Creating a seperate network in VMWare that can reach the internet

Hello Experts,
I asked a very similar question the other day, but I have a bit more detail now.  I have been asked to create a test network in our VSphere environment that will be isolated from our production network yet still be able to reach the Internet.  Here is a brief summary of our environment:
1.      Our VM host is running VCenter 5.1
2.      The host has two physical NICs (named vmnic0 and vmnic1)
3.      Vmnic1 connects to our Cisco 6509 on port te3/1.  Port te3/1 is configured as a trunk port.
4.      Our Cisco 6509 connects to our core switch (a Cisco 4506) on port te2/1.  Port te2/1 is configured as a trunk port.
5.      Our core switch connects to our firewall
6.      Our firewall lets traffic out to the internet

Note:  We are not using dynamic trunking protocol

To get this to work, I think I need to do the following steps:
1.      In VCenter (create the vlan on the virtual switch):
a.      Click on our host
b.      Click on the configuration tab
c.      Click on the properties of the virtual switch
d.      On the ports tab, click on the add button
e.      On the connection type screen, click on the “virtual machine” type
f.      For the network label, input: “Test Network”
g.      For the VLAN ID, input: 237
h.      Verify information and click on the finish button
2.      On the Cisco 6509 (create the vlan, assign it a subnet, and allow the new vlan access to the trunk port):
a.      6509> config t
b.      6509# vlan 237
c.      6509# interface vlan 237
d.      6509(config-if)# ip address 10.110.237.1 255.255.255.0
e.      6509(config-if)#end
f.      6509# interface te3.1
g.      6509(config-if)# switchport trunk allowed vlan add 237
h.      6509(config-if)# end
i.      6509# wr
3.      On the Cisco 4506 (create the vlan, assign it a subnet, and allow the new vlan access to the trunk port):
a.      4506> config t
b.      4506# vlan 237
c.      4506# interface vlan 237
d.      4506(config-if)# ip address 10.110.237.1 255.255.255.0
e.      4506(config-if)#end
f.      4506# interface te2.1
g.      4506(config-if)# switchport trunk allowed vlan add 237
h.      4506(config-if)# end
i.      4506# wr
4.      Create the appropriate rules in the firewall.
My Cisco skills and my VMWare skills are obviously at the rookie-noob level, but I volunteered to try and do this for the learning experience.  My hope is that you VMWare and Cisco experts will take a look at the information above and let me know what I’ve missed (at least on the switch end).

Thanks in advance,
Nick
LVL 1
ndalmolin_13Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

TMekeelCommented:
Looks ok to me, but the IP addresses assigned for the VLANs on the 6509 and 4506 need to be different, not the same, ie, 10.110.237.1 and 10.110.237.2.

Also, I assume the router will have an interface with 10.110.237.3 and be the gateway?
I don't think you need the IP addresses on the switches, those would be used as gateway addresses for devices on that switch.  Or they would come in handy if you need to ping them from your lab.  Could be incorrect there, I haven't done it in a while :)
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
TMekeel, you beat me to it.  each VLAN should be a separate network (i.e. 10.110.237.0/24 and 192.168.1.0/24)
]
0
ndalmolin_13Author Commented:
I thought in steps d above, I was just defining which ip subnet vlan 237 was going to use.  Am I incorrect on that?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.