Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Connect internet to VMware vLAN - RRAS

Posted on 2014-03-25
12
Medium Priority
?
773 Views
Last Modified: 2014-04-13
Hi, I have cloned some VMs from our production network 'prod' and have placed the cloned VMs into a private vLAN so they are isoloted and will not interfere with anything in production.

This is working well, however i now have a requirement to download product updates from the web on my cloned VMs - which are in the 'private' vLAN with no web access.

I have spun up a Server 2003 box and installed Routing and Remote Access.

Can someone please walk me through the correct config to use RAS to bridge the 2 vLANs and supply my cloned machines with web access.

prod network 172.16.4.0/22 default gateway 172.16.4.253
private network 172.16.4.0/22

thanks
0
Comment
Question by:fieldj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 3
12 Comments
 
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 39954932
Are the vlans setup in your router? Why can't you just allow Internet from there? What kind of router do you have?
0
 
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 39954937
You cal also attach another nic to your vm that can get out and delete it when you're done
0
 
LVL 62

Expert Comment

by:gheist
ID: 39955216
You can add home router software like openwrt between VLANs..
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:fieldj
ID: 39955530
So the 'private' network is a virtual network which is a replica the 'prod' (production) network.  It is a isolated vLAN.

The Server 2003 box running Routing and Remote Access has a NIC from each vLAN, prod and private.

I want this box to become a gateway between my production 'prod' network and the 'private' network (therefore allowing the cloned VMs placed in the private network vLAN to be identical to those in prod - i.e. I don't want to add a NIC to the cloned VMs)
0
 
LVL 62

Expert Comment

by:gheist
ID: 39955756
NAT as from home router software seems to fullfill update access while not granting unneded access to isolated machines...
0
 

Author Comment

by:fieldj
ID: 39955904
Thanks Gheist, can you explain, add links for software please?
0
 

Author Comment

by:fieldj
ID: 39955953
I found this article, this is pretty much what I am trying to achieve however my VLANs are the same IP range
http://blogs.msdn.com/b/canberrapfe/archive/2013/04/23/routing-traffic-between-subnets-in-your-hyper-v-lab.aspx
0
 
LVL 62

Expert Comment

by:gheist
ID: 39956078
Software download:
http://downloads.openwrt.org/backfire/10.03.1/x86_generic/
It needs two e1000 adapters, and one in "isolated" network will be one that you can use for configuration (like home router setup you know)
Start with beginners guide:
http://wiki.openwrt.org/doc/start
You need to enable NAT and set "isolated" IP address to where gateway was... And use one IP in not isolated network.
That way they all can connect out but nobody can connect in
0
 
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 39956457
If you want something fun and interesting check out pfsense
https://pfsense.org/download/index.html

Not knocking rras, just never used it so I can't really help with that.
0
 

Accepted Solution

by:
fieldj earned 0 total points
ID: 39956585
Sorry I require a Windows based solution
0
 
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 39956648
Microsoft points you here:
http://technet.microsoft.com/en-us/library/dd469630.aspx
Here is a blog with screenshots that uses it to tie wlan to lan, same thing you are doing with vlans
http://shannonbray.wordpress.com/2010/05/25/configuring-rras-for-windows-server-2008-r2/
0
 

Author Closing Comment

by:fieldj
ID: 39997122
When i bridged the connections (NICs in the different vLANs) i got a duplicate IP address on the network.  
I abandoned this approach as the side effects of getting the config wrong causes severe problems on the production network.  I have implemented another solution, which was to present a new default gateway.
Thanks for all your comments
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
In this article, I show you step by step with screenshots to assist you - HOW TO: Deploy and Install the VMware vCenter Server Appliance 6.5 (VCSA 6.5), with some helpful tips along the way.
Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …
Teach the user how to use vSphere Update Manager to update the VMware Tools and virtual machine hardware version Open vSphere Client: Review manual processes for updating VMware Tools and virtual hardware versions: Create a new baseline group in vSp…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question