SR-IOV interfaces cannot pass more than 5 vlans

Products

• VMware vSphere ESXi

Issue/Introduction

•  Limitation of scaling VLANS in SR-IOV VF with intel icen/i40en drivers.
•  VMnics enabled with SRIOV could not pass more than 5 vlans.

Environment

VMware ESXI

Cause

The issue is caused because the trust_all_vfs feature on the vmnics is not enabled.

Resolution

1. Get the 'World ID' of the running VM using the command:
   
   esxcli vm process list
   
   
2. Get NIC SR-IOV port name using the command:
   
   esxcli network nic list


3. Get NIC SR-IOV port name and VF ID associated with the VM using the command. VM can be identified by checking the  world ID of the vm from the  step 1.
   
   esxcli network sriovnic vf list -n <vmnic name>


4. To enable VF trust mode, use the following command:
   
   esxcli intnet sriovnic vf set -t true -v <vf number> -n <vmnic name>
   
   Where,
   <vmnic name> is the SR-IOV port to which the  VM is associated.
   <vf number> is the VF ID assigned to the  VM instance.
   
   
5. Set VF trust mode persistent across reboots using the command.
   
   esxcli system module parameters set -a -m i40en -p "trust_all_vfs=<array of int>"

<array of int> , 0 = disable (default), 1 = enable


6. Reboot the VMware ESXi host server.

Verification

            To verify the VF is configured as trusted. use the following command.

    esxcli intnet sriovnic vf get -v <vf number> -n <vmnic name>