--- title: "Understanding VMware Networking with Practical Examples" description: "Learn the various ins-and-outs of VMware networking through practical examples and configurations with this ATA Learning tutorial!" canonical: "https://adamtheautomator.com/vmware-networking/" --- # Understanding VMware Networking with Practical Examples > Learn the various ins-and-outs of VMware networking through practical examples and configurations with this ATA Learning tutorial! Source: https://adamtheautomator.com/vmware-networking/ --- ATA Learning Tap to hide [ ATA Learning ](/) * [Home](/) * [Tutorials](/tutorials/) * [Instructors](/author/) * [Advertising](/advertising/) * [Recommended Resources](/resources/) * [About Adam](/about-adam/) Search for: * [](https://twitter.com/adbertram) * [](https://github.com/Adam-the-Automator) * [](https://www.linkedin.com/company/adam-the-automator-llc) * [](/feed/) ![Understanding VMware Networking with Practical Examples](https://adamtheautomator.com/wp-content/uploads/2023/08/vmware-networking.jpg) # Understanding VMware Networking with Practical Examples [![](https://secure.gravatar.com/avatar/04025eca38bf59973f7838d8d4e79b34a3e3ef587ec879ee63f80149ff9be11b?s=192&d=mm&r=g)Verah Ombui](https://adamtheautomator.com/author/verah-ombui/)29 August 202311 min. read Categories: [IT Ops](/category/it-ops/) Tags:[Networking](/tag/networking/)[VmWare](/tag/vmware/) Table of Contents * [Prerequisites](#prerequisites) * [Creating and Configuring a Virtual Switch for VMware Networking](#creating-and-configuring-a-virtual-switch-for-vmware-networking) * [Adding a Standard vSwitch in an ESXi Host](#adding-a-standard-vswitch-in-an-esxi-host) * [Adding an Uplink to Connect the vSwitch and Physical Network](#adding-an-uplink-to-connect-the-vswitch-and-physical-network) * [Implementing Network Segmentation](#implementing-network-segmentation) * [Adding a New Port Group in an ESXi Host](#adding-a-new-port-group-in-an-esxi-host) * [Assigning a Port Group to a VM](#assigning-a-port-group-to-a-vm) * [Adding a VMkernel NIC to Improve Network Efficiency and Stability](#adding-a-vmkernel-nic-to-improve-network-efficiency-and-stability) * [Creating and Configuring vSphere Distributed Switches](#creating-and-configuring-vsphere-distributed-switches) * [Adding a New Distributed Switch to the vCenter Server](#adding-a-new-distributed-switch-to-the-vcenter-server) * [Adding Hosts to the Distributed Switch](#adding-hosts-to-the-distributed-switch) * [Configuring Distributed Port Group Settings](#configuring-distributed-port-group-settings) * [Conclusion](#conclusion) Have you been curious about configuring and managing networking components within a VMware virtualization environment? Look no further. Fill in your curiosity with how VMware networking works! In this tutorial, you will learn how to configure the virtual networks within your VMware virtualization infrastructure and connect your VMs to the physical networks. Dig in and start managing your VM networks with VMware networking! ## Prerequisites This tutorial comprises hands-on demonstrations, so ensure you have the following in place to follow along: * A machine running a Windows OS – This tutorial uses Windows 10 pro v1H2, but other OSes will work. * [VMware ESXi host installed](https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.esxi.install.doc/GUID-B2F01BF5-078A-4C7E-B505-5DFFED0B8C38.html) and connected to your VMware vCenter Server – This tutorial uses [VMware ESXi 7.0.0 (Build 15843807)](https://kb.vmware.com/s/article/2143832). * [VMware vCenter Server installed](https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-vcenter-installation/GUID-8DC3866D-5087-40A2-8067-1361A2AF95BD.html) – This tutorial uses [VMware vCenter Server 8.0.0.10000 (Build 20519528).](https://kb.vmware.com/s/article/2143838) Related:[Dive Into Managing VMs With VMware vCenter Server](https://adamtheautomator.com/vmware-vcenter-server/) * VMware vCenter Server credentials were created during the [installation and deployment of the vCenter Server](http://vcloud-lab.com/entries/vcenter-server/how-to-install-deploy-vcenter-server-appliance--vcsa--8-0) on the ESXi host. ## Creating and Configuring a Virtual Switch for VMware Networking In your virtualized environment, you must ensure connectivity works between network entities. These entities include VMs, physical networks, and VMkernel services (such as management, vMotion, and Storage vMotion). How do you connect these network entities? You must create and configure a virtual switch (vSwitch), a software-based networking component, in