Adding a secondary NIC to the vCenter 5.1 Appliance (VCSA)

While building my lab environment, I ran into a situation where I wanted to have a completely sealed off networking segment that had no outside access.

This is a trivial task on it`s own, just create a vSwitch with no physical NICs attached to it, and then connect the VMs to it. The VMs will then have interconnectivity, but no outside network access at all.

In this particular case, I was setting up a couple of nested ESXi servers that I wanted to connect to the “outside” vCenter Appliance (VCSA). This VCSA instance was not connected to the internal-only vSwitch, but rather to the existing vSwitch that as local network access.

Naturally, the solution would be to add a secondary NIC to the VCSA, and connect that to the internal-only vSwitch.

It turns out that adding a secondary NIC to a VCSA instance, isn`t as straight-forward as you might think. Sure, adding a new NIC is no problem through either the vSphere Client, or the vSphere Web Client, but getting the NIC configured inside of VCSA is another matter.

If you add a secondary NIC, it will turn up in the VCSA management web page, but you will not be able to save the configuration since the required configuration files for eth1 is missing.

In order to rectify this, I performed the following steps:

  1. Connect to the VCSA via SSH (default username and password is root/vmware)
  2. Copy /etc/sysconfig/networking/devices/ifcfg-eth0 to /etc/sysconfig/networking/devices/ifcfg-eth1
  3. Edit ifcfg-eth1 and replace the networking information with your values, here is how mine looks:
    1
    2
    3
    4
    5
    6
    7
    8
    DEVICE=eth1
    BOOTPROTO='static'
    STARTMODE='auto'
    TYPE=Ethernet
    USERCONTROL='no'
    IPADDR='172.16.1.52'
    NETMASK='255.255.255.0'
    BROADCAST='172.16.1.255'
  4. Create a symlink for this file in /etc/sysconfig/network
    1
    ln -s /etc/sysconfig/networking/devices/ifcfg-eth1 /etc/sysconfig/network/ifcfg-eth1
  5. Restart the networking service to activate the new setup:
    1
    service network restart

    Check the VCSA web management interface to verify that the new settings are active

Client 2013-04-25 10-54-37

By adding a secondary NIC, configuring it and connecting it to the isolated vSwitch I was now able to add my sequestered nested ESXi hosts to my existing VCSA installation.

 

Client 2013-04-25 13-07-01

There may be several reasons for a setup like this, perhaps you want your VCSA to be available on a management VLAN but reach ESXi hosts on another VLAN without having routing in place between the segmented networks, or you just want to play around with it like I am in this lab environment.

Disclaimer:

Is this supported by VMware? Probably not, but I simply don`t know. Caveat emptor, and all that jazz.

Update February 2016:

This post is written with VCSA5.x in mind, and is not tested on VCSA 6.x. William Lam has posted Caveats when multi-homing the vCenter Server Appliance 6.x w/multiple vNICs with information on what caveats exist if you are looking to do this with the newer v6.x infrastructure.

17 Comments

  1. Logging into the VCSA console and running /opt/vmware/share/vami/vami_config_net also appears to offer the options for doing this.

  2. Oddly this did not work for me. I wonder if I need to reboot the Vcenter to get the NIC to work. I did add the secondary NIC to the VM instance, but still nothing.

  3. Thanks for the post! FWIW, with vSphere/vCenter 5.5, I ended up having to edit the properties of the vCSA VM and add a second NIC there first. Once this was done I was able to follow the instructions you provided and it worked fine.

  4. Thank you for the post, I used this to put my vcenter in 2 seperate networks/VLANs. I needed to do this because a p2v conversion from one vlan to another didn’t work…

  5. Hi Christian and All, I used this post to my vcenter 5.5 in 2 seperate networks/VLANs but

    when add/connect an ESX 5.5 to that vcenter, after few mins the ” Vsphere Host connection and power state” error msg appears

    I’ve been trying to figure out what this is… and so far I got nothing..

    Have you experienced a similar behaviour..?

    Thanks a lot in advance…Ciao..,Mario.

Leave a Reply