VMWare Pentest lab: Extremely high CPU on host
-
I have tried that, even if I limit to 20 meg it still plays havoc :(
What version of ESX are you on?
-
4.1 U3.
Dont want to upgrade to 5.x since I dont need the new features in 5.x.
-
Looks like my only option is to move to hardware in that case :(
-
When use to running vm's then hardware is a pain in the ass…. :(
-
I know there are going to be vlans everywhere but what else can I do, I cant get any version of pfsense to play nice.
-
Have you tried 1.2.3?? Just for testing?
-
Yes I got exactly the same, the problem is as everyone is accessing the environment via ipsec tunnels or the ssl vpn all it takes is for one user to do a download and everyone's sessions jump about or die totally :(
-
Have you read this?
http://doc.pfsense.org/index.php/VPN_Capability_IPsec
No overlapping networks….
-
Yeah deffo no overlapping networks
-
Allright :) Do you have a 4.x vmware test platform??
-
Yeah
-
Can you test there to see if its a 5.x issue then?
Rather keep it in a VM than on physical hardware for the flexibility :)
-
Yeah I am willing to give that a go, but I need to drive a way to the DC to do the upgrade that's why I was asking if anyone had tried it, I didn't want a wasted trip :)
-
Nope the upgrade to 5.1 U1 didnt fix it :(
-
Try the 4.1 instead.
It could be interesting to see if its a 5.x issue.
-
I was on 4.1, I just went to 5.1 :)
Its not as bad with 5.1 and 5.1 seems to manage the cpus much better all machines are using less but it is still unusable :(
-
Hmmmm that is pretty weird!!
-
Eurika, I think I may have fixed it!!!!!!!!!!!!!
Just doing some testing now ;D
-
It would appear that I have resolved this in my situation anyway.
It turned out to be the physical nic setting in vmware was set to 100meg full duplex.
I changed this to auto negotiate and it still negotiates to 100meg full deplux but the problem totally goes away!!
If I switch it back to specifying 100meg full duplex I get the problem again so it is defiantly that setting.
Thanks for the help Supermule
So if anyone is having similar issues check this setting!