an ESXi Host. There are two types of a vSwitch as follows: * **Standard vSwitch** – Lets you create virtual networks suitable for smaller environments and simpler networking requirements. * **Distributed vSwitch** – An advanced vSwitch available in the vSphere Enterprise Plus edition. This vSwitch type provides more advanced features like centralized management, better visibility, and enhanced network performance optimization. But in this tutorial, you will use a standard vSwitch for demonstration. ### Adding a Standard vSwitch in an ESXi Host Creating a standard vSwitch in an ESXi host involves configuring a virtual switch to manage networking connectivity for VMs. To create a new standard vSwitch in an ESXi host, follow these steps: 1\. Log in to the VMware vSphere Client to connect to the ESXi host. 2\. Next, navigate to **Networking** (left pane) → **Virtual switches** tab, and click **Add standard virtual switch**. A wizard opens where you will configure a new standard vSwitch (step three). ![Initiating adding a new standard vSwitch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-240.png) Initiating adding a new standard vSwitch 3\. Now, provide a **vSwitch Name** (i.e., **vSwitch1**), leave other options default, and click **Add** to add the new standard vSwitch. ![Naming a new vSwitch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-239.png) Naming a new vSwitch Below, you can see your new vSwitch is added to the list. ![Viewing the newly-added vSwitch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-238.png) Viewing the newly-added vSwitch ### **Adding an Uplink to Connect the v**Switch and Physical Network With a vSwitch added, you must ensure it connects to your physical network by adding an uplink. An uplink is a physical network adapter or network interface card (NIC) on the ESXi host that connects your vSwitch to your physical network. To add an uplink to connect your vSwitch and your physical network: 1\. On the **Networking** page (left pane), click your newly added vSwitch (**vSwitch1**) to access its details. ![Accessing a vSwitch’s details](https://adamtheautomator.com/wp-content/uploads/2023/08/image-245.png) Accessing a vSwitch’s details 2\. Next, click the **Actions** menu and choose **Add uplink** on your vSwitch’s details window to initiate adding an uplink. An uplink, which serves as a connection point, can be used for redundancy, load balancing, and increased network bandwidth. ![Initiating adding an uplink for the vSwitch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-244.png) Initiating adding an uplink for the vSwitch 3\. Now, select two of your NICs (**Uplink 1** and **Uplink 2**) for link redundancy purposes, and click **Save** to finalize adding the new uplink. A vSwitch can have one or more uplink ports (physical NICs) connecting to the physical network and one or more port groups for VMs to connect (covered later in this tutorial). ![Selecting the two uplinks for redundancy purposes ](https://adamtheautomator.com/wp-content/uploads/2023/08/image-243.png) Selecting the two uplinks for redundancy purposes Optionally, you can configure other advanced options, such as: * **Link discovery –** Allows you to monitor the network connectivity status of your physical network adapters connected to your standard vSwitch. * **Security** – Involves implementing measures, as follows, to protect your virtual network and VMs connected to it. | Feature | Function | | --- | --- | | **Promiscuous Mode** | Allows a virtual network adapter to see all network traffic in the vSwitch. | | **MAC Address Changes** and **Forged Transmits** | Control whether VMs can change their MAC addresses or forge transmits. | * **NIC teaming** – Allows you to combine multiple physical network adapters into a single logical interface. This option provides redundancy and increased network throughput by distributing network traffic across the teamed adapters. * **Traffic shaping** – Lets you control and manage the network bandwidth for VMs connected to your vSwitch. ![Configuring the advanced settings for the new Uplink ](https://adamtheautomator.com/wp-content/uploads/2023/08/image-242.png) Configuring the advanced settings for the new Uplink Once saved, you can always edit your vSwitch settings, as shown below. ![Editing an existing vSwitch to change the settings](https://adamtheautomator.com/wp-content/uploads/2023/08/image-241.png) Editing an existing vSwitch to change the settings ## Implementing Network Segmentation VMware vSphere allows you to segment your virtual networks to improve security and isolation. In a