The RoarinPenguin Techiezone » ips http://techiezone.rottigni.net Notes, hints, tips... in one word: experience! Thu, 26 Jan 2012 03:17:58 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Configuring layer two VM as inline IPS in VMware ESX http://techiezone.rottigni.net/2008/11/configuring-layer-two-vm-as-inline-ips-in-vmware-esx/ http://techiezone.rottigni.net/2008/11/configuring-layer-two-vm-as-inline-ips-in-vmware-esx/#comments Tue, 18 Nov 2008 23:45:22 +0000 RoarinPenguin http://techiezone.rottigni.net/2008/11/configuring-layer-two-vm-as-inline-ips-in-vmware-esx/

To setup properly the portgroups in VMware vSwitching environment, we had to create two portgroups per vSwitch as depicted below:

schema for connecting two vswitch with SG IPS in ESX

Reason for this configuration is that “operative portgroups” where servers and machines are connected should not be in Promiscuous mode to avoid sniffing other machines’ traffic, while portgroups dedicated to IPS inline ports must:

    be configured in promiscuous mode to receive all traffic of the vSwitch they are connected to

    be part of VLAN ID 4095 to “pass” all VLAN IDs to Virtual Machine without any intervention

]]> http://techiezone.rottigni.net/2008/11/configuring-layer-two-vm-as-inline-ips-in-vmware-esx/feed/ 0