Can a DMZ Virtual Machine and an Internal Virtual Machine share the same host.
Posted on 2013-11-24
Using Microsoft Server 2012 R2 hyper-v Virtual machines:
Assume a host server running Server2012R2, called HostA.
HostA has two NICs, and has two separate virtual switches, one on each NIC:
Switch1 on NIC1
Switch2 on NIC2
NIC1 is physically wired to a LAN port on the network firewall.
NIC2 is physically wired to a DMZ port on the network firewall.
Next, build 2 Virtual Machines: VM1 and VM2
VM1 has an IP address compatible with the internal LAN and is put on Switch1.
VM2 has a DMZ IP address and is put on Switch2.
Are these two virtual machines, VM1 and VM2, as completely separated from each other as if they were two physical machines with 2 physically distinct network cards?
In other words, and a DMZ VM and an internal VM share the same host if everything is properly configured, or is there some kind of risk I am not thinking of?