Hello,
If the ESX Server ONLY has DMZ VMs on it, which is recommended from a security perspective and either using local, iSCSI-HBA, or FC-HBA SAN based storage, then you can use:
2 pNIC for SC/HA
2 pNIC for vMotion/DRS
2 pNIC for DMZ
If the ESX Server host DMZ and Production VMs on it, which is NOT recommended from a security perspective and either using local, iSCSI-HBA, or FC-HBA/SAN based storage, then you can use:
1 pNIC for SC/HA backup device is vMotion pNIC
1 pNIC for vMotion/DRS backup device is SC pNIC
2 pNIC for DMZ
2 pNIC for Production
If the ESX Server ONLY has DMZ VMs on it, which is recommended from a security perspective and either using iSCSI or NFS based storage, then you can use:
1 pNIC for SC/HA backup device is vMotion pNIC
1 pNIC for vMotion/DRS backup device is SC pNIC
2 pNIC for Storage Network
2 pNIC for DMZ
If the ESX Server has DMZ and Production VMs on it, which is recommended from a security perspective and either using iSCSI or NFS based storage, then you can use:
1 pNIC for SC/HA backup device is vMotion pNIC
1 pNIC for vMotion/DRS backup device is SC pNIC
2 pNIC for Storage Network
1 pNIC for Production (no redundancy)
1 pNIC for DMZ Network (no redundancy)
The last 3 configurations are really not 100% secure and I would try not to use them at all.
For #2 you should try not to ever MIX DMZ and Production VMs on the Same ESX Server as there is no security to prevent a Production VM from appearing on the DMZ. This could be inadvertent or a purposeful change. In addition, in a failure state, it is possible for the SC to see all vMotion traffic, and this could be an issue if the ESX admin does not really have privs on the hosts of the server. You should have 8 pNIC for this
For #3 you have the same issue where the SC could possibly see vMotion traffic. You need 8 pNIC for this.
For #4 you have the same issue and the fact that there is no real redundancy for the DMZ/Production network You should have 10 pNIC for this configuration.
Outside the first configuration I may go with the 3rd configuration with only 6 pNICs but never #2 or #4.... Too much risk.
Best regards,
Edward L. Haletky
VMware Communities User Moderator
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education. As well as the Virtualization Wiki at
http://www.astroarch.com/wiki/index.php/Virtualization