nutshell, network segmentation caters to optimized network performance and improved security posture. Providing unique security services per network segment, you gain more control over network traffic with network segmentation. How? Creating segments reduces the attack surface, limiting how far an attack can spread and impedes an attacker’s lateral movement. Read on to see implementing network segmentation in action. ### Adding a New Port Group in an ESXi Host Port groups are logical groups of ports on a vSwitch, and they determine how VMs connect to the network. To create a new port group to link with your vSwitch, follow the steps below: Navigate to **Networking** (left pane) → **Port groups** tab, and click **Add port group**. A wizard opens, where you will configure your new port group (step two). > 💡 _By default, the ESXi host creates two port groups. One is the **VM Network** for guest VMs, and the other is the **Management Network** for the ESXi host’s VMkernel network adapter, where you can manage the ESXi host._ ![Initiating creating a new port group](https://adamtheautomator.com/wp-content/uploads/2023/08/image-247.png) Initiating creating a new port group Now, configure your new port group in the **Add port group** window as follows: * **Name** – Provide a descriptive name for your port group (i.e., **HR Network**). * **VLAND ID** (optional) – Specify the VLAN ID to associate with this port group (if your network uses VLANs). * **Virtual switch** – Select your vSwitch (**vSwitch1**) on which this port group will be created. * **Security** (optional) – Configure security policies to determine how the virtual NICs connected to this port group behave. Once configured, click the **Add** button to finish creating the new port group. ![Configuring and creating the new port group](https://adamtheautomator.com/wp-content/uploads/2023/08/image-246.png) Configuring and creating the new port group ### Assigning a Port Group to a VM Adding a new port group in your ESXi host does not automatically connect your VM to a network. You must configure your VM’s network settings to connect it to a desired network segment. To assign a port group to your VM: Expand **Virtual Machines** (left pane), right-click on your VM’s name (i.e., **Windows 7**), and choose **Edit settings**. A window opens where you can edit your VM’s settings (step two). ![Editing the VM’s settings](https://adamtheautomator.com/wp-content/uploads/2023/08/image-249.png) Editing the VM’s settings Now, configure the VM’s settings with the following: * Click the **Virtual Hardware** tab (top-left) in the VM’s **Edit settings** window. * Locate and navigate to the network adapter (i.e., **Network Adapter** 1) you plan to connect to your port group. * Select your port group (i.e., **HR Network**) to assign your VM from the drop-down field. This port group is what corresponds to your desired network segment. Once configured, click **Save** for the changes you made to the VM’s network adapter settings to take effect. Your VM is now connected to the specified port group and is part of the corresponding network segment. Repeat these steps for each VM you want to assign to different port groups or network segments. > 💡 _Any changes to network settings may affect the VM’s connectivity. Thus, ensure you have configured the port group settings and firewall rules appropriately. Doing so allows the desired communication between VMs within and across segments._ ![Choosing the port group to assign to the VM](https://adamtheautomator.com/wp-content/uploads/2023/08/image-248.png) Choosing the port group to assign to the VM ### **Adding a VMkernel NIC to I**mprove Network Efficiency and Stability A VMkernel NIC in an ESXi host is used for management purposes, such as handling management-related traffic, vMotion, iSCSI, or other services. VMkernel NICs are distinct from the regular virtual network adapters that connect VMs to the network. They serve critical roles in managing and optimizing the virtualized environment. To create a VMkernel NIC, follow these steps: Navigate to **Networking** (left pane) → **VMkernel NICs** tab, and click **Add VMkernel NIC** to initiate adding a VMkernel NIC. ![Initiating creating a new VMkernel NIC](https://adamtheautomator.com/wp-content/uploads/2023/08/image-251.png) Initiating creating a new VMkernel NIC Now, configure a new VMkernel NIC as follows: * **Port group** – Select an existing or create a new port group. But in this example, choose the **New port group** option. * **New port group** – Provide a port group name (i.e., **vmk1**) on which you wish to