Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Virtual PC / May 2008

Tip: Looking for answers? Try searching our database.

vpc and network setup

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Mike Read - 08 May 2008 18:58 GMT
First off I must say I am a developer and not a network technician so my
networking knowledge is limited.

I have convinced my organization to let me set up my own test development
domain with Active Directory.  Our Development staff consists of 3
developers, each with one physical computer, plus we have 4 physical
computers - one running virtual server split into 3 seperate servers.   Our
goal is to isolate ourselves from the rest of the organization for testing
and development.   Also this would allow us to create users at will and
change settings without affecting the main organization and take some of the
pressure off network guys when we need changes to test.

Each developer plan to load several different VPC's on their computer, each
with a different test environment or development environment.  Rarely will
more than one VPC instance be running on a computer at a time.

Our network is set up to use static IP's.  No chance of changing this due to
some legacy applications that prevent using DHCP.

Our network guys suggested that we leave our host computer connnected to the
main domain so we can still access production servers etc, and then set up
each VPC to connect to our development domain.     I am hoping to isolate
our development vpc to the development domain to help ensure we don't
actually publish or connect to a production environment or a end user
connect to a development server.    I am still in my planning stage for
this, hopefully this is possible.

My problem comes in how to set up each of the VPC's.   I would hate to have
to assign each a static IP address, this would not help reduce the work load
on the network guys.

Does anyone have any suggestions on what would be the best way to set up our
environment?

Thank you,
Mike
Bill Grant - 09 May 2008 01:22 GMT
As long as your network is isolated from the rest of the corporate
network, you can certainly run your own DHCP service. DHCP works by the
client broadcasting "on the wire". As long as you have a router between your
developer network and the corporate LAN the corporate network will never see
these broadcasts.

   I would look at having your developer network running on its own LAN
separated from the coporate LAN by a router/firewall. This would allow the
developer network to access the corporate LAN and set up connections to
corporate servers, but not vice versa. Even a simple NAT router would do the
job.

   Basially your developer network would run on its own network with its
own IP subnet. The domain controller would provide DNS and DHCP for this
network. NAT would allow access to corporate servers. The local DNS service
would be set to forward to a corporate DNS server to provide name resolution
for corporate machines. This is necessary because the domain machines must
use the local DNS for AD to work properly.

   As far as the virtual machines are concerned, they can run as if they
were additional "real" machines on your local LAN (if that is what you want)
and get their network config from DHCP.

> First off I must say I am a developer and not a network technician so my
> networking knowledge is limited.
[quoted text clipped - 32 lines]
> Thank you,
> Mike
I Green - 13 May 2008 20:05 GMT
Consiering Virtual PC 2007 uses NAT for each VM, then if the LAN is using NAT
there could be several layers to contend with in a given topology. You
servers may be bound to to a hard coded IP or adapter so they mey be
provisioned differently.

> First off I must say I am a developer and not a network technician so my
> networking knowledge is limited.
[quoted text clipped - 32 lines]
> Thank you,
> Mike
Robert Comer - 13 May 2008 20:11 GMT
>Consiering Virtual PC 2007 uses NAT for each VM,

Virtual PC can use NAT, but it's not the only choice (or even the
default)...

Signature

Bob Comer

>Consiering Virtual PC 2007 uses NAT for each VM, then if the LAN is using NAT
>there could be several layers to contend with in a given topology. You
[quoted text clipped - 37 lines]
>> Thank you,
>> Mike
docbrown237 - 13 May 2008 20:35 GMT
Mike, If I understand your issues correctly, Keep in mind several points:

1.  Unless you are planning to deploy a high number of VPC's in your lab,  
you may now want to dismiss using private IP addresses, statically assigned
to each VPC in the same subnet.  If your network people are worth their salt,
as most are, private IP traffic is generally blocked from assessing the
production domain resources anyway.  Although DHCP makes IP management
easier, its management overhead makes it a bit impractical when designing a
network with few machines.  Besides, looking at it from the least common
denominator, you mentioned that your domain will incorporate devices that
cannot be setup as DHCP clients anyway.

2.  Suggest to the network people that you would prefer having a router or
switch between the host computer and your development domain, then have them
configure the router for what either MAC filtering or Network Address
Translation, or NAT.  NAT will translate your private IP addresses from the
development local area network (LAN) to allow inbound traffic ( such as
antivirus updates or Internet/intranet access) to pass through without
jeopardizing the security of the production domain.

3.  Speaking of security, network administrators would be more apt to
consider your test lab as being outside of the demilitarized zone or DMZ,
designating your test lab as being prone to internal attacks by virtue of
errant software testing.  Check with them to see if company policies exists
that prohibit setting up your host machine to share internet connections as
suggested.  Past experiences working with labs that you describe normally
have provisions that assign IP addresses through virtual circuits to client
workstations where the MAC address of the communications hardware is known.  
Simply adding another NIC to your host machine to accommodate your
development domain router and other devices may be a violation of policy, so
plan to sit down with a net admin rep and present a plan with diagrams if
necessary, explaining the overall goals and objectives of your development
domain.

I know these may be general suggestions to your issues, but I hope they help.

> First off I must say I am a developer and not a network technician so my
> networking knowledge is limited.
[quoted text clipped - 32 lines]
> Thank you,
> Mike
docbrown237 - 13 May 2008 21:34 GMT
Sorry.  in point 1, I meant 'you may not' instead of 'you may now.

> Mike, If I understand your issues correctly, Keep in mind several points:
>
[quoted text clipped - 68 lines]
> > Thank you,
> > Mike
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.