dmz with vmware question

hi there

i have an esx server with everything working fine. im trying to setup a dmz but its not working for me.

i have created new vswitch with 2 nics - portgroup has vlan 100. nics are connected to cisco 3560 switch and the two esx ports are setup for trunking vlan 100 and trunk mode etc. i then have port 3 on the cisco swtich connected to the dmz port on the firewall - i have configured the switch port as an access port on vlan 100.  my vm can ping the firewall and the firewall can ping the vm but i cant access the internet from the vm.

i have tried all the usuals like windows firewall etc so its nothing simple here.

i believe my problem lies in the firewall as esx other vlans are all ok
mikeleahyAsked:
Who is Participating?
 
AlelescariniCommented:
It's correct, is a standard switch there isn't any particular configuration to do, try to check L3 rules on firewall side.
Here there's some implementation scenario
http://www.vmware.com/files/pdf/dmz_virtualization_vmware_infra_wp.pdf

0
 
John MeggersNetwork ArchitectCommented:
What kind of firewall?
0
 
mikeleahyAuthor Commented:
pix
0
 
shahravishCommented:
maybe silly, but can you try and ping ip adresses? like try pinging 4.2.2.1 from the vm? Need to understnad if issue lies only not being able to access anything beyond the firewall, or is it name resolutions?

Secondly, do yo uhave rules defined to alow outbound from dmz? and ensure its higher up in the list?
0
 
mikeleahyAuthor Commented:
that times out also. its not name resolution.

am i correct in saying that from the v mware side all you do is create the port group with vlan id etc and assign physicla nics??
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.