create the VMkernel NIC. This port group will be dedicated to handling management traffic. * **Virtual switch** – Select your vSwitch (**vSwitch1**) on which this VMkernel NIC will be created. * **VLAND ID** (optional) – Configure the VMkernel NIC’s IP settings, including assigning an IP address, subnet mask, and default gateway. You can also configure DNS settings if necessary. * **Services** – Select the services to enable on this VMkernel NIC based on your requirements. Once configured, click the **Create** button to finalize creating the new VMkernel NIC. ![Associating a new VMkernel adapter with the port group and vSwitch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-250.png) Associating a new VMkernel adapter with the port group and vSwitch ## Creating and Configuring vSphere Distributed Switches Network management in massive virtual environments can be challenging as you need consistent network policies and settings for all ESXi hosts. The good news is that you can overcome this challenge by adding vSphere distributed switches (VDSs) in your vCenter Server. What a VDS provides is as follows: * A centralized management and configuration of virtual networking across multiple hosts in a VMware virtualized environment. * Allows consistent network policies and settings to be applied to all ESXi hosts connected to the distributed switch, simplifying network management in larger environments. * Support for consistently advancing VMware vSphere networking features. > 💡 _Note that you can only configure a VDS within the vCenter Server. That VDS will be configured with the same settings on all ESXi hosts within your Datacenter. With this feature, you do not need to manually set up standard vSwitches on each ESXi host._ ### Adding **a New Distributed Switch to the vCenter Server** Before applying network policies and settings to all ESXi hosts, you must add a new distributed switch to your vCenter Server. 1\. Log into the vCenter Server via the vSphere web client using your credentials. 2\. Next, navigate **Inventory**, right-click your Datacenter name (i.e., **DataCenter-001**), hover **Distributed Switch**, and choose **New Distributed Switch**. A wizard opens where you will configure a new distributed switch (step three). ![Initiating creating a new DVS](https://adamtheautomator.com/wp-content/uploads/2023/08/image-256.png) Initiating creating a new DVS 3\. In the **New Distributed Switch** wizard, provide a **Name** (i.e., **DSwitch1**) and **Location** (i.e., **DataCenter-001**) for your distributed switch, and click **Next**. ![Naming a new distributed switch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-255.png) Naming a new distributed switch 4\. Now, choose the distributed switch version compatible with the ESXi hosts within your datacenter and click **Next**. ![Selecting a distributed switch version compatible with the ESXi hosts](https://adamtheautomator.com/wp-content/uploads/2023/08/image-254.png) Selecting a distributed switch version compatible with the ESXi hosts 5\. Configure the switch’s settings as follows: * **Number of uplinks** – Provide the number of uplinks, like physical network adapters. * **Network I/O Control** – Enable this option to set Quality of Service (QoS) levels on network traffic. * **Default port group** – Tick the box to create a default port group. * **Port group name** – Set a name for your default port group (i.e., **DPortGroup1**)**.** Once configured, click **Next** to proceed. ![Configuring a default port group](https://adamtheautomator.com/wp-content/uploads/2023/08/image-253.png) Configuring a default port group 6\. Ultimately, review the configurations and click **Finish** to finalize creating a new distributed switch. ![Finalizing creating a new distributed switch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-252.png) Finalizing creating a new distributed switch ### **Adding Hosts** to **the Distributed Switch** With a distributed switch at your disposal, the course of action is to add hosts to your distributed switch. Doing so enables VMs on your hosts to communicate with each other and the physical network. To add hosts to your distributed switch: 1\. On your Datacenter’s page, navigate to the **Distributed Switches** tab and click your distributed switch’s name (**DSwitch1**) to access the switch’s management page. ![Accessing the newly created distributed switch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-265.png) Accessing the newly created distributed switch 2\. Next, click the **ACTIONS** drop-down menu and choose **Add and Manage Hosts** to initiate