Home / server / Questions / 924314
Accepted
Sarah Weinberger
Asked: 2018-08-01 09:48:44 +0800 CST

Opening a Hyper-V VM to the Outside World

  • 772

I created a Windows Server 2016 virtual server using Hyper-V Manager on the host. I have several virtual machines. The host computer has 2 network connections to our main switch: a dual bonded 10G connection and a dual bonded 1G connection. Between the switch and the outside world is our firewall and the router. Our internal network should not be open or accessible, out host server, or any other virtual computer running on the host. We have a static IP and only need one port open to our VM.

I saw this SF question.

I installed RRAS on the host, however the accepted answer was a bit confusing about what to do next. Yes, I know that I need to configure one of the interfaces as a NAT in RRAS, which I did (1 GB). I also need to open up the appropriate port.

  1. I only see the 10 GB connection in the drop down list, not the 1G.

  2. The IP address of the VM client is the same as the host. How do I assign a unique IP? Furthermore, I presume that I should place the VM on a separate sub-net.

  3. As we are talking about a VM off of the host, what changes need to be made on the switch and on the firewall?

  4. Anything else?

Hyper-V Manager VM Network Settings

Here is the RRAS, not that I really configured anything yet.

RRAS

UPDATE

I am leaving the original question for a paper trail of sorts. The question thanks to joeqwerty should have been phrased as such:

What changes do I need to do, if any, on the VM or the host to get HTTP/HTTPS REST communication flowing based on that port to that VM?

I guess that I do not need any unique IP or anything special. I just need port 9000 traffic to flow (route) to the VM and only to the VM. As such, what changes need to be made and where?

windows

1 Answers

  1. Best Answer

    I only see the 10 GB connection in the drop down list, not the 1G.

    Did you create a Hyper-V Virtual Switch with the 1GB NIC? If not, that's why you don't see it. You need to create a Hyper-V Virtual Switch with the 1GB NIC.

    The IP address of the VM client is the same as the host. How do I assign a unique IP? Furthermore, I presume that I should place the VM on a separate sub-net.

    You need to assign the VM a unique ip address. You do that in the OS of the VM. You do this the same way you do in a physical machine. Additionally, you probably don't need to place the VM in a different subnet, but only you know how your network is configured so we can't answer that for you.

    As we are talking about a VM off of the host, what changes need to be made on the switch and on the firewall?

    You probably don't need to make any changes on your switch, but again, we don't know your network so only you can answer that. As for the firewall, you'll need a NAT statement and a firewall rule for the VM and for the traffic you want to "forward" to the VM from the outside.

    • 1