Link to home
Start Free TrialLog in
Avatar of joshhough
joshhoughFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Host unable to ping VM

I have a Server 2016 Essentials Server. It works, it can see the internet, has DNS installed and all is fine. On this i have Hyper-V installed, and a Server 2016 Standard server. However, from the Essentials server (the host) i can not ping the VM. However, the VM can ping the host. Am i missing something
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

If you are running the essentials role on the host (which acts as a DC) then you cannot run Hyper-V as well.  That is unsupported and the two roles *do* have known conflicts.  The only proper way to do this is...since you have a Standard license (as evidenced by your standard VM), run THAT as the host (and don't install *ANY* roles) then run an essentials VM, and other VMs for your other needs.

Never run stuff on the host.  Has been a Hyper-V cardinal rule since Hyper-V launched in 2008.
Avatar of joshhough

ASKER

Thanks for that. That's interesting as I have the same setup working with another customer on 2012. Never seen this issue before though. The host can resolve the IP of the server, just cant ping the IP . It's so that i can have RDS setup with the standard server acting as the Terminal Server basically.
ASKER CERTIFIED SOLUTION
Avatar of Shaun Vermaak
Shaun Vermaak
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Ha! Disabling windows firewall on the VM means ping now works fine! Simple one to overlook.

Josh
If it's that the problem is because windows server 2012 and up, by default has ping blocked.
You just need to create a Custom rule to allow ICMP package over the 3 networks (public, domain and private) if you are in a domain environment or 2 networks (public and private) if you are in a workgroup.

And re-enable the firewall :)
Agree that you need to only allow what is required and re-enabled the firewall

This might be useful
https://www.experts-exchange.com/articles/31687/Windows-Firewall-as-Code.html
"You just need to create a Custom rule to allow ICMP package over the 3 networks" - no, the rules are there, already, but disabled.