Solved

dmz with vmware question

Posted on 2011-09-19
5
614 Views
Last Modified: 2012-05-12
hi there

i have an esx server with everything working fine. im trying to setup a dmz but its not working for me.

i have created new vswitch with 2 nics - portgroup has vlan 100. nics are connected to cisco 3560 switch and the two esx ports are setup for trunking vlan 100 and trunk mode etc. i then have port 3 on the cisco swtich connected to the dmz port on the firewall - i have configured the switch port as an access port on vlan 100.  my vm can ping the firewall and the firewall can ping the vm but i cant access the internet from the vm.

i have tried all the usuals like windows firewall etc so its nothing simple here.

i believe my problem lies in the firewall as esx other vlans are all ok
0
Comment
Question by:mikeleahy
5 Comments
 
LVL 18

Expert Comment

by:jmeggers
ID: 36562457
What kind of firewall?
0
 

Author Comment

by:mikeleahy
ID: 36562511
pix
0
 
LVL 3

Expert Comment

by:shahravish
ID: 36563285
maybe silly, but can you try and ping ip adresses? like try pinging 4.2.2.1 from the vm? Need to understnad if issue lies only not being able to access anything beyond the firewall, or is it name resolutions?

Secondly, do yo uhave rules defined to alow outbound from dmz? and ensure its higher up in the list?
0
 

Author Comment

by:mikeleahy
ID: 36565296
that times out also. its not name resolution.

am i correct in saying that from the v mware side all you do is create the port group with vlan id etc and assign physicla nics??
0
 

Accepted Solution

by:
Alelescarini earned 250 total points
ID: 36569173
It's correct, is a standard switch there isn't any particular configuration to do, try to check L3 rules on firewall side.
Here there's some implementation scenario
http://www.vmware.com/files/pdf/dmz_virtualization_vmware_infra_wp.pdf

0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If we need to check who deleted a Virtual Machine from our vCenter. Looking this task in logs can be painful and spend lot of time, so the best way to check this is in the vCenter DB. Just connect to vCenter DB(default DB should be VCDB and using…
Veeam Backup & Replication has added a new integration – Veeam Backup for Microsoft Office 365.  In this blog, we will discuss how you can benefit from Office 365 email backup with the Veeam’s new product and try to shed some light on the needs and …
Teach the user how to rename, unmount, delete and upgrade VMFS datastores. Open vSphere Web Client: Rename VMFS and NFS datastores: Upgrade VMFS-3 volume to VMFS-5: Unmount VMFS datastore: Delete a VMFS datastore:
Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question