Solved

ESX Isolate network traffic

Posted on 2009-05-20
7
673 Views
Last Modified: 2012-05-07
Hi, I have two guest VM's in one ESX 3.0.2 box. I'd like to make it so that they cannot talk to each other. Right now the box has two NIC's, one for the VM's and the other is the service console. Right now they both have the same default route. Thank you.
0
Comment
Question by:qlc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24435818
What is the OS running on the VMs ?
0
 

Author Comment

by:qlc
ID: 24435845
Both guest ares runining Windows 2003.
0
 
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24435917
The best way to make the VMs not to talk to each other is by enabling the Windows Firewall present in the OS.

Alternatively, you could add a Dual NIC Port or a Quad NIC Port to the Server and bind one of the VMs to a new vSwitch which inturn is bound to one of the newer NIC Ports.
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 

Author Comment

by:qlc
ID: 24436326
I just looked into the and it seems that the Microsoft Firewall canot block an IP address without a port.
0
 
LVL 22

Assisted Solution

by:65td
65td earned 50 total points
ID: 24437010
could have a trunk setup on a switch and put each VM into a vlan's
0
 
LVL 23

Assisted Solution

by:Luciano Patrão
Luciano Patrão earned 50 total points
ID: 24439926
Hi

Sorry arunraju but i cannot see how can you do this, with the Windows Firewall

"... The best way to make the VMs not to talk to each other is by enabling the Windows Firewall present in the OS..."

You can use in your VMware host Vlans, and you can use different Virtual Switch for both VM, by using different physical adapter from your VMware host.

Or if you whant to do this in the VM itself, put with VM in a different subnet.

You can choose any. Just inform what is the best for your environment and we can explain better.

Jail
0
 
LVL 6

Accepted Solution

by:
davismisbehavis earned 400 total points
ID: 24458770
You could enter a static route on both VM's, so in this example

VM1 = 192.168.1.50
WM2 = 192.168.1.100

On VM 1 add a static route for VM2 that goes to a non existant gateway
Route -p add 192.168.1.100 mask 255.255.255.255 192.168.1.253 metric 1

On VM 2 add a static route for VM 1 that also goes to a non existant gateway
Route -p add 192.168.1.50 mask 255.255.255.255 192.168.1.253 metric 1

Job done they'll never see each other.  I do however prefer the trunk setup from the network switch to the Virtual switch in ESX,  then create two different port groups with different VLAN ID's,  connect a VM to a port group each and give them IP's that relate to the VLAN ID's given to the port group.

that will also keep the traffic seperate,  the first step is the quickest way though

www.virtualpro.co.uk 
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

HOW TO: Install and Configure VMware vSphere Hypervisor 6.5 (ESXi 6.5), Step by Step Tutorial with screenshots. From Download, Checking Media, to Completed Installation.
In this step by step tutorial with screenshots, we will show you HOW TO: Enable SSH Remote Access on a VMware vSphere Hypervisor 6.5 (ESXi 6.5). This is important if you need to enable SSH remote access for additional troubleshooting of the ESXi hos…
This Micro Tutorial walks you through using a remote console to access a server and install ESXi 5.1. This example is showing remote access and installation using a Dell server. The hypervisor is the very first component of your virtual infrastructu…
This video shows you how to use a vSphere client to connect to your ESX host as the root user. Demonstrates the basic connection of bypassing certification set up. Demonstrates how to access the traditional view to begin managing your virtual mac…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question