ASP Developer Network - Brought to you by Steve Radich and BitShop, Inc. - http://www.bitshop.com

ASPDeveloper

ASPDeveloper.Net / VirtualServerFAQ.COM

Make sure you go to our home page for:

* Virtual Server 2005 FAQ
* ASP.Net 2.0 Information
* ASP.Net 2.0 Streaming Tutorials
* ASP.Net 2.0 HTML based Tutorials

Made possible by Business Internet Technology Shop (BitShop)

Virtual Server 2005

Recent Virtual Server 2005 posts

* How To: Windows Performance Monitor Virtual Switch Port instance ID to Virtual NIC or VM
* Hyper-V Final Release Update
* Hyper-V cluster in Server 2008 questions
* Hyper-V 2nd NIC
* Host machine loses network configuration
* Virtualization and disaster recovery has me confussed...
* German Guest OS
* How to unistall System Center Virtual Machine Manager.
* SBS 2003
* Hyper-V Questions
* VSS, Hyper-V and slanaccel.exe
* Virtual Server 2005 R2 Issue
* Multiple remote connections?
* Hyper-V - Hardware compatibility?
* KB951634
* Hyper-V and memory consumption
* Go back to virtual server 2005
* Clustering VM"s
* PSTools psexec
* Problem Adding Server Hosts to SCVMM

Add Solution

DMZ/Inernal LAN Setup

Source: microsoft.public.virtualserver
Sent: 08/11/2008
From: bitter32
Message:

Hi All,

I'm trying to determine if I can securely setup a single Host server
(Virtual Server or Hyper-V) hosting two VMs in the following way:

1. One VM is connected to Public DMZ
2. One VM is connected to internal network.
3. Each VM will have dedicated physical network connection.
4. Cisco Firewall rules will allow communication between DMZ and Internal
server.
5. Maximize security. How do you protect internal network if DMZ VM is
compromised?
6. Host server does not need to communicate with either VM, but VM
administration is still required from the host.

Would a 3 nic host server be required?
How would I cofingure each network connection?

Thanks!

Post Reply | This is Spam! | Mark as Spam

Related Messages

Re: DMZ/Inernal LAN Setup

Sent: 08/12/2008
From: "Bill Grant" <not.available@online>
Message:

"bitter32" <(email address - cut out)> wrote in message
news:(email address - cut out)...

What would you use a third NIC for? I cannot think of any reason unless
you want to administer the host remotely.

If you are using a Cisco you must have a physical DMZ and private LAN. In
Hyper-V you would connect one NIC in the host to the DMZ, create a virtual
switch linked to this NIC and connect one vm to the network.

You would connect another NIC in the host to the internal network, create
a virtual switch and connect the other vm to that network. The situation
with Virtual Server would be similar but you do not need to create the
virtual switches. Virtual Server will automatically set up a virtual network
for each NIC in the host.

If your firewall is compromised, there is nothing you can do about it by
changing things on this server. Whether the server is a physical or virtual
machine makes no difference to the way networking operates. If a network is
compromised, all machines on that network are compromised.

Show quoted text

> Hi All,
>
> I'm trying to determine if I can securely setup a single Host server
> (Virtual Server or Hyper-V) hosting two VMs in the following way:
>
> 1. One VM is connected to Public DMZ
> 2. One VM is connected to internal network.
> 3. Each VM will have dedicated physical network connection.
> 4. Cisco Firewall rules will allow communication between DMZ and Internal
> server.
> 5. Maximize security. How do you protect internal network if DMZ VM is
> compromised?
> 6. Host server does not need to communicate with either VM, but VM
> administration is still required from the host.
>
> Would a 3 nic host server be required?
> How would I cofingure each network connection?
>
> Thanks!

Post Reply | This is Spam! | Mark as Spam

Other groups

Virtual PC (Mac)(3592)	Virtual PC(12844)	Virtual PC (French)(496)
Virtual Server 2005(6245)

Our Sponsors

Virtual Server 2005 Info Here!
http://www.aspdeveloper.net

Wiki

Blogs

Articles

Image galleries

File galleries

Forums

Maps

Directories

ASP Developer Network (since 1996) - Brought to you by Steve Radich and BitShop, Inc. - http://www.bitshop.com
Copyright © 1997-2005 by BitShop, Inc. All Rights Reserved.
No content may be reproduced in any form without written permission from BitShop, Inc.
We will be honored to assist with reproduction rights on our material if you contact us.
We also can provide print articles for your magazine, private training seminars at your site, and conference presentations.
Thank you for visiting. Please bookmark our site if you found it useful!
If you wish to make a donation it will help further the development of these free resources: