Solved

ESX Isolate network traffic

Posted on 2009-05-20
7
671 Views
Last Modified: 2012-05-07
Hi, I have two guest VM's in one ESX 3.0.2 box. I'd like to make it so that they cannot talk to each other. Right now the box has two NIC's, one for the VM's and the other is the service console. Right now they both have the same default route. Thank you.
0
Comment
Question by:qlc
7 Comments
 
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24435818
What is the OS running on the VMs ?
0
 

Author Comment

by:qlc
ID: 24435845
Both guest ares runining Windows 2003.
0
 
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24435917
The best way to make the VMs not to talk to each other is by enabling the Windows Firewall present in the OS.

Alternatively, you could add a Dual NIC Port or a Quad NIC Port to the Server and bind one of the VMs to a new vSwitch which inturn is bound to one of the newer NIC Ports.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:qlc
ID: 24436326
I just looked into the and it seems that the Microsoft Firewall canot block an IP address without a port.
0
 
LVL 22

Assisted Solution

by:65td
65td earned 50 total points
ID: 24437010
could have a trunk setup on a switch and put each VM into a vlan's
0
 
LVL 23

Assisted Solution

by:Luciano Patrão
Luciano Patrão earned 50 total points
ID: 24439926
Hi

Sorry arunraju but i cannot see how can you do this, with the Windows Firewall

"... The best way to make the VMs not to talk to each other is by enabling the Windows Firewall present in the OS..."

You can use in your VMware host Vlans, and you can use different Virtual Switch for both VM, by using different physical adapter from your VMware host.

Or if you whant to do this in the VM itself, put with VM in a different subnet.

You can choose any. Just inform what is the best for your environment and we can explain better.

Jail
0
 
LVL 6

Accepted Solution

by:
davismisbehavis earned 400 total points
ID: 24458770
You could enter a static route on both VM's, so in this example

VM1 = 192.168.1.50
WM2 = 192.168.1.100

On VM 1 add a static route for VM2 that goes to a non existant gateway
Route -p add 192.168.1.100 mask 255.255.255.255 192.168.1.253 metric 1

On VM 2 add a static route for VM 1 that also goes to a non existant gateway
Route -p add 192.168.1.50 mask 255.255.255.255 192.168.1.253 metric 1

Job done they'll never see each other.  I do however prefer the trunk setup from the network switch to the Virtual switch in ESX,  then create two different port groups with different VLAN ID's,  connect a VM to a port group each and give them IP's that relate to the VLAN ID's given to the port group.

that will also keep the traffic seperate,  the first step is the quickest way though

www.virtualpro.co.uk 
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Memory test on Esxi host 7 47
Issues connecting Dell SCV2020i to VMWARE 7 67
cannot remove vmnic 7 31
VMware SRM - Datastore not showing in Array Replication 11 75
This article will show you how to create an ISO CD-ROM/DVD-ROM image (*.iso), and MD5 checksum signature, for use with VMware vSphere Hypervisor 6.5 (ESXi 6.5). It's a good idea to compare checksums, because many installations fail because of a corr…
In this step by step tutorial with screenshots, we will show you HOW TO: Enable SSH Remote Access on a VMware vSphere Hypervisor 6.5 (ESXi 6.5). This is important if you need to enable SSH remote access for additional troubleshooting of the ESXi hos…
Teach the user how to convert virtaul disk file formats and how to rename virtual machine files on datastores. Open vSphere Web Client: Review VM disk settings: Migrate VM to new datastore with a thick provisioned (lazy zeroed) disk format: Rename a…
Teach the user how to configure vSphere clusters to support the VMware FT feature Open vSphere Web Client: Verify vSphere HA is enabled: Verify netowrking for vMotion and FT Logging is in place or create it: Turn On FT for a virtual machine: Verify …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question