🛠️ Step-by-Step Lab Guide: Web Server with VLAN Segmentation
This lab creates an isolated network environment where a Windows Server with IIS sits behind VLAN segmentation, accessible only from authorized VLANs. 📋 Lab Overview Internet (Simulated) ↓ [Router] ← Layer 3 routing + ACLs ↓ [Switch] ← VLAN 10, 20, 30 + VTP Server ↙ ↘ VLAN 10 VLAN 20 (Web Server) (Client PCs) Your rules mapped: Rule 1 – Allow 30 devices (office + internet) → Configure ACL permitting /27 subnet Rule 2 – Access server from VLAN 10 → Assign web server to VLAN 10 Rule 3 – Access local VM from VLAN 20 → Client PCs in VLAN 20 can reach VLAN 10 Phase 1: VMware ESXi Setup Step 1.1: Install ESXi Download VMware ESXi from Broadcom (free license available) Install on bare metal or in VMware Workstation for testing Set management IP: 192.168.1.50/24 Step 1.2: Create Virtual Switch for VLANs Reference: VLAN deployment requires port groups with specific VLAN IDs Log into ESXi web interface (https:// [your-ESXi-IP] /ui) Navigate to Networking → Virtual switches Click Add standard virtual switch Name: vSwitch-VLAN No uplink adapters (isolated internal network) Click Add Step 1.3: Create VLAN Port Groups Port Group Name VLAN ID Purpose VLAN 10 - Servers 10 Web Server VM VLAN 20 - Clients 20 Client PCs VLAN 30 - Management 30 Management access Steps for each: Networking → Port groups → Add port group Name: VLAN 10 - Servers VLAN ID: 10 Virtual switch: vSwitch-VLAN Click Add Note: VLAN ID must be between 2 and 4000 Phase 2: Create Virtual Machines Step 2.1: Web Server VM (VLAN 10) Virtual Machines → Create/Register VM Name: WEB-SERVER-01 Guest OS: Microsoft Windows Server 2019/2022 CPU: 2 vCPU, RAM: 4GB, HDD: 40GB Network Adapter 1: VLAN 10 - Servers Complete creation, then power on Step 2.2: Client VM (VLAN 20) Create/Register VM Name: CLIENT-01 Guest OS: Windows 10/11 or Ubuntu Linux CPU: 1 vCPU, RAM: 2GB, HDD: 32GB Network Adapter 1: VLAN 20 - Clients Power on after creation Step 2.3: Verify Isolation (Before Router Config) Both VMs cannot ping each other yet—they'