Hello,
First I assume you are talking about using vSphere ESX or are currently using ESX.
When you say implementing vlan's are you talking about on the virtual switch or on the physical NIC on the server. I would like for NIC 1 to be connected to the internet and NIC 2 will be connected to our main network.
You have at least 6 networks to worry about here....
1) Service Console
2) VMotion
3) IP Storage
4) Internet
5) Main Network
6) Client Networks
You will most likely need at least 1 pNIC for each network. Some can be joined together some can not be.... Check out http://kensvirtualreality.wordpress.org vSwitch Debate blog or my Topology Blogs to get an idea of some concepts and best practices for setting up virtual networking.
What I would do is to use virtual firewalls to govern what each customer can reach. You do not customer A to reach customer B's data. I would also add more than 2 pNICs to do your task.
Draw out what you want on paper. YOu have the following basic building blocks.... physical switches, physical NICS, virtual switches, virtual NICS and virtual firewalls (which are just VMs sitting between multiple vSwitches).
Since we are assuming you have only 2 pNIC, you can not safely or securely do what you desire to do as you actually have at least 6 security zones within your environment (maybe 5 if you do not use IP Storage).
So please provide some more information.
Best regards,
Edward L. Haletky
VMware Communities User Moderator, VMware vExpert 2009
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
Blue Gears and SearchVMware Pro Blogs -- Top Virtualization Security Links -- Virtualization Security Round Table Podcast