vSAN Health -- How to remediate file service network misconfiguration issue.

Products

• VMware vSAN

Issue/Introduction

This article provides the steps to configure file service network with expected settings when it is misconfigured.

Symptoms:

Go to vSphere UI → VSAN-Cluster → Monitor → vSAN → Skyline Health, Infrastructure Health is red.

Click on TROUBLESHOOT button and go to Infrastructure Health page, vSAN File Service Node column is red with any warning messages from the following list:

• Mac change option is not set as 'Accept' on file service network.
• Mac management policy is misconfigured on file service network.
• Failed to check DVS settings on this host.
• Promiscuous mode is not enabled on file service network.
• File service network is not configured on this host.

Environment

VMware vSAN 9.0

vSAN File Services

Resolution

Mac Management Policy Remediation

• If vSAN File Service Node is red with warning message "Mac change option is not set as 'Accept' on file service network." or "Mac management policy is misconfigured on file service network." or "Failed to check DVS settings on this host"
  1. Log into vSphere Client
  2. Select Inventory → Networking
  3. Find the distributed virtual switch or distributed portgroup which is configured on File Service
  4. Go to Configure → Settings → Properties → Override port policies, set 'Security policy' field as 'Allowed'
  5. Click the Ports tab
  6. From the list find the vSAN File Service Node running on the host with network misconfiguration issue
  7. Click Edit, in the Security section, configure the settings with expected value as below:
     • MAC address changes: Accept

     • MAC Learning:

       • Status: Enabled
       • Allow unicast flooding: Enabled
       • MAC limit: larger than 64

                           

 

                 

   Promiscuous Mode Remediation              

• If vSAN File Service Node is red with warning message "Promiscuous mode is not enabled on file service network."
  1. Log into vSphere Client
  2. Select the ESXi/ESX host in the inventory.
  3. Select Configure → Networking → Virtual switches.
  4. Find standard switch which is configured with File Service, click Edit.
  5. Go to Security and configure the settings as below:
     • Promiscuous mode: Accept
     • Forged transmits: Accept

                 

File Service network reconfiguration

• If vSAN File Service Node is red with warning message "File service network is not configured on this host."
  • If File service network is a standard virtual switch, create a standard virtual switch with the same name on this host.

  • If File service network is a distributed virtual port group, add this host into the distributed virtual port group.