JHUISI VNET

Architectures

• Setup 1 - Three VMs on a single switch with port-mirroring
  • Thing1 - Ubuntu Server 18.03.4 VM guest
  • Thing2 - Ubuntu Server 18.03.4 VM guest
  • Dev - Kali 2019.4 VM guest

VMware virtual networks

• Host-only networking creates a network that is completely contained within the host computer. Host-only networking provides a network connection between the virtual machine and the host system by using a virtual network adapter that is visible on the host operating system
• VMware Workstation-, Fusion-, or vSphere-based host running 3 VM guests and Host-only virtual switch with virtual DHCP server
  • VMnet1 is reserved for host-only (isolated) networks
  • Virtual network adapters are created in the VM guests
    • Network adapters in Linux-guests look like

      
      $ lspci | egrep -i --color 'network|ethernet'
      02:01.0 Ethernet controller: Intel Corporation 82545EM Gigabit Ethernet Controller (Copper) (rev 01)
      

    • Software running inside a virtual machine can monitor any and all traffic moving across a vSwitch when its virtual adapter is in promiscuous mode (see here)
      • placing the guest adapter in promiscuous mode causes it to detect all frames passed on the virtual switch that are allowed under the VLAN policy for the associated portgroup
      • this can be useful for intrusion detection monitoring or if a sniffer needs to be run to analyze all traffic on the wire, as
  • Virtual DHCP server provides IP addresses to virtual machines in configurations that are not bridged to an external network
    • IP Address Use on a Host-Only Network

Range	Address Use	Example
net.1	Host machine	192.168.0.1
net.2–net.127	Static addresses	192.168.0.2–192.168.0.127
net.128–net.253	DHCP-assigned	192.168.0.128–192.168.0.253
net.254	DHCP server	192.168.0.254
net.255	Broadcasting	192.168.0.255