:05:10.5 Network controller: Intel Corporation 82599 Ethernet Controller Virtual Function [PF_0.5.1_VF_2]
        0000:05:10.6 Network controller: Intel Corporation 82599 Ethernet Controller Virtual Function [PF_0.5.0_VF_3] ----- VF ID 3 on vmnic6, with VF number 05:10.6. 
        0000:05:10.7 Network controller: Intel Corporation 82599 Ethernet Controller Virtual Function [PF_0.5.1_VF_3] ----- VF ID 3 on vmnic7. 
        
    2. To add SR-IOV interfaces and maintain sequential mapping:

      Note: You must use the vSphere Web Client to access the vCenter server, and DO NOT delete and re-add any network adapters during the following procedure.

      1. Power off the vSRX VM and open the Edit Settings page. By default there are three network adapters using VMXNET 3. Delete network adapter 2 and 3.
      2. Select the VM Options tab, click Advanced in the left frame, and then click Edit Configuration at the bottom of the page.
      3. Change the value of the following items from TRUE to FALSE:
        • pciBridge5.present
        • pciBridge6.present
        • pciBridge7.present

        Do not change pciBridge0.present or pciBridge4.present.

      4. Click OK twice to update the VM settings.
      5. Open the Edit Settings page again and add one or more PCI devices on the Virtual Hardware page, up to a maximum of six PCI devices. For each device, you must select an entry with an available VF number from Step 1. For example:

        05:10.6 | Intel Corporation 82599 Ethernet Controller Virtual Function

      6. Click OK and open the Edit Settings page to verify that up to seven network adaptors are shown on the Virtual Hardware page (one VMXNET 3 network adapter and up to six SR-IOV interfaces as PCI devices).

        To view the SR-IOV interface MAC addresses, select the VM Options tab, click Advanced in the left frame, and then click Edit Configuration. In the parameters pciPassthruN.generatedMACAddress, N indicates the PCI device number (0 through 9).

      7. Power on the vSRX VM and log in to the VM to verify that VMXNET 3 network adapter 1 is mapped to fxp0, PCI device 0 is mapped to ge-0/0/0, PCI device 1 is mapped to ge-0/0/1, and so on.
      8. To add up to three more network adapters:
        1. Enter the CLI command request system power-off to power off the VM. Do not use the vSphere Web Client to power off the VM.
        2. Open the Edit Settings page.
        3. Select the VM Options tab, click Advanced in the left frame, and then click Edit Configuration at the bottom of the page.
        4. Change the value of pciBridge5.present from FALSE to TRUE. If the following parameters and values are not shown, click Add Row to add each of them.

          Parameter

          Value

          pciBridge5.virtualDev

          pcieRootPort

          pciBridge5.functions

          8

          pciBridge5.pciSlotNumber

          22

        5. Repeat Step d through g to add up to three more PCI devices (the maximum is 10).

    Note: A vSRX VM with SR-IOV interfaces cannot be cloned. You must deploy a new vSRX VM and add the SR-IOV interfaces as described here.

    Adding VMXNET 3 Interfaces 4 through 7

    Use the following procedure to maintain sequential mapping when adding VMXNET 3 network adapters 4 through 7:

    Note: During this procedure DO NOT delete and re-add any network adapters.

    1. Power off the vSRX VM and open the Edit Settings page.
    2. Using the vSphere Web Client, select the VM Options tab, click Advanced in the left frame, and then click Edit Configuration at the bottom of the page. (Using the vSphere desktop client, select General under Advanced in the left frame, and click Configuration Parameters at the bottom of the page.)
    3. Change the value of the following items from TRUE to FALSE:
      • pciBridge5.present
      • pciBridge6.present
      • pciBridge7.present

      Do not change pciBridge0.present or pciBridge4.present.

    4. Click OK twice to update the VM settings.
    5. Open the Edit Settings page again and add up to four network adapters (the 4th through the 7th network adapters) on the Virtual Hardware page. For each network adapter, select Network from New device list at the bottom of the page, expand New Network, and select VMXNET 3 as the adapter type.
    6. Click OK and open the Edit Settings page to verify that up to seven network adaptors are shown on the Virtual Hardware page.
    7. Power on the vSRX VM and log in to the VM to verify that network adapter 1 is mapped to fxp0, network adapter 2 is mapped to ge-0/0/0, and so on. Use the show interfaces terse CLI command to verify that the fxp0 and ge-0/0/n interfaces are up.

    Adding VMXNET 3 Interfaces 8 through 10

    Use the following procedure to maintain sequential mapping when adding VMXNET 3 network adapters 8 through 10:

    Note: During this procedure DO NOT delete and re-add any network adapters.

    1. Enter the CLI command request system power-off to power off the VM. Do not use the vSphere Web Client to power off the VM.
    2. Open the Edit Settings page.
    3. Using the vSphere Web Client, select the VM Options tab, click Advanced in the left frame, and then click Edit Configuration at the bottom of the page. (Using the vSphere desktop client, select General under Advanced in the left frame, and click Configuration Parameters at the bottom of the page.)
    4. Change the value of pciBridge5.present from FALSE to TRUE. If the following parameters and values are not shown, click Add Row to add each of them.

      Parameter

      Value

      pciBridge5.virtualDev

      pcieRootPort

      pciBridge5.functions

      8

      pciBridge5.pciSlotNumber

      22

    5. Click OK twice to update the VM settings.
    6. Open the Edit Settings page again and up to three network adapters (the 8th, 9th, and 10th network adaptors) on the Virtual Hardware page. For each network adapter, select Network from New device list at the bottom of the page, expand New Network, and select VMXNET 3 as the adapter type.
    7. Click OK and open the Edit Settings page to verify that up to ten network adaptors are shown on the Virtual Hardware page.
    8. Power on the vSRX VM and log in to the VM to verify that network adapter 1 is mapped fxp0, network adapter 2 is mapped to ge-0/0/0, and so on. Use the show interfaces terse CLI command to verify that the fxp0 and ge-0/0/n interfaces are up.

    Modified: 2016-01-07