VMWARE - Complex Network Setup

Hi Everyone,

So I now have got my first ESX Server up and running, and am busy creating my first guest.

This leads me to my next question which may or may not be able to get answered within this thread.

So my network setup is fairly simple (i have attached a .pdf of the switch, router & firewall setup).

So my question is this, as you can see from my diagram my dmz is a seperate switch running 5 dmz's on seperate vlan's. Now currently this switch is connected to a port on my asa that has got vlan sub interfaces configured.

My ESX Server is on the LAN and I want to run a combination LAN & Various DMZ Virtual Servers on this.

What is the best way to do this?

Thanks
OUR-NETWORK.pdf
LVL 1
essexboy80Asked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Paul SolovyovskyConnect With a Mentor Senior IT AdvisorCommented:
should be straightforward.  

1.  Create a vswitch on the ESX host(s) with dedicated network ports attached.  Create a VM network on the vswitch and attach the physical ports into the DMZ switch.  

I see that you're using multiple VLANs on the DMZ switch so you would create multiple Virtual Machine Port Group with each Port Group ID would match the VLAN ID.

Here are some links that will help you with trunking and specifcally how to setup etherchannel on the switch and provide you with inbound/outbound load balancing for the vswitch

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004048
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1001938
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004074
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1003806
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004127

Hope this helps.
0
 
essexboy80Author Commented:
brilliant thanks
0
 
za_mkhCommented:
I would also recommend you look at this ... to further enhance your ESX DMZ implementation. We personally (at a great expense I know) ... use the "Partially collapsed DMZ with physical seperation zones"
0
SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

 
essexboy80Author Commented:
Thanks will have a read of that.
0
 
essexboy80Author Commented:
Great Help, Thanks
0
All Courses

From novice to tech pro — start learning today.