adding/managing a host. ![Initiating adding a new host](https://adamtheautomator.com/wp-content/uploads/2023/08/image-264.png) Initiating adding a new host 3\. In the **Select task** page, select the **Add hosts** option since you are adding a new host, and click **Next**. ![Choosing to add a new ESXi host](https://adamtheautomator.com/wp-content/uploads/2023/08/image-263.png) Choosing to add a new ESXi host 4\. Now, select the ESXi hosts you want to add to your distributed switch, and click **Next**. ![Selecting the ESXi hosts to add to the distributed switch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-262.png) Selecting the ESXi hosts to add to the distributed switch 5\. Optionally, specify the number of uplinks (i.e., **vmnics**) to assign to your distributed switch on each host (or choose the default settings), and click **Next**. ![Managing the physical adapters](https://adamtheautomator.com/wp-content/uploads/2023/08/image-261.png) Managing the physical adapters 6\. Configure VMkernel network adapters (**vmk**), which is optional, by assigning them a port group (or leaving the default settings) and clicking **Next**. ![Managing the VMkernel adapters](https://adamtheautomator.com/wp-content/uploads/2023/08/image-260.png) Managing the VMkernel adapters 7\. Next, choose **Network adapter 1**, click **ASSIGN** adjacent to your desired distributed port group (i.e., **DPortGroup1**), and click **Next**. This action connects your VM to the distributed switch. ![Configure the port group for migration of VMs](https://adamtheautomator.com/wp-content/uploads/2023/08/image-258.png) Configure the port group for migration of VMs 8\. Lastly, review your selected settings and click **Finish** to finalize adding hosts to your distributed switch. Now, you can manage network configurations, such as VLANs, security policies, and load balancing, from a centralized location. Moreover, any changes to your distributed switch automatically apply to all hosts connected to that switch. ![Finishing up adding hosts to the distributed switch](https://adamtheautomator.com/wp-content/uploads/2023/08/image-257.png) Finishing up adding hosts to the distributed switch ### Configuring **Distributed Port Group Settings** A distributed port group is a logical entity that defines networking settings for a group of VM network adapters. These settings control how your VMs communicate with each other and external networks. Configuring distributed port group settings lets you modify networking policies for multiple port groups on a vSphere distributed switch. 1\. On your distributed switch’s page (**DSwitch1**), click on **ACTIONS →** **Distributed Port Group → Manage Distributed Port Groups**. A wizard opens where you can manage distributed port groups (step two). ![Initiating managing distributed port groups](https://adamtheautomator.com/wp-content/uploads/2023/08/image-276.png) Initiating managing distributed port groups 2\. Next, tick the boxes next to the policy categories to modify, and click **Next**. Port group policies define the rules and configurations that govern network traffic behavior for VMs within a specific port group. ![Choosing the port group policies to manage](https://adamtheautomator.com/wp-content/uploads/2023/08/image-275.png) Choosing the port group policies to manage 3\. Next, select your distributed port group (i.e., **DPortGroup1**) to edit, and click **Next**. ![Choosing the distributed port groups ](https://adamtheautomator.com/wp-content/uploads/2023/08/image-274.png) Choosing the distributed port groups > 💡 _Note that the following steps are optional, and you can keep clicking **Next** to opt with the default settings._ 4\. Now, use the **Network Resource Pool** drop-down field to add or remove resource allocations, and click **Next**. This tutorial uses the default network resource pool, as shown below. A network resource pool allows you to prioritize network traffic for specific applications or VMs. ![Specifying the resource allocation](https://adamtheautomator.com/wp-content/uploads/2023/08/image-273.png) Specifying the resource allocation 5\. On the **VLAN** page, use the drop-down menu to edit the VLAN policy (or keep **None** selected), and click **Next**. These options allow assigning a VLAN ID to a port group, enabling the segregation of network traffic based on VLANs. ![Configuring VLAN](https://adamtheautomator.com/wp-content/uploads/2023/08/image-272.png) Configuring VLAN 6\. Configure the security by selecting options in the drop-down fields to edit the security exceptions for enhanced security and click **Next**. ![Editing