Open Connections of Hosts,vCenter and Server Appliance

[faamin01]

We have number of ESXi hosts configured in our environment along with vCenter 5.1, so far ssh is open for all in order to access all host over SSH. although user authentication available but even then the question raise whether bound/restrict to administrators IPs or Network Subnet for security reason or not. Same will be for vCenter Server Appliance.

Also can we make IP level restriction for Vmware Client users, right now anyone can make connection from vSphere cleint to vCenter. please advice

[virtualnobody]

You can limit access by IP addresses for each ESXi host under Configuration -> Security Profile -> Firewall and set "Only allow connections from following networks".

[vThinkBeyondVM · Accepted solution]

Hi Friend,

Plz refer below resources to achieve the same on ESXi

http://www.definit.co.uk/2013/10/vsphere-security-advanced-ssh-configurations/

Restricting Access to the ESXi Host Console - Revisiting Lockdown Mode | VMware vSphere Blog - VMwar...

Restrict vSphere Client Access to IP or Network - ESXi 5 Firewall » The Sysadmins