VMWare help

ruffneck · 4 Dec 2006 at 11:05

Scenario:

I have a server with VMWare Server installed, I want to give the VM's internet access, but I don't want the VM's being able to interfere with the companys network. Im going to be setting up DC,s DNS, DHCP the works and sending that lot out on our exisiting network would, well you know...

how could one set this up?

oddjob62 · 4 Dec 2006 at 11:29

Only thing you'll have to worry about is DHCP, as that will interfere with the main network if you attach it.

Can you set up your VM server on a DMZ, or behind a router (ie on a seperate broadcast domain)?

Either that or disable DHCP and set up your test network with static addresses.

ruffneck · 4 Dec 2006 at 11:34

Hi Oddjob, I totally forgot about the DMZ port on our Sonicwall, this should be suffciant to keep the two networks seperated...

Thanks a lot

ruffneck · 4 Dec 2006 at 16:23

except I have no spare public ip's left

,

Back to no DMZ;

Your saying that I can create a seperate network with DC,s, DNS, Trusts ISA etc and the only thing that will affect the hosts network will be DHCP packets, which I can disable

Providing that the virtual network is on a different ip range and is using different names?

ruffneck · 5 Dec 2006 at 09:14

bump

wesley · 5 Dec 2006 at 09:46

use host only

ruffneck · 5 Dec 2006 at 09:53

if I use host only, there will be no internet access for the VM's?

wesley · 5 Dec 2006 at 10:33

if i remmeber right, yes i had internet on vmware with host only

ruffneck · 5 Dec 2006 at 10:56

care to explain how?

oddjob62 · 5 Dec 2006 at 14:00

ruffneck said:
except I have no spare public ip's left ,

Back to no DMZ;

Your saying that I can create a seperate network with DC,s, DNS, Trusts ISA etc and the only thing that will affect the hosts network will be DHCP packets, which I can disable

Providing that the virtual network is on a different ip range and is using different names?

Yes... dhcp is the only thing that will effect the other network. If you have it enabled, it's possible for PCs on the network to pick up an IP from the test DHCP server, and as you can imagine this can cause issues.

Everything else can sit on the same network without any issue.

wesley · 5 Dec 2006 at 14:11

ruffneck · 5 Dec 2006 at 14:54

lol wesley, I know how to set the vm's to host only,

I was wondering how they would be able to access the internet in host only mode...

ruffneck · 5 Dec 2006 at 14:56

it doesn't matter now, my test platform includes ISA 2k6 so used that to seperate the two networks

ISA VM has two network cards one host only, one NAT. NAT is external, host only internal yadda yadda yadda you get the idea.

anyway it worked

RikWebb · 5 Dec 2006 at 22:26

You could set one of the machines as a gateway to the 'real' network, and only allow port 80 through!

ie. use one machine as a gateway, containing two vnic's one on the v network and one attached to the outside world. Bridge the nic's on the vmachine and only allow port 80 through.

You could even create a virtual ISA server ??!!

Rik

OOOPS - how did I not spot the last post ?? -- Sorry