Network adapter settings to isolate vm from host


  1. Posts : 2
    win 7
       #1

    Network adapter settings to isolate vm from host


    What network adapter settings mean vms can communicate with each other but not with host? Thanks
    Vmware Workstation 10
      My Computer


  2. Posts : 11,247
    Windows / Linux : Arch Linux
       #2

    Hi there

    Some sort of Switch / subnet probably required here with firewall settings also perhaps to block communications from the subnet.

    I think this is more of a Networking issue than a VM one itself. The other question - do you still want the HOST to have access to the Internet.

    I've only done this where I've had a SINGLE VM which needed Internet access for a "Dodgy site" --was testing a Virus and so I attached the NIC physically to the VM and disabled networking on the HOST while I was testing.

    However if you need Internet and LAN access on the HOST and you have more than one VM running concurrently I should ask the Network gurus as this is outside my area of expertise. I suspect also you might need two Physical NIC's for this - one for the Host and one for the subnet your VM's are on - but I can't give any more help than that.

    Try asking @Kari -- I'm sure he's done things like that but he uses HYPER-V which is also a good system if you have W10 pro or Enterprise.

    Cheers
    jimbo
      My Computer


  3. Posts : 17,661
    Windows 10 Pro
       #3

    jimbo45 said:
    Try asking @Kari -- I'm sure he's done things like that but he uses HYPER-V which is also a good system if you have W10 pro or Enterprise.
    As I am a huge Hyper-V fan using it exclusively, I have no idea how this is done in VMware. Can't assist OP in any way.

    In Hyper-V it is easy, simply select a private virtual switch in vm settings. Virtual machines using a private switch can only communicate with each other, not with host. Obvious disadvantage is that a vm using private switch has no Internet access, it totally isolates all network traffic only allowing private communication between virtual machines using private switch.
      My Computer


  4. Posts : 11,247
    Windows / Linux : Arch Linux
       #4

    Hi @Kari

    Thanks for the info

    I'm using HYPER-V more these days too -- however I think a similar process can be done with VMware player.

    For running VM's as SERVERS HYPER-V is just fine -- It's a pity there isn't a really stripped down version of W10 to run the HYPER-V system.

    --I've looked at Server 2016 but for a HOME user --you really need to win the Lottery TWICE RUNNING to pay for it (Trial is OK but you don't want to keep re-creating a decently used VM every month !!!).

    Cheers
    jimbo
      My Computer


  5. Posts : 2
    win 7
    Thread Starter
       #5

    jimbo45 said:
    Hi there

    Some sort of Switch / subnet probably required here with firewall settings also perhaps to block communications from the subnet.

    I think this is more of a Networking issue than a VM one itself. The other question - do you still want the HOST to have access to the Internet.

    I've only done this where I've had a SINGLE VM which needed Internet access for a "Dodgy site" --was testing a Virus and so I attached the NIC physically to the VM and disabled networking on the HOST while I was testing.

    However if you need Internet and LAN access on the HOST and you have more than one VM running concurrently I should ask the Network gurus as this is outside my area of expertise. I suspect also you might need two Physical NIC's for this - one for the Host and one for the subnet your VM's are on - but I can't give any more help than that.

    Try asking @Kari -- I'm sure he's done things like that but he uses HYPER-V which is also a good system if you have W10 pro or Enterprise.

    Cheers
    jimbo
    the physical host needs to be on internet yes. vms don't. thanks
      My Computer


  6. Posts : 11,247
    Windows / Linux : Arch Linux
       #6

    davidb said:
    the physical host needs to be on internet yes. vms don't. thanks
    Hi there @davidb

    I think the two NIC's would be the easiest solution -- physical one for HOST and either another one or a Virtual NIC which allows LAN access but not outside access

    I should google a bit more for this as I'm not experienced with this --I might have a play later as I've an old HP GEN 8 microserver which I'm using as a NAS that has two physical NIC's in it. I can easily create two Windows VM's on it and test connecting to a VM on a different Laptop. I can run VMware workstation for Linux on this - easy enough to do so it's the same as running it on Windows.

    Whether I need a physical switch or not as well I don't know -- however I'll have a go this weekend after FIFA World cup Football qualifier -- should be a great match Croatia vs Iceland (nr 1 and 2 in the group) .

    Will see what happens

    Setup HOST 1 Linux CENTOS 7 with VM 1 W10 X64 pro and VM 2 Win XP
    Host 2 Windows 10 x-64 Pro, VM3 W7 x-64 ultimate.

    Test1 -- see if VM1 /VM2 can communicate with each other but not the hosts

    Test 2 see if VM3 can communicate with VM1/VM2 and not the hosts.

    I think the problem will be in isolating VM3 from the hosts as the laptop only has a single NIC (built in Wireless card).

    This seems to be a good starting point

    https://kb.vmware.com/selfservice/mi...rnalId=1020480

    Note though I'm not sure if you can do this on VMWARE PLAYER (Free version). I've got VMWARE WORKSTATION.

    Cheers
    jimbo
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 15:04.
Find Us




Windows 10 Forums