Ports needed between VMs and vCenter server?

Our Security dept. is making us separate VMs in different subnets (vLANs) because some of them need to be accessed from a few outside IPs on one port. Since vCenter server itself is a VM, what ports, if any, would need to be opened between its vLAN and vLANs of other VMs?

I have looked thru VMware KB #1012382 - "TCP and UDP Ports required to access VMware vCenter Server, VMware ESXi and ESX hosts, and other network components", and also PDF file vsphere-esxi-vcenter-server-55-security-guide.pdf.

However they seem to be talking about ports between vCenter client and -- vCenter server & ESXi hosts. Does vCenter need to have ports open between itself and other VMs, for example port 8000 for vMotion? Thanks.
LVL 3
AkulshAsked:
Who is Participating?
 
Andrew Hancock (VMware vExpert / EE MVE^2)Connect With a Mentor VMware and Virtualization ConsultantCommented:
That is correct, they are just Hosting the VMs, they do not interact with them, and if they do it's via VMware Tools and the Hosts.
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
vCenter Server needs ports open between vCenter Server and Hosts, Hosts and vCenter Server.

The VMs are hosted on ESXi hosts, vCenter Server is just a management server and comunicates with the ESXi Hosts.

VMs and vCenter Server need no communication ports.
0
 
AkulshAuthor Commented:
So the subnets of other VMs can be totally isolated  from subnets of ESXi hosts and vCenter server? Thanks.
0
 
AkulshAuthor Commented:
Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.