Configuring network isolation
As a rule, all storage traffic, regardless of the medium or protocol used, should be isolated from any and all management or client network traffic. The IP network segmentation should employ separate physical switches where possible. If a shared physical switch is used, then a VLAN should be used to isolate the iSCSI traffic from all other network traffic on the network. IP Security (IPSEC) is currently not supported for IPv4 iSCSI traffic.
We'll configure a separate vSwitch for iSCSI traffic, which is always the preferred method to isolate storage traffic and prevent commingling with management and VM network traffic.
Getting ready
In order to proceed, we require access to vSphere Web Client. The client can be run on ...
Get VMware vSphere Security Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
