vcenter firewall rules

[z3d3m0n]

Hello,

hope everyone is well.

i have a management question  , i am familiar with firewall rules on the esxi hosts to allow access only from certain ips vSphere web access.

is there a way to do the same for the vCenter ? to allow access only from a certain ip and block the others ? is it done in vCenter  Appliance firewall rules ?

thx in advance

[Lalegre]

Hello z3d3m0n​,

To block the traffic from to vCenter Server you have to do it from Administration tab and then search for the vCenter Node and apply the firewall rule. If you have vSphere 6.7 or previous you have to do it with the vSphere Web Client.

From there you will have the option to create a Firewall Rule but this will block all the traffic from the specified IP or IP Range to the vCenter Server. There is not way to specify the source or destination and there is no way of specify the ports.

[z3d3m0n]

Thank you for your answer , but i am not sure i understand

so the access could be  regulated on the vsphere host where vcenter is deployed ? or in the administrator tab of the vcenter ?

thx

[Lalegre]

No, this is regulated from Administration tab on vCenter. On the Home menu on the left pane you will found the Administration tab.

And again you cannot block the traffic specifying ports, you just allow or deny the traffic to the VCSA.