Solved

ESX Isolate network traffic

Posted on 2009-05-20
7
668 Views
Last Modified: 2012-05-07
Hi, I have two guest VM's in one ESX 3.0.2 box. I'd like to make it so that they cannot talk to each other. Right now the box has two NIC's, one for the VM's and the other is the service console. Right now they both have the same default route. Thank you.
0
Comment
Question by:qlc
7 Comments
 
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24435818
What is the OS running on the VMs ?
0
 

Author Comment

by:qlc
ID: 24435845
Both guest ares runining Windows 2003.
0
 
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24435917
The best way to make the VMs not to talk to each other is by enabling the Windows Firewall present in the OS.

Alternatively, you could add a Dual NIC Port or a Quad NIC Port to the Server and bind one of the VMs to a new vSwitch which inturn is bound to one of the newer NIC Ports.
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 

Author Comment

by:qlc
ID: 24436326
I just looked into the and it seems that the Microsoft Firewall canot block an IP address without a port.
0
 
LVL 22

Assisted Solution

by:65td
65td earned 50 total points
ID: 24437010
could have a trunk setup on a switch and put each VM into a vlan's
0
 
LVL 22

Assisted Solution

by:Luciano Patrão
Luciano Patrão earned 50 total points
ID: 24439926
Hi

Sorry arunraju but i cannot see how can you do this, with the Windows Firewall

"... The best way to make the VMs not to talk to each other is by enabling the Windows Firewall present in the OS..."

You can use in your VMware host Vlans, and you can use different Virtual Switch for both VM, by using different physical adapter from your VMware host.

Or if you whant to do this in the VM itself, put with VM in a different subnet.

You can choose any. Just inform what is the best for your environment and we can explain better.

Jail
0
 
LVL 6

Accepted Solution

by:
davismisbehavis earned 400 total points
ID: 24458770
You could enter a static route on both VM's, so in this example

VM1 = 192.168.1.50
WM2 = 192.168.1.100

On VM 1 add a static route for VM2 that goes to a non existant gateway
Route -p add 192.168.1.100 mask 255.255.255.255 192.168.1.253 metric 1

On VM 2 add a static route for VM 1 that also goes to a non existant gateway
Route -p add 192.168.1.50 mask 255.255.255.255 192.168.1.253 metric 1

Job done they'll never see each other.  I do however prefer the trunk setup from the network switch to the Virtual switch in ESX,  then create two different port groups with different VLAN ID's,  connect a VM to a port group each and give them IP's that relate to the VLAN ID's given to the port group.

that will also keep the traffic seperate,  the first step is the quickest way though

www.virtualpro.co.uk 
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Delete VMs from ESX host 4 71
VM migration error 7 44
Move VM from site to another site? 7 53
Can anyone please describe how to take a snapshot in VMware? 5 43
When converting a physical machine to a virtual machine using VMware vCenter Converter Standalone or vCenter Converter Enterprise, if an adapter type is not selected during the initial customization the resulting virtual machine may contain an IDE d…
Veeam Backup & Replication has added a new integration – Veeam Backup for Microsoft Office 365.  In this blog, we will discuss how you can benefit from Office 365 email backup with the Veeam’s new product and try to shed some light on the needs and …
Teach the user how to join ESXi hosts to Active Directory domains Open vSphere Client: Join ESXi host to AD domain: Verify ESXi computer account in AD: Configure permissions for domain user in ESXi: Test domain user login to ESXi host:
Teach the user how to use vSphere Update Manager to update the VMware Tools and virtual machine hardware version Open vSphere Client: Review manual processes for updating VMware Tools and virtual hardware versions: Create a new baseline group in vSp…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now