Our Security dept. is making us separate VMs in different subnets (vLANs) because some of them need to be accessed from a few outside IPs on one port. Since vCenter server itself is a VM, what ports, if any, would need to be opened between its vLAN and vLANs of other VMs?
I have looked thru VMware KB #1012382 - "TCP and UDP Ports required to access VMware vCenter Server, VMware ESXi and ESX hosts, and other network components", and also PDF file vsphere-esxi-vcenter-server-55-security-guide.pdf.
However they seem to be talking about ports between vCenter client and -- vCenter server & ESXi hosts. Does vCenter need to have ports open between itself and other VMs, for example port 8000 for vMotion? Thanks.