2.4

Table Of Contents
VMware, Inc. 163
Appendix A Network Fencing
AllowTrafficInandOutVirtualmachinescancommunicatewithmachines
outsidethefenceandmachinesoutsidethefencecancommunicatewithvirtual
machinesinthefencedconfiguration.
AllowTrafficOutVirtualmachinesinafencedconfigurationcaninitiate
communicationtomachinesoutsidethefenceandcanreceivemessagesbackon
thesameconnection.Machinesoutsidethefencecannotinitiatecommunicationto
virtualmachinesinthefencedconfiguration.
Thisoptionisusefulwhenvirtualmachinesneedtoobtain
dataorexecutecode
outsidethefence(asseenwithWebservicesordatabases)butdonotwantto
receivemessagesthatmaydisrupttesting.
BlockTrafficInandOutNetworktrafficdoesnottravelacrossthefence.Virtual
machinesinafencedconfigurationcannotcommunicatewithmachinesoutsideof
thefence,andmachinesoutsidethefencecannotcommunicatewithvirtual
machinesinthefencedconfiguration.
Thisoptionisusefulinthesecircumstances:
Youaretestingsoftwarevirusesthatneedtoremainisolatedfromthe
network.
Youaretestingaclientserverapplicationinisolation.
Processor Type Incompatibility
Deployingaconfigurationinfencedmodehostsallthevirtualmachinesonasingle
ManagedServer.YoumusthaveaManagedServerconnectedtothestorageserver
wherethetemplatesthatserveasthebasisofthisconfigurationresideon.The
ManagedServermusthavesufficientresources,suchasmemory,slots,
andfences.
Ifyoudeployaconfiguration,performanoperationwhichsavesthestateofthe
configuration(forexample,suspendorcapturetolibrary),andredeploythe
configurationwithfencing(whichrequireshostingallvirtualmachinesonthesame
physicalmachine),thevirtualmachinesenduprunningonthesameManaged
Server
andmayfailbecauseofprocessortypeincompatibility. Thecapturedmemoryexpects
aparticularprocessortype.
Toaddressthissituation,deploytheconfigurationwithoutfencing,undeployit
withoutsavingthememorystate(asdefinedintheUserPreferencespageontheWeb
console),andredeploytheconfiguration.Ifyouneed
toaddressindividualvirtual
machines,youcandeploythemonebyoneanddiscardthesavedstate.