Link to home
Start Free TrialLog in
Avatar of Akulsh
AkulshFlag for India

asked on

Ports needed between VMs and vCenter server?

Our Security dept. is making us separate VMs in different subnets (vLANs) because some of them need to be accessed from a few outside IPs on one port. Since vCenter server itself is a VM, what ports, if any, would need to be opened between its vLAN and vLANs of other VMs?

I have looked thru VMware KB #1012382 - "TCP and UDP Ports required to access VMware vCenter Server, VMware ESXi and ESX hosts, and other network components", and also PDF file vsphere-esxi-vcenter-server-55-security-guide.pdf.

However they seem to be talking about ports between vCenter client and -- vCenter server & ESXi hosts. Does vCenter need to have ports open between itself and other VMs, for example port 8000 for vMotion? Thanks.
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

vCenter Server needs ports open between vCenter Server and Hosts, Hosts and vCenter Server.

The VMs are hosted on ESXi hosts, vCenter Server is just a management server and comunicates with the ESXi Hosts.

VMs and vCenter Server need no communication ports.
Avatar of Akulsh

ASKER

So the subnets of other VMs can be totally isolated  from subnets of ESXi hosts and vCenter server? Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Akulsh

ASKER

Thanks.