Solved

Ports needed between VMs and vCenter server?

Posted on 2015-01-13
4
268 Views
Last Modified: 2015-01-13
Our Security dept. is making us separate VMs in different subnets (vLANs) because some of them need to be accessed from a few outside IPs on one port. Since vCenter server itself is a VM, what ports, if any, would need to be opened between its vLAN and vLANs of other VMs?

I have looked thru VMware KB #1012382 - "TCP and UDP Ports required to access VMware vCenter Server, VMware ESXi and ESX hosts, and other network components", and also PDF file vsphere-esxi-vcenter-server-55-security-guide.pdf.

However they seem to be talking about ports between vCenter client and -- vCenter server & ESXi hosts. Does vCenter need to have ports open between itself and other VMs, for example port 8000 for vMotion? Thanks.
0
Comment
Question by:Akulsh
  • 2
  • 2
4 Comments
 
LVL 118
ID: 40547562
vCenter Server needs ports open between vCenter Server and Hosts, Hosts and vCenter Server.

The VMs are hosted on ESXi hosts, vCenter Server is just a management server and comunicates with the ESXi Hosts.

VMs and vCenter Server need no communication ports.
0
 
LVL 3

Author Comment

by:Akulsh
ID: 40547617
So the subnets of other VMs can be totally isolated  from subnets of ESXi hosts and vCenter server? Thanks.
0
 
LVL 118

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE) earned 500 total points
ID: 40547715
That is correct, they are just Hosting the VMs, they do not interact with them, and if they do it's via VMware Tools and the Hosts.
0
 
LVL 3

Author Closing Comment

by:Akulsh
ID: 40547761
Thanks.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If we need to check who deleted a Virtual Machine from our vCenter. Looking this task in logs can be painful and spend lot of time, so the best way to check this is in the vCenter DB. Just connect to vCenter DB(default DB should be VCDB and using…
This is an issue that we can get adding / removing permissions in the vCSA 6.0. We can also have issues searching for users / groups in the AD (using your identify sources). This is how one of the ways to handle this issues and fix it.
Teach the user how to use create log bundles for vCenter Server or ESXi hosts Open vSphere Web Client: Generate vCenter Server and ESXi host log bundle:  Open vCenter Server Appliance Web Management interface and generate log bundle: Open vCenter Se…
This video shows you how to use a vSphere client to connect to your ESX host as the root user. Demonstrates the basic connection of bypassing certification set up. Demonstrates how to access the traditional view to begin managing your virtual mac…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now