No Internet access on some VMs

[MyWorkspace]

Hi,

just a question. I have a vswitch with VLAN 1010 for example. There are 2 working NICs connected. In this VLAN 1010 are 10 VMs, 6 with Internet access and 4 without access. All VMs are able to ping the same Gateway. The IP configuration on the VM are the same (not the IP Address). Are there any troubleshooting steps I can do?

Thx..

Andreas

[Linjo]

If they can ping the gateway it should be fine. How is the IP adress assigned? DHCP or Manual?

[MyWorkspace]

It's manual assigned.

[a_p_]

Does the name resolution work properly, i.e. did you assign the correct DNS server addresses?

Run e.g. nslookup vmware.com. to see whether the name can be resolved to the correct IP address.

André

[Abhilash Basavarajaiah]

Have you checked the OS firewall? If it's enabled then try disabling it and connecting to internet.

[tomtom901]

Is there any kind of firewall in place that does a (static) NAT or PAT towards the outside interface? Assuming you've configured every VM manual, I assume you have used the same DNS servers for every VM in place. Your best bet would be to check the device that is the default gateway for that subnet, and go from there.

Also, please share some more info about the networking configuration:

• Are the IP adresses private or public (assuming private, which would create the need for a firewall using NAT or PAT)?
• Do you host the default gateway yourself? If not, check with the party managing this device
• Are the VM's in the same IP subnet (assuming they are)
• Can the VM's ping each other?

Tom

[MyWorkspace]

Hi,

no Firewall enabled on VMs, private address range, same range, same subnet, , no name resolution required, because I ping 8.8.8.8 on all vm's, 6 get a reply, 4 not. pinging between the VMs is working, all can ping the Gateway, Tracert stops at the Gateway on the non working VMs

[Linjo]

Then its the gateway...  Check the NAT-table on the gateway.

Btw, did you verify the subnet settings?

[tomtom901]

As mentioned before, check the gateway device. Because you use a private range there needs to be some kind of NAT or PAT translation from the private range towards a public range. Or maybe an ACL is in place to block traffic from the 4 that are not working. It could be a legacy firewall rule that now conflicts with your setup.

Also check if the VM's can ping each other (see my post 2 posts ago) which checks if the subnetmask is set correct.

[Abhilash Basavarajaiah]

Is there like a limit of devices that can connect to internet from your provider's side?

Are you sure the NIC on all these 4 machines are functional and they have picked up an ip?

can you change the Ip and check. or maybe change the NIC card and check?

[a_p_]

What guest operating systems do you run?

With Windows, run ipconfig /all and route print and compare the results to ensure the configuration is correct (i.e. no typos in e.g. the subnet mask).

What kind of router/gateway do you use? How is the ESXi host connected to the router/gateway?

André

[King_Robert]

Gateway should be the router correct, but dns servers should be the isp provider....can the VM ping the router?, if so try 202.27.158.40 and 202.27.156.72 if you absolutely need static addressing

so might need to check firwall on the host also!