SCVMM Port Profiles Test

VMM Port Profiles function as collections for configuration settings for network adapters across multiple virtualization hosts.

Port profiles are of two types, namely - Uplink port profiles and Virtual network adapter port profiles.

• Uplink port profiles: Uplink port profiles define the load balancing algorithm for an adapter, and specify how to team multiple network adapters on a host that use the same uplink port profile. This profile is used in conjunction with the logical network that you associated with the adapter. You create uplink port profiles and then apply them to physical network adapters when you deploy switches.

• Virtual network adapter port profiles: Virtual network adapter port profiles define specific capabilities, such as bandwidth limitations, and priority. You apply virtual network adapter port profiles to virtual network adapters. After creating virtual network adapter port profiles you can create port classifications. Port classifications are abstractions that identify different types of virtual network adapter port profiles. For example you could create a classification called FAST to identify ports that are configured to have more bandwidth and another one called SLOW with less bandwidth. Classifications are included in logical switches. Administrators and tenants can choose a classification for their VM virtual machine adapters. By default, VMM includes built-in classifications that map to the built-in virtual network adapter port profiles. These default port classifications are as follows:

  Port Classification	Description
  SR-IOV	Allows a virtual network adapter to use SR-IOV
  Host management	For network adapters used to manage the virtualization host
  Network load balancing	To be used with network adapters that participate in Microsoft Network Load Balancing.
  Guest dynamic IP	Used with network adapters that require guest dynamic IP addresses
  Live migration workload	Used with network adapters that support VM live migration workloads
  Medium bandwidth	Assign to network adapters that need to support medium bandwidth workloads
  Host cluster workload	Assign to network adapters that are used to support host clusters
  Low bandwidth	Low bandwidth
  High bandwidth	Assign to network adapters that are used to support high bandwidth workloads.
  iSCSI workload	Assign to network adapters that are used to connect to SAN resources using the iSCSI protocol

For each of the built-in and user-defined port classification, this test reports the key properties configured for that classification. In the process, the test points to those port classifications for which network teaming is not allowed, where guards are disabled, or for which priority tagging is disabled.

Target of the test : SCVMM

Agent deploying the test : An internal agent

Outputs of the test : One set of the results for each port classification

Configurable parameters for the test

Parameter	Description
Test Period	How often should the test be executed.
Host	The IP address of the SCVMM server being monitored
Port	The port at which SCVMM listens. The default is 'null'.
Domain, Username, Password, and Confirm Password	The eG agent runs PowerShell scripts on SCVMM to pull metrics. To run these scripts, the eG agent requires the permission of an SCVMM administrator with 'read-only' privileges. In order to grant this permission to the eG agent, configure the Username and Password parameters of this test with the credentials of an SCVMM administrator with 'read-only' privileges. Confirm the password by retyping it in the Confirm Password text box. Then, specify the domain to which this user belongs against the Domain text box.

Measurements made by the test

Measurement	Description	Measurement Unit	Interpretation
Is network teaming allowed?	Indicates whether/not network teaming is allowed for this port classification.		Guest teaming allows the virtual network adapter to be teamed with other network adapters that are connected to the same switch. The values that this measure reports and their corresponding numeric values are listed in the table below: Measure Value Numeric Value Yes 1 No 0 Note: By default, this measure reports the Measure Values listed in the table above to indicate whether/not teaming is enabled for the port classification. In the graph of this measure however, the same is indicated using the numeric equivalents only.
Is MAC address spoofing enabled?	Indicates whether/not MAC address spoofing is enabled for this port classification.		MAC address spoofing allows virtual machines to change the source MAC address in outgoing packets to one that is not assigned to them. The values that this measure reports and their corresponding numeric values are listed in the table below: Measure Value Numeric Value Yes 1 No 0 Note: By default, this measure reports the Measure Values listed in the table above to indicate whether/not teaming is enabled for the port classification. In the graph of this measure however, the same is indicated using the numeric equivalents only.
Is IEEE priority tagging allowed?	Indicates whether/not IEEE priority tagging is allowed for this port classification.		This measure indicates whether outgoing packets from the virtual machine adapter are allowed to be tagged with IEEE 802.1p priority. The values that this measure reports and their corresponding numeric values are listed in the table below: Measure Value Numeric Value Yes 1 No 0 Note: By default, this measure reports the Measure Values listed in the table above to indicate whether/not IEEE priority tagging is allowed for the port classification. In the graph of this measure however, the same is indicated using the numeric equivalents only.
Is DHCP guard enabled?	Indicates whether/not DHCP guard is enabled for this port classification.	Number	DHCP guard drops DHCP server messages from unauthorized virtual machines pretending to be DHCP servers. The values that this measure reports and their corresponding numeric values are listed in the table below: Measure Value Numeric Value Yes 1 No 0 Note: By default, this measure reports the Measure Values listed in the table above to indicate whether/not DHCP guard is allowed for the port classification. In the graph of this measure however, the same is indicated using the numeric equivalents only.
Is router guard enabled?	Indicates whether/not router guard is enabled for this port classification.		This measure indicates whether router advertisement and redirection messages from authorized virtual machines pretending to be routers are dropped. The values that this measure reports and their corresponding numeric values are listed in the table below: Measure Value Numeric Value Yes 1 No 0 Note: By default, this measure reports the Measure Values listed in the table above to indicate whether/not router guard is allowed for the port classification. In the graph of this measure however, the same is indicated using the numeric equivalents only.
Is virtual machine queue enabled?	Indicates whether/not virtual machine queue is enabled for this port classification.		Virtual Machine Queue (VMQ) is a type of hardware packet filtering that delivers packet data from an outside virtual machine network directly to a virtualized host operating system. The values that this measure reports and their corresponding numeric values are listed in the table below: Measure Value Numeric Value Yes 1 No 0 Note: By default, this measure reports the Measure Values listed in the table above to indicate whether/not Virtual Machine Queue is enabled for the port classification. In the graph of this measure however, the same is indicated using the numeric equivalents only.
Is IPsec task offloading enabled?	Indicates whether/not IPsec task offloading is enabled for this port classification.		Another mechanism to offload network processing to hardware is IPsec task offloading. When large IPsec packets are used on the network, the IPsec task offloading feature can lower CPU utilizing on the Hyper-V host. The values that this measure reports and their corresponding numeric values are listed in the table below: Measure Value Numeric Value Yes 1 No 0 Note: By default, this measure reports the Measure Values listed in the table above to indicate whether/not IPSec task offloading is enabled for this port classification. In the graph of this measure however, the same is indicated using the numeric equivalents only.
Is single-root I/O virtualization enabled?	Indicates whether/not single-root I/O virtualization enabled for this port classification.		The single root I/O virtualization (SR-IOV) interface is an extension to the PCI Express (PCIe) specification. SR-IOV allows a device, such as a network adapter, to separate access to its resources among various PCIe hardware functions. The values that this measure reports and their corresponding numeric values are listed in the table below: Measure Value Numeric Value Yes 1 No 0 Note: By default, this measure reports the Measure Values listed in the table above to indicate whether/not IPSec task single-root I/O virtualization is enabled for this port classification. In the graph of this measure however, the same is indicated using the numeric equivalents only.