• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Building an isolated environment for testing

S

Sp33dFr33k

2[H]4U
Joined
Apr 20, 2002
Messages
2,481
We currently have a 5 host ESXi environment hosting all our production servers. vSphere 5.1 for the hosts and vCenter Server.

Was wondering how complicated it would be to set this up. What I wanted to do is create a test lab inside of our production environment.

1. Test servers would consist of AD server and two test servers
2. Would have to be 100% isolated from the rest of the environment
3. Would need internet access through out firewall for Windows updates and nothing else
4. Would need to be able to RDP to the test servers from our VPN connection

We don't have access to the FW or the switches, so network team would be responsible for that portion. We do manage the VMware network.
 
I have an isolated lab set up inside of my dedicated lab at work. Right now the entire lab infrastructure is completely physically separated from the production environment. Only way in is by connecting to the specific port that is connected to the dedicated lab switch or by OpenVPN into the pfsense VM. Internet access is provided by the pfsense VM deployed on the lab environment that has a WAN portgroup that is connected to our switch dedicated for our ISP WAN connections.

What I then did to provide an isolated test environment inside of the lab environment was create another portgroup on the ESX hosts with a dedicated VLAN. Then added another vNIC to the pfsense VM attached to that new portgroup, so now it has LAN, WAN, LAB vNICs. Set up the interface on that LAB interface in pfsense and create firewall rules to only allow RDP through. In your case you'll have to add extra rules to allow win updates through as well since you'l be directing those through your production network to the outside world.

If you plan on utilizing your production firewall to isolate it you could just create another portgroup/VLAN and have the default gateway point to your production firewall and set the rules there.
 
You must log in or register to reply here.
Back
Top