+ Post New Thread
Results 1 to 8 of 8
How do you do....it? Thread, VMWare ESXi networking question in Technical; Going a bit cross eyed from reading manuals - so hopefully someone can short cut through my stupidity... What I ...
  1. #1

    SpuffMonkey's Avatar
    Join Date
    Jul 2005
    Posts
    2,240
    Thank Post
    55
    Thanked 278 Times in 186 Posts
    Rep Power
    134

    VMWare ESXi networking question

    Going a bit cross eyed from reading manuals - so hopefully someone can short cut through my stupidity...

    What I want to do - set up a 2008/W7 test bed on an old server under ESXi
    What I'm worried about - presumably I need this test bed to be completely seperate from the existing network to avoid any problems with DHCP or DNS etc etc....but...I would like to get internet access through our broadband.

    Any ideas on setting this up would be handy - I imagine VLANs might be needed - but at present I can't change what we have set up.

  2. #2

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,181
    Thank Post
    285
    Thanked 774 Times in 584 Posts
    Rep Power
    336
    Create two virtual switches, one called something like external and one called internal. On the external one you assign one of the physical nics, then build a vm using the firewall product of your choice, connecting the red side to external, green to internal and to use an upstream proxy/gateway pointing to your internet connection firewall.
    You then build you test machines connecting to the internal network and pointing to the firewall for their gateway/proxy.
    Edit: just to clarify, don't assign any physical nics to the internal switch.

  3. #3

    SpuffMonkey's Avatar
    Join Date
    Jul 2005
    Posts
    2,240
    Thank Post
    55
    Thanked 278 Times in 186 Posts
    Rep Power
    134
    Thanks teejay - I'll try & get my head round that...

  4. #4

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,181
    Thank Post
    285
    Thanked 774 Times in 584 Posts
    Rep Power
    336
    A picture may help:


  5. Thanks to teejay from:

    SpuffMonkey (16th March 2011)

  6. #5

    SpuffMonkey's Avatar
    Join Date
    Jul 2005
    Posts
    2,240
    Thank Post
    55
    Thanked 278 Times in 186 Posts
    Rep Power
    134
    Cheers muchly

  7. #6
    chrisbrown's Avatar
    Join Date
    Aug 2010
    Location
    Melbourne, Australia
    Posts
    103
    Thank Post
    2
    Thanked 16 Times in 14 Posts
    Rep Power
    17
    The other option is to send a trunk down to the vSwitch and then use VLANing as you proposed. This would also work, and will not require you to have an extra firewall device running.

  8. #7

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,181
    Thank Post
    285
    Thanked 774 Times in 584 Posts
    Rep Power
    336
    Quote Originally Posted by chrisbrown View Post
    The other option is to send a trunk down to the vSwitch and then use VLANing as you proposed. This would also work, and will not require you to have an extra firewall device running.
    Ok, at some point you've got to connect to the internet, how do you propose to do that? Only way I can think of is to stick an extra nic in the internet firewall and run the test network in a DMZ.

    Edit: you don't need a resource hog Firewall like Forefront TMG to do what I suggested, we use IPCop for this, uses hardly any memory or processor power.
    Last edited by teejay; 16th March 2011 at 09:44 PM.

  9. #8
    chrisbrown's Avatar
    Join Date
    Aug 2010
    Location
    Melbourne, Australia
    Posts
    103
    Thank Post
    2
    Thanked 16 Times in 14 Posts
    Rep Power
    17
    Quote Originally Posted by teejay View Post
    Ok, at some point you've got to connect to the internet, how do you propose to do that? Only way I can think of is to stick an extra nic in the internet firewall and run the test network in a DMZ.

    Edit: you don't need a resource hog Firewall like Forefront TMG to do what I suggested, we use IPCop for this, uses hardly any memory or processor power.
    I'm afraid I don't understand. You create a new VLAN that goes as far as your core routing devices
    VLAN 222, IP range 17.24.20.0/24. Have a route on your router that has a default route out of your network for that VLAN, but will not allow routing between the networks. Simple stuff, really. You don't need a firewall to segregate two LAN segments.

SHARE:
+ Post New Thread

Similar Threads

  1. VMWare ESXi 4 networking?
    By iSteve in forum Thin Client and Virtual Machines
    Replies: 10
    Last Post: 28th May 2010, 11:14 AM
  2. ESXI 4 and Networking
    By jreimer in forum Thin Client and Virtual Machines
    Replies: 3
    Last Post: 27th May 2010, 09:19 AM
  3. VMware ESXi zombie problem: Unable to reset kill or register VM in ESXi 4
    By albertwt in forum Thin Client and Virtual Machines
    Replies: 3
    Last Post: 29th April 2010, 09:55 AM
  4. Ubuntu on ESXi Networking
    By Hightower in forum Thin Client and Virtual Machines
    Replies: 27
    Last Post: 18th December 2009, 02:31 PM
  5. VMWare ESXi
    By jack0w in forum Thin Client and Virtual Machines
    Replies: 10
    Last Post: 17th October 2008, 10:25 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •