ESX host in a DMZ (Full Version)

All Forums >> [VMware Virtualization] >> General



Message

DHVMAdmin -> ESX host in a DMZ (13.Jan.2009 3:13:12 PM)

I have an ESX 3.5 host and placed it in a DMZ. No virtual machines created on it as of yet. I then added it to the virtual center inorder to manage it and the host will show in the virtual center but will show as disconnected. Has anyone successfully made this setup work?



BoldPhoenix -> RE: ESX host in a DMZ (13.Jan.2009 4:16:30 PM)

We have this scenario currently, and your problem has to do with closed ports. The following ports need to be open for Virtual Center and your ESX servers and Virtual Center Clients:

22 - SSH and SCP
443 - Default Port for Virtual Center Web Access

902 - Virtual Center access and for Virtual Machines console
903 - Virtual Center access and for Virtual Machines console
905 - Virtual Center Client access to Virtual Center
8443 - VMWare SDK Port
 
Typically these are all TCP ports, so UDP won't be required. The ports do need to be open in both directions for traffic to flow.



DHVMAdmin -> RE: ESX host in a DMZ (15.Jan.2009 12:01:40 PM)

Thanks for the pointers. Some of what you stated I did not have set up but now do, but the same issue is still there. Would you have any idea what I could be missing yet? I am able to add it to the virtual center without any issue but it appears that the return path is what I may have incorrect.



jiambor -> RE: ESX host in a DMZ (23.Jan.2009 8:37:40 AM)

How many NICs are on the ESX server?  I would think that you would rather want to put the service console inside the firewall and then hook a another NIC up into your DMZ to a vswitch.  This would insure security for your ESX system and provide DMZ access to your VMs.



Page: [1]