?
Solved

Connection a vmWare Server Host to both DMZ and Internal LAN

Posted on 2011-10-20
3
Medium Priority
?
1,143 Views
Last Modified: 2012-05-12
Hi Guys,

I'm a vmware vsphere 5 newbie. But have been working with vmware workstation and server for a while.

I have four physical servers that host 50 virtual servers. Everything is licensed on vmware 5 Enterprise Plus Edition.

vmWare vCenter 5 is set up properly. Advanced features such as DRS, vMotion and so on have not been enabled yet.

For now I just need some help with basic configuration.

Vmware network is configured with a single virtual switch, the one that comes out of the box. I don't have much experience with vmware virtual networking. Every physical server has 6 gigabit ethernet connections.

Physical servers are running ESXi 5.

Everything is up and running smoothly.

Now I need to connect these physical servers to DMZ since there are some vm's that should run on that part of our network.

How should I do that?

Should I connect one nic from each server to the DMZ swtich, since we shall have virtual machines from any of these servers running on DMZ? Besides that, how should I set up vmware networking? Should I create a new virtual switch? How do i do that? What are you guys doing out there?

How about vLANS? Can it be set up and span multiple subnets so I can keep all servers connected to internal LAN?

What about the security questions that will be raised when connecting the server both to internal LAN and DMZ? Can't it be explore by a hacker to bypass all security polices enforced at the firewall box?

Thanks in advance.

Rodrigo Garcone
0
Comment
Question by:garconer
  • 2
3 Comments
 
LVL 124

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE^2) earned 2000 total points
ID: 37004140
The quickest and easiest, way, is for you to create a new vSwitch1, add a physical network card in the host to vSwitch1, create a Virtual Machine Portgroup called e.g. DMZ, and then  the virtual machines that need to use the DMZ, you select this network label, in the VM settings, and edit the Network Intwrface Card and select DMZ.

To create the vSwitch, you select the Host, Configuration, Networking, Add Networking, and Follow the Wizard, to create new Virtual Switch for Virtual Machines.

If you follow the above, this will allow you to create, a DMZ Network on your vSwitch1.

Think of vSwitches, virtual switches as "separate physical switches inside the ESXi server", traffic CANNOT pass between these vSwitches. So Internal LAN on vSwitch0, DMZ on vSwitch1, traffic cannot pass between the two.

VLANs can be used, but you would have to create a network trunk to your ESXi servers, and create VLAN Tags for your Virtual Machine Portgroups, and configure the physical network to support Trunk Ports and VLAN tags.

If you want to read more on networking in VMware ESX/ESXi, then I recommend the following:-

I would also recommend reading through the Networking Sections of the following guides to gain a better understanding of Networking in VMware ESX/ESXi.

Pages 13 - 73 Discuss Networking in Detail, including trunks, VLANs, switches, and load balancing

ESXi Configuration Guide ESXi 4.1
http://www.vmware.com/pdf/vsphere4/r41/vsp_41_esxi_server_config.pdf

Virtual Networking
http://www.vmware.com/technical-resources/virtual-networking/virtual-networks.html

Virtual Networking Concepts
http://www.vmware.com/files/pdf/virtual_networking_concepts.pdf


VLANs Have a look here

Pages 13 - 73 Discuss Networking in Detail, iuncluding trunks, VLANs, switches, and load balancing

ESXi Configuration Guide ESXi 4.1
http://www.vmware.com/pdf/vsphere4/r41/vsp_41_esxi_server_config.pdf

Virtual Networking
http://www.vmware.com/technical-resources/virtual-networking/virtual-networks.html

Virtual Networking Concepts
http://www.vmware.com/files/pdf/virtual_networking_concepts.pdf
http://en.wikipedia.org/wiki/Virtual_LAN
http://en.wikipedia.org/wiki/IEEE_802.1Q
Sample configuration of virtual switch VLAN tagging (VST Mode)

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004074
http://blog.scottlowe.org/2006/04/17/vlans-and-port-groups/

How to Setup VLANs
http://www.vladan.fr/great-kb-on-how-to-configure-vlans-on-vswitches-pswitches-and-vms/

VMware ESX Server 3: 802.1Q VLAN Solutions
http://www.vmware.com/pdf/esx3_vlan_wp.pdf

http://kb.vmware.com/kb/1004127
http://kb.vmware.com/kb/1004074
http://kb.vmware.com/kb/1004252

Any issues, or are unsure, please just ask
0
 

Author Closing Comment

by:garconer
ID: 37004204
wouldnt have a better answer somewhere else. That's the answer from someone that wants really to help others.

Thanks very much!
0
 
LVL 124
ID: 37004218
Thanks for your kinds words, if you get issues, on the Question asked, please post, back, I usually "watch all questions"!
0

Featured Post

Restore individual SQL databases with ease

Veeam Explorer for Microsoft SQL Server delivers an easy-to-use, wizard-driven interface for restoring your databases from a backup. No expert SQL background required. Web interface provides a complete view of all available SQL databases to simplify the recovery of lost database

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
In this article we will learn how to backup a VMware farm using Nakivo Backup & Replication. In this tutorial we will install the software on a Windows 2012 R2 Server.
Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial
Suggested Courses

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question