VMotion on ESXi

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

VMotion on ESXi

L4 Transporter

Hi PA-Admins,

we installed a VM-100 (version 6.0.2) in our ESXi environment. By accident we forgot to disable vmotion for the VM and the VM moves from one host to others...

I thought vmotion is not supported but our VM-100 is still running and the licenses are valid.

from the Virtualization_Admin_Guide_6.0:

System Requirements and Limitations

This section lists requirements and limitations for the VM-Series firewall on VMware vSphere Hypervisor (ESXi).....

....

-vMotion of the firewall is not supported

from the VM-Series_Deploymnt-RevA

The authcode is tied to the Universally Unique ID (UUID). If the firewall is cloned, the UUID will change and the license will become invalid. Moving the firewall from one host to another will not change the UUID (only the CPUID) and therefore the license will remain valid.

So what is now truth?

6 REPLIES 6

L6 Presenter

Hello Hithead,

Its possible to move firewall with option "guest was moved", that way it will not change UUID. This appears to be different than vmotion.

I checked multiple documents and found Vmotion is not supported,

Does it change UUID or CPUID when host changes VM[through vmotion]? IF NO, then there might be some changes in ESXi that id didnt change them. So, thats why licenses are valid.

Regards,

Hardik Shah

L7 Applicator

V-motion does not change the identities that the license keys off of in the PA VM.  So it does "work" to allow the v-motion.

However, using the VM-100 in a V-motion environment is not a supported feature by PA.  So if you have this configured and encounter an issue, PA support will have you turn this off.

I would exclude the vm-100 from v-motion just to keep things on the safe side.   Although I see v-motion as low risk, Storage v-motion with the logging environment of the vm-100 should be avoided as a higher risk operation.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

Hi Steven Puluka

thanks. I will check it and take a look. Also I like to restart the VM at another host. Just to be sure.

Hello Hithead,

Things doesnt matter a long as UUID doesnt change. As steven said, Vmotion will work, but not supported.

Regards,

Hardik Shah

hshah,

The license key is bonded to the CPUID and UUID...(if I want to register a new VM, both values are required)...Anyway, I will check the days if VMotion works or not. Just to be double sure.

L4 Transporter

hello,

tried VMotion and it seems to work. The licenses are still valid, also when you restart the VM on another host.

But for PAN-Support we bounded it to the original ESXi Host.

thx

  • 5480 Views
  • 6 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!