VCP550 · Question #29
A virtual machine is unable to communicate with another virtual machine. Both virtual machines are connected to the Production port group on the same virtual switch and are running on the same host. W
The correct answer is C. The Production port group is configured to use a secondary PVLAN.. Private VLANs can isolate virtual machines within the same port group. A secondary PVLAN configured in isolated mode prevents intra-port-group communication even on the same host and vSwitch.
Question
A virtual machine is unable to communicate with another virtual machine. Both virtual machines are connected to the Production port group on the same virtual switch and are running on the same host. Which configuration is causing the inability of the virtual machines to communicate?
Options
- ALLDP was enabled instead of CDP for the vSphere Distributed Switch.
- BPromiscuous Mode has been set to Allow on the Production port group.
- CThe Production port group is configured to use a secondary PVLAN.
- DThe speed and duplex settings for the virtual machine vmnics do not match.
How the community answered
(54 responses)- A4% (2)
- B22% (12)
- C65% (35)
- D9% (5)
Why each option
Private VLANs can isolate virtual machines within the same port group. A secondary PVLAN configured in isolated mode prevents intra-port-group communication even on the same host and vSwitch.
LLDP versus CDP is a link-layer discovery protocol setting that has no effect on the VM-to-VM data plane switching within a vSwitch.
Setting Promiscuous Mode to Allow causes a port to receive all traffic on the vSwitch, which broadens traffic visibility rather than blocking communication between VMs.
Private VLANs use a primary VLAN paired with secondary VLANs to segment traffic at layer 2. An isolated secondary PVLAN blocks all communication between ports in that secondary VLAN, so VMs on the same Production port group cannot reach each other despite sharing the same vSwitch and host.
Speed and duplex settings on vmnics apply to physical uplinks, but intra-host VM-to-VM traffic is switched entirely within the virtual switch and never traverses physical NICs.
Concept tested: Private VLAN isolated mode blocking intra-port-group VM communication
Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.networking.doc/GUID-83A0FB8D-A295-4F7E-8EC8-5DB11B30A7C2.html
Topics
Community Discussion
No community discussion yet for this question.