{"id":279,"date":"2019-10-31T00:20:39","date_gmt":"2019-10-30T16:20:39","guid":{"rendered":"https:\/\/www.theinsecurewire.com\/?p=279"},"modified":"2019-10-31T00:20:39","modified_gmt":"2019-10-30T16:20:39","slug":"configuring-cisco-virl-external-connectivity-on-esxi","status":"publish","type":"post","link":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/","title":{"rendered":"Configuring Cisco VIRL External Connectivity on ESXi"},"content":{"rendered":"

So I recently built a Cisco VIRL lab on VMware ESXi. One of the issues I was having was layer 2 external connectivity from VIRL using the shared flat network object.
\nEssentially shared networks FLAT and FLAT1 within VIRL are layer 2 Linux bridge adapters that bridge eth1 and eth2 from the VIRL openstack config to the vSwitch.
\n
\nFLAT (VIRL Openstack) -> br1 -> eth1
\nFLAT1 (VIRL Openstack) -> br2 -> eth2
\n<\/code>
\nThe problem was that from VIRL and within simulations ARP requests were not getting through the bridge adapter. To fix this I edited the bridge config to bind it the eth1 and eth2 like so:
\n
\nsudo nano \/etc\/network\/interfaces.d\/br1.cfg
\nbridge_ports dummy1 eth1
\nsudo ifdown br1
\nsudo ifup br1
\n<\/code>
\nRepeat this for the other bridge adapter (FLAT1 br2.cfg and dummy2 should pair with eth2).
\nThis resolved the issue for my configuration. Simulations once routing was configured are able to connect to the Internet via the FLAT network.
\nThere are lots of posts on the Cisco support forums for this issue of which there are varying solutions. Along with the above Linux bridge configuration fix there is also:
\n1. Make sure the vswitch port groups are set to allow promiscuous mode, allowed forged transmits and allow mac address changes.
\n2. Set the vswitch port groups load balancing method to source mac hash.
\n3. If your using UCS and fabric extenders make sure your uplink port is set to native vlan if your using untagged ports.<\/p>\n

\"VIRL<\/a><\/p>\n

Links:
\nHow to: Add Interfaces and Networks to VIRL PE<\/a>
\nCannot ping\/SSH to sim nodes in FLAT<\/a>
\nHaving trouble to connect my physical lab to VIRL<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

