I need to setup a VM on VMWare ESXi 6.0 that would have internet access but without any LAN access.
This is for an external user to remotely login to machine and work using the internet who shouldn't have any access to the LAN.
The network is setup in a simple way. The router is a Huawei HG8244H and is setup as 192.168.1.1 / 255.255.255.0, without any Microsoft ISA server, I thought about:
- changing the router network mask to 255.255.0.0
- setting the "external user" VM in the 192.168.2.x network.
- Adding a Linux VM with two IP addresses (192.168.1.x and 192.168.100.x) with iptables to forward any traffic from the first VM directly to the router and blocking all other access to the .1 network.
This seems like overkill, so I'm looking for a simpler solution. Thanks in advance!