Solved

dmz with vmware question

Posted on 2011-09-19
5
610 Views
Last Modified: 2012-05-12
hi there

i have an esx server with everything working fine. im trying to setup a dmz but its not working for me.

i have created new vswitch with 2 nics - portgroup has vlan 100. nics are connected to cisco 3560 switch and the two esx ports are setup for trunking vlan 100 and trunk mode etc. i then have port 3 on the cisco swtich connected to the dmz port on the firewall - i have configured the switch port as an access port on vlan 100.  my vm can ping the firewall and the firewall can ping the vm but i cant access the internet from the vm.

i have tried all the usuals like windows firewall etc so its nothing simple here.

i believe my problem lies in the firewall as esx other vlans are all ok
0
Comment
Question by:mikeleahy
5 Comments
 
LVL 18

Expert Comment

by:jmeggers
ID: 36562457
What kind of firewall?
0
 

Author Comment

by:mikeleahy
ID: 36562511
pix
0
 
LVL 3

Expert Comment

by:shahravish
ID: 36563285
maybe silly, but can you try and ping ip adresses? like try pinging 4.2.2.1 from the vm? Need to understnad if issue lies only not being able to access anything beyond the firewall, or is it name resolutions?

Secondly, do yo uhave rules defined to alow outbound from dmz? and ensure its higher up in the list?
0
 

Author Comment

by:mikeleahy
ID: 36565296
that times out also. its not name resolution.

am i correct in saying that from the v mware side all you do is create the port group with vlan id etc and assign physicla nics??
0
 

Accepted Solution

by:
Alelescarini earned 250 total points
ID: 36569173
It's correct, is a standard switch there isn't any particular configuration to do, try to check L3 rules on firewall side.
Here there's some implementation scenario
http://www.vmware.com/files/pdf/dmz_virtualization_vmware_infra_wp.pdf

0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If we need to check who deleted a Virtual Machine from our vCenter. Looking this task in logs can be painful and spend lot of time, so the best way to check this is in the vCenter DB. Just connect to vCenter DB(default DB should be VCDB and using…
Will try to explain how to use the VMware feature TAGs in the VMs and create Veeam Backup Jobs using TAGs. Since this article is too long, I will create second article for the Veeam tasks.
Teach the user how to install ESXi 5.5 and configure the management network System Requirements: ESXi Installation:  Management Network Configuration: Management Network Testing:
Teach the user how to use create log bundles for vCenter Server or ESXi hosts Open vSphere Web Client: Generate vCenter Server and ESXi host log bundle:  Open vCenter Server Appliance Web Management interface and generate log bundle: Open vCenter Se…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now