Solved

ESX Isolate network traffic

Posted on 2009-05-20
7
670 Views
Last Modified: 2012-05-07
Hi, I have two guest VM's in one ESX 3.0.2 box. I'd like to make it so that they cannot talk to each other. Right now the box has two NIC's, one for the VM's and the other is the service console. Right now they both have the same default route. Thank you.
0
Comment
Question by:qlc
7 Comments
 
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24435818
What is the OS running on the VMs ?
0
 

Author Comment

by:qlc
ID: 24435845
Both guest ares runining Windows 2003.
0
 
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24435917
The best way to make the VMs not to talk to each other is by enabling the Windows Firewall present in the OS.

Alternatively, you could add a Dual NIC Port or a Quad NIC Port to the Server and bind one of the VMs to a new vSwitch which inturn is bound to one of the newer NIC Ports.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:qlc
ID: 24436326
I just looked into the and it seems that the Microsoft Firewall canot block an IP address without a port.
0
 
LVL 22

Assisted Solution

by:65td
65td earned 50 total points
ID: 24437010
could have a trunk setup on a switch and put each VM into a vlan's
0
 
LVL 22

Assisted Solution

by:Luciano Patrão
Luciano Patrão earned 50 total points
ID: 24439926
Hi

Sorry arunraju but i cannot see how can you do this, with the Windows Firewall

"... The best way to make the VMs not to talk to each other is by enabling the Windows Firewall present in the OS..."

You can use in your VMware host Vlans, and you can use different Virtual Switch for both VM, by using different physical adapter from your VMware host.

Or if you whant to do this in the VM itself, put with VM in a different subnet.

You can choose any. Just inform what is the best for your environment and we can explain better.

Jail
0
 
LVL 6

Accepted Solution

by:
davismisbehavis earned 400 total points
ID: 24458770
You could enter a static route on both VM's, so in this example

VM1 = 192.168.1.50
WM2 = 192.168.1.100

On VM 1 add a static route for VM2 that goes to a non existant gateway
Route -p add 192.168.1.100 mask 255.255.255.255 192.168.1.253 metric 1

On VM 2 add a static route for VM 1 that also goes to a non existant gateway
Route -p add 192.168.1.50 mask 255.255.255.255 192.168.1.253 metric 1

Job done they'll never see each other.  I do however prefer the trunk setup from the network switch to the Virtual switch in ESX,  then create two different port groups with different VLAN ID's,  connect a VM to a port group each and give them IP's that relate to the VLAN ID's given to the port group.

that will also keep the traffic seperate,  the first step is the quickest way though

www.virtualpro.co.uk 
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

HOW TO: Connect to the VMware vSphere Hypervisor 6.5 (ESXi 6.5) using the vSphere (HTML5 Web) Host Client 6.5, and perform a simple configuration task of adding a new VMFS 6 datastore.
In this article, I will show you HOW TO: Create your first Windows Virtual Machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, the Windows OS we will install is Windows Server 2016.
Teach the user how to convert virtaul disk file formats and how to rename virtual machine files on datastores. Open vSphere Web Client: Review VM disk settings: Migrate VM to new datastore with a thick provisioned (lazy zeroed) disk format: Rename a…
Teach the user how to configure vSphere Replication and how to protect and recover VMs Open vSphere Web Client: Verify vsphere Replication is enabled: Enable vSphere Replication for a virtual machine: Verify replicated VM is created: Recover replica…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question