topic Re: VMotion on ESXi in General Topics

VMotion on ESXi

Hithead — Thu, 10 Jul 2014 09:52:29 GMT

Hi PA-Admins,

we installed a VM-100 (version 6.0.2) in our ESXi environment. By accident we forgot to disable vmotion for the VM and the VM moves from one host to others...

I thought vmotion is not supported but our VM-100 is still running and the licenses are valid.

from the Virtualization_Admin_Guide_6.0:

System Requirements and Limitations

This section lists requirements and limitations for the VM-Series firewall on VMware vSphere Hypervisor (ESXi).....

....

-vMotion of the firewall is not supported

from the VM-Series_Deploymnt-RevA

The authcode is tied to the Universally Unique ID (UUID). If the firewall is cloned, the UUID will change and the license will become invalid. Moving the firewall from one host to another will not change the UUID (only the CPUID) and therefore the license will remain valid.

So what is now truth?

Re: VMotion on ESXi

hshah — Thu, 10 Jul 2014 11:39:26 GMT

Hello Hithead,

Its possible to move firewall with option "guest was moved", that way it will not change UUID. This appears to be different than vmotion.

I checked multiple documents and found Vmotion is not supported,

Does it change UUID or CPUID when host changes VM[through vmotion]? IF NO, then there might be some changes in ESXi that id didnt change them. So, thats why licenses are valid.

Regards,

Hardik Shah

Re: VMotion on ESXi

pulukas — Thu, 10 Jul 2014 14:42:20 GMT

V-motion does not change the identities that the license keys off of in the PA VM. So it does "work" to allow the v-motion.

However, using the VM-100 in a V-motion environment is not a supported feature by PA. So if you have this configured and encounter an issue, PA support will have you turn this off.

I would exclude the vm-100 from v-motion just to keep things on the safe side. Although I see v-motion as low risk, Storage v-motion with the logging environment of the vm-100 should be avoided as a higher risk operation.

Re: VMotion on ESXi

Hithead — Fri, 11 Jul 2014 12:00:16 GMT

Hi Steven Puluka

thanks. I will check it and take a look. Also I like to restart the VM at another host. Just to be sure.

Re: VMotion on ESXi

hshah — Fri, 11 Jul 2014 18:35:22 GMT

Hello Hithead,

Things doesnt matter a long as UUID doesnt change. As steven said, Vmotion will work, but not supported.

Regards,

Hardik Shah

Re: VMotion on ESXi

Hithead — Mon, 14 Jul 2014 14:09:17 GMT

hshah,

The license key is bonded to the CPUID and UUID...(if I want to register a new VM, both values are required)...Anyway, I will check the days if VMotion works or not. Just to be double sure.

Re: VMotion on ESXi

Hithead — Tue, 15 Jul 2014 12:20:21 GMT

hello,

tried VMotion and it seems to work. The licenses are still valid, also when you restart the VM on another host.

But for PAN-Support we bounded it to the original ESXi Host.

thx