So I recently built a Cisco VIRL lab on VMware ESXi. One of the issues I was having was layer 2 external connectivity from VIRL…<\/p>\n","protected":false},"author":2,"featured_media":281,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[],"class_list":["post-279","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-virl"],"acf":[],"yoast_head":"\nConfiguring Cisco VIRL External Connectivity on ESXi - Insecure Wire<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configuring Cisco VIRL External Connectivity on ESXi - Insecure Wire\" \/>\n<meta property=\"og:description\" content=\"So I recently built a Cisco VIRL lab on VMware ESXi. One of the issues I was having was layer 2 external connectivity from VIRL...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/\" \/>\n<meta property=\"og:site_name\" content=\"Insecure Wire\" \/>\n<meta property=\"article:published_time\" content=\"2019-10-30T16:20:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png\" \/>\n\t<meta property=\"og:image:width\" content=\"902\" \/>\n\t<meta property=\"og:image:height\" content=\"595\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"nikonau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/insecurewire\" \/>\n<meta name=\"twitter:site\" content=\"@insecurewire\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"nikonau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/\"},\"author\":{\"name\":\"nikonau\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d\"},\"headline\":\"Configuring Cisco VIRL External Connectivity on ESXi\",\"datePublished\":\"2019-10-30T16:20:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/\"},\"wordCount\":248,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.insecurewi.re\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png\",\"articleSection\":[\"VIRL\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/\",\"url\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/\",\"name\":\"Configuring Cisco VIRL External Connectivity on ESXi - Insecure Wire\",\"isPartOf\":{\"@id\":\"https:\/\/www.insecurewi.re\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png\",\"datePublished\":\"2019-10-30T16:20:39+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#primaryimage\",\"url\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png\",\"contentUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png\",\"width\":902,\"height\":595,\"caption\":\"VIRL LAB\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.insecurewi.re\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Configuring Cisco VIRL External Connectivity on ESXi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.insecurewi.re\/#website\",\"url\":\"https:\/\/www.insecurewi.re\/\",\"name\":\"Insecure Wire\",\"description\":\"A Network Engineer\u2019s Perspective.\",\"publisher\":{\"@id\":\"https:\/\/www.insecurewi.re\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.insecurewi.re\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.insecurewi.re\/#organization\",\"name\":\"Insecure Wire\",\"url\":\"https:\/\/www.insecurewi.re\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png\",\"contentUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png\",\"width\":32,\"height\":32,\"caption\":\"Insecure Wire\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/insecurewire\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d\",\"name\":\"nikonau\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g\",\"caption\":\"nikonau\"},\"sameAs\":[\"https:\/\/x.com\/https:\/\/twitter.com\/insecurewire\"],\"url\":\"https:\/\/www.insecurewi.re\/index.php\/author\/nikon\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Configuring Cisco VIRL External Connectivity on ESXi - Insecure Wire","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/","og_locale":"en_US","og_type":"article","og_title":"Configuring Cisco VIRL External Connectivity on ESXi - Insecure Wire","og_description":"So I recently built a Cisco VIRL lab on VMware ESXi. One of the issues I was having was layer 2 external connectivity from VIRL...","og_url":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/","og_site_name":"Insecure Wire","article_published_time":"2019-10-30T16:20:39+00:00","og_image":[{"width":902,"height":595,"url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png","type":"image\/png"}],"author":"nikonau","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/insecurewire","twitter_site":"@insecurewire","twitter_misc":{"Written by":"nikonau","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#article","isPartOf":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/"},"author":{"name":"nikonau","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d"},"headline":"Configuring Cisco VIRL External Connectivity on ESXi","datePublished":"2019-10-30T16:20:39+00:00","mainEntityOfPage":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/"},"wordCount":248,"commentCount":0,"publisher":{"@id":"https:\/\/www.insecurewi.re\/#organization"},"image":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#primaryimage"},"thumbnailUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png","articleSection":["VIRL"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/","url":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/","name":"Configuring Cisco VIRL External Connectivity on ESXi - Insecure Wire","isPartOf":{"@id":"https:\/\/www.insecurewi.re\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#primaryimage"},"image":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#primaryimage"},"thumbnailUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png","datePublished":"2019-10-30T16:20:39+00:00","breadcrumb":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#primaryimage","url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png","contentUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2019\/10\/lab.png","width":902,"height":595,"caption":"VIRL LAB"},{"@type":"BreadcrumbList","@id":"https:\/\/www.insecurewi.re\/index.php\/2019\/10\/31\/configuring-cisco-virl-external-connectivity-on-esxi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.insecurewi.re\/"},{"@type":"ListItem","position":2,"name":"Configuring Cisco VIRL External Connectivity on ESXi"}]},{"@type":"WebSite","@id":"https:\/\/www.insecurewi.re\/#website","url":"https:\/\/www.insecurewi.re\/","name":"Insecure Wire","description":"A Network Engineer\u2019s Perspective.","publisher":{"@id":"https:\/\/www.insecurewi.re\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.insecurewi.re\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.insecurewi.re\/#organization","name":"Insecure Wire","url":"https:\/\/www.insecurewi.re\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/","url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png","contentUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png","width":32,"height":32,"caption":"Insecure Wire"},"image":{"@id":"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/insecurewire"]},{"@type":"Person","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d","name":"nikonau","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g","caption":"nikonau"},"sameAs":["https:\/\/x.com\/https:\/\/twitter.com\/insecurewire"],"url":"https:\/\/www.insecurewi.re\/index.php\/author\/nikon\/"}]}},"_links":{"self":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts\/279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/comments?post=279"}],"version-history":[{"count":0,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts\/279\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/media\/281"}],"wp:attachment":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/media?parent=279"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/categories?post=279"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/tags?post=279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}