the security settings](https://adamtheautomator.com/wp-content/uploads/2023/08/image-271.png) Editing the security settings 7\. Configure the traffic shaping using the drop-down fields to enable or disable **Ingress** or **Egress traffic shaping** and click **Next**. These settings help to manage the amount of inbound and outbound network traffic for VMs in a port group. ![Configuring the traffic shaping settings](https://adamtheautomator.com/wp-content/uploads/2023/08/image-270.png) Configuring the traffic shaping settings 8\. Next, edit the teaming and failover settings with the drop-down fields and click **Next**. These settings allow you to configure load-balancing algorithms and teaming policies for the network adapters of VMs. ![Configuring the teaming and failover settings](https://adamtheautomator.com/wp-content/uploads/2023/08/image-269.png) Configuring the teaming and failover settings 9\. On the **Monitoring** page, enable or disable **NetFlow** with the drop-down fields, and click **Next**. NetFlow provides visibility into network traffic patterns for monitoring and troubleshooting purposes. ![Configuring the NetFlow settings](https://adamtheautomator.com/wp-content/uploads/2023/08/image-268.png) Configuring the NetFlow settings 10\. Select **Yes** or **No** from the drop-down field, and click **Next**. Note that selecting **Yes** shuts down all ports in the port group, which disrupts the normal network operations of the hosts or virtual machines using the ports. ![Choosing whether to block all ports](https://adamtheautomator.com/wp-content/uploads/2023/08/image-267.png) Choosing whether to block all ports 11\. Finally, review your selected settings and click **Finish** to save changes to your distributed port group settings. ![Reviewing and finishing up the distributed port group settings](https://adamtheautomator.com/wp-content/uploads/2023/08/image-266.png) Reviewing and finishing up the distributed port group settings ## Conclusion Throughout this tutorial, you have gone through practical examples to understand better how VMware networking works. You can now confidently create and connect virtual switches to your VMs, configure VLANs, and distribute switches for your VMware virtualization environment. With your fully functional virtual networking, why not explore the [VMware vRealize Network Insight](https://www.vmware.com/products/aria-operations-for-networks.html) and [vRealize Operations Manager](https://docs.vmware.com/en/vRealize-Operations/index.html) tools? Look into how you can effectively monitor and troubleshoot your network performance! Share this article [Share on X](https://twitter.com/intent/tweet?url=https%3A%2F%2Fadamtheautomator.com%2Fvmware-networking%2F&text=Understanding%20VMware%20Networking%20with%20Practical%20Examples)[Share on Facebook](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fadamtheautomator.com%2Fvmware-networking%2F)[Share on LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fadamtheautomator.com%2Fvmware-networking%2F) ## Related Posts ![](https://adamtheautomator.com/wp-content/uploads/2021/06/How-to-Use-VMware-Photon-to-Create-a-Handy-Software-Router.jpg) ### [How to Use VMware Photon to Create a Handy Software Router](/vmware-photon/) Learn how to set up VMware Photon OS to create a software router handy for your labs! This tutorial will show you how to spin up a Photon VM in VMware Workstation Pro, set static IPs, and turn on routing. ![](https://adamtheautomator.com/wp-content/uploads/2026/06/26995-troubleshoot-dns-issues-powershell-codex.webp) ### [Troubleshoot DNS Issues with PowerShell](/troubleshoot-dns-issues-powershell/) Troubleshoot DNS issues with PowerShell by testing name resolution, DNS client settings, cache entries, and network connectivity in a repeatable workflow. ![](https://adamtheautomator.com/wp-content/uploads/2024/03/vmware-workstation-player.jpg) ### [How to Install VMware Workstation Player on Windows](/vmware-workstation-player/) Discover VMware Workstation Player on Windows, and get your virtual world up and running. Unlock endless possibilities for your digital workspace! ## Categories * [IT Ops](/category/it-ops/) * [Cloud](/category/cloud/) * [DevOps](/category/devops/) * [Home Ops](/category/home-ops/) * [Information Security](/category/infosec/) * [Software Development](/category/software-development/) ## Site * [Home](/) * [Tutorials](/tutorials/) * [Instructors](/author/) * [Advertising](/advertising/) * [Recommended Resources](/resources/) * [About Adam](/about-adam/) Copyright 2026© ATA Learning | [Privacy Policy](/privacy/)