Creating a seperate network in VMWare that can reach the internet

Posted on 2013-10-09
Medium Priority
Last Modified: 2013-10-16
Hello Experts,
I asked a very similar question the other day, but I have a bit more detail now.  I have been asked to create a test network in our VSphere environment that will be isolated from our production network yet still be able to reach the Internet.  Here is a brief summary of our environment:
1.      Our VM host is running VCenter 5.1
2.      The host has two physical NICs (named vmnic0 and vmnic1)
3.      Vmnic1 connects to our Cisco 6509 on port te3/1.  Port te3/1 is configured as a trunk port.
4.      Our Cisco 6509 connects to our core switch (a Cisco 4506) on port te2/1.  Port te2/1 is configured as a trunk port.
5.      Our core switch connects to our firewall
6.      Our firewall lets traffic out to the internet

Note:  We are not using dynamic trunking protocol

To get this to work, I think I need to do the following steps:
1.      In VCenter (create the vlan on the virtual switch):
a.      Click on our host
b.      Click on the configuration tab
c.      Click on the properties of the virtual switch
d.      On the ports tab, click on the add button
e.      On the connection type screen, click on the “virtual machine” type
f.      For the network label, input: “Test Network”
g.      For the VLAN ID, input: 237
h.      Verify information and click on the finish button
2.      On the Cisco 6509 (create the vlan, assign it a subnet, and allow the new vlan access to the trunk port):
a.      6509> config t
b.      6509# vlan 237
c.      6509# interface vlan 237
d.      6509(config-if)# ip address
e.      6509(config-if)#end
f.      6509# interface te3.1
g.      6509(config-if)# switchport trunk allowed vlan add 237
h.      6509(config-if)# end
i.      6509# wr
3.      On the Cisco 4506 (create the vlan, assign it a subnet, and allow the new vlan access to the trunk port):
a.      4506> config t
b.      4506# vlan 237
c.      4506# interface vlan 237
d.      4506(config-if)# ip address
e.      4506(config-if)#end
f.      4506# interface te2.1
g.      4506(config-if)# switchport trunk allowed vlan add 237
h.      4506(config-if)# end
i.      4506# wr
4.      Create the appropriate rules in the firewall.
My Cisco skills and my VMWare skills are obviously at the rookie-noob level, but I volunteered to try and do this for the learning experience.  My hope is that you VMWare and Cisco experts will take a look at the information above and let me know what I’ve missed (at least on the switch end).

Thanks in advance,
Question by:ndalmolin_13

Accepted Solution

TMekeel earned 2000 total points
ID: 39561157
Looks ok to me, but the IP addresses assigned for the VLANs on the 6509 and 4506 need to be different, not the same, ie, and

Also, I assume the router will have an interface with and be the gateway?
I don't think you need the IP addresses on the switches, those would be used as gateway addresses for devices on that switch.  Or they would come in handy if you need to ping them from your lab.  Could be incorrect there, I haven't done it in a while :)
LVL 25

Expert Comment

by:Mohammed Khawaja
ID: 39561189
TMekeel, you beat me to it.  each VLAN should be a separate network (i.e. and

Author Comment

ID: 39562490
I thought in steps d above, I was just defining which ip subnet vlan 237 was going to use.  Am I incorrect on that?

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

August and September have been big months for VMware—from VMworld last month to our new Course of the Month in VMware Professional - Data Center Virtualization. We reached out to Andrew Hancock, resident VMware vExpert, to have a more in-depth discu…
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
Teach the user how to delpoy the vCenter Server Appliance and how to configure its network settings Deploy OVF: Open VM console and configure networking:
Teach the user how to install log collectors and how to configure ESXi 5.5 for remote logging Open console session and mount vCenter Server installer: Install vSphere Core Dump Collector: Install vSphere Syslog Collector: Open vSphere Client: Config…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question