Business and Management Network Requirements
Business and management networks, which single-node systems and dual-node systems use, have the following requirements:
- The networks use IPv6 link-local addressing.
- The networks support an MTU value of up to 9000.
- The networks do not support bonding or VLAN trunking.
- Virtual machines (VMs) can use IPv4, IPv6, and other Ethernet protocols.
- All business networks can be used for IPv6 host access if your site has SLAAC or DHCPv6 enabled.
- To reach the ztC Console, use ibiz0, which is the IPv4 address that migrates to the primary management physical machine (PM). Each PM of a dual-node system also has its own ibiz0 IPv4 address on the management network.
- Each PM requires at least one business network (specifically, the management network).
To ensure that Ethernet traffic flows unobstructed to and from VMs from either PM of a dual-node system:
- The switch ports connected to business networks must not filter ARP packets, including gratuitous ARP packets. A ztC Edge system sends gratuitous ARP packets on behalf of guest VMs in order to prompt Ethernet switches to update their port-forwarding tables to direct VM traffic to the appropriate physical Ethernet port on the appropriate PM.
- The switch ports connected to business networks must allow layer2 multicasts (address: 01:E0:09:05:00:02) with ethertype: 0x8807.
-
If you configure RHEL or CentOS guests to have multiple NICs on same subnet, you may experience guest network connectivity issues due to asymmetric routing. To avoid this problem, modify the /etc/sysctl.conf file on the guest Virtual Machine (VM) to contain the following lines, save the file, and reboot the VM.
- Do not issue the ifdown command from a PM's host OS to temporarily bring down a VM's business network connection (ibizx). Doing so will disconnect the physical interface from its bridge and cause the VM to become unreachable over the network. Instead, use the ifconfig down command.
- The switches connected to business networks must not enable any MAC address security features that would disable the movement of a MAC address from one business link to the matching business link on the other PM.
-
For optimal failover response, configure any switches connected to your system to have MAC aging timeout values of less than one second.
If these requirements are not met, or if the switch does not properly update its forwarding table when a VM is migrated from one ztC Edge PM to the other PM of a dual-node system, the VM may experience a blackout in which network traffic is not properly directed to and from the VM.