topic Re: vCenter NAT in VMware vCenter™ Discussions

vCenter NAT

Punkgeek — Thu, 19 Oct 2023 11:34:23 GMT

As I understand it, vCenter does not support the NAT method. I need to connect approximately 20 ESXi hosts from different countries to the vCenter, and each ESXi host has one public IP address. I could only find two methods to solve this problem:

Moving the vCenter over the network and assigning it a public IP address.
Installing a router as a virtual machine on each ESXi host to access the ESXi hosts over the private network (since I do not have access to the physical router of the ESXi hosts).

Both of these solutions come with numerous difficulties and potential security issues. Do you have any other suggestions for this challenge?

Re: vCenter NAT

MC1903 — Thu, 19 Oct 2023 12:47:14 GMT

Are you aware of "ESXiArgs Ransomware". You really do not want to put your ESXi hosts on the public Internet.

Re: vCenter NAT

Punkgeek — Thu, 19 Oct 2023 12:51:29 GMT

I don't want to put the ESXi host over the internet, but the problem is that I don't have access to the physical router.

If I configure a router as a VM and disable the ESXi host public IP address, I won't be able to access the ESXi host if the router VM fails.