VMs Isolation...

[Orphen]

Hi , I'm new here,

I just installed and configured an ESXI 8 server, two nicks, one used for management, and the other for the VMs,

The nicks are connected to 2 different firewalls, each with a different lan.

If I connect to the LAN that refers to the nic that manages the VMs, I see them active from the firewall (ip and MAC recognized), but if I try to ping them or connect to them, whether unix (ssh) or windows (rdp), I can't reach them.

Furthermore, VMs do not see each other.

What could be the problem?, can someone help me?

Thanks

Bye

[pcgeek2009]

Did you create separate virtual switches for each network and have the appropriate uplink added to it? It sounds like an issue with the virtual switches. 

[Orphen]

Hi, thanks for reply.
Could be, but I don't see error. Below the snap of the switch and nick. Do you see any issue in the configuration parameters?

[StephenMoll]

Are the VMs Windows?

If so you will need to enable ICMP response in order for the VMs to respond to pings.

In Firewall config advanced, inbound rules.

"File and Printer Sharing (Echo Request - ICMPv4-in)" and/or "File and Printer Sharing (Echo Request - ICMPv6-in)", make sure the applicable rules are enabled. They're usually disabled by default.

[Orphen]

Hi Stephen,

Thanks for the reply.

The VMS are  almost all UNIX, and the firewall, on one of those( centos), is disabled, for connectivity testing.

Kind regards,

[Bilal041987]

Can those VMs ping the IP configured on the LAN of the firewall that manages VM? If yes, there might be a rule/policy configured on the firewall that blocks traffic on the same LAN.

Is ESXi able to reach the firewall? you can check that using ping and to do this on ESXi, please use following command.

vmkping -I vmk1 <IP Address configured on LAN>

Example: vmkping -I vmk1 192.168.0.1

[Orphen]

Hi,

 tanks for support.

below the result:

[root@localhost:~] vmkping -I vmk1 -S stack_infra  172.16.24.1
PING 172.16.24.1 (172.16.24.1): 56 data bytes
64 bytes from 172.16.24.1: icmp_seq=0 ttl=64 time=0.709 ms
64 bytes from 172.16.24.1: icmp_seq=1 ttl=64 time=0.452 ms
64 bytes from 172.16.24.1: icmp_seq=2 ttl=64 time=0.377 ms

--- 172.16.24.1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.377/0.513/0.709 ms

Kind Regards

[Bilal041987]

How did you setup interface on firewall? like L3, Sub Interface or VLAN Interface?